last executing test programs: 3.066746065s ago: executing program 3 (id=906): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x14, &(0x7f0000000300)=[{&(0x7f0000000340)=' ', 0x100120}], 0x1}, 0xd007) 2.951158277s ago: executing program 3 (id=908): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x4000090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 2.950804017s ago: executing program 4 (id=909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x9cc}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000008c0)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.82851141s ago: executing program 3 (id=911): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000191c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000019200)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) r4 = syz_open_dev$loop(&(0x7f0000019280), 0x75f, 0xa8182) r5 = memfd_create(&(0x7f00000192c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1}}}}]}, 0x4c}}, 0x0) 2.455693969s ago: executing program 1 (id=918): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x14, &(0x7f0000000300)=[{&(0x7f0000000340)=' ', 0x100120}], 0x1}, 0xd007) 2.44240769s ago: executing program 4 (id=919): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x535d, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000280)=0x2eb4, 0x2000007ff) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32, @ANYBLOB="05002f"], 0x2c}}, 0x18) 2.231023745s ago: executing program 1 (id=920): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.811940816s ago: executing program 1 (id=921): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x4000090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 1.540723052s ago: executing program 3 (id=927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000055c0)={0x0, 0x0, &(0x7f0000005600)={&(0x7f0000005640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005700)={&(0x7f0000005740)={{0x14, 0x10, 0x1, 0x0, 0xf5ff, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000851}, 0x20040040) 1.539438022s ago: executing program 4 (id=928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x9cc}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000008c0)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.516394823s ago: executing program 0 (id=929): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xea, &(0x7f0000000440)=""/234, 0x0, 0x8}, 0x94) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400) 1.515391383s ago: executing program 2 (id=930): ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r3, 0x0, r4, 0x0, 0x2, 0x5) write$binfmt_elf64(r2, 0x0, 0xfffffe3e) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.461149404s ago: executing program 0 (id=931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x11c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0x7, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xf0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_SEL={0xe4, 0x5, {0x7, 0x1, 0xe, 0x6, 0xfff, 0x7374, 0x100, 0x0, [{0x6, 0x1, 0x2}, {0x2, 0x1, 0x0, 0x7}, {0x80000000, 0x1ff, 0x3, 0x6}, {0x3, 0x8, 0x0, 0x5}, {0x6, 0xb632, 0x9, 0x7fffffff}, {0x4, 0x7, 0x1, 0x6}, {0x9f33, 0x280000, 0x10, 0x3}, {0xebe4, 0x8, 0x7, 0xfffffff9}, {0x80000001, 0x7fffffff, 0x7, 0x9}, {0x66, 0xfffffffe, 0x7, 0x40}, {0x64, 0x300, 0x10000, 0xe}, {0xb93, 0x81, 0x8, 0xaf2}, {0xfffffffe, 0x28, 0x6, 0x1}]}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) 1.460030894s ago: executing program 0 (id=932): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.345180057s ago: executing program 2 (id=933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000680)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000006c0)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/166, 0xa6}], 0x1}, 0x7a4b}], 0x2, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000900)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0xe, 0x6, &(0x7f0000000a40)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000a80)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="050000", @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000b80)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 1.252760519s ago: executing program 4 (id=934): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001400010004000000000000000a0000000400000014000100ff0d000003000000000000000000000108000880bf74"], 0x34}, 0x1, 0x0, 0x0, 0x20000854}, 0x2000801c) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x10, 0x80000, 0x3, &(0x7f0000000cc0)) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x6040c1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 1.21999807s ago: executing program 0 (id=935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.21700419s ago: executing program 2 (id=936): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) 991.214376ms ago: executing program 3 (id=937): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='}', 0x1}], 0x1) 990.874336ms ago: executing program 3 (id=938): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000191c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000019200)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) r4 = syz_open_dev$loop(&(0x7f0000019280), 0x75f, 0xa8182) r5 = memfd_create(&(0x7f00000192c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000280)=0x2eb4, 0x2000007ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r5, @ANYBLOB="05002f"], 0x2c}}, 0x18) 465.400198ms ago: executing program 1 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x24004810) 447.938739ms ago: executing program 1 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000004b40), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000004b80)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000004bc0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000004c00)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004c40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004d00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000004d40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004e00)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) 287.389353ms ago: executing program 2 (id=942): syz_emit_ethernet(0x66, &(0x7f0000000580)={@empty, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x64, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0x4, 0x1, 0x0, 0x0, 0x7, 0x2}, 0x1, {0xd}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0xcb, 0x1, 0x0, 0x1, 0x1, 0xa}, 0x2, {0x0, 0x7ff, 0x0, 0x4, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) 258.185683ms ago: executing program 2 (id=943): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 225.481374ms ago: executing program 4 (id=944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x9cc}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000008c0)={'syzkaller0\x00', @random="2b0100004ec6"}) 216.038895ms ago: executing program 1 (id=945): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 83.160678ms ago: executing program 0 (id=946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000680)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000006c0)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/166, 0xa6}], 0x1}, 0x7a4b}], 0x2, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000900)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0xe, 0x6, &(0x7f0000000a40)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000a80)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="050000", @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000b80)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 0s ago: executing program 2 (id=947): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "c6d560164376f018", "21e3655de63f34cfa1bd5c41e4c6ccfc", "655ceb10", "8f068e40342cf1d5"}, 0x28) kernel console output (not intermixed with test programs): [ 24.510084][ T29] audit: type=1400 audit(1792073856.160:103): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.510127][ T29] audit: type=1400 audit(1792073856.160:104): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.456058][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 25.456077][ T29] audit: type=1400 audit(1792073857.100:114): avc: denied { write } for pid=3195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.493051][ T29] audit: type=1400 audit(1792073857.140:115): avc: denied { write } for pid=3206 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.666849][ T29] audit: type=1400 audit(1792073857.310:116): avc: denied { write } for pid=3209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.697303][ T29] audit: type=1400 audit(1792073857.340:117): avc: denied { write } for pid=3220 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.871930][ T29] audit: type=1400 audit(1792073857.520:118): avc: denied { write } for pid=3223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.908808][ T29] audit: type=1400 audit(1792073857.560:119): avc: denied { write } for pid=3234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.657089][ T29] audit: type=1400 audit(1792073858.300:120): avc: denied { write } for pid=3237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.687402][ T29] audit: type=1400 audit(1792073858.330:121): avc: denied { write } for pid=3248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.819057][ T29] audit: type=1400 audit(1792073858.470:122): avc: denied { write } for pid=3252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.855774][ T29] audit: type=1400 audit(1792073858.500:123): avc: denied { write } for pid=3263 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 30.638856][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 30.638874][ T29] audit: type=1400 audit(1792073862.290:126): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.639175][ T29] audit: type=1400 audit(1792073862.290:127): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.639786][ T3287] cgroup: Unknown subsys name 'net' [ 30.640053][ T29] audit: type=1400 audit(1792073862.290:128): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.808818][ T3287] cgroup: Unknown subsys name 'cpuset' [ 30.809546][ T3287] cgroup: Unknown subsys name 'rlimit' [ 30.908860][ T29] audit: type=1400 audit(1792073862.560:129): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.909943][ T29] audit: type=1400 audit(1792073862.560:130): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.910101][ T29] audit: type=1400 audit(1792073862.560:131): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.910420][ T29] audit: type=1400 audit(1792073862.560:132): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.915818][ T29] audit: type=1400 audit(1792073862.560:133): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.915900][ T29] audit: type=1400 audit(1792073862.560:134): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.965744][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.966369][ T29] audit: type=1400 audit(1792073862.610:135): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.002709][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.259428][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.259831][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.260125][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.262299][ T3298] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 32.295803][ T3306] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 32.297843][ T3303] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 32.328850][ T3304] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 32.378192][ T3299] infiniband rxe0: set active [ 32.378211][ T3299] infiniband rxe0: added rxe_eth0 [ 32.378917][ T37] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.405115][ T3299] RDS/IB: rxe0: added [ 32.405133][ T3299] smc: adding ib device rxe0 with port count 1 [ 32.405155][ T3299] smc: ib device rxe0 port 1 has no pnetid [ 32.405572][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.443260][ T37] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.473300][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.532462][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.606915][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.722665][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.746726][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.746922][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.746980][ T3306] bridge_slave_0: entered allmulticast mode [ 32.747673][ T3306] bridge_slave_0: entered promiscuous mode [ 32.793183][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.793212][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.793263][ T3306] bridge_slave_1: entered allmulticast mode [ 32.793916][ T3306] bridge_slave_1: entered promiscuous mode [ 32.814331][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.814422][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.814480][ T3303] bridge_slave_0: entered allmulticast mode [ 32.816148][ T3303] bridge_slave_0: entered promiscuous mode [ 32.851793][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.851841][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.851901][ T3298] bridge_slave_0: entered allmulticast mode [ 32.852416][ T3298] bridge_slave_0: entered promiscuous mode [ 32.880315][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.880419][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.880627][ T3303] bridge_slave_1: entered allmulticast mode [ 32.881856][ T3303] bridge_slave_1: entered promiscuous mode [ 32.897631][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.911486][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.911577][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.911800][ T3298] bridge_slave_1: entered allmulticast mode [ 32.913130][ T3298] bridge_slave_1: entered promiscuous mode [ 32.943156][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.955902][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.955936][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.956034][ T3304] bridge_slave_0: entered allmulticast mode [ 32.956442][ T3304] bridge_slave_0: entered promiscuous mode [ 32.996864][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.996899][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.997019][ T3304] bridge_slave_1: entered allmulticast mode [ 32.997430][ T3304] bridge_slave_1: entered promiscuous mode [ 33.032241][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.033490][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.034805][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.072139][ T3306] team0: Port device team_slave_0 added [ 33.077742][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.080506][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.102455][ T3304] team0: Port device team_slave_0 added [ 33.103751][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.111342][ T3306] team0: Port device team_slave_1 added [ 33.123483][ T3304] team0: Port device team_slave_1 added [ 33.136206][ T3303] team0: Port device team_slave_0 added [ 33.155601][ T3303] team0: Port device team_slave_1 added [ 33.164884][ T3298] team0: Port device team_slave_0 added [ 33.167397][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.167411][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.167445][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.206400][ T3298] team0: Port device team_slave_1 added [ 33.213145][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.213242][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.213335][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.214212][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.214252][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.214336][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.233195][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.233244][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.233337][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.234369][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.234411][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.234504][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.272594][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.272636][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.272759][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.285038][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.285088][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.285190][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.288589][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.288708][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.288798][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.413257][ T3304] hsr_slave_0: entered promiscuous mode [ 33.414265][ T3304] hsr_slave_1: entered promiscuous mode [ 33.421124][ T3298] hsr_slave_0: entered promiscuous mode [ 33.422097][ T3298] hsr_slave_1: entered promiscuous mode [ 33.422798][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 33.422845][ T3298] Cannot create hsr debugfs directory [ 33.466242][ T3303] hsr_slave_0: entered promiscuous mode [ 33.467191][ T3303] hsr_slave_1: entered promiscuous mode [ 33.467849][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 33.467903][ T3303] Cannot create hsr debugfs directory [ 33.507816][ T3306] hsr_slave_0: entered promiscuous mode [ 33.509173][ T3306] hsr_slave_1: entered promiscuous mode [ 33.509964][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 33.510051][ T3306] Cannot create hsr debugfs directory [ 33.679260][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.679296][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.679356][ T3299] bridge_slave_0: entered allmulticast mode [ 33.679918][ T3299] bridge_slave_0: entered promiscuous mode [ 33.720683][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.720798][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.720902][ T3299] bridge_slave_1: entered allmulticast mode [ 33.721410][ T3299] bridge_slave_1: entered promiscuous mode [ 33.777395][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.801371][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.844020][ T3299] team0: Port device team_slave_0 added [ 33.854514][ T3299] team0: Port device team_slave_1 added [ 33.877092][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.877110][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.877166][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.886192][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.916279][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.917943][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.926102][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.929738][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.939943][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.949478][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.961158][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.977861][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.977877][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.977977][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.039717][ T3299] hsr_slave_0: entered promiscuous mode [ 34.040152][ T3299] hsr_slave_1: entered promiscuous mode [ 34.040329][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 34.040343][ T3299] Cannot create hsr debugfs directory [ 34.040450][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.042904][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.043625][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.045534][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.046196][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.047871][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.060201][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.069907][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.143369][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.145491][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.170851][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.172794][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.198677][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.200733][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.201996][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.203935][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.247470][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.252151][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.264139][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.266297][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.267893][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.290808][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.307867][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.316424][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.343942][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.373523][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.375602][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.376088][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.378448][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.384825][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.387841][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.423907][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.424603][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.426537][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.451954][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.457094][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.457132][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.471277][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.492335][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.492384][ T729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.494127][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.494205][ T729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.534296][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.534404][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.574698][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.577950][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.611249][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.616598][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.616692][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.640260][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.640299][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.673046][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.697311][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.711585][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.711622][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.733185][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.733223][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.757927][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.789242][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.795493][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.795538][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.821267][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.821319][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.925865][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.029710][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.086106][ T3304] veth0_vlan: entered promiscuous mode [ 35.092236][ T3304] veth1_vlan: entered promiscuous mode [ 35.109265][ T3304] veth0_macvtap: entered promiscuous mode [ 35.111367][ T3304] veth1_macvtap: entered promiscuous mode [ 35.116687][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.125343][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.178561][ T95] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.179151][ T95] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.179317][ T95] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.179488][ T95] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.204532][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.235315][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.265576][ T3304] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.301748][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.349890][ T3303] veth0_vlan: entered promiscuous mode [ 35.370476][ T3303] veth1_vlan: entered promiscuous mode [ 35.411445][ T3303] veth0_macvtap: entered promiscuous mode [ 35.416785][ T3303] veth1_macvtap: entered promiscuous mode [ 35.437578][ T3298] veth0_vlan: entered promiscuous mode [ 35.449111][ T3298] veth1_vlan: entered promiscuous mode [ 35.451831][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.457676][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.528920][ T95] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.530169][ T95] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.530208][ T95] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.530289][ T95] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.531523][ T3299] veth0_vlan: entered promiscuous mode [ 35.534045][ T3299] veth1_vlan: entered promiscuous mode [ 35.592976][ T3299] veth0_macvtap: entered promiscuous mode [ 35.594627][ T3299] veth1_macvtap: entered promiscuous mode [ 35.611824][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.613407][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.649441][ T3298] veth0_macvtap: entered promiscuous mode [ 35.675871][ T3298] veth1_macvtap: entered promiscuous mode [ 35.856580][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.884335][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.968413][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.969194][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.018706][ T378] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.198985][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.199521][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.200147][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.264171][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 36.264191][ T29] audit: type=1400 audit(1792073867.910:161): avc: denied { create } for pid=3524 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.278561][ T29] audit: type=1400 audit(1792073867.920:162): avc: denied { write } for pid=3524 comm="syz.1.2" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.279343][ T29] audit: type=1400 audit(1792073867.920:163): avc: denied { map_create } for pid=3527 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.279423][ T29] audit: type=1400 audit(1792073867.920:164): avc: denied { perfmon } for pid=3527 comm="syz.2.7" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.279495][ T29] audit: type=1400 audit(1792073867.920:165): avc: denied { map_read map_write } for pid=3527 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.310532][ T3306] veth0_vlan: entered promiscuous mode [ 36.468502][ T3306] veth1_vlan: entered promiscuous mode [ 36.495636][ T29] audit: type=1400 audit(1792073868.140:166): avc: denied { create } for pid=3530 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.496815][ T29] audit: type=1400 audit(1792073868.140:167): avc: denied { write } for pid=3530 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.530125][ T29] audit: type=1400 audit(1792073868.170:168): avc: denied { create } for pid=3533 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.535960][ T29] audit: type=1400 audit(1792073868.170:169): avc: denied { write } for pid=3533 comm="syz.1.9" path="socket:[4480]" dev="sockfs" ino=4480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.544469][ T29] audit: type=1400 audit(1792073868.190:170): avc: denied { read } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.554306][ T3306] veth0_macvtap: entered promiscuous mode [ 36.558856][ T3306] veth1_macvtap: entered promiscuous mode [ 36.644452][ T3537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.644897][ T3537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.254205][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.258074][ T95] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.273637][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.294900][ T3540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.295140][ T3540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.663282][ T3547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.663600][ T3547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.688839][ T378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.689427][ T378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.759641][ T378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.760573][ T95] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.760742][ T95] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.101266][ T3551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.101597][ T3551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.259961][ T3556] tipc: Started in network mode [ 38.259992][ T3556] tipc: Node identity 4aa2037280d8, cluster identity 4711 [ 38.260079][ T3556] tipc: Enabled bearer , priority 0 [ 38.260544][ T3556] syzkaller0: entered promiscuous mode [ 38.260559][ T3556] syzkaller0: entered allmulticast mode [ 38.264637][ T3556] tipc: Resetting bearer [ 38.265874][ T3555] tipc: Resetting bearer [ 38.267538][ T3555] tipc: Disabling bearer [ 38.849571][ T3565] ======================================================= [ 38.849571][ T3565] WARNING: The mand mount option has been deprecated and [ 38.849571][ T3565] and is ignored by this kernel. Remove the mand [ 38.849571][ T3565] option from the mount to silence this warning. [ 38.849571][ T3565] ======================================================= [ 39.158532][ T3568] netlink: 88 bytes leftover after parsing attributes in process `syz.0.17'. [ 39.475799][ T3579] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 39.475823][ T3579] netlink: 'syz.4.21': attribute type 2 has an invalid length. [ 39.593840][ T3586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.594003][ T3586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.638874][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 41.638895][ T29] audit: type=1400 audit(1792073873.120:216): avc: denied { write } for pid=3597 comm="syz.2.28" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.026044][ T3602] syz.2.28 (3602) used greatest stack depth: 11104 bytes left [ 42.139554][ T29] audit: type=1400 audit(1792073873.790:217): avc: denied { append } for pid=3610 comm="syz.4.32" name="trace_marker" dev="tracefs" ino=2312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 42.149945][ T29] audit: type=1400 audit(1792073873.800:218): avc: denied { setopt } for pid=3608 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.150449][ T29] audit: type=1400 audit(1792073873.800:219): avc: denied { bind } for pid=3608 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.151271][ T29] audit: type=1400 audit(1792073873.800:220): avc: denied { write } for pid=3608 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.156606][ T3613] netlink: 596 bytes leftover after parsing attributes in process `syz.0.33'. [ 42.372601][ T3624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.372760][ T3624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.288097][ T3407] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.319580][ T3626] syz.0.36 (3626) used greatest stack depth: 11072 bytes left [ 43.590008][ T29] audit: type=1400 audit(1792073875.230:221): avc: denied { ioctl } for pid=3615 comm="syz.4.35" path="socket:[4656]" dev="sockfs" ino=4656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.680725][ T29] audit: type=1400 audit(1792073875.330:222): avc: denied { write } for pid=3628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.775051][ T29] audit: type=1400 audit(1792073875.420:223): avc: denied { write } for pid=3646 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.820685][ T3648] syzkaller0: entered promiscuous mode [ 43.820709][ T3648] syzkaller0: entered allmulticast mode [ 43.835123][ T3648] tipc: Enabled bearer , priority 0 [ 43.880137][ T29] audit: type=1400 audit(1792073875.530:224): avc: denied { bind } for pid=3656 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.882586][ T3648] tipc: Resetting bearer [ 43.887326][ T3647] tipc: Resetting bearer [ 43.920876][ T3647] tipc: Disabling bearer [ 43.935649][ T3658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.935774][ T3658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.999945][ T29] audit: type=1400 audit(1792073875.650:225): avc: denied { open } for pid=3659 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.153270][ T3670] capability: warning: `syz.3.50' uses deprecated v2 capabilities in a way that may be insecure [ 45.242721][ T3708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.243454][ T3708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.878585][ T3732] tmpfs: Unsupported parameter 'huge' [ 47.748662][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 47.748984][ T29] audit: type=1400 audit(1792073878.950:249): avc: denied { map } for pid=3737 comm="syz.3.74" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.749014][ T29] audit: type=1400 audit(1792073878.950:250): avc: denied { read write } for pid=3737 comm="syz.3.74" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.159149][ T29] audit: type=1400 audit(1792073879.810:251): avc: denied { read } for pid=3758 comm="syz.1.79" name="event3" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.159183][ T29] audit: type=1400 audit(1792073879.810:252): avc: denied { open } for pid=3758 comm="syz.1.79" path="/dev/input/event3" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.160104][ T29] audit: type=1400 audit(1792073879.810:253): avc: denied { ioctl } for pid=3758 comm="syz.1.79" path="/dev/input/event3" dev="devtmpfs" ino=251 ioctlcmd=0x457f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.330041][ T3784] process 'syz.4.85' launched './file2' with NULL argv: empty string added [ 49.335399][ T29] audit: type=1400 audit(1792073880.980:254): avc: denied { execute } for pid=3770 comm="syz.4.85" name="file2" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.335431][ T29] audit: type=1400 audit(1792073880.980:255): avc: denied { execute_no_trans } for pid=3770 comm="syz.4.85" path="/15/file2" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.335457][ T29] audit: type=1400 audit(1792073880.980:256): avc: denied { create } for pid=3770 comm="syz.4.85" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.335524][ T29] audit: type=1400 audit(1792073880.980:257): avc: denied { read } for pid=3770 comm="syz.4.85" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.335551][ T29] audit: type=1400 audit(1792073880.980:258): avc: denied { open } for pid=3770 comm="syz.4.85" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.028612][ T3812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.028714][ T3812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.617535][ T3820] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 51.617619][ T3820] netlink: 280 bytes leftover after parsing attributes in process `syz.1.100'. [ 51.715970][ T3827] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 51.716002][ T3827] netlink: 'syz.0.104': attribute type 2 has an invalid length. [ 51.870901][ T3842] tipc: Started in network mode [ 51.870935][ T3842] tipc: Node identity 3287e89fc6ed, cluster identity 4711 [ 51.871007][ T3842] tipc: Enabled bearer , priority 0 [ 51.871353][ T3842] syzkaller0: entered promiscuous mode [ 51.871423][ T3842] syzkaller0: entered allmulticast mode [ 51.875883][ T3842] tipc: Resetting bearer [ 51.876743][ T3841] tipc: Resetting bearer [ 51.921151][ T3841] tipc: Disabling bearer [ 52.018648][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.018758][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.334160][ T3850] FAULT_INJECTION: forcing a failure. [ 52.334160][ T3850] name failslab, interval 1, probability 0, space 0, times 0 [ 52.334460][ T3850] CPU: 1 UID: 0 PID: 3850 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.334497][ T3850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.334522][ T3850] Call Trace: [ 52.334530][ T3850] [ 52.334538][ T3850] __dump_stack+0x1d/0x30 [ 52.334572][ T3850] dump_stack_lvl+0x95/0xd0 [ 52.334603][ T3850] dump_stack+0x15/0x1b [ 52.334630][ T3850] should_fail_ex+0x262/0x280 [ 52.334659][ T3850] ? __alloc_skb+0x2e0/0x6f0 [ 52.334680][ T3850] should_failslab+0x8c/0xb0 [ 52.334806][ T3850] kmem_cache_alloc_node_noprof+0x82/0x400 [ 52.334897][ T3850] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 52.334930][ T3850] ? __alloc_skb+0x2e0/0x6f0 [ 52.335101][ T3850] ? timer_delete+0x177/0x2c0 [ 52.335197][ T3850] __alloc_skb+0x2e0/0x6f0 [ 52.335276][ T3850] ? __alloc_skb+0x209/0x6f0 [ 52.335297][ T3850] inet6_ifmcaddr_notify+0xd6/0x190 [ 52.335330][ T3850] __ipv6_dev_mc_dec+0x1aa/0x390 [ 52.335429][ T3850] ipv6_mc_destroy_dev+0x22c/0x4a0 [ 52.335505][ T3850] ? _raw_write_unlock_bh+0x1f/0x40 [ 52.335549][ T3850] addrconf_ifdown+0xd23/0xf70 [ 52.335652][ T3850] ? tls_dev_event+0x3d9/0x9a0 [ 52.335687][ T3850] addrconf_notify+0x214/0x8e0 [ 52.335705][ T3850] ? __pfx_addrconf_notify+0x10/0x10 [ 52.335727][ T3850] raw_notifier_call_chain+0x72/0x1a0 [ 52.335821][ T3850] unregister_netdevice_many_notify+0xe2a/0x1560 [ 52.335858][ T3850] unregister_netdevice_queue+0x1cd/0x200 [ 52.335889][ T3850] __tun_detach+0x9e4/0xc90 [ 52.335916][ T3850] ? __pfx_tun_chr_close+0x10/0x10 [ 52.336001][ T3850] tun_chr_close+0x5a/0x100 [ 52.336094][ T3850] __fput+0x29e/0x630 [ 52.336130][ T3850] fput_close_sync+0xad/0x190 [ 52.336161][ T3850] __x64_sys_close+0x55/0xf0 [ 52.336188][ T3850] x64_sys_call+0x812/0x2550 [ 52.336214][ T3850] do_syscall_64+0x112/0x360 [ 52.336297][ T3850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.336326][ T3850] RIP: 0033:0x7f178bb3e559 [ 52.336343][ T3850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.336361][ T3850] RSP: 002b:00007f178a597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 52.336382][ T3850] RAX: ffffffffffffffda RBX: 00007f178bdc5fa0 RCX: 00007f178bb3e559 [ 52.336453][ T3850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 52.336537][ T3850] RBP: 00007f178bbd58b0 R08: 0000000000000000 R09: 0000000000000000 [ 52.336554][ T3850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.336572][ T3850] R13: 00007f178bdc6038 R14: 00007f178bdc5fa0 R15: 00007fff20ad3918 [ 52.336599][ T3850] [ 52.761981][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 52.762001][ T29] audit: type=1400 audit(1792073884.410:275): avc: denied { write } for pid=3855 comm="syz.3.118" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.762413][ T29] audit: type=1400 audit(1792073884.410:276): avc: denied { setopt } for pid=3853 comm="syz.4.117" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.762591][ T29] audit: type=1400 audit(1792073884.410:277): avc: denied { connect } for pid=3853 comm="syz.4.117" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.764026][ T29] audit: type=1400 audit(1792073884.410:278): avc: denied { ioctl } for pid=3855 comm="syz.3.118" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.953549][ T29] audit: type=1400 audit(1792073885.600:279): avc: denied { create } for pid=3873 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 53.954589][ T29] audit: type=1400 audit(1792073885.600:280): avc: denied { connect } for pid=3873 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 54.030742][ T3872] tipc: Enabled bearer , priority 0 [ 54.032692][ T3872] syzkaller0: entered promiscuous mode [ 54.032714][ T3872] syzkaller0: entered allmulticast mode [ 54.040771][ T3872] tipc: Resetting bearer [ 54.045537][ T3871] tipc: Resetting bearer [ 54.048342][ T3871] tipc: Disabling bearer [ 54.707368][ T3886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 54.864040][ T29] audit: type=1400 audit(1792073886.510:281): avc: denied { connect } for pid=3893 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.879921][ T29] audit: type=1400 audit(1792073886.530:282): avc: denied { bind } for pid=3895 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.055923][ T3896] IPVS: Scheduler module ip_vs_sip not found [ 55.095980][ T3903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 55.115692][ T3903] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 55.135401][ T3903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 55.162967][ T3903] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 55.164506][ T3903] Zero length message leads to an empty skb [ 55.207840][ T29] audit: type=1400 audit(1792073886.850:283): avc: denied { write } for pid=3904 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.207874][ T29] audit: type=1400 audit(1792073886.850:284): avc: denied { nlmsg_write } for pid=3904 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.442371][ T3913] tipc: Enabled bearer , priority 0 [ 55.442695][ T3913] syzkaller0: entered promiscuous mode [ 55.442734][ T3913] syzkaller0: entered allmulticast mode [ 55.469332][ T3910] tipc: Resetting bearer [ 56.020259][ T3909] tipc: Resetting bearer [ 56.023589][ T3909] tipc: Disabling bearer [ 56.469848][ T3939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.474487][ T3939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.634111][ T3946] FAULT_INJECTION: forcing a failure. [ 56.634111][ T3946] name failslab, interval 1, probability 0, space 0, times 0 [ 56.634141][ T3946] CPU: 1 UID: 0 PID: 3946 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.634190][ T3946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.634208][ T3946] Call Trace: [ 56.634218][ T3946] [ 56.634229][ T3946] __dump_stack+0x1d/0x30 [ 56.634284][ T3946] dump_stack_lvl+0x95/0xd0 [ 56.634314][ T3946] dump_stack+0x15/0x1b [ 56.634335][ T3946] should_fail_ex+0x262/0x280 [ 56.634435][ T3946] ? blk_mq_init_tags+0x68/0x1f0 [ 56.634474][ T3946] should_failslab+0x8c/0xb0 [ 56.634520][ T3946] __kmalloc_cache_node_noprof+0x81/0x420 [ 56.634624][ T3946] ? blk_mq_init_tags+0x68/0x1f0 [ 56.634662][ T3946] blk_mq_init_tags+0x68/0x1f0 [ 56.634752][ T3946] blk_mq_alloc_map_and_rqs+0x13f/0x760 [ 56.634776][ T3946] ? kfree+0x143/0x3b0 [ 56.634813][ T3946] blk_mq_alloc_set_map_and_rqs+0x120/0x4d0 [ 56.634893][ T3946] blk_mq_alloc_tag_set+0x495/0x640 [ 56.634954][ T3946] ? __pfx_loop_control_ioctl+0x10/0x10 [ 56.634984][ T3946] loop_add+0x267/0x580 [ 56.635098][ T3946] ? __pfx_loop_control_ioctl+0x10/0x10 [ 56.635125][ T3946] loop_control_ioctl+0xd0/0x3f0 [ 56.635157][ T3946] ? __pfx_loop_control_ioctl+0x10/0x10 [ 56.635221][ T3946] __se_sys_ioctl+0xce/0x140 [ 56.635255][ T3946] __x64_sys_ioctl+0x43/0x50 [ 56.635291][ T3946] x64_sys_call+0x239d/0x2550 [ 56.635392][ T3946] do_syscall_64+0x112/0x360 [ 56.635430][ T3946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.635491][ T3946] RIP: 0033:0x7f6d6f37e559 [ 56.635512][ T3946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.635538][ T3946] RSP: 002b:00007f6d6ddd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.635619][ T3946] RAX: ffffffffffffffda RBX: 00007f6d6f605fa0 RCX: 00007f6d6f37e559 [ 56.635634][ T3946] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 56.635648][ T3946] RBP: 00007f6d6f4158b0 R08: 0000000000000000 R09: 0000000000000000 [ 56.635661][ T3946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.635678][ T3946] R13: 00007f6d6f606038 R14: 00007f6d6f605fa0 R15: 00007ffff7debc98 [ 56.635714][ T3946] [ 56.635905][ T3946] blk-mq: reduced tag depth (128 -> 64) [ 57.161710][ T3953] tipc: Started in network mode [ 57.161737][ T3953] tipc: Node identity d2680b231b8b, cluster identity 4711 [ 57.161812][ T3953] tipc: Enabled bearer , priority 0 [ 57.167552][ T3953] syzkaller0: entered promiscuous mode [ 57.167577][ T3953] syzkaller0: entered allmulticast mode [ 57.184143][ T3953] tipc: Resetting bearer [ 57.210704][ T3952] tipc: Resetting bearer [ 57.233673][ T3952] tipc: Disabling bearer [ 57.474075][ T3976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.474237][ T3976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.973439][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 58.973455][ T29] audit: type=1400 audit(1792073890.620:290): avc: denied { create } for pid=3995 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.975449][ T29] audit: type=1400 audit(1792073890.620:291): avc: denied { accept } for pid=3995 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.036239][ T29] audit: type=1400 audit(1792073890.680:292): avc: denied { create } for pid=3997 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.038107][ T3998] FAULT_INJECTION: forcing a failure. [ 59.038107][ T3998] name failslab, interval 1, probability 0, space 0, times 0 [ 59.038201][ T3998] CPU: 0 UID: 0 PID: 3998 Comm: syz.0.166 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.038235][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.038252][ T3998] Call Trace: [ 59.038261][ T3998] [ 59.038268][ T3998] __dump_stack+0x1d/0x30 [ 59.038311][ T3998] dump_stack_lvl+0x95/0xd0 [ 59.038342][ T3998] dump_stack+0x15/0x1b [ 59.038370][ T3998] should_fail_ex+0x262/0x280 [ 59.038408][ T3998] ? virtual_ncidev_open+0x34/0x130 [ 59.038474][ T3998] should_failslab+0x8c/0xb0 [ 59.038544][ T3998] __kmalloc_cache_noprof+0x7a/0x400 [ 59.038701][ T3998] ? virtual_ncidev_open+0x34/0x130 [ 59.038897][ T3998] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 59.038969][ T3998] virtual_ncidev_open+0x34/0x130 [ 59.039048][ T3998] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 59.039119][ T3998] misc_open+0x1df/0x220 [ 59.039222][ T3998] chrdev_open+0x2eb/0x3a0 [ 59.039350][ T3998] do_dentry_open+0x49f/0xa60 [ 59.039440][ T3998] ? __pfx_chrdev_open+0x10/0x10 [ 59.039606][ T3998] vfs_open+0x37/0x1e0 [ 59.039728][ T3998] path_openat+0xc01/0x10d0 [ 59.039836][ T3998] do_file_open+0x16c/0x290 [ 59.039986][ T3998] do_sys_openat2+0xa0/0x130 [ 59.040056][ T3998] __x64_sys_openat+0xf2/0x120 [ 59.040084][ T3998] x64_sys_call+0x1f72/0x2550 [ 59.040238][ T3998] do_syscall_64+0x112/0x360 [ 59.040326][ T3998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.040457][ T3998] RIP: 0033:0x7f0512f7e559 [ 59.040525][ T3998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.040597][ T3998] RSP: 002b:00007f05119d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 59.040668][ T3998] RAX: ffffffffffffffda RBX: 00007f0513205fa0 RCX: 00007f0512f7e559 [ 59.040756][ T3998] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 59.040866][ T3998] RBP: 00007f05130158b0 R08: 0000000000000000 R09: 0000000000000000 [ 59.040916][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.040936][ T3998] R13: 00007f0513206038 R14: 00007f0513205fa0 R15: 00007fff9d76a018 [ 59.040956][ T3998] [ 59.114529][ T4000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.114845][ T4000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.136213][ T4001] program syz.2.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.360374][ T4007] tipc: Started in network mode [ 59.361218][ T4007] tipc: Node identity 22679ae7c7ed, cluster identity 4711 [ 59.361335][ T4007] tipc: Enabled bearer , priority 0 [ 59.362190][ T4007] syzkaller0: entered promiscuous mode [ 59.363697][ T4007] syzkaller0: entered allmulticast mode [ 59.379247][ T4007] tipc: Resetting bearer [ 59.387909][ T4006] tipc: Resetting bearer [ 59.401402][ T4006] tipc: Disabling bearer [ 59.553218][ T29] audit: type=1400 audit(1792073891.200:293): avc: denied { connect } for pid=4016 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.990443][ T4021] syzkaller0: entered promiscuous mode [ 59.990543][ T4021] syzkaller0: entered allmulticast mode [ 60.492250][ T4046] FAULT_INJECTION: forcing a failure. [ 60.492250][ T4046] name failslab, interval 1, probability 0, space 0, times 0 [ 60.492289][ T4046] CPU: 0 UID: 0 PID: 4046 Comm: syz.2.185 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.492344][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.492357][ T4046] Call Trace: [ 60.492363][ T4046] [ 60.492370][ T4046] __dump_stack+0x1d/0x30 [ 60.492481][ T4046] dump_stack_lvl+0x95/0xd0 [ 60.492514][ T4046] dump_stack+0x15/0x1b [ 60.492540][ T4046] should_fail_ex+0x262/0x280 [ 60.492572][ T4046] should_failslab+0x8c/0xb0 [ 60.492655][ T4046] __kmalloc_node_noprof+0xdb/0x500 [ 60.492702][ T4046] ? ___sys_sendmsg+0x195/0x1e0 [ 60.492737][ T4046] ? qdisc_alloc+0x65/0x410 [ 60.492799][ T4046] ? qdisc_alloc+0x65/0x410 [ 60.492843][ T4046] qdisc_alloc+0x65/0x410 [ 60.492887][ T4046] qdisc_create_dflt+0x7f/0x2b0 [ 60.492929][ T4046] taprio_init+0x273/0x5f0 [ 60.492969][ T4046] ? __pfx_taprio_init+0x10/0x10 [ 60.493001][ T4046] qdisc_create+0x57f/0x9c0 [ 60.493045][ T4046] tc_modify_qdisc+0x102a/0x1550 [ 60.493088][ T4046] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 60.493124][ T4046] rtnetlink_rcv_msg+0x6a7/0x720 [ 60.493169][ T4046] netlink_rcv_skb+0x11e/0x220 [ 60.493230][ T4046] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.493284][ T4046] rtnetlink_rcv+0x1c/0x30 [ 60.493327][ T4046] netlink_unicast+0x5a9/0x680 [ 60.493400][ T4046] netlink_sendmsg+0x5be/0x6f0 [ 60.493436][ T4046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.493469][ T4046] ____sys_sendmsg+0x532/0x580 [ 60.493592][ T4046] ___sys_sendmsg+0x195/0x1e0 [ 60.493646][ T4046] __x64_sys_sendmsg+0xd4/0x160 [ 60.493690][ T4046] x64_sys_call+0x22ab/0x2550 [ 60.493784][ T4046] do_syscall_64+0x112/0x360 [ 60.493823][ T4046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.493847][ T4046] RIP: 0033:0x7ff5c765e559 [ 60.493864][ T4046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.493932][ T4046] RSP: 002b:00007ff5c60b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.493959][ T4046] RAX: ffffffffffffffda RBX: 00007ff5c78e5fa0 RCX: 00007ff5c765e559 [ 60.493979][ T4046] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 60.493996][ T4046] RBP: 00007ff5c76f58b0 R08: 0000000000000000 R09: 0000000000000000 [ 60.494014][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.494066][ T4046] R13: 00007ff5c78e6038 R14: 00007ff5c78e5fa0 R15: 00007ffdc8a02208 [ 60.494087][ T4046] [ 60.744490][ T29] audit: type=1400 audit(1792073892.390:294): avc: denied { connect } for pid=4053 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.885568][ T4064] syzkaller0: entered promiscuous mode [ 60.885595][ T4064] syzkaller0: entered allmulticast mode [ 61.148548][ T29] audit: type=1400 audit(1792073892.800:295): avc: denied { mount } for pid=4068 comm="syz.0.192" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.666437][ T29] audit: type=1400 audit(1792073893.310:296): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 63.068093][ T29] audit: type=1400 audit(1792073894.700:297): avc: denied { mount } for pid=4112 comm="syz.4.206" name="/" dev="rpc_pipefs" ino=7345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 63.430421][ T4138] FAULT_INJECTION: forcing a failure. [ 63.430421][ T4138] name failslab, interval 1, probability 0, space 0, times 0 [ 63.430461][ T4138] CPU: 1 UID: 0 PID: 4138 Comm: syz.3.214 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.430576][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.430595][ T4138] Call Trace: [ 63.430603][ T4138] [ 63.430614][ T4138] __dump_stack+0x1d/0x30 [ 63.430709][ T4138] dump_stack_lvl+0x95/0xd0 [ 63.430740][ T4138] dump_stack+0x15/0x1b [ 63.430761][ T4138] should_fail_ex+0x262/0x280 [ 63.430843][ T4138] ? seq_open+0x52/0xe0 [ 63.430955][ T4138] should_failslab+0x8c/0xb0 [ 63.430994][ T4138] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 63.431038][ T4138] ? seq_open+0x52/0xe0 [ 63.431142][ T4138] seq_open+0x52/0xe0 [ 63.431184][ T4138] proc_id_map_open+0x13b/0x280 [ 63.431213][ T4138] proc_projid_map_open+0x24/0x30 [ 63.431298][ T4138] do_dentry_open+0x49f/0xa60 [ 63.431332][ T4138] ? __pfx_proc_projid_map_open+0x10/0x10 [ 63.431374][ T4138] vfs_open+0x37/0x1e0 [ 63.431406][ T4138] path_openat+0xc01/0x10d0 [ 63.431536][ T4138] do_file_open+0x16c/0x290 [ 63.431575][ T4138] ? __pfx_kfree_link+0x10/0x10 [ 63.431656][ T4138] do_sys_openat2+0xa0/0x130 [ 63.431718][ T4138] __x64_sys_openat+0xf2/0x120 [ 63.431746][ T4138] x64_sys_call+0x1f72/0x2550 [ 63.431780][ T4138] do_syscall_64+0x112/0x360 [ 63.431896][ T4138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.431928][ T4138] RIP: 0033:0x7f6d6f33ed8e [ 63.431950][ T4138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.431971][ T4138] RSP: 002b:00007f6d6ddd6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.431992][ T4138] RAX: ffffffffffffffda RBX: 00007f6d6ddd76c0 RCX: 00007f6d6f33ed8e [ 63.432007][ T4138] RDX: 0000000000000002 RSI: 00007f6d6ddd6f90 RDI: ffffffffffffff9c [ 63.432091][ T4138] RBP: 00007f6d6f4158b0 R08: 0000000000000000 R09: 0000000000000000 [ 63.432124][ T4138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.432140][ T4138] R13: 00007f6d6f606038 R14: 00007f6d6f605fa0 R15: 00007ffff7debc98 [ 63.432168][ T4138] [ 63.463849][ T4136] syzkaller0: entered promiscuous mode [ 63.463873][ T4136] syzkaller0: entered allmulticast mode [ 63.936845][ T29] audit: type=1400 audit(1792073895.560:298): avc: denied { lock } for pid=4142 comm="syz.4.216" path="socket:[7425]" dev="sockfs" ino=7425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 63.936954][ T29] audit: type=1400 audit(1792073895.580:299): avc: denied { create } for pid=4142 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.205031][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 66.205047][ T29] audit: type=1400 audit(1792073897.850:302): avc: denied { read write } for pid=4159 comm="syz.2.221" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.205074][ T29] audit: type=1400 audit(1792073897.850:303): avc: denied { open } for pid=4159 comm="syz.2.221" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.206640][ T29] audit: type=1400 audit(1792073897.850:304): avc: denied { ioctl } for pid=4159 comm="syz.2.221" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.761090][ T29] audit: type=1400 audit(1792073898.410:305): avc: denied { read write } for pid=4122 comm="syz.0.209" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 66.761140][ T29] audit: type=1400 audit(1792073898.410:306): avc: denied { open } for pid=4122 comm="syz.0.209" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.952899][ T29] audit: type=1400 audit(1792073900.600:307): avc: denied { bind } for pid=4248 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.054305][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.054477][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.079157][ T4255] scsi_dev_info_list_add_str: bad dev info string 'ÆMýŸê' '' '' [ 69.176242][ T4266] syzkaller0: entered promiscuous mode [ 69.176261][ T4266] syzkaller0: entered allmulticast mode [ 69.895382][ T4299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.895779][ T4299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.272692][ T4307] syz.3.249 uses obsolete (PF_INET,SOCK_PACKET) [ 70.274711][ T29] audit: type=1400 audit(1792073901.920:308): avc: denied { ioctl } for pid=4306 comm="syz.3.249" path="socket:[7582]" dev="sockfs" ino=7582 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.500012][ T29] audit: type=1400 audit(1792073902.150:309): avc: denied { ioctl } for pid=4321 comm="syz.1.255" path="socket:[7623]" dev="sockfs" ino=7623 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.541277][ T29] audit: type=1400 audit(1792073903.190:310): avc: denied { write } for pid=4326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.573430][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 71.573469][ T4356] bridge_slave_1: left allmulticast mode [ 71.573492][ T4356] bridge_slave_1: left promiscuous mode [ 71.573656][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.577260][ T4356] bridge_slave_0: left allmulticast mode [ 71.577281][ T4356] bridge_slave_0: left promiscuous mode [ 71.577424][ T4356] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.635341][ T29] audit: type=1400 audit(1792073903.280:311): avc: denied { write } for pid=4358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.774658][ T29] audit: type=1400 audit(1792073903.420:312): avc: denied { write } for pid=4360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.843494][ T29] audit: type=1400 audit(1792073903.490:313): avc: denied { write } for pid=4378 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.885601][ T29] audit: type=1400 audit(1792073903.510:314): avc: denied { bind } for pid=4343 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.885633][ T29] audit: type=1400 audit(1792073903.520:315): avc: denied { node_bind } for pid=4343 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 71.992371][ T29] audit: type=1400 audit(1792073903.640:316): avc: denied { mount } for pid=4383 comm="syz.4.268" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 72.025241][ T4384] bridge0: entered promiscuous mode [ 72.025264][ T4384] bridge0: entered allmulticast mode [ 72.144645][ T29] audit: type=1400 audit(1792073903.790:317): avc: denied { write } for pid=4386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.181052][ T29] audit: type=1400 audit(1792073903.830:318): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 72.233206][ T29] audit: type=1400 audit(1792073903.880:319): avc: denied { write } for pid=4399 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.971336][ T4301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.715080][ T4459] syz.3.292 (4459) used greatest stack depth: 9704 bytes left [ 74.211322][ T4546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.181450][ T4601] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 75.181490][ T4601] netlink: 'syz.3.336': attribute type 2 has an invalid length. [ 75.939808][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.940082][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.721014][ T4690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.721500][ T4690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.865827][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 77.865848][ T29] audit: type=1400 audit(1792073909.510:337): avc: denied { getopt } for pid=4786 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.024803][ T4801] FAULT_INJECTION: forcing a failure. [ 78.024803][ T4801] name failslab, interval 1, probability 0, space 0, times 0 [ 78.024917][ T4801] CPU: 1 UID: 0 PID: 4801 Comm: syz.3.415 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.024976][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.024989][ T4801] Call Trace: [ 78.024996][ T4801] [ 78.025006][ T4801] __dump_stack+0x1d/0x30 [ 78.025113][ T4801] dump_stack_lvl+0x95/0xd0 [ 78.025136][ T4801] dump_stack+0x15/0x1b [ 78.025159][ T4801] should_fail_ex+0x262/0x280 [ 78.025228][ T4801] ? __kernfs_new_node+0x70/0x440 [ 78.025297][ T4801] should_failslab+0x8c/0xb0 [ 78.025338][ T4801] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 78.025458][ T4801] ? __kernfs_new_node+0x70/0x440 [ 78.025589][ T4801] __kernfs_new_node+0x70/0x440 [ 78.025643][ T4801] ? rb_insert_color+0x6e/0x2a0 [ 78.025671][ T4801] ? __rcu_read_unlock+0x4e/0x70 [ 78.025714][ T4801] ? __rcu_read_unlock+0x4e/0x70 [ 78.025779][ T4801] ? kernfs_activate_one+0x10c/0x140 [ 78.025815][ T4801] ? __rcu_read_unlock+0x4e/0x70 [ 78.025861][ T4801] ? up_write+0x19/0x60 [ 78.025981][ T4801] kernfs_new_node+0xcf/0xf0 [ 78.026065][ T4801] __kernfs_create_file+0x4b/0x180 [ 78.026105][ T4801] ? __pfx_dev_attr_show+0x10/0x10 [ 78.026128][ T4801] ? __pfx_dev_attr_store+0x10/0x10 [ 78.026154][ T4801] sysfs_add_file_mode_ns+0x132/0x1b0 [ 78.026242][ T4801] internal_create_group+0x43e/0x9e0 [ 78.026268][ T4801] ? kernfs_add_one+0x2cf/0x350 [ 78.026351][ T4801] sysfs_create_groups+0x3f/0xf0 [ 78.026375][ T4801] device_add_attrs+0xf2/0x3f0 [ 78.026404][ T4801] ? kobject_put+0x108/0x180 [ 78.026505][ T4801] device_add+0x37a/0x790 [ 78.026539][ T4801] netdev_register_kobject+0x127/0x240 [ 78.026579][ T4801] register_netdevice+0xaf7/0x11a0 [ 78.026609][ T4801] ip6gre_newlink_common+0x27c/0x300 [ 78.026650][ T4801] ip6erspan_newlink+0x598/0x850 [ 78.026693][ T4801] ? validate_linkmsg+0x539/0x5b0 [ 78.026778][ T4801] ? rtnl_create_link+0x6ca/0x720 [ 78.026836][ T4801] ? __pfx_ip6erspan_newlink+0x10/0x10 [ 78.026892][ T4801] rtnl_newlink_create+0x1e4/0x4a0 [ 78.026922][ T4801] ? security_capable+0x7b/0x90 [ 78.027010][ T4801] ? netlink_ns_capable+0x86/0xa0 [ 78.027046][ T4801] rtnl_newlink+0x1255/0x1510 [ 78.027088][ T4801] ? should_fail_ex+0x31/0x280 [ 78.027191][ T4801] ? __memcg_slab_free_hook+0x154/0x340 [ 78.027333][ T4801] ? __rcu_read_unlock+0x4e/0x70 [ 78.027376][ T4801] ? avc_has_perm_noaudit+0xac/0x160 [ 78.027419][ T4801] ? cred_has_capability+0x224/0x2a0 [ 78.027530][ T4801] ? selinux_capable+0x31/0x40 [ 78.027652][ T4801] ? security_capable+0x7b/0x90 [ 78.027722][ T4801] ? ns_capable+0x80/0xb0 [ 78.027744][ T4801] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.027838][ T4801] rtnetlink_rcv_msg+0x64b/0x720 [ 78.027892][ T4801] netlink_rcv_skb+0x11e/0x220 [ 78.027918][ T4801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.028079][ T4801] rtnetlink_rcv+0x1c/0x30 [ 78.028110][ T4801] netlink_unicast+0x5a9/0x680 [ 78.028192][ T4801] netlink_sendmsg+0x5be/0x6f0 [ 78.028228][ T4801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.028259][ T4801] ____sys_sendmsg+0x532/0x580 [ 78.028300][ T4801] ___sys_sendmsg+0x195/0x1e0 [ 78.028420][ T4801] __x64_sys_sendmsg+0xd4/0x160 [ 78.028463][ T4801] x64_sys_call+0x22ab/0x2550 [ 78.028505][ T4801] do_syscall_64+0x112/0x360 [ 78.028544][ T4801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.028577][ T4801] RIP: 0033:0x7f6d6f37e559 [ 78.028595][ T4801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.028614][ T4801] RSP: 002b:00007f6d6ddd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.028648][ T4801] RAX: ffffffffffffffda RBX: 00007f6d6f605fa0 RCX: 00007f6d6f37e559 [ 78.028720][ T4801] RDX: 000000002800804c RSI: 0000200000000380 RDI: 0000000000000004 [ 78.028737][ T4801] RBP: 00007f6d6f4158b0 R08: 0000000000000000 R09: 0000000000000000 [ 78.028751][ T4801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.028764][ T4801] R13: 00007f6d6f606038 R14: 00007f6d6f605fa0 R15: 00007ffff7debc98 [ 78.028784][ T4801] [ 78.460836][ T4818] FAULT_INJECTION: forcing a failure. [ 78.460836][ T4818] name failslab, interval 1, probability 0, space 0, times 0 [ 78.461000][ T4818] CPU: 0 UID: 0 PID: 4818 Comm: syz.2.418 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.461099][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.461143][ T4818] Call Trace: [ 78.461164][ T4818] [ 78.461195][ T4818] __dump_stack+0x1d/0x30 [ 78.461294][ T4818] dump_stack_lvl+0x95/0xd0 [ 78.461435][ T4818] dump_stack+0x15/0x1b [ 78.461508][ T4818] should_fail_ex+0x262/0x280 [ 78.461615][ T4818] ? dst_alloc+0xbd/0x100 [ 78.461709][ T4818] should_failslab+0x8c/0xb0 [ 78.461822][ T4818] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 78.461937][ T4818] ? dst_alloc+0xbd/0x100 [ 78.462100][ T4818] dst_alloc+0xbd/0x100 [ 78.462193][ T4818] ip_route_input_rcu+0x1463/0x1b80 [ 78.462310][ T4818] ip_route_input_noref+0x5f/0x90 [ 78.462402][ T4818] ip_rcv_finish_core+0x308/0xb50 [ 78.462553][ T4818] ? nf_nat_ipv4_pre_routing+0xb1/0x210 [ 78.462684][ T4818] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 78.462819][ T4818] ip_rcv_finish+0x100/0x1a0 [ 78.462871][ T4818] ip_rcv+0x62/0x160 [ 78.462974][ T4818] ? __pfx_ip_rcv_finish+0x10/0x10 [ 78.463256][ T4818] ? __pfx_ip_rcv+0x10/0x10 [ 78.463411][ T4818] netif_receive_skb+0x137/0x4c0 [ 78.463516][ T4818] ? tun_rx_batched+0xca/0x430 [ 78.463637][ T4818] tun_rx_batched+0x101/0x430 [ 78.463846][ T4818] tun_get_user+0x2059/0x28e0 [ 78.464020][ T4818] ? ref_tracker_alloc+0x1eb/0x2f0 [ 78.464148][ T4818] tun_chr_write_iter+0x15a/0x210 [ 78.464333][ T4818] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 78.464574][ T4818] vfs_write+0x57f/0x9a0 [ 78.464685][ T4818] ksys_write+0xdc/0x1a0 [ 78.464809][ T4818] __x64_sys_write+0x40/0x50 [ 78.464930][ T4818] x64_sys_call+0x154e/0x2550 [ 78.465043][ T4818] do_syscall_64+0x112/0x360 [ 78.465243][ T4818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.465344][ T4818] RIP: 0033:0x7ff5c761ed8e [ 78.465409][ T4818] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.465508][ T4818] RSP: 002b:00007ff5c60b6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.465582][ T4818] RAX: ffffffffffffffda RBX: 00007ff5c60b76c0 RCX: 00007ff5c761ed8e [ 78.465682][ T4818] RDX: 000000000000002a RSI: 0000200000000a80 RDI: 00000000000000c8 [ 78.465737][ T4818] RBP: 00007ff5c76f58b0 R08: 0000000000000000 R09: 0000000000000000 [ 78.465785][ T4818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.465829][ T4818] R13: 00007ff5c78e6038 R14: 00007ff5c78e5fa0 R15: 00007ffdc8a02208 [ 78.465886][ T4818] [ 78.907807][ T4839] syzkaller1: entered promiscuous mode [ 78.907833][ T4839] syzkaller1: entered allmulticast mode [ 78.982813][ T29] audit: type=1400 audit(1792073910.630:338): avc: denied { write } for pid=4849 comm="syz.1.432" name="protocols" dev="proc" ino=4026532957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.017023][ T29] audit: type=1400 audit(1792073910.660:339): avc: denied { ioctl } for pid=4851 comm="syz.4.433" path="socket:[9307]" dev="sockfs" ino=9307 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.142803][ T29] audit: type=1400 audit(1792073910.790:340): avc: denied { execute } for pid=4866 comm="syz.3.436" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 80.423967][ T4971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 80.589368][ T4993] tipc: Enabling of bearer rejected, failed to enable media [ 80.746087][ T5022] netlink: 'syz.1.491': attribute type 12 has an invalid length. [ 80.817197][ T5034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.821802][ T5034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.512587][ T5034] FAULT_INJECTION: forcing a failure. [ 81.512587][ T5034] name failslab, interval 1, probability 0, space 0, times 0 [ 81.512616][ T5034] CPU: 1 UID: 0 PID: 5034 Comm: syz.2.498 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.512647][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.512722][ T5034] Call Trace: [ 81.512732][ T5034] [ 81.512743][ T5034] __dump_stack+0x1d/0x30 [ 81.512771][ T5034] dump_stack_lvl+0x95/0xd0 [ 81.512801][ T5034] dump_stack+0x15/0x1b [ 81.512868][ T5034] should_fail_ex+0x262/0x280 [ 81.512978][ T5034] ? __kernfs_new_node+0x70/0x440 [ 81.513007][ T5034] should_failslab+0x8c/0xb0 [ 81.513071][ T5034] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 81.513121][ T5034] ? __kernfs_new_node+0x70/0x440 [ 81.513176][ T5034] __kernfs_new_node+0x70/0x440 [ 81.513207][ T5034] ? rb_insert_color+0x6e/0x2a0 [ 81.513236][ T5034] ? __rcu_read_unlock+0x4e/0x70 [ 81.513269][ T5034] ? __rcu_read_unlock+0x4e/0x70 [ 81.513438][ T5034] ? kernfs_activate_one+0x10c/0x140 [ 81.513474][ T5034] ? __rcu_read_unlock+0x4e/0x70 [ 81.513524][ T5034] ? up_write+0x19/0x60 [ 81.513660][ T5034] kernfs_new_node+0xcf/0xf0 [ 81.513747][ T5034] __kernfs_create_file+0x4b/0x180 [ 81.513832][ T5034] ? __pfx_drv_attr_show+0x10/0x10 [ 81.513860][ T5034] ? __pfx_drv_attr_store+0x10/0x10 [ 81.513889][ T5034] sysfs_add_file_mode_ns+0x132/0x1b0 [ 81.513992][ T5034] sysfs_create_file_ns+0xd9/0x120 [ 81.514029][ T5034] driver_create_file+0x39/0x50 [ 81.514085][ T5034] bus_add_driver+0x347/0x450 [ 81.514119][ T5034] driver_register+0x162/0x220 [ 81.514145][ T5034] usb_gadget_register_driver_owner+0x92/0x1a0 [ 81.514269][ T5034] raw_ioctl+0xc5b/0x1df0 [ 81.514363][ T5034] ? ioctl_has_perm+0x273/0x2c0 [ 81.514407][ T5034] ? do_vfs_ioctl+0x848/0xe50 [ 81.514456][ T5034] ? selinux_file_ioctl+0x33c/0x3c0 [ 81.514490][ T5034] ? __fget_files+0x184/0x1c0 [ 81.514551][ T5034] ? __pfx_raw_ioctl+0x10/0x10 [ 81.514594][ T5034] __se_sys_ioctl+0xce/0x140 [ 81.514711][ T5034] __x64_sys_ioctl+0x43/0x50 [ 81.514817][ T5034] x64_sys_call+0x239d/0x2550 [ 81.514845][ T5034] do_syscall_64+0x112/0x360 [ 81.514879][ T5034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.514910][ T5034] RIP: 0033:0x7ff5c765e1eb [ 81.515022][ T5034] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 81.515049][ T5034] RSP: 002b:00007ff5c60b4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.515071][ T5034] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff5c765e1eb [ 81.515085][ T5034] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 81.515097][ T5034] RBP: 00007ff5c60b5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 81.515186][ T5034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.515204][ T5034] R13: 000020000001a9c0 R14: 0000000000000000 R15: 0000000000000868 [ 81.515230][ T5034] [ 81.515358][ T5034] bus_add_driver: add_bind_files(raw-gadget.1) failed [ 81.515421][ T5034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.515558][ T5034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.100053][ T5058] tipc: Enabling of bearer rejected, failed to enable media [ 82.903775][ T5091] xt_hashlimit: size too large, truncated to 1048576 [ 82.998223][ T5100] netlink: 'syz.0.515': attribute type 14 has an invalid length. [ 83.150999][ T5106] tipc: Enabling of bearer rejected, failed to enable media [ 83.289805][ T29] audit: type=1400 audit(1792073914.940:341): avc: denied { connect } for pid=5123 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.480452][ T29] audit: type=1400 audit(1792073915.130:342): avc: denied { read } for pid=5135 comm="syz.3.526" path="socket:[8815]" dev="sockfs" ino=8815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.571909][ T5143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.525'. [ 83.602517][ T29] audit: type=1400 audit(1792073915.210:343): avc: denied { name_bind } for pid=5133 comm="syz.0.525" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 83.602561][ T29] audit: type=1400 audit(1792073915.220:344): avc: denied { mounton } for pid=5133 comm="syz.0.525" path="/102/file0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.742886][ T5170] blk-mq: reduced tag depth (128 -> 64) [ 85.147733][ T5176] syzkaller0: entered promiscuous mode [ 85.147893][ T5176] syzkaller0: entered allmulticast mode [ 85.361328][ T29] audit: type=1400 audit(1792073917.010:345): avc: denied { read write } for pid=5175 comm="syz.1.538" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 85.361370][ T29] audit: type=1400 audit(1792073917.010:346): avc: denied { open } for pid=5175 comm="syz.1.538" path="/98/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 85.361396][ T29] audit: type=1400 audit(1792073917.010:347): avc: denied { ioctl } for pid=5175 comm="syz.1.538" path="/98/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 85.796082][ T5208] infiniband syz1: set down [ 85.796104][ T5208] infiniband syz1: added ipvlan1 [ 85.923152][ T5208] RDS/IB: syz1: added [ 85.924093][ T5208] smc: adding ib device syz1 with port count 1 [ 85.924279][ T5208] smc: ib device syz1 port 1 has no pnetid [ 85.963033][ T29] audit: type=1400 audit(1792073917.610:348): avc: denied { connect } for pid=5212 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.084947][ T5241] blk-mq: reduced tag depth (128 -> 64) [ 88.225113][ T29] audit: type=1400 audit(1792073919.870:349): avc: denied { relabelfrom } for pid=5254 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 88.225159][ T29] audit: type=1400 audit(1792073919.870:350): avc: denied { relabelto } for pid=5254 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.325341][ T5395] syzkaller0: entered promiscuous mode [ 91.325437][ T5395] syzkaller0: entered allmulticast mode [ 92.925537][ T5439] syzkaller0: entered promiscuous mode [ 92.925614][ T5439] syzkaller0: entered allmulticast mode [ 94.053499][ T5470] syzkaller0: entered promiscuous mode [ 94.053520][ T5470] syzkaller0: entered allmulticast mode [ 94.438299][ T5484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.438490][ T5484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.975404][ T5513] syzkaller0: entered promiscuous mode [ 95.975425][ T5513] syzkaller0: entered allmulticast mode [ 97.118495][ T5545] tipc: Enabled bearer , priority 0 [ 97.120416][ T5543] tipc: Disabling bearer [ 98.225723][ T5562] syzkaller0: entered promiscuous mode [ 98.226316][ T5562] syzkaller0: entered allmulticast mode [ 98.575001][ T5584] tipc: Enabled bearer , priority 0 [ 98.596338][ T5583] tipc: Disabling bearer [ 100.202240][ T5621] tipc: Enabled bearer , priority 0 [ 100.207780][ T5620] tipc: Disabling bearer [ 101.565994][ T5660] tipc: Enabled bearer , priority 0 [ 101.587525][ T5658] tipc: Disabling bearer [ 102.015302][ T5673] syzkaller0: entered promiscuous mode [ 102.015329][ T5673] syzkaller0: entered allmulticast mode [ 102.179620][ T5698] ip_tables: iptables: counters copy to user failed while replacing table [ 102.238171][ T5704] tipc: Enabled bearer , priority 0 [ 102.240370][ T5703] tipc: Disabling bearer [ 102.296045][ T5711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.296146][ T5711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.577888][ T5711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.578127][ T5711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.796658][ T5741] tipc: Enabled bearer , priority 0 [ 103.808636][ T5739] tipc: Disabling bearer [ 104.596697][ T5768] FAULT_INJECTION: forcing a failure. [ 104.596697][ T5768] name fail_futex, interval 1, probability 0, space 0, times 1 [ 104.596728][ T5768] CPU: 0 UID: 0 PID: 5768 Comm: syz.4.759 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.596774][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.596790][ T5768] Call Trace: [ 104.596796][ T5768] [ 104.596851][ T5768] __dump_stack+0x1d/0x30 [ 104.596883][ T5768] dump_stack_lvl+0x95/0xd0 [ 104.596942][ T5768] dump_stack+0x15/0x1b [ 104.596973][ T5768] should_fail_ex+0x262/0x280 [ 104.597005][ T5768] should_fail+0xb/0x20 [ 104.597036][ T5768] get_futex_key+0x594/0xb10 [ 104.597083][ T5768] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 104.597128][ T5768] futex_wake+0x89/0x400 [ 104.597148][ T5768] ? perf_lock_task_context+0x24b/0x2c0 [ 104.597244][ T5768] do_futex+0x3f8/0x460 [ 104.597280][ T5768] mm_exit_exec_release+0xab/0x190 [ 104.597328][ T5768] exit_mm+0x37/0x1b0 [ 104.597366][ T5768] do_exit+0x438/0x1510 [ 104.597402][ T5768] do_group_exit+0xfe/0x140 [ 104.597499][ T5768] ? get_signal+0xe00/0xf10 [ 104.597539][ T5768] get_signal+0xe07/0xf10 [ 104.597643][ T5768] arch_do_signal_or_restart+0x96/0x480 [ 104.597688][ T5768] exit_to_user_mode_loop+0x15d/0x8c0 [ 104.597956][ T5768] do_syscall_64+0x212/0x360 [ 104.597984][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.598010][ T5768] RIP: 0033:0x7f178bb3e559 [ 104.598031][ T5768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.598079][ T5768] RSP: 002b:00007f178a5970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.598144][ T5768] RAX: fffffffffffffe00 RBX: 00007f178bdc5fa8 RCX: 00007f178bb3e559 [ 104.598169][ T5768] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f178bdc5fa8 [ 104.598187][ T5768] RBP: 00007f178bdc5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 104.598259][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.598273][ T5768] R13: 00007f178bdc6038 R14: 00007fff20ad3830 R15: 00007fff20ad3918 [ 104.598293][ T5768] [ 105.214011][ T378] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.228173][ T51] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.228224][ T51] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.228267][ T51] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.741366][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.741597][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.588835][ T5928] syzkaller0: entered promiscuous mode [ 109.588855][ T5928] syzkaller0: entered allmulticast mode [ 109.636508][ T5928] tipc: Started in network mode [ 109.636575][ T5928] tipc: Node identity b62c250e3474, cluster identity 4711 [ 109.636670][ T5928] tipc: Enabled bearer , priority 0 [ 109.691326][ T5928] tipc: Resetting bearer [ 109.704756][ T5927] tipc: Resetting bearer [ 109.717345][ T5927] tipc: Disabling bearer [ 109.776312][ T5937] FAULT_INJECTION: forcing a failure. [ 109.776312][ T5937] name fail_futex, interval 1, probability 0, space 0, times 0 [ 109.776944][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz.2.822 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.777034][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.777049][ T5937] Call Trace: [ 109.777058][ T5937] [ 109.777068][ T5937] __dump_stack+0x1d/0x30 [ 109.777149][ T5937] dump_stack_lvl+0x95/0xd0 [ 109.777179][ T5937] dump_stack+0x15/0x1b [ 109.777205][ T5937] should_fail_ex+0x262/0x280 [ 109.777249][ T5937] should_fail+0xb/0x20 [ 109.777327][ T5937] get_futex_key+0x594/0xb10 [ 109.777362][ T5937] ? preempt_schedule_irq+0x2c/0x50 [ 109.777414][ T5937] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 109.777451][ T5937] futex_wake+0x89/0x400 [ 109.777520][ T5937] do_futex+0x3f8/0x460 [ 109.777562][ T5937] mm_exit_exec_release+0xab/0x190 [ 109.777594][ T5937] exit_mm+0x37/0x1b0 [ 109.777672][ T5937] do_exit+0x438/0x1510 [ 109.777715][ T5937] do_group_exit+0xfe/0x140 [ 109.777791][ T5937] ? get_signal+0xe00/0xf10 [ 109.777838][ T5937] get_signal+0xe07/0xf10 [ 109.777890][ T5937] arch_do_signal_or_restart+0x96/0x480 [ 109.777953][ T5937] exit_to_user_mode_loop+0x15d/0x8c0 [ 109.778035][ T5937] do_syscall_64+0x212/0x360 [ 109.778132][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.778162][ T5937] RIP: 0033:0x7ff5c765e559 [ 109.778216][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.778240][ T5937] RSP: 002b:00007ff5c60b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.778265][ T5937] RAX: fffffffffffffe00 RBX: 00007ff5c78e5fa8 RCX: 00007ff5c765e559 [ 109.778279][ T5937] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff5c78e5fa8 [ 109.778292][ T5937] RBP: 00007ff5c78e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 109.778379][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.778395][ T5937] R13: 00007ff5c78e6038 R14: 00007ffdc8a02120 R15: 00007ffdc8a02208 [ 109.778420][ T5937] [ 109.948990][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.950325][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.210789][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.210882][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.259693][ T5961] tipc: Enabling of bearer rejected, failed to enable media [ 111.932519][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.932881][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.586445][ T6016] tipc: Enabling of bearer rejected, failed to enable media [ 113.354695][ T29] audit: type=1400 audit(1792073945.000:351): avc: denied { create } for pid=6044 comm="syz.4.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.778337][ T29] audit: type=1400 audit(1792073945.110:352): avc: denied { getopt } for pid=6044 comm="syz.4.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.231976][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.232152][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.269488][ T6072] syzkaller0: entered promiscuous mode [ 115.269514][ T6072] syzkaller0: entered allmulticast mode [ 115.277654][ T6072] tipc: Enabled bearer , priority 0 [ 115.295063][ T6072] tipc: Resetting bearer [ 115.302948][ T6071] tipc: Resetting bearer [ 115.309750][ T6074] ip_tables: iptables: counters copy to user failed while replacing table [ 115.324322][ T6071] tipc: Disabling bearer [ 115.366864][ T29] audit: type=1400 audit(1792073947.010:353): avc: denied { read } for pid=6076 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.570952][ T6084] tipc: Enabling of bearer rejected, failed to enable media [ 118.609965][ T6161] tipc: Enabling of bearer rejected, failed to enable media [ 119.272659][ T6154] Illegal XDP return value 4294967274 on prog (id 47) dev N/A, expect packet loss! [ 119.285440][ T29] audit: type=1400 audit(1792073950.930:354): avc: denied { write } for pid=6180 comm="syz.4.899" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.325677][ T29] audit: type=1400 audit(1792073950.970:355): avc: denied { map } for pid=6180 comm="syz.4.899" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.859041][ T6204] tipc: Enabling of bearer rejected, failed to enable media [ 120.944312][ T6220] loop7: detected capacity change from 0 to 16384 [ 121.285237][ T6261] tipc: Enabling of bearer rejected, failed to enable media [ 122.690286][ T6294] ================================================================== [ 122.690332][ T6294] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 122.690377][ T6294] [ 122.690382][ T6294] read-write to 0xffff888105cca230 of 8 bytes by interrupt on cpu 1: [ 122.690405][ T6294] __xa_clear_mark+0xf5/0x1e0 [ 122.690438][ T6294] __folio_end_writeback+0xe7/0x530 [ 122.690480][ T6294] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 122.690509][ T6294] folio_end_writeback+0x1c/0x70 [ 122.690539][ T6294] bh_end_async_write+0x1a6/0x250 [ 122.690573][ T6294] bio_endio+0x390/0x570 [ 122.690609][ T6294] blk_update_request+0x33a/0x710 [ 122.690645][ T6294] blk_mq_end_request+0x26/0x50 [ 122.690680][ T6294] lo_complete_rq+0x98/0x130 [ 122.690708][ T6294] blk_done_softirq+0x77/0xb0 [ 122.690737][ T6294] handle_softirqs+0xcc/0x2a0 [ 122.690760][ T6294] __irq_exit_rcu+0x44/0xe0 [ 122.690787][ T6294] sysvec_apic_timer_interrupt+0x74/0x80 [ 122.690828][ T6294] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.690854][ T6294] kcsan_setup_watchpoint+0x42b/0x4a0 [ 122.690872][ T6294] lo_rw_aio+0x411/0x760 [ 122.690892][ T6294] loop_process_work+0x569/0xad0 [ 122.690919][ T6294] loop_workfn+0x31/0x40 [ 122.690941][ T6294] process_scheduled_works+0x56a/0xa50 [ 122.690976][ T6294] worker_thread+0x569/0x750 [ 122.691012][ T6294] kthread+0x223/0x270 [ 122.691037][ T6294] ret_from_fork+0x146/0x330 [ 122.691073][ T6294] ret_from_fork_asm+0x1a/0x30 [ 122.691098][ T6294] [ 122.691127][ T6294] read to 0xffff888105cca230 of 8 bytes by task 6294 on cpu 0: [ 122.691145][ T6294] xas_find_marked+0x211/0x650 [ 122.691179][ T6294] filemap_get_folios_tag+0xf7/0x400 [ 122.691212][ T6294] filemap_write_and_wait_range+0x1f5/0x370 [ 122.691235][ T6294] bdev_release+0xd4/0x3d0 [ 122.691257][ T6294] blkdev_release+0x15/0x20 [ 122.691286][ T6294] __fput+0x29e/0x630 [ 122.691316][ T6294] ____fput+0x1c/0x30 [ 122.691343][ T6294] task_work_run+0x130/0x1a0 [ 122.691366][ T6294] exit_to_user_mode_loop+0x1e4/0x8c0 [ 122.691409][ T6294] do_syscall_64+0x212/0x360 [ 122.691439][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.691465][ T6294] [ 122.691470][ T6294] value changed: 0xffffe00000000000 -> 0xf000000000000000 [ 122.691485][ T6294] [ 122.691490][ T6294] Reported by Kernel Concurrency Sanitizer on: [ 122.691503][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.3.938 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.691534][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.691551][ T6294] ================================================================== [ 122.691853][ T6309] tipc: Enabled bearer , priority 0 [ 122.692154][ T6309] syzkaller0: entered promiscuous mode [ 122.692174][ T6309] syzkaller0: entered allmulticast mode [ 122.713226][ T6309] tipc: Resetting bearer [ 122.724272][ T6308] tipc: Resetting bearer [ 122.727557][ T6308] tipc: Disabling bearer