last executing test programs: 5.280072152s ago: executing program 3 (id=97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) sendto$inet6(r0, &(0x7f0000000080)="d7", 0x1, 0xb5bf4a4daf0616bf, 0x0, 0x0) 5.214139213s ago: executing program 3 (id=98): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b700000000000000d60100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000, 0x2) 4.979985376s ago: executing program 3 (id=99): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 4.255689285s ago: executing program 1 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4.154693627s ago: executing program 1 (id=113): syz_emit_ethernet(0xffffffaa, 0x0, 0x0) 4.149118246s ago: executing program 1 (id=114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) 4.131736567s ago: executing program 1 (id=115): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.071122167s ago: executing program 1 (id=116): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0xfffffff2, 0x0, 0x0, 0x0) 4.070725698s ago: executing program 3 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.975906279s ago: executing program 3 (id=119): sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000100), 0x4001) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, 0x0, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x8, 0x4, 0x20, 0x15, 0xb, 0x6}}]}}]}, 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0x16, 0x60, 0x40, 0x586, 0x102, 0x140a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x1, 0x5f, 0xb9, 0x4d, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x400, 0x5, 0x2, 0x8}}]}}]}}]}}, 0x0) 3.923153759s ago: executing program 4 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) sendto$inet6(r0, &(0x7f0000000080)="d7", 0x1, 0xb5bf4a4daf0616bf, 0x0, 0x0) 3.859179021s ago: executing program 4 (id=122): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 2.838844564s ago: executing program 2 (id=124): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c5f6404113241af, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x2e, 0x80000000) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) 2.838430754s ago: executing program 0 (id=125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) 2.718903615s ago: executing program 0 (id=126): syz_usb_connect(0x0, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902290001000000000904000000020201"], 0x0) 2.535964407s ago: executing program 4 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x5}]}}}]}, 0x3c}}, 0x0) 1.927121946s ago: executing program 2 (id=128): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd4"], 0x310) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.819811947s ago: executing program 0 (id=129): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB='\f'], 0x24}, 0x1, 0x0, 0x0, 0x2021}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d000babadc31d000000000007000000", @ANYRES32=r2], 0x1c}}, 0x0) 1.782844757s ago: executing program 0 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.723520428s ago: executing program 0 (id=131): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='auxv\x00') sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msgsnd(0x0, &(0x7f00000017c0)={0x3}, 0x8, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) exit(0x0) 1.59117053s ago: executing program 4 (id=132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) sendto$inet6(r0, &(0x7f0000000080)="d7", 0x1, 0xb5bf4a4daf0616bf, 0x0, 0x0) 1.57829317s ago: executing program 4 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.314388403s ago: executing program 4 (id=134): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x200002e6) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000400)=[@mss={0x2, 0x1}, @timestamp, @timestamp, @timestamp], 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000180)={'U-', 0xd4d0}, 0x16, 0x2) 1.043013987s ago: executing program 1 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xe001, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.042410157s ago: executing program 2 (id=136): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2f4, 0x30, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{0x2e0, 0x1, [@m_skbedit={0x1f0, 0x18, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x6, 0x101}}]}, {0x191, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xec, 0x1c, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}]}, {0xb1, 0x6, "ebb7905fe91e9be4677d59a9642fd119d19ac5e190bf4b0f9f2859657921b9c6fce506e2b627b610552adbd25f19af61b6f9b1603735a6e3d97188050bf1e9e04f7b370bf4a6645e82f7d27fe7ecb451e477ceac7c3e03294761182420c71011ec9e6197a94d09c8348554283a8308b47f98b0290d3149d466fd232ac06f2714af49e9c6aab9f06632e3c3c186c30993075db909549bd0d742e089db268d485be88eb32a76d3f26969bc614157"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2f4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.038411097s ago: executing program 2 (id=137): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, 0x0) 1.022877147s ago: executing program 2 (id=138): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 539.082823ms ago: executing program 0 (id=139): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f00000016c0)="ab", 0x1, 0x18844, &(0x7f0000001440)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000000000000000000", @ANYRES32=0x0, @ANYBLOB='0\x00\x00\x00\x00\x00\x00'], 0x50}, 0x0) 538.339783ms ago: executing program 3 (id=140): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001680)=""/4096) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0, 0x6, 0x4, 0x6]) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) kernel console output (not intermixed with test programs): [ 22.038990][ T29] audit: type=1400 audit(1745530495.561:81): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 28.138047][ T29] audit: type=1400 audit(1745530501.661:82): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.139131][ T3291] cgroup: Unknown subsys name 'net' [ 28.160971][ T29] audit: type=1400 audit(1745530501.661:83): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.190069][ T29] audit: type=1400 audit(1745530501.681:84): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.328058][ T3291] cgroup: Unknown subsys name 'cpuset' [ 28.334296][ T3291] cgroup: Unknown subsys name 'rlimit' [ 28.465254][ T29] audit: type=1400 audit(1745530501.981:85): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.491435][ T29] audit: type=1400 audit(1745530501.981:86): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.497171][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.512235][ T29] audit: type=1400 audit(1745530501.981:87): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.542205][ T29] audit: type=1400 audit(1745530501.981:88): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.563108][ T29] audit: type=1400 audit(1745530501.991:89): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.564220][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.588758][ T29] audit: type=1400 audit(1745530501.991:90): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.621596][ T29] audit: type=1400 audit(1745530502.041:91): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.282629][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 30.339024][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 30.381982][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.389144][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.396486][ T3302] bridge_slave_0: entered allmulticast mode [ 30.403562][ T3302] bridge_slave_0: entered promiscuous mode [ 30.439569][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.446653][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.453987][ T3302] bridge_slave_1: entered allmulticast mode [ 30.460505][ T3302] bridge_slave_1: entered promiscuous mode [ 30.512057][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.519192][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.526351][ T3308] bridge_slave_0: entered allmulticast mode [ 30.533323][ T3308] bridge_slave_0: entered promiscuous mode [ 30.541125][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.553268][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.562570][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 30.576539][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.583989][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.591289][ T3308] bridge_slave_1: entered allmulticast mode [ 30.597794][ T3308] bridge_slave_1: entered promiscuous mode [ 30.613784][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 30.656537][ T3302] team0: Port device team_slave_0 added [ 30.664895][ T3302] team0: Port device team_slave_1 added [ 30.678852][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.707476][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.724361][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.731615][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.758690][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.776191][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.783434][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.790658][ T3301] bridge_slave_0: entered allmulticast mode [ 30.797036][ T3301] bridge_slave_0: entered promiscuous mode [ 30.803749][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.812861][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.820202][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.846577][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.865073][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.872490][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.880691][ T3301] bridge_slave_1: entered allmulticast mode [ 30.889159][ T3301] bridge_slave_1: entered promiscuous mode [ 30.916707][ T3308] team0: Port device team_slave_0 added [ 30.942471][ T3308] team0: Port device team_slave_1 added [ 30.950007][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.962299][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.970629][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.978704][ T3309] bridge_slave_0: entered allmulticast mode [ 30.986000][ T3309] bridge_slave_0: entered promiscuous mode [ 31.005486][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.023516][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.031247][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.039491][ T3309] bridge_slave_1: entered allmulticast mode [ 31.047866][ T3309] bridge_slave_1: entered promiscuous mode [ 31.069558][ T3302] hsr_slave_0: entered promiscuous mode [ 31.075869][ T3302] hsr_slave_1: entered promiscuous mode [ 31.098115][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.105540][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.135841][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.148704][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.156910][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.183666][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.200243][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.207613][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.214902][ T3305] bridge_slave_0: entered allmulticast mode [ 31.221547][ T3305] bridge_slave_0: entered promiscuous mode [ 31.236173][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.247191][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.262277][ T3301] team0: Port device team_slave_0 added [ 31.269770][ T3301] team0: Port device team_slave_1 added [ 31.275722][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.282984][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.290618][ T3305] bridge_slave_1: entered allmulticast mode [ 31.297433][ T3305] bridge_slave_1: entered promiscuous mode [ 31.331644][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.364456][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.381707][ T3309] team0: Port device team_slave_0 added [ 31.388371][ T3309] team0: Port device team_slave_1 added [ 31.394551][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.401755][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.430222][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.454425][ T3308] hsr_slave_0: entered promiscuous mode [ 31.461313][ T3308] hsr_slave_1: entered promiscuous mode [ 31.467897][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.480590][ T3308] Cannot create hsr debugfs directory [ 31.499575][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.508314][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.539865][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.557814][ T3305] team0: Port device team_slave_0 added [ 31.574710][ T3305] team0: Port device team_slave_1 added [ 31.592334][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.599519][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.625714][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.653532][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.661558][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.687865][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.699185][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.706207][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.733843][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.759471][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.766663][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.793756][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.818015][ T3301] hsr_slave_0: entered promiscuous mode [ 31.824233][ T3301] hsr_slave_1: entered promiscuous mode [ 31.830313][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.837957][ T3301] Cannot create hsr debugfs directory [ 31.874899][ T3309] hsr_slave_0: entered promiscuous mode [ 31.881208][ T3309] hsr_slave_1: entered promiscuous mode [ 31.888170][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.896250][ T3309] Cannot create hsr debugfs directory [ 31.929486][ T3305] hsr_slave_0: entered promiscuous mode [ 31.936351][ T3305] hsr_slave_1: entered promiscuous mode [ 31.943996][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.956299][ T3305] Cannot create hsr debugfs directory [ 32.021047][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.049750][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.073341][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.084699][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.150828][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.163943][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.173027][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.191612][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.205497][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.215247][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.242362][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.257666][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.266781][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.275987][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.296946][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.304304][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.317737][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.366536][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.388980][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.398444][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.407942][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.416970][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.434333][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.441523][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.456361][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.463547][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.492203][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.504163][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.522064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.529294][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.548923][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.556088][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.566912][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.583038][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.625856][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.632959][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.642796][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.650188][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.664896][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.686709][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.705385][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.713780][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.731989][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.739281][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.753860][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.764421][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.791116][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.802342][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.810155][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.835331][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.845959][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.864926][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.885084][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.892386][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.901591][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.908765][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.942099][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.984629][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.995578][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.011719][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.021553][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.093682][ T3308] veth0_vlan: entered promiscuous mode [ 33.120420][ T3308] veth1_vlan: entered promiscuous mode [ 33.143409][ T3302] veth0_vlan: entered promiscuous mode [ 33.182728][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.196069][ T3302] veth1_vlan: entered promiscuous mode [ 33.213175][ T3308] veth0_macvtap: entered promiscuous mode [ 33.220393][ T3301] veth0_vlan: entered promiscuous mode [ 33.229472][ T3305] veth0_vlan: entered promiscuous mode [ 33.242176][ T3308] veth1_macvtap: entered promiscuous mode [ 33.253310][ T3301] veth1_vlan: entered promiscuous mode [ 33.261781][ T3305] veth1_vlan: entered promiscuous mode [ 33.273398][ T3302] veth0_macvtap: entered promiscuous mode [ 33.281711][ T3302] veth1_macvtap: entered promiscuous mode [ 33.305738][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.314693][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.325817][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.340217][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.352662][ T3305] veth0_macvtap: entered promiscuous mode [ 33.361739][ T3301] veth0_macvtap: entered promiscuous mode [ 33.376457][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.389089][ T3305] veth1_macvtap: entered promiscuous mode [ 33.397475][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.408162][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.419125][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.431180][ T3308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.440148][ T3308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.449078][ T3308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.458127][ T3308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.470592][ T3301] veth1_macvtap: entered promiscuous mode [ 33.478833][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.487832][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.496671][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.505570][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.525200][ T3309] veth0_vlan: entered promiscuous mode [ 33.538436][ T3309] veth1_vlan: entered promiscuous mode [ 33.552186][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.564845][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.575422][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.586589][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.599161][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.613336][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.625385][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.635456][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.646249][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.656129][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.666874][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.677917][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.686403][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.697081][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.707265][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.717762][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.728359][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.739988][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 33.740005][ T29] audit: type=1400 audit(1745530507.261:110): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.ildHi3/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.742288][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.769703][ T29] audit: type=1400 audit(1745530507.291:111): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.771710][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.798495][ T29] audit: type=1400 audit(1745530507.301:112): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.ildHi3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.805362][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.815555][ T29] audit: type=1400 audit(1745530507.301:113): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.844987][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.856646][ T29] audit: type=1400 audit(1745530507.301:114): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.ildHi3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.881251][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.891478][ T29] audit: type=1400 audit(1745530507.301:115): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.ildHi3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.920524][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.922037][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.931747][ T29] audit: type=1400 audit(1745530507.311:116): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.009454][ T29] audit: type=1400 audit(1745530507.481:117): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.014750][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.034666][ T29] audit: type=1400 audit(1745530507.481:118): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=3956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.045148][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.078149][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.087781][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.101895][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.103550][ T3309] veth0_macvtap: entered promiscuous mode [ 34.132148][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.142011][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.151003][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.160589][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.175185][ T3309] veth1_macvtap: entered promiscuous mode [ 34.189281][ T29] audit: type=1400 audit(1745530507.701:119): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.241878][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.254195][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.267268][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.280395][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.294376][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.305639][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.317599][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.330440][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.349942][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.370091][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.380891][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.391986][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.402578][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.412461][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.417897][ T3444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.423321][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.443929][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.455334][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.468468][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.506349][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.516194][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.524847][ T3453] loop4: detected capacity change from 0 to 512 [ 34.525294][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.540600][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.603880][ T3453] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8: bg 0: block 248: padding at end of block bitmap is not set [ 34.630164][ T3453] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.8: Failed to acquire dquot type 1 [ 34.694610][ T3470] Zero length message leads to an empty skb [ 34.714451][ T3453] EXT4-fs (loop4): 1 truncate cleaned up [ 34.825716][ T3453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.839428][ T3453] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.320991][ T3484] tipc: Started in network mode [ 36.325949][ T3484] tipc: Node identity ac14140f, cluster identity 4711 [ 36.333177][ T3484] tipc: New replicast peer: 255.255.255.255 [ 36.339595][ T3484] tipc: Enabled bearer , priority 10 [ 37.005926][ T3496] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.010466][ T3453] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 37.088910][ T3496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.102441][ T3499] lo speed is unknown, defaulting to 1000 [ 37.108804][ T3499] lo speed is unknown, defaulting to 1000 [ 37.115128][ T3499] lo speed is unknown, defaulting to 1000 [ 37.121732][ T3499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.129526][ T3499] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 37.142642][ T3499] lo speed is unknown, defaulting to 1000 [ 37.150823][ T3499] lo speed is unknown, defaulting to 1000 [ 37.158065][ T3499] lo speed is unknown, defaulting to 1000 [ 37.165325][ T3499] lo speed is unknown, defaulting to 1000 [ 37.171784][ T3499] lo speed is unknown, defaulting to 1000 [ 37.354037][ T3453] wÞ£ÿ (3453) used greatest stack depth: 9208 bytes left [ 37.454693][ T3502] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 37.462188][ T9] tipc: Node number set to 2886997007 [ 37.526991][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.539106][ T2421] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 37.969776][ T3515] syz.4.20: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 37.984985][ T3515] CPU: 0 UID: 0 PID: 3515 Comm: syz.4.20 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) [ 37.985065][ T3515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.985085][ T3515] Call Trace: [ 37.985093][ T3515] [ 37.985101][ T3515] dump_stack_lvl+0xf6/0x150 [ 37.985128][ T3515] dump_stack+0x15/0x1a [ 37.985157][ T3515] warn_alloc+0x145/0x1b0 [ 37.985197][ T3515] ? audit_log_end+0x1d0/0x1e0 [ 37.985255][ T3515] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 37.985301][ T3515] __vmalloc_node_range_noprof+0xac/0xe80 [ 37.985355][ T3515] ? plist_check_list+0x1e0/0x220 [ 37.985372][ T3515] ? cgroup_rstat_updated+0xa4/0x590 [ 37.985400][ T3515] ? plist_check_list+0x1e0/0x220 [ 37.985418][ T3515] ? __switch_to+0x476/0x9f0 [ 37.985500][ T3515] ? plist_del+0x1f5/0x210 [ 37.985531][ T3515] ? _raw_spin_unlock+0x26/0x50 [ 37.985571][ T3515] ? should_fail_ex+0x31/0x270 [ 37.985594][ T3515] ? should_failslab+0x8f/0xb0 [ 37.985671][ T3515] vmalloc_user_noprof+0x59/0x70 [ 37.985725][ T3515] ? xskq_create+0x79/0xd0 [ 37.985761][ T3515] xskq_create+0x79/0xd0 [ 37.985784][ T3515] xsk_init_queue+0x82/0xd0 [ 37.985807][ T3515] xsk_setsockopt+0x37d/0x550 [ 37.985827][ T3515] ? __pfx_xsk_setsockopt+0x10/0x10 [ 37.985880][ T3515] __sys_setsockopt+0x187/0x200 [ 37.985908][ T3515] __x64_sys_setsockopt+0x66/0x80 [ 37.985933][ T3515] x64_sys_call+0x2a09/0x2e10 [ 37.985954][ T3515] do_syscall_64+0xc9/0x1a0 [ 37.985978][ T3515] ? clear_bhb_loop+0x25/0x80 [ 37.986087][ T3515] ? clear_bhb_loop+0x25/0x80 [ 37.986113][ T3515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.986139][ T3515] RIP: 0033:0x7fc7138ae969 [ 37.986163][ T3515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.986183][ T3515] RSP: 002b:00007fc711ed5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 37.986222][ T3515] RAX: ffffffffffffffda RBX: 00007fc713ad6160 RCX: 00007fc7138ae969 [ 37.986233][ T3515] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 37.986244][ T3515] RBP: 00007fc713930ab1 R08: 0000000000000004 R09: 0000000000000000 [ 37.986256][ T3515] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.986271][ T3515] R13: 0000000000000000 R14: 00007fc713ad6160 R15: 00007fffc1301728 [ 37.986295][ T3515] [ 37.986303][ T3515] Mem-Info: [ 38.231499][ T3515] active_anon:12765 inactive_anon:0 isolated_anon:0 [ 38.231499][ T3515] active_file:4272 inactive_file:2046 isolated_file:0 [ 38.231499][ T3515] unevictable:0 dirty:1391 writeback:0 [ 38.231499][ T3515] slab_reclaimable:2688 slab_unreclaimable:13088 [ 38.231499][ T3515] mapped:36937 shmem:8819 pagetables:903 [ 38.231499][ T3515] sec_pagetables:0 bounce:0 [ 38.231499][ T3515] kernel_misc_reclaimable:0 [ 38.231499][ T3515] free:1906284 free_pcp:3836 free_cma:0 [ 38.276927][ T3515] Node 0 active_anon:51060kB inactive_anon:0kB active_file:17088kB inactive_file:8184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147748kB dirty:5564kB writeback:0kB shmem:35276kB writeback_tmp:0kB kernel_stack:2848kB pagetables:3612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 38.306342][ T3515] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 38.333506][ T3515] lowmem_reserve[]: 0 2882 7860 7860 [ 38.338964][ T3515] Node 0 DMA32 free:2947780kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 38.367584][ T3515] lowmem_reserve[]: 0 0 4978 4978 [ 38.372733][ T3515] Node 0 Normal free:4661996kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:51060kB inactive_anon:0kB active_file:17088kB inactive_file:8184kB unevictable:0kB writepending:5564kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:11796kB local_pcp:5640kB free_cma:0kB [ 38.403383][ T3515] lowmem_reserve[]: 0 0 0 0 [ 38.408375][ T3515] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 38.421170][ T3515] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947780kB [ 38.437439][ T3515] Node 0 Normal: 76*4kB (UE) 36*8kB (UM) 15*16kB (UM) 15*32kB (UM) 28*64kB (UME) 12*128kB (UE) 8*256kB (UE) 8*512kB (UE) 4*1024kB (U) 3*2048kB (U) 1133*4096kB (M) = 4661792kB [ 38.455476][ T3515] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 38.465754][ T3515] 15152 total pagecache pages [ 38.470712][ T3515] 0 pages in swap cache [ 38.474896][ T3515] Free swap = 124996kB [ 38.479160][ T3515] Total swap = 124996kB [ 38.483405][ T3515] 2097051 pages RAM [ 38.487319][ T3515] 0 pages HighMem/MovableOnly [ 38.492046][ T3515] 80823 pages reserved [ 38.969689][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 38.969703][ T29] audit: type=1400 audit(1745530512.491:251): avc: denied { listen } for pid=3521 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.064069][ T29] audit: type=1400 audit(1745530512.581:252): avc: denied { ioctl } for pid=3525 comm="syz.2.26" path="socket:[5224]" dev="sockfs" ino=5224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.267462][ T29] audit: type=1400 audit(1745530512.791:253): avc: denied { setopt } for pid=3533 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.455874][ T29] audit: type=1400 audit(1745530512.791:254): avc: denied { read } for pid=3533 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.476093][ T29] audit: type=1400 audit(1745530512.971:255): avc: denied { getopt } for pid=3525 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.199632][ T29] audit: type=1400 audit(1745530513.081:256): avc: denied { connect } for pid=3535 comm="syz.0.28" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.222285][ T29] audit: type=1400 audit(1745530513.081:257): avc: denied { write } for pid=3535 comm="syz.0.28" path="socket:[4420]" dev="sockfs" ino=4420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.281844][ T3542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29'. [ 40.317604][ T29] audit: type=1400 audit(1745530513.831:258): avc: denied { map } for pid=3549 comm="syz.4.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.341630][ T29] audit: type=1400 audit(1745530513.831:259): avc: denied { read write } for pid=3549 comm="syz.4.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.369093][ T3550] 9pnet_fd: Insufficient options for proto=fd [ 40.377552][ T29] audit: type=1400 audit(1745530513.891:260): avc: denied { mounton } for pid=3549 comm="syz.4.33" path="/7/file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.597989][ T3557] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 40.970000][ T3496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.175537][ C1] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(40232977501970) <= P.seqno(40232977501969) <= S.SWH(40232977502044)) and (P.ackno exists or LAWL(59091982561167) <= P.ackno(59091982561167) <= S.AWH(59091982561167), sending SYNC... [ 41.742193][ T3496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.893264][ T3496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.102280][ T3496] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.133388][ T3496] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.214203][ T3496] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.265798][ T3496] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.432396][ T3620] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 42.440981][ T3620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'. [ 42.507433][ T3620] team0: Port device geneve1 added [ 42.762434][ T3632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.832719][ T3632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.144451][ T3655] batman_adv: batadv0: Adding interface: dummy0 [ 43.150855][ T3655] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.178722][ T3655] batman_adv: batadv0: Interface activated: dummy0 [ 43.204378][ T3655] batadv0: mtu less than device minimum [ 43.211789][ T3655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 43.224346][ T3655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 43.237605][ T3655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 43.250186][ T3655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 43.261209][ T3655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 43.272464][ T3655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 43.283345][ T3655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 43.294510][ T3655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.278324][ T3684] program syz.4.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.287596][ T3684] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 44.307746][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 44.307770][ T29] audit: type=1400 audit(1745530517.801:304): avc: denied { ioctl } for pid=3674 comm="syz.4.75" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.338997][ T29] audit: type=1400 audit(1745530517.811:305): avc: denied { connect } for pid=3674 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.853971][ T29] audit: type=1400 audit(1745530518.351:306): avc: denied { connect } for pid=3696 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.889116][ T29] audit: type=1400 audit(1745530518.411:307): avc: denied { bind } for pid=3698 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.475073][ T3720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.493334][ T29] audit: type=1400 audit(1745530518.991:308): avc: denied { bind } for pid=3716 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.513563][ T29] audit: type=1400 audit(1745530518.991:309): avc: denied { write } for pid=3711 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.518209][ T3720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.533902][ T29] audit: type=1400 audit(1745530518.991:310): avc: denied { nlmsg_write } for pid=3711 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.608075][ T29] audit: type=1400 audit(1745530519.081:311): avc: denied { create } for pid=3716 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.627437][ T29] audit: type=1400 audit(1745530519.081:312): avc: denied { write } for pid=3716 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.764140][ T3723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.92'. [ 45.786331][ T3725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.819418][ T3725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.746930][ T29] audit: type=1400 audit(1745530520.241:313): avc: denied { create } for pid=3741 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.091980][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.137567][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.418626][ T3767] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 48.178756][ T3794] lo speed is unknown, defaulting to 1000 [ 48.184640][ T3794] lo speed is unknown, defaulting to 1000 [ 48.192151][ T3794] lo speed is unknown, defaulting to 1000 [ 48.201154][ T3794] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 48.270331][ T3794] lo speed is unknown, defaulting to 1000 [ 48.277008][ T3794] lo speed is unknown, defaulting to 1000 [ 48.283407][ T3794] lo speed is unknown, defaulting to 1000 [ 48.289936][ T3794] lo speed is unknown, defaulting to 1000 [ 48.298622][ T3794] lo speed is unknown, defaulting to 1000 [ 48.308237][ T3797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.317295][ T3797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.126073][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.263281][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.346747][ T3814] netlink: 60 bytes leftover after parsing attributes in process `syz.4.127'. [ 49.356181][ T3814] unsupported nlmsg_type 40 [ 49.367052][ T3814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.100480][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 50.100567][ T29] audit: type=1400 audit(1745530523.621:319): avc: denied { mounton } for pid=3829 comm="syz.4.133" path="/35/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 50.202851][ T29] audit: type=1400 audit(1745530523.621:320): avc: denied { unmount } for pid=3829 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.222715][ T29] audit: type=1400 audit(1745530523.681:321): avc: denied { ioctl } for pid=3824 comm="syz.0.131" path="socket:[4896]" dev="sockfs" ino=4896 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.963221][ T3309] ================================================================== [ 51.971360][ T3309] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 51.979291][ T3309] [ 51.981626][ T3309] read-write to 0xffff8881044fc818 of 8 bytes by task 3851 on cpu 0: [ 51.989789][ T3309] shmem_add_to_page_cache+0x3bb/0x4b0 [ 51.995278][ T3309] shmem_get_folio_gfp+0x4dd/0xd30 [ 52.000416][ T3309] shmem_write_begin+0xa7/0x190 [ 52.005374][ T3309] generic_perform_write+0x189/0x4b0 [ 52.010981][ T3309] shmem_file_write_iter+0xc2/0xe0 [ 52.016204][ T3309] __kernel_write_iter+0x243/0x4c0 [ 52.021337][ T3309] dump_user_range+0x5ed/0x8b0 [ 52.026170][ T3309] elf_core_dump+0x1d61/0x1ef0 [ 52.031611][ T3309] do_coredump+0x1814/0x1f50 [ 52.036247][ T3309] get_signal+0xdb7/0x1080 [ 52.040694][ T3309] arch_do_signal_or_restart+0x9a/0x480 [ 52.046312][ T3309] irqentry_exit_to_user_mode+0xa7/0x120 [ 52.052336][ T3309] irqentry_exit+0x12/0x50 [ 52.056814][ T3309] asm_exc_page_fault+0x26/0x30 [ 52.061713][ T3309] [ 52.064188][ T3309] read to 0xffff8881044fc818 of 8 bytes by task 3309 on cpu 1: [ 52.071809][ T3309] shmem_getattr+0x69/0x200 [ 52.076354][ T3309] vfs_getattr_nosec+0x141/0x1d0 [ 52.081430][ T3309] vfs_statx+0x145/0x2f0 [ 52.085702][ T3309] vfs_fstatat+0xd9/0x150 [ 52.090146][ T3309] __se_sys_newfstatat+0x58/0x260 [ 52.095217][ T3309] __x64_sys_newfstatat+0x55/0x70 [ 52.100278][ T3309] x64_sys_call+0x2d6f/0x2e10 [ 52.104984][ T3309] do_syscall_64+0xc9/0x1a0 [ 52.109529][ T3309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.115448][ T3309] [ 52.117792][ T3309] value changed: 0x000000000000207d -> 0x000000000000207e [ 52.124916][ T3309] [ 52.127264][ T3309] Reported by Kernel Concurrency Sanitizer on: [ 52.133426][ T3309] CPU: 1 UID: 0 PID: 3309 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(voluntary) [ 52.149430][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.159599][ T3309] ================================================================== [ 52.248905][ T3857] tipc: Enabling of bearer rejected, failed to enable media