last executing test programs: 3.117880357s ago: executing program 3 (id=117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r1, 0x0, &(0x7f0000000880)=""/31}, 0x20) 3.078330278s ago: executing program 3 (id=119): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)) 2.219082652s ago: executing program 3 (id=155): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @loopback, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.156928943s ago: executing program 2 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x25, 0x334, &(0x7f0000000c00)="$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") r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) 1.443809645s ago: executing program 2 (id=192): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) 1.424216986s ago: executing program 4 (id=193): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x20) 1.334484897s ago: executing program 4 (id=195): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x1, @empty, 0xf684}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x18) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002140)='\f', 0x1}], 0x1) 1.274556828s ago: executing program 4 (id=197): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001e00)={{r0}, "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"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$tipc(r0, &(0x7f0000001dc0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10) 1.197282709s ago: executing program 4 (id=199): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$eJzs3T9rZFUUAPDzkjdvZlWYKaxE8IEWVutmW5sJsgExlUsKtdDg7oJkgrALAf/g7Fa2NhYWfgJB8IPY+A0EW8HOVRauvH/MSzKJO8GJaH6/Jod7z3n3vJdL8lLkzgcvHh7cKePeo89/jtEoi41pTONxFpPYiM7DOGb6VQAA/2WPU4rfUuPMpOdOD2URMVpvawDAmpz9+7/sxfki/OHSWgMA1uT2O+++tb27e+vtshzFzuGXR3vVX/bV12Z++158FLO4GzdiHE8i6heFQdRvC1W4k1Ka52VlEq8czo/2qsrD939sr7/9a0RdvxXjmNRDKaW8C9LOm7u3tspGr35e9fFMu/60qr8Z43i+Xb99W+nqby6pj70iXn251//1GMdPH8bHMYs79dqL+i+2yvKN9PXvn71XdVXVZ/OjvWGdt5A2L/UbAwAAAAAAAAAAAAAAAAAAAADA/9r19uycYZSTP5szANvzdzafVPODKDuT4+fzNPVZd6H++UAppXmKb7vzdW6UZZnaxEV9Hi/k/YMFAQAAAAAAAAAAAAAAAAAA4Op68MmnB/uz2d37Fw6uxWKkOw0gj4g/bkdc9MrT3shLUQf5Wa0O2zX3Z7ONNjyek/dHYrPLySLObaO6iYs/loNVkq+d6rkNvvt+1dVHf58zWL7WPxl0u+tgP1v+DIfRjYzaTfJNEb2NVMRTrlWcNZVile1XLJ0ar3zvxbN1MD8nJ7LzGnv9l+bJtSPZybso6qfajLw2aHLbqUGb0ys/sTeeaj/HqCk//bMic1oHAAAAAAAAAAAAAAAAAACs1eK/f5dMPjq3dCMN19YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyqxef/rxDM2+KTU/GwGe8lF3H/wb95fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwNfwUAAP//ThJUUw==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.184125389s ago: executing program 0 (id=200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 1.063879472s ago: executing program 4 (id=203): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e0, &(0x7f0000001200)="$eJzs3c9vVNUeAPDvmf6gpbzXQl7ee7iQJsZAorS0gCHGBWyNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJo45k7nlk57p6Wl7a3czycZeu49cznndvqdc+6Zc+4EUFmD2T+1iP0RMZ0i+tP8Yl5nNDMHF553/48Pz2SPFPX6q7+lSM19+fNT82df8+CeiPjh+xT7OlaWOzN39cL41NTkleb28OzF6eGZuauHz18cPzd5bvLS6HOjJ44fO35i5MiGzuva8h29EXHjnff6Px574+sv/0wj3/w8luJkvNh84tLz2CyDMdj4naSVWX0nNruwknQ0/06WvsSps8QKsS7569cVEf+L/uiIBy9ef3z0cqmVA7ZUPUXUgYpK4h8qKu8H5Nf2y6+Da6X0SoDtcO/UwgDAyvjvXBgbjJ7G2MDu+ymWDuukiNjYyFyrPRFx5/bYjbO3x27EFo3DAcXmr0fE/4viPzXifyB6YqAR/7WW+M/6BaebP7P9r2yw/OVDxeIfts9C/PesGv/RJv7fXBL/b22w/MEHybd7W+K/d6OnBAAAAAAAAJV161REPFv0+X9tcf5PFMz/6YuIk5tQ/uCy7ZWf/9fubkIxQIF7pyJeKJz/W8tn/w50NFP/aswH6Epnz09NHomIf0fEoejalW2PrFLG4U/2fdEub7A5/y9/ZOXfac4FbNbjbueu1mMmxmfHH/W8gYh71yOeKJz/mxbb/1TQ/mfvB9MPWca+p2+ebpe3dvwDW6X+VcTBwvb/wV0r0ur35xhu9AeG817BSk9+8Om37crfaPy7xQQ8uqz93716/A+kpffrmVl/GUfnOuvt8jba/+9OrzVuOdPd3Pf++OzslZGI7vRSR7a3Zf/o+usMj6M8HvJ4yeL/0FOrj/8V9f97I2J+2f+dfm9dU5z77199v7Srj/4/lCeL/4l1tf/rT4zeHPiuXfkP1/4fa7T1hxY/jQjjfxARn+dh2t26vyAcO4uytru+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA4qEXEnki1ocV0rTY0FNEXEf+J3bWpyzOzz5y9/O6liSyv8f3/tfybfvsXtlP+/f8DS7ZHl20fjYi9EfFZR29je+jM5amJsk8eAAAAAAAAAAAAAAAAAAAAdoi+Nuv/M792lF07YMt1ll0BoDQF8f9jGfUAtp/2H6pL/EN1iX+oLvEP1SX+obrEP1SX+IfqEv8AAAAAAPBY2Xvg1k8pIuaf7208Mt3NvK5SawZstVrZFQBK4xY/UF2m/kB1ucYH0hr5PW0PWuvI1UyfeYSDAQAAAAAAAAAAAKByDu63/h+qyvp/qC7r/6G68vX/B0quB7D9XOMDscZK/sL1/2seBQAAAAAAAAAAAABsppm5qxfGp6Ymr0i8vjOqsZ2Jer1+Lfsr2Cn1+Ycn8qnwO6U+yxL5Wr+HO6q89yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDV3wEAAP//o1kjUQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1c1002, 0x80) write(r1, &(0x7f0000000080)="d71e0b612e9018b4971db6f1d6140edb5a347b8550daaa420288960f822e180a51641700296d89f578e690e5805cf8ca94e5e4a939790ab4436adf7fbc869d9732e504db6eeb995bca87aaf63459d5ee1086caad2d913949f83f2723d1b642067a99f593f0d2f7e3afd3cadb000bde61e09177312e8083", 0x77) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 568.55789ms ago: executing program 2 (id=206): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x100, 0x4) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 517.609011ms ago: executing program 0 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) time(0x0) 517.174991ms ago: executing program 2 (id=208): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) 449.364231ms ago: executing program 0 (id=209): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f00000000c0)) 368.685533ms ago: executing program 1 (id=211): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000002c0)="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", 0xffffffffffffff72, 0x2400c110, 0x0, 0x36) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 327.684514ms ago: executing program 1 (id=212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffecd) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000b40), 0x4) 299.725704ms ago: executing program 1 (id=213): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r2, 0x7) 203.780636ms ago: executing program 1 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.322879ms ago: executing program 1 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 1 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) kernel console output (not intermixed with test programs): [ 13.838749][ T28] audit: type=1400 audit(1743573509.676:61): avc: denied { transition } for pid=227 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.844867][ T28] audit: type=1400 audit(1743573509.676:62): avc: denied { noatsecure } for pid=227 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.850396][ T28] audit: type=1400 audit(1743573509.676:63): avc: denied { write } for pid=227 comm="sh" path="pipe:[14769]" dev="pipefs" ino=14769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.856841][ T28] audit: type=1400 audit(1743573509.676:64): avc: denied { rlimitinh } for pid=227 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.871047][ T28] audit: type=1400 audit(1743573509.676:65): avc: denied { siginh } for pid=227 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 21.234349][ T28] audit: type=1400 audit(1743573517.066:66): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.235632][ T281] cgroup: Unknown subsys name 'net' [ 21.257008][ T28] audit: type=1400 audit(1743573517.066:67): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.284322][ T28] audit: type=1400 audit(1743573517.096:68): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.284582][ T281] cgroup: Unknown subsys name 'devices' [ 21.430728][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.436388][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.542260][ T28] audit: type=1400 audit(1743573517.376:69): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.565609][ T28] audit: type=1400 audit(1743573517.376:70): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.590532][ T28] audit: type=1400 audit(1743573517.376:71): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.599445][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.623486][ T28] audit: type=1400 audit(1743573517.456:72): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.648755][ T28] audit: type=1400 audit(1743573517.456:73): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.649866][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.674574][ T28] audit: type=1400 audit(1743573517.486:74): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.708114][ T28] audit: type=1400 audit(1743573517.486:75): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.233480][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.240505][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.247834][ T291] device bridge_slave_0 entered promiscuous mode [ 22.269146][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.276027][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.283417][ T291] device bridge_slave_1 entered promiscuous mode [ 22.405375][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.412422][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.419835][ T295] device bridge_slave_0 entered promiscuous mode [ 22.434002][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.440927][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.448156][ T297] device bridge_slave_0 entered promiscuous mode [ 22.454793][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.461762][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.469103][ T295] device bridge_slave_1 entered promiscuous mode [ 22.485051][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.491973][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.499437][ T297] device bridge_slave_1 entered promiscuous mode [ 22.515142][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.522134][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.529709][ T298] device bridge_slave_0 entered promiscuous mode [ 22.537930][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.544869][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.552101][ T298] device bridge_slave_1 entered promiscuous mode [ 22.640535][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.647402][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.654742][ T293] device bridge_slave_0 entered promiscuous mode [ 22.662878][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.669751][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.677039][ T293] device bridge_slave_1 entered promiscuous mode [ 22.813212][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.820101][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.827184][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.834105][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.852587][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.859470][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.866568][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.873587][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.891284][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.898162][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.905323][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.912199][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.937643][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.944538][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.951640][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.958426][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.978316][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.985211][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.992347][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.999118][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.044753][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.052274][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.059530][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.066585][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.074136][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.081404][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.088508][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.095669][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.103197][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.110310][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.118312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.125935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.152681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.161039][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.167875][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.175138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.183658][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.190527][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.201214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.209006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.248709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.256412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.264089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.272280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.280290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.288847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.296864][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.303742][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.311129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.319163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.326924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.335340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.343354][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.350223][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.357544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.366029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.374058][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.380919][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.388097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.396392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.404545][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.411476][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.418658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.425951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.433664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.442119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.450150][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.456976][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.464359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.472598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.480671][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.487501][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.494761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.502090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.509468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.517575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.525660][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.532535][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.540116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.548318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.556396][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.563430][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.570789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.578845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.586621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.608926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.617047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.625169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.633455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.641610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.649854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.657636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.665787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.686501][ T298] device veth0_vlan entered promiscuous mode [ 23.692836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.703024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.711147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.718543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.735188][ T295] device veth0_vlan entered promiscuous mode [ 23.748946][ T297] device veth0_vlan entered promiscuous mode [ 23.755388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.763554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.770905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.778236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.786368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.795004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.803176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.811194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.819100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.826918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.835371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.843691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.851053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.872027][ T298] device veth1_macvtap entered promiscuous mode [ 23.879545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.887882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.896359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.904675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.912747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.920935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.928210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.936152][ T291] device veth0_vlan entered promiscuous mode [ 23.948287][ T297] device veth1_macvtap entered promiscuous mode [ 23.959974][ T293] device veth0_vlan entered promiscuous mode [ 23.970199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.979307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.987219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.994628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.002161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.010756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.018992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.027133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.035397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.053006][ T295] device veth1_macvtap entered promiscuous mode [ 24.062615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.071143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.079481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.087638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.096399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.112761][ T293] device veth1_macvtap entered promiscuous mode [ 24.122390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.132926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.141465][ T298] request_module fs-gadgetfs succeeded, but still no fs? [ 24.141779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.172172][ T291] device veth1_macvtap entered promiscuous mode [ 24.184410][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.192973][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.193463][ T318] loop2: detected capacity change from 0 to 256 [ 24.201716][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.216042][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.225008][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.233643][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.242100][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.256157][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.289947][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.302587][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.360502][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.374373][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.474442][ T345] Zero length message leads to an empty skb [ 24.511526][ T351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 24.531053][ T351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 24.740074][ T384] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.749494][ T384] FAT-fs (loop3): unable to read boot sector [ 25.031243][ T418] syz.2.46 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 25.185023][ T436] binder: 435:436 ioctl c0306201 0 returned -14 [ 25.279857][ T449] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.505574][ T482] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.521240][ T482] FAT-fs (loop5): unable to read boot sector [ 25.536267][ T493] loop4: detected capacity change from 0 to 256 [ 25.543805][ T493] ======================================================= [ 25.543805][ T493] WARNING: The mand mount option has been deprecated and [ 25.543805][ T493] and is ignored by this kernel. Remove the mand [ 25.543805][ T493] option from the mount to silence this warning. [ 25.543805][ T493] ======================================================= [ 25.600574][ T493] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 25.715890][ T508] incfs: Options parsing error. -22 [ 25.728512][ T508] incfs: mount failed -22 [ 25.895214][ T526] loop3: detected capacity change from 0 to 512 [ 25.931643][ T526] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.985100][ T526] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 26.030269][ T526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ce018, mo2=0002] [ 26.038457][ T526] System zones: 1-12 [ 26.049833][ T526] EXT4-fs (loop3): 1 truncate cleaned up [ 26.059905][ T526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.092698][ T522] loop0: detected capacity change from 0 to 40427 [ 26.101430][ T522] F2FS-fs (loop0): fault_injection options not supported [ 26.111263][ T522] F2FS-fs (loop0): invalid crc value [ 26.117877][ T522] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.174490][ T522] F2FS-fs (loop0): Start checkpoint disabled! [ 26.193005][ T522] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 26.205340][ T293] EXT4-fs (loop3): unmounting filesystem. [ 26.219954][ T545] loop2: detected capacity change from 0 to 256 [ 26.239116][ T28] kauditd_printk_skb: 210 callbacks suppressed [ 26.239131][ T28] audit: type=1400 audit(1743573522.076:286): avc: denied { write open } for pid=521 comm="syz.0.94" path="/10/file0/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.271770][ T545] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 26.307090][ T522] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 26.325887][ T28] audit: type=1400 audit(1743573522.126:287): avc: denied { ioctl } for pid=521 comm="syz.0.94" path="/10/file0/file0" dev="loop0" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.366330][ T28] audit: type=1400 audit(1743573522.126:288): avc: denied { create } for pid=550 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.414872][ T28] audit: type=1400 audit(1743573522.126:289): avc: denied { map } for pid=550 comm="syz.4.107" path="socket:[16729]" dev="sockfs" ino=16729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.438128][ T28] audit: type=1400 audit(1743573522.136:290): avc: denied { read accept } for pid=550 comm="syz.4.107" path="socket:[16729]" dev="sockfs" ino=16729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.468901][ T43] kworker/u4:2: attempt to access beyond end of device [ 26.468901][ T43] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 26.508693][ T28] audit: type=1400 audit(1743573522.186:291): avc: denied { write open } for pid=544 comm="syz.2.105" path="/32/file1/bus" dev="loop2" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.509298][ T43] kworker/u4:2: attempt to access beyond end of device [ 26.509298][ T43] loop0: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 26.540440][ T28] audit: type=1400 audit(1743573522.186:292): avc: denied { setattr } for pid=544 comm="syz.2.105" name="bus" dev="loop2" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.592915][ T28] audit: type=1400 audit(1743573522.346:293): avc: denied { watch } for pid=566 comm="syz.2.115" path="/34" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.643250][ T28] audit: type=1400 audit(1743573522.426:294): avc: denied { lock } for pid=576 comm="syz.3.119" path="socket:[16288]" dev="sockfs" ino=16288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 26.720051][ T28] audit: type=1400 audit(1743573522.556:295): avc: denied { create } for pid=585 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.770667][ T586] xt_hashlimit: size too large, truncated to 1048576 [ 27.009774][ T609] Illegal XDP return value 4294967274 on prog (id 98) dev N/A, expect packet loss! [ 27.094075][ T621] loop0: detected capacity change from 0 to 128 [ 27.298219][ T641] input: syz0 as /devices/virtual/input/input4 [ 27.337955][ T645] mmap: syz.4.149 (645) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.376895][ T647] loop2: detected capacity change from 0 to 256 [ 27.534191][ T667] loop2: detected capacity change from 0 to 256 [ 27.610196][ T667] FAT-fs (loop2): Directory bread(block 64) failed [ 27.634545][ T667] FAT-fs (loop2): Directory bread(block 65) failed [ 27.661397][ T667] FAT-fs (loop2): Directory bread(block 66) failed [ 27.667831][ T667] FAT-fs (loop2): Directory bread(block 67) failed [ 27.694633][ T667] FAT-fs (loop2): Directory bread(block 68) failed [ 27.704706][ T667] FAT-fs (loop2): Directory bread(block 69) failed [ 27.736755][ T667] FAT-fs (loop2): Directory bread(block 70) failed [ 27.753482][ T667] FAT-fs (loop2): Directory bread(block 71) failed [ 27.773523][ T667] FAT-fs (loop2): Directory bread(block 72) failed [ 27.789547][ T667] FAT-fs (loop2): Directory bread(block 73) failed [ 27.831673][ T667] process 'syz.2.161' launched '/dev/fd/6' with NULL argv: empty string added [ 27.849112][ T667] syz.2.161: attempt to access beyond end of device [ 27.849112][ T667] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 27.878536][ T667] syz.2.161: attempt to access beyond end of device [ 27.878536][ T667] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 27.994474][ T712] loop2: detected capacity change from 0 to 256 [ 28.016848][ T712] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.047913][ T712] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.064163][ T712] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.085355][ T712] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.098493][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.111621][ T712] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.120363][ T712] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.138117][ T712] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.153376][ T725] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.167709][ T725] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.178590][ T725] FAT-fs (loop2): Directory bread(block 1285) failed [ 28.208150][ T733] loop0: detected capacity change from 0 to 128 [ 28.255362][ T738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.274090][ T733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.296903][ T738] device bridge_slave_0 left promiscuous mode [ 28.299664][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.303478][ T738] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.322690][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.338381][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.346294][ T6] usb 4-1: Product: syz [ 28.350923][ T6] usb 4-1: Manufacturer: syz [ 28.352903][ T733] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.356416][ T6] usb 4-1: SerialNumber: syz [ 28.373199][ T738] device bridge_slave_1 left promiscuous mode [ 28.379875][ T738] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.480521][ T291] EXT4-fs (loop0): unmounting filesystem. [ 28.486310][ T751] netlink: 'syz.1.198': attribute type 4 has an invalid length. [ 28.511772][ T753] loop4: detected capacity change from 0 to 256 [ 28.526255][ T751] syz.1.198 (751) used greatest stack depth: 21608 bytes left [ 28.567438][ T757] tmpfs: Unknown parameter 'nolazytime˙˙' [ 28.641322][ T762] loop4: detected capacity change from 0 to 1024 [ 28.664790][ T762] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.203: bad orphan inode 2304 [ 28.705529][ T762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 28.810270][ T764] loop1: detected capacity change from 0 to 40427 [ 28.821924][ T764] F2FS-fs (loop1): fault_injection options not supported [ 28.834837][ T764] F2FS-fs (loop1): invalid crc value [ 28.847460][ T764] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.901656][ T764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.947507][ T764] syz.1.204: attempt to access beyond end of device [ 28.947507][ T764] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 28.986629][ T295] syz-executor: attempt to access beyond end of device [ 28.986629][ T295] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 29.382189][ T6] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 29.397846][ T6] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 29.406499][ T6] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 29.468633][ T315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.582508][ T6] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 29.600171][ T6] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 29.625721][ T6] usb 4-1: USB disconnect, device number 2 [ 29.648642][ T6] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 29.658509][ T315] usb 3-1: Using ep0 maxpacket: 16 [ 29.666424][ T315] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 29.685518][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.706693][ T315] usb 3-1: Product: syz [ 29.719342][ T315] usb 3-1: Manufacturer: syz [ 29.723784][ T315] usb 3-1: SerialNumber: syz [ 29.748819][ T19] ================================================================== [ 29.756715][ T19] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 29.763745][ T19] Read of size 8 at addr ffff888120296ce0 by task kworker/0:1/19 [ 29.771297][ T19] [ 29.773482][ T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 29.783016][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 29.792910][ T19] Workqueue: 0x0 (events) [ 29.797171][ T19] Call Trace: [ 29.800289][ T19] [ 29.803058][ T19] dump_stack_lvl+0x151/0x1b7 [ 29.807569][ T19] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 29.812867][ T19] ? _printk+0xd1/0x111 [ 29.816855][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 29.821801][ T19] print_report+0x158/0x4e0 [ 29.826143][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 29.831090][ T19] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 29.837165][ T19] ? worker_thread+0xa36/0x1260 [ 29.841852][ T19] kasan_report+0x13c/0x170 [ 29.846192][ T19] ? worker_thread+0xa36/0x1260 [ 29.850880][ T19] __asan_report_load8_noabort+0x14/0x20 [ 29.856345][ T19] worker_thread+0xa36/0x1260 [ 29.860863][ T19] kthread+0x26d/0x300 [ 29.864764][ T19] ? worker_clr_flags+0x1a0/0x1a0 [ 29.869622][ T19] ? kthread_blkcg+0xd0/0xd0 [ 29.874052][ T19] ret_from_fork+0x1f/0x30 [ 29.878306][ T19] [ 29.881166][ T19] [ 29.883336][ T19] Allocated by task 6: [ 29.887243][ T19] kasan_set_track+0x4b/0x70 [ 29.891671][ T19] kasan_save_alloc_info+0x1f/0x30 [ 29.896616][ T19] __kasan_kmalloc+0x9c/0xb0 [ 29.901127][ T19] __kmalloc_node+0xb4/0x1e0 [ 29.905556][ T19] kvmalloc_node+0x221/0x640 [ 29.909987][ T19] alloc_netdev_mqs+0x8c/0xf90 [ 29.914579][ T19] alloc_etherdev_mqs+0x36/0x40 [ 29.919268][ T19] usbnet_probe+0x213/0x28a0 [ 29.923700][ T19] usb_probe_interface+0x5b6/0xa90 [ 29.928644][ T19] really_probe+0x2b8/0x920 [ 29.932982][ T19] __driver_probe_device+0x1a0/0x310 [ 29.938109][ T19] driver_probe_device+0x54/0x3d0 [ 29.942967][ T19] __device_attach_driver+0x2e3/0x490 [ 29.949654][ T19] bus_for_each_drv+0x183/0x200 [ 29.954340][ T19] __device_attach+0x312/0x510 [ 29.959069][ T19] device_initial_probe+0x1a/0x20 [ 29.963899][ T19] bus_probe_device+0xbe/0x1e0 [ 29.968497][ T19] device_add+0xb60/0xf10 [ 29.972662][ T19] usb_set_configuration+0x190f/0x1e80 [ 29.977957][ T19] usb_generic_driver_probe+0x8b/0x150 [ 29.983249][ T19] usb_probe_device+0x144/0x260 [ 29.988634][ T19] really_probe+0x2b8/0x920 [ 29.993062][ T19] __driver_probe_device+0x1a0/0x310 [ 29.998179][ T19] driver_probe_device+0x54/0x3d0 [ 30.003040][ T19] __device_attach_driver+0x2e3/0x490 [ 30.008247][ T19] bus_for_each_drv+0x183/0x200 [ 30.012933][ T19] __device_attach+0x312/0x510 [ 30.017533][ T19] device_initial_probe+0x1a/0x20 [ 30.022407][ T19] bus_probe_device+0xbe/0x1e0 [ 30.026994][ T19] device_add+0xb60/0xf10 [ 30.031172][ T19] usb_new_device+0xf2f/0x1820 [ 30.035765][ T19] hub_event+0x2db1/0x4830 [ 30.040015][ T19] process_one_work+0x73d/0xcb0 [ 30.044712][ T19] worker_thread+0xa60/0x1260 [ 30.049212][ T19] kthread+0x26d/0x300 [ 30.053243][ T19] ret_from_fork+0x1f/0x30 [ 30.057459][ T19] [ 30.059630][ T19] Freed by task 6: [ 30.063187][ T19] kasan_set_track+0x4b/0x70 [ 30.067616][ T19] kasan_save_free_info+0x2b/0x40 [ 30.072477][ T19] ____kasan_slab_free+0x131/0x180 [ 30.077419][ T19] __kasan_slab_free+0x11/0x20 [ 30.082021][ T19] __kmem_cache_free+0x21d/0x410 [ 30.086794][ T19] kfree+0x7a/0xf0 [ 30.090353][ T19] kvfree+0x35/0x40 [ 30.093999][ T19] netdev_freemem+0x3f/0x60 [ 30.098340][ T19] netdev_release+0x7f/0xb0 [ 30.102697][ T19] device_release+0x95/0x1c0 [ 30.107106][ T19] kobject_put+0x178/0x260 [ 30.111360][ T19] put_device+0x1f/0x30 [ 30.115350][ T19] free_netdev+0x393/0x480 [ 30.119603][ T19] usbnet_disconnect+0x25f/0x3b0 [ 30.124375][ T19] usb_unbind_interface+0x1fa/0x8c0 [ 30.129409][ T19] device_release_driver_internal+0x53e/0x870 [ 30.135553][ T19] device_release_driver+0x19/0x20 [ 30.140433][ T19] bus_remove_device+0x2fa/0x360 [ 30.145465][ T19] device_del+0x663/0xe90 [ 30.149635][ T19] usb_disable_device+0x380/0x720 [ 30.154666][ T19] usb_disconnect+0x32a/0x890 [ 30.159465][ T19] hub_event+0x1ed8/0x4830 [ 30.164026][ T19] process_one_work+0x73d/0xcb0 [ 30.168701][ T19] worker_thread+0xd71/0x1260 [ 30.173309][ T19] kthread+0x26d/0x300 [ 30.177749][ T19] ret_from_fork+0x1f/0x30 [ 30.181981][ T19] [ 30.184178][ T19] Last potentially related work creation: [ 30.189797][ T19] kasan_save_stack+0x3b/0x60 [ 30.194304][ T19] __kasan_record_aux_stack+0xb4/0xc0 [ 30.199513][ T19] kasan_record_aux_stack_noalloc+0xb/0x10 [ 30.205175][ T19] insert_work+0x56/0x310 [ 30.209322][ T19] __queue_work+0x9b6/0xd70 [ 30.213665][ T19] queue_work_on+0x105/0x170 [ 30.218112][ T19] usbnet_link_change+0x182/0x1a0 [ 30.222957][ T19] usbnet_probe+0x1e1e/0x28a0 [ 30.227469][ T19] usb_probe_interface+0x5b6/0xa90 [ 30.232409][ T19] really_probe+0x2b8/0x920 [ 30.236748][ T19] __driver_probe_device+0x1a0/0x310 [ 30.241870][ T19] driver_probe_device+0x54/0x3d0 [ 30.246736][ T19] __device_attach_driver+0x2e3/0x490 [ 30.251936][ T19] bus_for_each_drv+0x183/0x200 [ 30.256622][ T19] __device_attach+0x312/0x510 [ 30.261223][ T19] device_initial_probe+0x1a/0x20 [ 30.266084][ T19] bus_probe_device+0xbe/0x1e0 [ 30.270685][ T19] device_add+0xb60/0xf10 [ 30.274847][ T19] usb_set_configuration+0x190f/0x1e80 [ 30.280143][ T19] usb_generic_driver_probe+0x8b/0x150 [ 30.285438][ T19] usb_probe_device+0x144/0x260 [ 30.290210][ T19] really_probe+0x2b8/0x920 [ 30.294552][ T19] __driver_probe_device+0x1a0/0x310 [ 30.299672][ T19] driver_probe_device+0x54/0x3d0 [ 30.304532][ T19] __device_attach_driver+0x2e3/0x490 [ 30.309738][ T19] bus_for_each_drv+0x183/0x200 [ 30.314428][ T19] __device_attach+0x312/0x510 [ 30.319026][ T19] device_initial_probe+0x1a/0x20 [ 30.323888][ T19] bus_probe_device+0xbe/0x1e0 [ 30.328575][ T19] device_add+0xb60/0xf10 [ 30.332740][ T19] usb_new_device+0xf2f/0x1820 [ 30.337337][ T19] hub_event+0x2db1/0x4830 [ 30.341594][ T19] process_one_work+0x73d/0xcb0 [ 30.346279][ T19] worker_thread+0xa60/0x1260 [ 30.350794][ T19] kthread+0x26d/0x300 [ 30.354703][ T19] ret_from_fork+0x1f/0x30 [ 30.358950][ T19] [ 30.361125][ T19] The buggy address belongs to the object at ffff888120296000 [ 30.361125][ T19] which belongs to the cache kmalloc-4k of size 4096 [ 30.375014][ T19] The buggy address is located 3296 bytes inside of [ 30.375014][ T19] 4096-byte region [ffff888120296000, ffff888120297000) [ 30.388290][ T19] [ 30.390457][ T19] The buggy address belongs to the physical page: [ 30.396708][ T19] page:ffffea000480a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120290 [ 30.406812][ T19] head:ffffea000480a400 order:3 compound_mapcount:0 compound_pincount:0 [ 30.414933][ T19] flags: 0x4000000000010200(slab|head|zone=1) [ 30.420841][ T19] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 30.429258][ T19] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 30.437673][ T19] page dumped because: kasan: bad access detected [ 30.443979][ T19] page_owner tracks the page as allocated [ 30.449484][ T19] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 298, tgid 298 (syz-executor), ts 22306393479, free_ts 0 [ 30.469617][ T19] post_alloc_hook+0x213/0x220 [ 30.474210][ T19] prep_new_page+0x1b/0x110 [ 30.478553][ T19] get_page_from_freelist+0x3a98/0x3b10 [ 30.484109][ T19] __alloc_pages+0x234/0x610 [ 30.488522][ T19] alloc_slab_page+0x6c/0xf0 [ 30.492958][ T19] new_slab+0x90/0x3e0 [ 30.496856][ T19] ___slab_alloc+0x6f9/0xb80 [ 30.501291][ T19] __slab_alloc+0x5d/0xa0 [ 30.505448][ T19] __kmem_cache_alloc_node+0x207/0x2a0 [ 30.510744][ T19] __kmalloc_node_track_caller+0xa2/0x1e0 [ 30.516295][ T19] kmemdup+0x29/0x60 [ 30.520037][ T19] __devinet_sysctl_register+0xac/0x2a0 [ 30.525411][ T19] devinet_sysctl_register+0x16a/0x1e0 [ 30.530703][ T19] inetdev_init+0x2bf/0x4f0 [ 30.535044][ T19] inetdev_event+0x205/0x1110 [ 30.539555][ T19] raw_notifier_call_chain+0x8c/0xf0 [ 30.544685][ T19] page_owner free stack trace missing [ 30.549887][ T19] [ 30.552062][ T19] Memory state around the buggy address: [ 30.557531][ T19] ffff888120296b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.565425][ T19] ffff888120296c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.573325][ T19] >ffff888120296c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.581216][ T19] ^ [ 30.588251][ T19] ffff888120296d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.596167][ T19] ffff888120296d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.604159][ T19] ================================================================== [ 30.612051][ T19] Disabling lock debugging due to kernel taint [ 30.629677][ T315] usb 3-1: config 0 descriptor?? [ 30.640238][ T315] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 30.649371][ T315] usb 3-1: Detected FT232H [ 30.670314][ T297] EXT4-fs (loop4): unmounting filesystem. [ 30.841512][ T315] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 30.848304][ T315] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 30.855387][ T315] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 30.862374][ T315] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 30.871049][ T315] usb 3-1: USB disconnect, device number 2 [ 30.878694][ T315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 30.887999][ T315] ftdi_sio 3-1:0.0: device disconnected