last executing test programs: 1m50.128360278s ago: executing program 0 (id=1): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002180)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2002, 0x40000002, 0x4, 0xa17433da3c5d6980, 0x2, 0x81}, 0x9c) 1m49.912788703s ago: executing program 0 (id=8): syz_open_dev$usbmon(0x0, 0x8008, 0x1c1300) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}, 0x1, 0x0, 0x0, 0x20001001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1m47.63486785s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='p:mygroup/myevent ./dummy:0', 0x1b) write(r0, &(0x7f0000000580)='p:mygroup/myevent ./dummy:0x2', 0x1d) 1m47.534185292s ago: executing program 0 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r7], 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xaeee0dcad4645b6c}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_deladdr={0x18, 0x15, 0x4, 0x70bd2a, 0x25dfdbfd, {0x2, 0x20, 0x88, 0xff, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendfile(r3, r4, 0x0, 0x110000) close(r3) 1m39.989575768s ago: executing program 0 (id=77): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m39.988267218s ago: executing program 32 (id=77): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m22.263443024s ago: executing program 1 (id=248): r0 = memfd_create(0x0, 0x3) fcntl$addseals(r0, 0x409, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x4000087, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(&(0x7f00000003c0)=""/112) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = dup(r4) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) fallocate(r0, 0x3, 0x40000016, 0x1) 1m20.556269996s ago: executing program 1 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r1, {0xe, 0x1}, {}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 1m20.494726248s ago: executing program 1 (id=258): write(0xca, &(0x7f00000002c0)="040e0c010310", 0x6) write(0xca, 0x0, 0x0) 1m20.462607028s ago: executing program 1 (id=259): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 1m20.462153539s ago: executing program 1 (id=260): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1m20.136670847s ago: executing program 1 (id=266): r0 = memfd_create(0x0, 0x3) fcntl$addseals(r0, 0x409, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x4000087, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(&(0x7f00000003c0)=""/112) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = dup(r4) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) fallocate(r0, 0x3, 0x40000016, 0x1) 1m20.136521996s ago: executing program 33 (id=266): r0 = memfd_create(0x0, 0x3) fcntl$addseals(r0, 0x409, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x4000087, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(&(0x7f00000003c0)=""/112) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = dup(r4) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) fallocate(r0, 0x3, 0x40000016, 0x1) 3.308644959s ago: executing program 5 (id=1023): keyctl$dh_compute(0x15, &(0x7f0000000200), 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='pvfs2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = dup(r0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80000) 3.091842545s ago: executing program 4 (id=1030): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 3.000201707s ago: executing program 4 (id=1031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) 2.825308711s ago: executing program 4 (id=1034): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x40054) 2.185409437s ago: executing program 2 (id=1038): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="375677a420b4", @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @random="f5bebe56e7a5", @dev={0xac, 0x14, 0x14, 0x2f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @rand_addr=0x64010102}}}}, 0x0) inotify_init() bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0xc4) write$P9_RLERROR(r1, &(0x7f0000000080)=ANY=[], 0xa) 2.138933478s ago: executing program 2 (id=1040): pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 2.088684909s ago: executing program 6 (id=1041): add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r2, &(0x7f0000000c80)=""/265, 0x109) 2.001715281s ago: executing program 6 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='p:mygroup/myevent ./dummy:0', 0x1b) write(r0, &(0x7f0000000580)='p:mygroup/myevent ./dummy:', 0x1a) 1.928405573s ago: executing program 6 (id=1045): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) statfs(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000280f82849d7eb78000000020000194f0000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) close(r3) r4 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r4, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 1.833769346s ago: executing program 4 (id=1046): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) fcntl$setstatus(r2, 0x4, 0x42c00) write(r0, &(0x7f0000000040), 0xffffff4a) 1.825374975s ago: executing program 5 (id=1047): mount(0x0, 0x0, 0x0, 0x804030, &(0x7f0000000f80)='\x03\x00\x00\x00IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\xff\x00\x00\x00\x00\x00\x00\x00Rx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b\xe8\xda\x96\xab\xc9\x16,W\x06KD\x93R\x98\xf4K\xe1\v\xd7\xa3\xd1#\xdb\xa0\xa6}\x91\xc5\xe3\x1e\xbd\x8f\xa1`\xcc\xadl$B/\xab\xd2RS\xf7T\xcd\xa7\xb5b\x83T\x17o\x9c|\x97T^\xa4}\xf6X\xee\xc5\xfd\xad\x0eBl\xc0\x92,n\x8b\x0eV\x90\xd8q\x1f\xbb\xf7\xd9\x85\xb4\'m\xcf%\x00\xe3\xa7}`\xbf]?\xa3\x00o\xa7\xb6\x112\xc4W\xba\xca\x95\xedEcz%\x13\xb8\x03d\xc2\x00O\xd4\xbdi\x96\x16x\xce\xd4a\xe6\xcc\x8aL,\xa8\x9e\x83\xc4*d\x17\xf9>\x95\x01J{dv\xe5\xff\xb2B\xca\xc5HR\xa7\xa4&\x06\x04\xf2\xac\x8e\x1d\xccI\xceF\x19\xc2\xb27\xdbSm\x01\xa1\x19\x89E\xf6E\x1d\xcc') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 1.766871137s ago: executing program 3 (id=1049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}}, 0x24}}, 0x0) write$tun(r0, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x16, 0x65, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3"}}, 0x24) 1.757699297s ago: executing program 5 (id=1050): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x5005}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000700)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x65, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @local}, "c7050804000000000200000001001504"}}, 0x2e) 1.65839732s ago: executing program 2 (id=1051): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000f40)="7bc6", 0x2}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8, 0x8006}, 0x90) 1.580903682s ago: executing program 5 (id=1052): socket$inet6(0x10, 0x3, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) preadv(r1, &(0x7f0000003980)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/201, 0xc9}, {&(0x7f0000002480)=""/203, 0xcb}, {&(0x7f0000002580)=""/144, 0x90}, {&(0x7f0000002640)=""/60, 0x3c}, {&(0x7f0000002680)=""/165, 0xa5}, {&(0x7f0000002740)=""/170, 0xaa}, {&(0x7f0000002800)=""/95, 0x5f}, {&(0x7f0000002880)=""/239, 0xef}, {&(0x7f0000002980)=""/4096, 0x1000}], 0xa, 0x4, 0x9) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00000676aa7679000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000380)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x44}}, 0x0) 1.580318522s ago: executing program 3 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400, 0x44102}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "f01881a1deb9fbff"}}, 0x48}, 0x300}, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r6, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xd, 0x3, 0x7fff, 0x6d}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4015) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4085}, 0x80) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0xf, 0x1}, {0x6, 0x3}, {0x2, 0x3}, {0x1, 0x3}]}, @enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x3, [{0x9, 0x0, 0x7}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000800)=""/216, 0x6a, 0xd8, 0x1}, 0x28) 1.386969276s ago: executing program 2 (id=1054): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.340663898s ago: executing program 2 (id=1055): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4205, r0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000600), 0x204, 0x2) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, r4}, 0xc) setsockopt$inet6_buf(r3, 0x29, 0xcc, &(0x7f00000002c0), 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 924.737238ms ago: executing program 4 (id=1056): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='p:mygroup/myevent ./dummy:0', 0x1b) write(r0, &(0x7f0000000580)='p:mygroup/myevent ./dummy:', 0x1a) 924.506978ms ago: executing program 4 (id=1057): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40054) 801.217451ms ago: executing program 6 (id=1058): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0xfffffffffffffec3, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0xff6c, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="ff501edcf4944eb2ae0e1df9c2974afda13b0453da9345cced7dcb240f135db9454e59829fd80c4a6ae6c2e773", 0x2d}], 0x1) 468.561079ms ago: executing program 3 (id=1059): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000680)) 468.051039ms ago: executing program 5 (id=1060): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x39c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x6, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x370, 0x2, [@TCA_BPF_ACT={0x36c, 0x1, [@m_bpf={0xb4, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x5d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x6c, 0x8, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}]}]}, {0x27, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3f"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x104, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0xd9, 0x6, "22be5921dd8ffc6b373a7e862d290c42d830be2696b1dfd40719b5ab8fb21e290e16fbf7a0cd4e12f562bf5624c97ed711692abeaaf54fe2fe93a28c2c262c2d5373741536b93deedde69cfbba1b30503dcb93cb6a4b61bfea2d711793df7602b4ae19588d0e37ecd762381e0dd4a601c8ffafb283eaeaf177f772ea68344ae4b7c664cae0162c1ffe58212a0062b5b0a60c226d67f136a502cd8340af67087af3cec112bf9243b46d4c7a7e0345bf8c100c6ce9bc0848976d13ae07fdee5e847473c1aaca815cd7687606f6b6b849007a6f22db60"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 467.777229ms ago: executing program 2 (id=1061): r0 = socket$inet6(0xa, 0x3, 0xff) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 403.826931ms ago: executing program 3 (id=1062): pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 400.373241ms ago: executing program 5 (id=1063): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x10040) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x25, &(0x7f0000000040)="00700c4aa9d61a2b3230b2ea3f2fdad52d5386538c074af34d0862d6f4b4d31a6192fc412e") readv(r1, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2) 373.294371ms ago: executing program 3 (id=1064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}}, 0x24}}, 0x0) write$tun(r0, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x16, 0x65, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3"}}, 0x24) 294.739213ms ago: executing program 6 (id=1065): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 294.391283ms ago: executing program 6 (id=1066): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) fcntl$setstatus(r2, 0x4, 0x42c00) write(r0, &(0x7f0000000040), 0xffffff4a) 0s ago: executing program 3 (id=1067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_create_resource$binfmt(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcb}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) kernel console output (not intermixed with test programs): audit: type=1400 audit(1791702687.915:227): avc: denied { ioctl } for pid=3636 comm="syz.3.32" path="socket:[5428]" dev="sockfs" ino=5428 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.616798][ T3645] loop3: detected capacity change from 0 to 512 [ 38.617129][ T3645] ======================================================= [ 38.617129][ T3645] WARNING: The mand mount option has been deprecated and [ 38.617129][ T3645] and is ignored by this kernel. Remove the mand [ 38.617129][ T3645] option from the mount to silence this warning. [ 38.617129][ T3645] ======================================================= [ 39.415072][ T3654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.634483][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.736400][ T705] IPVS: starting estimator thread 0... [ 39.831016][ T3663] IPVS: using max 2544 ests per chain, 127200 per kthread [ 39.938011][ T29] audit: type=1400 audit(1791702689.395:228): avc: denied { create } for pid=3677 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.938465][ T3678] batadv_slave_1: entered promiscuous mode [ 39.938639][ T3678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 39.938779][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.986763][ T3678] batadv_slave_1 (unregistering): left promiscuous mode [ 39.986791][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.057393][ T3680] program syz.1.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.109416][ T29] audit: type=1400 audit(1791702689.565:229): avc: denied { bind } for pid=3683 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.392397][ T3695] loop1: detected capacity change from 0 to 128 [ 40.521963][ T3699] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 40.639540][ T29] audit: type=1400 audit(1791702690.095:230): avc: denied { write } for pid=3702 comm="syz.3.59" name="tcp6" dev="proc" ino=4026532726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.908876][ T3712] batman_adv: batadv0: Adding interface: syzkaller0 [ 40.908978][ T3712] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.909004][ T3712] batman_adv: batadv0: Interface activated: syzkaller0 [ 40.958287][ T3711] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 40.972815][ T3711] batman_adv: batadv0: Removing interface: syzkaller0 [ 41.186648][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 41.186693][ T29] audit: type=1400 audit(1791702690.645:231): avc: denied { write } for pid=3714 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.186770][ T29] audit: type=1400 audit(1791702690.645:232): avc: denied { nlmsg_read } for pid=3714 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.413904][ T29] audit: type=1400 audit(1791702690.875:233): avc: denied { read write } for pid=3723 comm="syz.3.68" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.413937][ T29] audit: type=1400 audit(1791702690.875:234): avc: denied { open } for pid=3723 comm="syz.3.68" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.981836][ T3733] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 42.107235][ T29] audit: type=1400 audit(1791702691.565:235): avc: denied { read write } for pid=3740 comm="syz.1.73" name="uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.107324][ T29] audit: type=1400 audit(1791702691.565:236): avc: denied { open } for pid=3740 comm="syz.1.73" path="/dev/uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.256256][ T3747] loop4: detected capacity change from 0 to 2048 [ 42.282351][ T3747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.283893][ T3747] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.74: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 42.284090][ T3747] EXT4-fs (loop4): Remounting filesystem read-only [ 42.303950][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.386168][ T3759] loop4: detected capacity change from 0 to 512 [ 42.386873][ T3759] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 42.388904][ T3759] EXT4-fs (loop4): 1 truncate cleaned up [ 42.389332][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.557653][ T3306] syz-executor (3306) used greatest stack depth: 10728 bytes left [ 43.153617][ T3777] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.420446][ T3766] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.420482][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.420558][ T3766] bridge_slave_0: entered allmulticast mode [ 43.420920][ T3766] bridge_slave_0: entered promiscuous mode [ 43.448796][ T3766] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.448860][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.448914][ T3766] bridge_slave_1: entered allmulticast mode [ 43.449379][ T3766] bridge_slave_1: entered promiscuous mode [ 43.643430][ T3766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.645606][ T3766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.766103][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.779321][ T3766] team0: Port device team_slave_0 added [ 43.787490][ T3766] team0: Port device team_slave_1 added [ 43.823841][ T3766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.823856][ T3766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.823880][ T3766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.824365][ T3766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.824376][ T3766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.824546][ T3766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.850016][ T3766] hsr_slave_0: entered promiscuous mode [ 43.850406][ T3766] hsr_slave_1: entered promiscuous mode [ 43.850618][ T3766] debugfs: 'hsr0' already exists in 'hsr' [ 43.850631][ T3766] Cannot create hsr debugfs directory [ 43.870804][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 43.870818][ T29] audit: type=1400 audit(1791702693.335:241): avc: denied { connect } for pid=3794 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.871302][ T3795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 43.998156][ T3766] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.008235][ T3766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 44.008980][ T3766] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.027688][ T3766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 44.028764][ T3766] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.045298][ T3766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 44.191636][ T3766] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.194116][ T3766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 44.205438][ T3766] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.205472][ T3766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.314598][ T3766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.333738][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.367367][ T3766] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.389117][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.389148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.416716][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.416754][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.628114][ T29] audit: type=1400 audit(1791702694.085:242): avc: denied { ioctl } for pid=3822 comm="syz.2.91" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.628589][ T3823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.628736][ T3823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.748630][ T3766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.839659][ T3766] veth0_vlan: entered promiscuous mode [ 44.842090][ T3766] veth1_vlan: entered promiscuous mode [ 44.851834][ T3766] veth0_macvtap: entered promiscuous mode [ 44.853370][ T3766] veth1_macvtap: entered promiscuous mode [ 44.859434][ T3766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.864379][ T3766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.893416][ T705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.912914][ T29] audit: type=1400 audit(1791702694.375:243): avc: denied { mounton } for pid=3766 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 44.919823][ T705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.919860][ T705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.919963][ T705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.012990][ T3851] loop5: detected capacity change from 0 to 512 [ 45.016567][ T3851] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 45.041081][ T3851] EXT4-fs (loop5): 1 truncate cleaned up [ 45.041418][ T3851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.009509][ T3766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.060188][ T3868] program syz.5.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.086773][ T3874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 47.134930][ T3889] syzkaller1: entered promiscuous mode [ 47.134950][ T3889] syzkaller1: entered allmulticast mode [ 47.136205][ T29] audit: type=1400 audit(1791702696.595:244): avc: denied { ioctl } for pid=3888 comm="syz.1.105" path="socket:[6003]" dev="sockfs" ino=6003 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.694099][ T3904] loop1: detected capacity change from 0 to 512 [ 47.744644][ T3909] loop1: detected capacity change from 0 to 512 [ 47.745078][ T3909] EXT4-fs: test_dummy_encryption option not supported [ 47.889967][ T3911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 48.261423][ T3915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.261500][ T3915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.892545][ T3923] loop2: detected capacity change from 0 to 2048 [ 48.902872][ T3923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.905733][ T3923] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #2: comm syz.2.117: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 48.905952][ T3923] EXT4-fs (loop2): Remounting filesystem read-only [ 48.927990][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.140529][ T3930] program syz.3.116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.235585][ T3937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.235667][ T3937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.744939][ T29] audit: type=1400 audit(1791702699.205:245): avc: denied { create } for pid=3952 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.745268][ T29] audit: type=1400 audit(1791702699.205:246): avc: denied { ioctl } for pid=3952 comm="syz.4.126" path="socket:[6089]" dev="sockfs" ino=6089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.853609][ T29] audit: type=1400 audit(1791702699.315:247): avc: denied { bind } for pid=3957 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.050900][ T29] audit: type=1400 audit(1791702699.515:248): avc: denied { write } for pid=3948 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.152824][ T3969] program syz.3.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.158994][ T29] audit: type=1400 audit(1791702699.615:249): avc: denied { read write } for pid=3970 comm="syz.4.132" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 50.159027][ T29] audit: type=1400 audit(1791702699.615:250): avc: denied { open } for pid=3970 comm="syz.4.132" path="/30/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 50.159379][ T29] audit: type=1400 audit(1791702699.615:251): avc: denied { ioctl } for pid=3970 comm="syz.4.132" path="/30/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 50.287179][ T3977] tipc: Started in network mode [ 50.287218][ T3977] tipc: Node identity ac14140f, cluster identity 4711 [ 50.287416][ T3977] tipc: Enabled bearer , priority 10 [ 50.329164][ T29] audit: type=1400 audit(1791702699.785:252): avc: denied { setopt } for pid=3981 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.329352][ T29] audit: type=1400 audit(1791702699.785:253): avc: denied { bind } for pid=3981 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.364834][ T3983] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 50.533464][ T3989] selinux_netlink_send: 6 callbacks suppressed [ 50.533480][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.533621][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.533711][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.533824][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.533979][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.534102][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.534309][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.534459][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.536139][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.536316][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=3989 comm=syz.1.139 [ 50.779192][ T3998] loop4: detected capacity change from 0 to 7 [ 50.862827][ T4002] program syz.2.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.243752][ T4015] tipc: Started in network mode [ 51.243770][ T4015] tipc: Node identity ac14140f, cluster identity 4711 [ 51.244007][ T4015] tipc: Enabled bearer , priority 10 [ 51.279998][ T3819] tipc: Node number set to 2886997007                                                                             [ 52.585608][ T4059] netlink: 'syz.1.164': attribute type 2 has an invalid length. syzkaller syzkaller login: [ 52.738867][ T4071] ip_tables: iptables: counters copy to user failed while replacing table [ 52.749675][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.971047][ T4080] syzkaller0: entered promiscuous mode [ 52.971069][ T4080] syzkaller0: entered allmulticast mode [ 53.070071][ T3506] tipc: Node number set to 2886997007 [ 53.131966][ T4092] loop2: detected capacity change from 0 to 2048 [ 53.150627][ T4092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.156827][ T4092] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #2: comm syz.2.174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 53.157073][ T4092] EXT4-fs (loop2): Remounting filesystem read-only [ 53.199716][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.653068][ T4106] loop4: detected capacity change from 0 to 2048 [ 53.676855][ T4106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.684241][ T4112] loop2: detected capacity change from 0 to 2048 [ 53.685348][ T4114] ip_tables: iptables: counters copy to user failed while replacing table [ 53.720058][ T4112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.172112][ T4044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 54.245007][ T4129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.246045][ T4129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.331422][ T4144] ip_tables: iptables: counters copy to user failed while replacing table [ 54.485960][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 54.558363][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.558823][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.630068][ T4156] loop2: detected capacity change from 0 to 512 [ 54.642570][ T4156] FAULT_INJECTION: forcing a failure. [ 54.642570][ T4156] name failslab, interval 1, probability 0, space 0, times 1 [ 54.642603][ T4156] CPU: 0 UID: 0 PID: 4156 Comm: syz.2.195 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.642628][ T4156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.642645][ T4156] Call Trace: [ 54.642652][ T4156] [ 54.642662][ T4156] __dump_stack+0x1d/0x30 [ 54.642695][ T4156] dump_stack_lvl+0x95/0xd0 [ 54.642737][ T4156] dump_stack+0x15/0x1b [ 54.642762][ T4156] should_fail_ex+0x262/0x280 [ 54.642792][ T4156] should_failslab+0x8c/0xb0 [ 54.642892][ T4156] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 54.643011][ T4156] ? kstrdup_const+0x3e/0x50 [ 54.643170][ T4156] ? kstrdup_const+0x3e/0x50 [ 54.643201][ T4156] kstrdup+0x3e/0xd0 [ 54.643228][ T4156] kstrdup_const+0x3e/0x50 [ 54.643306][ T4156] __kernfs_new_node+0x42/0x440 [ 54.643328][ T4156] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 54.643360][ T4156] ? should_fail_ex+0xdb/0x280 [ 54.643427][ T4156] ? should_failslab+0x8c/0xb0 [ 54.643464][ T4156] kernfs_create_dir_ns+0xd0/0x170 [ 54.643489][ T4156] sysfs_create_dir_ns+0xd4/0x1d0 [ 54.643573][ T4156] kobject_add_internal+0x470/0x770 [ 54.643610][ T4156] kobject_init_and_add+0x13c/0x1e0 [ 54.643644][ T4156] ? ext4_init_orphan_info+0x9b/0x770 [ 54.643704][ T4156] ext4_register_sysfs+0xa5/0x270 [ 54.643730][ T4156] ext4_fill_super+0x36d5/0x37b0 [ 54.643764][ T4156] ? set_blocksize+0x14c/0x270 [ 54.643880][ T4156] ? __pfx_ext4_fill_super+0x10/0x10 [ 54.643971][ T4156] get_tree_bdev_flags+0x291/0x300 [ 54.644009][ T4156] ? __pfx_ext4_fill_super+0x10/0x10 [ 54.644044][ T4156] get_tree_bdev+0x1f/0x30 [ 54.644149][ T4156] ext4_get_tree+0x1c/0x30 [ 54.644185][ T4156] vfs_get_tree+0x57/0x1d0 [ 54.644241][ T4156] do_new_mount+0x288/0x730 [ 54.644263][ T4156] path_mount+0x4ad/0xb90 [ 54.644287][ T4156] __se_sys_mount+0x28c/0x2e0 [ 54.644334][ T4156] __x64_sys_mount+0x67/0x80 [ 54.644356][ T4156] x64_sys_call+0xc3b/0x2550 [ 54.644383][ T4156] do_syscall_64+0x112/0x360 [ 54.644480][ T4156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.644506][ T4156] RIP: 0033:0x7ff4bb70f44a [ 54.644524][ T4156] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.644545][ T4156] RSP: 002b:00007ff4ba166e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.644618][ T4156] RAX: ffffffffffffffda RBX: 00007ff4ba166ee0 RCX: 00007ff4bb70f44a [ 54.644633][ T4156] RDX: 0000200000000540 RSI: 0000200000000580 RDI: 00007ff4ba166ea0 [ 54.644646][ T4156] RBP: 0000200000000540 R08: 00007ff4ba166ee0 R09: 0000000000000000 [ 54.644659][ T4156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000580 [ 54.644671][ T4156] R13: 00007ff4ba166ea0 R14: 000000000000044b R15: 00002000000005c0 [ 54.644770][ T4156] [ 54.655461][ T4156] kobject: kobject_add_internal failed for loop2 (error: -12 parent: ext4) [ 54.656248][ T4156] EXT4-fs (loop2): mount failed [ 54.765617][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 54.765632][ T29] audit: type=1400 audit(1791702704.225:270): avc: denied { ioctl } for pid=4165 comm="syz.4.199" path="socket:[6719]" dev="sockfs" ino=6719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.816529][ T4171] ip_tables: iptables: counters copy to user failed while replacing table [ 54.853422][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 55.012757][ T4181] loop2: detected capacity change from 0 to 2048 [ 55.131315][ T4187] loop4: detected capacity change from 0 to 2048 [ 55.171430][ T4181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.175789][ T4187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.891332][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.008438][ T29] audit: type=1400 audit(1791702705.465:271): avc: denied { read } for pid=4200 comm="syz.2.208" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.008471][ T29] audit: type=1400 audit(1791702705.465:272): avc: denied { open } for pid=4200 comm="syz.2.208" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.063133][ T29] audit: type=1400 audit(1791702705.525:273): avc: denied { read write } for pid=4200 comm="syz.2.208" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.063216][ T29] audit: type=1400 audit(1791702705.525:274): avc: denied { open } for pid=4200 comm="syz.2.208" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.064940][ T29] audit: type=1400 audit(1791702705.525:275): avc: denied { ioctl } for pid=4200 comm="syz.2.208" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.146026][ T4204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.146128][ T4204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.210679][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.229019][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.229185][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.317631][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.317668][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.317760][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.317840][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.317952][ T4208] bridge0: entered promiscuous mode [ 56.317965][ T4208] bridge0: entered allmulticast mode [ 56.375778][ T29] audit: type=1400 audit(1791702705.835:276): avc: denied { getopt } for pid=4207 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.426310][ T4220] loop4: detected capacity change from 0 to 2048 [ 56.434577][ T29] audit: type=1400 audit(1791702705.895:277): avc: denied { read } for pid=4222 comm="syz.3.217" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.434617][ T29] audit: type=1400 audit(1791702705.895:278): avc: denied { open } for pid=4222 comm="syz.3.217" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.471352][ T29] audit: type=1400 audit(1791702705.925:279): avc: denied { ioctl } for pid=4222 comm="syz.3.217" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.483996][ T4224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.484145][ T4224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.531314][ T4220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.628247][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 56.734801][ T4235] loop1: detected capacity change from 0 to 2048 [ 56.748669][ T4236] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 56.802586][ T4235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.433847][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.632960][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.787670][ T4254] loop1: detected capacity change from 0 to 512 [ 57.787942][ T4254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.787999][ T4254] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.788110][ T4254] EXT4-fs: Ignoring removed i_version option [ 57.802063][ T4254] EXT4-fs (loop1): 1 orphan inode deleted [ 57.802438][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.820113][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.291979][ T4259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 58.339904][ T4263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.228'. [ 58.340087][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.368880][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.442351][ T4266] loop2: detected capacity change from 0 to 2048 [ 58.471571][ T4266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.474143][ T4266] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.230: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 58.517908][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 58.649197][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.144599][ T4285] loop5: detected capacity change from 0 to 2048 [ 59.230742][ T4283] syzkaller0: entered promiscuous mode [ 59.230760][ T4283] syzkaller0: entered allmulticast mode [ 59.349146][ T4285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.912183][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 59.912199][ T29] audit: type=1400 audit(1791702709.375:282): avc: denied { listen } for pid=4296 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.912399][ T29] audit: type=1400 audit(1791702709.375:283): avc: denied { accept } for pid=4296 comm="syz.3.239" lport=38644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.018153][ T3766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.054187][ T4300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 60.057268][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 60.057390][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.100469][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.151879][ T4304] loop3: detected capacity change from 0 to 2048 [ 60.191871][ T4304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.196776][ T4304] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.244: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 60.197039][ T4304] EXT4-fs (loop3): Remounting filesystem read-only [ 60.278759][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.304035][ T29] audit: type=1400 audit(1791702709.765:284): avc: denied { create } for pid=4305 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.517348][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 61.403925][ T4342] tipc: Started in network mode [ 61.403952][ T4342] tipc: Node identity ac14140f, cluster identity 4711 [ 61.404129][ T4342] tipc: Enabled bearer , priority 10 [ 61.462833][ T4344] loop5: detected capacity change from 0 to 2048 [ 61.481704][ T4346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.481782][ T4346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.509813][ T4344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.967113][ T4350] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 62.086515][ T4357] syzkaller1: entered promiscuous mode [ 62.086549][ T4357] syzkaller1: entered allmulticast mode [ 62.115310][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 62.161073][ T29] audit: type=1400 audit(1791702711.625:285): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.243429][ T4368] loop2: detected capacity change from 0 to 2048 [ 62.251047][ T4368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.284155][ T4368] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.263: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 62.284357][ T4368] EXT4-fs (loop2): Remounting filesystem read-only [ 62.284938][ T3766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.333757][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.458427][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.527209][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.588925][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.654962][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.812380][ T12] vlan2: left allmulticast mode [ 62.812412][ T12] geneve0: left allmulticast mode [ 62.812480][ T12] vlan2: left promiscuous mode [ 62.812499][ T12] geneve0: left promiscuous mode [ 62.812952][ T12] bridge0: port 3(vlan2) entered disabled state [ 62.814447][ T12] bridge_slave_1: left allmulticast mode [ 62.814527][ T12] bridge_slave_1: left promiscuous mode [ 62.814683][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.815823][ T12] bridge_slave_0: left allmulticast mode [ 62.815838][ T12] bridge_slave_0: left promiscuous mode [ 62.815925][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.959303][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.970768][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.971832][ T12] bond0 (unregistering): Released all slaves [ 62.974572][ T3342] tipc: Node number set to 2886997007 [ 63.004604][ T12] tipc: Disabling bearer [ 63.004670][ T12] tipc: Left network mode [ 63.009527][ T12] hsr_slave_0: left promiscuous mode [ 63.015320][ T12] hsr_slave_1: left promiscuous mode [ 63.015901][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.015914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.046327][ T12] veth1_macvtap: left promiscuous mode [ 63.046354][ T12] veth0_macvtap: left promiscuous mode [ 63.046413][ T12] veth1_vlan: left promiscuous mode [ 63.046454][ T12] veth0_vlan: left promiscuous mode [ 63.149070][ T12] team0 (unregistering): Port device team_slave_1 removed [ 63.159332][ T12] team0 (unregistering): Port device team_slave_0 removed [ 63.313924][ T4404] syzkaller1: entered promiscuous mode [ 63.313944][ T4404] syzkaller1: entered allmulticast mode [ 63.405641][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 63.406945][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.407004][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.407057][ T4379] bridge_slave_0: entered allmulticast mode [ 63.407447][ T4379] bridge_slave_0: entered promiscuous mode [ 63.408465][ T29] audit: type=1400 audit(1791702712.865:286): avc: denied { write } for pid=4400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.408474][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.408505][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.408615][ T4379] bridge_slave_1: entered allmulticast mode [ 63.409100][ T4379] bridge_slave_1: entered promiscuous mode [ 63.479834][ T29] audit: type=1400 audit(1791702712.935:287): avc: denied { write } for pid=4425 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.488635][ T4379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.493624][ T4379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.531161][ T4427] loop5: detected capacity change from 0 to 2048 [ 63.542531][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.543563][ T4379] team0: Port device team_slave_0 added [ 63.544338][ T4379] team0: Port device team_slave_1 added [ 63.570652][ T4427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.575038][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.575050][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.575197][ T4379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.576586][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.576596][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.576620][ T4379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.577541][ T12] IPVS: stop unused estimator thread 0... [ 63.696411][ T4431] loop4: detected capacity change from 0 to 2048 [ 63.725064][ T4379] hsr_slave_0: entered promiscuous mode [ 63.725469][ T4379] hsr_slave_1: entered promiscuous mode [ 63.725699][ T4379] debugfs: 'hsr0' already exists in 'hsr' [ 63.725713][ T4379] Cannot create hsr debugfs directory [ 63.781430][ T4436] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 63.886895][ T4379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 63.904278][ T4431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.908082][ T4379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.909510][ T4379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 63.998268][ T4379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.008676][ T4379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 64.023659][ T29] audit: type=1400 audit(1791702713.485:288): avc: denied { write } for pid=4429 comm="syz.4.276" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.023693][ T29] audit: type=1400 audit(1791702713.485:289): avc: denied { add_name } for pid=4429 comm="syz.4.276" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.024014][ T29] audit: type=1400 audit(1791702713.485:290): avc: denied { create } for pid=4429 comm="syz.4.276" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.024471][ T29] audit: type=1400 audit(1791702713.485:291): avc: denied { read write } for pid=4429 comm="syz.4.276" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.025098][ T4379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.026047][ T4379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 64.075760][ T4431] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.076204][ T4431] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 64.076329][ T4431] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.076329][ T4431] [ 64.076359][ T4431] EXT4-fs (loop4): Total free blocks count 0 [ 64.076382][ T4431] EXT4-fs (loop4): Free/Dirty block details [ 64.076403][ T4431] EXT4-fs (loop4): free_blocks=2415919104 [ 64.076425][ T4431] EXT4-fs (loop4): dirty_blocks=32 [ 64.076447][ T4431] EXT4-fs (loop4): Block reservation details [ 64.076520][ T4431] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 64.097699][ T4379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.149351][ T4443] tipc: Enabling of bearer rejected, already enabled [ 64.179561][ T4431] syz.4.276 (4431) used greatest stack depth: 10720 bytes left [ 64.184172][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.408283][ T3766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.492366][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.616826][ T4379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.665037][ T4379] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.694209][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.694248][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.738291][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.738327][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.873916][ T4478] syzkaller1: entered promiscuous mode [ 64.873943][ T4478] syzkaller1: entered allmulticast mode [ 64.947149][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 64.947241][ T29] audit: type=1400 audit(1791702714.405:302): avc: denied { write } for pid=4479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.801702][ T29] audit: type=1400 audit(1791702715.265:303): avc: denied { write } for pid=4499 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.862841][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 66.039402][ T4379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.129270][ T29] audit: type=1400 audit(1791702715.585:304): avc: denied { write } for pid=4510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.139595][ T4528] tipc: Enabling of bearer rejected, already enabled [ 66.211633][ T29] audit: type=1400 audit(1791702715.675:305): avc: denied { write } for pid=4536 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.334523][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 66.537719][ T4379] veth0_vlan: entered promiscuous mode [ 66.560617][ T4379] veth1_vlan: entered promiscuous mode [ 66.979033][ T29] audit: type=1400 audit(1791702716.435:306): avc: denied { connect } for pid=4563 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.231551][ T4379] veth0_macvtap: entered promiscuous mode [ 67.271695][ T4379] veth1_macvtap: entered promiscuous mode [ 67.277419][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.298664][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.329912][ T177] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.329951][ T177] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.329980][ T177] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.330039][ T177] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.963357][ T4580] loop6: detected capacity change from 0 to 128 [ 67.963732][ T4580] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 68.916428][ T4586] loop6: detected capacity change from 0 to 512 [ 68.918187][ T4586] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 68.918199][ T4586] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 68.971601][ T4586] EXT4-fs (loop6): 1 truncate cleaned up [ 68.972186][ T4586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.993403][ T4590] tipc: Started in network mode [ 68.993495][ T4590] tipc: Node identity ac14140f, cluster identity 4711 [ 68.993665][ T4590] tipc: Enabled bearer , priority 10 [ 69.166196][ T4379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.269571][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.269806][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.303935][ T4596] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.303975][ T4596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.304092][ T4596] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.304119][ T4596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.304268][ T4596] bridge0: entered promiscuous mode [ 69.304352][ T4596] bridge0: entered allmulticast mode [ 69.313752][ T4602] syzkaller0: entered promiscuous mode [ 69.313772][ T4602] syzkaller0: entered allmulticast mode [ 69.356812][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 69.377789][ T4607] loop6: detected capacity change from 0 to 2048 [ 69.408392][ T4607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.561197][ T29] audit: type=1400 audit(1791702718.995:307): avc: denied { mount } for pid=4611 comm="syz.4.310" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 69.732403][ T29] audit: type=1400 audit(1791702719.195:308): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 69.812658][ T4618] tipc: Enabling of bearer rejected, already enabled [ 70.096954][ T4623] loop2: detected capacity change from 0 to 2048 [ 70.128019][ T4623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.414801][ T4626] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 70.416103][ T4379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.485494][ T1512] tipc: Node number set to 2886997007 [ 70.641026][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.318'. [ 70.743789][ T4642] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.777826][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.321'. [ 70.802470][ T4646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.802587][ T4646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.947107][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.821308][ T4659] selinux_netlink_send: 6 callbacks suppressed [ 71.821325][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 71.821438][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 71.821526][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 71.821681][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 71.821826][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 71.821956][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 71.822087][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 71.822241][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 71.822520][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 71.822619][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=4659 comm=syz.3.326 [ 72.119447][ T29] audit: type=1400 audit(1791702721.575:309): avc: denied { name_bind } for pid=4669 comm="syz.5.330" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.211177][ T4675] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 72.316715][ T4688] loop3: detected capacity change from 0 to 2048 [ 72.342897][ T4688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.349178][ T4690] bridge0: entered promiscuous mode [ 72.349198][ T4690] bridge0: entered allmulticast mode [ 72.404451][ T4696] syzkaller0: entered allmulticast mode [ 72.445814][ T4688] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 72.517628][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.696862][ T4714] syzkaller0: entered promiscuous mode [ 73.696932][ T4714] syzkaller0: entered allmulticast mode [ 74.465455][ T4720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.343'. [ 74.988776][ T4730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.032603][ T4732] syzkaller1: entered promiscuous mode [ 75.032621][ T4732] syzkaller1: entered allmulticast mode [ 75.151348][ T4736] loop2: detected capacity change from 0 to 2048 [ 75.172917][ T4736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.366494][ T4747] tipc: Enabling of bearer rejected, already enabled [ 75.443083][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.356'. [ 75.466147][ T4756] FAULT_INJECTION: forcing a failure. [ 75.466147][ T4756] name fail_futex, interval 1, probability 0, space 0, times 1 [ 75.466208][ T4756] CPU: 1 UID: 0 PID: 4756 Comm: syz.6.345 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.466294][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.466309][ T4756] Call Trace: [ 75.466317][ T4756] [ 75.466325][ T4756] __dump_stack+0x1d/0x30 [ 75.466412][ T4756] dump_stack_lvl+0x95/0xd0 [ 75.466463][ T4756] dump_stack+0x15/0x1b [ 75.466484][ T4756] should_fail_ex+0x262/0x280 [ 75.466513][ T4756] should_fail+0xb/0x20 [ 75.466542][ T4756] get_futex_key+0x12d/0xb10 [ 75.466573][ T4756] ? should_fail_ex+0xdb/0x280 [ 75.466641][ T4756] ? should_failslab+0x8c/0xb0 [ 75.466679][ T4756] futex_wake+0x89/0x400 [ 75.466701][ T4756] ? selinux_file_alloc_security+0xaa/0xd0 [ 75.466783][ T4756] do_futex+0x3f8/0x460 [ 75.466823][ T4756] __se_sys_futex+0x2f6/0x370 [ 75.466875][ T4756] __x64_sys_futex+0x78/0x90 [ 75.466905][ T4756] x64_sys_call+0x22e2/0x2550 [ 75.467000][ T4756] do_syscall_64+0x112/0x360 [ 75.467026][ T4756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.467052][ T4756] RIP: 0033:0x7f4f1eafe1d9 [ 75.467071][ T4756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.467092][ T4756] RSP: 002b:00007f4f1d5570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.467205][ T4756] RAX: ffffffffffffffda RBX: 00007f4f1ed85fa8 RCX: 00007f4f1eafe1d9 [ 75.467222][ T4756] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4f1ed85fac [ 75.467238][ T4756] RBP: 00007f4f1ed85fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 75.467283][ T4756] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 75.467296][ T4756] R13: 00007f4f1ed86038 R14: 00007ffdc072f820 R15: 00007ffdc072f908 [ 75.467313][ T4756] [ 75.718386][ T4760] loop3: detected capacity change from 0 to 2048 [ 75.733782][ T4764] syzkaller0: entered promiscuous mode [ 75.733799][ T4764] syzkaller0: entered allmulticast mode [ 75.754046][ T4760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.756562][ T4760] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 75.791053][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.036738][ T4780] tipc: Started in network mode [ 76.036770][ T4780] tipc: Node identity ac14140f, cluster identity 4711 [ 76.036953][ T4780] tipc: Enabled bearer , priority 10 [ 76.107276][ T4782] batadv_slave_1: entered promiscuous mode [ 76.107540][ T4781] batadv_slave_1: left promiscuous mode [ 76.151499][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.285095][ T3506] tipc: Node number set to 2886997007 [ 77.354050][ T29] audit: type=1400 audit(1791702726.815:310): avc: denied { search } for pid=4810 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.397883][ T4815] loop5: detected capacity change from 0 to 2048 [ 77.479248][ T4829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.489216][ T4829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 syzkaller syzkaller login: [ 77.501642][ T4815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.714393][ T29] audit: type=1400 audit(1791702727.175:311): avc: denied { write } for pid=4804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.783290][ T4840] batadv_slave_1: entered promiscuous mode [ 77.783883][ T4838] batadv_slave_1: left promiscuous mode [ 77.894940][ T29] audit: type=1400 audit(1791702727.355:312): avc: denied { write } for pid=4839 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.927446][ T4845] netlink: 16 bytes leftover after parsing attributes in process `syz.6.381'. [ 78.007415][ T29] audit: type=1400 audit(1791702727.455:313): avc: denied { create } for pid=4841 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.341914][ T3766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.367068][ T4858] selinux_netlink_send: 56 callbacks suppressed [ 78.367084][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.367151][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.367258][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.367389][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.367451][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.367716][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.412813][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.412927][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.413221][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.413353][ T4858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=4858 comm=syz.4.382 [ 78.570187][ T29] audit: type=1400 audit(1791702728.035:314): avc: denied { write } for pid=4852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.620289][ T29] audit: type=1400 audit(1791702728.075:315): avc: denied { write } for pid=4878 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.770762][ T29] audit: type=1400 audit(1791702728.135:316): avc: denied { read } for pid=4881 comm="syz.6.389" path="socket:[8937]" dev="sockfs" ino=8937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.823948][ T4889] batadv_slave_1: entered promiscuous mode [ 78.829107][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.830655][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.831939][ T4888] batadv_slave_1: left promiscuous mode [ 78.886939][ T29] audit: type=1400 audit(1791702728.345:317): avc: denied { getopt } for pid=4883 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 79.305425][ T29] audit: type=1400 audit(1791702728.765:318): avc: denied { read } for pid=4905 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.330362][ T29] audit: type=1400 audit(1791702728.795:319): avc: denied { write } for pid=4886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.369005][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.369072][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.086183][ T4953] batadv_slave_1: entered promiscuous mode [ 80.089128][ T4952] batadv_slave_1: left promiscuous mode syzkaller syzkaller login: [ 80.149607][ T4963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.408'. [ 80.228284][ T4971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.234928][ T4971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.086059][ T4992] program syz.5.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.117017][ T4994] batadv_slave_1: entered promiscuous mode [ 81.119082][ T4993] batadv_slave_1: left promiscuous mode [ 81.358991][ T5001] syzkaller0: entered allmulticast mode [ 82.436140][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.423'. [ 82.753438][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 82.753454][ T29] audit: type=1400 audit(1791702732.215:324): avc: denied { write } for pid=5019 comm="syz.4.425" name="usb_gadget" dev="configfs" ino=989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.753546][ T29] audit: type=1400 audit(1791702732.215:325): avc: denied { add_name } for pid=5019 comm="syz.4.425" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.753565][ T29] audit: type=1400 audit(1791702732.215:326): avc: denied { create } for pid=5019 comm="syz.4.425" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 82.754234][ T29] audit: type=1400 audit(1791702732.215:327): avc: denied { write } for pid=5019 comm="syz.4.425" name="functions" dev="configfs" ino=9832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.934502][ T3387] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 82.934628][ T3387] wiimote 0005:057E:0306.0001: New device registered [ 82.939774][ T5029] wiimote 0005:057E:0306.0001: Device removed [ 82.965121][ T5018] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input5 [ 83.001176][ T29] audit: type=1400 audit(1791702732.465:328): avc: denied { read } for pid=2970 comm="acpid" name="event4" dev="devtmpfs" ino=623 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.001204][ T29] audit: type=1400 audit(1791702732.465:329): avc: denied { open } for pid=2970 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=623 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.001280][ T29] audit: type=1400 audit(1791702732.465:330): avc: denied { ioctl } for pid=2970 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=623 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.137968][ T5031] fido_id[5031]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.178069][ T5033] syzkaller0: entered promiscuous mode [ 83.178089][ T5033] syzkaller0: entered allmulticast mode [ 83.334697][ T5050] loop5: detected capacity change from 0 to 256 [ 84.228217][ T5055] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 84.228243][ T5055] FAT-fs (loop5): Filesystem has been set read-only [ 84.229058][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.435'. [ 84.229336][ T3387] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 84.232630][ T3387] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 84.234808][ T3387] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input8 [ 84.236206][ T3387] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 84.238210][ T29] audit: type=1400 audit(1791702733.695:331): avc: denied { create } for pid=5034 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.267994][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 84.476700][ T29] audit: type=1400 audit(1791702733.935:332): avc: denied { write } for pid=5061 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.676293][ T29] audit: type=1400 audit(1791702734.135:333): avc: denied { ioctl } for pid=5076 comm="syz.5.440" path="socket:[9969]" dev="sockfs" ino=9969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.710190][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.710333][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.831886][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.832105][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.894010][ T5222] syzkaller0: entered promiscuous mode [ 85.894024][ T5222] syzkaller0: entered allmulticast mode                                                                                                              [ 88.049811][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 88.049826][ T29] audit: type=1400 audit(1791702737.465:342): avc: denied { read write } for pid=5298 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 88.049892][ T29] audit: type=1400 audit(1791702737.465:343): avc: denied { open } for pid=5298 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 88.049953][ T29] audit: type=1400 audit(1791702737.465:344): avc: denied { lock } for pid=5298 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 88.116057][ T5302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.116179][ T5302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 syzkaller syzkaller login: [ 88.326153][ T29] audit: type=1400 audit(1791702737.785:345): avc: denied { write } for pid=5316 comm="syz.4.491" name="functions" dev="configfs" ino=9832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.326188][ T5317] file system registered [ 88.327329][ T29] audit: type=1400 audit(1791702737.785:346): avc: denied { mount } for pid=5316 comm="syz.4.491" name="/" dev="functionfs" ino=10289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 88.392561][ T29] audit: type=1400 audit(1791702737.855:347): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 88.394133][ T3305] ffs_data_put(): freeing [ 88.407737][ T5319] syzkaller0: entered allmulticast mode                                                                                                                                                    [ 89.624739][ T5366] syzkaller0: entered allmulticast mode syzkaller syzkaller login: [ 89.706874][ T5372] loop6: detected capacity change from 0 to 512 [ 89.708902][ T5372] EXT4-fs: test_dummy_encryption option not supported syzkaller syzkaller login: [ 91.618572][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 92.084418][ T5419] netlink: 'syz.2.527': attribute type 2 has an invalid length. [ 92.222039][ T5429] loop4: detected capacity change from 0 to 7 [ 92.353424][ T9] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 92.353529][ T9] wiimote 0005:057E:0306.0002: New device registered [ 92.357075][ T5439] wiimote 0005:057E:0306.0002: Device removed [ 92.395603][ T5441] fido_id[5441]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.514203][ T9] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 93.516341][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input10 [ 93.519054][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input11 [ 93.522260][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9 [ 94.242173][ T5469] selinux_netlink_send: 79 callbacks suppressed [ 94.242190][ T5469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5469 comm=syz.6.542 [ 94.242318][ T5469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5469 comm=syz.6.542 [ 94.246414][ T5469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5469 comm=syz.6.542 [ 94.453634][ T5485] X.509: Couldn't decode AuthKeyIdentifier [ 94.513863][ T5489] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 94.513903][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.513942][ T5489] vhci_hcd vhci_hcd.0: Device attached [ 94.517017][ T5489] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 94.517118][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.517189][ T5489] vhci_hcd vhci_hcd.0: Device attached [ 94.539907][ T5489] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 94.539952][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.540054][ T5489] vhci_hcd vhci_hcd.0: Device attached [ 94.544650][ T5489] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 94.544675][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.544749][ T5489] vhci_hcd vhci_hcd.0: Device attached [ 94.555277][ T5497] vhci_hcd: connection closed [ 94.555379][ T5490] vhci_hcd: connection closed [ 94.555547][ T5493] vhci_hcd: connection closed [ 94.555678][ T5499] vhci_hcd: connection closed [ 94.574298][ T168] vhci_hcd vhci_hcd.3: stop threads [ 94.574319][ T168] vhci_hcd vhci_hcd.3: release socket [ 94.574335][ T168] vhci_hcd vhci_hcd.3: disconnect device [ 94.574475][ T168] vhci_hcd vhci_hcd.3: stop threads [ 94.574501][ T168] vhci_hcd vhci_hcd.3: release socket [ 94.574515][ T168] vhci_hcd vhci_hcd.3: disconnect device [ 94.598684][ T168] vhci_hcd vhci_hcd.3: stop threads [ 94.598703][ T168] vhci_hcd vhci_hcd.3: release socket [ 94.598719][ T168] vhci_hcd vhci_hcd.3: disconnect device [ 94.598859][ T168] vhci_hcd vhci_hcd.3: stop threads [ 94.598873][ T168] vhci_hcd vhci_hcd.3: release socket [ 94.598951][ T168] vhci_hcd vhci_hcd.3: disconnect device [ 94.754400][ T5511] program syz.5.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.824413][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.556'. [ 95.147067][ T5529] X.509: Couldn't decode AuthKeyIdentifier [ 95.179394][ T5531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=5531 comm=syz.5.558 [ 95.179540][ T5531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=5531 comm=syz.5.558 [ 95.179779][ T5531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=5531 comm=syz.5.558 [ 95.179986][ T5531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=5531 comm=syz.5.558 [ 95.180256][ T5531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=5531 comm=syz.5.558 [ 95.180441][ T5531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=5531 comm=syz.5.558 [ 95.180711][ T5531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=5531 comm=syz.5.558 [ 95.566020][ T5508] syz.6.554 (5508) used greatest stack depth: 10240 bytes left [ 95.795891][ T5546] loop2: detected capacity change from 0 to 2048 [ 95.812909][ T5546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.025910][ T5559] program syz.5.567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.089105][ T5561] loop5: detected capacity change from 0 to 736 [ 96.103411][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.158309][ T5561] rock: directory entry would overflow storage [ 96.158331][ T5561] rock: sig=0x3b10, size=4, remaining=3 [ 96.190116][ T29] audit: type=1400 audit(1791702745.635:348): avc: denied { mount } for pid=5560 comm="syz.5.569" name="/" dev="loop5" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 96.252243][ T29] audit: type=1400 audit(1791702745.715:349): avc: denied { unmount } for pid=3766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 96.309567][ T5563] X.509: Couldn't decode AuthKeyIdentifier [ 96.421287][ T29] audit: type=1400 audit(1791702745.885:350): avc: denied { read } for pid=5564 comm="syz.5.571" path="socket:[10714]" dev="sockfs" ino=10714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.553996][ T29] audit: type=1400 audit(1791702746.015:351): avc: denied { shutdown } for pid=5564 comm="syz.5.571" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.765229][ T5586] loop5: detected capacity change from 0 to 2048 [ 96.781361][ T5586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.996341][ T3766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.441783][ T5630] loop3: detected capacity change from 0 to 2048 [ 97.461123][ T5630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.479869][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.679575][ T5661] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 98.679598][ T5661] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.679625][ T5661] vhci_hcd vhci_hcd.0: Device attached [ 98.754685][ T5665] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 98.754711][ T5665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.754734][ T5665] vhci_hcd vhci_hcd.0: Device attached [ 98.755664][ T5665] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(11) [ 98.755688][ T5665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.755710][ T5665] vhci_hcd vhci_hcd.0: Device attached [ 98.802477][ T5661] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 98.802498][ T5661] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.802526][ T5661] vhci_hcd vhci_hcd.0: Device attached [ 98.939757][ T37] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 98.997685][ T5668] vhci_hcd: connection closed [ 98.997955][ T5664] vhci_hcd: connection closed [ 98.998312][ T5662] vhci_hcd: connection reset by peer [ 98.998456][ T5666] vhci_hcd: connection closed [ 98.999006][ T168] vhci_hcd vhci_hcd.5: stop threads [ 98.999024][ T168] vhci_hcd vhci_hcd.5: release socket [ 98.999051][ T168] vhci_hcd vhci_hcd.5: disconnect device [ 99.008092][ T168] vhci_hcd vhci_hcd.5: stop threads [ 99.008111][ T168] vhci_hcd vhci_hcd.5: release socket [ 99.008168][ T168] vhci_hcd vhci_hcd.5: disconnect device [ 99.008300][ T168] vhci_hcd vhci_hcd.5: stop threads [ 99.008315][ T168] vhci_hcd vhci_hcd.5: release socket [ 99.008333][ T168] vhci_hcd vhci_hcd.5: disconnect device [ 99.021765][ T168] vhci_hcd vhci_hcd.5: stop threads [ 99.021791][ T168] vhci_hcd vhci_hcd.5: release socket [ 99.021820][ T168] vhci_hcd vhci_hcd.5: disconnect device [ 99.179304][ T5684] tipc: Enabling of bearer rejected, already enabled [ 99.345135][ T29] audit: type=1400 audit(1791702748.805:352): avc: denied { setopt } for pid=5695 comm="syz.6.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.555895][ T29] audit: type=1400 audit(1791702748.995:353): avc: denied { append } for pid=5695 comm="syz.6.615" name="uprobe_events" dev="tracefs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 99.555929][ T29] audit: type=1400 audit(1791702748.995:354): avc: denied { open } for pid=5695 comm="syz.6.615" path="/89/tracing/uprobe_events" dev="tracefs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 99.555952][ T29] audit: type=1400 audit(1791702748.995:355): avc: denied { write } for pid=5695 comm="syz.6.615" name="uprobe_events" dev="tracefs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.176735][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 101.192705][ T5710] bond0: (slave bond_slave_0): Releasing backup interface [ 101.340559][ T5712] loop4: detected capacity change from 0 to 7 [ 101.384102][ T5710] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 101.457900][ T29] audit: type=1400 audit(1791702750.915:356): avc: denied { name_connect } for pid=5718 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 101.702838][ T29] audit: type=1400 audit(1791702751.165:357): avc: denied { write } for pid=5722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.705576][ T29] audit: type=1400 audit(1791702751.165:358): avc: denied { write } for pid=5742 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.755089][ T919] wiimote 0005:057E:0306.0003: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 101.755209][ T919] wiimote 0005:057E:0306.0003: New device registered [ 101.755619][ T5748] wiimote 0005:057E:0306.0003: Device removed [ 101.783130][ T29] audit: type=1400 audit(1791702751.245:359): avc: denied { write } for pid=5754 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.792009][ T5755] fido_id[5755]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.832910][ T5758] loop4: detected capacity change from 0 to 7 [ 101.939883][ T29] audit: type=1400 audit(1791702751.395:360): avc: denied { write } for pid=5766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.955533][ T29] audit: type=1400 audit(1791702751.415:361): avc: denied { write } for pid=5781 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.878567][ T5808] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 102.878592][ T5808] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.878657][ T5808] vhci_hcd vhci_hcd.0: Device attached [ 102.906006][ T5808] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 102.906035][ T5808] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.906062][ T5808] vhci_hcd vhci_hcd.0: Device attached [ 102.909444][ T5808] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9) [ 102.909531][ T5808] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.909610][ T5808] vhci_hcd vhci_hcd.0: Device attached [ 102.951813][ T5808] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(11) [ 102.951888][ T5808] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.951913][ T5808] vhci_hcd vhci_hcd.0: Device attached [ 102.956845][ T5813] vhci_hcd: connection closed [ 102.957085][ T5811] vhci_hcd: connection closed [ 102.957212][ T5809] vhci_hcd: connection closed [ 102.957340][ T5815] vhci_hcd: connection closed [ 102.957594][ T168] vhci_hcd vhci_hcd.6: stop threads [ 102.957612][ T168] vhci_hcd vhci_hcd.6: release socket [ 102.957625][ T168] vhci_hcd vhci_hcd.6: disconnect device [ 102.957802][ T168] vhci_hcd vhci_hcd.6: stop threads [ 102.957815][ T168] vhci_hcd vhci_hcd.6: release socket [ 102.957827][ T168] vhci_hcd vhci_hcd.6: disconnect device [ 102.957920][ T168] vhci_hcd vhci_hcd.6: stop threads [ 102.957953][ T168] vhci_hcd vhci_hcd.6: release socket [ 102.957965][ T168] vhci_hcd vhci_hcd.6: disconnect device [ 102.958161][ T168] vhci_hcd vhci_hcd.6: stop threads [ 102.958196][ T168] vhci_hcd vhci_hcd.6: release socket [ 102.958244][ T168] vhci_hcd vhci_hcd.6: disconnect device [ 103.023793][ T919] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 103.026151][ T919] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input13 [ 103.031085][ T919] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input14 [ 103.037187][ T919] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input12 [ 103.273149][ T5822] loop4: detected capacity change from 0 to 7 [ 103.309185][ T5825] loop5: detected capacity change from 0 to 512 [ 103.309573][ T5825] EXT4-fs: test_dummy_encryption option not supported [ 104.172344][ T37] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 104.237235][ T5839] netlink: 'syz.6.654': attribute type 2 has an invalid length. [ 104.238000][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.238036][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.238116][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.238216][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.238310][ T5842] bridge0: entered promiscuous mode [ 104.238340][ T5842] bridge0: entered allmulticast mode [ 104.463994][ T29] audit: type=1400 audit(1791702753.915:362): avc: denied { mount } for pid=5859 comm="syz.3.661" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.573261][ T29] audit: type=1400 audit(1791702754.035:363): avc: denied { read write } for pid=5863 comm="syz.4.662" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.573633][ T29] audit: type=1400 audit(1791702754.035:364): avc: denied { open } for pid=5863 comm="syz.4.662" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 105.086730][ T29] audit: type=1400 audit(1791702754.475:365): avc: denied { create } for pid=5863 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.144163][ T5871] loop5: detected capacity change from 0 to 512 [ 105.150236][ T5871] EXT4-fs: test_dummy_encryption option not supported [ 105.532346][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.532379][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.532469][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.532522][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.846965][ T5890] loop4: detected capacity change from 0 to 7 [ 105.969670][ T5897] syzkaller1: entered promiscuous mode [ 105.969735][ T5897] syzkaller1: entered allmulticast mode [ 106.039506][ T5901] loop5: detected capacity change from 0 to 512 [ 106.046211][ T5901] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.675: corrupted in-inode xattr: invalid ea_ino [ 106.046247][ T5901] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.046383][ T5901] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.675: couldn't read orphan inode 15 (err -117) [ 106.046408][ T5901] loop5: lost filesystem error report for type 5 error -117 [ 106.071943][ T5901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.129131][ T3766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.669469][ T5916] bridge_slave_0: left allmulticast mode [ 106.669563][ T5916] bridge_slave_0: left promiscuous mode [ 106.669734][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.682506][ T5916] bridge_slave_1: left allmulticast mode [ 106.682526][ T5916] bridge_slave_1: left promiscuous mode [ 106.682621][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.707951][ T5916] bond0: (slave bond_slave_0): Releasing backup interface [ 106.717606][ T5916] bond0: (slave bond_slave_1): Releasing backup interface [ 106.728138][ T5916] team0: Port device team_slave_0 removed [ 106.738372][ T5916] team0: Port device team_slave_1 removed [ 106.739409][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.739462][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.742646][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.742661][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.747630][ T5916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.774543][ T5917] team0: Port device xfrm0 added [ 106.969971][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 106.969987][ T29] audit: type=1400 audit(1791702756.435:370): avc: denied { read } for pid=5918 comm="syz.6.681" name="uprobe_events" dev="tracefs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 106.989671][ T5921] netlink: 'syz.6.682': attribute type 2 has an invalid length. [ 108.670505][ T5883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.473303][ T5979] loop6: detected capacity change from 0 to 736 [ 109.480698][ T5979] rock: directory entry would overflow storage [ 109.480710][ T5979] rock: sig=0x3b10, size=4, remaining=3 [ 109.654668][ T5986] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.655057][ T5986] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.817269][ T5996] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 109.817293][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.817330][ T5996] vhci_hcd vhci_hcd.0: Device attached [ 109.818951][ T5996] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 109.819044][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.819074][ T5996] vhci_hcd vhci_hcd.0: Device attached [ 109.862051][ T5996] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 109.862072][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.862095][ T5996] vhci_hcd vhci_hcd.0: Device attached [ 109.863894][ T5996] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 109.863921][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.863960][ T5996] vhci_hcd vhci_hcd.0: Device attached [ 110.035864][ T6013] loop4: detected capacity change from 0 to 736 [ 110.052392][ T6013] rock: directory entry would overflow storage [ 110.052404][ T6013] rock: sig=0x3b10, size=4, remaining=3 [ 110.072183][ T3342] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 110.184799][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.184968][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.397512][ T29] audit: type=1400 audit(1791702759.855:371): avc: denied { remount } for pid=6023 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.648098][ T6003] vhci_hcd: connection closed [ 110.648338][ T6001] vhci_hcd: connection closed [ 110.648449][ T5999] vhci_hcd: connection closed [ 110.648583][ T5997] vhci_hcd: connection reset by peer [ 110.649194][ T31] vhci_hcd vhci_hcd.3: stop threads [ 110.649211][ T31] vhci_hcd vhci_hcd.3: release socket [ 110.649377][ T31] vhci_hcd vhci_hcd.3: disconnect device [ 110.689418][ T31] vhci_hcd vhci_hcd.3: stop threads [ 110.689435][ T31] vhci_hcd vhci_hcd.3: release socket [ 110.701865][ T31] vhci_hcd vhci_hcd.3: disconnect device [ 110.809910][ T31] vhci_hcd vhci_hcd.3: stop threads [ 110.810018][ T31] vhci_hcd vhci_hcd.3: release socket [ 110.810045][ T31] vhci_hcd vhci_hcd.3: disconnect device [ 110.810315][ T31] vhci_hcd vhci_hcd.3: stop threads [ 110.810408][ T31] vhci_hcd vhci_hcd.3: release socket [ 110.810491][ T31] vhci_hcd vhci_hcd.3: disconnect device [ 110.971852][ T9] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 110.972541][ T9] wiimote 0005:057E:0306.0004: New device registered [ 110.975109][ T6041] wiimote 0005:057E:0306.0004: Device removed [ 111.018472][ T6043] fido_id[6043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.019760][ T9] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 112.024182][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input16 [ 112.025105][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input17 [ 112.026120][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input15 [ 112.539771][ T5981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.576716][ T29] audit: type=1400 audit(1791702762.035:372): avc: denied { append } for pid=6061 comm="syz.2.732" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.622518][ T6063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.622626][ T6063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.670957][ T6072] loop2: detected capacity change from 0 to 512 [ 112.672741][ T6072] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 112.674575][ T6072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 112.674625][ T6072] System zones: 1-12 [ 112.674723][ T6072] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.674812][ T6072] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.736: invalid indirect mapped block 12 (level 1) [ 112.674882][ T6072] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.674977][ T6072] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.736: invalid indirect mapped block 2 (level 2) [ 112.675008][ T6072] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.675764][ T6072] EXT4-fs (loop2): 1 truncate cleaned up [ 112.676137][ T6072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 113.186840][ T6080] netlink: 'syz.4.737': attribute type 2 has an invalid length. [ 113.409731][ T29] audit: type=1400 audit(1791702762.845:373): avc: denied { write } for pid=6077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.471580][ T29] audit: type=1400 audit(1791702762.935:374): avc: denied { write } for pid=6092 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.714918][ T6100] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 113.715024][ T6100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.715053][ T6100] vhci_hcd vhci_hcd.0: Device attached [ 113.715511][ T6100] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 113.715603][ T6100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.715670][ T6100] vhci_hcd vhci_hcd.0: Device attached [ 113.716056][ T6100] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 113.716077][ T6100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.716105][ T6100] vhci_hcd vhci_hcd.0: Device attached [ 113.716622][ T6100] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 113.716642][ T6100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.716679][ T6100] vhci_hcd vhci_hcd.0: Device attached [ 113.717579][ T6101] vhci_hcd: connection closed [ 113.717838][ T168] vhci_hcd vhci_hcd.3: stop threads [ 113.717854][ T168] vhci_hcd vhci_hcd.3: release socket [ 113.717871][ T168] vhci_hcd vhci_hcd.3: disconnect device [ 113.717966][ T6103] vhci_hcd: connection closed [ 113.718160][ T168] vhci_hcd vhci_hcd.3: stop threads [ 113.718229][ T168] vhci_hcd vhci_hcd.3: release socket [ 113.718330][ T168] vhci_hcd vhci_hcd.3: disconnect device [ 113.718361][ T6105] vhci_hcd: connection closed [ 113.718491][ T6107] vhci_hcd: connection closed [ 113.718697][ T168] vhci_hcd vhci_hcd.3: stop threads [ 113.718710][ T168] vhci_hcd vhci_hcd.3: release socket [ 113.718725][ T168] vhci_hcd vhci_hcd.3: disconnect device [ 113.718927][ T168] vhci_hcd vhci_hcd.3: stop threads [ 113.718953][ T168] vhci_hcd vhci_hcd.3: release socket [ 113.718968][ T168] vhci_hcd vhci_hcd.3: disconnect device [ 114.110319][ T29] audit: type=1400 audit(1791702763.575:375): avc: denied { write } for pid=6109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.150767][ T29] audit: type=1400 audit(1791702763.615:376): avc: denied { write } for pid=6120 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.307358][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 114.577146][ T6139] FAULT_INJECTION: forcing a failure. [ 114.577146][ T6139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.577180][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.4.747 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.577206][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.577219][ T6139] Call Trace: [ 114.577225][ T6139] [ 114.577302][ T6139] __dump_stack+0x1d/0x30 [ 114.577327][ T6139] dump_stack_lvl+0x95/0xd0 [ 114.577351][ T6139] dump_stack+0x15/0x1b [ 114.577375][ T6139] should_fail_ex+0x262/0x280 [ 114.577433][ T6139] should_fail+0xb/0x20 [ 114.577457][ T6139] should_fail_usercopy+0x1a/0x20 [ 114.577505][ T6139] strncpy_from_user+0x27/0x250 [ 114.577533][ T6139] keyctl_keyring_search+0x5b/0x2f0 [ 114.577568][ T6139] __se_sys_keyctl+0x30f/0xb70 [ 114.577599][ T6139] ? __se_sys_futex+0x2f6/0x370 [ 114.577690][ T6139] ? xfd_validate_state+0x45/0xf0 [ 114.577721][ T6139] ? restore_fpregs_from_fpstate+0x61/0x110 [ 114.577743][ T6139] __x64_sys_keyctl+0x67/0x80 [ 114.577822][ T6139] x64_sys_call+0x1fe0/0x2550 [ 114.577852][ T6139] do_syscall_64+0x112/0x360 [ 114.577914][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.577936][ T6139] RIP: 0033:0x7f223273e1d9 [ 114.577957][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.577976][ T6139] RSP: 002b:00007f2231197028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 114.577995][ T6139] RAX: ffffffffffffffda RBX: 00007f22329c5fa0 RCX: 00007f223273e1d9 [ 114.578018][ T6139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 114.578106][ T6139] RBP: 00007f22327d5888 R08: 0000000000000000 R09: 0000000000000000 [ 114.578122][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.578136][ T6139] R13: 00007f22329c6038 R14: 00007f22329c5fa0 R15: 00007ffec7fb59b8 [ 114.578157][ T6139] [ 115.209842][ T3342] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 115.272013][ T6147] loop2: detected capacity change from 0 to 2048 [ 115.287273][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.463010][ T6150] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 115.516802][ T6153] syzkaller0: entered promiscuous mode [ 115.516825][ T6153] syzkaller0: entered allmulticast mode [ 115.702917][ T6157] loop4: detected capacity change from 0 to 7 [ 115.786483][ T6164] netlink: 'syz.4.755': attribute type 2 has an invalid length. [ 116.089821][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.291013][ T6174] selinux_netlink_send: 36 callbacks suppressed [ 116.291041][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 116.291138][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 116.291405][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 116.291495][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 116.291656][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 116.292014][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 116.292467][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 116.292584][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 116.292984][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 116.293113][ T6174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=6174 comm=syz.2.759 [ 117.039333][ T6187] loop2: detected capacity change from 0 to 512 [ 117.046078][ T6187] EXT4-fs: test_dummy_encryption option not supported [ 117.800445][ T6124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.385401][ T6227] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 118.385423][ T6227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.385813][ T6227] vhci_hcd vhci_hcd.0: Device attached [ 118.386775][ T6227] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 118.386813][ T6227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.386884][ T6227] vhci_hcd vhci_hcd.0: Device attached [ 118.387696][ T6227] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 118.387715][ T6227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.387746][ T6227] vhci_hcd vhci_hcd.0: Device attached [ 118.619720][ T3388] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 119.215809][ T6232] vhci_hcd: connection closed [ 119.215979][ T6230] vhci_hcd: connection closed [ 119.215987][ T6228] vhci_hcd: connection reset by peer [ 119.216263][ T4239] vhci_hcd vhci_hcd.4: stop threads [ 119.216283][ T4239] vhci_hcd vhci_hcd.4: release socket [ 119.216321][ T4239] vhci_hcd vhci_hcd.4: disconnect device [ 119.216470][ T4239] vhci_hcd vhci_hcd.4: stop threads [ 119.216486][ T4239] vhci_hcd vhci_hcd.4: release socket [ 119.216505][ T4239] vhci_hcd vhci_hcd.4: disconnect device [ 119.216597][ T4239] vhci_hcd vhci_hcd.4: stop threads [ 119.216612][ T4239] vhci_hcd vhci_hcd.4: release socket [ 119.216630][ T4239] vhci_hcd vhci_hcd.4: disconnect device [ 119.740720][ T6270] syzkaller0: entered promiscuous mode [ 119.740734][ T6270] syzkaller0: entered allmulticast mode [ 120.195729][ T6299] syzkaller0: entered promiscuous mode [ 120.195806][ T6299] syzkaller0: entered allmulticast mode [ 120.421780][ T1512] wiimote 0005:057E:0306.0005: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 120.421865][ T1512] wiimote 0005:057E:0306.0005: New device registered [ 120.422145][ T6314] wiimote 0005:057E:0306.0005: Device removed [ 120.433330][ T6316] fido_id[6316]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.383146][ T6221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.468482][ T1512] wiimote 0005:057E:0306.0005: detected device: Nintendo Wii Remote (Gen 1) [ 121.488994][ T1512] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input19 [ 121.508745][ T1512] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input20 [ 121.530858][ T1512] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input18 [ 121.595391][ T6333] syzkaller0: entered promiscuous mode [ 121.595412][ T6333] syzkaller0: entered allmulticast mode [ 121.690479][ T6342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.690561][ T6342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.764633][ T6348] loop4: detected capacity change from 0 to 2048 [ 121.785052][ T6348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.768748][ T6372] syzkaller0: entered promiscuous mode [ 122.768766][ T6372] syzkaller0: entered allmulticast mode [ 123.769820][ T3388] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 123.912716][ T6384] syzkaller1: entered promiscuous mode [ 123.912734][ T6384] syzkaller1: entered allmulticast mode [ 123.940815][ T6351] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 123.990443][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.043615][ T6400] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 124.043638][ T6400] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.043684][ T6400] vhci_hcd vhci_hcd.0: Device attached [ 124.044454][ T6400] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 124.044506][ T6400] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.044535][ T6400] vhci_hcd vhci_hcd.0: Device attached [ 124.044997][ T6400] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 124.045019][ T6400] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.045049][ T6400] vhci_hcd vhci_hcd.0: Device attached [ 124.045633][ T6400] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 124.045654][ T6400] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.045727][ T6400] vhci_hcd vhci_hcd.0: Device attached [ 124.046527][ T6400] netlink: 'syz.4.847': attribute type 12 has an invalid length. [ 124.046886][ T6401] vhci_hcd: connection closed [ 124.046959][ T6403] vhci_hcd: connection closed [ 124.047069][ T6407] vhci_hcd: connection closed [ 124.047177][ T6405] vhci_hcd: connection closed [ 124.047423][ T705] vhci_hcd vhci_hcd.4: stop threads [ 124.047442][ T705] vhci_hcd vhci_hcd.4: release socket [ 124.047462][ T705] vhci_hcd vhci_hcd.4: disconnect device [ 124.047600][ T705] vhci_hcd vhci_hcd.4: stop threads [ 124.047614][ T705] vhci_hcd vhci_hcd.4: release socket [ 124.047790][ T705] vhci_hcd vhci_hcd.4: disconnect device [ 124.047876][ T705] vhci_hcd vhci_hcd.4: stop threads [ 124.047922][ T705] vhci_hcd vhci_hcd.4: release socket [ 124.047937][ T705] vhci_hcd vhci_hcd.4: disconnect device [ 124.048091][ T705] vhci_hcd vhci_hcd.4: stop threads [ 124.048105][ T705] vhci_hcd vhci_hcd.4: release socket [ 124.048123][ T705] vhci_hcd vhci_hcd.4: disconnect device [ 124.252987][ T6415] syzkaller0: entered promiscuous mode [ 124.253008][ T6415] syzkaller0: entered allmulticast mode [ 124.381585][ T6424] loop2: detected capacity change from 0 to 2048 [ 124.401711][ T6424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.860184][ T6439] loop4: detected capacity change from 0 to 512 [ 124.890027][ T6439] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 125.089045][ T6445] syzkaller0: entered promiscuous mode [ 125.089062][ T6445] syzkaller0: entered allmulticast mode [ 125.233947][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.234061][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.257119][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.276185][ T6457] syzkaller1: entered promiscuous mode [ 125.276198][ T6457] syzkaller1: entered allmulticast mode [ 125.465744][ T6465] loop2: detected capacity change from 0 to 128 [ 126.019145][ T6483] loop6: detected capacity change from 0 to 2048 [ 126.031130][ T6483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.168586][ T6488] loop4: detected capacity change from 0 to 7 [ 127.392356][ T4379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.824804][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 127.852781][ T6518] loop4: detected capacity change from 0 to 7 [ 128.104003][ T6536] loop3: detected capacity change from 0 to 2048 [ 128.116017][ T6536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.986986][ T6554] loop2: detected capacity change from 0 to 512 [ 129.000536][ T6554] EXT4-fs: test_dummy_encryption option not supported [ 129.225329][ T6558] selinux_netlink_send: 151 callbacks suppressed [ 129.225345][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.225454][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.225569][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.225651][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.225777][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.226967][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.227093][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.227167][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.227934][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.228025][ T6558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=6558 comm=syz.2.907 [ 129.315261][ T29] audit: type=1400 audit(1791702778.765:377): avc: denied { read } for pid=6560 comm="syz.4.908" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.315349][ T29] audit: type=1400 audit(1791702778.765:378): avc: denied { open } for pid=6560 comm="syz.4.908" path="/184/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.799350][ T6577] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 129.799446][ T6577] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.799559][ T6577] vhci_hcd vhci_hcd.0: Device attached [ 129.810059][ T6577] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 129.810084][ T6577] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.810178][ T6577] vhci_hcd vhci_hcd.0: Device attached [ 129.810721][ T6577] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 129.810746][ T6577] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.810782][ T6577] vhci_hcd vhci_hcd.0: Device attached [ 129.811235][ T6577] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 129.811298][ T6577] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.811323][ T6577] vhci_hcd vhci_hcd.0: Device attached [ 129.817073][ T6583] vhci_hcd: connection closed [ 129.817155][ T6585] vhci_hcd: connection closed [ 129.817391][ T6581] vhci_hcd: connection closed [ 129.817590][ T177] vhci_hcd vhci_hcd.4: stop threads [ 129.817608][ T177] vhci_hcd vhci_hcd.4: release socket [ 129.817623][ T177] vhci_hcd vhci_hcd.4: disconnect device [ 129.817894][ T177] vhci_hcd vhci_hcd.4: stop threads [ 129.817914][ T177] vhci_hcd vhci_hcd.4: release socket [ 129.817974][ T177] vhci_hcd vhci_hcd.4: disconnect device [ 129.818047][ T177] vhci_hcd vhci_hcd.4: stop threads [ 129.818064][ T177] vhci_hcd vhci_hcd.4: release socket [ 129.818078][ T177] vhci_hcd vhci_hcd.4: disconnect device [ 129.869743][ T6578] vhci_hcd: connection closed [ 129.870001][ T31] vhci_hcd vhci_hcd.4: stop threads [ 129.870019][ T31] vhci_hcd vhci_hcd.4: release socket [ 129.870035][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 129.981126][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.191628][ T6600] loop4: detected capacity change from 0 to 7 [ 130.487892][ T6611] loop2: detected capacity change from 0 to 2048 [ 130.497614][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.839943][ T6614] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 131.704559][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.854962][ T6654] syzkaller1: entered promiscuous mode [ 131.854979][ T6654] syzkaller1: entered allmulticast mode [ 131.857428][ T6655] loop4: detected capacity change from 0 to 7 [ 132.724783][ T29] audit: type=1400 audit(1791702782.185:379): avc: denied { write } for pid=6663 comm="syz.6.947" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.118126][ T29] audit: type=1400 audit(1791702782.575:380): avc: denied { mount } for pid=6693 comm="syz.4.961" name="/" dev="ramfs" ino=14686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 133.142229][ T6702] netlink: 'syz.5.963': attribute type 2 has an invalid length. [ 133.251476][ T6706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.956'. [ 134.695443][ T6727] selinux_netlink_send: 55 callbacks suppressed [ 134.695465][ T6727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6727 comm=syz.3.971 [ 134.725207][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.975'. [ 134.768498][ T6740] FAULT_INJECTION: forcing a failure. [ 134.768498][ T6740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.768556][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.5.977 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.768589][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.768597][ T6740] Call Trace: [ 134.768601][ T6740] [ 134.768606][ T6740] __dump_stack+0x1d/0x30 [ 134.768673][ T6740] dump_stack_lvl+0x95/0xd0 [ 134.768751][ T6740] dump_stack+0x15/0x1b [ 134.768825][ T6740] should_fail_ex+0x262/0x280 [ 134.768843][ T6740] should_fail+0xb/0x20 [ 134.768858][ T6740] should_fail_usercopy+0x1a/0x20 [ 134.768876][ T6740] strncpy_from_user+0x27/0x250 [ 134.768934][ T6740] keyctl_keyring_search+0x5b/0x2f0 [ 134.768979][ T6740] __se_sys_keyctl+0x30f/0xb70 [ 134.768998][ T6740] ? __se_sys_futex+0x2f6/0x370 [ 134.769045][ T6740] __x64_sys_keyctl+0x67/0x80 [ 134.769062][ T6740] x64_sys_call+0x1fe0/0x2550 [ 134.769077][ T6740] do_syscall_64+0x112/0x360 [ 134.769166][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.769250][ T6740] RIP: 0033:0x7ff1eca6e1d9 [ 134.769264][ T6740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.769276][ T6740] RSP: 002b:00007ff1eb4c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 134.769289][ T6740] RAX: ffffffffffffffda RBX: 00007ff1eccf5fa0 RCX: 00007ff1eca6e1d9 [ 134.769298][ T6740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 134.769366][ T6740] RBP: 00007ff1ecb05888 R08: 0000000000000000 R09: 0000000000000000 [ 134.769374][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.769382][ T6740] R13: 00007ff1eccf6038 R14: 00007ff1eccf5fa0 R15: 00007fff570b2398 [ 134.769460][ T6740] [ 135.687577][ T6755] FAULT_INJECTION: forcing a failure. [ 135.687577][ T6755] name failslab, interval 1, probability 0, space 0, times 0 [ 135.687610][ T6755] CPU: 1 UID: 0 PID: 6755 Comm: syz.2.981 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.687633][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.687646][ T6755] Call Trace: [ 135.687652][ T6755] [ 135.687659][ T6755] __dump_stack+0x1d/0x30 [ 135.687732][ T6755] dump_stack_lvl+0x95/0xd0 [ 135.687859][ T6755] dump_stack+0x15/0x1b [ 135.687887][ T6755] should_fail_ex+0x262/0x280 [ 135.687916][ T6755] should_failslab+0x8c/0xb0 [ 135.687965][ T6755] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 135.687998][ T6755] ? alloc_inode+0x9a/0x170 [ 135.688089][ T6755] ? alloc_inode+0x9a/0x170 [ 135.688112][ T6755] alloc_inode+0x9a/0x170 [ 135.688139][ T6755] alloc_anon_inode+0x1e/0x170 [ 135.688219][ T6755] anon_inode_make_secure_inode+0x35/0x110 [ 135.688295][ T6755] __anon_inode_getfile+0xa5/0x180 [ 135.688351][ T6755] anon_inode_create_getfile+0x38/0x50 [ 135.688421][ T6755] io_uring_create+0x3ca/0x4f0 [ 135.688459][ T6755] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 135.688526][ T6755] __x64_sys_io_uring_setup+0x31/0x40 [ 135.688609][ T6755] x64_sys_call+0x1fbf/0x2550 [ 135.688710][ T6755] do_syscall_64+0x112/0x360 [ 135.688736][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.688761][ T6755] RIP: 0033:0x7ff4bb70e1d9 [ 135.688776][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.688793][ T6755] RSP: 002b:00007ff4ba166fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 135.688870][ T6755] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007ff4bb70e1d9 [ 135.688892][ T6755] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 135.688909][ T6755] RBP: 00007ff4bb7a5888 R08: 0000000000000000 R09: 0000000000000000 [ 135.688924][ T6755] R10: 0000200000000740 R11: 0000000000000206 R12: 0000200000000000 [ 135.688941][ T6755] R13: 0000200000000740 R14: 0000000000000000 R15: 00007ffde2ae30c8 [ 135.688980][ T6755] [ 135.914924][ T6759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=6759 comm=syz.6.985 [ 135.915085][ T6759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=6759 comm=syz.6.985 [ 135.915235][ T6759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=6759 comm=syz.6.985 [ 135.915312][ T6759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=6759 comm=syz.6.985 [ 135.915553][ T6759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=6759 comm=syz.6.985 [ 135.915673][ T6759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=6759 comm=syz.6.985 [ 135.915760][ T6759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=6759 comm=syz.6.985 [ 135.915852][ T6759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=6759 comm=syz.6.985 [ 135.915998][ T6759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=6759 comm=syz.6.985 [ 135.987402][ T6762] netlink: 'syz.3.983': attribute type 2 has an invalid length. [ 136.116201][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'. [ 136.126597][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.982'. [ 138.179326][ T29] audit: type=1400 audit(1791702787.635:381): avc: denied { recv } for pid=3305 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.113 dest=57478 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 139.328881][ T6866] netlink: 'syz.5.1023': attribute type 2 has an invalid length. [ 139.797341][ T6900] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 139.797366][ T6900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.797407][ T6900] vhci_hcd vhci_hcd.0: Device attached [ 139.798287][ T6900] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 139.798312][ T6900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.798370][ T6900] vhci_hcd vhci_hcd.0: Device attached [ 139.798927][ T6900] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 139.799011][ T6900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.799087][ T6900] vhci_hcd vhci_hcd.0: Device attached [ 139.799485][ T6900] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 139.799530][ T6900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.799552][ T6900] vhci_hcd vhci_hcd.0: Device attached [ 139.801488][ T6901] vhci_hcd: connection closed [ 139.801756][ T31] vhci_hcd vhci_hcd.4: stop threads [ 139.801807][ T31] vhci_hcd vhci_hcd.4: release socket [ 139.801821][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 139.801839][ T6907] vhci_hcd: connection closed [ 139.802000][ T31] vhci_hcd vhci_hcd.4: stop threads [ 139.802014][ T31] vhci_hcd vhci_hcd.4: release socket [ 139.802039][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 139.802056][ T6905] vhci_hcd: connection closed [ 139.802342][ T31] vhci_hcd vhci_hcd.4: stop threads [ 139.802357][ T31] vhci_hcd vhci_hcd.4: release socket [ 139.802371][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 139.802409][ T6903] vhci_hcd: connection closed [ 139.802672][ T31] vhci_hcd vhci_hcd.4: stop threads [ 139.802686][ T31] vhci_hcd vhci_hcd.4: release socket [ 139.802746][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 140.312057][ T6912] syzkaller1: entered promiscuous mode [ 140.312146][ T6912] syzkaller1: entered allmulticast mode [ 140.422292][ T6916] loop4: detected capacity change from 0 to 7 [ 140.446737][ T29] audit: type=1400 audit(1791702789.905:382): avc: denied { create } for pid=6917 comm="syz.2.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.875717][ T6949] syzkaller1: entered promiscuous mode [ 140.875813][ T6949] syzkaller1: entered allmulticast mode [ 140.891083][ T29] audit: type=1400 audit(1791702790.325:383): avc: denied { block_suspend } for pid=6934 comm="syz.6.1045" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.757604][ T6972] syz_tun: entered allmulticast mode [ 141.896450][ T6976] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 141.896497][ T6976] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.898092][ T6976] vhci_hcd vhci_hcd.0: Device attached [ 142.034443][ T6980] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 142.034489][ T6980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 142.034519][ T6980] vhci_hcd vhci_hcd.0: Device attached [ 142.037227][ T6980] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(12) [ 142.037329][ T6980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 142.037841][ T6980] vhci_hcd vhci_hcd.0: Device attached [ 142.139907][ T6976] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 142.139930][ T6976] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 142.139956][ T6976] vhci_hcd vhci_hcd.0: Device attached [ 142.141787][ T6977] vhci_hcd: connection closed [ 142.143068][ T6979] vhci_hcd: connection closed [ 142.143157][ T6981] vhci_hcd: connection closed [ 142.143299][ T6983] vhci_hcd: connection closed [ 142.143381][ T168] vhci_hcd vhci_hcd.4: stop threads [ 142.143397][ T168] vhci_hcd vhci_hcd.4: release socket [ 142.143441][ T168] vhci_hcd vhci_hcd.4: disconnect device [ 142.143579][ T168] vhci_hcd vhci_hcd.4: stop threads [ 142.143594][ T168] vhci_hcd vhci_hcd.4: release socket [ 142.143611][ T168] vhci_hcd vhci_hcd.4: disconnect device [ 142.143738][ T168] vhci_hcd vhci_hcd.4: stop threads [ 142.143768][ T168] vhci_hcd vhci_hcd.4: release socket [ 142.143783][ T168] vhci_hcd vhci_hcd.4: disconnect device [ 142.143960][ T168] vhci_hcd vhci_hcd.4: stop threads [ 142.143972][ T168] vhci_hcd vhci_hcd.4: release socket [ 142.143989][ T168] vhci_hcd vhci_hcd.4: disconnect device [ 142.200403][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 142.225683][ T6994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.227844][ T6994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.265494][ T6997] syzkaller1: entered promiscuous mode [ 142.265513][ T6997] syzkaller1: entered allmulticast mode [ 142.430980][ T7003] x_tables: ip6_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 142.491469][ T6994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.491877][ T6994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.699115][ T3308] ================================================================== [ 142.699151][ T3308] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 142.699186][ T3308] [ 142.699191][ T3308] read-write to 0xffff88811bdeec88 of 8 bytes by task 7004 on cpu 0: [ 142.699206][ T3308] inode_add_bytes+0x47/0xe0 [ 142.699230][ T3308] __dquot_alloc_space+0x17d/0x890 [ 142.699252][ T3308] shmem_inode_acct_blocks+0x125/0x230 SYZFAIL: failed to recv rpc [ 142.699284][ T3308] shmem_get_folio_gfp+0x5d3/0xd90 [ 142.699317][ T3308] shmem_write_begin+0xfc/0x1f0 [ 142.699350][ T3308] generic_perform_write+0x186/0x490 [ 142.699377][ T3308] shmem_file_write_iter+0xc5/0xf0 [ 142.699399][ T3308] __kernel_write_iter+0x30f/0x590 [ 142.699432][ T3308] dump_user_range+0xa73/0xd00 [ 142.699452][ T3308] elf_core_dump+0x21c0/0x2340 [ 142.699475][ T3308] coredump_write+0xafb/0xdd0 [ 142.699494][ T3308] vfs_coredump+0x2762/0x3270 [ 142.699526][ T3308] get_signal+0xd33/0xf10 [ 142.699557][ T3308] arch_do_signal_or_restart+0x96/0x480 [ 142.699588][ T3308] irqentry_exit+0x14d/0x610 [ 142.699610][ T3308] asm_exc_page_fault+0x26/0x30 [ 142.699632][ T3308] [ 142.699638][ T3308] read to 0xffff88811bdeec88 of 8 bytes by task 3308 on cpu 1: [ 142.699657][ T3308] generic_fillattr+0x283/0x340 [ 142.699681][ T3308] shmem_getattr+0x18b/0x210 [ 142.699700][ T3308] vfs_getattr_nosec+0x146/0x1e0 [ 142.699719][ T3308] vfs_getattr+0x48/0x60 [ 142.699737][ T3308] vfs_statx_path+0x28/0x140 [ 142.699762][ T3308] vfs_statx+0xc4/0x170 [ 142.699783][ T3308] vfs_fstatat+0x118/0x170 [ 142.699805][ T3308] __se_sys_newfstatat+0x55/0x3e0 [ 142.699837][ T3308] __x64_sys_newfstatat+0x55/0x70 [ 142.699860][ T3308] x64_sys_call+0xee6/0x2550 [ 142.699888][ T3308] do_syscall_64+0x112/0x360 [ 142.699913][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.699936][ T3308] [ 142.699940][ T3308] value changed: 0x000000000000f458 -> 0x000000000000f468 [ 142.699952][ T3308] [ 142.699956][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 142.699966][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 142.699990][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.700003][ T3308] ================================================================== [ 142.804260][ T29] audit: type=1400 audit(1791702792.215:384): avc: denied { recv } for pid=7004 comm="syz.2.1061" saddr=10.128.0.163 src=34440 daddr=10.128.1.113 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 142.814628][ T29] audit: type=1400 audit(1791702792.275:385): avc: denied { create } for pid=7007 comm="syz.3.1067" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.133107][ T3308] syz_tun (unregistering): left allmulticast mode fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 143.398320][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.463824][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.513888][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.562844][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.610369][ T31] bridge_slave_1: left allmulticast mode [ 143.610384][ T31] bridge_slave_1: left promiscuous mode [ 143.610490][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.611224][ T31] bridge_slave_0: left allmulticast mode [ 143.611235][ T31] bridge_slave_0: left promiscuous mode [ 143.611441][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.672581][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.673809][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.674694][ T31] bond0 (unregistering): Released all slaves [ 143.731939][ T31] tipc: Disabling bearer [ 143.731963][ T31] tipc: Left network mode [ 143.734561][ T31] hsr_slave_0: left promiscuous mode [ 143.734838][ T31] hsr_slave_1: left promiscuous mode [ 143.735223][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.735239][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.735556][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.735571][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.737247][ T31] veth1_macvtap: left promiscuous mode [ 143.737274][ T31] veth0_macvtap: left promiscuous mode [ 143.737392][ T31] veth1_vlan: left promiscuous mode [ 143.737422][ T31] veth0_vlan: left promiscuous mode [ 143.754954][ T29] audit: type=1400 audit(1791702793.205:386): avc: denied { write } for pid=7014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.768635][ T29] audit: type=1400 audit(1791702793.225:387): avc: denied { write } for pid=7025 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.877137][ T31] team0 (unregistering): Port device team_slave_1 removed [ 143.879568][ T31] team0 (unregistering): Port device team_slave_0 removed [ 143.917018][ T3024] 8021q: adding VLAN 0 to HW filter on device eth5 [ 143.975275][ T29] audit: type=1400 audit(1791702793.435:388): avc: denied { write } for pid=7028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.007981][ T29] audit: type=1400 audit(1791702793.465:389): avc: denied { write } for pid=7039 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.033305][ T3024] 8021q: adding VLAN 0 to HW filter on device eth6 [ 144.092326][ T29] audit: type=1400 audit(1791702793.555:390): avc: denied { write } for pid=7042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.107366][ T29] audit: type=1400 audit(1791702793.565:391): avc: denied { write } for pid=7053 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.146749][ T3024] 8021q: adding VLAN 0 to HW filter on device eth7 [ 144.203536][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.209120][ T29] audit: type=1400 audit(1791702793.665:392): avc: denied { write } for pid=7056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.248618][ T29] audit: type=1400 audit(1791702793.705:393): avc: denied { write } for pid=7067 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.274410][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.275601][ T3024] 8021q: adding VLAN 0 to HW filter on device eth8 [ 144.312850][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.372198][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.512192][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.572952][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.573327][ T29] audit: type=1400 audit(1791702794.035:394): avc: denied { write } for pid=7076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.611626][ T3024] 8021q: adding VLAN 0 to HW filter on device eth9 [ 144.614875][ T29] audit: type=1400 audit(1791702794.055:395): avc: denied { write } for pid=7087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.651608][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.692782][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.727582][ T3024] 8021q: adding VLAN 0 to HW filter on device eth11 [ 144.761869][ T31] bridge_slave_1: left allmulticast mode [ 144.761918][ T31] bridge_slave_1: left promiscuous mode [ 144.762051][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.762940][ T31] bridge_slave_0: left allmulticast mode [ 144.762956][ T31] bridge_slave_0: left promiscuous mode [ 144.763094][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.851243][ T31] team0: Port device xfrm0 removed [ 144.867335][ T31] bond0 (unregistering): Released all slaves [ 144.884367][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.885091][ T31] bond0 (unregistering): Released all slaves [ 144.887214][ T3024] 8021q: adding VLAN 0 to HW filter on device eth10 [ 144.915782][ T31] tipc: Disabling bearer [ 144.915876][ T31] tipc: Left network mode [ 144.916049][ T31] tipc: Disabling bearer [ 144.916066][ T31] tipc: Left network mode [ 144.918769][ T31] hsr_slave_0: left promiscuous mode [ 144.919052][ T31] hsr_slave_1: left promiscuous mode [ 144.934519][ T31] hsr_slave_0: left promiscuous mode [ 144.935110][ T31] hsr_slave_1: left promiscuous mode [ 144.935626][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.935730][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.945527][ T31] veth1_macvtap: left promiscuous mode [ 144.945552][ T31] veth0_macvtap: left promiscuous mode [ 144.945641][ T31] veth1_vlan: left promiscuous mode [ 144.945733][ T31] veth0_vlan: left promiscuous mode [ 144.968635][ T31] veth1_macvtap: left promiscuous mode [ 144.968706][ T31] veth0_macvtap: left promiscuous mode [ 144.968807][ T31] veth1_vlan: left promiscuous mode [ 144.968840][ T31] veth0_vlan: left promiscuous mode [ 145.119654][ T31] team0 (unregistering): Port device team_slave_1 removed [ 145.127825][ T31] team0 (unregistering): Port device team_slave_0 removed [ 145.153403][ T3024] 8021q: adding VLAN 0 to HW filter on device eth12 [ 145.248021][ T3024] 8021q: adding VLAN 0 to HW filter on device eth13 [ 145.332416][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14 [ 145.428163][ T3024] 8021q: adding VLAN 0 to HW filter on device eth15 [ 145.508580][ T3024] 8021q: adding VLAN 0 to HW filter on device eth16 [ 152.020209][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 152.020224][ T29] audit: type=1400 audit(1791702801.485:422): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 152.020273][ T29] audit: type=1400 audit(1791702801.485:423): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1