last executing test programs: 2.944383767s ago: executing program 2 (id=1132): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x3, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e22971ce9db45fb52ceafd0d7d8ae8251c3c56139fe91e5682ff6362aa78ea6863a4f066a199ecd88ac46a946aab8e368b42c040dbbea26adf", 0x39}, {&(0x7f0000000300)="b4b98f791417e9d68f2bfb2f299437050f4f43ac5a68311636bc061a6740c3c8dfb073d165ac78443e3882a721ec4cb748d16cf734", 0x35}], 0x2}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001040)="173df1e6ac285a498a7f4bc2cd3e11019f11b237473bca2f6390c746ad2a30e718a8e1a4e1efb76ea428c1b1674872b558197fc156af6548ed2409333b4d3e7b528de9fac09dbefe08b30e4e7a0d3312f90e3ac5291afe686140863ea64fe616e3ce3a6377e5d1c02c8c738ce5a2fd22b40e80feba2412502134f41a1b7140edcb7a0568f6279d02ca8134724064c3ee90d93a108053d83677c65f2bb07a", 0x9e}, {0x0}, {&(0x7f0000001280)="1a7d6dfc7513975241138f75d762500e04ec831a9ec61ea5864efb3baca432dd932f16883b321c7953f457b10a8a5b4aaae2a4bf1baf35db6b1a4f1cff918de8c2a2c89757e7e76d9878fef68142937becb7f4aaf117", 0x56}], 0x3, &(0x7f0000001380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8472}}, @ip_retopts={{0x34, 0x0, 0x7, {[@end, @ssrr={0x89, 0xb, 0x8e, [@local, @rand_addr=0x64010102]}, @generic={0x89, 0x7, "f7ba75dae8"}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x2}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}], 0x68}}], 0x2, 0x2090) 2.820559151s ago: executing program 2 (id=1134): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6, 0x0, 0x0, 0x10000000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2.634758287s ago: executing program 2 (id=1139): io_uring_setup(0x37b0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) listen(0xffffffffffffffff, 0x7) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="bb", 0x1}], 0x1, 0x0, 0x0, 0x804c054}, 0x0) 1.753893515s ago: executing program 2 (id=1152): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1.639962328s ago: executing program 3 (id=1159): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000900)=[{&(0x7f0000001600)="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", 0xe00}, {&(0x7f0000002600)="ca", 0x1}], 0x2, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0xfffe, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 1.58751345s ago: executing program 3 (id=1162): io_uring_setup(0x37b0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) listen(0xffffffffffffffff, 0x7) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="bb", 0x1}], 0x1, 0x0, 0x0, 0x804c054}, 0x0) 1.318028028s ago: executing program 2 (id=1164): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 1.191887312s ago: executing program 2 (id=1165): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) getpgrp(0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x1, 0x71c, 0x0, 0x0, 0xa, 0x0, 0xc2ca4bd923256b4d, 0x32}, {@in=@loopback, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0x6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {0xffffffff}, 0x80, 0x34ff, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2000c002}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1d8}}, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000110029010000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) 1.165045803s ago: executing program 1 (id=1167): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0xf}}, 0x14) 1.107944635s ago: executing program 1 (id=1168): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e6400"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) 1.071127006s ago: executing program 1 (id=1169): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x100b0000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x9, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000003d80), 0x40101, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x2a}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.029936068s ago: executing program 4 (id=1171): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.007314368s ago: executing program 4 (id=1172): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a0000400000000000000000140003006873723000000000000000000000000014001100"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, 0x0, 0x40084) 939.77197ms ago: executing program 4 (id=1173): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 939.61261ms ago: executing program 4 (id=1174): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 722.100797ms ago: executing program 3 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}}, 0x0) 712.823427ms ago: executing program 1 (id=1176): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000001c40)='net/ip_tables_targets\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000200)=""/100) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}, {0x40000000, &(0x7f0000000080), 0x2}], 0x3, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 551.813463ms ago: executing program 3 (id=1177): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 473.674985ms ago: executing program 3 (id=1179): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) 469.991635ms ago: executing program 4 (id=1180): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x0, 0x0) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) 379.789918ms ago: executing program 0 (id=1181): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[], 0x0) 235.220312ms ago: executing program 0 (id=1182): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000680)="91f8a9849519def28691bbc4173c1d6f8df651357d0272b731c582b902dd2902e35d4ac297179130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb93f1b47289131699cf972ea79cc6fbf9ff8af38a1fdd9ab62d2cf3314edc36a6260b4a172e1b42c3b9c9fea74197ab34dfc9ce0e7eae91f3be688da91f5a833d1173bac5af2d62bb1e7be9f9a16c6aeeaf76b6c780b01ad83cc128b3a0484fbc8ebfe8ad8e6c47ca148a93c8fef2b4ecb5c058b0f9173b6faa06d959fe04517327c922573206c97a2f2a54692f", 0xcd}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001c", 0x8}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769deb", 0xa4}, {&(0x7f0000000fc0)="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", 0x142}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 228.946693ms ago: executing program 1 (id=1183): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6, 0x0, 0x0, 0x10000000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 205.689663ms ago: executing program 3 (id=1184): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 169.104024ms ago: executing program 0 (id=1185): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a0000400000000000000000140003006873723000000000000000000000000014001100"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40084) 144.115375ms ago: executing program 4 (id=1186): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x100b0000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x9, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000003d80), 0x40101, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x2a}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 63.369288ms ago: executing program 0 (id=1187): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000380)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/48, 0x30}], 0x1) 62.967508ms ago: executing program 1 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r3, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0xd41, &(0x7f0000000f00)=ANY=[], 0x0) 273.88µs ago: executing program 0 (id=1189): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=1190): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) kernel console output (not intermixed with test programs): [ 18.055781][ T28] audit: type=1400 audit(1778841002.408:103): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.077931][ T28] audit: type=1400 audit(1778841002.408:104): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.865747][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 19.865762][ T28] audit: type=1400 audit(1778841004.218:120): avc: denied { write } for pid=3236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.894884][ T28] audit: type=1400 audit(1778841004.228:121): avc: denied { write } for pid=3247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.932804][ T28] audit: type=1400 audit(1778841004.288:122): avc: denied { write } for pid=3250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.955903][ T28] audit: type=1400 audit(1778841004.298:123): avc: denied { write } for pid=3261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.997925][ T28] audit: type=1400 audit(1778841004.348:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.021428][ T28] audit: type=1400 audit(1778841004.368:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 23.954850][ T28] audit: type=1400 audit(1778841008.308:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.977877][ T28] audit: type=1400 audit(1778841008.328:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.978774][ T3286] cgroup: Unknown subsys name 'net' [ 24.005645][ T28] audit: type=1400 audit(1778841008.358:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.101814][ T3286] cgroup: Unknown subsys name 'cpuset' [ 24.107916][ T3286] cgroup: Unknown subsys name 'rlimit' [ 24.245168][ T28] audit: type=1400 audit(1778841008.598:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.299932][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.353684][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.674024][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 25.674039][ T28] audit: type=1400 audit(1778841010.028:140): avc: denied { execmem } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.987766][ T28] audit: type=1400 audit(1778841010.338:141): avc: denied { read } for pid=3296 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.012382][ T28] audit: type=1400 audit(1778841010.368:142): avc: denied { open } for pid=3296 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.061142][ T28] audit: type=1400 audit(1778841010.368:143): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 26.102532][ T28] audit: type=1400 audit(1778841010.368:144): avc: denied { module_request } for pid=3296 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 26.161033][ T28] audit: type=1400 audit(1778841010.398:145): avc: denied { sys_module } for pid=3296 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 26.456045][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.463230][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.470504][ T3296] bridge_slave_0: entered allmulticast mode [ 26.477058][ T3296] bridge_slave_0: entered promiscuous mode [ 26.498386][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.510237][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.517510][ T3296] bridge_slave_1: entered allmulticast mode [ 26.523809][ T3296] bridge_slave_1: entered promiscuous mode [ 26.552719][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.572014][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.605699][ T3296] team0: Port device team_slave_0 added [ 26.613289][ T3296] team0: Port device team_slave_1 added [ 26.631120][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.638068][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.664114][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.676306][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.683280][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.709167][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.767367][ T3296] hsr_slave_0: entered promiscuous mode [ 26.773297][ T3296] hsr_slave_1: entered promiscuous mode [ 26.923682][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.930784][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.938002][ T3311] bridge_slave_0: entered allmulticast mode [ 26.944324][ T3311] bridge_slave_0: entered promiscuous mode [ 26.966013][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.973157][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.980309][ T3311] bridge_slave_1: entered allmulticast mode [ 26.986700][ T3311] bridge_slave_1: entered promiscuous mode [ 27.027581][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.034773][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.041906][ T3309] bridge_slave_0: entered allmulticast mode [ 27.048225][ T3309] bridge_slave_0: entered promiscuous mode [ 27.070175][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.077732][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.084945][ T3309] bridge_slave_1: entered allmulticast mode [ 27.091373][ T3309] bridge_slave_1: entered promiscuous mode [ 27.103683][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.114312][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.126193][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.133397][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.140688][ T3306] bridge_slave_0: entered allmulticast mode [ 27.147163][ T3306] bridge_slave_0: entered promiscuous mode [ 27.161532][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.184104][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.191276][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.198470][ T3306] bridge_slave_1: entered allmulticast mode [ 27.205130][ T3306] bridge_slave_1: entered promiscuous mode [ 27.216949][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.231384][ T3311] team0: Port device team_slave_0 added [ 27.252249][ T3311] team0: Port device team_slave_1 added [ 27.263827][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.288013][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.297957][ T3309] team0: Port device team_slave_0 added [ 27.311456][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.318494][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.344520][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.360482][ T3309] team0: Port device team_slave_1 added [ 27.377900][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.384897][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.411007][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.431093][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.439811][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.447490][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.454598][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.461837][ T3317] bridge_slave_0: entered allmulticast mode [ 27.468175][ T3317] bridge_slave_0: entered promiscuous mode [ 27.482787][ T3306] team0: Port device team_slave_0 added [ 27.488727][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.497508][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.523487][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.534423][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.543260][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.551102][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.559938][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.567475][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.574586][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.581855][ T3317] bridge_slave_1: entered allmulticast mode [ 27.588325][ T3317] bridge_slave_1: entered promiscuous mode [ 27.600395][ T3306] team0: Port device team_slave_1 added [ 27.610846][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.617826][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.643728][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.657797][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.666638][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.685365][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.692329][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.718296][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.735916][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.746707][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.756252][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.763258][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.789342][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.819996][ T3311] hsr_slave_0: entered promiscuous mode [ 27.825987][ T3311] hsr_slave_1: entered promiscuous mode [ 27.831874][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.837591][ T3311] Cannot create hsr debugfs directory [ 27.855296][ T3317] team0: Port device team_slave_0 added [ 27.870191][ T3309] hsr_slave_0: entered promiscuous mode [ 27.876236][ T3309] hsr_slave_1: entered promiscuous mode [ 27.882151][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.887886][ T3309] Cannot create hsr debugfs directory [ 27.899499][ T3317] team0: Port device team_slave_1 added [ 27.932962][ T3306] hsr_slave_0: entered promiscuous mode [ 27.938980][ T3306] hsr_slave_1: entered promiscuous mode [ 27.944867][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 27.950681][ T3306] Cannot create hsr debugfs directory [ 27.956573][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.963546][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.989561][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.000743][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.007805][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.033719][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.123533][ T3317] hsr_slave_0: entered promiscuous mode [ 28.129542][ T3317] hsr_slave_1: entered promiscuous mode [ 28.135428][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 28.141156][ T3317] Cannot create hsr debugfs directory [ 28.242044][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.250599][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.258101][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.266765][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.274446][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.283120][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.291936][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.300440][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.327098][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.335701][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.343364][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.352148][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.360753][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.369956][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.378467][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.386335][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.394940][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.433802][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.441390][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.449880][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.457720][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.466278][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.473928][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.482539][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.490124][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.498669][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.513018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.520126][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.541206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.548274][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.577390][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.586218][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.596157][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.604847][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.622051][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.630530][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.638214][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.646975][ T3317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.665912][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.681283][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.694776][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.707313][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.714398][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.735926][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.743035][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.765560][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.776904][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.804592][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.814486][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.830269][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.837356][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.848064][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.855213][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.867266][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.874375][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.884583][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.891701][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.946151][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.956138][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.975651][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.007424][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.014514][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.034024][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.041119][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.109342][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.168602][ T3296] veth0_vlan: entered promiscuous mode [ 29.191904][ T3296] veth1_vlan: entered promiscuous mode [ 29.231508][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.243067][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.257306][ T3296] veth0_macvtap: entered promiscuous mode [ 29.272826][ T3296] veth1_macvtap: entered promiscuous mode [ 29.306489][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.332742][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.352628][ T205] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.370442][ T205] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.390373][ T205] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.403588][ T205] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.415510][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.440350][ T3311] veth0_vlan: entered promiscuous mode [ 29.457213][ T3309] veth0_vlan: entered promiscuous mode [ 29.467043][ T3311] veth1_vlan: entered promiscuous mode [ 29.482191][ T28] audit: type=1400 audit(1778841013.838:146): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.ub9jzP/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.508931][ T3309] veth1_vlan: entered promiscuous mode [ 29.515899][ T3306] veth0_vlan: entered promiscuous mode [ 29.528950][ T28] audit: type=1400 audit(1778841013.838:147): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.551653][ T28] audit: type=1400 audit(1778841013.838:148): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.ub9jzP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.577407][ T28] audit: type=1400 audit(1778841013.838:149): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.579856][ T3306] veth1_vlan: entered promiscuous mode [ 29.606512][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.618683][ T3309] veth0_macvtap: entered promiscuous mode [ 29.638607][ T3309] veth1_macvtap: entered promiscuous mode [ 29.652425][ T3317] veth0_vlan: entered promiscuous mode [ 29.665410][ T3311] veth0_macvtap: entered promiscuous mode [ 29.683262][ T3317] veth1_vlan: entered promiscuous mode [ 29.690286][ T3311] veth1_macvtap: entered promiscuous mode [ 29.712696][ T3306] veth0_macvtap: entered promiscuous mode [ 29.721326][ T3306] veth1_macvtap: entered promiscuous mode [ 29.728974][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.757852][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.767260][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.776990][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.790191][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.803095][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.815719][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.825194][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.838779][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.847664][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.861624][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.872631][ T3317] veth0_macvtap: entered promiscuous mode [ 29.885305][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.895560][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.916245][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.930153][ T3317] veth1_macvtap: entered promiscuous mode [ 29.938895][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.947729][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.968842][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.978708][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.024898][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.056395][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.094754][ T1673] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.115314][ T1673] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.137071][ T1673] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.158207][ T1673] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.261191][ T3538] GPL: port 1(erspan0) entered blocking state [ 30.273185][ T3538] GPL: port 1(erspan0) entered disabled state [ 30.279506][ T3538] erspan0: entered allmulticast mode [ 30.286008][ T3538] erspan0: entered promiscuous mode [ 30.307743][ T3532] GPL: port 1(erspan0) entered blocking state [ 30.315324][ T3532] GPL: port 1(erspan0) entered forwarding state [ 30.439724][ T3552] capability: warning: `syz.0.20' uses 32-bit capabilities (legacy support in use) [ 30.783028][ T3564] ------------[ cut here ]------------ [ 30.788579][ T3564] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.3.21/3564 [ 30.798168][ T3564] Modules linked in: [ 30.802133][ T3564] CPU: 0 UID: 0 PID: 3564 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 30.811240][ T3564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 30.821297][ T3564] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 30.826957][ T3564] Code: 8b 05 e1 88 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 04 f8 5e 04 cc e8 6e 1b 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 60 1b 1e 00 90 0f 0b 90 e9 af fa ff ff [ 30.846565][ T3564] RSP: 0018:ffffc90001f8fdd8 EFLAGS: 00010093 [ 30.852988][ T3564] RAX: ffffffff813b1762 RBX: ffff888104a72200 RCX: ffff888104a72200 [ 30.861002][ T3564] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 30.868979][ T3564] RBP: 0000000000000080 R08: ffff888104a72d00 R09: 0000000000000000 [ 30.876959][ T3564] R10: ffffc90001f8fdf0 R11: 0001c90001f8fdf0 R12: ffff888104a72200 [ 30.884960][ T3564] R13: ffff888104a72a28 R14: ffff888101df6410 R15: 0000000000000080 [ 30.892955][ T3564] FS: 0000000000000000(0000) GS:ffff8882ae8fa000(0000) knlGS:0000000000000000 [ 30.901952][ T3564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.908537][ T3564] CR2: 00002000001f5030 CR3: 0000000006c32000 CR4: 00000000003506f0 [ 30.916510][ T3564] Call Trace: [ 30.919790][ T3564] [ 30.922747][ T3564] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 30.928148][ T3564] ? __list_add_valid_or_report+0x38/0xe0 [ 30.933928][ T3564] do_exit+0xc13/0x1530 [ 30.938141][ T3564] ? switch_fpu_return+0xe7/0x1b0 [ 30.943169][ T3564] __x64_sys_exit+0x1f/0x20 [ 30.947808][ T3564] x64_sys_call+0x301d/0x3020 [ 30.952650][ T3564] do_syscall_64+0x12c/0x3b0 [ 30.957292][ T3564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.963180][ T3564] RIP: 0033:0x7f4ca72ace59 [ 30.967601][ T3564] Code: Unable to access opcode bytes at 0x7f4ca72ace2f. [ 30.974617][ T3564] RSP: 002b:00007f4ca5cbcfd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 30.983116][ T3564] RAX: ffffffffffffffda RBX: 00007f4ca7526180 RCX: 00007f4ca72ace59 [ 30.991248][ T3564] RDX: 00007f4ca5cbd9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.999302][ T3564] RBP: 00007f4ca7342d6f R08: 0000000000000000 R09: 0000000000000000 [ 31.007280][ T3564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.015438][ T3564] R13: 00007f4ca7526218 R14: 00007f4ca7526180 R15: 00007ffd2fad0ac8 [ 31.023468][ T3564] [ 31.026495][ T3564] ---[ end trace 0000000000000000 ]--- [ 31.178846][ T3569] netlink: 56 bytes leftover after parsing attributes in process `syz.0.25'. [ 31.359420][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 31.359435][ T28] audit: type=1400 audit(1778841015.708:178): avc: denied { create } for pid=3573 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.385695][ T28] audit: type=1400 audit(1778841015.728:179): avc: denied { listen } for pid=3573 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.405565][ T28] audit: type=1400 audit(1778841015.738:180): avc: denied { read } for pid=3571 comm="syz.0.26" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.451724][ T28] audit: type=1400 audit(1778841015.738:181): avc: denied { open } for pid=3571 comm="syz.0.26" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.475517][ T28] audit: type=1400 audit(1778841015.738:182): avc: denied { connect } for pid=3571 comm="syz.0.26" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.516932][ T3582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.28'. [ 31.521529][ T28] audit: type=1400 audit(1778841015.758:183): avc: denied { prog_run } for pid=3571 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.608577][ T28] audit: type=1400 audit(1778841015.958:184): avc: denied { write } for pid=3584 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.775041][ T28] audit: type=1400 audit(1778841016.078:185): avc: denied { create } for pid=3584 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 31.796574][ T28] audit: type=1400 audit(1778841016.148:186): avc: denied { create } for pid=3589 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.816925][ T28] audit: type=1400 audit(1778841016.148:187): avc: denied { write } for pid=3589 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.905228][ T3602] loop4: detected capacity change from 0 to 512 [ 31.924148][ T3602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.941940][ T3602] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.000480][ T3606] netlink: 56 bytes leftover after parsing attributes in process `syz.3.37'. [ 32.012654][ T3610] netlink: 156 bytes leftover after parsing attributes in process `syz.1.38'. [ 32.348105][ T3621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.42'. [ 32.664983][ T3641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.50'. [ 32.728740][ T3645] netlink: 156 bytes leftover after parsing attributes in process `syz.0.51'. [ 32.801668][ T3655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 33.185916][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.208705][ T3672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 33.350279][ T3688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 33.470834][ T3698] syzkaller0: entered promiscuous mode [ 33.476627][ T3698] syzkaller0: entered allmulticast mode [ 34.464041][ T3711] syz.3.76 (3711) used greatest stack depth: 10888 bytes left [ 34.526771][ T3721] Zero length message leads to an empty skb [ 34.575030][ T3724] capability: warning: `syz.1.82' uses deprecated v2 capabilities in a way that may be insecure [ 34.777442][ T3737] loop3: detected capacity change from 0 to 512 [ 34.817629][ T3737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.836786][ T3737] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.917726][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.205456][ T3778] __nla_validate_parse: 3 callbacks suppressed [ 36.205470][ T3778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 36.672770][ T3791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 36.817839][ T3802] loop0: detected capacity change from 0 to 512 [ 36.915581][ T3802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.934324][ T3802] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.967433][ T3814] netlink: 56 bytes leftover after parsing attributes in process `syz.4.113'. [ 37.881476][ T3834] netlink: 156 bytes leftover after parsing attributes in process `syz.3.117'. [ 38.007521][ T3840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.129673][ T3846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.157549][ T3846] bond1: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 38.193108][ T3846] bond1: (slave ip6tnl0): Error -95 calling set_mac_address [ 38.522274][ T3867] netlink: 156 bytes leftover after parsing attributes in process `syz.1.129'. [ 38.611302][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.481593][ T3890] ip6gre1: entered promiscuous mode [ 39.492972][ T3890] ip6gre1: entered allmulticast mode [ 39.509875][ T3896] netlink: 156 bytes leftover after parsing attributes in process `syz.3.140'. [ 39.579788][ T3890] syz.4.137 (3890) used greatest stack depth: 9088 bytes left [ 39.757120][ T3902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.654037][ T3935] netlink: 156 bytes leftover after parsing attributes in process `syz.0.154'. [ 41.191838][ T3945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 41.211472][ T3945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 41.224708][ T3945] bond2: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 41.250752][ T3945] bond2: (slave ip6tnl0): Error -95 calling set_mac_address [ 41.538839][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3974 comm=syz.4.169 [ 42.498566][ T3989] netlink: 156 bytes leftover after parsing attributes in process `syz.1.172'. [ 42.614409][ T4001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4001 comm=syz.0.180 [ 42.701275][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 42.701291][ T28] audit: type=1326 audit(1778841027.048:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.0.184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f525156ce59 code=0x0 [ 43.301883][ T4026] netlink: 156 bytes leftover after parsing attributes in process `syz.1.188'. [ 43.586072][ T4036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4036 comm=syz.3.194 [ 43.613758][ T4041] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 43.656207][ T4041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.670115][ T4041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.681881][ T4041] bond1: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 43.713632][ T4041] bond1: (slave ip6tnl0): Error -95 calling set_mac_address [ 43.858401][ T4059] netlink: 156 bytes leftover after parsing attributes in process `syz.0.201'. [ 44.086691][ T4074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4074 comm=syz.3.207 [ 44.187954][ T28] audit: type=1326 audit(1778841028.538:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="syz.3.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ca72ace59 code=0x0 [ 44.217027][ T4084] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 44.230759][ T4084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 44.255793][ T4084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 44.263177][ T4084] bond3: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 44.275010][ T4084] bond3: (slave ip6tnl0): Error -95 calling set_mac_address [ 44.314429][ T4089] netlink: 156 bytes leftover after parsing attributes in process `syz.4.215'. [ 44.433875][ T4099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4099 comm=syz.4.218 [ 44.565879][ T28] audit: type=1326 audit(1778841028.918:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c3710ce59 code=0x0 [ 44.669318][ T4115] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 44.688058][ T4115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.713469][ T4115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.722126][ T4115] bond1: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 44.736273][ T4115] bond1: (slave ip6tnl0): Error -95 calling set_mac_address [ 44.747470][ T4118] netlink: 156 bytes leftover after parsing attributes in process `syz.2.227'. [ 44.946251][ T4132] netlink: 92 bytes leftover after parsing attributes in process `syz.3.234'. [ 45.301092][ T28] audit: type=1326 audit(1778841029.648:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.0.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f525156ce59 code=0x0 [ 45.364251][ T4148] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 45.377383][ T4148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 45.387947][ T4148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 45.395277][ T4148] bond2: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 45.414768][ T4148] bond2: (slave ip6tnl0): Error -95 calling set_mac_address [ 45.776229][ T4164] netlink: 92 bytes leftover after parsing attributes in process `syz.2.247'. [ 45.964757][ T4183] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 45.994256][ T4183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 46.006273][ T4183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 46.021712][ T4183] bond2: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 46.047005][ T4183] bond2: (slave ip6tnl0): Error -95 calling set_mac_address [ 46.062999][ T4192] netlink: 92 bytes leftover after parsing attributes in process `syz.4.258'. [ 47.098566][ T4220] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 47.130156][ T4222] netlink: 92 bytes leftover after parsing attributes in process `syz.3.270'. [ 47.158583][ T4220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.248562][ T4227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.270485][ T4227] bond1: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 47.283595][ T4227] bond1: (slave ip6tnl0): Error -95 calling set_mac_address [ 47.473786][ T4258] netlink: 92 bytes leftover after parsing attributes in process `syz.2.284'. [ 47.599107][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 47.756267][ T28] audit: type=1326 audit(1778841032.108:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.2.294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53ed4ace59 code=0x0 [ 47.796832][ T4281] netlink: 92 bytes leftover after parsing attributes in process `syz.1.295'. [ 47.950878][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 48.223134][ T4309] netlink: 92 bytes leftover after parsing attributes in process `syz.3.308'. [ 48.497691][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 49.059008][ T4344] netlink: 92 bytes leftover after parsing attributes in process `syz.0.323'. [ 49.844732][ T4373] netlink: 92 bytes leftover after parsing attributes in process `syz.3.334'. [ 50.587280][ T4401] netlink: 92 bytes leftover after parsing attributes in process `syz.2.346'. [ 51.044279][ T4434] netlink: 92 bytes leftover after parsing attributes in process `syz.4.359'. [ 51.808414][ T4463] netlink: 92 bytes leftover after parsing attributes in process `syz.2.370'. [ 53.271230][ T28] audit: type=1400 audit(1778841037.618:207): avc: denied { write } for pid=4540 comm="syz.3.404" path="socket:[7771]" dev="sockfs" ino=7771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.356558][ T28] audit: type=1400 audit(1778841037.698:208): avc: denied { setopt } for pid=4543 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.583266][ T4563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.412'. [ 54.339228][ T28] audit: type=1400 audit(1778841038.688:209): avc: denied { create } for pid=4571 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.386258][ T4578] syzkaller0: entered promiscuous mode [ 54.396742][ T4578] syzkaller0: entered allmulticast mode [ 54.405753][ T28] audit: type=1400 audit(1778841038.758:210): avc: denied { relabelfrom } for pid=4577 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.461994][ T28] audit: type=1400 audit(1778841038.758:211): avc: denied { relabelto } for pid=4577 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.574085][ T4591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.423'. [ 54.832368][ T4596] syzkaller0: entered promiscuous mode [ 54.838354][ T4596] syzkaller0: entered allmulticast mode [ 55.080215][ T4606] syzkaller0: entered promiscuous mode [ 55.089454][ T4606] syzkaller0: entered allmulticast mode [ 55.138525][ T28] audit: type=1400 audit(1778841039.488:212): avc: denied { read } for pid=4618 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.238561][ T4623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.435'. [ 55.274273][ T4626] bridge0: port 3(veth0_to_hsr) entered blocking state [ 55.282588][ T4626] bridge0: port 3(veth0_to_hsr) entered disabled state [ 55.298695][ T4626] veth0_to_hsr: entered allmulticast mode [ 55.305312][ T4626] veth0_to_hsr: entered promiscuous mode [ 55.311572][ T4626] bridge0: port 3(veth0_to_hsr) entered blocking state [ 55.318469][ T4626] bridge0: port 3(veth0_to_hsr) entered forwarding state [ 55.984708][ T4650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 56.128561][ T4648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.142912][ T4648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.564261][ T4684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.589953][ T4684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 56.742365][ T28] audit: type=1400 audit(1778841041.098:213): avc: denied { tracepoint } for pid=4708 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 57.014494][ T4723] GPL: port 1(erspan0) entered blocking state [ 57.021608][ T4723] GPL: port 1(erspan0) entered disabled state [ 57.028759][ T4723] erspan0: entered allmulticast mode [ 57.038450][ T4723] erspan0: entered promiscuous mode [ 57.161402][ T4729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.483'. [ 57.218036][ T28] audit: type=1400 audit(1778841041.568:214): avc: denied { create } for pid=4734 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.245947][ T4736] sit0: entered allmulticast mode [ 57.343463][ T4736] sit0: entered promiscuous mode [ 57.573005][ T4759] GPL: port 1(erspan0) entered blocking state [ 57.588987][ T4759] GPL: port 1(erspan0) entered disabled state [ 57.602872][ T4759] erspan0: entered allmulticast mode [ 57.622448][ T4759] erspan0: entered promiscuous mode [ 57.667943][ T4763] sit0: entered allmulticast mode [ 59.060742][ T28] audit: type=1400 audit(1778841043.408:215): avc: denied { create } for pid=4824 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.085313][ T28] audit: type=1400 audit(1778841043.438:216): avc: denied { setopt } for pid=4824 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.329215][ T28] audit: type=1400 audit(1778841043.678:217): avc: denied { write } for pid=4824 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.821825][ T4840] syzkaller0: entered promiscuous mode [ 59.834577][ T4840] syzkaller0: entered allmulticast mode [ 60.496372][ T28] audit: type=1400 audit(1778841044.848:218): avc: denied { ioctl } for pid=4869 comm="syz.3.540" path="uts:[4026532521]" dev="nsfs" ino=4026532521 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.568156][ T28] audit: type=1400 audit(1778841044.908:219): avc: denied { name_bind } for pid=4871 comm="syz.0.542" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.604635][ T28] audit: type=1400 audit(1778841044.908:220): avc: denied { node_bind } for pid=4871 comm="syz.0.542" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.645539][ T4877] loop0: detected capacity change from 0 to 512 [ 60.684894][ T4877] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.702448][ T28] audit: type=1400 audit(1778841045.058:221): avc: denied { mount } for pid=4876 comm="syz.0.544" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 60.742627][ T28] audit: type=1400 audit(1778841045.098:222): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 60.957212][ T4888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.549'. [ 61.111982][ T4902] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 61.174764][ T28] audit: type=1400 audit(1778841045.528:223): avc: denied { name_bind } for pid=4907 comm="syz.2.559" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.264968][ T4919] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 61.279339][ T4919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.369809][ T4953] netlink: 'syz.0.575': attribute type 1 has an invalid length. [ 62.495094][ T4953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 62.616751][ T28] audit: type=1400 audit(1778841046.968:224): avc: denied { read write } for pid=4966 comm="syz.0.581" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 62.825579][ T4976] loop4: detected capacity change from 0 to 512 [ 62.835757][ T4976] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.878400][ T4978] loop0: detected capacity change from 0 to 512 [ 62.916291][ T4978] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.143745][ T4986] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 63.198108][ T4986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.257904][ T4998] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 63.285110][ T4998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 63.303361][ T5001] loop4: detected capacity change from 0 to 256 [ 63.314715][ T5003] loop0: detected capacity change from 0 to 512 [ 63.322375][ T5003] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.375945][ T5001] FAT-fs (loop4): Directory bread(block 64) failed [ 63.393107][ T5001] FAT-fs (loop4): Directory bread(block 65) failed [ 63.406305][ T5001] FAT-fs (loop4): Directory bread(block 66) failed [ 63.413430][ T5001] FAT-fs (loop4): Directory bread(block 67) failed [ 63.420351][ T5001] FAT-fs (loop4): Directory bread(block 68) failed [ 63.427172][ T5001] FAT-fs (loop4): Directory bread(block 69) failed [ 63.434009][ T5001] FAT-fs (loop4): Directory bread(block 70) failed [ 63.440626][ T5001] FAT-fs (loop4): Directory bread(block 71) failed [ 63.447505][ T5001] FAT-fs (loop4): Directory bread(block 72) failed [ 63.454184][ T5001] FAT-fs (loop4): Directory bread(block 73) failed [ 63.632774][ T30] syzkaller0: tun_net_xmit 76 [ 63.664804][ T30] syzkaller0: tun_net_xmit 48 [ 63.675360][ T3385] syzkaller0: tun_net_xmit 76 [ 63.682480][ T5014] syzkaller0: tun_net_xmit 1 [ 64.770729][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 64.770743][ T28] audit: type=1400 audit(1778841049.118:226): avc: denied { mounton } for pid=5087 comm="syz.2.636" path=2F3131332FE91F7189591E9233614B dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 67.133875][ T28] audit: type=1400 audit(1778841051.488:227): avc: denied { name_bind } for pid=5207 comm="syz.1.688" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 67.195892][ T28] audit: type=1400 audit(1778841051.508:228): avc: denied { setopt } for pid=5207 comm="syz.1.688" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.255620][ T5219] xt_hashlimit: max too large, truncated to 1048576 [ 67.297326][ T5224] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 67.352017][ T5224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.342485][ T5258] GPL: port 1(erspan0) entered blocking state [ 68.357668][ T5258] GPL: port 1(erspan0) entered disabled state [ 68.382407][ T5258] erspan0: entered allmulticast mode [ 68.409542][ T5258] erspan0: entered promiscuous mode [ 69.210847][ T5301] loop3: detected capacity change from 0 to 136 [ 69.361123][ T5301] Attempt to read inode for relocated directory [ 69.412155][ T28] audit: type=1400 audit(1778841053.768:229): avc: denied { mount } for pid=5300 comm="syz.3.727" name="/" dev="loop3" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.438059][ T5301] syz.3.727: attempt to access beyond end of device [ 69.438059][ T5301] loop3: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 69.469867][ T5301] syz.3.727: attempt to access beyond end of device [ 69.469867][ T5301] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 69.483599][ T5301] syz.3.727: attempt to access beyond end of device [ 69.483599][ T5301] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 69.497291][ T5301] syz.3.727: attempt to access beyond end of device [ 69.497291][ T5301] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 69.510934][ T5301] syz.3.727: attempt to access beyond end of device [ 69.510934][ T5301] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 69.541873][ T28] audit: type=1400 audit(1778841053.898:230): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 70.359374][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 70.378487][ T5360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5360 comm=syz.3.751 [ 70.403463][ T5360] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 70.416793][ T5360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 70.429485][ T5360] bond5: entered promiscuous mode [ 70.438761][ T5360] gretap1: entered promiscuous mode [ 70.445589][ T5360] 8021q: adding VLAN 0 to HW filter on device bond5 [ 70.774997][ T5385] loop5: detected capacity change from 0 to 3095 [ 70.802867][ T5385] loop5: detected capacity change from 3095 to 4287 [ 70.827174][ T3289] Buffer I/O error on dev loop5, logical block 535, async page read [ 70.858064][ T3289] Buffer I/O error on dev loop5, logical block 535, async page read [ 70.876910][ T5387] GPL: port 1(erspan0) entered blocking state [ 70.895618][ T5387] GPL: port 1(erspan0) entered disabled state [ 70.918261][ T5387] erspan0: entered allmulticast mode [ 70.959133][ T5387] erspan0: entered promiscuous mode [ 71.082475][ T5396] loop1: detected capacity change from 0 to 136 [ 71.095463][ T5396] Attempt to read inode for relocated directory [ 71.608159][ T5418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.771'. [ 71.655743][ T5420] xt_hashlimit: max too large, truncated to 1048576 [ 71.748671][ T5430] loop0: detected capacity change from 0 to 136 [ 71.793236][ T5430] Attempt to read inode for relocated directory [ 71.937125][ T5448] loop0: detected capacity change from 0 to 512 [ 71.945752][ T5448] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.028269][ T5445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.074376][ T5443] syzkaller0: entered promiscuous mode [ 72.080251][ T5443] syzkaller0: entered allmulticast mode [ 72.138170][ T5459] xt_hashlimit: max too large, truncated to 1048576 [ 72.292415][ T5475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 72.335961][ T5475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5475 comm=syz.0.797 [ 72.348464][ T28] audit: type=1400 audit(1778841056.688:231): avc: denied { listen } for pid=5476 comm="syz.4.798" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.391030][ T28] audit: type=1400 audit(1778841056.688:232): avc: denied { accept } for pid=5476 comm="syz.4.798" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.401603][ T5475] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 72.618423][ T5495] xt_hashlimit: max too large, truncated to 1048576 [ 73.129385][ T5517] loop2: detected capacity change from 0 to 136 [ 73.160038][ T5517] Attempt to read inode for relocated directory [ 73.328524][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 73.366757][ T5519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5519 comm=syz.2.813 [ 73.391256][ T5524] 9p: Bad value for 'rfdno' [ 73.406896][ T5525] loop5: detected capacity change from 0 to 6335 [ 73.424918][ T3792] Buffer I/O error on dev loop5, logical block 791, async page read [ 73.433355][ T5519] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 73.442634][ T5525] loop5: detected capacity change from 6335 to 10511 [ 73.459959][ T3289] Buffer I/O error on dev loop5, logical block 1313, async page read [ 73.523886][ T5534] xt_hashlimit: max too large, truncated to 1048576 [ 73.738024][ T5541] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 73.738024][ T5541] The task syz.0.818 (5541) triggered the difference, watch for misbehavior. [ 74.072938][ T5557] 9p: Bad value for 'rfdno' [ 74.087039][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 74.104136][ T5559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5559 comm=syz.4.827 [ 74.123245][ T5559] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 74.837607][ T5591] 9p: Bad value for 'rfdno' [ 74.870040][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'. [ 74.900874][ T5596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5596 comm=syz.2.842 [ 74.919832][ T5596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.842'. [ 74.929301][ T5596] bond4: entered promiscuous mode [ 74.934758][ T5596] 8021q: adding VLAN 0 to HW filter on device bond4 [ 75.061477][ T28] audit: type=1400 audit(1778841059.418:233): avc: denied { read write } for pid=5604 comm="syz.0.847" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.107424][ T28] audit: type=1400 audit(1778841059.438:234): avc: denied { open } for pid=5604 comm="syz.0.847" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.933815][ T5635] 9p: Bad value for 'rfdno' [ 75.969396][ T5638] loop3: detected capacity change from 0 to 136 [ 75.991981][ T5638] Attempt to read inode for relocated directory [ 76.198211][ T5661] 9p: Bad value for 'rfdno' [ 76.223570][ T5663] loop0: detected capacity change from 0 to 136 [ 76.231024][ T5663] Attempt to read inode for relocated directory [ 78.126167][ T28] audit: type=1400 audit(1778841062.478:235): avc: denied { write } for pid=5740 comm="syz.2.906" path="socket:[12709]" dev="sockfs" ino=12709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 81.209789][ T5885] program syz.0.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.641903][ T28] audit: type=1400 audit(1778841065.998:236): avc: denied { mount } for pid=5904 comm="syz.2.972" name="/" dev="ramfs" ino=12192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.927777][ T28] audit: type=1400 audit(1778841067.278:237): avc: denied { mounton } for pid=5943 comm="syz.2.988" path="/184/file0" dev="tmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.759617][ T5944] 9pnet_fd: p9_fd_create_tcp (5944): problem connecting socket to 127.0.0.1 [ 84.363688][ T28] audit: type=1400 audit(1778841068.718:238): avc: denied { sqpoll } for pid=6016 comm="syz.3.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.399735][ T28] audit: type=1400 audit(1778841068.718:239): avc: denied { map } for pid=6016 comm="syz.3.1018" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.434502][ T28] audit: type=1400 audit(1778841068.718:240): avc: denied { read write } for pid=6016 comm="syz.3.1018" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.075538][ T6042] kernel profiling enabled (shift: 9) [ 85.285612][ T6050] ======================================================= [ 85.285612][ T6050] WARNING: The mand mount option has been deprecated and [ 85.285612][ T6050] and is ignored by this kernel. Remove the mand [ 85.285612][ T6050] option from the mount to silence this warning. [ 85.285612][ T6050] ======================================================= [ 85.328734][ T28] audit: type=1400 audit(1778841069.678:241): avc: denied { mount } for pid=6049 comm="syz.3.1032" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.383025][ T28] audit: type=1400 audit(1778841069.738:242): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.446372][ T28] audit: type=1400 audit(1778841069.798:243): avc: denied { bpf } for pid=6057 comm="syz.3.1035" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.580050][ T28] audit: type=1400 audit(1778841069.818:244): avc: denied { perfmon } for pid=6057 comm="syz.3.1035" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.632507][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'. [ 85.772747][ T6076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1040'. [ 86.439411][ T6095] program syz.0.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.866166][ T6150] program syz.2.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.772445][ T6221] loop3: detected capacity change from 0 to 128 [ 90.101656][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'. [ 90.137239][ T6246] program syz.3.1109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.768966][ T6281] program syz.0.1121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.550942][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1136'. [ 91.692574][ T6333] program syz.4.1144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.445563][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1151'. [ 92.472140][ T6351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1151'. [ 92.482282][ T6351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.115739][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 93.138920][ T6389] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 93.158884][ T6389] bond4: entered promiscuous mode [ 93.164418][ T6389] dummy0: entered promiscuous mode [ 93.169930][ T6388] bond4: left promiscuous mode [ 93.174949][ T6388] dummy0: left promiscuous mode [ 94.080749][ T6427] loop3: detected capacity change from 0 to 128 [ 94.275851][ T6427] ================================================================== [ 94.283977][ T6427] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 94.291968][ T6427] [ 94.294279][ T6427] write to 0xffff888107f090ac of 4 bytes by task 6433 on cpu 0: [ 94.301981][ T6427] xas_set_mark+0x12b/0x140 [ 94.306485][ T6427] tag_pages_for_writeback+0xe3/0x2e0 [ 94.311852][ T6427] writeback_iter+0x340/0x800 [ 94.316521][ T6427] __mpage_writepages+0x8a/0x1390 [ 94.321546][ T6427] fat_writepages+0x26/0x30 [ 94.326047][ T6427] do_writepages+0x1c6/0x310 [ 94.330634][ T6427] file_write_and_wait_range+0x178/0x2f0 [ 94.336368][ T6427] mmb_fsync_noflush+0x48/0x140 [ 94.341212][ T6427] fat_file_fsync+0x98/0x110 [ 94.345798][ T6427] vfs_fsync_range+0xc5/0xe0 [ 94.350394][ T6427] generic_file_write_iter+0x1ba/0x310 [ 94.355855][ T6427] iter_file_splice_write+0x6c4/0xa80 [ 94.361255][ T6427] direct_splice_actor+0x156/0x2a0 [ 94.366389][ T6427] splice_direct_to_actor+0x311/0x670 [ 94.371776][ T6427] do_splice_direct+0x119/0x1a0 [ 94.376649][ T6427] do_sendfile+0x382/0x650 [ 94.381073][ T6427] __x64_sys_sendfile64+0x105/0x150 [ 94.386374][ T6427] x64_sys_call+0x2dc4/0x3020 [ 94.391137][ T6427] do_syscall_64+0x12c/0x3b0 [ 94.395743][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.401629][ T6427] [ 94.403948][ T6427] read to 0xffff888107f090ac of 4 bytes by task 6427 on cpu 1: [ 94.411494][ T6427] file_write_and_wait_range+0x130/0x2f0 [ 94.417129][ T6427] mmb_fsync_noflush+0x48/0x140 [ 94.421977][ T6427] fat_file_fsync+0x98/0x110 [ 94.426590][ T6427] vfs_fsync_range+0xc5/0xe0 [ 94.431180][ T6427] generic_file_write_iter+0x1ba/0x310 [ 94.436641][ T6427] iter_file_splice_write+0x6c4/0xa80 [ 94.442021][ T6427] direct_splice_actor+0x156/0x2a0 [ 94.447140][ T6427] splice_direct_to_actor+0x311/0x670 [ 94.452520][ T6427] do_splice_direct+0x119/0x1a0 [ 94.457379][ T6427] do_sendfile+0x382/0x650 [ 94.461784][ T6427] __x64_sys_sendfile64+0x105/0x150 [ 94.466987][ T6427] x64_sys_call+0x2dc4/0x3020 [ 94.471659][ T6427] do_syscall_64+0x12c/0x3b0 [ 94.476262][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.482151][ T6427] [ 94.484463][ T6427] value changed: 0x02000021 -> 0x04000021 [ 94.490174][ T6427] [ 94.492499][ T6427] Reported by Kernel Concurrency Sanitizer on: [ 94.498639][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.3.1184 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.509483][ T6427] Tainted: [W]=WARN [ 94.513273][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.523320][ T6427] ==================================================================