last executing test programs: 1.572410525s ago: executing program 1 (id=161): socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x600180, 0x0) fcntl$setlease(r0, 0x406, 0x3) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x8000, 0xffffffffffffffff, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.545407769s ago: executing program 1 (id=164): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x2) 815.194583ms ago: executing program 2 (id=197): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in=@private=0xa010102, 0x4e1f, 0x0, 0x4e23, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000002, 0x4, 0x200000003, 0x9}, {0x4, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 779.084076ms ago: executing program 2 (id=198): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x5e69d000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 648.462108ms ago: executing program 1 (id=199): syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000c40)) 648.284538ms ago: executing program 1 (id=200): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 638.385986ms ago: executing program 1 (id=201): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b000100"], 0xa0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) 588.310846ms ago: executing program 1 (id=202): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 516.36545ms ago: executing program 2 (id=203): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xfffffffe, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @multicast1}}}, 0x118) 516.07804ms ago: executing program 2 (id=204): connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 459.665738ms ago: executing program 2 (id=205): r0 = socket$inet6(0xa, 0x3, 0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfa}, 0x1c, 0x0}}], 0x1, 0x24048004) 430.518702ms ago: executing program 2 (id=207): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}}, 0x18) sendmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="e9", 0x1}, {&(0x7f0000000480)="0b9da54d18dad8e4", 0x8}], 0x2}}, {{&(0x7f0000000280)=@can, 0x80, 0x0}}], 0x2, 0x800) 386.063902ms ago: executing program 0 (id=209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 337.203682ms ago: executing program 0 (id=210): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ct={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x0, 0xa, @multicast1}]}, {}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 317.559398ms ago: executing program 4 (id=212): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b000100"], 0xa0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) 304.199725ms ago: executing program 0 (id=213): syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="1388000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) 271.863948ms ago: executing program 0 (id=215): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0xf, @private1, 0x9}, 0x1c, 0x0}}], 0x1, 0x24000800) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0x1ff, 0x8, 0x4, 0x4, 0x0, 0xa, 0x8, 0x100}, 0x20) 225.123948ms ago: executing program 4 (id=216): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000088, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendmmsg$inet6(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="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", 0x473}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003580)='j', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003600)="1d4ab755fe672bcd", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003740)="5acb", 0x2}], 0x1}}], 0x4, 0x84) 224.823848ms ago: executing program 4 (id=217): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 177.560598ms ago: executing program 0 (id=219): socket$netlink(0x10, 0x3, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x4b9ab3bf308af5f7, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) 176.703848ms ago: executing program 0 (id=221): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000140)=[{r1, 0x212e}], 0x1, 0x9e) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac2, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa6}) 153.599493ms ago: executing program 3 (id=223): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ct={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x0, 0xa, @multicast1}]}, {}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 136.718319ms ago: executing program 4 (id=224): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 86.543149ms ago: executing program 3 (id=225): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) 39.042759ms ago: executing program 3 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 38.797609ms ago: executing program 3 (id=227): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 37.560178ms ago: executing program 4 (id=228): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) 671.01µs ago: executing program 3 (id=229): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xfffffffe, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @multicast1}}}, 0x118) 334.69µs ago: executing program 4 (id=230): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 0s ago: executing program 3 (id=231): syz_usb_connect$uac1(0xc465ee9aff117ea6, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xbb7d145fe5634b7d}}]}}, 0x0) kernel console output (not intermixed with test programs): [ 22.027940][ T28] audit: type=1400 audit(1772267999.397:62): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.049935][ T28] audit: type=1400 audit(1772267999.397:63): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.072642][ T28] audit: type=1400 audit(1772267999.397:64): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.095660][ T28] audit: type=1400 audit(1772267999.397:65): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.118782][ T28] audit: type=1400 audit(1772267999.407:66): avc: denied { read open } for pid=3198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 28.771481][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 28.771497][ T28] audit: type=1400 audit(1772268006.147:70): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.800566][ T28] audit: type=1400 audit(1772268006.177:71): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.802763][ T3303] cgroup: Unknown subsys name 'net' [ 28.828264][ T28] audit: type=1400 audit(1772268006.197:72): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.941279][ T3303] cgroup: Unknown subsys name 'cpuset' [ 28.947462][ T3303] cgroup: Unknown subsys name 'rlimit' [ 29.058585][ T28] audit: type=1400 audit(1772268006.427:73): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.090710][ T28] audit: type=1400 audit(1772268006.437:74): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.111245][ T28] audit: type=1400 audit(1772268006.437:75): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.131732][ T28] audit: type=1400 audit(1772268006.437:76): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.150570][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.152100][ T28] audit: type=1400 audit(1772268006.457:77): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.181449][ T28] audit: type=1400 audit(1772268006.457:78): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.206305][ T28] audit: type=1400 audit(1772268006.457:79): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.238227][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.076647][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.143255][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.189322][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.206696][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.213876][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.221216][ T3318] bridge_slave_0: entered allmulticast mode [ 31.227615][ T3318] bridge_slave_0: entered promiscuous mode [ 31.235982][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.243088][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.251210][ T3318] bridge_slave_1: entered allmulticast mode [ 31.257720][ T3318] bridge_slave_1: entered promiscuous mode [ 31.282795][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.293334][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.313199][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.345729][ T3318] team0: Port device team_slave_0 added [ 31.356226][ T3318] team0: Port device team_slave_1 added [ 31.362049][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 31.397663][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.404789][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.412080][ T3315] bridge_slave_0: entered allmulticast mode [ 31.418562][ T3315] bridge_slave_0: entered promiscuous mode [ 31.425422][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.432467][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.458422][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.473775][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.480787][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.506802][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.524149][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.531266][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.538362][ T3315] bridge_slave_1: entered allmulticast mode [ 31.544883][ T3315] bridge_slave_1: entered promiscuous mode [ 31.582880][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.589983][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.597117][ T3320] bridge_slave_0: entered allmulticast mode [ 31.603614][ T3320] bridge_slave_0: entered promiscuous mode [ 31.611028][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.620117][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.627367][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.634557][ T3320] bridge_slave_1: entered allmulticast mode [ 31.641011][ T3320] bridge_slave_1: entered promiscuous mode [ 31.655243][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.682300][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.689378][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.696574][ T3314] bridge_slave_0: entered allmulticast mode [ 31.702937][ T3314] bridge_slave_0: entered promiscuous mode [ 31.725871][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.732937][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.740075][ T3321] bridge_slave_0: entered allmulticast mode [ 31.746498][ T3321] bridge_slave_0: entered promiscuous mode [ 31.753000][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.760129][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.767356][ T3314] bridge_slave_1: entered allmulticast mode [ 31.773663][ T3314] bridge_slave_1: entered promiscuous mode [ 31.781214][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.791215][ T3315] team0: Port device team_slave_0 added [ 31.797874][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.809265][ T3318] hsr_slave_0: entered promiscuous mode [ 31.815396][ T3318] hsr_slave_1: entered promiscuous mode [ 31.821431][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.828731][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.835845][ T3321] bridge_slave_1: entered allmulticast mode [ 31.842454][ T3321] bridge_slave_1: entered promiscuous mode [ 31.862179][ T3315] team0: Port device team_slave_1 added [ 31.882572][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.892850][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.907157][ T3320] team0: Port device team_slave_0 added [ 31.918294][ T3320] team0: Port device team_slave_1 added [ 31.924978][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.940153][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.959086][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.966115][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.992100][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.007576][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.014679][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.040621][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.060934][ T3314] team0: Port device team_slave_0 added [ 32.073251][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.080208][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.106373][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.120397][ T3314] team0: Port device team_slave_1 added [ 32.138600][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.145654][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.171570][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.202879][ T3321] team0: Port device team_slave_0 added [ 32.226598][ T3315] hsr_slave_0: entered promiscuous mode [ 32.232662][ T3315] hsr_slave_1: entered promiscuous mode [ 32.238511][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.244456][ T3315] Cannot create hsr debugfs directory [ 32.250691][ T3321] team0: Port device team_slave_1 added [ 32.258712][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.265729][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.291703][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.304526][ T3320] hsr_slave_0: entered promiscuous mode [ 32.310709][ T3320] hsr_slave_1: entered promiscuous mode [ 32.316597][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 32.322357][ T3320] Cannot create hsr debugfs directory [ 32.345604][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.352698][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.378722][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.396423][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.403434][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.429578][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.445077][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.452071][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.478013][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.551299][ T3314] hsr_slave_0: entered promiscuous mode [ 32.557334][ T3314] hsr_slave_1: entered promiscuous mode [ 32.563233][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 32.568964][ T3314] Cannot create hsr debugfs directory [ 32.579568][ T3321] hsr_slave_0: entered promiscuous mode [ 32.585634][ T3321] hsr_slave_1: entered promiscuous mode [ 32.591478][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 32.597202][ T3321] Cannot create hsr debugfs directory [ 32.680839][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.694519][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.718074][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.727045][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.775683][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.784378][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.797606][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.813120][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.835224][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.850731][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.859624][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.880855][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.908450][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.917591][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.933824][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.943404][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.965791][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.980354][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.994259][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.006633][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.019642][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.035469][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.059552][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.066667][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.083220][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.090289][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.100244][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.145963][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.154253][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.171511][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.178570][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.195809][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.203001][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.220396][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.229655][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.245518][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.252646][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.283248][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.291305][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.298366][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.318292][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.340111][ T1977] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.347397][ T1977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.362948][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.371509][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.393007][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.400181][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.409511][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.416627][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.435659][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.442878][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.469728][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.491297][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.531704][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.574077][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.599313][ T3318] veth0_vlan: entered promiscuous mode [ 33.632480][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.648842][ T3318] veth1_vlan: entered promiscuous mode [ 33.690591][ T3318] veth0_macvtap: entered promiscuous mode [ 33.718145][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.732256][ T3318] veth1_macvtap: entered promiscuous mode [ 33.755373][ T3315] veth0_vlan: entered promiscuous mode [ 33.764864][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.778354][ T3315] veth1_vlan: entered promiscuous mode [ 33.787639][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.807802][ T3315] veth0_macvtap: entered promiscuous mode [ 33.826370][ T309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.840275][ T3320] veth0_vlan: entered promiscuous mode [ 33.849588][ T3315] veth1_macvtap: entered promiscuous mode [ 33.856717][ T309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.866538][ T309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.879656][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.894247][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 33.894261][ T28] audit: type=1400 audit(1772268011.267:90): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.QyALEr/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.936797][ T3314] veth0_vlan: entered promiscuous mode [ 33.950278][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.952520][ T28] audit: type=1400 audit(1772268011.267:91): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.975405][ T3320] veth1_vlan: entered promiscuous mode [ 33.989899][ T28] audit: type=1400 audit(1772268011.267:92): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.QyALEr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.019902][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.027476][ T28] audit: type=1400 audit(1772268011.267:93): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.036634][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.056868][ T28] audit: type=1400 audit(1772268011.267:94): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.QyALEr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.088504][ T3314] veth1_vlan: entered promiscuous mode [ 34.107889][ T1619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.127260][ T28] audit: type=1400 audit(1772268011.267:95): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.QyALEr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.139571][ T3314] veth0_macvtap: entered promiscuous mode [ 34.160434][ T28] audit: type=1400 audit(1772268011.267:96): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.180626][ T1619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.185430][ T28] audit: type=1400 audit(1772268011.297:97): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.190197][ T1619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.212161][ T28] audit: type=1400 audit(1772268011.297:98): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=4694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.222304][ T1619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.251994][ T28] audit: type=1400 audit(1772268011.457:99): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.256898][ T3321] veth0_vlan: entered promiscuous mode [ 34.294166][ T3314] veth1_macvtap: entered promiscuous mode [ 34.304981][ T3321] veth1_vlan: entered promiscuous mode [ 34.327625][ T3320] veth0_macvtap: entered promiscuous mode [ 34.337358][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.352616][ T3320] veth1_macvtap: entered promiscuous mode [ 34.362451][ T3321] veth0_macvtap: entered promiscuous mode [ 34.369937][ T3321] veth1_macvtap: entered promiscuous mode [ 34.377273][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.390161][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.401694][ C0] hrtimer: interrupt took 30787 ns [ 34.412370][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.444270][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.459897][ T1977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.480431][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.504189][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.527376][ T1977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.550692][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.559780][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.568269][ T1977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.586597][ T1977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.598784][ T1977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.608137][ T1977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.617080][ T1977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.655609][ T1977] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.675187][ T1977] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.696127][ T1977] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.706645][ T3501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.715271][ T1977] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.728539][ T3501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.779039][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.800728][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.834274][ T3514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.851107][ T3514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.865997][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.874915][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.268447][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.277473][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.464172][ T3526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.473617][ T3526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.764855][ T3535] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.832202][ T3539] usb usb8: usbfs: process 3539 (syz.3.21) did not claim interface 0 before use [ 35.833040][ T3541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.850385][ T3541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.869080][ T3541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.878051][ T3541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.891572][ T3543] team_slave_0: entered promiscuous mode [ 35.897350][ T3543] team_slave_1: entered promiscuous mode [ 35.903217][ T3543] macsec1: entered promiscuous mode [ 35.908423][ T3543] team0: entered promiscuous mode [ 35.914225][ T3543] macsec1: entered allmulticast mode [ 35.919539][ T3543] team0: entered allmulticast mode [ 35.924724][ T3543] team_slave_0: entered allmulticast mode [ 35.930488][ T3543] team_slave_1: entered allmulticast mode [ 35.937443][ T3543] team0: Device macsec1 is already an upper device of the team interface [ 35.946581][ T3543] team0: left allmulticast mode [ 35.951529][ T3543] team_slave_0: left allmulticast mode [ 35.957018][ T3543] team_slave_1: left allmulticast mode [ 35.962676][ T3543] team0: left promiscuous mode [ 35.967603][ T3543] team_slave_0: left promiscuous mode [ 35.973080][ T3543] team_slave_1: left promiscuous mode [ 36.085540][ T3553] binfmt_misc: register: failed to install interpreter file ./file0 [ 36.146971][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.156513][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.739228][ T3567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.766330][ T3567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.122612][ T3484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.246146][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.253394][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.341468][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.355702][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.438309][ T309] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.452887][ T309] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.462447][ T309] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.471567][ T309] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.485230][ T3603] netlink: 104 bytes leftover after parsing attributes in process `syz.3.50'. [ 37.548522][ T3611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.558295][ T3611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.319034][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.328263][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.532579][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bf72200: rx timeout, send abort [ 38.568208][ T3645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.578244][ T3645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.938623][ T3654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.948152][ T3654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.040814][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bf72200: abort rx timeout. Force session deactivation [ 39.122965][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 39.122980][ T28] audit: type=1400 audit(1772268016.497:186): avc: denied { map_read map_write } for pid=3655 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.150880][ T28] audit: type=1400 audit(1772268016.497:187): avc: denied { prog_load } for pid=3655 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.170189][ T28] audit: type=1400 audit(1772268016.497:188): avc: denied { bpf } for pid=3655 comm="syz.3.72" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.495562][ T28] audit: type=1400 audit(1772268016.857:189): avc: denied { create } for pid=3663 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.519620][ T28] audit: type=1400 audit(1772268016.857:190): avc: denied { setopt } for pid=3663 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.677318][ T28] audit: type=1400 audit(1772268017.047:191): avc: denied { ioctl } for pid=3661 comm="syz.0.74" path="socket:[5091]" dev="sockfs" ino=5091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.708025][ T3674] syzkaller0: entered promiscuous mode [ 39.719838][ T3674] syzkaller0: entered allmulticast mode [ 39.728384][ T3677] Zero length message leads to an empty skb [ 39.806791][ T3679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.815478][ T3679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.834886][ T3681] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 39.879237][ T3681] netlink: 'syz.1.76': attribute type 2 has an invalid length. [ 39.943821][ T3682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.999531][ T28] audit: type=1400 audit(1772268017.367:192): avc: denied { create } for pid=3683 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.011064][ T3682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.046715][ T28] audit: type=1400 audit(1772268017.367:193): avc: denied { bind } for pid=3683 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.108580][ T3686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'. [ 40.374378][ T28] audit: type=1400 audit(1772268017.747:194): avc: denied { setopt } for pid=3689 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.450907][ T28] audit: type=1400 audit(1772268017.817:195): avc: denied { setopt } for pid=3693 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.824050][ T3692] Set syz1 is full, maxelem 65536 reached [ 40.999236][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.018365][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.034075][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.049916][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.150452][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.159144][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.668100][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.677720][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.725397][ T3736] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 41.731934][ T3736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.739891][ T3736] vhci_hcd vhci_hcd.0: Device attached [ 41.751385][ T3737] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 41.758404][ T1619] vhci_hcd vhci_hcd.0: stop threads [ 41.763828][ T1619] vhci_hcd vhci_hcd.0: release socket [ 41.769265][ T1619] vhci_hcd vhci_hcd.0: disconnect device [ 41.790810][ T3740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.799325][ T3740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.244412][ T3745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.253108][ T3745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.470252][ T3769] gretap0: entered promiscuous mode [ 42.475817][ T3769] vlan2: entered promiscuous mode [ 42.593866][ T3777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.605457][ T3777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.136622][ T3793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.145259][ T3793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.422390][ T30] bond0: (slave bond_slave_0): interface is now down [ 43.429209][ T30] bond0: (slave bond_slave_1): interface is now down [ 43.437443][ T30] bond0: now running without any active interface! [ 43.666353][ T3816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.675516][ T3816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.764715][ T3818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.773379][ T3818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.975387][ T3828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.985884][ T3828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.088807][ T3830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.098899][ T3830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.253752][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 44.253820][ T28] audit: type=1400 audit(1772268021.627:259): avc: denied { ioctl } for pid=3833 comm="syz.0.145" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.524762][ T3836] sctp: [Deprecated]: syz.2.146 (pid 3836) Use of int in max_burst socket option deprecated. [ 44.524762][ T3836] Use struct sctp_assoc_value instead [ 44.575723][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.584585][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.609481][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.618202][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.675406][ T3848] syzkaller0: entered promiscuous mode [ 44.681093][ T3848] syzkaller0: entered allmulticast mode [ 44.937600][ T3864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.946816][ T3864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.349772][ T3870] syz.2.158 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.410995][ T3870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.158'. [ 45.527675][ T3878] syzkaller0: entered promiscuous mode [ 45.533217][ T3878] syzkaller0: entered allmulticast mode [ 45.624992][ T3880] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.698074][ T3884] mmap: syz.0.163 (3884) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.828983][ T28] audit: type=1400 audit(1772268023.197:260): avc: denied { override_creds } for pid=3895 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.031845][ T3910] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 46.252219][ T3940] netlink: 'syz.2.190': attribute type 8 has an invalid length. [ 46.280909][ T3942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.295995][ T3942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.305186][ T28] audit: type=1400 audit(1772268023.677:261): avc: denied { bind } for pid=3943 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.326214][ T28] audit: type=1400 audit(1772268023.677:262): avc: denied { name_bind } for pid=3943 comm="syz.2.192" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 46.353417][ T28] audit: type=1400 audit(1772268023.677:263): avc: denied { node_bind } for pid=3943 comm="syz.2.192" saddr=224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 46.428705][ T28] audit: type=1400 audit(1772268023.797:264): avc: denied { connect } for pid=3953 comm="syz.2.197" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.855182][ T3969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.870705][ T3969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.972087][ T3997] program syz.3.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.107100][ T4017] ip6gretap0: entered promiscuous mode [ 47.113739][ T4017] vlan2: entered promiscuous mode [ 47.234469][ T28] audit: type=1400 audit(1772268024.607:265): avc: denied { create } for pid=4032 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.301498][ T4011] ================================================================== [ 47.309586][ T4011] BUG: KCSAN: data-race in n_tty_flush_buffer / n_tty_poll [ 47.316804][ T4011] [ 47.319130][ T4011] read to 0xffffc900107e5260 of 8 bytes by task 4019 on cpu 1: [ 47.326668][ T4011] n_tty_poll+0x2a8/0x450 [ 47.331006][ T4011] tty_poll+0x79/0xf0 [ 47.335071][ T4011] do_sys_poll+0x698/0xc10 [ 47.339488][ T4011] __x64_sys_poll+0x12c/0x230 [ 47.344177][ T4011] x64_sys_call+0x2891/0x3020 [ 47.348863][ T4011] do_syscall_64+0x12c/0x370 [ 47.353446][ T4011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.359339][ T4011] [ 47.361661][ T4011] write to 0xffffc900107e5260 of 16 bytes by task 4011 on cpu 0: [ 47.369367][ T4011] n_tty_flush_buffer+0x61/0x1d0 [ 47.374302][ T4011] tty_ldisc_hangup+0x77/0x480 [ 47.379059][ T4011] __tty_hangup+0x3c2/0x540 [ 47.383570][ T4011] tty_vhangup+0x17/0x20 [ 47.387830][ T4011] pty_close+0x2c5/0x2f0 [ 47.392070][ T4011] tty_release+0x1ff/0xb10 [ 47.396482][ T4011] __fput+0x29b/0x650 [ 47.400489][ T4011] ____fput+0x1c/0x30 [ 47.404471][ T4011] task_work_run+0x130/0x1a0 [ 47.409058][ T4011] exit_to_user_mode_loop+0x1f4/0x6f0 [ 47.414421][ T4011] do_syscall_64+0x249/0x370 [ 47.419004][ T4011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.424891][ T4011] [ 47.427238][ T4011] Reported by Kernel Concurrency Sanitizer on: [ 47.433395][ T4011] CPU: 0 UID: 0 PID: 4011 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT(full) [ 47.442586][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.452632][ T4011] ================================================================== [ 48.056223][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811e349a00: rx timeout, send abort [ 48.064495][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811e349a00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session.