last executing test programs: 4.792195313s ago: executing program 2 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r0, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x5, 0x1e, &(0x7f0000001940)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES8=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510e52114d27fabc98f0600fc", @ANYRES64=r1, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000001740)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000640), 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a0003020000000007000001000000"], 0x10}, 0x1, 0x7}, 0x0) recvmsg$kcm(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x19, &(0x7f0000000200)=r7, 0x21) sendmsg$inet(r6, 0x0, 0x3406c012) write$cgroup_type(r6, &(0x7f0000000080), 0x11ffffce1) prctl$PR_SET_TSC(0x1a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) 4.74038831s ago: executing program 2 (id=272): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x0, 0x2d2, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r2 = syz_io_uring_setup(0xcd, &(0x7f0000000340)={0x0, 0xfffffffc, 0x400, 0x0, 0xdc}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) io_uring_setup(0x6ff3, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x2}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001600)=ANY=[@ANYBLOB="1201000002000020ec350600000000000001090224000108000000092100000001229803090581031000731a2f0885a167042713c7c368b540fc64dc42ec2c6da42db855137e0a70df95cc4752467b064e7a251c494a6d75f95f2e1f2131d496958cc817c4b591bba41850ca40b07d579d4664ea52ee90cd0a512f51a9335279ddf65c30b67a"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) readv(r5, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4101, 0x1005}, {0x0}], 0x2) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) 2.160322462s ago: executing program 3 (id=331): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x4c) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) recvmmsg(r2, &(0x7f0000007100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000034c0)=""/133, 0x85}, 0x8}], 0x1, 0x45833af92e4b399e, 0x0) r3 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x8, 0x7}, r3, 0x0, 0xffffffffffffffff, 0x1) 1.994440113s ago: executing program 3 (id=337): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x18, 0x4000840}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {0x0}], 0x3) 1.967005687s ago: executing program 3 (id=339): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603"], 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 1.678500944s ago: executing program 2 (id=350): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 1.678259884s ago: executing program 1 (id=351): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmmsg(r0, 0x0, 0x0, 0x4044044) 1.660603116s ago: executing program 2 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0xf}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1.567150709s ago: executing program 2 (id=355): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x2, @local, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) ioctl$int_in(r0, 0x5452, 0x0) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0xff43) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 1.420680247s ago: executing program 2 (id=360): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x0, 0x2d2, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r2 = syz_io_uring_setup(0xcd, &(0x7f0000000340)={0x0, 0xfffffffc, 0x400, 0x0, 0xdc}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) io_uring_setup(0x6ff3, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x2}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001600)=ANY=[@ANYBLOB="1201000002000020ec350600000000000001090224000108000000092100000001229803090581031000731a2f0885a167042713c7c368b540fc64dc42ec2c6da42db855137e0a70df95cc4752467b064e7a251c494a6d75f95f2e1f2131d496958cc817c4b591bba41850ca40b07d579d4664ea52ee90cd0a512f51a9335279ddf65c30b67a"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) readv(r5, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4101, 0x1005}, {0x0}], 0x2) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) 1.249928999s ago: executing program 0 (id=366): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0xb, 0x284}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) 1.0865128s ago: executing program 3 (id=367): ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@mcast1, @private=0xa010100, 0x1a, 0x1b}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0xd8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r0, &(0x7f0000000300)="f8", 0x1, 0x4897, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) 829.315463ms ago: executing program 1 (id=368): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0xb8) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 809.806966ms ago: executing program 1 (id=369): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) close(0x3) 791.268348ms ago: executing program 1 (id=370): syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1a}}]}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x83c0550b, &(0x7f0000000400)=0x1) 399.022499ms ago: executing program 0 (id=372): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x2, @local, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0xff43) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 361.653423ms ago: executing program 0 (id=375): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)='D', 0xffef}], 0x1}}], 0x1, 0x4044044) 339.867916ms ago: executing program 0 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7f, 0x81, 0xffffff44, 0x5, 0xab, 0xe, 0xb, 0x5, 0x9, 0xfffffff9, 0xe, 0xc, 0x18, 0x10, 0x4a, 0x2}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x8080) 286.560123ms ago: executing program 4 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0xf}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 282.564514ms ago: executing program 3 (id=378): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) read(r0, &(0x7f0000001300)=""/4096, 0x1000) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 269.134215ms ago: executing program 0 (id=379): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)}}], 0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 250.591018ms ago: executing program 0 (id=380): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) pselect6(0x40, &(0x7f0000000100)={0x8, 0x3, 0x4, 0x4, 0x800, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 237.085209ms ago: executing program 4 (id=381): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x3, 0x1, 0x3, 0x8}}, 0x120) r1 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180), &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 172.723277ms ago: executing program 4 (id=382): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x80, 0x3, 0x1, 0x3, 0x8}}, 0x120) r1 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 158.38194ms ago: executing program 3 (id=383): syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@multicast1=0xe0000000, @loopback, 0x0, 0x1, [@broadcast]}, 0x14) 113.712075ms ago: executing program 4 (id=384): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0xca, r0}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) 42.506224ms ago: executing program 4 (id=385): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 26.471276ms ago: executing program 1 (id=386): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x2, @local, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0xff43) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 612.89µs ago: executing program 1 (id=387): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r1 = io_uring_setup(0x4714, &(0x7f00000000c0)={0x0, 0x34f9, 0x1, 0x800, 0xc0}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080), 0xc) read(r2, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) 0s ago: executing program 4 (id=388): ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@mcast1, @private=0xa010100, 0x1a, 0x1b}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0xd8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r0, &(0x7f0000000300)="f8", 0x1, 0x4897, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 33.803529][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 33.803548][ T29] audit: type=1400 audit(1768627493.252:70): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.832683][ T29] audit: type=1400 audit(1768627493.282:71): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.835272][ T3307] cgroup: Unknown subsys name 'net' [ 33.860584][ T29] audit: type=1400 audit(1768627493.312:72): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.052743][ T3307] cgroup: Unknown subsys name 'cpuset' [ 34.059094][ T3307] cgroup: Unknown subsys name 'rlimit' [ 34.250701][ T29] audit: type=1400 audit(1768627493.692:73): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.274397][ T29] audit: type=1400 audit(1768627493.702:74): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.294992][ T29] audit: type=1400 audit(1768627493.702:75): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.317715][ T29] audit: type=1400 audit(1768627493.702:76): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.340167][ T29] audit: type=1400 audit(1768627493.722:77): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.361437][ T29] audit: type=1400 audit(1768627493.732:78): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.386590][ T29] audit: type=1400 audit(1768627493.732:79): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.417464][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.461538][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.348201][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.363132][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.436450][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.448355][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.457800][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.487702][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.494914][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.502221][ T3323] bridge_slave_0: entered allmulticast mode [ 36.508918][ T3323] bridge_slave_0: entered promiscuous mode [ 36.542518][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.549678][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.557039][ T3323] bridge_slave_1: entered allmulticast mode [ 36.563479][ T3323] bridge_slave_1: entered promiscuous mode [ 36.575319][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.582789][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.590248][ T3321] bridge_slave_0: entered allmulticast mode [ 36.596962][ T3321] bridge_slave_0: entered promiscuous mode [ 36.606432][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.613622][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.620829][ T3321] bridge_slave_1: entered allmulticast mode [ 36.627435][ T3321] bridge_slave_1: entered promiscuous mode [ 36.677331][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.695119][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.709820][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.729212][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.736677][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.744054][ T3319] bridge_slave_0: entered allmulticast mode [ 36.750676][ T3319] bridge_slave_0: entered promiscuous mode [ 36.759081][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.778327][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.785530][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.793131][ T3320] bridge_slave_0: entered allmulticast mode [ 36.799643][ T3320] bridge_slave_0: entered promiscuous mode [ 36.806668][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.813926][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.821089][ T3319] bridge_slave_1: entered allmulticast mode [ 36.827687][ T3319] bridge_slave_1: entered promiscuous mode [ 36.845183][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.852310][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.859430][ T3322] bridge_slave_0: entered allmulticast mode [ 36.866168][ T3322] bridge_slave_0: entered promiscuous mode [ 36.872753][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.879845][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.887351][ T3320] bridge_slave_1: entered allmulticast mode [ 36.894049][ T3320] bridge_slave_1: entered promiscuous mode [ 36.911067][ T3323] team0: Port device team_slave_0 added [ 36.916961][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.924092][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.931276][ T3322] bridge_slave_1: entered allmulticast mode [ 36.938094][ T3322] bridge_slave_1: entered promiscuous mode [ 36.954862][ T3321] team0: Port device team_slave_0 added [ 36.961321][ T3323] team0: Port device team_slave_1 added [ 36.977995][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.988136][ T3321] team0: Port device team_slave_1 added [ 36.995335][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.016024][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.040664][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.050993][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.070173][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.077488][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.103860][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.116974][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.131119][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.138173][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.164260][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.176286][ T3319] team0: Port device team_slave_0 added [ 37.182847][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.189835][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.215849][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.236186][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.243278][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.269252][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.281185][ T3319] team0: Port device team_slave_1 added [ 37.301044][ T3320] team0: Port device team_slave_0 added [ 37.316973][ T3322] team0: Port device team_slave_0 added [ 37.323873][ T3320] team0: Port device team_slave_1 added [ 37.336990][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.344072][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.370207][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.381744][ T3322] team0: Port device team_slave_1 added [ 37.397708][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.404794][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.430789][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.469390][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.476480][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.502598][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.515742][ T3323] hsr_slave_0: entered promiscuous mode [ 37.521968][ T3323] hsr_slave_1: entered promiscuous mode [ 37.533326][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.540410][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.566389][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.577738][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.584790][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.610964][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.624736][ T3321] hsr_slave_0: entered promiscuous mode [ 37.630644][ T3321] hsr_slave_1: entered promiscuous mode [ 37.636744][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.642564][ T3321] Cannot create hsr debugfs directory [ 37.649317][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.656348][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.682819][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.726816][ T3319] hsr_slave_0: entered promiscuous mode [ 37.733278][ T3319] hsr_slave_1: entered promiscuous mode [ 37.739433][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 37.745333][ T3319] Cannot create hsr debugfs directory [ 37.787626][ T3320] hsr_slave_0: entered promiscuous mode [ 37.793898][ T3320] hsr_slave_1: entered promiscuous mode [ 37.799879][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.805687][ T3320] Cannot create hsr debugfs directory [ 37.821258][ T3322] hsr_slave_0: entered promiscuous mode [ 37.827684][ T3322] hsr_slave_1: entered promiscuous mode [ 37.834090][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 37.839912][ T3322] Cannot create hsr debugfs directory [ 38.041993][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.053164][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.063270][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.077432][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.098751][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.108297][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.121249][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.133687][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.157441][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.169332][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.182120][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.197238][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.236639][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.246845][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.264088][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.279217][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.306216][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.320728][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.332555][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.345625][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.357090][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.370143][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.390480][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.400813][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.408036][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.425824][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.433032][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.459094][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.470741][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.487732][ T1633] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.495000][ T1633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.517766][ T1633] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.525168][ T1633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.539747][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.562547][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.569766][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.592099][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.599312][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.636202][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.669528][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.696442][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.703679][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.727532][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.734842][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.749518][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.761661][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.786999][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.825757][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.849991][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.857225][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.872391][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.880758][ T1633] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.887985][ T1633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.031238][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.039485][ T3320] veth0_vlan: entered promiscuous mode [ 39.053736][ T3323] veth0_vlan: entered promiscuous mode [ 39.071150][ T3320] veth1_vlan: entered promiscuous mode [ 39.079397][ T3323] veth1_vlan: entered promiscuous mode [ 39.102412][ T3319] veth0_vlan: entered promiscuous mode [ 39.110917][ T3319] veth1_vlan: entered promiscuous mode [ 39.125045][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.144668][ T3320] veth0_macvtap: entered promiscuous mode [ 39.152727][ T3320] veth1_macvtap: entered promiscuous mode [ 39.163769][ T3323] veth0_macvtap: entered promiscuous mode [ 39.179597][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.187834][ T3323] veth1_macvtap: entered promiscuous mode [ 39.205036][ T3319] veth0_macvtap: entered promiscuous mode [ 39.213147][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.229259][ T3319] veth1_macvtap: entered promiscuous mode [ 39.241044][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.267869][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.280849][ T1819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.291332][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.305873][ T1819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.315939][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.333826][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.346066][ T1819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.360253][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 39.360300][ T29] audit: type=1400 audit(1768627498.802:90): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.GXuJHb/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.392751][ T29] audit: type=1400 audit(1768627498.802:91): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.414956][ T29] audit: type=1400 audit(1768627498.812:92): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.GXuJHb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.440185][ T29] audit: type=1400 audit(1768627498.812:93): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.462463][ T29] audit: type=1400 audit(1768627498.812:94): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.GXuJHb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.489372][ T29] audit: type=1400 audit(1768627498.832:95): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.GXuJHb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.516787][ T29] audit: type=1400 audit(1768627498.832:96): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.539503][ T1819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.548634][ T29] audit: type=1400 audit(1768627499.002:97): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.576968][ T3322] veth0_vlan: entered promiscuous mode [ 39.582572][ T29] audit: type=1400 audit(1768627499.022:98): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="gadgetfs" ino=4894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.606144][ T1819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.627600][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.635574][ T3322] veth1_vlan: entered promiscuous mode [ 39.652556][ T1819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.666054][ T29] audit: type=1400 audit(1768627499.112:99): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.698004][ T1819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.717604][ T1819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.750986][ T1819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.760848][ T3322] veth0_macvtap: entered promiscuous mode [ 39.783600][ T1819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.793962][ T3322] veth1_macvtap: entered promiscuous mode [ 39.819768][ T3497] capability: warning: `syz.1.6' uses deprecated v2 capabilities in a way that may be insecure [ 39.839315][ T1819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.851019][ T3321] veth0_vlan: entered promiscuous mode [ 39.866606][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.894447][ T3499] IPv6: Can't replace route, no match found [ 39.901737][ T3321] veth1_vlan: entered promiscuous mode [ 39.917224][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.938883][ T1819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.986923][ T3429] hid-generic 0080:0003:0001.0001: unknown main item tag 0x0 [ 39.994492][ T3429] hid-generic 0080:0003:0001.0001: unknown main item tag 0x0 [ 40.003151][ T1819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.015713][ T3321] veth0_macvtap: entered promiscuous mode [ 40.053691][ T3321] veth1_macvtap: entered promiscuous mode [ 40.067457][ T3509] process 'syz.1.7' launched '/dev/fd/8' with NULL argv: empty string added [ 40.087577][ T3429] hid-generic 0080:0003:0001.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 40.102520][ T1819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.122404][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.135707][ T1819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.164718][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.206177][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.247915][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.295867][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.347295][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.518017][ T3527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 40.544335][ T3523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 40.573650][ T3523] Zero length message leads to an empty skb [ 40.601448][ T3523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.644882][ T3523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.681583][ T3533] fido_id[3533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.745129][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.754241][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.813246][ T3541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 40.850207][ T3548] tipc: Enabling of bearer rejected, failed to enable media [ 41.255722][ T3595] tipc: Enabling of bearer rejected, failed to enable media [ 41.509483][ T3627] syz.0.39 uses obsolete (PF_INET,SOCK_PACKET) [ 41.558732][ T3632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.587163][ T3632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.669590][ T3646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 42.031650][ T3683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 42.288118][ T3701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.296919][ T3701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.589916][ T3716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.598839][ T3716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.631711][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.639094][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.682171][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.693411][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.735513][ T1633] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.744959][ T384] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.754230][ T53] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.763289][ T53] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.813632][ T3723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 42.957672][ T3731] Invalid argument reading file caps for ./file0 [ 43.393929][ T3762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 43.501157][ T3772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.89'. [ 43.608298][ T3781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.617994][ T3781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.675354][ T3784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.702135][ T3784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.845066][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 43.932738][ T3784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.945052][ T3784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.397076][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 44.397094][ T29] audit: type=1400 audit(1768627503.842:157): avc: denied { create } for pid=3810 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.400014][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.104'. [ 44.408431][ T29] audit: type=1400 audit(1768627503.842:158): avc: denied { setopt } for pid=3810 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.451403][ T29] audit: type=1400 audit(1768627503.842:159): avc: denied { ioctl } for pid=3810 comm="syz.4.104" path="socket:[5424]" dev="sockfs" ino=5424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.476251][ T29] audit: type=1400 audit(1768627503.842:160): avc: denied { bind } for pid=3810 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.495665][ T29] audit: type=1400 audit(1768627503.842:161): avc: denied { write } for pid=3810 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.641716][ T3818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.673282][ T3818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.918322][ T3844] tipc: Started in network mode [ 44.923419][ T3844] tipc: Node identity 7e271f45be3c, cluster identity 4711 [ 44.930656][ T3844] tipc: Enabled bearer , priority 0 [ 44.976281][ T3844] tipc: Resetting bearer [ 45.033479][ T3843] tipc: Disabling bearer [ 45.342857][ T3861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.362447][ T3861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.371620][ T29] audit: type=1400 audit(1768627504.802:162): avc: denied { write } for pid=3862 comm="syz.0.123" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.422253][ T3865] loop2: detected capacity change from 0 to 2048 [ 45.454473][ T3865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.490103][ T29] audit: type=1400 audit(1768627504.932:163): avc: denied { mount } for pid=3863 comm="syz.2.124" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.542024][ T29] audit: type=1400 audit(1768627504.962:164): avc: denied { add_name } for pid=3863 comm="syz.2.124" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.562770][ T29] audit: type=1400 audit(1768627504.962:165): avc: denied { create } for pid=3863 comm="syz.2.124" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.582939][ T29] audit: type=1400 audit(1768627504.962:166): avc: denied { read write open } for pid=3863 comm="syz.2.124" path="/28/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.755662][ T3884] loop1: detected capacity change from 0 to 512 [ 45.767922][ T3884] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 45.791500][ T3884] EXT4-fs: error: could not find journal device path [ 45.900680][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.931657][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.935257][ T3884] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.946921][ T3884] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.052812][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.063761][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.136537][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.149971][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.157316][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.219421][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.234450][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.290519][ T3909] loop1: detected capacity change from 0 to 1024 [ 46.299763][ T3909] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.307864][ T53] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.326198][ T3905] tipc: Started in network mode [ 46.331196][ T3905] tipc: Node identity ba694af631b7, cluster identity 4711 [ 46.338498][ T3905] tipc: Enabled bearer , priority 0 [ 46.347146][ T3909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.348715][ T53] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.371063][ T3899] tipc: Resetting bearer [ 46.378370][ T3898] tipc: Disabling bearer [ 46.386978][ T53] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.396509][ T53] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.405670][ T53] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.414871][ T53] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.432086][ T53] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.441106][ T53] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.478138][ T3915] loop0: detected capacity change from 0 to 1024 [ 46.590259][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.739148][ T3938] __nla_validate_parse: 3 callbacks suppressed [ 46.739223][ T3938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 46.754441][ T3938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 46.841994][ T3947] loop1: detected capacity change from 0 to 1024 [ 46.848847][ T3947] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.864300][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.938788][ T3955] team0: Port device macvlan2 added [ 47.035570][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.084673][ T3966] loop3: detected capacity change from 0 to 1024 [ 47.159062][ T3975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 47.234223][ T3979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 47.244181][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 47.253226][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 47.350729][ T3994] loop3: detected capacity change from 0 to 1024 [ 47.357960][ T3994] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.374929][ T3994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.533264][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.653806][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 47.716293][ T4019] loop2: detected capacity change from 0 to 1024 [ 47.825739][ T4028] loop3: detected capacity change from 0 to 512 [ 47.839871][ T4028] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 47.863192][ T4028] EXT4-fs: error: could not find journal device path [ 47.978592][ T4038] loop0: detected capacity change from 0 to 2048 [ 48.014363][ T3308] Alternate GPT is invalid, using primary GPT. [ 48.015120][ C0] hrtimer: interrupt took 55481 ns [ 48.021115][ T3308] loop0: p2 p3 p7 [ 48.041721][ T4038] Alternate GPT is invalid, using primary GPT. [ 48.048275][ T4038] loop0: p2 p3 p7 [ 48.173235][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 48.185139][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 48.197048][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 48.251442][ T4042] syzkaller0: entered promiscuous mode [ 48.254254][ T4047] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 48.257313][ T4042] syzkaller0: entered allmulticast mode [ 48.280471][ T4047] EXT4-fs: error: could not find journal device path [ 48.300433][ T4049] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.385687][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.393095][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.433755][ T4040] netlink: 'syz.3.187': attribute type 5 has an invalid length. [ 48.454695][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.466041][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.507444][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.550410][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.563508][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.572777][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.908208][ T4079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.952034][ T4079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.972469][ T4092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 48.986833][ T4089] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.023735][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 49.048294][ T4089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.307455][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.452553][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 49.452572][ T29] audit: type=1400 audit(1768627508.902:206): avc: denied { setopt } for pid=4136 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.507616][ T3308] Alternate GPT is invalid, using primary GPT. [ 49.514176][ T3308] loop1: p2 p3 p7 [ 49.529069][ T4139] Alternate GPT is invalid, using primary GPT. [ 49.535997][ T4139] loop1: p2 p3 p7 [ 49.559484][ T4142] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.601766][ T29] audit: type=1400 audit(1768627509.042:207): avc: denied { read write } for pid=4143 comm="syz.1.227" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.626180][ T29] audit: type=1400 audit(1768627509.042:208): avc: denied { open } for pid=4143 comm="syz.1.227" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.664690][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 49.665339][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 49.678504][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.698877][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 49.699769][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 49.712504][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.728734][ T29] audit: type=1400 audit(1768627509.162:209): avc: denied { append } for pid=4143 comm="syz.1.227" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.967295][ T4153] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.993582][ T4153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.133628][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.232109][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 50.409393][ T4178] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 50.433155][ T4178] EXT4-fs: error: could not find journal device path [ 50.709256][ T4209] set_capacity_and_notify: 5 callbacks suppressed [ 50.709334][ T4209] loop0: detected capacity change from 0 to 512 [ 50.724107][ T4209] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 50.747447][ T4209] EXT4-fs: error: could not find journal device path [ 50.759797][ T4211] syzkaller0: entered promiscuous mode [ 50.765377][ T4211] syzkaller0: entered allmulticast mode [ 50.943308][ T4224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.952456][ T4224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.098964][ T4241] loop3: detected capacity change from 0 to 512 [ 51.110469][ T4241] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 51.133884][ T4241] EXT4-fs: error: could not find journal device path [ 51.294821][ T4246] loop3: detected capacity change from 0 to 1024 [ 51.301875][ T4246] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.314062][ T4246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.467414][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.530270][ T4260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.538966][ T4260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.781643][ T4276] loop3: detected capacity change from 0 to 2048 [ 51.806722][ T4278] __nla_validate_parse: 8 callbacks suppressed [ 51.806743][ T4278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 51.857352][ T3308] Alternate GPT is invalid, using primary GPT. [ 51.864021][ T3308] loop3: p2 p3 p7 [ 51.868866][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.890984][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.901510][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.910547][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.922043][ T4276] Alternate GPT is invalid, using primary GPT. [ 51.928591][ T4276] loop3: p2 p3 p7 [ 51.969137][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 52.012394][ T9] hid-generic 0080:0003:0001.0002: unknown main item tag 0x0 [ 52.019940][ T9] hid-generic 0080:0003:0001.0002: unknown main item tag 0x0 [ 52.028718][ T9] hid-generic 0080:0003:0001.0002: hidraw0: HID v0.03 Device [syz0] on syz1 [ 52.052545][ T4291] fido_id[4291]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.123503][ T4296] process '/newroot/51/file0' started with executable stack [ 52.149091][ T4300] loop3: detected capacity change from 0 to 1024 [ 52.548169][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 52.778588][ T4338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.788083][ T4338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.997823][ T4338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.024173][ T4338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.182450][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 53.317488][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 53.326435][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 53.606138][ T4367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 53.639830][ T4370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 53.736483][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 53.745516][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 53.949669][ T4392] loop4: detected capacity change from 0 to 1024 [ 53.956622][ T4392] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.976783][ T4392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.134993][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.485651][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 54.658496][ T9] hid-generic 0080:0003:0001.0003: unknown main item tag 0x0 [ 54.666024][ T9] hid-generic 0080:0003:0001.0003: unknown main item tag 0x0 [ 54.687720][ T9] hid-generic 0080:0003:0001.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 54.718714][ T4456] fido_id[4456]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.840500][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.849263][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.867454][ T4470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.876907][ T4470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.469082][ T4496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.477997][ T4496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.698328][ T4496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.706966][ T4496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.023500][ T23] hid-generic 0080:0003:0001.0004: unknown main item tag 0x0 [ 56.031042][ T23] hid-generic 0080:0003:0001.0004: unknown main item tag 0x0 [ 56.039559][ T23] hid-generic 0080:0003:0001.0004: hidraw0: HID v0.03 Device [syz0] on syz1 [ 56.065752][ T4522] fido_id[4522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.095903][ T9] hid-generic 0080:0003:0001.0005: unknown main item tag 0x0 [ 56.103482][ T9] hid-generic 0080:0003:0001.0005: unknown main item tag 0x0 [ 56.114927][ T9] hid-generic 0080:0003:0001.0005: hidraw0: HID v0.03 Device [syz0] on syz1 [ 56.139346][ T4528] fido_id[4528]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.374915][ T4542] loop1: detected capacity change from 0 to 2048 [ 56.424645][ T3308] Alternate GPT is invalid, using primary GPT. [ 56.431022][ T3308] loop1: p2 p3 p7 [ 56.445498][ T4542] Alternate GPT is invalid, using primary GPT. [ 56.452063][ T4542] loop1: p2 p3 p7 [ 56.470359][ T3308] ================================================================== [ 56.478624][ T3308] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 56.485785][ T3308] [ 56.488139][ T3308] read to 0xffff88811b56ec88 of 4 bytes by task 3313 on cpu 1: [ 56.495705][ T3308] generic_fillattr+0x172/0x340 [ 56.500600][ T3308] shmem_getattr+0x181/0x200 [ 56.505234][ T3308] vfs_getattr_nosec+0x146/0x1e0 [ 56.510296][ T3308] __se_sys_newfstat+0x96/0x460 [ 56.515219][ T3308] __x64_sys_newfstat+0x31/0x40 [ 56.520124][ T3308] x64_sys_call+0x2c51/0x3000 [ 56.524852][ T3308] do_syscall_64+0xc0/0x2a0 [ 56.529384][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.535322][ T3308] [ 56.537765][ T3308] write to 0xffff88811b56ec88 of 4 bytes by task 3308 on cpu 0: [ 56.545428][ T3308] touch_atime+0x1e8/0x340 [ 56.549900][ T3308] shmem_file_read_iter+0x477/0x540 [ 56.555148][ T3308] vfs_read+0x6c0/0x7f0 [ 56.559347][ T3308] ksys_read+0xdc/0x1a0 [ 56.563535][ T3308] __x64_sys_read+0x40/0x50 [ 56.568076][ T3308] x64_sys_call+0x2889/0x3000 [ 56.572798][ T3308] do_syscall_64+0xc0/0x2a0 [ 56.577341][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.583274][ T3308] [ 56.585619][ T3308] value changed: 0x3759a12d -> 0x377d6e1b [ 56.591713][ T3308] [ 56.594065][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 56.600274][ T3308] CPU: 0 UID: 0 PID: 3308 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.609700][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.619797][ T3308] ================================================================== [ 56.658435][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 56.659263][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 56.672350][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory