last executing test programs: 2.232852089s ago: executing program 4 (id=1535): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = epoll_create1(0x80000) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x60000015}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x502) 2.1780216s ago: executing program 4 (id=1540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) 2.148942701s ago: executing program 4 (id=1542): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.042954932s ago: executing program 4 (id=1557): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x80000000, 0x0) ptrace(0x10, r2) r3 = syz_pidfd_open(r2, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0xa000000c, 0x0) 1.634453277s ago: executing program 0 (id=1572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) 1.576171908s ago: executing program 0 (id=1574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e35"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.159684374s ago: executing program 4 (id=1578): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.159516814s ago: executing program 0 (id=1585): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r2, r4, 0x0) 1.109380265s ago: executing program 0 (id=1580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) 1.034823976s ago: executing program 0 (id=1582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 979.602637ms ago: executing program 0 (id=1584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 694.229781ms ago: executing program 2 (id=1599): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x3) 625.116152ms ago: executing program 2 (id=1602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xf, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 578.499892ms ago: executing program 1 (id=1603): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r2, r4, 0x0) 499.096493ms ago: executing program 1 (id=1606): r0 = io_uring_setup(0xf10, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x1, 0x10000003}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x2cb}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 486.925303ms ago: executing program 2 (id=1607): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x4042, 0x41}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 430.888365ms ago: executing program 1 (id=1609): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0x5, 0x0, 0x0, 0xa, 0x1}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 430.674825ms ago: executing program 2 (id=1610): unshare(0x2040600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x400000000000000, 0xfd82}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x68040200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000000)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@usrjquota}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x5, 0xffffbff7, 0x20000004, 0x40, 0x4]}, &(0x7f0000000040)=0x54) 402.791495ms ago: executing program 3 (id=1611): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000002000/0x3000)=nil) 337.904486ms ago: executing program 3 (id=1612): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 336.729986ms ago: executing program 1 (id=1622): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 251.226567ms ago: executing program 1 (id=1613): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x3) 251.005247ms ago: executing program 2 (id=1614): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5b", 0x7e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e80f1c335a9782762f86ddcd16fc0f1743a28cb34a4f94424140d31e388521f0e721b47a27da94474958ac9382a1fc6077fb43", 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r3, 0x1000) 244.644707ms ago: executing program 2 (id=1615): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8) 209.418008ms ago: executing program 1 (id=1616): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='veth1_to_bridge\x00', 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d258", 0xa9}, {0x0}], 0x3}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 200.296248ms ago: executing program 3 (id=1617): syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x408100) 131.025739ms ago: executing program 4 (id=1618): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 130.757929ms ago: executing program 3 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) 110.695889ms ago: executing program 3 (id=1620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$MAP_CREATE(0x0, 0x0, 0x50) 0s ago: executing program 3 (id=1621): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x80000001}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x10, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 34.389879][ T29] audit: type=1400 audit(1746638885.994:65): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.390999][ T3304] cgroup: Unknown subsys name 'net' [ 34.412630][ T29] audit: type=1400 audit(1746638885.994:66): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.440419][ T29] audit: type=1400 audit(1746638886.024:67): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.638144][ T3304] cgroup: Unknown subsys name 'cpuset' [ 34.650841][ T3304] cgroup: Unknown subsys name 'rlimit' [ 34.825667][ T29] audit: type=1400 audit(1746638886.424:68): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.850788][ T29] audit: type=1400 audit(1746638886.424:69): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.872895][ T29] audit: type=1400 audit(1746638886.424:70): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.893597][ T29] audit: type=1400 audit(1746638886.434:71): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.895824][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.914062][ T29] audit: type=1400 audit(1746638886.444:72): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.947985][ T29] audit: type=1400 audit(1746638886.444:73): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.961898][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.971425][ T29] audit: type=1400 audit(1746638886.524:74): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.129488][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.164712][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.173431][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.278158][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 36.297293][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.304495][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.311789][ T3318] bridge_slave_0: entered allmulticast mode [ 36.318177][ T3318] bridge_slave_0: entered promiscuous mode [ 36.333867][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.341013][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.348544][ T3318] bridge_slave_1: entered allmulticast mode [ 36.355026][ T3318] bridge_slave_1: entered promiscuous mode [ 36.402476][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.409765][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.417031][ T3315] bridge_slave_0: entered allmulticast mode [ 36.423512][ T3315] bridge_slave_0: entered promiscuous mode [ 36.430261][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.437486][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.444720][ T3315] bridge_slave_1: entered allmulticast mode [ 36.451264][ T3315] bridge_slave_1: entered promiscuous mode [ 36.460416][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.467543][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.474832][ T3314] bridge_slave_0: entered allmulticast mode [ 36.481204][ T3314] bridge_slave_0: entered promiscuous mode [ 36.488173][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.495450][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.502604][ T3314] bridge_slave_1: entered allmulticast mode [ 36.509090][ T3314] bridge_slave_1: entered promiscuous mode [ 36.515154][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.524972][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.555171][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.584979][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.602211][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.612685][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.621812][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.628927][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.637193][ T3327] bridge_slave_0: entered allmulticast mode [ 36.643589][ T3327] bridge_slave_0: entered promiscuous mode [ 36.652145][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.673760][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.680974][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.688180][ T3327] bridge_slave_1: entered allmulticast mode [ 36.694875][ T3327] bridge_slave_1: entered promiscuous mode [ 36.716466][ T3318] team0: Port device team_slave_0 added [ 36.735228][ T3314] team0: Port device team_slave_0 added [ 36.743417][ T3318] team0: Port device team_slave_1 added [ 36.755274][ T3315] team0: Port device team_slave_0 added [ 36.762304][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.772163][ T3315] team0: Port device team_slave_1 added [ 36.778999][ T3314] team0: Port device team_slave_1 added [ 36.799796][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.806942][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.814403][ T3321] bridge_slave_0: entered allmulticast mode [ 36.820917][ T3321] bridge_slave_0: entered promiscuous mode [ 36.833702][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.854113][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.861194][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.887635][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.898769][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.905960][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.913419][ T3321] bridge_slave_1: entered allmulticast mode [ 36.920088][ T3321] bridge_slave_1: entered promiscuous mode [ 36.936473][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.943706][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.969818][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.980924][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.988140][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.015000][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.032889][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.040106][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.066157][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.077507][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.084478][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.110588][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.127600][ T3327] team0: Port device team_slave_0 added [ 37.133884][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.141226][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.167178][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.193486][ T3327] team0: Port device team_slave_1 added [ 37.212221][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.223203][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.259000][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.266139][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.292143][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.310135][ T3314] hsr_slave_0: entered promiscuous mode [ 37.316227][ T3314] hsr_slave_1: entered promiscuous mode [ 37.331700][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.338933][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.365311][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.378609][ T3318] hsr_slave_0: entered promiscuous mode [ 37.384975][ T3318] hsr_slave_1: entered promiscuous mode [ 37.390880][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.398498][ T3318] Cannot create hsr debugfs directory [ 37.412945][ T3315] hsr_slave_0: entered promiscuous mode [ 37.419147][ T3315] hsr_slave_1: entered promiscuous mode [ 37.425064][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.433023][ T3315] Cannot create hsr debugfs directory [ 37.439640][ T3321] team0: Port device team_slave_0 added [ 37.472349][ T3321] team0: Port device team_slave_1 added [ 37.501298][ T3327] hsr_slave_0: entered promiscuous mode [ 37.507756][ T3327] hsr_slave_1: entered promiscuous mode [ 37.514018][ T3327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.521798][ T3327] Cannot create hsr debugfs directory [ 37.547725][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.554712][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.580725][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.605228][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.612297][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.638586][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.736341][ T3321] hsr_slave_0: entered promiscuous mode [ 37.742621][ T3321] hsr_slave_1: entered promiscuous mode [ 37.748523][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.756195][ T3321] Cannot create hsr debugfs directory [ 37.820093][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.836690][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.850429][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.861565][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.888298][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.897481][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.906415][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.920061][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.943852][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.966397][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.983282][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.998586][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.016992][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.026365][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.041579][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.050752][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.083637][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.101563][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.116746][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.127004][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.136801][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.153668][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.173330][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.186218][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.195076][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.202466][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.211433][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.218529][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.246577][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.253775][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.279121][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.287343][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.294520][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.338371][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.353257][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.372591][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.383856][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.391040][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.426041][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.434987][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.442404][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.453499][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.460982][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.472681][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.479896][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.534428][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.555820][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.566419][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.588153][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.601727][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.608842][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.625713][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.632846][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.648977][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.662696][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.699029][ T3314] veth0_vlan: entered promiscuous mode [ 38.720073][ T3314] veth1_vlan: entered promiscuous mode [ 38.765098][ T3314] veth0_macvtap: entered promiscuous mode [ 38.774477][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.790172][ T3314] veth1_macvtap: entered promiscuous mode [ 38.838389][ T3318] veth0_vlan: entered promiscuous mode [ 38.845233][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.856866][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.867629][ T3318] veth1_vlan: entered promiscuous mode [ 38.883933][ T3318] veth0_macvtap: entered promiscuous mode [ 38.893622][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.908383][ T3318] veth1_macvtap: entered promiscuous mode [ 38.923947][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.932822][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.941711][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.950467][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.969706][ T3327] veth0_vlan: entered promiscuous mode [ 38.988030][ T3327] veth1_vlan: entered promiscuous mode [ 38.995932][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.006466][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.018768][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.034590][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.045174][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.055633][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.066788][ T3315] veth0_vlan: entered promiscuous mode [ 39.082645][ T3315] veth1_vlan: entered promiscuous mode [ 39.095778][ T3318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.104685][ T3318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.113454][ T3318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.122443][ T3318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.137068][ T3327] veth0_macvtap: entered promiscuous mode [ 39.145061][ T3327] veth1_macvtap: entered promiscuous mode [ 39.176318][ T3315] veth0_macvtap: entered promiscuous mode [ 39.194502][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.212493][ T3315] veth1_macvtap: entered promiscuous mode [ 39.221677][ T3327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.232233][ T3327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.242324][ T3327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.252866][ T3327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.263819][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.278120][ T3327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.288673][ T3327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.298604][ T3327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.309125][ T3327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.373616][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.388058][ T3461] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 39.402096][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.412667][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.422775][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.433445][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.443407][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.453866][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.466640][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.477139][ T3321] veth0_vlan: entered promiscuous mode [ 39.491472][ T3465] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.519561][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.530208][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.540227][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.550878][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.560821][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.571506][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.583974][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.592000][ T3327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.601299][ T3327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.611022][ T3327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.619998][ T3327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.629350][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 39.629367][ T29] audit: type=1400 audit(1746638891.204:103): avc: denied { create } for pid=3468 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.654753][ T29] audit: type=1400 audit(1746638891.204:104): avc: denied { setopt } for pid=3468 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.684813][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.693780][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.702773][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.712040][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.726001][ T3321] veth1_vlan: entered promiscuous mode [ 39.748629][ T29] audit: type=1400 audit(1746638891.354:105): avc: denied { ioctl } for pid=3470 comm="syz.1.11" path="socket:[4351]" dev="sockfs" ino=4351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.808114][ T3321] veth0_macvtap: entered promiscuous mode [ 39.825254][ T3321] veth1_macvtap: entered promiscuous mode [ 39.825309][ T3474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.852130][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.862742][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.872711][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.883197][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.893197][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.903710][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.913582][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.924074][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.924214][ T3467] loop3: detected capacity change from 0 to 512 [ 39.935440][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.970686][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.981549][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.991745][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.002594][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.012652][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.023238][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.033191][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.043808][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.049879][ T3467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.056153][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.076857][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.085643][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.094618][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.102048][ T3467] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.103412][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.123547][ T29] audit: type=1400 audit(1746638891.684:106): avc: denied { name_bind } for pid=3483 comm="syz.1.13" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.145116][ T29] audit: type=1400 audit(1746638891.684:107): avc: denied { node_bind } for pid=3483 comm="syz.1.13" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.165677][ T29] audit: type=1400 audit(1746638891.694:108): avc: denied { mount } for pid=3466 comm="syz.3.9" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.187329][ T29] audit: type=1400 audit(1746638891.714:109): avc: denied { create } for pid=3482 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.212311][ T29] audit: type=1400 audit(1746638891.794:110): avc: denied { write } for pid=3466 comm="syz.3.9" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.233920][ T29] audit: type=1400 audit(1746638891.794:111): avc: denied { add_name } for pid=3466 comm="syz.3.9" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.254420][ T29] audit: type=1400 audit(1746638891.794:112): avc: denied { create } for pid=3466 comm="syz.3.9" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.297668][ T3466] syz.3.9 (3466) used greatest stack depth: 10768 bytes left [ 40.308157][ T3467] syz.3.9 (3467) used greatest stack depth: 10600 bytes left [ 40.317964][ T3488] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14'. [ 40.378217][ T3492] @: renamed from vlan0 (while UP) [ 40.504813][ C1] hrtimer: interrupt took 37203 ns [ 40.512611][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.862034][ T3535] loop0: detected capacity change from 0 to 1024 [ 40.905499][ T3538] pim6reg1: entered promiscuous mode [ 40.911077][ T3538] pim6reg1: entered allmulticast mode [ 40.928873][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.998241][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.413861][ T3591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 41.464095][ T3596] loop0: detected capacity change from 0 to 1024 [ 41.488532][ T3593] SELinux: failed to load policy [ 41.494635][ T3596] EXT4-fs: Ignoring removed oldalloc option [ 41.500782][ T3596] EXT4-fs: Ignoring removed i_version option [ 41.522839][ T3596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.537829][ T3602] loop4: detected capacity change from 0 to 128 [ 41.561444][ T3602] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.577900][ T3602] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.611504][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.691564][ T3611] mmap: syz.0.63 (3611) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.752279][ T3615] SELinux: failed to load policy [ 41.793096][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.838242][ T3625] futex_wake_op: syz.4.71 tries to shift op by -1; fix this program [ 41.868883][ T3625] netlink: zone id is out of range [ 41.874150][ T3625] netlink: zone id is out of range [ 41.879493][ T3625] netlink: zone id is out of range [ 41.884630][ T3625] netlink: zone id is out of range [ 41.889916][ T3625] netlink: zone id is out of range [ 41.895047][ T3625] netlink: zone id is out of range [ 41.900219][ T3625] netlink: zone id is out of range [ 41.905361][ T3625] netlink: zone id is out of range [ 41.910516][ T3625] netlink: zone id is out of range [ 41.915902][ T3625] netlink: zone id is out of range [ 42.031126][ T3636] geneve0: entered allmulticast mode [ 42.049094][ T3638] loop0: detected capacity change from 0 to 512 [ 42.082123][ T3638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.177542][ T3638] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.303840][ T3660] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.324756][ T3662] program syz.1.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.350772][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.445308][ T3668] serio: Serial port ptm0 [ 42.451711][ T3672] process 'syz.3.91' launched './file1' with NULL argv: empty string added [ 42.510789][ T3675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.92'. [ 42.561159][ T3681] ======================================================= [ 42.561159][ T3681] WARNING: The mand mount option has been deprecated and [ 42.561159][ T3681] and is ignored by this kernel. Remove the mand [ 42.561159][ T3681] option from the mount to silence this warning. [ 42.561159][ T3681] ======================================================= [ 43.002066][ T3712] hub 4-0:1.0: USB hub found [ 43.006858][ T3712] hub 4-0:1.0: 8 ports detected [ 43.134283][ T3726] SELinux: failed to load policy [ 43.174263][ T3729] loop2: detected capacity change from 0 to 512 [ 43.192597][ T3731] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 43.199234][ T3731] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 43.206914][ T3731] vhci_hcd vhci_hcd.0: Device attached [ 43.219130][ T3734] loop1: detected capacity change from 0 to 1024 [ 43.231909][ T3734] EXT4-fs: Ignoring removed nobh option [ 43.241952][ T3734] ext2: Unknown parameter 'dont_hash' [ 43.249378][ T3734] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 43.276358][ T3729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.291417][ T3733] vhci_hcd: connection closed [ 43.295585][ T3330] vhci_hcd: stop threads [ 43.304721][ T3330] vhci_hcd: release socket [ 43.309201][ T3330] vhci_hcd: disconnect device [ 43.326347][ T3729] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.344798][ T3742] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.410308][ T3742] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.422904][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.461457][ T3742] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.520469][ T3742] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.575853][ T3742] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.587742][ T3742] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.599913][ T3742] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.611865][ T3742] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.746591][ T3759] netlink: 'syz.0.125': attribute type 32 has an invalid length. [ 43.824731][ T3764] +}[@ uses obsolete (PF_INET,SOCK_PACKET) [ 44.065982][ T3784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.136'. [ 44.205780][ T3795] loop3: detected capacity change from 0 to 2048 [ 44.212790][ T3788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 44.294358][ T3799] loop1: detected capacity change from 0 to 2048 [ 44.322431][ T3799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.337215][ T3795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.441251][ T3799] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.468642][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.482973][ T3799] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 672 with max blocks 32 with error 28 [ 44.495675][ T3799] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.495675][ T3799] [ 44.505709][ T3799] EXT4-fs (loop1): Total free blocks count 0 [ 44.511755][ T3799] EXT4-fs (loop1): Free/Dirty block details [ 44.517845][ T3799] EXT4-fs (loop1): free_blocks=2415919104 [ 44.523668][ T3799] EXT4-fs (loop1): dirty_blocks=32 [ 44.528975][ T3799] EXT4-fs (loop1): Block reservation details [ 44.534973][ T3799] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 44.587152][ T3799] syz.1.143 (3799) used greatest stack depth: 9288 bytes left [ 44.623673][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.671582][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 44.671598][ T29] audit: type=1326 audit(1746638896.274:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 44.718548][ T29] audit: type=1326 audit(1746638896.314:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 44.742239][ T29] audit: type=1326 audit(1746638896.314:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 44.768554][ T29] audit: type=1326 audit(1746638896.314:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 44.793111][ T29] audit: type=1326 audit(1746638896.314:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 44.819765][ T29] audit: type=1326 audit(1746638896.314:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 44.844266][ T29] audit: type=1326 audit(1746638896.314:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 44.868406][ T29] audit: type=1326 audit(1746638896.314:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 44.892073][ T29] audit: type=1326 audit(1746638896.314:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 44.915831][ T29] audit: type=1326 audit(1746638896.314:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108a82e969 code=0x7ffc0000 [ 45.234829][ T3842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.264079][ T3842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.412835][ T3858] loop2: detected capacity change from 0 to 512 [ 45.449976][ T3858] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.463182][ T3858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.507183][ T3858] EXT4-fs (loop2): 1 truncate cleaned up [ 45.513660][ T3858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.652221][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.878680][ T3868] can0: slcan on ttyS3. [ 45.947459][ T3868] can0 (unregistered): slcan off ttyS3. [ 45.966572][ T3868] can0: slcan on ttyS3. [ 46.059239][ T3867] can0 (unregistered): slcan off ttyS3. [ 46.236187][ T3890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.261839][ T3890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.361291][ T3860] syz.1.168 (3860) used greatest stack depth: 6128 bytes left [ 46.557147][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 46.566890][ T3927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.186'. [ 46.576980][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 46.602977][ T3932] loop1: detected capacity change from 0 to 1024 [ 46.610759][ T3927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.186'. [ 46.619978][ T3927] netlink: 'syz.3.186': attribute type 6 has an invalid length. [ 46.628365][ T3932] EXT4-fs: Ignoring removed nobh option [ 46.634059][ T3932] EXT4-fs: Ignoring removed bh option [ 46.658560][ T3932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.694429][ T3937] Zero length message leads to an empty skb [ 46.711018][ T3932] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.188: Allocating blocks 497-513 which overlap fs metadata [ 46.726684][ T3932] EXT4-fs (loop1): Remounting filesystem read-only [ 46.760440][ T3930] EXT4-fs (loop1): pa ffff888107136620: logic 48, phys. 177, len 21 [ 46.777054][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.779670][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 46.950339][ T3962] loop4: detected capacity change from 0 to 128 [ 47.052392][ T3973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 47.069521][ T3975] Driver unsupported XDP return value 0 on prog (id 189) dev N/A, expect packet loss! [ 47.255421][ T3992] loop2: detected capacity change from 0 to 736 [ 47.404974][ T3999] loop3: detected capacity change from 0 to 512 [ 47.432566][ T3999] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.213: dx entry: limit 1024 != root limit 124 [ 47.444823][ T3999] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.213: Corrupt directory, running e2fsck is recommended [ 47.461055][ T3999] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 47.477519][ T3999] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.213: corrupted in-inode xattr: invalid ea_ino [ 47.491725][ T3999] EXT4-fs (loop3): Remounting filesystem read-only [ 47.492387][ T4006] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.500119][ T3999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.577623][ T4013] loop2: detected capacity change from 0 to 512 [ 47.584924][ T4013] EXT4-fs: Ignoring removed nobh option [ 47.590768][ T4013] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.610570][ T4013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.638667][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.697860][ T4020] netlink: 92 bytes leftover after parsing attributes in process `syz.2.221'. [ 48.123325][ T4034] loop1: detected capacity change from 0 to 1024 [ 48.130458][ T4034] EXT4-fs: Ignoring removed bh option [ 48.136150][ T4034] EXT4-fs: inline encryption not supported [ 48.142951][ T4034] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.153944][ T4034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 48.163195][ T4034] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.228: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.177488][ T4034] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.228: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.192281][ T4034] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.228: Failed to acquire dquot type 0 [ 48.204007][ T4034] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 48.214739][ T4034] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.228: mark_inode_dirty error [ 48.226264][ T4034] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 48.245680][ T4048] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 48.253851][ T4034] EXT4-fs (loop1): 1 orphan inode deleted [ 48.260333][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.260694][ T4034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.273169][ T4048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.290852][ T3334] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.308064][ T3334] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 48.323718][ T4051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 48.344167][ T4048] bond1: (slave veth3): Enslaving as an active interface with a down link [ 48.385702][ T4048] bond1: (slave dummy0): making interface the new active one [ 48.423647][ T4048] dummy0: entered promiscuous mode [ 48.444739][ T4048] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 48.575026][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.587865][ T3318] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 48.605960][ T4063] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 48.614460][ T3318] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 48.625759][ T4065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.241'. [ 48.643061][ T3318] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 48.668178][ T4067] hub 9-0:1.0: USB hub found [ 48.673104][ T4067] hub 9-0:1.0: 8 ports detected [ 48.970695][ T4091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.250'. [ 49.308939][ T4115] loop2: detected capacity change from 0 to 512 [ 49.315833][ T4115] EXT4-fs: Ignoring removed nobh option [ 49.328451][ T4115] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 49.337215][ T4115] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.261: attempt to clear invalid blocks 2 len 1 [ 49.352110][ T4115] EXT4-fs (loop2): Remounting filesystem read-only [ 49.359191][ T4115] EXT4-fs (loop2): 1 truncate cleaned up [ 49.365593][ T4115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.393860][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.781875][ T4128] loop4: detected capacity change from 0 to 256 [ 49.801337][ T4128] FAT-fs (loop4): bogus number of directory entries (17407) [ 49.808808][ T4128] FAT-fs (loop4): Can't find a valid FAT filesystem [ 49.830240][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 49.830264][ T29] audit: type=1400 audit(1746638901.434:723): avc: denied { shutdown } for pid=4131 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.057625][ T29] audit: type=1326 audit(1746638901.654:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcdfc0be969 code=0x7fc00000 [ 50.129376][ T29] audit: type=1400 audit(1746638901.704:725): avc: denied { mount } for pid=4143 comm="syz.0.273" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 50.151415][ T29] audit: type=1400 audit(1746638901.704:726): avc: denied { mounton } for pid=4143 comm="syz.0.273" path="/50/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 50.173350][ T29] audit: type=1400 audit(1746638901.714:727): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 50.442757][ T29] audit: type=1400 audit(1746638902.044:728): avc: denied { create } for pid=4161 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.473837][ T29] audit: type=1400 audit(1746638902.074:729): avc: denied { connect } for pid=4161 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.726961][ T29] audit: type=1400 audit(1746638902.314:730): avc: denied { sqpoll } for pid=4169 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.783807][ T29] audit: type=1400 audit(1746638902.324:731): avc: denied { create } for pid=4169 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.803857][ T29] audit: type=1400 audit(1746638902.324:732): avc: denied { bind } for pid=4169 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.859062][ T4176] loop4: detected capacity change from 0 to 2048 [ 50.870507][ T4176] EXT4-fs (loop4): failed to initialize system zone (-117) [ 50.887187][ T4176] EXT4-fs (loop4): mount failed [ 50.924875][ T4184] loop0: detected capacity change from 0 to 128 [ 50.947603][ T4174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.955052][ T4174] IPv6: NLM_F_CREATE should be set when creating new route [ 50.999658][ T4189] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.007650][ T4189] FAT-fs (loop0): Filesystem has been set read-only [ 51.014448][ T4189] syz.0.288: attempt to access beyond end of device [ 51.014448][ T4189] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 51.029740][ T4184] syz.0.288: attempt to access beyond end of device [ 51.029740][ T4184] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.046377][ T4189] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.054318][ T4189] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.062670][ T4184] syz.0.288: attempt to access beyond end of device [ 51.062670][ T4184] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.076208][ T4189] syz.0.288: attempt to access beyond end of device [ 51.076208][ T4189] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.089944][ T4184] syz.0.288: attempt to access beyond end of device [ 51.089944][ T4184] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.103407][ T4189] syz.0.288: attempt to access beyond end of device [ 51.103407][ T4189] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.116991][ T4184] syz.0.288: attempt to access beyond end of device [ 51.116991][ T4184] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.167224][ T4189] syz.0.288: attempt to access beyond end of device [ 51.167224][ T4189] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.201132][ T4189] syz.0.288: attempt to access beyond end of device [ 51.201132][ T4189] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.293415][ T4198] loop3: detected capacity change from 0 to 256 [ 51.332982][ T4202] loop1: detected capacity change from 0 to 512 [ 51.351292][ T4198] FAT-fs (loop3): bogus number of directory entries (17407) [ 51.358883][ T4198] FAT-fs (loop3): Can't find a valid FAT filesystem [ 51.366458][ T4202] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.293: dx entry: limit 1024 != root limit 124 [ 51.378474][ T4202] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.293: Corrupt directory, running e2fsck is recommended [ 51.417203][ T4202] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 51.457149][ T4202] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.293: corrupted in-inode xattr: invalid ea_ino [ 51.473559][ T4202] EXT4-fs (loop1): Remounting filesystem read-only [ 51.480693][ T4202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.573725][ T4217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.632365][ T4217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.692440][ T4217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.751809][ T4217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.816418][ T4217] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.828670][ T4217] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.840679][ T4217] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.852916][ T4217] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.161226][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.174626][ T4230] serio: Serial port ptm0 [ 52.290496][ T4236] vhci_hcd: invalid port number 96 [ 52.295820][ T4236] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 52.338230][ T4242] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 52.471331][ T4252] bridge0: port 3(vlan1) entered blocking state [ 52.477703][ T4252] bridge0: port 3(vlan1) entered disabled state [ 52.484249][ T4252] vlan1: entered allmulticast mode [ 52.489526][ T4252] bridge0: entered allmulticast mode [ 52.496065][ T4252] vlan1: left allmulticast mode [ 52.501020][ T4252] bridge0: left allmulticast mode [ 52.627966][ T4255] loop4: detected capacity change from 0 to 1024 [ 52.669099][ T4255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.708521][ T4255] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.805924][ T4269] sch_fq: defrate 0 ignored. [ 52.831881][ T4267] loop3: detected capacity change from 0 to 512 [ 52.858760][ T4272] vlan2: entered allmulticast mode [ 52.864047][ T4272] bond0: entered allmulticast mode [ 52.869370][ T4272] bond_slave_0: entered allmulticast mode [ 52.875169][ T4272] bond_slave_1: entered allmulticast mode [ 52.912912][ T4276] __nla_validate_parse: 2 callbacks suppressed [ 52.912987][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 52.948350][ T4267] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 52.967093][ T4267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 52.977879][ T4267] System zones: 1-12 [ 53.000057][ T4267] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.033177][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.043344][ T4267] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.321: bg 0: block 361: padding at end of block bitmap is not set [ 53.100706][ T4267] EXT4-fs (loop3): Remounting filesystem read-only [ 53.125146][ T4267] EXT4-fs (loop3): 1 truncate cleaned up [ 53.160427][ T4267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 53.216054][ T4286] loop1: detected capacity change from 0 to 1024 [ 53.256128][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 53.265994][ T4286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.280542][ T4289] @: renamed from vlan0 (while UP) [ 53.347356][ T4286] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.330: bg 0: block 88: padding at end of block bitmap is not set [ 53.417055][ T4299] netlink: 96 bytes leftover after parsing attributes in process `syz.3.334'. [ 53.422296][ T4286] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 53.508312][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.524886][ T4305] net_ratelimit: 291 callbacks suppressed [ 53.524903][ T4305] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.779626][ T4321] atomic_op ffff88811a3e3d28 conn xmit_atomic 0000000000000000 [ 53.841675][ T4319] hub 4-0:1.0: USB hub found [ 53.846474][ T4319] hub 4-0:1.0: 8 ports detected [ 53.883563][ T4333] @: renamed from vlan0 (while UP) [ 53.901955][ T4328] loop0: detected capacity change from 0 to 512 [ 53.946110][ T4328] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.346: dx entry: limit 1024 != root limit 124 [ 53.958350][ T4328] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.346: Corrupt directory, running e2fsck is recommended [ 53.978842][ T4328] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 54.025676][ T4328] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.346: corrupted in-inode xattr: invalid ea_ino [ 54.044751][ T4328] EXT4-fs (loop0): Remounting filesystem read-only [ 54.052699][ T4328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.145010][ T4355] syz.2.367 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.174060][ T4353] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.251796][ T4353] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.331859][ T4353] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.413676][ T4353] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.482826][ T4353] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.496956][ T4353] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.512166][ T4353] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.523969][ T4353] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.675960][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.798659][ T4385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.370'. [ 54.814483][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 54.832194][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 54.907642][ T4395] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.950349][ T4395] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.983291][ T4383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.991856][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 54.991874][ T29] audit: type=1400 audit(1746638906.584:794): avc: denied { ioctl } for pid=4380 comm="syz.0.369" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.998445][ T4383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.099411][ T4395] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.176828][ T4395] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.234889][ T4409] loop2: detected capacity change from 0 to 1024 [ 55.251634][ T4395] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.262969][ T4409] EXT4-fs: Ignoring removed nobh option [ 55.268748][ T4409] EXT4-fs: Ignoring removed bh option [ 55.289547][ T4395] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.301955][ T4395] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.311807][ T4409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.356484][ T4395] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.445273][ T4422] sd 0:0:1:0: device reset [ 55.464509][ T4409] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.379: Allocating blocks 497-513 which overlap fs metadata [ 55.542581][ T4428] netlink: 96 bytes leftover after parsing attributes in process `syz.4.387'. [ 55.551705][ T4408] EXT4-fs (loop2): pa ffff888107136700: logic 16, phys. 321, len 12 [ 55.559832][ T4408] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 55.632312][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.776634][ T29] audit: type=1400 audit(1746638907.374:795): avc: denied { create } for pid=4446 comm="syz.0.396" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.825799][ T29] audit: type=1400 audit(1746638907.414:796): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.900511][ T4456] pim6reg1: entered promiscuous mode [ 55.905978][ T4456] pim6reg1: entered allmulticast mode [ 55.953833][ T4460] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 55.971833][ T29] audit: type=1326 audit(1746638907.574:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc0be969 code=0x7ffc0000 [ 55.995339][ T29] audit: type=1326 audit(1746638907.574:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc0be969 code=0x7ffc0000 [ 56.019915][ T29] audit: type=1326 audit(1746638907.624:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fcdfc0be969 code=0x7ffc0000 [ 56.043284][ T29] audit: type=1326 audit(1746638907.624:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc0be969 code=0x7ffc0000 [ 56.066612][ T29] audit: type=1326 audit(1746638907.624:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4459 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc0be969 code=0x7ffc0000 [ 56.134227][ T29] audit: type=1326 audit(1746638907.734:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.0.404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc0be969 code=0x0 [ 56.338514][ T4476] bridge0: entered promiscuous mode [ 56.343923][ T4476] macvlan2: entered promiscuous mode [ 56.350618][ T4476] bridge0: port 3(macvlan2) entered blocking state [ 56.357521][ T4476] bridge0: port 3(macvlan2) entered disabled state [ 56.364391][ T4476] macvlan2: entered allmulticast mode [ 56.369963][ T4476] bridge0: entered allmulticast mode [ 56.375945][ T4476] macvlan2: left allmulticast mode [ 56.381146][ T4476] bridge0: left allmulticast mode [ 56.386735][ T4476] bridge0: left promiscuous mode [ 56.440639][ T29] audit: type=1400 audit(1746638908.044:803): avc: denied { cmd } for pid=4477 comm="syz.1.411" path="socket:[8399]" dev="sockfs" ino=8399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.754282][ T4487] hub 4-0:1.0: USB hub found [ 56.759184][ T4487] hub 4-0:1.0: 8 ports detected [ 56.995535][ T4497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.020793][ T4499] loop2: detected capacity change from 0 to 2048 [ 57.045735][ T4499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.090889][ T4497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.160831][ T4497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.186030][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.247024][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 57.261882][ T4497] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.314450][ T4497] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.325980][ T4497] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.337616][ T4497] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.349524][ T4497] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.958054][ T4538] loop1: detected capacity change from 0 to 512 [ 57.965242][ T4538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.977969][ T4538] EXT4-fs (loop1): 1 truncate cleaned up [ 57.984140][ T4538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.040463][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.193642][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 58.264640][ T4562] loop1: detected capacity change from 0 to 2048 [ 58.271466][ T4562] EXT4-fs: Ignoring removed oldalloc option [ 58.289369][ T4562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.303922][ T4562] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.447: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 58.320775][ T4562] EXT4-fs (loop1): Remounting filesystem read-only [ 58.345854][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.408714][ T4574] tipc: Started in network mode [ 58.413683][ T4574] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 58.425876][ T4574] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 58.434286][ T4574] tipc: Enabled bearer , priority 10 [ 58.947145][ T4600] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.960771][ T4600] netlink: 'syz.2.463': attribute type 4 has an invalid length. [ 59.428713][ T3653] tipc: Node number set to 1 [ 59.454148][ T4632] loop3: detected capacity change from 0 to 164 [ 59.476788][ T4632] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.501672][ T4632] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.511626][ T4632] Symlink component flag not implemented [ 59.517456][ T4632] Symlink component flag not implemented [ 59.526971][ T4632] Symlink component flag not implemented (7) [ 59.533171][ T4632] Symlink component flag not implemented (116) [ 59.596035][ T4642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.603418][ T4642] IPv6: NLM_F_CREATE should be set when creating new route [ 59.615469][ T4644] syzkaller1: entered promiscuous mode [ 59.621135][ T4644] syzkaller1: entered allmulticast mode [ 59.717341][ T12] dummy0: left promiscuous mode [ 59.871391][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 59.890800][ T4667] ip6gre1: entered allmulticast mode [ 59.998068][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 59.998085][ T29] audit: type=1400 audit(1746638911.604:915): avc: denied { allowed } for pid=4671 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.041044][ T29] audit: type=1400 audit(1746638911.624:916): avc: denied { create } for pid=4671 comm="syz.2.495" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.062222][ T29] audit: type=1400 audit(1746638911.624:917): avc: denied { map } for pid=4671 comm="syz.2.495" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.086342][ T29] audit: type=1400 audit(1746638911.624:918): avc: denied { read write } for pid=4671 comm="syz.2.495" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.111001][ T29] audit: type=1400 audit(1746638911.634:919): avc: denied { execute } for pid=4671 comm="syz.2.495" path="/112/memory.stat" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.200794][ T29] audit: type=1400 audit(1746638911.804:920): avc: denied { wake_alarm } for pid=4675 comm="syz.3.496" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.264264][ T29] audit: type=1400 audit(1746638911.864:921): avc: denied { append } for pid=4677 comm="syz.2.497" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.287965][ T29] audit: type=1400 audit(1746638911.864:922): avc: denied { open } for pid=4677 comm="syz.2.497" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.322759][ T29] audit: type=1400 audit(1746638911.914:923): avc: denied { ioctl } for pid=4677 comm="syz.2.497" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.355655][ T29] audit: type=1400 audit(1746638911.924:924): avc: denied { block_suspend } for pid=4681 comm="syz.0.499" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.427529][ T4686] loop0: detected capacity change from 0 to 512 [ 60.439919][ T4686] ext4: Unknown parameter 'subj_user' [ 60.575313][ T4698] loop4: detected capacity change from 0 to 1024 [ 60.611398][ T4698] EXT4-fs (loop4): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 60.868120][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 61.164785][ T4760] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 61.219468][ T4770] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.513469][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 61.532362][ T4792] ip6gre1: entered allmulticast mode [ 61.569665][ T4794] syzkaller1: entered promiscuous mode [ 61.575337][ T4794] syzkaller1: entered allmulticast mode [ 61.801317][ T4812] capability: warning: `+}[@' uses 32-bit capabilities (legacy support in use) [ 61.891901][ T4818] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.902800][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 61.917823][ T4821] ip6gre1: entered allmulticast mode [ 62.146670][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 62.159124][ T4857] ip6gre1: entered allmulticast mode [ 62.199166][ T4861] netlink: 96 bytes leftover after parsing attributes in process `syz.1.583'. [ 62.293399][ T4873] netlink: 'syz.0.590': attribute type 12 has an invalid length. [ 62.404587][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 62.418379][ T4896] ip6gre1: entered allmulticast mode [ 62.485262][ T4907] xt_policy: too many policy elements [ 62.982783][ T4969] hsr0: entered promiscuous mode [ 63.004700][ T3401] Process accounting resumed [ 63.197561][ T4975] team0 (unregistering): Port device team_slave_0 removed [ 63.227180][ T4975] team0 (unregistering): Port device team_slave_1 removed [ 63.358226][ T4979] bridge0: entered promiscuous mode [ 63.363570][ T4979] macvlan2: entered promiscuous mode [ 63.371637][ T4979] bridge0: port 3(macvlan2) entered blocking state [ 63.378292][ T4979] bridge0: port 3(macvlan2) entered disabled state [ 63.400847][ T4979] macvlan2: entered allmulticast mode [ 63.406347][ T4979] bridge0: entered allmulticast mode [ 63.413444][ T4979] macvlan2: left allmulticast mode [ 63.418760][ T4979] bridge0: left allmulticast mode [ 63.438102][ T4979] bridge0: left promiscuous mode [ 63.531964][ T4996] veth0_vlan: entered allmulticast mode [ 63.566386][ T4998] ip6gre2: entered allmulticast mode [ 63.626555][ T4996] veth0_vlan: left promiscuous mode [ 63.632041][ T4996] veth0_vlan: entered promiscuous mode [ 63.913546][ T5061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5061 comm=syz.3.677 [ 64.415772][ T5140] netlink: '+}[@': attribute type 29 has an invalid length. [ 64.429742][ T5140] netlink: '+}[@': attribute type 29 has an invalid length. [ 64.438095][ T5139] serio: Serial port ptm0 [ 64.602494][ T5168] netlink: 96 bytes leftover after parsing attributes in process `syz.0.727'. [ 64.617162][ T5174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.730'. [ 64.873250][ T5209] serio: Serial port ptm0 [ 65.010995][ T29] kauditd_printk_skb: 1177 callbacks suppressed [ 65.011012][ T29] audit: type=1400 audit(1746638916.614:2102): avc: denied { open } for pid=5237 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 65.042661][ T29] audit: type=1400 audit(1746638916.614:2103): avc: denied { allowed } for pid=5237 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 65.062161][ T29] audit: type=1400 audit(1746638916.624:2104): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.086440][ T29] audit: type=1400 audit(1746638916.634:2105): avc: denied { map_create } for pid=5241 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 65.105629][ T29] audit: type=1400 audit(1746638916.634:2106): avc: denied { prog_load } for pid=5241 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 65.124597][ T29] audit: type=1400 audit(1746638916.634:2107): avc: denied { prog_load } for pid=5241 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 65.143744][ T29] audit: type=1400 audit(1746638916.634:2108): avc: denied { prog_load } for pid=5241 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 65.162911][ T29] audit: type=1400 audit(1746638916.634:2109): avc: denied { create } for pid=5241 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 65.183453][ T29] audit: type=1400 audit(1746638916.644:2110): avc: denied { prog_load } for pid=5235 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 65.204089][ T29] audit: type=1400 audit(1746638916.644:2111): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.252399][ T5254] serio: Serial port ptm1 [ 65.484941][ T5286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'. [ 65.867635][ T5328] netlink: 96 bytes leftover after parsing attributes in process `syz.2.801'. [ 65.981415][ T5337] vlan0: entered allmulticast mode [ 65.986649][ T5337] bond0: entered allmulticast mode [ 65.991889][ T5337] bond_slave_0: entered allmulticast mode [ 65.997699][ T5337] bond_slave_1: entered allmulticast mode [ 66.014833][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 66.065573][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 66.529666][ T5380] netlink: 2040 bytes leftover after parsing attributes in process `syz.1.829'. [ 66.538814][ T5380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'. [ 66.890419][ T5401] vlan0: entered allmulticast mode [ 66.895615][ T5401] bond0: entered allmulticast mode [ 66.900812][ T5401] bond_slave_0: entered allmulticast mode [ 66.906562][ T5401] bond_slave_1: entered allmulticast mode [ 67.884818][ T5510] netlink: 96 bytes leftover after parsing attributes in process `syz.0.887'. [ 68.153939][ T5538] bridge0: entered promiscuous mode [ 68.170766][ T5538] macvlan2: entered promiscuous mode [ 68.190664][ T5538] bridge0: port 3(macvlan2) entered blocking state [ 68.198054][ T5538] bridge0: port 3(macvlan2) entered disabled state [ 68.206164][ T5538] macvlan2: entered allmulticast mode [ 68.211626][ T5538] bridge0: entered allmulticast mode [ 68.218191][ T5538] macvlan2: left allmulticast mode [ 68.223408][ T5538] bridge0: left allmulticast mode [ 68.229596][ T5538] bridge0: left promiscuous mode [ 68.239164][ T5543] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 68.680322][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 68.803958][ T5588] -1: renamed from syzkaller0 [ 69.579052][ T5680] wireguard0: entered promiscuous mode [ 69.584713][ T5680] wireguard0: entered allmulticast mode [ 69.785514][ T5705] ip6gre2: entered allmulticast mode [ 69.885732][ T5718] ALSA: seq fatal error: cannot create timer (-19) [ 70.017677][ T29] kauditd_printk_skb: 24146 callbacks suppressed [ 70.017695][ T29] audit: type=1400 audit(1746638921.624:25964): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.032134][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.046651][ T3314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.052017][ T3042] audit: audit_lost=99 audit_rate_limit=0 audit_backlog_limit=64 [ 70.058525][ T3314] audit: audit_lost=100 audit_rate_limit=0 audit_backlog_limit=64 [ 70.058542][ T3314] audit: backlog limit exceeded [ 70.066264][ T3042] audit: backlog limit exceeded [ 70.068915][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.074987][ T5738] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.078989][ T3042] audit: audit_lost=101 audit_rate_limit=0 audit_backlog_limit=64 [ 70.092021][ T5740] __nla_validate_parse: 2 callbacks suppressed [ 70.092039][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 70.327516][ T5763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5763 comm=syz.0.1003 [ 70.459106][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 70.563968][ T5786] pim6reg1: entered promiscuous mode [ 70.569473][ T5786] pim6reg1: entered allmulticast mode [ 70.604364][ T5791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 70.655116][ T5795] netlink: 'syz.4.1019': attribute type 4 has an invalid length. [ 70.896312][ T5819] bridge: RTM_NEWNEIGH with invalid ether address [ 71.218560][ T5859] wireguard0: entered promiscuous mode [ 71.224118][ T5859] wireguard0: entered allmulticast mode [ 71.817517][ T5906] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 72.071983][ T5928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1080'. [ 72.081103][ T5928] netem: unknown loss type 13 [ 72.085789][ T5928] netem: change failed [ 72.555430][ T5964] pim6reg1: entered promiscuous mode [ 72.560874][ T5964] pim6reg1: entered allmulticast mode [ 72.745546][ T5991] netlink: 'syz.3.1109': attribute type 21 has an invalid length. [ 72.757447][ T5991] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 72.765384][ T5991] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1109'. [ 73.736907][ T6106] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 74.230596][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1178'. [ 74.639212][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1191'. [ 74.831288][ T6180] SELinux: syz.2.1196 (6180) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.974533][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1206'. [ 75.028481][ T29] kauditd_printk_skb: 23754 callbacks suppressed [ 75.028499][ T29] audit: type=1400 audit(1746638926.634:47133): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.058949][ T29] audit: type=1400 audit(1746638926.634:47134): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.083337][ T29] audit: type=1400 audit(1746638926.664:47135): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.104714][ T29] audit: type=1400 audit(1746638926.664:47136): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.126135][ T29] audit: type=1400 audit(1746638926.664:47137): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.147333][ T29] audit: type=1400 audit(1746638926.664:47138): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.164058][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 75.168541][ T29] audit: type=1400 audit(1746638926.664:47139): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.168596][ T29] audit: type=1400 audit(1746638926.664:47140): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.168624][ T29] audit: type=1400 audit(1746638926.664:47141): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.844197][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1220'. [ 75.929138][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 75.947752][ T6246] netlink: 'syz.4.1227': attribute type 4 has an invalid length. [ 75.957900][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1226'. [ 75.964299][ T6246] netlink: 'syz.4.1227': attribute type 4 has an invalid length. [ 76.312587][ T6284] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.366620][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1248'. [ 76.655139][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1259'. [ 76.849794][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 76.884288][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'. [ 77.063729][ T6357] bridge0: entered promiscuous mode [ 77.076960][ T6357] macvlan2: entered promiscuous mode [ 77.086559][ T6357] bridge0: port 3(macvlan2) entered blocking state [ 77.093224][ T6357] bridge0: port 3(macvlan2) entered disabled state [ 77.100298][ T6357] macvlan2: entered allmulticast mode [ 77.105985][ T6357] bridge0: entered allmulticast mode [ 77.139562][ T6357] macvlan2: left allmulticast mode [ 77.144818][ T6357] bridge0: left allmulticast mode [ 77.171247][ T6357] bridge0: left promiscuous mode [ 77.654976][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1301'. [ 77.732067][ T6414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1305'. [ 78.012771][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'. [ 78.039126][ T6435] xt_CT: No such helper "pptp" [ 78.142740][ T6444] lo: entered promiscuous mode [ 78.173619][ T6444] tunl0: entered promiscuous mode [ 78.214799][ T6444] gre0: entered promiscuous mode [ 78.260500][ T6444] gretap0: entered promiscuous mode [ 78.287963][ T6444] erspan0: entered promiscuous mode [ 78.303575][ T6444] ip_vti0: entered promiscuous mode [ 78.325864][ T6444] ip6_vti0: entered promiscuous mode [ 78.350181][ T6444] sit0: entered promiscuous mode [ 78.363528][ T6444] ip6tnl0: entered promiscuous mode [ 78.378624][ T6444] ip6gre0: entered promiscuous mode [ 78.392069][ T6444] syz_tun: entered promiscuous mode [ 78.406328][ T6444] ip6gretap0: entered promiscuous mode [ 78.421128][ T6444] bridge0: entered promiscuous mode [ 78.434143][ T6444] vcan0: entered promiscuous mode [ 78.446342][ T6444] bond0: entered promiscuous mode [ 78.451545][ T6444] bond_slave_0: entered promiscuous mode [ 78.457398][ T6444] bond_slave_1: entered promiscuous mode [ 78.481820][ T6444] team0: entered promiscuous mode [ 78.486914][ T6444] team_slave_0: entered promiscuous mode [ 78.492765][ T6444] team_slave_1: entered promiscuous mode [ 78.529894][ T6444] dummy0: entered promiscuous mode [ 78.546683][ T6444] nlmon0: entered promiscuous mode [ 78.568134][ T6444] caif0: entered promiscuous mode [ 78.573224][ T6444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.234063][ T6526] serio: Serial port pts0 [ 79.499912][ T6564] xt_connbytes: Forcing CT accounting to be enabled [ 79.520154][ T6564] set match dimension is over the limit! [ 79.938930][ T6606] lo: entered promiscuous mode [ 79.945648][ T6606] tunl0: entered promiscuous mode [ 79.961772][ T6606] gre0: entered promiscuous mode [ 79.974778][ T6606] gretap0: entered promiscuous mode [ 79.982577][ T6606] erspan0: entered promiscuous mode [ 79.990620][ T6606] ip_vti0: entered promiscuous mode [ 79.997310][ T6606] ip6_vti0: entered promiscuous mode [ 80.004588][ T6606] sit0: entered promiscuous mode [ 80.012761][ T6606] ip6tnl0: entered promiscuous mode [ 80.020025][ T6606] ip6gre0: entered promiscuous mode [ 80.027048][ T6606] syz_tun: entered promiscuous mode [ 80.035459][ T6606] ip6gretap0: entered promiscuous mode [ 80.041417][ T29] kauditd_printk_skb: 23585 callbacks suppressed [ 80.041431][ T29] audit: type=1400 audit(1746638931.634:69687): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.069095][ T29] audit: type=1400 audit(1746638931.634:69688): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.090516][ T29] audit: type=1400 audit(1746638931.634:69689): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.110480][ T6606] bridge0: entered promiscuous mode [ 80.111692][ T29] audit: type=1400 audit(1746638931.634:69690): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.124175][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.138108][ T29] audit: type=1400 audit(1746638931.634:69691): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.144480][ T3042] audit: audit_lost=1311 audit_rate_limit=0 audit_backlog_limit=64 [ 80.165679][ T29] audit: type=1400 audit(1746638931.634:69692): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.173554][ T3042] audit: backlog limit exceeded [ 80.176894][ T6606] vcan0: entered promiscuous mode [ 80.194681][ T29] audit: type=1400 audit(1746638931.634:69693): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.272352][ T6606] bond0: entered promiscuous mode [ 80.277521][ T6606] bond_slave_0: entered promiscuous mode [ 80.283670][ T6606] bond_slave_1: entered promiscuous mode [ 80.339118][ T6606] team0: entered promiscuous mode [ 80.344352][ T6606] team_slave_0: entered promiscuous mode [ 80.350222][ T6606] team_slave_1: entered promiscuous mode [ 80.376058][ T6606] dummy0: entered promiscuous mode [ 80.397101][ T6606] nlmon0: entered promiscuous mode [ 80.418542][ T6606] caif0: entered promiscuous mode [ 80.423678][ T6606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.458561][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.465987][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.473988][ T6621] bridge0: entered allmulticast mode [ 80.499529][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.506789][ T6623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.514113][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.521264][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.582650][ T6623] bridge0: entered promiscuous mode [ 81.192197][ T6668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6668 comm=syz.4.1418 [ 82.405218][ T6706] bridge_slave_1: left allmulticast mode [ 82.411114][ T6706] bridge_slave_1: left promiscuous mode [ 82.416845][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.435680][ T6706] bridge_slave_0: left allmulticast mode [ 82.441470][ T6706] bridge_slave_0: left promiscuous mode [ 82.447486][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.479470][ T6710] __nla_validate_parse: 4 callbacks suppressed [ 82.479489][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 82.539352][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1433'. [ 82.655183][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 83.554031][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 83.709438][ T1037] IPVS: starting estimator thread 0... [ 83.797410][ T6805] IPVS: using max 2448 ests per chain, 122400 per kthread [ 84.122850][ T6830] ip6t_srh: unknown srh invflags 7D00 [ 84.138614][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 84.251796][ T6844] vlan1: entered allmulticast mode [ 84.256981][ T6844] bond0: entered allmulticast mode [ 84.262226][ T6844] bond_slave_0: entered allmulticast mode [ 84.268015][ T6844] bond_slave_1: entered allmulticast mode [ 84.604900][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 84.771659][ T6876] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1508'. [ 85.047524][ T29] kauditd_printk_skb: 31285 callbacks suppressed [ 85.047563][ T29] audit: type=1400 audit(1746638936.654:91619): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.056364][ T6904] netlink: 'syz.3.1521': attribute type 4 has an invalid length. [ 85.100766][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.107390][ T3042] audit: audit_lost=4432 audit_rate_limit=0 audit_backlog_limit=64 [ 85.109853][ T29] audit: type=1400 audit(1746638936.654:91620): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.115300][ T3042] audit: backlog limit exceeded [ 85.141487][ T29] audit: type=1400 audit(1746638936.654:91621): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.162720][ T29] audit: type=1400 audit(1746638936.654:91622): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.169653][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.184039][ T29] audit: type=1400 audit(1746638936.654:91623): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.190485][ T3042] audit: audit_lost=4433 audit_rate_limit=0 audit_backlog_limit=64 [ 85.227139][ T6910] ip6t_srh: unknown srh invflags 7D00 [ 85.446924][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1524'. [ 85.525362][ T6925] vlan2: entered allmulticast mode [ 85.710961][ T6942] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1537'. [ 85.789082][ T6956] capability: warning: `syz.0.1544' uses deprecated v2 capabilities in a way that may be insecure [ 86.044545][ T6982] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1552'. [ 86.787857][ T7032] binfmt_misc: register: failed to install interpreter file ./file2 [ 86.853918][ T7038] vlan2: entered allmulticast mode [ 86.859156][ T7038] bond0: entered allmulticast mode [ 86.864335][ T7038] bond_slave_0: entered allmulticast mode [ 86.870105][ T7038] bond_slave_1: entered allmulticast mode [ 87.041460][ T7060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7060 comm=syz.2.1586 [ 87.597784][ T7112] __nla_validate_parse: 1 callbacks suppressed [ 87.597802][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1612'. [ 88.015923][ T7130] ================================================================== [ 88.024075][ T7130] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 88.032819][ T7130] [ 88.035198][ T7130] write to 0xffff888117550e28 of 8 bytes by task 7125 on cpu 0: [ 88.042854][ T7130] shmem_file_splice_read+0x444/0x5d0 [ 88.048277][ T7130] splice_direct_to_actor+0x26c/0x680 [ 88.053681][ T7130] do_splice_direct+0xda/0x150 [ 88.058488][ T7130] do_sendfile+0x380/0x640 [ 88.062949][ T7130] __x64_sys_sendfile64+0x105/0x150 [ 88.068197][ T7130] x64_sys_call+0xb39/0x2fb0 [ 88.072815][ T7130] do_syscall_64+0xd0/0x1a0 [ 88.077436][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.083368][ T7130] [ 88.085722][ T7130] write to 0xffff888117550e28 of 8 bytes by task 7130 on cpu 1: [ 88.093384][ T7130] shmem_file_splice_read+0x444/0x5d0 [ 88.098824][ T7130] splice_direct_to_actor+0x26c/0x680 [ 88.104214][ T7130] do_splice_direct+0xda/0x150 [ 88.108994][ T7130] do_sendfile+0x380/0x640 [ 88.113448][ T7130] __x64_sys_sendfile64+0x105/0x150 [ 88.118685][ T7130] x64_sys_call+0xb39/0x2fb0 [ 88.123302][ T7130] do_syscall_64+0xd0/0x1a0 [ 88.127836][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.133754][ T7130] [ 88.136092][ T7130] value changed: 0x0000000000001a9f -> 0x0000000000001aa1 [ 88.143213][ T7130] [ 88.145553][ T7130] Reported by Kernel Concurrency Sanitizer on: [ 88.151744][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.4.1618 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 88.164272][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 88.174433][ T7130] ================================================================== [ 90.057353][ T29] kauditd_printk_skb: 34007 callbacks suppressed [ 90.057371][ T29] audit: type=1400 audit(1746638941.654:123596): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.065276][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.086676][ T29] audit: type=1400 audit(1746638941.664:123597): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.091737][ T3042] audit: audit_lost=5112 audit_rate_limit=0 audit_backlog_limit=64 [ 90.113009][ T29] audit: type=1400 audit(1746638941.664:123598): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.120872][ T3042] audit: backlog limit exceeded [ 90.121356][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.142116][ T29] audit: type=1400 audit(1746638941.664:123599): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 90.146937][ T3042] audit: audit_lost=5113 audit_rate_limit=0 audit_backlog_limit=64 [ 90.153567][ T29] audit: type=1400 audit(1746638941.664:123600): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.067294][ T29] kauditd_printk_skb: 50084 callbacks suppressed [ 95.067313][ T29] audit: type=1400 audit(1746638946.664:172460): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.075203][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.095858][ T29] audit: type=1400 audit(1746638946.674:172461): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.101555][ T3042] audit: audit_lost=5522 audit_rate_limit=0 audit_backlog_limit=64 [ 95.101572][ T3042] audit: backlog limit exceeded [ 95.101850][ T3042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.123165][ T29] audit: type=1400 audit(1746638946.674:172462): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.130945][ T3042] audit: audit_lost=5523 audit_rate_limit=0 audit_backlog_limit=64 [ 95.135793][ T29] audit: type=1400 audit(1746638946.674:172463): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 95.142306][ T3042] audit: backlog limit exceeded