last executing test programs: 1m21.640533442s ago: executing program 3 (id=61): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x24, 0x0, 0xc, 0x0, 0x10003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000001, 0x200, 0x9, 0x4, 0x0, 0x1}, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 1m20.499698926s ago: executing program 3 (id=67): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setns(0xc9, 0x0) close(r0) socket(0x2b, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1m18.567718282s ago: executing program 3 (id=71): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv-cbc-aes-sha256-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ab04000000248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000001440)={'#! ', './file1', [{0x20, 'aufit\x01(\xeem\xa8\xed\x00\xd7\x87\x1a\xa3\x89\xd0+\t\xf0\x8fK+T\xd5\xd7\xd4j\x8b\xeb\x8d.\x00S\xc3T\xa4\xd7\xa8C\x91\x19'}], 0xa, "d5fc53646bf6d3f5884f3fd9ab82d770cd633fbdd9de18c8f6e67cfebfd2687d0060e6e981fbab2dbacdf77cd26a8a324841224c1131137229382561db4ed4ea671294ea3476c25b220141950f3aa2122ac5d1cc5261d556001c0133a0c78adc99a80f4df42a5c780b041bb4ab7f00a0a181"}, 0xa9) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1}, 0x3}], 0x1, 0x400020a0, 0x0) 1m17.571004235s ago: executing program 3 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00', 0x0, 0x1000, 0x0) 1m17.266628031s ago: executing program 3 (id=78): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) 1m16.454878132s ago: executing program 3 (id=84): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r4, 0x29, 0x38, 0x0, 0x0) 1m15.964528105s ago: executing program 32 (id=84): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r4, 0x29, 0x38, 0x0, 0x0) 6.526600889s ago: executing program 0 (id=626): socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, 0x0, 0x0) 6.230351084s ago: executing program 0 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) fdatasync(0xffffffffffffffff) 4.955896946s ago: executing program 1 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x880) 4.369970234s ago: executing program 5 (id=642): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xe8b5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000080)=0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) fstat(0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x7f000001}}, 0x1c) 4.104930066s ago: executing program 1 (id=644): syz_open_procfs(0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) 4.095362947s ago: executing program 0 (id=645): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851ee", 0x60}], 0x1}}], 0x1, 0x4000900) 3.456685382s ago: executing program 4 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'wlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 3.371744729s ago: executing program 5 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x1, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) 3.274776151s ago: executing program 1 (id=651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="4e813c", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) shutdown(r0, 0x1) 3.205513804s ago: executing program 1 (id=652): r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) init_module(&(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x42, 0x9, 0x6, 0x6, 0x7e9, 0x2, 0x0, 0x3, 0x17e, 0x40, 0x1d0, 0x6, 0x4, 0x38, 0x1, 0x3, 0x29b, 0x5}, [{0x4, 0x7c, 0x7, 0xf, 0x5, 0x8c, 0xffff, 0x9}]}, 0x78, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x38f9, 0x0) splice(r3, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x1) write(r1, &(0x7f0000000040), 0xffffff4a) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 2.947355671s ago: executing program 4 (id=654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x18}}, 0x880) 2.846122482s ago: executing program 4 (id=656): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)}, {&(0x7f0000000040)="5ee2874f8c94e1263fcf49b699f59f0afc8cce42de5103a2ff155c8bd878572757", 0x21}], 0x2}, 0x24040849) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) 2.841431037s ago: executing program 0 (id=657): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) unshare(0x6a040000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 2.786721442s ago: executing program 2 (id=658): socket$pppoe(0x18, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x24, r5, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) 1.833257052s ago: executing program 5 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) 1.819741946s ago: executing program 1 (id=660): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xe8b5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000080)=0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) fstat(0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x7f000001}}, 0x1c) 1.779372799s ago: executing program 2 (id=661): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x1100, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 1.567958004s ago: executing program 2 (id=662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="4e813c", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) shutdown(r0, 0x1) 1.566056503s ago: executing program 5 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000400)="00050090b4", 0x5}, {&(0x7f0000000340)="237f", 0x2}], 0x3) 1.478329565s ago: executing program 2 (id=664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'wlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 1.098889873s ago: executing program 4 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 1.080144328s ago: executing program 2 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x18}}, 0x880) 1.053012805s ago: executing program 4 (id=667): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='gG\x9e', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x280449c, &(0x7f00000006c0)=ANY=[]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000103) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x10000000, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40806685, &(0x7f0000000240)={0x7, 0x9}) 986.466578ms ago: executing program 5 (id=668): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESOCT=r0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x800, 0x20082) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0xa, 0x0, &(0x7f0000001080)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)="2032393439363720393520325c30305b7bd95bb5135a30373030303020300a4cc4af2e0d381adf349283277cd45edc557a788e31", 0x34) 920.766467ms ago: executing program 2 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000200), 0x0) write(0xffffffffffffffff, &(0x7f0000000290)='1\x00', 0x1) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r3 = openat(r1, 0x0, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r4, &(0x7f0000000380), 0x0) mkdirat(r1, &(0x7f00000004c0)='functions/Loopback.usb0\x00', 0x1ff) mkdirat(r1, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) openat(r1, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) r5 = openat(r1, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000780)='dummy_udc.0\n', 0xc) 294.74804ms ago: executing program 0 (id=670): r0 = syz_io_uring_setup(0xd3a, &(0x7f00000002c0)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x4, 0x0, 0x1, 0xc, 0x1}) io_uring_enter(r0, 0x51c7, 0x6c3b, 0x0, 0x0, 0x0) 294.234066ms ago: executing program 1 (id=671): socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x24, r6, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) move_mount(r0, 0x0, r0, &(0x7f0000000080)='./mnt\x00', 0x222) 57.457751ms ago: executing program 5 (id=672): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) 54.138867ms ago: executing program 4 (id=673): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee01, 0xffffffffffffffff) setreuid(0xee01, 0xee00) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) lseek(r0, 0xffffffff, 0x0) syz_io_uring_setup(0x6c2c, &(0x7f0000000000)={0x0, 0x333, 0x1, 0x0, 0x11d, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000180)) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x73) recvmmsg(r5, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff46}, 0x4}], 0x1, 0x10020, 0x0) 0s ago: executing program 0 (id=674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="4e813c", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 60.091660][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 60.091675][ T30] audit: type=1400 audit(1785574801.042:129): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.121385][ T30] audit: type=1400 audit(1785574801.072:130): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.124041][ T5598] cgroup: Unknown subsys name 'net' [ 60.150159][ T30] audit: type=1400 audit(1785574801.102:131): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.295061][ T5598] cgroup: Unknown subsys name 'cpuset' [ 60.302641][ T5598] cgroup: Unknown subsys name 'rlimit' [ 60.420992][ T30] audit: type=1400 audit(1785574801.372:132): avc: denied { setattr } for pid=5598 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.445622][ T30] audit: type=1400 audit(1785574801.372:133): avc: denied { create } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.481035][ T30] audit: type=1400 audit(1785574801.372:134): avc: denied { write } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.502277][ T30] audit: type=1400 audit(1785574801.372:135): avc: denied { read } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.523299][ T30] audit: type=1400 audit(1785574801.402:136): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.543529][ T5600] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.548471][ T30] audit: type=1400 audit(1785574801.402:137): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.580114][ T30] audit: type=1400 audit(1785574801.522:138): avc: denied { relabelto } for pid=5600 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.517097][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.592113][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.601097][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.609658][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.610777][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.618220][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.629644][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.633654][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.638961][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.645990][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.653133][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.667080][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.671020][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.675160][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.682198][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.689870][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.696671][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.703184][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.709858][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.716480][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.723558][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.732280][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.744701][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.752085][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.761042][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.768441][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.925347][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.933069][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.940277][ T5621] bridge_slave_0: entered allmulticast mode [ 64.947538][ T5621] bridge_slave_0: entered promiscuous mode [ 64.976898][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.984062][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.991209][ T5621] bridge_slave_1: entered allmulticast mode [ 64.998659][ T5621] bridge_slave_1: entered promiscuous mode [ 65.050120][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.088639][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.103331][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.110450][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.117640][ T5610] bridge_slave_0: entered allmulticast mode [ 65.124558][ T5610] bridge_slave_0: entered promiscuous mode [ 65.153920][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.161061][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.168371][ T5610] bridge_slave_1: entered allmulticast mode [ 65.175021][ T5610] bridge_slave_1: entered promiscuous mode [ 65.196106][ T5621] team0: Port device team_slave_0 added [ 65.211144][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.218455][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.225777][ T5615] bridge_slave_0: entered allmulticast mode [ 65.232406][ T5615] bridge_slave_0: entered promiscuous mode [ 65.244452][ T5621] team0: Port device team_slave_1 added [ 65.265971][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.273118][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.280222][ T5615] bridge_slave_1: entered allmulticast mode [ 65.287084][ T5615] bridge_slave_1: entered promiscuous mode [ 65.306929][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.343362][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.352528][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.359929][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.367118][ T5611] bridge_slave_0: entered allmulticast mode [ 65.373931][ T5611] bridge_slave_0: entered promiscuous mode [ 65.387004][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.394103][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.401209][ T5619] bridge_slave_0: entered allmulticast mode [ 65.408090][ T5619] bridge_slave_0: entered promiscuous mode [ 65.415853][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.423140][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.449038][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.466453][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.473789][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.480878][ T5611] bridge_slave_1: entered allmulticast mode [ 65.487801][ T5611] bridge_slave_1: entered promiscuous mode [ 65.496211][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.505397][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.512471][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.519739][ T5619] bridge_slave_1: entered allmulticast mode [ 65.526515][ T5619] bridge_slave_1: entered promiscuous mode [ 65.533943][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.540897][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.567026][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.592321][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.613589][ T5610] team0: Port device team_slave_0 added [ 65.646698][ T5610] team0: Port device team_slave_1 added [ 65.654007][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.671200][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.699693][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.710676][ T5615] team0: Port device team_slave_0 added [ 65.717883][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.745008][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.746347][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.751736][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.758520][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.790584][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.808447][ T5615] team0: Port device team_slave_1 added [ 65.815500][ T5622] Bluetooth: hci0: command tx timeout [ 65.821384][ T5623] Bluetooth: hci4: command tx timeout [ 65.827029][ T50] Bluetooth: hci3: command tx timeout [ 65.832833][ T5628] Bluetooth: hci2: command tx timeout [ 65.838512][ T5613] Bluetooth: hci1: command tx timeout [ 65.855520][ T5621] hsr_slave_0: entered promiscuous mode [ 65.861577][ T5621] hsr_slave_1: entered promiscuous mode [ 65.868241][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.875254][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.901240][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.925327][ T5619] team0: Port device team_slave_0 added [ 65.932769][ T5619] team0: Port device team_slave_1 added [ 65.945535][ T5611] team0: Port device team_slave_0 added [ 65.951530][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.958538][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.984625][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.996676][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.003710][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.029842][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.055632][ T5611] team0: Port device team_slave_1 added [ 66.073456][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.080390][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.106283][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.146422][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.153452][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.179364][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.210899][ T5610] hsr_slave_0: entered promiscuous mode [ 66.216968][ T5610] hsr_slave_1: entered promiscuous mode [ 66.222994][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 66.228765][ T5610] Cannot create hsr debugfs directory [ 66.239214][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.246335][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.272218][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.283809][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.290756][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.316775][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.342177][ T5615] hsr_slave_0: entered promiscuous mode [ 66.348535][ T5615] hsr_slave_1: entered promiscuous mode [ 66.354961][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 66.360664][ T5615] Cannot create hsr debugfs directory [ 66.400520][ T5619] hsr_slave_0: entered promiscuous mode [ 66.407781][ T5619] hsr_slave_1: entered promiscuous mode [ 66.414243][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 66.419973][ T5619] Cannot create hsr debugfs directory [ 66.499212][ T5611] hsr_slave_0: entered promiscuous mode [ 66.505236][ T5611] hsr_slave_1: entered promiscuous mode [ 66.511041][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 66.516817][ T5611] Cannot create hsr debugfs directory [ 66.763766][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.774321][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.782024][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.791075][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.819944][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.829206][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.836868][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.846429][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.901237][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.910472][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.923392][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.932764][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.940346][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.949264][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.958866][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.967357][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.031538][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.040913][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.049234][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.058619][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.066504][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.075551][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.083853][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.091925][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.169109][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.178883][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.187572][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.196689][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.206070][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.215333][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.223110][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.231568][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.251873][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.314284][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.340054][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.347332][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.357714][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.367210][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.375194][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.384121][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.391705][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.401095][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.409320][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.418121][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.427167][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.444170][ T3394] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.451265][ T3394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.486543][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.498668][ T3394] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.505744][ T3394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.529030][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.536119][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.556797][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.601047][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.625620][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.632705][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.666819][ T3394] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.673938][ T3394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.695410][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.787870][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.808283][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.828002][ T3394] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.835145][ T3394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.861929][ T3394] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.869067][ T3394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.891688][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.903358][ T5623] Bluetooth: hci4: command tx timeout [ 67.909251][ T5628] Bluetooth: hci2: command tx timeout [ 67.914710][ T5622] Bluetooth: hci0: command tx timeout [ 67.921193][ T5613] Bluetooth: hci1: command tx timeout [ 67.924395][ T5615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.928703][ T50] Bluetooth: hci3: command tx timeout [ 67.977801][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.984950][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.007504][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.014650][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.492881][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.517687][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.669672][ T5621] veth0_vlan: entered promiscuous mode [ 68.679694][ T5610] veth0_vlan: entered promiscuous mode [ 68.698818][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.731972][ T5621] veth1_vlan: entered promiscuous mode [ 68.750598][ T5610] veth1_vlan: entered promiscuous mode [ 68.832460][ T5621] veth0_macvtap: entered promiscuous mode [ 68.848064][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.865651][ T5615] veth0_vlan: entered promiscuous mode [ 68.877287][ T5610] veth0_macvtap: entered promiscuous mode [ 68.888143][ T5621] veth1_macvtap: entered promiscuous mode [ 68.900669][ T5610] veth1_macvtap: entered promiscuous mode [ 68.915384][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.928724][ T5615] veth1_vlan: entered promiscuous mode [ 68.956823][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.969896][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.991760][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.002329][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.034276][ T270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.072741][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.105820][ T5619] veth0_vlan: entered promiscuous mode [ 69.149991][ T5615] veth0_macvtap: entered promiscuous mode [ 69.169910][ T5619] veth1_vlan: entered promiscuous mode [ 69.192526][ T5615] veth1_macvtap: entered promiscuous mode [ 69.205187][ T3371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214742][ T3371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.252323][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.263512][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.300875][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.312143][ T3394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.326100][ T3394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.341493][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.358830][ T5619] veth0_macvtap: entered promiscuous mode [ 69.377713][ T3394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.389195][ T3394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.403808][ T1173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.417729][ T5619] veth1_macvtap: entered promiscuous mode [ 69.423544][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 69.423557][ T30] audit: type=1400 audit(1785574810.372:153): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.IlZJ0y/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.456561][ T30] audit: type=1400 audit(1785574810.372:154): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.479463][ T30] audit: type=1400 audit(1785574810.372:155): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.IlZJ0y/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.485255][ T3394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.509242][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.525684][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.534009][ T30] audit: type=1400 audit(1785574810.372:156): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.561580][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.575679][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.593720][ T5611] veth0_vlan: entered promiscuous mode [ 69.600665][ T30] audit: type=1400 audit(1785574810.382:157): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.IlZJ0y/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.603130][ T270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.630110][ T30] audit: type=1400 audit(1785574810.382:158): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.IlZJ0y/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.667390][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.672451][ T30] audit: type=1400 audit(1785574810.382:159): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.696459][ T30] audit: type=1400 audit(1785574810.412:160): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.719473][ T30] audit: type=1400 audit(1785574810.412:161): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="gadgetfs" ino=6924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.742060][ T30] audit: type=1400 audit(1785574810.412:162): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.774864][ T3394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.793843][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.949173][ T3394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.964358][ T3394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.974044][ T50] Bluetooth: hci3: command tx timeout [ 69.979463][ T5613] Bluetooth: hci1: command tx timeout [ 69.980489][ T50] Bluetooth: hci0: command tx timeout [ 69.985742][ T5628] Bluetooth: hci4: command tx timeout [ 69.993958][ T5611] veth1_vlan: entered promiscuous mode [ 69.995828][ T5622] Bluetooth: hci2: command tx timeout [ 70.040324][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.099793][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.263554][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.344278][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.426772][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.459456][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.468670][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.495704][ T5611] veth0_macvtap: entered promiscuous mode [ 70.512517][ T5611] veth1_macvtap: entered promiscuous mode [ 70.518936][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.527304][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.599274][ T270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.607277][ T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.621902][ T270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.793226][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 70.805414][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.830533][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.893270][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.942750][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.973512][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.105664][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.138470][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.165708][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.243514][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.279214][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.310780][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.896000][ T5730] libceph: connect (1)[c::]:6789 error -101 [ 71.941836][ T5730] libceph: mon0 (1)[c::]:6789 connect error [ 72.053650][ T5622] Bluetooth: hci4: command tx timeout [ 72.055007][ T5628] Bluetooth: hci1: command tx timeout [ 72.059123][ T5622] Bluetooth: hci0: command tx timeout [ 72.059141][ T5622] Bluetooth: hci3: command tx timeout [ 72.064088][ T5622] Bluetooth: hci2: command tx timeout [ 72.112319][ T5836] ceph: No mds server is up or the cluster is laggy [ 72.760858][ T5865] syzkaller0: entered promiscuous mode [ 72.774168][ T5865] syzkaller0: entered allmulticast mode [ 73.328230][ T5875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'. [ 73.375325][ T5878] 9p: Bad value for 'rfdno' [ 73.380609][ T5875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'. [ 73.542522][ T5887] fuse: Bad value for 'fd' [ 74.123922][ T5898] warning: `syz.2.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.167090][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 75.167104][ T30] audit: type=1400 audit(1785574816.122:235): avc: denied { remount } for pid=5892 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.992510][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 76.271683][ T30] audit: type=1400 audit(1785574817.222:236): avc: denied { create } for pid=5925 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.333599][ T30] audit: type=1400 audit(1785574817.262:237): avc: denied { setopt } for pid=5925 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.441447][ T30] audit: type=1400 audit(1785574817.312:238): avc: denied { getopt } for pid=5925 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.467298][ T5937] netlink: 'syz.4.43': attribute type 15 has an invalid length. [ 76.514283][ T30] audit: type=1400 audit(1785574817.312:239): avc: denied { setopt } for pid=5925 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.415035][ T30] audit: type=1400 audit(1785574818.372:240): avc: denied { search } for pid=5944 comm="syz.0.46" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.469758][ T30] audit: type=1400 audit(1785574818.372:241): avc: denied { search } for pid=5944 comm="syz.0.46" name="usb_gadget" dev="configfs" ino=3721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.532312][ T5952] 9p: Bad value for 'wfdno' [ 77.546323][ T30] audit: type=1400 audit(1785574818.482:242): avc: denied { create } for pid=5951 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.735009][ T30] audit: type=1400 audit(1785574818.692:243): avc: denied { ioctl } for pid=5958 comm="syz.0.52" path="socket:[8525]" dev="sockfs" ino=8525 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.799230][ T30] audit: type=1400 audit(1785574818.722:244): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.014733][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 78.223864][ T5970] fuse: Bad value for 'fd' [ 79.464260][ T6001] 9p: Bad value for 'wfdno' [ 79.481139][ T6003] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure [ 79.804668][ T6009] ip_tables: iptables: counters copy to user failed while replacing table [ 81.072613][ T6018] infiniband syz2: set active [ 81.077443][ T6018] infiniband syz2: added bond_slave_0 [ 81.087188][ T6018] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 81.089594][ T6018] infiniband syz2: Couldn't open port 1 [ 81.106733][ T6018] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 81.121790][ T6018] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 81.140032][ T6018] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 81.160930][ T24] cfg80211: failed to load regulatory.db [ 81.176341][ T6018] RDS/IB: syz2: added [ 81.180583][ T6018] smc: adding ib device syz2 with port count 1 [ 81.186838][ T6018] smc: ib device syz2 port 1 has no pnetid [ 82.475278][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 82.475293][ T30] audit: type=1400 audit(1785574823.432:249): avc: denied { create } for pid=6035 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.506970][ T30] audit: type=1400 audit(1785574823.462:250): avc: denied { bind } for pid=6035 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.534586][ T6040] netlink: 72 bytes leftover after parsing attributes in process `syz.1.72'. [ 82.640855][ T30] audit: type=1400 audit(1785574823.512:251): avc: denied { setopt } for pid=6035 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.681890][ T30] audit: type=1400 audit(1785574823.522:252): avc: denied { accept } for pid=6035 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.239698][ T30] audit: type=1400 audit(1785574824.032:253): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.262445][ T30] audit: type=1400 audit(1785574824.182:254): avc: denied { create } for pid=6049 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.717675][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 83.734633][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 83.957449][ T30] audit: type=1400 audit(1785574824.912:255): avc: denied { write } for pid=6074 comm="syz.0.83" name="ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.043066][ T1162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.069991][ T6075] No fuse device found [ 84.077729][ T30] audit: type=1400 audit(1785574825.022:256): avc: denied { cmd } for pid=6074 comm="syz.0.83" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=io_uring permissive=1 [ 84.208494][ T1162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.354473][ T1162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.441919][ T30] audit: type=1400 audit(1785574825.392:257): avc: denied { connect } for pid=6082 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.485728][ T1162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.500596][ T30] audit: type=1400 audit(1785574825.392:258): avc: denied { name_connect } for pid=6082 comm="syz.1.87" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.592653][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.88'. [ 84.745861][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.756798][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.766246][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.776811][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.786222][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.936974][ T1162] bridge_slave_1: left allmulticast mode [ 84.947542][ T1162] bridge_slave_1: left promiscuous mode [ 84.954122][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.986806][ T1162] bridge_slave_0: left allmulticast mode [ 85.011205][ T1162] bridge_slave_0: left promiscuous mode [ 85.021736][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.604853][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.630847][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.647974][ T1162] bond0 (unregistering): Released all slaves [ 86.075063][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 86.106862][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 86.423451][ T6127] syzkaller0: entered promiscuous mode [ 86.438667][ T6127] syzkaller0: entered allmulticast mode [ 86.854327][ T5622] Bluetooth: hci4: command tx timeout [ 87.518949][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 87.518964][ T30] audit: type=1400 audit(1785574828.472:282): avc: denied { write } for pid=6161 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.086813][ T30] audit: type=1400 audit(1785574828.512:283): avc: denied { read } for pid=6161 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.106555][ T30] audit: type=1400 audit(1785574828.552:284): avc: denied { write } for pid=6133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.497194][ T1162] hsr_slave_0: left promiscuous mode [ 88.546619][ T30] audit: type=1400 audit(1785574829.502:285): avc: denied { write } for pid=6171 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.594253][ T1162] hsr_slave_1: left promiscuous mode [ 88.638962][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.652123][ T30] audit: type=1326 audit(1785574829.602:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.104" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc69f39e019 code=0x0 [ 88.715100][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.765930][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.820222][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.836675][ T30] audit: type=1400 audit(1785574829.712:287): avc: denied { read write } for pid=6173 comm="syz.2.104" name="video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 88.920483][ T1162] veth1_macvtap: left promiscuous mode [ 88.963301][ T1162] veth0_macvtap: left promiscuous mode [ 88.972662][ T5622] Bluetooth: hci4: command tx timeout [ 88.986256][ T30] audit: type=1400 audit(1785574829.712:288): avc: denied { open } for pid=6173 comm="syz.2.104" path="/dev/video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 89.016326][ T1162] veth1_vlan: left promiscuous mode [ 89.039555][ T1162] veth0_vlan: left promiscuous mode [ 89.119292][ T30] audit: type=1400 audit(1785574829.712:289): avc: denied { ioctl } for pid=6173 comm="syz.2.104" path="/dev/video3" dev="devtmpfs" ino=937 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 89.538680][ T30] audit: type=1400 audit(1785574829.712:290): avc: denied { bind } for pid=6173 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.692009][ T30] audit: type=1400 audit(1785574829.712:291): avc: denied { connect } for pid=6173 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.231184][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 90.251937][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 90.460790][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 90.476959][ T6197] tipc: Started in network mode [ 90.482697][ T6197] tipc: Node identity 4233d1ca1049, cluster identity 4711 [ 90.489951][ T6197] tipc: Enabled bearer , priority 0 [ 90.551578][ T6192] tipc: Disabling bearer [ 91.012864][ T5622] Bluetooth: hci4: command tx timeout [ 92.180787][ T6279] tipc: Started in network mode [ 92.210451][ T6279] tipc: Node identity 6a0b2849c6ac, cluster identity 4711 [ 92.260210][ T6279] tipc: Enabled bearer , priority 0 [ 92.341013][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.350461][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.358662][ T6090] bridge_slave_0: entered allmulticast mode [ 92.367193][ T6090] bridge_slave_0: entered promiscuous mode [ 92.377814][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 92.391618][ T6275] tipc: Disabling bearer [ 92.485686][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.508739][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.543522][ T6090] bridge_slave_1: entered allmulticast mode [ 92.557063][ T6090] bridge_slave_1: entered promiscuous mode [ 92.566597][ T6297] syzkaller0: entered promiscuous mode [ 92.574472][ T6297] syzkaller0: entered allmulticast mode [ 92.756534][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.787670][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.845992][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 92.846007][ T30] audit: type=1400 audit(1785574833.802:298): avc: denied { read } for pid=6320 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.896301][ T30] audit: type=1400 audit(1785574833.852:299): avc: denied { write } for pid=6320 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.948336][ T6090] team0: Port device team_slave_0 added [ 92.983031][ T6090] team0: Port device team_slave_1 added [ 93.092717][ T5622] Bluetooth: hci4: command tx timeout [ 93.110970][ T30] audit: type=1400 audit(1785574834.062:300): avc: denied { write } for pid=6319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.139166][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.154854][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.302774][ T30] audit: type=1400 audit(1785574834.242:301): avc: denied { write } for pid=6342 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.344845][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.358000][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.365071][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.391121][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.433296][ T6347] tipc: Enabled bearer , priority 0 [ 93.939547][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 93.977200][ T6343] tipc: Disabling bearer [ 94.005904][ T30] audit: type=1400 audit(1785574834.962:302): avc: denied { create } for pid=6352 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.030914][ T30] audit: type=1400 audit(1785574834.972:303): avc: denied { write } for pid=6352 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.077229][ T30] audit: type=1400 audit(1785574834.972:304): avc: denied { nlmsg_write } for pid=6352 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.178341][ T6090] hsr_slave_0: entered promiscuous mode [ 94.210040][ T6090] hsr_slave_1: entered promiscuous mode [ 94.225644][ T6090] debugfs: 'hsr0' already exists in 'hsr' [ 94.231427][ T6090] Cannot create hsr debugfs directory [ 94.270557][ T6359] syzkaller0: entered promiscuous mode [ 94.403533][ T30] audit: type=1400 audit(1785574835.222:305): avc: denied { ioctl } for pid=6361 comm="syz.0.147" path="socket:[10396]" dev="sockfs" ino=10396 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.432719][ T6359] syzkaller0: entered allmulticast mode [ 94.515555][ T30] audit: type=1400 audit(1785574835.452:306): avc: denied { append } for pid=6361 comm="syz.0.147" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.026503][ T6090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.036584][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.044674][ T6090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.061548][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.075359][ T6090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.182567][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.207760][ T6090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.247060][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.260443][ T30] audit: type=1400 audit(1785574836.212:307): avc: denied { execute } for pid=6379 comm="syz.1.151" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.300445][ T6376] syzkaller0: entered promiscuous mode [ 95.313696][ T6376] syzkaller0: entered allmulticast mode [ 95.361325][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 95.374868][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'. [ 95.412928][ T6393] ipip0: entered allmulticast mode [ 95.618076][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.642390][ T6402] syzkaller0: entered promiscuous mode [ 95.663937][ T6402] syzkaller0: entered allmulticast mode [ 95.751811][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.782503][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.789651][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.821947][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.829189][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.535875][ T6422] Zero length message leads to an empty skb [ 96.679177][ T6431] syzkaller0: entered promiscuous mode [ 96.694858][ T6431] syzkaller0: entered allmulticast mode [ 96.978835][ T6444] netlink: 164 bytes leftover after parsing attributes in process `syz.4.169'. [ 97.245738][ T6455] gadgetfs: bound to dummy_udc driver [ 97.347223][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.884180][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 97.884211][ T30] audit: type=1400 audit(1785574838.722:315): avc: denied { unlink } for pid=6465 comm="syz.4.175" name="#1" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.959319][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 98.610350][ T30] audit: type=1400 audit(1785574838.732:316): avc: denied { mount } for pid=6465 comm="syz.4.175" name="/" dev="overlay" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.694359][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 98.750602][ T30] audit: type=1400 audit(1785574839.512:317): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.922705][ T30] audit: type=1400 audit(1785574839.552:318): avc: denied { ioctl } for pid=6472 comm="syz.2.179" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.116903][ T30] audit: type=1400 audit(1785574839.592:319): avc: denied { create } for pid=6478 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.140096][ T30] audit: type=1400 audit(1785574839.592:320): avc: denied { write } for pid=6478 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.206160][ T30] audit: type=1400 audit(1785574840.102:321): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.368155][ T30] audit: type=1400 audit(1785574840.322:322): avc: denied { bind } for pid=6497 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.552701][ T30] audit: type=1400 audit(1785574840.322:323): avc: denied { create } for pid=6497 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.676504][ T30] audit: type=1400 audit(1785574840.352:324): avc: denied { connect } for pid=6497 comm="syz.1.183" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.679054][ T6090] veth0_vlan: entered promiscuous mode [ 99.772783][ T6090] veth1_vlan: entered promiscuous mode [ 99.983765][ T6516] Illegal XDP return value 1157691846 on prog (id 14) dev syz_tun, expect packet loss! [ 100.067380][ T6090] veth0_macvtap: entered promiscuous mode [ 100.148923][ T6090] veth1_macvtap: entered promiscuous mode [ 100.191764][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.229141][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.275762][ T1173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.314984][ T1173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.362874][ T1173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.391675][ T6526] netlink: 164 bytes leftover after parsing attributes in process `syz.1.195'. [ 100.391881][ T1173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.598177][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.633064][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.711760][ T270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.736833][ T270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.231100][ T6553] netlink: 72 bytes leftover after parsing attributes in process `syz.5.85'. [ 101.953903][ T3357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.893928][ T3357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.981097][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.993979][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.004138][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.005477][ T3357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.012795][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.029543][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.428302][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 103.428320][ T30] audit: type=1400 audit(1785574844.382:336): avc: denied { search } for pid=6590 comm="syz.5.215" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.507848][ T30] audit: type=1400 audit(1785574844.422:337): avc: denied { search } for pid=6590 comm="syz.5.215" name="usb_gadget" dev="configfs" ino=3721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.590211][ T3357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.308009][ T6608] netlink: 72 bytes leftover after parsing attributes in process `syz.5.219'. [ 104.814093][ T3357] bridge_slave_1: left allmulticast mode [ 104.834631][ T3357] bridge_slave_1: left promiscuous mode [ 104.865035][ T3357] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.904834][ T3357] bridge_slave_0: left allmulticast mode [ 104.914898][ T3357] bridge_slave_0: left promiscuous mode [ 104.927423][ T3357] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.023911][ T30] audit: type=1400 audit(1785574845.972:338): avc: denied { bind } for pid=6641 comm="syz.5.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.100566][ T5613] Bluetooth: hci3: command tx timeout [ 105.238576][ T30] audit: type=1400 audit(1785574846.192:339): avc: denied { write } for pid=6622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.397853][ T30] audit: type=1400 audit(1785574846.352:340): avc: denied { write } for pid=6649 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.518406][ T6656] netlink: 72 bytes leftover after parsing attributes in process `syz.4.231'. [ 105.541277][ T3357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.574156][ T3357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.594421][ T3357] bond0 (unregistering): Released all slaves [ 105.621917][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 105.642314][ T5730] syz2: Port: 1 Link DOWN [ 105.653154][ T30] audit: type=1400 audit(1785574846.602:341): avc: denied { read write } for pid=6659 comm="syz.4.233" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 105.749503][ T30] audit: type=1400 audit(1785574846.602:342): avc: denied { open } for pid=6659 comm="syz.4.233" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 105.781357][ T3357] tipc: Left network mode [ 105.844857][ T6665] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 106.335161][ T30] audit: type=1400 audit(1785574847.292:343): avc: denied { write } for pid=6661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.464803][ T30] audit: type=1400 audit(1785574847.422:344): avc: denied { write } for pid=6691 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.880452][ T30] audit: type=1400 audit(1785574847.832:345): avc: denied { setopt } for pid=6703 comm="syz.5.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.173608][ T5613] Bluetooth: hci3: command tx timeout [ 107.326938][ T3357] hsr_slave_0: left promiscuous mode [ 107.362118][ T3357] hsr_slave_1: left promiscuous mode [ 107.711820][ T3357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.719526][ T3357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.727578][ T3357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.740439][ T3357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.748435][ T6721] netlink: 72 bytes leftover after parsing attributes in process `syz.0.243'. [ 107.759213][ T3357] veth1_macvtap: left promiscuous mode [ 107.767405][ T3357] veth0_macvtap: left promiscuous mode [ 107.779278][ T3357] veth1_vlan: left promiscuous mode [ 107.789854][ T3357] veth0_vlan: left promiscuous mode [ 108.335242][ T5812] kernel read not supported for file /video7 (pid: 5812 comm: kworker/0:7) [ 108.404395][ T3357] team0 (unregistering): Port device team_slave_1 removed [ 108.477964][ T3357] team0 (unregistering): Port device team_slave_0 removed [ 108.754744][ T143] smc: removing ib device syz2 [ 109.031503][ T6753] netlink: 72 bytes leftover after parsing attributes in process `syz.1.254'. [ 109.254912][ T5613] Bluetooth: hci3: command tx timeout [ 109.275922][ T143] smbdirect: ib_dev[syz2] removed [ 109.292385][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 109.292399][ T30] audit: type=1400 audit(1785574850.242:354): avc: denied { mounton } for pid=6759 comm="syz.1.256" path="/62/file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.406802][ T30] audit: type=1400 audit(1785574850.332:355): avc: denied { execute } for pid=6759 comm="syz.1.256" name="file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.489636][ T30] audit: type=1400 audit(1785574850.412:356): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.518502][ T30] audit: type=1400 audit(1785574850.412:357): avc: denied { open } for pid=5615 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.547885][ T30] audit: type=1400 audit(1785574850.412:358): avc: denied { ioctl } for pid=5615 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.723163][ T30] audit: type=1400 audit(1785574850.572:359): avc: denied { bind } for pid=6768 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.776318][ T30] audit: type=1400 audit(1785574850.572:360): avc: denied { name_bind } for pid=6768 comm="syz.0.259" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 110.207983][ T30] audit: type=1400 audit(1785574850.572:361): avc: denied { node_bind } for pid=6768 comm="syz.0.259" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 110.229373][ T30] audit: type=1400 audit(1785574850.572:362): avc: denied { listen } for pid=6768 comm="syz.0.259" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.323902][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.340950][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.360955][ T6578] bridge_slave_0: entered allmulticast mode [ 110.436232][ T6578] bridge_slave_0: entered promiscuous mode [ 110.950681][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.963323][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.970607][ T6578] bridge_slave_1: entered allmulticast mode [ 111.011342][ T30] audit: type=1400 audit(1785574851.962:363): avc: denied { write } for pid=6758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.055132][ T6578] bridge_slave_1: entered promiscuous mode [ 111.333106][ T5613] Bluetooth: hci3: command tx timeout [ 111.442130][ T6805] netlink: 72 bytes leftover after parsing attributes in process `syz.4.265'. [ 111.620078][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.658595][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.095614][ T6578] team0: Port device team_slave_0 added [ 112.254112][ T6578] team0: Port device team_slave_1 added [ 112.995352][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.002583][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.071996][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.159364][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.185701][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.274213][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.584204][ T6578] hsr_slave_0: entered promiscuous mode [ 113.611587][ T6578] hsr_slave_1: entered promiscuous mode [ 115.029075][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 115.029106][ T30] audit: type=1400 audit(1785574855.982:380): avc: denied { listen } for pid=6878 comm="syz.5.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.149146][ T6890] syz.1.284 uses obsolete (PF_INET,SOCK_PACKET) [ 116.157557][ T30] audit: type=1400 audit(1785574857.122:381): avc: denied { ioctl } for pid=6888 comm="syz.1.284" path="socket:[13436]" dev="sockfs" ino=13436 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.659220][ T30] audit: type=1400 audit(1785574857.612:382): avc: denied { write } for pid=6866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.065678][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.286'. [ 117.252660][ T30] audit: type=1400 audit(1785574858.202:383): avc: denied { write } for pid=6903 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.476980][ T6909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.508244][ T6918] syzkaller0: entered promiscuous mode [ 118.516251][ T6918] syzkaller0: entered allmulticast mode [ 118.950861][ T6935] gtp0: entered allmulticast mode [ 119.025431][ T30] audit: type=1400 audit(1785574859.982:384): avc: denied { create } for pid=6941 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.030111][ T6578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.063289][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 119.087023][ T30] audit: type=1400 audit(1785574860.012:385): avc: denied { ioctl } for pid=6941 comm="syz.4.296" path="socket:[13562]" dev="sockfs" ino=13562 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.120733][ T6578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.136815][ T30] audit: type=1400 audit(1785574860.012:386): avc: denied { connect } for pid=6941 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.161626][ T30] audit: type=1400 audit(1785574860.012:387): avc: denied { write } for pid=6941 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.167899][ T6578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.198761][ T30] audit: type=1400 audit(1785574860.152:388): avc: denied { write } for pid=6925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.482221][ T6578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.529677][ T30] audit: type=1400 audit(1785574860.482:389): avc: denied { write } for pid=6954 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.595299][ T6578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.629568][ T6578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.654121][ T6578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.700336][ T6578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.003687][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.153057][ T6578] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.176996][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.184161][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.663251][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.670408][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.698082][ T30] audit: type=1400 audit(1785574861.652:390): avc: denied { write } for pid=6960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.799154][ T30] audit: type=1400 audit(1785574861.752:391): avc: denied { write } for pid=6999 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.841285][ T6578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.894536][ T6578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.072174][ T7008] xt_hashlimit: size too large, truncated to 1048576 [ 121.075897][ T30] audit: type=1400 audit(1785574862.022:392): avc: denied { create } for pid=7009 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 121.292602][ T30] audit: type=1400 audit(1785574862.242:393): avc: denied { connect } for pid=7009 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.330188][ T30] audit: type=1400 audit(1785574862.262:394): avc: denied { bind } for pid=7009 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.354676][ T30] audit: type=1400 audit(1785574862.272:395): avc: denied { read } for pid=7009 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.617764][ T30] audit: type=1400 audit(1785574862.572:396): avc: denied { write } for pid=7003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.746871][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.783689][ T30] audit: type=1400 audit(1785574862.742:397): avc: denied { write } for pid=7039 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.860229][ T6578] veth0_vlan: entered promiscuous mode [ 121.882105][ T30] audit: type=1400 audit(1785574862.832:398): avc: denied { search } for pid=7042 comm="syz.0.314" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.960353][ T7043] Config c/1 of g1 needs at least one function. [ 121.967330][ T7043] udc dummy_udc.0: failed to start g1: -22 [ 121.979480][ T6578] veth1_vlan: entered promiscuous mode [ 122.013929][ T30] audit: type=1400 audit(1785574862.832:399): avc: denied { search } for pid=7042 comm="syz.0.314" name="usb_gadget" dev="configfs" ino=3721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.040339][ T6578] veth0_macvtap: entered promiscuous mode [ 122.049512][ T7043] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 122.072085][ T6578] veth1_macvtap: entered promiscuous mode [ 122.114042][ T7043] UDC core: g1: couldn't find an available UDC or it's busy [ 122.139450][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.160457][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.293062][ T270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.321974][ T270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.382855][ T270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.468177][ T3357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.008115][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.016466][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.297086][ T7056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.331684][ T7056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.377080][ T7071] process 'syz.5.325' launched './file2' with NULL argv: empty string added [ 123.597915][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.652378][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.665275][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.683699][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.743350][ T1173] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.853448][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.861377][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.885553][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.886710][ T7107] 9p: Bad value for 'rfdno' [ 125.129224][ T7115] syzkaller0: entered promiscuous mode [ 125.148736][ T7115] syzkaller0: entered allmulticast mode [ 125.534541][ T7120] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.544240][ T7120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.631084][ T7120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.654445][ T7120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.671080][ T7120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.701452][ T7120] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.729318][ T7120] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 125.756244][ T7120] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 125.762225][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 125.762240][ T30] audit: type=1400 audit(1785574866.712:431): avc: denied { setopt } for pid=7133 comm="syz.2.349" lport=40886 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 125.812475][ T7120] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.835588][ T7120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.902416][ T7120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.002591][ T30] audit: type=1400 audit(1785574866.952:432): avc: denied { listen } for pid=7139 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.061594][ T30] audit: type=1400 audit(1785574866.952:433): avc: denied { accept } for pid=7139 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.089160][ T7146] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 126.095814][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.131412][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 126.180718][ T7154] syzkaller0: entered promiscuous mode [ 126.195915][ T7154] syzkaller0: entered allmulticast mode [ 126.576096][ T5730] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 126.780822][ T7163] input: syz0 as /devices/virtual/input/input6 [ 126.922745][ T7148] vhci_hcd: connection reset by peer [ 126.956037][ T143] vhci_hcd vhci_hcd.2: stop threads [ 127.001350][ T143] vhci_hcd vhci_hcd.2: release socket [ 127.056259][ T143] vhci_hcd vhci_hcd.2: disconnect device [ 127.187449][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.194459][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.333475][ T7184] syzkaller0: entered promiscuous mode [ 127.339036][ T7184] syzkaller0: entered allmulticast mode [ 127.639102][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.732662][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.740514][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 127.813411][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.965315][ T30] audit: type=1400 audit(1785574868.922:434): avc: denied { create } for pid=7192 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.026371][ T30] audit: type=1400 audit(1785574868.952:435): avc: denied { bind } for pid=7192 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.059059][ T30] audit: type=1400 audit(1785574868.952:436): avc: denied { write } for pid=7192 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.078437][ T30] audit: type=1400 audit(1785574868.952:437): avc: denied { listen } for pid=7192 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.279371][ T7211] 9pnet_fd: Insufficient options for proto=fd [ 128.359735][ T7212] tc_dump_action: action bad kind [ 128.418351][ T7218] syzkaller0: entered promiscuous mode [ 128.438035][ T7218] syzkaller0: entered allmulticast mode [ 129.153271][ T30] audit: type=1400 audit(1785574870.062:438): avc: denied { ioctl } for pid=7245 comm="syz.2.399" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13238 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.687513][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.812640][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.818962][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 129.901616][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.963821][ T7263] syzkaller0: entered promiscuous mode [ 129.969986][ T7263] syzkaller0: entered allmulticast mode [ 131.041254][ T30] audit: type=1400 audit(1785574871.592:439): avc: denied { mmap_zero } for pid=7282 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 131.062348][ T30] audit: type=1400 audit(1785574871.632:440): avc: denied { cmd } for pid=7282 comm="syz.0.411" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 131.101507][ T30] audit: type=1400 audit(1785574871.662:441): avc: denied { map } for pid=7282 comm="syz.0.411" path="/dev/ublkc0" dev="devtmpfs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.225794][ T30] audit: type=1400 audit(1785574871.772:442): avc: denied { map } for pid=7282 comm="syz.0.411" path="socket:[15371]" dev="sockfs" ino=15371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 131.742735][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.835445][ T5730] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 131.892787][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.972632][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.108795][ T7323] fuse: Bad value for 'fd' [ 134.265453][ T30] audit: type=1400 audit(1785574875.222:443): avc: denied { read } for pid=7350 comm="syz.2.436" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.350054][ T30] audit: type=1400 audit(1785574875.302:444): avc: denied { write } for pid=7354 comm="syz.4.437" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.375338][ T7355] random: crng reseeded on system resumption [ 134.620995][ T7358] Restarting kernel threads ... [ 134.626882][ T7358] Done restarting kernel threads. [ 134.648236][ T30] audit: type=1400 audit(1785574875.572:445): avc: denied { ioctl } for pid=7354 comm="syz.4.437" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.994825][ T7356] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 135.104975][ T30] audit: type=1400 audit(1785574876.062:446): avc: denied { write } for pid=7359 comm="syz.5.439" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.261634][ T30] audit: type=1400 audit(1785574876.062:447): avc: denied { ioctl } for pid=7359 comm="syz.5.439" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.340174][ T30] audit: type=1400 audit(1785574876.062:448): avc: denied { set_context_mgr } for pid=7359 comm="syz.5.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 135.699419][ T7390] random: crng reseeded on system resumption [ 136.022353][ T7397] Restarting kernel threads ... [ 136.027743][ T7397] Done restarting kernel threads. [ 136.334852][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 136.334868][ T30] audit: type=1400 audit(1785574877.272:452): avc: denied { connect } for pid=7400 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.865957][ T7433] input: syz0 as /devices/virtual/input/input10 [ 137.833828][ T7453] random: crng reseeded on system resumption [ 138.122952][ T7461] Restarting kernel threads ... [ 138.128236][ T7461] Done restarting kernel threads. [ 138.341964][ T30] audit: type=1400 audit(1785574879.272:453): avc: denied { read } for pid=7457 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.672085][ T30] audit: type=1400 audit(1785574879.622:454): avc: denied { create } for pid=7469 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 138.713458][ T30] audit: type=1400 audit(1785574879.652:455): avc: denied { create } for pid=7469 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.738743][ T7472] Bluetooth: MGMT ver 1.23 [ 139.217082][ T7472] Bluetooth: hci0: unsupported parameter 255 [ 139.234285][ T7472] Bluetooth: hci0: unsupported parameter 255 [ 139.273171][ T7478] input: syz0 as /devices/virtual/input/input11 [ 140.191032][ T30] audit: type=1400 audit(1785574881.142:456): avc: denied { create } for pid=7502 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.214909][ T30] audit: type=1400 audit(1785574881.152:457): avc: denied { setopt } for pid=7502 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.264983][ T270] nci: nci_rx_work: unknown MT 0x6 [ 140.883508][ T30] audit: type=1400 audit(1785574881.842:458): avc: denied { mount } for pid=7513 comm="syz.4.495" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 140.932070][ T30] audit: type=1400 audit(1785574881.882:459): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 141.013439][ T7525] input: syz0 as /devices/virtual/input/input12 [ 141.060288][ T7124] udevd[7124]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 141.140426][ T30] audit: type=1400 audit(1785574882.092:460): avc: denied { relabelfrom } for pid=7529 comm="syz.5.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.162379][ T30] audit: type=1400 audit(1785574882.092:461): avc: denied { relabelto } for pid=7529 comm="syz.5.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 142.079772][ T7543] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 142.579417][ T7547] random: crng reseeded on system resumption [ 142.795939][ T30] audit: type=1400 audit(1785574883.752:462): avc: denied { setopt } for pid=7560 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.137648][ T7503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.620900][ T7578] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 143.628505][ T7578] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 143.811792][ T7586] random: crng reseeded on system resumption [ 144.149675][ T7598] Restarting kernel threads ... [ 144.154954][ T7598] Done restarting kernel threads. [ 146.116970][ T7619] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 146.152647][ T7619] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 146.497314][ T7637] random: crng reseeded on system resumption [ 146.776040][ T7641] Restarting kernel threads ... [ 146.781338][ T7641] Done restarting kernel threads. [ 147.555132][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'. [ 148.151043][ T7679] random: crng reseeded on system resumption [ 148.424716][ T7683] Restarting kernel threads ... [ 148.430009][ T7683] Done restarting kernel threads. [ 149.443751][ T30] audit: type=1326 audit(1785574890.392:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.5.573" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf64b9e019 code=0x0 [ 149.536436][ T30] audit: type=1400 audit(1785574890.452:464): avc: denied { create } for pid=7722 comm="syz.5.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 150.442626][ T30] audit: type=1400 audit(1785574891.262:465): avc: denied { write } for pid=7733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.576330][ T30] audit: type=1400 audit(1785574891.532:466): avc: denied { name_bind } for pid=7768 comm="syz.1.586" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 150.717829][ T30] audit: type=1400 audit(1785574891.672:467): avc: denied { write } for pid=7775 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.088553][ T30] audit: type=1400 audit(1785574892.042:468): avc: denied { execute } for pid=7801 comm="syz.4.599" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 151.653921][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.661485][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.736869][ T7804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.751024][ T7804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.982593][ T7700] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.109443][ T7700] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.224005][ T7700] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.394863][ T7700] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.460052][ T30] audit: type=1400 audit(1785574893.412:469): avc: denied { attach_queue } for pid=7810 comm="syz.5.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 152.840999][ T7845] syzkaller0: entered promiscuous mode [ 152.855063][ T7845] syzkaller0: entered allmulticast mode [ 153.870263][ T30] audit: type=1326 audit(1785574894.822:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.5.627" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf64b9e019 code=0x0 [ 153.909583][ T7873] gadgetfs: bound to dummy_udc driver [ 154.143618][ T30] audit: type=1400 audit(1785574895.102:471): avc: denied { open } for pid=7889 comm="syz.0.634" path="/dev/ttyq5" dev="devtmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 156.730113][ T30] audit: type=1400 audit(1785574897.682:472): avc: denied { mount } for pid=7917 comm="syz.1.644" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 156.752307][ T30] audit: type=1400 audit(1785574897.682:473): avc: denied { write } for pid=7917 comm="syz.1.644" name="001" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 156.755675][ T7919] dummy_hcd dummy_hcd.0: remove, state 1 [ 156.816619][ T7919] usb usb1: USB disconnect, device number 1 [ 156.929132][ T7919] dummy_hcd dummy_hcd.0: stopped [ 156.937144][ T7919] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 157.024071][ T30] audit: type=1400 audit(1785574897.982:474): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 157.409776][ T30] audit: type=1400 audit(1785574898.362:475): avc: denied { module_load } for pid=7936 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 157.409835][ T7941] Invalid ELF header type: 2 != 1 [ 158.667450][ T7967] binder: 7965:7967 ioctl c0306201 200000000080 returned -14 [ 158.691846][ T7967] binder: 7965:7967 ioctl c0306201 2000000003c0 returned -14 [ 158.737919][ T7968] netlink: 'syz.4.656': attribute type 15 has an invalid length. [ 159.319094][ T30] audit: type=1400 audit(1785574900.272:476): avc: denied { mount } for pid=7982 comm="syz.4.667" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 160.120966][ T30] audit: type=1400 audit(1785574901.072:477): avc: denied { read } for pid=7992 comm="syz.2.669" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.297953][ T7994] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 160.302379][ T30] audit: type=1400 audit(1785574901.072:478): avc: denied { open } for pid=7992 comm="syz.2.669" path="/61/config" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.310040][ T7994] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 160.310060][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.310086][ T7994] Tainted: [L]=SOFTLOCKUP [ 160.310092][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.310102][ T7994] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 160.334376][ T30] audit: type=1400 audit(1785574901.122:479): avc: denied { search } for pid=7992 comm="syz.2.669" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.340868][ T7994] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 0d 8b 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 160.340888][ T7994] RSP: 0018:ffffc90004edf8e0 EFLAGS: 00010246 [ 160.340903][ T7994] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000608a000 [ 160.340914][ T7994] RDX: 0000000000000000 RSI: ffffffff87d0d6d3 RDI: ffff888027301290 [ 160.340924][ T7994] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 160.340933][ T7994] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 160.340942][ T7994] R13: ffff888027300068 R14: ffff888027300c58 R15: ffff88807c699810 [ 160.340952][ T7994] FS: 00007ffbdc9b46c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 160.340970][ T7994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.340981][ T7994] CR2: 000055558d0d34e8 CR3: 000000002a6a2000 CR4: 00000000003526f0 [ 160.340993][ T7994] Call Trace: [ 160.340998][ T7994] [ 160.341004][ T7994] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 160.341030][ T7994] usb_gadget_set_selfpowered+0x73/0x2b0 [ 160.341057][ T7994] composite_dev_prepare+0x254/0x420 [ 160.341082][ T7994] configfs_composite_bind+0xd2/0x1960 [ 160.510676][ T7994] ? kernfs_create_link+0x1bd/0x240 [ 160.515866][ T7994] gadget_bind_driver+0x28c/0xbf0 [ 160.520964][ T7994] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 160.526586][ T7994] ? __pfx_gadget_bind_driver+0x10/0x10 [ 160.532109][ T7994] really_probe+0x241/0xa60 [ 160.536597][ T7994] __driver_probe_device+0x20e/0x450 [ 160.541862][ T7994] driver_probe_device+0x4a/0x140 [ 160.546869][ T7994] __driver_attach+0x21f/0x5b0 [ 160.551622][ T7994] ? __pfx___driver_attach+0x10/0x10 [ 160.556892][ T7994] bus_for_each_dev+0x13e/0x1d0 [ 160.561719][ T7994] ? __pfx_bus_for_each_dev+0x10/0x10 [ 160.567065][ T7994] ? bus_add_driver+0x2b5/0x5b0 [ 160.571893][ T7994] bus_add_driver+0x305/0x5b0 [ 160.576548][ T7994] driver_register+0x1e2/0x360 [ 160.581303][ T7994] usb_gadget_register_driver_owner+0x132/0x210 [ 160.587528][ T7994] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 160.593143][ T7994] configfs_write_iter+0x302/0x4e0 [ 160.598235][ T7994] vfs_write+0x6ac/0x1050 [ 160.602549][ T7994] ? __pfx_configfs_write_iter+0x10/0x10 [ 160.608159][ T7994] ? __pfx_vfs_write+0x10/0x10 [ 160.612915][ T7994] ksys_write+0x12a/0x250 [ 160.617228][ T7994] ? __pfx_ksys_write+0x10/0x10 [ 160.622062][ T7994] do_syscall_64+0x115/0x870 [ 160.626640][ T7994] ? clear_bhb_loop+0x40/0x90 [ 160.631298][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.637167][ T7994] RIP: 0033:0x7ffbdbb9e019 [ 160.641563][ T7994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.661147][ T7994] RSP: 002b:00007ffbdc9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.669535][ T7994] RAX: ffffffffffffffda RBX: 00007ffbdbe25fa0 RCX: 00007ffbdbb9e019 [ 160.677482][ T7994] RDX: 000000000000000c RSI: 0000200000000780 RDI: 0000000000000007 [ 160.685428][ T7994] RBP: 00007ffbdbc3500c R08: 0000000000000000 R09: 0000000000000000 [ 160.693375][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.701320][ T7994] R13: 00007ffbdbe26038 R14: 00007ffbdbe25fa0 R15: 00007fff5a963aa8 [ 160.709273][ T7994] [ 160.712270][ T7994] Modules linked in: [ 160.717250][ T7994] ---[ end trace 0000000000000000 ]--- [ 160.724703][ T30] audit: type=1400 audit(1785574901.122:480): avc: denied { search } for pid=7992 comm="syz.2.669" name="usb_gadget" dev="configfs" ino=3721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.222734][ T7994] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 161.231732][ T7994] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 0d 8b 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 161.252098][ T30] audit: type=1400 audit(1785574901.122:481): avc: denied { search } for pid=7992 comm="syz.2.669" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.274119][ T7994] RSP: 0018:ffffc90004edf8e0 EFLAGS: 00010246 [ 161.280533][ T7994] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000608a000 [ 161.288698][ T7994] RDX: 0000000000000000 RSI: ffffffff87d0d6d3 RDI: ffff888027301290 [ 161.296777][ T7994] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 161.306299][ T7994] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 161.314758][ T7994] R13: ffff888027300068 R14: ffff888027300c58 R15: ffff88807c699810 [ 161.322978][ T7994] FS: 00007ffbdc9b46c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 161.331929][ T7994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.338632][ T7994] CR2: 00007fa14d5ef2f8 CR3: 000000002a6a2000 CR4: 00000000003526f0 [ 161.346643][ T7994] Kernel panic - not syncing: Fatal exception [ 161.352880][ T7994] Kernel Offset: disabled [ 161.357177][ T7994] Rebooting in 86400 seconds..