last executing test programs: 4.956982113s ago: executing program 0 (id=123): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syzkaller0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) 3.5386086s ago: executing program 2 (id=144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1388, @loopback}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="450000280001000040847c4f7f0000017f0000011388138800000000fb864b9706000004"], 0x28) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.977976645s ago: executing program 2 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 2.946893101s ago: executing program 2 (id=148): unshare(0x50000000) unshare(0x50000000) nanosleep(&(0x7f0000000000)={0x2}, 0x0) 2.88999893s ago: executing program 1 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}}}, 0x0) 2.759131397s ago: executing program 1 (id=153): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000240)={&(0x7f00000009c0)="60a741a0e6028e09d62e17eabe54b4b55cc0a272bac57118a3124839e01c3b77b00f3e3e8e1f9a4145c72a290b4e2288820f14157dd9257780958272769ce0141198eb2f05bd9c00e3b74f736ec22cda51723a08ec40a83935fd80055741a7f6f4ebb8d79ab7e86b2d3bcd83c461f03925148e9662c0e35f54c5d80628fc910171b4dd0a557f93080d09f8ddc6b0c4acbf49eee53dbcd18a63139ab4502fffffc023a45a9a44c1dfe0d24ee8d8410bc5586fb9e44afd6692f08ab99d", 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/190, 0xbe, 0x0, &(0x7f0000000580)=""/40, 0x28}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=r4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r3, 0x0, 0x4b, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x109) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 2.395373866s ago: executing program 1 (id=157): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 2.095444496s ago: executing program 4 (id=161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='mon_host\x00', &(0x7f0000000180)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='ms_mode\x00', &(0x7f0000000200)='crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000300)="636570682076320a100001000000000000000100000000000000", 0x1a) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) close(r2) close(r1) close(r0) 2.071722785s ago: executing program 2 (id=162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x1a0b, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mount_timeout\x00', &(0x7f0000000250)='10\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 1.810115555s ago: executing program 0 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r1, 0x0, 0x0, 0x0, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xaa}]}, 0x3c}}, 0x0) 1.667314655s ago: executing program 0 (id=165): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r0, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r0, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r0, 0x890b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00'/64) 1.667045095s ago: executing program 3 (id=166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x0, r1, 0x1, 0x0, 0x0, {0x28, 0x0, 0x1}, [@TIPC_NLA_NET={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0xc, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0xd, 0x99aabbccddeeff00}]}]}}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x0, r1, 0x1, 0x0, 0x0, {0x50, 0x0, 0x1}, [@TIPC_NLA_NODE={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "000102030405060708090a0b0c0d0e0f"}, @TIPC_NLA_NODE_KEY={0x34, 0x4, {'gcm(aes)\x00', 0x10, "0123456789abcdef"}}]}]}}}, 0x0) close(r0) unshare(0x40000000) 1.453845558s ago: executing program 0 (id=167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1f90, @loopback}}, {0x14, 0x2, @in={0x2, 0x1f91, @loopback}}}}]}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x11) bind$inet(r2, &(0x7f0000000100)={0x2, 0x1f92, @loopback}, 0x10) recvfrom$inet(r2, &(0x7f0000000200), 0x100, 0x40, 0x0, 0x0) 1.327153238s ago: executing program 0 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030203020302030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x6a) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x68) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) read(r4, &(0x7f0000000800)=""/256, 0x100) 1.206032153s ago: executing program 4 (id=169): syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x0, 0x3a, 0x40, @local, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x400, {0x0, 0x6, '\x00', 0x2, 0x6c, 0x40, @local, @local, [], "00001080"}}}}}}}, 0x0) 1.075529731s ago: executing program 4 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x0, "0000010b11123400"}}, 0x10) 1.075267685s ago: executing program 2 (id=171): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x8000) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, 'd\x00\x00\x00'}], 0x30}, 0x0) shutdown(r0, 0x2) close(r0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 960.594541ms ago: executing program 3 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0xb, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, 0x13, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x34}}, 0x0) 737.716923ms ago: executing program 3 (id=173): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) 443.402824ms ago: executing program 1 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002000000000000c0001000800010001000000100003000c000300080005001f000000"], 0x28}}, 0x0) 443.161857ms ago: executing program 3 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x50, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000540)=@setlink={0x28, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000070000506000000000000000007000000030000001400018008000100000001000500060001000000"]}}, 0x0) 418.079602ms ago: executing program 4 (id=176): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x891c, &(0x7f0000000040)={'bridge0\x00', @ifru_addrs=@ethernet={0x1, @local}}) 313.157899ms ago: executing program 1 (id=177): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xe) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev}], 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000100)=0x84) 231.174422ms ago: executing program 4 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/9/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\x00', 0x2) 230.792114ms ago: executing program 3 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) listen(r1, 0x5) syz_emit_ethernet(0x4c, &(0x7f0000000300)={@local, @empty, @void, {@generic={0x800, "450000400000000040847c377f0000017f0000014e204e210000000067645d940100002012345678000186a0000a000a000000018002000a0001020304050000"}}}, 0x0) 165.026414ms ago: executing program 2 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='100 1\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim100/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x24, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x24}}, 0x0) 125.143099ms ago: executing program 4 (id=181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)='ceph v2\n\x00'/20, 0x1c) shutdown(r2, 0x2) close(r2) close(r0) nanosleep(&(0x7f0000000800)={0x2}, 0x0) 51.05513ms ago: executing program 3 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10 2\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='4\n\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@setlink={0x0, 0x0, 0x0, 0x3, 0x0, {}, [@IFLA_IFALIAS={0x0, 0x0, 'veth1\x00'}]}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x0, 0x0, 0x0, 0x3, 0x0, {}, [@IFLA_EXT_MASK={0x0, 0x0, 0x1}]}}}, 0x0) 355.153µs ago: executing program 0 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f400028100000000000000001000001010000010100000200"/62, 0x36) write(r0, &(0x7f0000000600)="ffffffffffff00000000000188ca4f400028200000000000000001000001010000010100000200"/62, 0x36) write(r0, &(0x7f0000000800)="ffffffffffff00000000000188ca4f400028000000000000000001000001010000010100000200"/62, 0x36) 0s ago: executing program 1 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv4_newroute={0x3c, 0x18, 0x501, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x1, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x1, 0x1}}]}, 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa010100}, @generic={0x63, 0xa, 0x2, 0xffd4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x0, 0x22, 0x64, &(0x7f0000000800)="00000000000000000000000008004500003c0000000040013cce0a0101010a010100", &(0x7f0000000900)=""/100, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [ 54.496497][ T30] audit: type=1400 audit(1785135621.491:111): avc: denied { write } for pid=5459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.546157][ T30] audit: type=1400 audit(1785135621.541:112): avc: denied { write } for pid=5470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.717832][ T30] audit: type=1400 audit(1785135621.711:113): avc: denied { write } for pid=5473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.767590][ T30] audit: type=1400 audit(1785135621.761:114): avc: denied { write } for pid=5484 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.938232][ T30] audit: type=1400 audit(1785135621.931:115): avc: denied { write } for pid=5487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.990712][ T30] audit: type=1400 audit(1785135621.981:116): avc: denied { write } for pid=5498 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.634853][ T30] audit: type=1400 audit(1785135622.631:117): avc: denied { write } for pid=5501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.685681][ T30] audit: type=1400 audit(1785135622.681:118): avc: denied { write } for pid=5512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.858984][ T30] audit: type=1400 audit(1785135622.851:119): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.907865][ T30] audit: type=1400 audit(1785135622.901:120): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 59.906811][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 59.906825][ T30] audit: type=1400 audit(1785135626.901:129): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.936637][ T30] audit: type=1400 audit(1785135626.931:130): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.939545][ T5592] cgroup: Unknown subsys name 'net' [ 59.965792][ T30] audit: type=1400 audit(1785135626.961:131): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.085769][ T5592] cgroup: Unknown subsys name 'cpuset' [ 60.093477][ T5592] cgroup: Unknown subsys name 'rlimit' [ 60.213569][ T30] audit: type=1400 audit(1785135627.211:132): avc: denied { setattr } for pid=5592 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.237208][ T30] audit: type=1400 audit(1785135627.211:133): avc: denied { create } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.264836][ T30] audit: type=1400 audit(1785135627.211:134): avc: denied { write } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.286560][ T30] audit: type=1400 audit(1785135627.211:135): avc: denied { read } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.307175][ T30] audit: type=1400 audit(1785135627.231:136): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.332929][ T30] audit: type=1400 audit(1785135627.231:137): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.370678][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.380037][ T30] audit: type=1400 audit(1785135627.371:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.380079][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.435383][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.444718][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.452632][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.464496][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.470543][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.489424][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.496753][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.513402][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.516206][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.521766][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.529427][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.536438][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.543295][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.550059][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.556831][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.570247][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.571967][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.577833][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.593209][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.601568][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.603667][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.615165][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.616283][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.623827][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.637897][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.828462][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.836466][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.843687][ T5606] bridge_slave_0: entered allmulticast mode [ 64.850787][ T5606] bridge_slave_0: entered promiscuous mode [ 64.875592][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.882768][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.889969][ T5606] bridge_slave_1: entered allmulticast mode [ 64.896626][ T5606] bridge_slave_1: entered promiscuous mode [ 64.961609][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.968745][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.976065][ T5613] bridge_slave_0: entered allmulticast mode [ 64.982742][ T5613] bridge_slave_0: entered promiscuous mode [ 65.004076][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.019170][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.026474][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.033588][ T5613] bridge_slave_1: entered allmulticast mode [ 65.040203][ T5613] bridge_slave_1: entered promiscuous mode [ 65.058224][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.078527][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.085690][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.092986][ T5616] bridge_slave_0: entered allmulticast mode [ 65.099868][ T5616] bridge_slave_0: entered promiscuous mode [ 65.127851][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.135056][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.142139][ T5616] bridge_slave_1: entered allmulticast mode [ 65.148957][ T5616] bridge_slave_1: entered promiscuous mode [ 65.170775][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.193800][ T5606] team0: Port device team_slave_0 added [ 65.208549][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.231802][ T5606] team0: Port device team_slave_1 added [ 65.258021][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.267359][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.274629][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.281724][ T5607] bridge_slave_0: entered allmulticast mode [ 65.288493][ T5607] bridge_slave_0: entered promiscuous mode [ 65.301178][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.308452][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.315789][ T5615] bridge_slave_0: entered allmulticast mode [ 65.322438][ T5615] bridge_slave_0: entered promiscuous mode [ 65.337978][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.347274][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.354612][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.361727][ T5607] bridge_slave_1: entered allmulticast mode [ 65.368512][ T5607] bridge_slave_1: entered promiscuous mode [ 65.375730][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.382663][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.408763][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.420144][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.427441][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.434607][ T5615] bridge_slave_1: entered allmulticast mode [ 65.441253][ T5615] bridge_slave_1: entered promiscuous mode [ 65.449100][ T5613] team0: Port device team_slave_0 added [ 65.466954][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.473984][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.499928][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.518273][ T5613] team0: Port device team_slave_1 added [ 65.563957][ T5616] team0: Port device team_slave_0 added [ 65.571591][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.582835][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.593748][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.604515][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.611447][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.637613][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.637697][ T5614] Bluetooth: hci0: command tx timeout [ 65.650102][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.660755][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.686627][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.699794][ T5616] team0: Port device team_slave_1 added [ 65.713730][ T5625] Bluetooth: hci2: command tx timeout [ 65.713750][ T5629] Bluetooth: hci3: command tx timeout [ 65.713826][ T5629] Bluetooth: hci1: command tx timeout [ 65.719645][ T5614] Bluetooth: hci4: command tx timeout [ 65.734778][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.788729][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.795785][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.822047][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.835331][ T5607] team0: Port device team_slave_0 added [ 65.842634][ T5607] team0: Port device team_slave_1 added [ 65.849358][ T5615] team0: Port device team_slave_0 added [ 65.859129][ T5606] hsr_slave_0: entered promiscuous mode [ 65.865569][ T5606] hsr_slave_1: entered promiscuous mode [ 65.872500][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.879555][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.905471][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.929559][ T5615] team0: Port device team_slave_1 added [ 65.967066][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.974079][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.000013][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.011504][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.018716][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.044669][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.056634][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.063605][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.089519][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.104288][ T5613] hsr_slave_0: entered promiscuous mode [ 66.110307][ T5613] hsr_slave_1: entered promiscuous mode [ 66.116344][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 66.122094][ T5613] Cannot create hsr debugfs directory [ 66.134015][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.141011][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.166978][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.239538][ T5616] hsr_slave_0: entered promiscuous mode [ 66.245623][ T5616] hsr_slave_1: entered promiscuous mode [ 66.251439][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 66.257368][ T5616] Cannot create hsr debugfs directory [ 66.273665][ T5607] hsr_slave_0: entered promiscuous mode [ 66.279705][ T5607] hsr_slave_1: entered promiscuous mode [ 66.285926][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 66.291626][ T5607] Cannot create hsr debugfs directory [ 66.320814][ T5615] hsr_slave_0: entered promiscuous mode [ 66.326927][ T5615] hsr_slave_1: entered promiscuous mode [ 66.332789][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 66.338588][ T5615] Cannot create hsr debugfs directory [ 66.664659][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.676210][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.683939][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.693870][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.702766][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.712521][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.720185][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.730013][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.782150][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.791719][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.799765][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.810074][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.820748][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.829579][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.837659][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.846257][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.927818][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.937101][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.945737][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.954903][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.970067][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.979004][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.986880][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.996305][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.058326][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.081354][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.090576][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.098417][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.107285][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.115206][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.123601][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.131246][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.141071][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.156016][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.190071][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.215303][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.242560][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.249973][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.259414][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.266496][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.292018][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.299122][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.313449][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.321897][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.330020][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.338823][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.348629][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.355718][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.373493][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.382413][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.391257][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.400275][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.477297][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.521637][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.566669][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.581668][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.622195][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.629381][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.646695][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.654080][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.692025][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.699183][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.717158][ T5614] Bluetooth: hci0: command tx timeout [ 67.752159][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.759359][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.794197][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.796766][ T5625] Bluetooth: hci2: command tx timeout [ 67.801317][ T5629] Bluetooth: hci1: command tx timeout [ 67.806284][ T5614] Bluetooth: hci4: command tx timeout [ 67.811608][ T5617] Bluetooth: hci3: command tx timeout [ 67.932101][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.966315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.973673][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.020286][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.027440][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.090240][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.263983][ T5606] veth0_vlan: entered promiscuous mode [ 68.282274][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.314866][ T5606] veth1_vlan: entered promiscuous mode [ 68.417943][ T5606] veth0_macvtap: entered promiscuous mode [ 68.459580][ T5606] veth1_macvtap: entered promiscuous mode [ 68.501933][ T5613] veth0_vlan: entered promiscuous mode [ 68.542722][ T5613] veth1_vlan: entered promiscuous mode [ 68.572390][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.599520][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.627985][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.661751][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.685620][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.698366][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.717922][ T5613] veth0_macvtap: entered promiscuous mode [ 68.739434][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.756967][ T5613] veth1_macvtap: entered promiscuous mode [ 68.789421][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.828614][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.848795][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.884553][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.908668][ T5616] veth0_vlan: entered promiscuous mode [ 68.938643][ T1011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.948335][ T1011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.973822][ T1011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.986726][ T1011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.000086][ T5616] veth1_vlan: entered promiscuous mode [ 69.016529][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.031935][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.109303][ T5607] veth0_vlan: entered promiscuous mode [ 69.129875][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.138682][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.160830][ T5607] veth1_vlan: entered promiscuous mode [ 69.166182][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 69.166195][ T30] audit: type=1400 audit(1785135636.151:153): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.VOTBkJ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.175849][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.215536][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.223172][ T30] audit: type=1400 audit(1785135636.201:154): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.255014][ T30] audit: type=1400 audit(1785135636.201:155): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.VOTBkJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.270573][ T5615] veth0_vlan: entered promiscuous mode [ 69.285616][ T30] audit: type=1400 audit(1785135636.201:156): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.315389][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.335229][ T5616] veth0_macvtap: entered promiscuous mode [ 69.341297][ T30] audit: type=1400 audit(1785135636.211:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.VOTBkJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.371633][ T30] audit: type=1400 audit(1785135636.211:158): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.VOTBkJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.379996][ T5607] veth0_macvtap: entered promiscuous mode [ 69.403024][ T30] audit: type=1400 audit(1785135636.221:159): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.406186][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.424608][ T30] audit: type=1400 audit(1785135636.241:160): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.455871][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.457838][ T30] audit: type=1400 audit(1785135636.241:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.488518][ T30] audit: type=1400 audit(1785135636.241:162): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.515262][ T5616] veth1_macvtap: entered promiscuous mode [ 69.533034][ T5615] veth1_vlan: entered promiscuous mode [ 69.562292][ T5607] veth1_macvtap: entered promiscuous mode [ 69.596960][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.628562][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.664747][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.702182][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.720979][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.738670][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.748028][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.771586][ T5615] veth0_macvtap: entered promiscuous mode [ 69.787572][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.820895][ T5615] veth1_macvtap: entered promiscuous mode [ 69.828936][ T1011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.842509][ T5629] Bluetooth: hci0: command tx timeout [ 69.873114][ T5629] Bluetooth: hci4: command tx timeout [ 69.880136][ T5629] Bluetooth: hci2: command tx timeout [ 69.885799][ T5629] Bluetooth: hci1: command tx timeout [ 69.891792][ T5629] Bluetooth: hci3: command tx timeout [ 69.945908][ T1011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.035363][ T5810] NILFS (nullb0): couldn't find nilfs on the device [ 70.305206][ T1011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.380967][ T1011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.429813][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.441253][ T5697] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.482368][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.506929][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.522426][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.524666][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.530414][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.538757][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.564009][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.573132][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.605986][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.606521][ T5697] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 70.641715][ T5697] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 70.658630][ T5697] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 70.674454][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.682822][ T5697] usb 4-1: Product: syz [ 70.688442][ T5697] usb 4-1: Manufacturer: syz [ 70.694055][ T5697] usb 4-1: SerialNumber: syz [ 70.715686][ T5697] usb 4-1: config 0 descriptor?? [ 70.731149][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.748428][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.786607][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.818639][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.878220][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.917161][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.923781][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.932190][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.065971][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.089645][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.539552][ T5825] kvm: pic: non byte read [ 71.557675][ T5825] kvm: pic: non byte read [ 71.576298][ T5825] kvm: pic: non byte read [ 71.593392][ T5825] kvm: pic: non byte read [ 71.619795][ T5825] kvm: pic: non byte read [ 71.644198][ T5825] kvm: pic: non byte read [ 71.689458][ T5825] kvm: pic: non byte read [ 71.702075][ T5825] kvm: pic: non byte read [ 71.760135][ T5825] kvm: pic: non byte read [ 71.816750][ T5812] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 71.830137][ T5825] kvm: pic: non byte read [ 71.873153][ T5629] Bluetooth: hci0: command tx timeout [ 71.953979][ T5629] Bluetooth: hci3: command tx timeout [ 71.959475][ T5617] Bluetooth: hci1: command tx timeout [ 71.959480][ T5614] Bluetooth: hci4: command tx timeout [ 71.959505][ T5617] Bluetooth: hci2: command tx timeout [ 72.791156][ T5697] mos7840 4-1:0.0: required endpoints missing [ 72.845414][ T5697] usb 4-1: USB disconnect, device number 2 [ 73.429456][ T5834] netlink: 'syz.3.8': attribute type 19 has an invalid length. [ 74.519892][ T5843] Zero length message leads to an empty skb [ 74.683013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.907154][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 75.907172][ T30] audit: type=1400 audit(1785135642.391:207): avc: denied { write } for pid=5844 comm="syz.3.11" name="001" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.009538][ T30] audit: type=1400 audit(1785135642.451:208): avc: denied { read write } for pid=5844 comm="syz.3.11" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.361426][ T30] audit: type=1400 audit(1785135642.451:209): avc: denied { open } for pid=5844 comm="syz.3.11" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.498524][ T30] audit: type=1400 audit(1785135643.481:210): avc: denied { read write } for pid=5854 comm="syz.0.14" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.559606][ T30] audit: type=1400 audit(1785135643.491:211): avc: denied { open } for pid=5854 comm="syz.0.14" path="/dev/video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.586412][ T30] audit: type=1400 audit(1785135643.491:212): avc: denied { ioctl } for pid=5854 comm="syz.0.14" path="/dev/video7" dev="devtmpfs" ino=952 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.850203][ T5859] picdev_read: 4 callbacks suppressed [ 76.850221][ T5859] kvm: pic: non byte read [ 76.898598][ T5859] kvm: pic: non byte read [ 76.952267][ T5859] kvm: pic: non byte read [ 77.037095][ T5859] kvm: pic: non byte read [ 77.983464][ T5859] kvm: pic: non byte read [ 78.028820][ T5859] kvm: pic: non byte read [ 78.069675][ T5859] kvm: pic: non byte read [ 78.104364][ T5859] kvm: pic: non byte read [ 78.122973][ T5859] kvm: pic: non byte read [ 78.141660][ T5859] kvm: pic: non byte read [ 79.192900][ T30] audit: type=1400 audit(1785135645.721:213): avc: denied { wake_alarm } for pid=5868 comm="syz.1.18" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.847916][ T30] audit: type=1400 audit(1785135648.841:214): avc: denied { append } for pid=5888 comm="syz.4.24" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.919473][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'. [ 82.362998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 83.016713][ T5887] picdev_read: 18 callbacks suppressed [ 83.016730][ T5887] kvm: pic: non byte read [ 83.033232][ T5887] kvm: pic: non byte read [ 83.057210][ T5887] kvm: pic: non byte read [ 83.082807][ T5887] kvm: pic: non byte read [ 83.113172][ T5887] kvm: pic: non byte read [ 83.141152][ T5887] kvm: pic: non byte read [ 83.156321][ T5887] kvm: pic: non byte read [ 83.169156][ T5887] kvm: pic: non byte read [ 83.246001][ T5887] kvm: pic: non byte read [ 83.296190][ T5887] kvm: pic: non byte read [ 83.622387][ T30] audit: type=1400 audit(1785135650.611:215): avc: denied { bind } for pid=5908 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.654739][ T5910] GUP no longer grows the stack in syz.0.26 (5910): 200000004000-20000000a000 (200000002000) [ 83.681325][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT(full) [ 83.681353][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 83.681364][ T5910] Call Trace: [ 83.681371][ T5910] [ 83.681378][ T5910] dump_stack_lvl+0x100/0x190 [ 83.681406][ T5910] gup_vma_lookup.cold+0x83/0x96 [ 83.681431][ T5910] __get_user_pages+0x241/0x32a0 [ 83.681461][ T5910] ? find_held_lock+0x2b/0x80 [ 83.681486][ T5910] ? mtree_load+0x311/0xa90 [ 83.681506][ T5910] ? __pfx___get_user_pages+0x10/0x10 [ 83.681534][ T5910] get_user_pages_remote+0x3d2/0xb10 [ 83.681555][ T5910] ? mas_root_expand+0x6e0/0x750 [ 83.681576][ T5910] ? __pfx_get_user_pages_remote+0x10/0x10 [ 83.681605][ T5910] __access_remote_vm+0x3bb/0x890 [ 83.681631][ T5910] ? __pfx___access_remote_vm+0x10/0x10 [ 83.681652][ T5910] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 83.681682][ T5910] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 83.681710][ T5910] proc_pid_cmdline_read+0x552/0x9a0 [ 83.681738][ T5910] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 83.681766][ T5910] ? rw_verify_area+0xce/0x6d0 [ 83.681790][ T5910] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 83.681814][ T5910] vfs_readv+0x5d8/0x8d0 [ 83.681853][ T5910] ? __pfx_vfs_readv+0x10/0x10 [ 83.681893][ T5910] ? __fget_files+0x21f/0x3d0 [ 83.681917][ T5910] ? do_preadv+0x1ac/0x270 [ 83.681939][ T5910] do_preadv+0x1ac/0x270 [ 83.681964][ T5910] ? __pfx_do_preadv+0x10/0x10 [ 83.681994][ T5910] do_syscall_64+0x115/0x870 [ 83.682013][ T5910] ? clear_bhb_loop+0x40/0x90 [ 83.682035][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.682052][ T5910] RIP: 0033:0x7f6bee59de99 [ 83.682067][ T5910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.682083][ T5910] RSP: 002b:00007f6bef527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 83.682101][ T5910] RAX: ffffffffffffffda RBX: 00007f6bee825fa0 RCX: 00007f6bee59de99 [ 83.682113][ T5910] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000006 [ 83.682124][ T5910] RBP: 00007f6bee633eaf R08: 00000000fffffff9 R09: 0000000000000000 [ 83.682133][ T5910] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 83.682143][ T5910] R13: 00007f6bee826038 R14: 00007f6bee825fa0 R15: 00007ffd2d44d208 [ 83.682166][ T5910] [ 84.107731][ T30] audit: type=1400 audit(1785135651.101:216): avc: denied { create } for pid=5908 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.172597][ T5912] NILFS (nullb0): couldn't find nilfs on the device [ 84.574277][ T30] audit: type=1400 audit(1785135651.201:217): avc: denied { create } for pid=5907 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.597372][ T30] audit: type=1400 audit(1785135651.591:218): avc: denied { setopt } for pid=5908 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.659232][ T30] audit: type=1400 audit(1785135651.591:219): avc: denied { accept } for pid=5908 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.730436][ T30] audit: type=1400 audit(1785135651.591:220): avc: denied { setopt } for pid=5908 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.814084][ T5799] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.001775][ T5799] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 85.062932][ T5799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 85.087530][ T5799] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 85.096739][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.111793][ T5799] usb 3-1: Product: syz [ 85.122212][ T5799] usb 3-1: Manufacturer: syz [ 85.132956][ T5799] usb 3-1: SerialNumber: syz [ 85.288480][ T5799] usb 3-1: config 0 descriptor?? [ 85.595773][ T30] audit: type=1400 audit(1785135652.591:221): avc: denied { create } for pid=5920 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.721034][ T30] audit: type=1400 audit(1785135652.711:222): avc: denied { create } for pid=5920 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.526501][ T30] audit: type=1400 audit(1785135652.731:223): avc: denied { write } for pid=5920 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.575174][ T29] cfg80211: failed to load regulatory.db [ 86.785067][ T5799] mos7840 3-1:0.0: required endpoints missing [ 86.790405][ T5927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 86.941072][ T5799] usb 3-1: USB disconnect, device number 2 [ 88.655268][ T5943] FAULT_INJECTION: forcing a failure. [ 88.655268][ T5943] name failslab, interval 1, probability 0, space 0, times 1 [ 88.710166][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) [ 88.710190][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.710200][ T5943] Call Trace: [ 88.710206][ T5943] [ 88.710212][ T5943] dump_stack_lvl+0x100/0x190 [ 88.710238][ T5943] should_fail_ex.cold+0x5/0xa [ 88.710261][ T5943] should_failslab+0xc2/0x120 [ 88.710285][ T5943] __kmalloc_noprof+0xfc/0x820 [ 88.710307][ T5943] ? lsm_blob_alloc+0x68/0x90 [ 88.710331][ T5943] lsm_blob_alloc+0x68/0x90 [ 88.710366][ T5943] security_key_alloc+0x34/0x310 [ 88.710393][ T5943] key_alloc+0x876/0x1310 [ 88.710417][ T5943] ? __pfx_key_alloc+0x10/0x10 [ 88.710445][ T5943] ? hook_cred_prepare+0x17d/0x380 [ 88.710467][ T5943] keyring_alloc+0x44/0xc0 [ 88.710487][ T5943] lookup_user_key+0x9b8/0x1300 [ 88.710516][ T5943] ? __pfx_lookup_user_key+0x10/0x10 [ 88.710541][ T5943] ? irqentry_exit+0x24d/0xa00 [ 88.710566][ T5943] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 88.710596][ T5943] ? rep_movs_alternative+0x4a/0xa0 [ 88.710626][ T5943] __do_sys_add_key+0x2a6/0x460 [ 88.710648][ T5943] ? __pfx___do_sys_add_key+0x10/0x10 [ 88.710668][ T5943] ? ksys_write+0x1ac/0x250 [ 88.710703][ T5943] do_syscall_64+0x115/0x870 [ 88.710721][ T5943] ? clear_bhb_loop+0x40/0x90 [ 88.710748][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.710766][ T5943] RIP: 0033:0x7f6bee59de99 [ 88.710781][ T5943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.710797][ T5943] RSP: 002b:00007f6bef527028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 88.710814][ T5943] RAX: ffffffffffffffda RBX: 00007f6bee825fa0 RCX: 00007f6bee59de99 [ 88.710826][ T5943] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000080 [ 88.710836][ T5943] RBP: 00007f6bef527090 R08: ffffffffffffffff R09: 0000000000000000 [ 88.710846][ T5943] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001 [ 88.710855][ T5943] R13: 00007f6bee826038 R14: 00007f6bee825fa0 R15: 00007ffd2d44d208 [ 88.710879][ T5943] [ 89.058774][ T5950] Cannot find add_set index 0 as target [ 90.615289][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 90.615304][ T30] audit: type=1400 audit(1785135657.601:225): avc: denied { node_bind } for pid=5953 comm="syz.0.38" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 90.879080][ T5965] fuse: Bad value for 'group_id' [ 90.884607][ T5965] fuse: Bad value for 'group_id' [ 90.906102][ T30] audit: type=1400 audit(1785135657.871:226): avc: denied { mounton } for pid=5961 comm="syz.3.40" path="/8/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.992700][ T5965] netlink: 'syz.3.40': attribute type 19 has an invalid length. [ 91.158478][ T30] audit: type=1400 audit(1785135658.151:227): avc: denied { map } for pid=5963 comm="syz.1.39" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.945594][ T30] audit: type=1400 audit(1785135658.241:228): avc: denied { read } for pid=5970 comm="syz.4.42" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.141776][ T30] audit: type=1400 audit(1785135658.241:229): avc: denied { open } for pid=5970 comm="syz.4.42" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.426604][ T30] audit: type=1400 audit(1785135658.241:230): avc: denied { ioctl } for pid=5970 comm="syz.4.42" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.795843][ T30] audit: type=1400 audit(1785135658.251:231): avc: denied { set_context_mgr } for pid=5970 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.002615][ T5989] tipc: Started in network mode [ 93.007716][ T5989] tipc: Node identity 66e9a4ffe0f2, cluster identity 4711 [ 93.016365][ T5989] tipc: Enabled bearer , priority 0 [ 93.024340][ T30] audit: type=1400 audit(1785135658.251:232): avc: denied { map } for pid=5970 comm="syz.4.42" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.535150][ T5991] syzkaller0: entered promiscuous mode [ 93.646632][ T5991] syzkaller0: entered allmulticast mode [ 93.667889][ T5989] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 94.179387][ T5741] tipc: Node number set to 2249958655 [ 94.195585][ T5991] tipc: Resetting bearer [ 94.844480][ T5988] tipc: Resetting bearer [ 94.858176][ T6001] picdev_read: 18 callbacks suppressed [ 94.858188][ T6001] kvm: pic: non byte read [ 94.989852][ T6001] kvm: pic: non byte read [ 95.007129][ T6001] kvm: pic: non byte read [ 95.011916][ T6001] kvm: pic: non byte read [ 95.012405][ T5988] tipc: Disabling bearer [ 95.053449][ T6001] kvm: pic: non byte read [ 95.066417][ T6001] kvm: pic: non byte read [ 95.175201][ T6001] kvm: pic: non byte read [ 96.178851][ T30] audit: type=1400 audit(1785135663.171:233): avc: denied { mounton } for pid=6021 comm="syz.3.53" path="/10/file0" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.557760][ T6033] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 96.565532][ T6033] netlink: 224 bytes leftover after parsing attributes in process `syz.3.53'. [ 96.641134][ T6034] overlay: ./file0 is not a directory [ 97.297887][ T30] audit: type=1400 audit(1785135664.291:235): avc: denied { map } for pid=6038 comm="syz.0.57" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 97.338681][ T6041] FAULT_INJECTION: forcing a failure. [ 97.338681][ T6041] name failslab, interval 1, probability 0, space 0, times 0 [ 97.383129][ T6039] netlink: 'syz.0.57': attribute type 13 has an invalid length. [ 97.413060][ T30] audit: type=1400 audit(1785135664.281:234): avc: denied { mount } for pid=6023 comm="syz.4.54" name="/" dev="autofs" ino=10637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 97.458287][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.2.58 Not tainted syzkaller #0 PREEMPT(full) [ 97.458312][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.458322][ T6041] Call Trace: [ 97.458327][ T6041] [ 97.458335][ T6041] dump_stack_lvl+0x100/0x190 [ 97.458361][ T6041] should_fail_ex.cold+0x5/0xa [ 97.458382][ T6041] should_failslab+0xc2/0x120 [ 97.458406][ T6041] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 97.458426][ T6041] ? __alloc_skb+0x5b7/0x710 [ 97.458444][ T6041] ? __alloc_skb+0x140/0x710 [ 97.458467][ T6041] __alloc_skb+0x140/0x710 [ 97.458484][ T6041] ? __alloc_skb+0x5b7/0x710 [ 97.458502][ T6041] ? __pfx___alloc_skb+0x10/0x10 [ 97.458527][ T6041] netlink_ack+0x117/0xb80 [ 97.458551][ T6041] netlink_rcv_skb+0x333/0x420 [ 97.458566][ T6041] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.458590][ T6041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.458615][ T6041] ? netlink_deliver_tap+0x1ae/0xcc0 [ 97.458644][ T6041] netlink_unicast+0x585/0x850 [ 97.458664][ T6041] ? __pfx_netlink_unicast+0x10/0x10 [ 97.458689][ T6041] netlink_sendmsg+0x8b0/0xda0 [ 97.458709][ T6041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.458728][ T6041] ? selinux_socket_sendmsg+0x198/0x2f0 [ 97.458756][ T6041] ____sys_sendmsg+0xa4d/0xbe0 [ 97.458780][ T6041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.458799][ T6041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.458834][ T6041] ___sys_sendmsg+0x190/0x1e0 [ 97.458862][ T6041] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.458886][ T6041] ? __lock_acquire+0x49f/0x1a40 [ 97.458906][ T6041] ? get_pid_task+0x106/0x250 [ 97.458957][ T6041] __sys_sendmsg+0x160/0x210 [ 97.458977][ T6041] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.459010][ T6041] do_syscall_64+0x115/0x870 [ 97.459029][ T6041] ? clear_bhb_loop+0x40/0x90 [ 97.459049][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.459066][ T6041] RIP: 0033:0x7f8ce419de99 [ 97.459080][ T6041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.459094][ T6041] RSP: 002b:00007f8ce4fba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.459111][ T6041] RAX: ffffffffffffffda RBX: 00007f8ce4425fa0 RCX: 00007f8ce419de99 [ 97.459122][ T6041] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000003 [ 97.459132][ T6041] RBP: 00007f8ce4fba090 R08: 0000000000000000 R09: 0000000000000000 [ 97.459141][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.459150][ T6041] R13: 00007f8ce4426038 R14: 00007f8ce4425fa0 R15: 00007ffcc435ab78 [ 97.459177][ T6041] [ 97.717998][ T30] audit: type=1400 audit(1785135664.401:236): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 97.738154][ T30] audit: type=1400 audit(1785135664.711:237): avc: denied { write } for pid=6038 comm="syz.0.57" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.762361][ T30] audit: type=1400 audit(1785135664.711:238): avc: denied { open } for pid=6038 comm="syz.0.57" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.786788][ T30] audit: type=1400 audit(1785135664.711:239): avc: denied { create } for pid=6038 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.807022][ T30] audit: type=1400 audit(1785135664.711:240): avc: denied { write } for pid=6038 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.042595][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 98.488138][ T6044] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 98.599333][ T6044] syzkaller0: entered promiscuous mode [ 98.619936][ T6044] syzkaller0: entered allmulticast mode [ 98.701081][ T6059] FAULT_INJECTION: forcing a failure. [ 98.701081][ T6059] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.714270][ T6059] CPU: 1 UID: 0 PID: 6059 Comm: syz.4.61 Not tainted syzkaller #0 PREEMPT(full) [ 98.714292][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.714302][ T6059] Call Trace: [ 98.714308][ T6059] [ 98.714314][ T6059] dump_stack_lvl+0x100/0x190 [ 98.714341][ T6059] should_fail_ex.cold+0x5/0xa [ 98.714363][ T6059] _copy_to_user+0x32/0xd0 [ 98.714388][ T6059] bpf_verifier_vlog+0x333/0x6d0 [ 98.714420][ T6059] __btf_verifier_log+0xc3/0x100 [ 98.714439][ T6059] ? __pfx___btf_verifier_log+0x10/0x10 [ 98.714456][ T6059] ? __might_fault+0xc5/0x140 [ 98.714480][ T6059] ? btf_new_fd+0xae9/0x5bc0 [ 98.714500][ T6059] btf_new_fd+0xb63/0x5bc0 [ 98.714520][ T6059] ? avc_has_perm_noaudit+0x145/0x3b0 [ 98.714550][ T6059] ? __pfx_btf_new_fd+0x10/0x10 [ 98.714571][ T6059] ? rcu_is_watching+0x12/0xc0 [ 98.714597][ T6059] ? cap_capable+0x107/0x430 [ 98.714621][ T6059] ? bpf_lsm_capable+0x9/0x10 [ 98.714638][ T6059] ? security_capable+0x80/0x260 [ 98.714667][ T6059] ? ns_capable+0xd2/0xf0 [ 98.714690][ T6059] __sys_bpf+0x1e5f/0x4e80 [ 98.714706][ T6059] ? mark_held_locks+0x40/0x70 [ 98.714726][ T6059] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 98.714756][ T6059] ? __pfx___sys_bpf+0x10/0x10 [ 98.714771][ T6059] ? trace_sched_exit_tp+0x120/0x160 [ 98.714798][ T6059] ? __schedule+0x126e/0x6730 [ 98.714814][ T6059] ? get_pid_task+0xfc/0x250 [ 98.714839][ T6059] ? get_pid_task+0xfc/0x250 [ 98.714881][ T6059] ? find_held_lock+0x2b/0x80 [ 98.714906][ T6059] ? ksys_write+0x190/0x250 [ 98.714932][ T6059] ? ksys_write+0x190/0x250 [ 98.714957][ T6059] ? irqentry_exit+0x24d/0xa00 [ 98.714988][ T6059] ? ksys_write+0x17e/0x250 [ 98.715012][ T6059] ? __f_unlock_pos+0xd/0x20 [ 98.715033][ T6059] ? fput+0x79/0x100 [ 98.715057][ T6059] ? __x64_sys_bpf+0xce/0x140 [ 98.715073][ T6059] __x64_sys_bpf+0xce/0x140 [ 98.715091][ T6059] ? do_syscall_64+0x90/0x870 [ 98.715112][ T6059] do_syscall_64+0x115/0x870 [ 98.715129][ T6059] ? clear_bhb_loop+0x40/0x90 [ 98.715151][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.715168][ T6059] RIP: 0033:0x7f6f7ab9de99 [ 98.715183][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.715198][ T6059] RSP: 002b:00007f6f7ba4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.715215][ T6059] RAX: ffffffffffffffda RBX: 00007f6f7ae26180 RCX: 00007f6f7ab9de99 [ 98.715226][ T6059] RDX: 0000000000000020 RSI: 0000200000000800 RDI: 0000000000000012 [ 98.715237][ T6059] RBP: 00007f6f7ba4c090 R08: 0000000000000000 R09: 0000000000000000 [ 98.715246][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.715256][ T6059] R13: 00007f6f7ae26218 R14: 00007f6f7ae26180 R15: 00007ffd4fa2cc58 [ 98.715280][ T6059] [ 99.053263][ T30] audit: type=1400 audit(1785135665.821:241): avc: denied { bind } for pid=6056 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.421440][ T30] audit: type=1400 audit(1785135666.411:242): avc: denied { read } for pid=6061 comm="syz.1.62" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.023804][ T6077] kvm: pic: non byte read [ 100.053498][ T6077] kvm: pic: non byte read [ 100.072939][ T5619] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.093208][ T6077] kvm: pic: non byte read [ 100.132112][ T6077] kvm: pic: non byte read [ 100.152788][ T6077] kvm: pic: non byte read [ 100.160104][ T6077] kvm: pic: non byte read [ 100.211315][ T6077] kvm: pic: non byte read [ 100.222386][ T6077] kvm: pic: non byte read [ 100.249779][ T6077] kvm: pic: non byte read [ 100.278627][ T6077] kvm: pic: non byte read [ 100.293539][ T5619] usb 2-1: Using ep0 maxpacket: 16 [ 100.305554][ T6085] FAULT_INJECTION: forcing a failure. [ 100.305554][ T6085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.376722][ T5619] usb 2-1: config 0 has no interfaces? [ 100.389987][ T5619] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 100.421309][ T5619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.421830][ T6085] CPU: 1 UID: 0 PID: 6085 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT(full) [ 100.421851][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.421860][ T6085] Call Trace: [ 100.421865][ T6085] [ 100.421870][ T6085] dump_stack_lvl+0x100/0x190 [ 100.421895][ T6085] should_fail_ex.cold+0x5/0xa [ 100.421915][ T6085] _copy_from_user+0x2e/0xd0 [ 100.421937][ T6085] copy_msghdr_from_user+0x9f/0x4c0 [ 100.421962][ T6085] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.421996][ T6085] ___sys_sendmsg+0x106/0x1e0 [ 100.422024][ T6085] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.422046][ T6085] ? __lock_acquire+0x49f/0x1a40 [ 100.422065][ T6085] ? get_pid_task+0x106/0x250 [ 100.422111][ T6085] __sys_sendmsg+0x160/0x210 [ 100.422131][ T6085] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.422161][ T6085] do_syscall_64+0x115/0x870 [ 100.422178][ T6085] ? clear_bhb_loop+0x40/0x90 [ 100.422197][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.422213][ T6085] RIP: 0033:0x7f6f7ab9de99 [ 100.422226][ T6085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.422240][ T6085] RSP: 002b:00007f6f7ba8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.422255][ T6085] RAX: ffffffffffffffda RBX: 00007f6f7ae25fa0 RCX: 00007f6f7ab9de99 [ 100.422265][ T6085] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 100.422274][ T6085] RBP: 00007f6f7ba8e090 R08: 0000000000000000 R09: 0000000000000000 [ 100.422283][ T6085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.422291][ T6085] R13: 00007f6f7ae26038 R14: 00007f6f7ae25fa0 R15: 00007ffd4fa2cc58 [ 100.422312][ T6085] [ 100.643936][ T5619] usb 2-1: config 0 descriptor?? [ 101.600907][ T5741] usb 2-1: USB disconnect, device number 2 [ 101.844348][ T6098] syz_tun: entered allmulticast mode [ 102.116982][ T6096] syz_tun: left allmulticast mode [ 102.234293][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 102.234309][ T30] audit: type=1400 audit(1785135669.231:253): avc: denied { mount } for pid=6097 comm="syz.3.76" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.367318][ T30] audit: type=1400 audit(1785135669.361:254): avc: denied { ioctl } for pid=6103 comm="syz.0.78" path="socket:[10779]" dev="sockfs" ino=10779 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.457355][ T30] audit: type=1400 audit(1785135669.391:255): avc: denied { audit_control } for pid=6102 comm="syz.3.79" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.974267][ T30] audit: type=1400 audit(1785135669.941:256): avc: denied { write } for pid=6103 comm="syz.0.78" name="snmp" dev="proc" ino=4026533115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 103.069835][ T30] audit: type=1400 audit(1785135669.961:257): avc: denied { create } for pid=6103 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.215550][ T30] audit: type=1400 audit(1785135669.961:258): avc: denied { bind } for pid=6103 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.249806][ T6114] NILFS (nullb0): couldn't find nilfs on the device [ 103.544884][ T30] audit: type=1400 audit(1785135669.961:259): avc: denied { listen } for pid=6103 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.576087][ T30] audit: type=1400 audit(1785135669.961:260): avc: denied { setopt } for pid=6103 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.094571][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.107208][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.190438][ T30] audit: type=1400 audit(1785135669.973:261): avc: denied { append } for pid=6103 comm="syz.0.78" name="sg0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.335711][ T30] audit: type=1400 audit(1785135669.973:262): avc: denied { open } for pid=6103 comm="syz.0.78" path="/dev/sg0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.588115][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.613362][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.279967][ T6146] overlay: filesystem on ./file0 not supported as upperdir [ 105.412394][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.667873][ T6151] vlan2: entered promiscuous mode [ 105.672981][ T6151] batadv0: entered promiscuous mode [ 105.748173][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.868548][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.101206][ T6159] netlink: zone id is out of range [ 106.112817][ T6159] netlink: get zone limit has 4 unknown bytes [ 106.218943][ T5741] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.365674][ T6152] syzkaller0: entered promiscuous mode [ 106.384587][ T6152] syzkaller0: entered allmulticast mode [ 106.440929][ T5741] usb 4-1: Using ep0 maxpacket: 8 [ 106.528568][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.796062][ T5741] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 106.875856][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.908307][ T5741] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 106.943873][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.976305][ T5741] usb 4-1: Product: syz [ 106.995391][ T5741] usb 4-1: Manufacturer: syz [ 107.020343][ T5741] usb 4-1: SerialNumber: syz [ 107.055442][ T5741] usb 4-1: config 0 descriptor?? [ 107.281673][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.316230][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.347167][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 107.347202][ T30] audit: type=1400 audit(1785135674.310:277): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.391505][ T30] audit: type=1400 audit(1785135674.339:278): avc: denied { ioctl } for pid=6154 comm="syz.3.89" path="socket:[10860]" dev="sockfs" ino=10860 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.030157][ T6175] overlay: Unknown parameter 'fowner' [ 108.256835][ T6176] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 108.266436][ T6176] netlink: 'syz.4.93': attribute type 4 has an invalid length. [ 108.292948][ T6176] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.93'. [ 108.471869][ T30] audit: type=1400 audit(1785135675.421:279): avc: denied { create } for pid=6178 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.523610][ T30] audit: type=1400 audit(1785135675.421:280): avc: denied { bind } for pid=6178 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.550832][ T30] audit: type=1400 audit(1785135675.421:281): avc: denied { listen } for pid=6178 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.583426][ T30] audit: type=1400 audit(1785135675.421:282): avc: denied { accept } for pid=6178 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.627991][ T30] audit: type=1400 audit(1785135675.471:283): avc: denied { connect } for pid=6178 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.675303][ T30] audit: type=1400 audit(1785135675.580:284): avc: denied { write } for pid=6178 comm="syz.2.94" path="socket:[11441]" dev="sockfs" ino=11441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.740454][ T30] audit: type=1400 audit(1785135675.580:285): avc: denied { shutdown } for pid=6178 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.582207][ T5827] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.763462][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 109.775837][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 109.799040][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.817423][ T6155] batadv_slave_1: entered promiscuous mode [ 109.820324][ T5827] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.844209][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 109.870082][ T5827] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 109.890340][ T5827] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 109.910673][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.927449][ T6168] batadv_slave_1: left promiscuous mode [ 109.956059][ T5827] usb 2-1: config 0 descriptor?? [ 109.966774][ T5619] usb 4-1: USB disconnect, device number 3 [ 109.982215][ T6183] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 110.022001][ T29] net_ratelimit: 4 callbacks suppressed [ 110.022016][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.037042][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.130670][ T30] audit: type=1400 audit(1785135677.070:286): avc: denied { create } for pid=6186 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.653931][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.413997][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.453073][ T6193] netlink: 'syz.2.99': attribute type 2 has an invalid length. [ 111.460910][ T6193] netlink: 'syz.2.99': attribute type 2 has an invalid length. [ 111.788947][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 111.798589][ T6198] bridge_slave_1: left allmulticast mode [ 111.804509][ T6198] bridge_slave_1: left promiscuous mode [ 111.813013][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.054578][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.171023][ T6198] bridge_slave_0: left allmulticast mode [ 112.177068][ T6198] bridge_slave_0: left promiscuous mode [ 112.186058][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.270290][ T5617] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 112.869560][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.897315][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 112.897332][ T30] audit: type=1400 audit(1785135679.811:290): avc: denied { ioctl } for pid=6182 comm="syz.1.95" path="socket:[10921]" dev="sockfs" ino=10921 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.958816][ T9] usb 2-1: USB disconnect, device number 3 [ 113.007714][ T30] audit: type=1400 audit(1785135679.910:291): avc: denied { create } for pid=6201 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.067479][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.207981][ T30] audit: type=1400 audit(1785135680.119:292): avc: denied { write } for pid=6208 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.284444][ T30] audit: type=1400 audit(1785135680.198:293): avc: denied { name_bind } for pid=6212 comm="syz.2.106" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 113.381708][ T6218] tipc: Started in network mode [ 113.387615][ T6218] tipc: Node identity 1000001, cluster identity 4369 [ 113.421444][ T6218] tipc: Node number set to 16777217 [ 113.427043][ T6218] tipc: Cannot configure node identity twice [ 113.436244][ T6220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.452588][ T6221] tipc: New replicast peer: 127.0.0.1 [ 113.461613][ T6221] tipc: Enabled bearer , priority 10 [ 113.518246][ T30] audit: type=1400 audit(1785135680.426:294): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.548885][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.111'. [ 113.636395][ T30] audit: type=1400 audit(1785135680.546:295): avc: denied { bind } for pid=6227 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.669232][ T6229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.695532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.735906][ T30] audit: type=1400 audit(1785135680.546:296): avc: denied { name_bind } for pid=6227 comm="syz.3.112" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 113.772674][ T30] audit: type=1400 audit(1785135680.546:297): avc: denied { node_bind } for pid=6227 comm="syz.3.112" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 113.807916][ T30] audit: type=1400 audit(1785135680.575:298): avc: denied { listen } for pid=6227 comm="syz.3.112" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.830913][ T30] audit: type=1400 audit(1785135680.575:299): avc: denied { name_connect } for pid=6227 comm="syz.3.112" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 113.848062][ T6210] infiniband syz0: set active [ 113.893759][ T6210] infiniband syz0: added veth0 [ 113.921822][ T6210] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 113.939027][ T6210] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 113.956600][ T6210] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 114.010688][ T6210] RDS/IB: syz0: added [ 114.020867][ T6210] smc: adding ib device syz0 with port count 1 [ 114.027914][ T6210] smc: ib device syz0 port 1 has no pnetid [ 114.777347][ T6265] FAULT_INJECTION: forcing a failure. [ 114.777347][ T6265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.792074][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: syz.1.126 Not tainted syzkaller #0 PREEMPT(full) [ 114.792098][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.792108][ T6265] Call Trace: [ 114.792114][ T6265] [ 114.792120][ T6265] dump_stack_lvl+0x100/0x190 [ 114.792147][ T6265] should_fail_ex.cold+0x5/0xa [ 114.792169][ T6265] _copy_from_user+0x2e/0xd0 [ 114.792195][ T6265] get_timespec64+0x8d/0x240 [ 114.792215][ T6265] ? __pfx_get_timespec64+0x10/0x10 [ 114.792235][ T6265] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 114.792263][ T6265] __x64_sys_futex+0x21a/0x4d0 [ 114.792292][ T6265] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.792327][ T6265] do_syscall_64+0x115/0x870 [ 114.792347][ T6265] ? clear_bhb_loop+0x40/0x90 [ 114.792368][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.792386][ T6265] RIP: 0033:0x7f3dab59de99 [ 114.792400][ T6265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.792416][ T6265] RSP: 002b:00007fff9b219b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.792434][ T6265] RAX: ffffffffffffffda RBX: 000000000001bfe3 RCX: 00007f3dab59de99 [ 114.792445][ T6265] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3dab825fac [ 114.792455][ T6265] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 114.792464][ T6265] R10: 00007fff9b219c50 R11: 0000000000000246 R12: 00007fff9b219c70 [ 114.792474][ T6265] R13: 00007f3dab825fac R14: 000000000001c015 R15: 00007fff9b219c50 [ 114.792495][ T6265] [ 115.131030][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 115.217351][ T1051] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.340635][ T6289] FAULT_INJECTION: forcing a failure. [ 115.340635][ T6289] name fail_futex, interval 1, probability 0, space 0, times 1 [ 115.347200][ T5697] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 115.354020][ T6289] CPU: 0 UID: 0 PID: 6289 Comm: syz.3.136 Not tainted syzkaller #0 PREEMPT(full) [ 115.354040][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.354048][ T6289] Call Trace: [ 115.354053][ T6289] [ 115.354059][ T6289] dump_stack_lvl+0x100/0x190 [ 115.354084][ T6289] should_fail_ex.cold+0x5/0xa [ 115.354108][ T6289] ? lockdep_hardirqs_on+0x78/0x100 [ 115.354127][ T6289] should_fail_futex+0x4c/0x60 [ 115.354149][ T6289] __x64_sys_futex+0x1f0/0x4d0 [ 115.354173][ T6289] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.354203][ T6289] do_syscall_64+0x115/0x870 [ 115.354219][ T6289] ? clear_bhb_loop+0x40/0x90 [ 115.354239][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.354254][ T6289] RIP: 0033:0x7ff97bb9de99 [ 115.354268][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.354282][ T6289] RSP: 002b:00007ffe454b0fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.354297][ T6289] RAX: ffffffffffffffda RBX: 000000000001c213 RCX: 00007ff97bb9de99 [ 115.354307][ T6289] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff97be25fac [ 115.354316][ T6289] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 115.354325][ T6289] R10: 00007ffe454b10d0 R11: 0000000000000246 R12: 00007ffe454b10f0 [ 115.354334][ T6289] R13: 00007ff97be25fac R14: 000000000001c245 R15: 00007ffe454b10d0 [ 115.354354][ T6289] [ 115.515350][ T5697] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 115.606868][ T57] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.650859][ T5983] netdevsim netdevsim10 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.792156][ T1051] net_ratelimit: 7 callbacks suppressed [ 115.792168][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.807449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.817049][ T5799] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 115.831855][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.840169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.861235][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.865791][ T6306] netlink: 76 bytes leftover after parsing attributes in process `syz.2.143'. [ 115.870022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.891492][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.899725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.933076][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.941399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.954353][ T5613] svc: failed to register nfsdv3 RPC service (errno 111). [ 115.968081][ T5613] svc: failed to register nfsaclv3 RPC service (errno 111). [ 115.975767][ T5613] failed to unregister tcp with rpcbind [ 115.982869][ T5613] svc: failed to register nfsdv3 RPC service (errno 97). [ 115.991605][ T5613] svc: failed to register nfsaclv3 RPC service (errno 97). [ 115.998979][ T5613] failed to unregister tcp with rpcbind [ 116.081794][ T6315] FAULT_INJECTION: forcing a failure. [ 116.081794][ T6315] name failslab, interval 1, probability 100, space 0, times 1 [ 116.095536][ T6315] CPU: 0 UID: 0 PID: 6315 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT(full) [ 116.095565][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.095577][ T6315] Call Trace: [ 116.095583][ T6315] [ 116.095590][ T6315] dump_stack_lvl+0x100/0x190 [ 116.095618][ T6315] should_fail_ex.cold+0x5/0xa [ 116.095643][ T6315] should_failslab+0xc2/0x120 [ 116.095668][ T6315] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 116.095691][ T6315] ? __alloc_skb+0x5b7/0x710 [ 116.095712][ T6315] ? __alloc_skb+0x140/0x710 [ 116.095736][ T6315] __alloc_skb+0x140/0x710 [ 116.095755][ T6315] ? __alloc_skb+0x5b7/0x710 [ 116.095775][ T6315] ? __pfx___alloc_skb+0x10/0x10 [ 116.095797][ T6315] ? __pfx_widen_string+0x10/0x10 [ 116.095829][ T6315] alloc_skb_with_frags+0xdd/0x760 [ 116.095854][ T6315] ? widen_string+0xdb/0x2f0 [ 116.095881][ T6315] ? __pfx_widen_string+0x10/0x10 [ 116.095910][ T6315] sock_alloc_send_pskb+0x801/0x980 [ 116.095933][ T6315] ? format_decode+0x1ad/0xdd0 [ 116.095963][ T6315] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 116.095982][ T6315] ? put_dec+0x2e/0xc0 [ 116.096003][ T6315] ? put_dec_trunc8+0x28b/0x370 [ 116.096030][ T6315] ? __lock_acquire+0x49f/0x1a40 [ 116.096054][ T6315] __ip_append_data+0x20d3/0x44d0 [ 116.096082][ T6315] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 116.096101][ T6315] ? find_held_lock+0x2b/0x80 [ 116.096135][ T6315] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 116.096160][ T6315] ? __pfx___ip_append_data+0x10/0x10 [ 116.096179][ T6315] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 116.096209][ T6315] ip_make_skb+0x28b/0x310 [ 116.096232][ T6315] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 116.096253][ T6315] ? __pfx_ip_make_skb+0x10/0x10 [ 116.096272][ T6315] ? ip_route_output_key_hash+0x14c/0x2b0 [ 116.096312][ T6315] ? udp_sendmsg+0x171c/0x2720 [ 116.096328][ T6315] udp_sendmsg+0x171c/0x2720 [ 116.096354][ T6315] ? __pfx_udp_sendmsg+0x10/0x10 [ 116.096371][ T6315] ? __pfx_avc_has_perm+0x10/0x10 [ 116.096401][ T6315] ? __pfx_sock_has_perm+0x10/0x10 [ 116.096447][ T6315] ? __pfx_udp_sendmsg+0x10/0x10 [ 116.096465][ T6315] inet_sendmsg+0x105/0x140 [ 116.096491][ T6315] __sys_sendto+0x453/0x4e0 [ 116.096511][ T6315] ? __pfx_inet_sendmsg+0x10/0x10 [ 116.096534][ T6315] ? __pfx___sys_sendto+0x10/0x10 [ 116.096561][ T6315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.096591][ T6315] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.096618][ T6315] ? ksys_write+0x1ac/0x250 [ 116.096647][ T6315] ? __pfx_ksys_write+0x10/0x10 [ 116.096678][ T6315] __x64_sys_sendto+0xe0/0x1c0 [ 116.096696][ T6315] ? do_syscall_64+0x90/0x870 [ 116.096716][ T6315] ? lockdep_hardirqs_on+0x78/0x100 [ 116.096737][ T6315] do_syscall_64+0x115/0x870 [ 116.096756][ T6315] ? clear_bhb_loop+0x40/0x90 [ 116.096779][ T6315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.096798][ T6315] RIP: 0033:0x7ff97bb9de99 [ 116.096815][ T6315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.096833][ T6315] RSP: 002b:00007ff97cb09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 116.096852][ T6315] RAX: ffffffffffffffda RBX: 00007ff97be25fa0 RCX: 00007ff97bb9de99 [ 116.096864][ T6315] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 116.096875][ T6315] RBP: 00007ff97bc33eaf R08: 0000200000000300 R09: 0000000000000010 [ 116.096886][ T6315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.096897][ T6315] R13: 00007ff97be26038 R14: 00007ff97be25fa0 R15: 00007ffe454b0e68 [ 116.096920][ T6315] [ 116.443819][ T6285] ceph: No mds server is up or the cluster is laggy [ 116.451345][ T5799] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 116.762247][ T6332] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 116.907882][ T6335] tipc: Enabled bearer , priority 10 [ 116.968158][ T6336] tipc: Disabling bearer [ 117.056367][ T6340] smc: removing ib device syz0 [ 117.132548][ T6340] smbdirect: ib_dev[syz0] removed [ 117.423194][ T5619] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 117.623196][ T48] rpcbind: server 127.0.0.1 not responding, timed out [ 117.686882][ T5619] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 118.061286][ T6378] tipc: Enabling of bearer rejected, already enabled [ 118.167668][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 118.167682][ T30] audit: type=1400 audit(1785135685.046:345): avc: denied { write } for pid=6369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.200661][ T5619] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 118.211759][ T30] audit: type=1400 audit(1785135685.046:346): avc: denied { add_name } for pid=6369 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.240959][ T6355] ceph: No mds server is up or the cluster is laggy [ 118.274408][ T30] audit: type=1400 audit(1785135685.046:347): avc: denied { create } for pid=6369 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.298246][ T30] audit: type=1400 audit(1785135685.046:348): avc: denied { search } for pid=6381 comm="syz.0.168" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 118.406630][ T30] audit: type=1400 audit(1785135685.046:349): avc: denied { write } for pid=6369 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.dummy0.link" dev="tmpfs" ino=2509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.497454][ T30] audit: type=1400 audit(1785135685.046:350): avc: denied { search } for pid=6381 comm="syz.0.168" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 118.520327][ T30] audit: type=1400 audit(1785135685.046:351): avc: denied { append } for pid=6369 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.link" dev="tmpfs" ino=2509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.525141][ T6384] svc: failed to register lockdv1 RPC service (errno 111). [ 118.549450][ T30] audit: type=1400 audit(1785135685.355:352): avc: denied { write } for pid=6390 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.574608][ T30] audit: type=1400 audit(1785135685.355:353): avc: denied { remove_name } for pid=6390 comm="rm" name="resolv.conf.dummy0.link" dev="tmpfs" ino=2509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.611730][ T30] audit: type=1400 audit(1785135685.355:354): avc: denied { unlink } for pid=6390 comm="rm" name="resolv.conf.dummy0.link" dev="tmpfs" ino=2509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 118.660306][ T6384] lockd_up: makesock failed, error=-111 [ 119.036269][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 119.089499][ T6384] svc: failed to register nfsdv3 RPC service (errno 512). [ 119.123356][ T6384] svc: failed to register nfsaclv3 RPC service (errno 111). [ 119.160443][ T6384] failed to unregister tcp with rpcbind [ 119.192288][ T6384] svc: failed to register nfsdv3 RPC service (errno 97). [ 119.242809][ T6384] svc: failed to register nfsaclv3 RPC service (errno 97). [ 119.264262][ T6384] failed to unregister tcp with rpcbind [ 119.416418][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 119.479816][ T5827] ------------[ cut here ]------------ [ 119.485321][ T5827] !iov_iter_count(&con->v2.in_iter) [ 119.485336][ T5827] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x1727/0x4780, CPU#1: kworker/1:8/5827 [ 119.501733][ T5827] Modules linked in: [ 119.506806][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 119.516264][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.526375][ T5827] Workqueue: ceph-msgr ceph_con_workfn [ 119.531915][ T5827] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 119.538763][ T5827] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c4 c7 3c 00 4c 8b 64 24 28 e8 9a d6 88 f6 90 <0f> 0b 90 bb c3 ff ff ff e8 8c d6 88 f6 49 8d 7f 30 48 b8 00 00 00 [ 119.559088][ T5827] RSP: 0018:ffffc9000443f978 EFLAGS: 00010293 [ 119.565167][ T5827] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b818191 [ 119.573752][ T5827] RDX: ffff88802eeb8000 RSI: ffffffff8b8189a6 RDI: ffff88802eeb8000 [ 119.581869][ T5827] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 119.590082][ T5827] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000887f3e [ 119.598157][ T5827] R13: ffffc9000443fab0 R14: ffff88802fca8698 R15: ffff88802fca8418 [ 119.606133][ T5827] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 119.615102][ T5827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.621721][ T5827] CR2: 0000001b3371bff8 CR3: 000000007c1b7000 CR4: 00000000003526f0 [ 119.629722][ T5827] Call Trace: [ 119.633000][ T5827] [ 119.635935][ T5827] ? lock_acquire+0x1b9/0x370 [ 119.640664][ T5827] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 119.646403][ T5827] ? rcu_is_watching+0x12/0xc0 [ 119.651810][ T5827] ? trace_contention_end+0x126/0x160 [ 119.657196][ T5827] ? __mutex_lock+0x26d/0x1bd0 [ 119.662498][ T5827] ? ceph_con_workfn+0x48/0x13e0 [ 119.667443][ T5827] ? register_lock_class+0x40/0x560 [ 119.673052][ T5827] ? do_raw_spin_lock+0x128/0x260 [ 119.678122][ T5827] ? do_raw_spin_unlock+0x145/0x1e0 [ 119.683518][ T5827] ? debug_object_deactivate+0x2e4/0x3b0 [ 119.689201][ T5827] ceph_con_workfn+0x360/0x13e0 [ 119.694059][ T5827] process_one_work+0xa23/0x1940 [ 119.699057][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 119.704442][ T5827] ? __pfx_ceph_con_workfn+0x10/0x10 [ 119.709751][ T5827] worker_thread+0x5ef/0xe50 [ 119.714352][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 119.719501][ T5827] ? kthread+0x13a/0x450 [ 119.723748][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 119.728890][ T5827] kthread+0x370/0x450 [ 119.732962][ T5827] ? __pfx_kthread+0x10/0x10 [ 119.737556][ T5827] ret_from_fork+0x72b/0xd50 [ 119.742185][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 119.747307][ T5827] ? __switch_to+0x800/0x10f0 [ 119.752051][ T5827] ? __pfx_kthread+0x10/0x10 [ 119.757272][ T5827] ret_from_fork_asm+0x1a/0x30 [ 119.762517][ T5827] [ 119.765553][ T5827] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.772828][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 119.782195][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.792252][ T5827] Workqueue: ceph-msgr ceph_con_workfn [ 119.797722][ T5827] Call Trace: [ 119.800998][ T5827] [ 119.803926][ T5827] dump_stack_lvl+0x100/0x190 [ 119.808611][ T5827] vpanic+0x552/0x970 [ 119.812589][ T5827] ? __pfx_vpanic+0x10/0x10 [ 119.817100][ T5827] panic+0xd1/0xe0 [ 119.820822][ T5827] ? __pfx_panic+0x10/0x10 [ 119.825244][ T5827] ? check_panic_on_warn+0x1f/0x90 [ 119.830356][ T5827] check_panic_on_warn.cold+0x19/0x34 [ 119.835730][ T5827] ? ceph_con_v2_try_read+0x1727/0x4780 [ 119.841285][ T5827] __warn.cold+0x191/0x318 [ 119.845704][ T5827] __report_bug+0x30f/0x440 [ 119.850212][ T5827] ? ceph_con_v2_try_read+0x1727/0x4780 [ 119.855772][ T5827] ? __pfx___report_bug+0x10/0x10 [ 119.860804][ T5827] ? __local_bh_enable_ip+0x9e/0x120 [ 119.866097][ T5827] ? lockdep_hardirqs_on+0x78/0x100 [ 119.871300][ T5827] ? tcp_recvmsg+0x14c/0x630 [ 119.875891][ T5827] ? __local_bh_enable_ip+0x9e/0x120 [ 119.881183][ T5827] ? tcp_recvmsg+0x1f8/0x630 [ 119.885785][ T5827] ? ceph_con_v2_try_read+0x1727/0x4780 [ 119.891342][ T5827] report_bug+0xb2/0x220 [ 119.895588][ T5827] ? ceph_con_v2_try_read+0x1727/0x4780 [ 119.901146][ T5827] handle_bug+0x16a/0x2a0 [ 119.905476][ T5827] exc_invalid_op+0x17/0x50 [ 119.909964][ T5827] asm_exc_invalid_op+0x1a/0x20 [ 119.914807][ T5827] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 119.920955][ T5827] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c4 c7 3c 00 4c 8b 64 24 28 e8 9a d6 88 f6 90 <0f> 0b 90 bb c3 ff ff ff e8 8c d6 88 f6 49 8d 7f 30 48 b8 00 00 00 [ 119.940554][ T5827] RSP: 0018:ffffc9000443f978 EFLAGS: 00010293 [ 119.946602][ T5827] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b818191 [ 119.954554][ T5827] RDX: ffff88802eeb8000 RSI: ffffffff8b8189a6 RDI: ffff88802eeb8000 [ 119.962508][ T5827] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 119.970463][ T5827] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000887f3e [ 119.978414][ T5827] R13: ffffc9000443fab0 R14: ffff88802fca8698 R15: ffff88802fca8418 [ 119.986384][ T5827] ? ceph_con_v2_try_read+0xf11/0x4780 [ 119.991838][ T5827] ? ceph_con_v2_try_read+0x1726/0x4780 [ 119.997376][ T5827] ? ceph_con_v2_try_read+0x1726/0x4780 [ 120.002914][ T5827] ? lock_acquire+0x1b9/0x370 [ 120.007590][ T5827] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 120.013299][ T5827] ? rcu_is_watching+0x12/0xc0 [ 120.018052][ T5827] ? trace_contention_end+0x126/0x160 [ 120.023411][ T5827] ? __mutex_lock+0x26d/0x1bd0 [ 120.028175][ T5827] ? ceph_con_workfn+0x48/0x13e0 [ 120.033096][ T5827] ? register_lock_class+0x40/0x560 [ 120.038280][ T5827] ? do_raw_spin_lock+0x128/0x260 [ 120.043295][ T5827] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.048484][ T5827] ? debug_object_deactivate+0x2e4/0x3b0 [ 120.054109][ T5827] ceph_con_workfn+0x360/0x13e0 [ 120.058943][ T5827] process_one_work+0xa23/0x1940 [ 120.063873][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 120.069233][ T5827] ? __pfx_ceph_con_workfn+0x10/0x10 [ 120.074502][ T5827] worker_thread+0x5ef/0xe50 [ 120.079085][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 120.084178][ T5827] ? kthread+0x13a/0x450 [ 120.088402][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 120.093492][ T5827] kthread+0x370/0x450 [ 120.097545][ T5827] ? __pfx_kthread+0x10/0x10 [ 120.102118][ T5827] ret_from_fork+0x72b/0xd50 [ 120.106698][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 120.111794][ T5827] ? __switch_to+0x800/0x10f0 [ 120.116453][ T5827] ? __pfx_kthread+0x10/0x10 [ 120.121023][ T5827] ret_from_fork_asm+0x1a/0x30 [ 120.125785][ T5827] [ 120.128989][ T5827] Kernel Offset: disabled [ 120.133289][ T5827] Rebooting in 86400 seconds..