last executing test programs: 9.859522519s ago: executing program 3 (id=61): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='2\x00', 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x0, 0x4e22, r3, r2, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) 9.82918363s ago: executing program 3 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10 1\n\x00', 0x5) (async) nanosleep(&(0x7f0000000140)={0x0, 0x5f5e100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 9.615390315s ago: executing program 3 (id=67): unshare(0x60000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000000000000000010800040000000000140000001100010000000000000000000200000a"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a34000000140a01000000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000420000000020a01000000000000000000020000000900010073797a3000000000140000001100010000000000000000000200000a"], 0x7c}}, 0x0) 9.562701007s ago: executing program 4 (id=69): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000204), 0x4) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)=""/1, 0x1}], 0x1, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x20}, {&(0x7f0000000400)=""/1, 0x1}, &(0x7f0000000500)=[{&(0x7f0000000600)=""/1, 0x1}], 0x1}}], 0x48}, 0x0) 9.420239571s ago: executing program 2 (id=71): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000000), 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x4d2, 0x33}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x4c, 0x1, {{'digest_null\x00'}, 0x20, "00010203"}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000000), 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@newpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x33}, 0x2, @in=@empty, 0x0, 0x1}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) write(r1, &(0x7f0000000200)="1234567890", 0xa) 9.385649731s ago: executing program 4 (id=72): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000050000000000000000000000000000000000000000000e00030076736f636b6d6f6e3000100012000d00010076736f636b6d6f6e00"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001300050000000000000000000000000001000000010000000e00030076736f636b6d6f6e3000"], 0x24}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000600)={0x28, 0x0, 0x400, @local}, 0x10) write(r1, &(0x7f0000000700)="0123456789abcdef", 0x10) 9.378028781s ago: executing program 0 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000103000000000000000001000000"], 0x14}}, 0x0) 9.222915705s ago: executing program 0 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) 9.218548605s ago: executing program 2 (id=75): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="0011223344557788", 0x8, 0x0, &(0x7f0000000200)={0x2, 0x1f90, @loopback}, 0x10) 9.106197359s ago: executing program 0 (id=78): r0 = socket$inet6_sctp(0xa, 0x805, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) 9.105916219s ago: executing program 4 (id=79): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x1324, @empty}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r1, &(0x7f0000000040)=@in={0x2, 0x1324, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x200}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)='\x00', 0x1000}], 0x1}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x0, [0x0]}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000300)={r2}, &(0x7f0000000340)=0x8) 9.03895518s ago: executing program 2 (id=80): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000050)=0x2, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async) sendto(r1, &(0x7f0000000100)='abcdefghijklmnopqrstuvwxyz0123456789', 0x24, 0x0, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x1}, &(0x7f0000000240)=0x8) 8.988220951s ago: executing program 0 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x605, 0x0, 0x1, {0x0, 0x0, 0x10000, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{}, {0x0, 0x2, [@TCA_FQ_PIE_LIMIT={0x0, 0x1, 0x64}]}}]}, 0x5c}}, 0x0) r3 = socket(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='syzkaller0\x00', 0xb) connect(r3, &(0x7f0000000300)=@in={0x2, 0x1234, @loopback}, 0x10) write(r3, &(0x7f0000000400)="00112233445566778899aabbccddeeff", 0x10) 8.970210542s ago: executing program 3 (id=82): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3322, @loopback}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000100)={0x2, 0x3323, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x1f4}, 0x8) connect$inet(r1, &(0x7f0000000400)={0x2, 0x3322, @loopback}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00), 0x100}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d00), 0x2000}], 0x1}, 0x0) 8.909283583s ago: executing program 2 (id=83): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @private=0xa010100}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000800), 0x4) bind$rds(r2, &(0x7f0000000300)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$rds(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)=""/5, 0x5}], 0x1}, 0x0) 8.751949207s ago: executing program 1 (id=85): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x220, 0xffffffff, 0x0, 0x110, 0x110, 0xfeffffff, 0xffffffff, 0x210, 0x110, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x0, {}, [@common=@rt={{0x48}, {0x0, [], 0x0, 0x31, 0x0, [@loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback], 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x280) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000200)='hello\x00', 0x6}], 0x1, &(0x7f0000000500)=[@rthdr={{0x18}}], 0x18}, 0x0) 8.721622058s ago: executing program 1 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000370)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r1, &(0x7f0000000470)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10\n', 0x8c) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r5, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000004000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) 8.610802651s ago: executing program 0 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r1, 0x5) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) accept$phonet_pipe(r1, 0x0, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)}, 0x80) sendmsg(r2, 0x0, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='1234', 0x4}], 0x1}, 0x80) 7.566501497s ago: executing program 3 (id=88): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map=r4, r0, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f00000003c0)='\x00\x00\x00\x00', &(0x7f0000000400)=@tcp=r3}, 0x20) shutdown(r3, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/10, 0x10}], 0x1}, 0x0) 7.300841084s ago: executing program 4 (id=89): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendto$inet(r0, &(0x7f0000000400)='\x00'/12, 0x18, 0x0, 0x0, 0x0) 7.0701034s ago: executing program 1 (id=90): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1e0, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x31, 0x0, [@loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback, @loopback]}}]}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xc8}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x20, '\x00', 0x0, 0xffffffff}}}}, 0x2c0) 6.826510806s ago: executing program 2 (id=91): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0x0, 0x13, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x0, 0x1, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x1}]}]}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@newsa={0x0, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_crypt={0x0, 0x2, {{'digest_null\x00'}}}]}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)={{0x0, 0x0, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x0, 0x0, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x0, 0x0, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x0, 0x0, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x0, 0x0, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x0, 0x0}]}, @NFTA_CHAIN_TYPE={0x0, 0x0, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x0, 0x0, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x0, 0x0, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, @match={{0x0, 0x0}, @val={0x0, 0x0, 0x0, 0x1, [@NFTA_MATCH_NAME={0x0, 0x0, 'policy\x00'}, @NFTA_MATCH_REV={0x0, 0x0}, @NFTA_MATCH_INFO={0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000"}]}}}]}]}], {0x0, 0x0, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000c00)='\x00', 0x1, 0x0, &(0x7f0000000d00)={0x2, 0x1234, @loopback}, 0x10) 6.128906284s ago: executing program 0 (id=92): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x5f5e100}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @private=0xa010100}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000800), 0x4) bind$rds(r2, &(0x7f0000000300)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$rds(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)=""/5, 0x5}], 0x1}, 0x0) 4.439418487s ago: executing program 2 (id=93): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) unshare(0x40000000) r2 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 4.144287714s ago: executing program 1 (id=94): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x1c) sendto$rxrpc(r0, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, 0x0, 0x0) 3.874576501s ago: executing program 3 (id=95): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'dummy0\x00', {0x2, 0x0, @rand_addr=0x64010100}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000300)='dummy0:0\x00', 0x9) pread64(r1, &(0x7f0000000400)=""/9, 0x9, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001000)={0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}) 3.592179728s ago: executing program 4 (id=96): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = accept$inet(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='ms_mode=legacy\x00') write(r1, &(0x7f0000000500)="6365706820763032370000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ffffffffffffffff0100000001000000000000000000000000070100000000000000000000000000000004000000000000000000000000006400000000000100"/366, 0x169) nanosleep(&(0x7f0000000600)={0x1}, 0x0) 2.098379886s ago: executing program 1 (id=97): r0 = socket(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000100)="66696c74657200000000000000000000000000000000000000000000000000000e0000000200000058010000000000000000000000000000000000000000000000000000c0000000c0000000c000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c00000000000000000000000000000000000000000002800636f6e6e6c6162656c0000000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff", 0x1b8) sendto$inet(r0, &(0x7f0000000800)='hello\x00', 0x5, 0x0, &(0x7f0000000900)={0x2, 0x1234, @loopback}, 0x10) 981.975195ms ago: executing program 4 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x54}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@ipv4_newroute={0x48, 0x18, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @remote={0xa, 0x0, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x48}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000500)="1234567890", 0xa, 0x0, &(0x7f0000000600)={0x2, 0x1234, @remote={0xa, 0x0, 0x0, 0x1}}, 0x10) 0s ago: executing program 1 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x2, 0x605, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0x2, 0x605, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0x2, 0x605, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0x8, 0x3, "00050000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}}}, 0xec}}, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x1f90, @loopback}, 0x10) kernel console output (not intermixed with test programs): t=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.592824][ T28] audit: type=1400 audit(1785768252.488:99): avc: denied { noatsecure } for pid=3170 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.612784][ T28] audit: type=1400 audit(1785768252.488:100): avc: denied { write } for pid=3170 comm="sh" path="pipe:[2606]" dev="pipefs" ino=2606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.635305][ T28] audit: type=1400 audit(1785768252.488:101): avc: denied { rlimitinh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.654403][ T28] audit: type=1400 audit(1785768252.488:102): avc: denied { siginh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.657965][ T28] audit: type=1400 audit(1785768254.568:103): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.680051][ T28] audit: type=1400 audit(1785768254.568:104): avc: denied { search } for pid=3180 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.953402][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 24.953419][ T28] audit: type=1400 audit(1785768255.868:114): avc: denied { write } for pid=3195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.987962][ T28] audit: type=1400 audit(1785768255.898:115): avc: denied { write } for pid=3206 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.333281][ T28] audit: type=1400 audit(1785768256.248:116): avc: denied { write } for pid=3209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.363602][ T28] audit: type=1400 audit(1785768256.278:117): avc: denied { write } for pid=3220 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.562657][ T28] audit: type=1400 audit(1785768256.478:118): avc: denied { write } for pid=3223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.592828][ T28] audit: type=1400 audit(1785768256.508:119): avc: denied { write } for pid=3234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.667547][ T28] audit: type=1400 audit(1785768256.578:120): avc: denied { write } for pid=3237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.697517][ T28] audit: type=1400 audit(1785768256.608:121): avc: denied { write } for pid=3248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.804844][ T28] audit: type=1400 audit(1785768256.718:122): avc: denied { write } for pid=3251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.835065][ T28] audit: type=1400 audit(1785768256.748:123): avc: denied { write } for pid=3262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 30.696676][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 30.696694][ T28] audit: type=1400 audit(1785768261.608:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.726002][ T28] audit: type=1400 audit(1785768261.638:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.728428][ T3285] cgroup: Unknown subsys name 'net' [ 30.753983][ T28] audit: type=1400 audit(1785768261.668:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.850945][ T3285] cgroup: Unknown subsys name 'cpuset' [ 30.857294][ T3285] cgroup: Unknown subsys name 'rlimit' [ 30.968096][ T28] audit: type=1400 audit(1785768261.878:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.991624][ T28] audit: type=1400 audit(1785768261.878:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.022119][ T28] audit: type=1400 audit(1785768261.878:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.042878][ T28] audit: type=1400 audit(1785768261.878:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.063473][ T28] audit: type=1400 audit(1785768261.878:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.063525][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.089016][ T28] audit: type=1400 audit(1785768261.878:135): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.117943][ T28] audit: type=1400 audit(1785768261.878:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.151323][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.438875][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.446103][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.453308][ T3304] bridge_slave_0: entered allmulticast mode [ 33.459961][ T3304] bridge_slave_0: entered promiscuous mode [ 33.470585][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.477814][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.485067][ T3308] bridge_slave_0: entered allmulticast mode [ 33.491709][ T3308] bridge_slave_0: entered promiscuous mode [ 33.508252][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.515415][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.522672][ T3304] bridge_slave_1: entered allmulticast mode [ 33.529502][ T3304] bridge_slave_1: entered promiscuous mode [ 33.540610][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.547691][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.554892][ T3308] bridge_slave_1: entered allmulticast mode [ 33.561377][ T3308] bridge_slave_1: entered promiscuous mode [ 33.587421][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.594561][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.601735][ T3298] bridge_slave_0: entered allmulticast mode [ 33.608336][ T3298] bridge_slave_0: entered promiscuous mode [ 33.631794][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.638933][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.646134][ T3298] bridge_slave_1: entered allmulticast mode [ 33.652697][ T3298] bridge_slave_1: entered promiscuous mode [ 33.665164][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.678273][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.693282][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.702526][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.709674][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.717025][ T3300] bridge_slave_0: entered allmulticast mode [ 33.723578][ T3300] bridge_slave_0: entered promiscuous mode [ 33.731229][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.754438][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.761559][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.768814][ T3300] bridge_slave_1: entered allmulticast mode [ 33.775409][ T3300] bridge_slave_1: entered promiscuous mode [ 33.792653][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.820064][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.827215][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.834442][ T3299] bridge_slave_0: entered allmulticast mode [ 33.840796][ T3299] bridge_slave_0: entered promiscuous mode [ 33.848425][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.858720][ T3308] team0: Port device team_slave_0 added [ 33.865580][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.875635][ T3304] team0: Port device team_slave_0 added [ 33.881584][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.888677][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.895915][ T3299] bridge_slave_1: entered allmulticast mode [ 33.902504][ T3299] bridge_slave_1: entered promiscuous mode [ 33.914072][ T3308] team0: Port device team_slave_1 added [ 33.920767][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.935201][ T3304] team0: Port device team_slave_1 added [ 33.971472][ T3298] team0: Port device team_slave_0 added [ 33.982781][ T3300] team0: Port device team_slave_0 added [ 33.994177][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.003979][ T3298] team0: Port device team_slave_1 added [ 34.014455][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.021525][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.047493][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.059398][ T3300] team0: Port device team_slave_1 added [ 34.070166][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.077135][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.103125][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.114886][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.133337][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.140470][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.166485][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.182377][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.189394][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.215412][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.231201][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.238279][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.264326][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.278432][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.285569][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.311590][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.325493][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.332630][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.358734][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.370433][ T3299] team0: Port device team_slave_0 added [ 34.376376][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.383384][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.409383][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.445975][ T3299] team0: Port device team_slave_1 added [ 34.464420][ T3298] hsr_slave_0: entered promiscuous mode [ 34.470543][ T3298] hsr_slave_1: entered promiscuous mode [ 34.488488][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.495524][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.521533][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.532878][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.539905][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.565909][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.598500][ T3304] hsr_slave_0: entered promiscuous mode [ 34.604804][ T3304] hsr_slave_1: entered promiscuous mode [ 34.611082][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.616933][ T3304] Cannot create hsr debugfs directory [ 34.633355][ T3308] hsr_slave_0: entered promiscuous mode [ 34.639540][ T3308] hsr_slave_1: entered promiscuous mode [ 34.645528][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 34.651301][ T3308] Cannot create hsr debugfs directory [ 34.672775][ T3300] hsr_slave_0: entered promiscuous mode [ 34.679025][ T3300] hsr_slave_1: entered promiscuous mode [ 34.685066][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 34.690838][ T3300] Cannot create hsr debugfs directory [ 34.732194][ T3299] hsr_slave_0: entered promiscuous mode [ 34.738474][ T3299] hsr_slave_1: entered promiscuous mode [ 34.744432][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 34.750275][ T3299] Cannot create hsr debugfs directory [ 34.935170][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.945220][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.953113][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.961766][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.969537][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.978602][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.989086][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.997993][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.018955][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.027870][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.038619][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.047301][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.055378][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.064369][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.074722][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.083490][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.113157][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.122043][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.129661][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.138371][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.146622][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.155396][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.169829][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.178454][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.209920][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.218732][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.226730][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.235504][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.252315][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.261096][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.269316][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.278404][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.307455][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.316457][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.325900][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.335314][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.344905][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.353890][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.362263][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.371235][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.380786][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.415913][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.425188][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.441156][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.448433][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.468840][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.475965][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.486782][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.501366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.508473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.519237][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.532446][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.539541][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.561160][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.578378][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.585499][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.594614][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.601706][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.629337][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.667091][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.679676][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.693383][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.706773][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.713938][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.723016][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.730111][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.750890][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.768777][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.775923][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.800287][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.807530][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.996411][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.036654][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.058566][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.143213][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.163183][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.189286][ T3298] veth0_vlan: entered promiscuous mode [ 36.215173][ T3298] veth1_vlan: entered promiscuous mode [ 36.251141][ T3304] veth0_vlan: entered promiscuous mode [ 36.270019][ T3304] veth1_vlan: entered promiscuous mode [ 36.288512][ T3298] veth0_macvtap: entered promiscuous mode [ 36.296808][ T3298] veth1_macvtap: entered promiscuous mode [ 36.323768][ T3304] veth0_macvtap: entered promiscuous mode [ 36.342565][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.353477][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.388033][ T3304] veth1_macvtap: entered promiscuous mode [ 36.417492][ T3299] veth0_vlan: entered promiscuous mode [ 36.430106][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.447448][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 36.447467][ T28] audit: type=1400 audit(1785768267.358:146): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.DhdvDj/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.456811][ T1871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.484140][ T28] audit: type=1400 audit(1785768267.358:147): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.514068][ T28] audit: type=1400 audit(1785768267.358:148): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.DhdvDj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.523420][ T3299] veth1_vlan: entered promiscuous mode [ 36.540998][ T28] audit: type=1400 audit(1785768267.368:149): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.566930][ T28] audit: type=1400 audit(1785768267.368:150): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.DhdvDj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.595724][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.608396][ T3300] veth0_vlan: entered promiscuous mode [ 36.615884][ T28] audit: type=1400 audit(1785768267.368:151): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.DhdvDj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.620328][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.647423][ T28] audit: type=1400 audit(1785768267.368:152): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.653238][ T3308] veth0_vlan: entered promiscuous mode [ 36.672840][ T28] audit: type=1400 audit(1785768267.408:153): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.690103][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.698539][ T28] audit: type=1400 audit(1785768267.408:154): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="gadgetfs" ino=3915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.708716][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.748018][ T28] audit: type=1400 audit(1785768267.658:155): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.766912][ T3300] veth1_vlan: entered promiscuous mode [ 36.781834][ T3299] veth0_macvtap: entered promiscuous mode [ 36.794367][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.803089][ T3308] veth1_vlan: entered promiscuous mode [ 36.822230][ T3299] veth1_macvtap: entered promiscuous mode [ 36.845056][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.864047][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.871639][ T177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.897888][ T3300] veth0_macvtap: entered promiscuous mode [ 36.906216][ T3300] veth1_macvtap: entered promiscuous mode [ 36.921429][ T364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.944160][ T3308] veth0_macvtap: entered promiscuous mode [ 36.959738][ T3308] veth1_macvtap: entered promiscuous mode [ 36.970850][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.990403][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.005115][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.015009][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.023016][ T1871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.045118][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.120331][ T364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.195630][ T3520] tipc: Started in network mode [ 37.227041][ T3520] tipc: Node identity 7f000001, cluster identity 4711 [ 37.241045][ T3520] tipc: New replicast peer: 127.0.0.1 [ 37.246683][ T3520] tipc: Enabled bearer , priority 10 [ 37.270021][ T364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.306565][ T3534] tipc: Disabling bearer [ 37.329996][ T54] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.338879][ T54] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.365436][ T3537] netlink: 'syz.3.14': attribute type 2 has an invalid length. [ 37.379761][ T3537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 37.429866][ T54] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.447847][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.501137][ T364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.520709][ T364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.560152][ T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.600432][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.612523][ T3555] syz.1.21 (3555) used greatest stack depth: 11352 bytes left [ 37.621264][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.634678][ T54] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.903620][ T3588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.912611][ T3588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.943831][ T3586] syz.4.32 (3586) used greatest stack depth: 10984 bytes left [ 37.980582][ T1871] netdevsim netdevsim11 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.029964][ T49] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.614049][ T3615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 38.637627][ T3615] bridge0: port 3(veth0) entered blocking state [ 38.644587][ T3615] bridge0: port 3(veth0) entered disabled state [ 38.665323][ T3615] veth0: entered allmulticast mode [ 38.677056][ T3615] veth0: entered promiscuous mode [ 38.694450][ T3615] bridge0: port 3(veth0) entered blocking state [ 38.700822][ T3615] bridge0: port 3(veth0) entered forwarding state [ 38.745253][ T3621] lo speed is unknown, defaulting to 1000 [ 38.751298][ T3621] lo speed is unknown, defaulting to 1000 [ 38.763818][ T3621] lo speed is unknown, defaulting to 1000 [ 38.771584][ T3621] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.780527][ T3621] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 38.792011][ T3621] lo speed is unknown, defaulting to 1000 [ 38.806548][ T3621] lo speed is unknown, defaulting to 1000 [ 38.813378][ T3621] lo speed is unknown, defaulting to 1000 [ 38.819666][ T3621] lo speed is unknown, defaulting to 1000 [ 38.831581][ T3627] rdma_op ffff88811b528180 conn xmit_rdma 0000000000000000 [ 38.841819][ T3621] lo speed is unknown, defaulting to 1000 [ 38.851877][ T3619] lo speed is unknown, defaulting to 1000 [ 38.858607][ T3619] lo speed is unknown, defaulting to 1000 [ 38.865176][ T3619] lo speed is unknown, defaulting to 1000 [ 38.917206][ T3619] infiniband syz0: set active [ 38.922226][ T3385] lo speed is unknown, defaulting to 1000 [ 38.929052][ T3619] infiniband syz0: added lo [ 38.976575][ T3619] RDS/IB: syz0: added [ 39.019098][ T3619] smc: adding ib device syz0 with port count 1 [ 39.057896][ T3619] smc: ib device syz0 port 1 has no pnetid [ 39.065851][ T3635] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 39.083736][ T3619] lo speed is unknown, defaulting to 1000 [ 39.092452][ T3635] IPVS: BACKUP, Dropping buffer, Err: -20 in decoding [ 39.121691][ T3385] lo speed is unknown, defaulting to 1000 [ 39.180825][ T3619] lo speed is unknown, defaulting to 1000 [ 39.226230][ T3619] lo speed is unknown, defaulting to 1000 [ 39.271499][ T3619] lo speed is unknown, defaulting to 1000 [ 39.316721][ T3619] lo speed is unknown, defaulting to 1000 [ 39.361198][ T3619] lo speed is unknown, defaulting to 1000 [ 39.466915][ T3647] xt_connbytes: Forcing CT accounting to be enabled [ 39.493655][ T3640] lo speed is unknown, defaulting to 1000 [ 39.501557][ T3634] rdma_rxe: rxe_newlink: failed to add lo [ 39.603869][ T3649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 39.699449][ T3621] syz.0.45 (3621) used greatest stack depth: 10736 bytes left [ 39.733386][ T3656] Zero length message leads to an empty skb [ 39.746447][ T3619] syz.0.45 (3619) used greatest stack depth: 10368 bytes left [ 40.255274][ T3682] rdma_rxe: rxe_newlink: failed to add lo [ 40.328521][ T3689] rdma_rxe: rxe_newlink: failed to add lo [ 40.348400][ T3689] siw: device registration error -23 [ 40.373243][ T3691] lo speed is unknown, defaulting to 1000 [ 40.379556][ T3689] rdma_op ffff88811b52b580 conn xmit_rdma 0000000000000000 [ 40.394082][ T3691] lo speed is unknown, defaulting to 1000 [ 40.552106][ T3705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 40.579035][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 40.642963][ T3709] x_tables: duplicate underflow at hook 2 [ 40.918755][ T3721] netlink: 56 bytes leftover after parsing attributes in process `syz.0.81'. [ 40.947057][ T3725] rdma_rxe: rxe_newlink: failed to add lo [ 40.995270][ T3730] siw: device registration error -23 [ 41.001882][ T3730] rdma_op ffff88811b529d80 conn xmit_rdma 0000000000000000 [ 41.052770][ T3727] rdma_rxe: rxe_newlink: failed to add lo [ 41.964864][ T3737] krb5: get_Ke failed -4 [ 44.149549][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 44.149569][ T28] audit: type=1400 audit(1785768275.058:239): avc: denied { prog_load } for pid=3765 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.437079][ T28] audit: type=1400 audit(1785768275.158:240): avc: denied { bpf } for pid=3765 comm="syz.3.88" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.628915][ T28] audit: type=1400 audit(1785768275.158:241): avc: denied { perfmon } for pid=3765 comm="syz.3.88" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.828870][ T28] audit: type=1400 audit(1785768275.538:242): avc: denied { prog_run } for pid=3765 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.055311][ T28] audit: type=1400 audit(1785768275.648:243): avc: denied { map_create } for pid=3765 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.182116][ T28] audit: type=1400 audit(1785768275.698:244): avc: denied { map_read map_write } for pid=3765 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.471504][ T3781] rdma_rxe: rxe_newlink: failed to add lo [ 46.972038][ T28] audit: type=1400 audit(1785768277.858:245): avc: denied { create } for pid=3784 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.071011][ T28] audit: type=1400 audit(1785768277.978:246): avc: denied { connect } for pid=3784 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.425482][ T3789] lo speed is unknown, defaulting to 1000 [ 52.563892][ T3789] lo speed is unknown, defaulting to 1000 [ 104.486315][ T177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.564535][ T177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.180335][ T177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.100239][ T177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.588029][ T177] bridge_slave_1: left allmulticast mode [ 153.622188][ T177] bridge_slave_1: left promiscuous mode [ 153.704414][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.871735][ T177] bridge_slave_0: left allmulticast mode [ 153.896786][ T177] bridge_slave_0: left promiscuous mode [ 153.975241][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.499855][ C0] ================================================================== [ 159.508032][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 159.515303][ C0] [ 159.517651][ C0] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 1: [ 159.525739][ C0] wq_worker_tick+0x64/0x240 [ 159.530380][ C0] sched_tick+0xbc/0x1f0 [ 159.534654][ C0] update_process_times+0x15e/0x190 [ 159.539897][ C0] tick_nohz_handler+0x227/0x380 [ 159.544867][ C0] __hrtimer_run_queues+0x1f8/0x510 [ 159.550112][ C0] hrtimer_interrupt+0x257/0x810 [ 159.555095][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 159.561036][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 159.566722][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 159.572735][ C0] __tsan_read8+0x12/0x190 [ 159.577192][ C0] nf_hook_slow+0x64/0x180 [ 159.581657][ C0] ip_local_deliver+0x199/0x1e0 [ 159.586553][ C0] ip_rcv_finish+0x188/0x1a0 [ 159.591192][ C0] ip_rcv+0x62/0x160 [ 159.595175][ C0] process_backlog+0x333/0x680 [ 159.599977][ C0] __napi_poll+0x61/0x300 [ 159.604345][ C0] net_rx_action+0x456/0x930 [ 159.608971][ C0] handle_softirqs+0xb9/0x280 [ 159.613693][ C0] do_softirq+0x45/0x60 [ 159.617884][ C0] __local_bh_enable_ip+0x70/0x80 [ 159.622941][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 159.627933][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 159.633801][ C0] process_scheduled_works+0x4d4/0x9a0 [ 159.639312][ C0] worker_thread+0x569/0x750 [ 159.643960][ C0] kthread+0x221/0x270 [ 159.648063][ C0] ret_from_fork+0x146/0x330 [ 159.652690][ C0] ret_from_fork_asm+0x1a/0x30 [ 159.657506][ C0] [ 159.659860][ C0] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 0: [ 159.667956][ C0] wq_worker_tick+0x64/0x240 [ 159.672597][ C0] sched_tick+0xbc/0x1f0 [ 159.676868][ C0] update_process_times+0x15e/0x190 [ 159.682096][ C0] tick_nohz_handler+0x227/0x380 [ 159.687064][ C0] __hrtimer_run_queues+0x1f8/0x510 [ 159.692310][ C0] hrtimer_interrupt+0x257/0x810 [ 159.697304][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 159.703229][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 159.708929][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 159.714959][ C0] __tsan_read4+0x12/0x190 [ 159.719439][ C0] nft_do_chain+0xb1c/0xde0 [ 159.723996][ C0] nft_do_chain_ipv4+0x14e/0x180 [ 159.728983][ C0] nf_hook_slow+0x78/0x180 [ 159.733451][ C0] __ip_local_out+0x2fd/0x320 [ 159.738162][ C0] ip_local_out+0x28/0xd0 [ 159.742520][ C0] synproxy_send_tcp+0x293/0x2e0 [ 159.747497][ C0] synproxy_send_client_synack+0x55e/0x5b0 [ 159.753345][ C0] nft_synproxy_eval_v4+0x21f/0x270 [ 159.758592][ C0] nft_synproxy_do_eval+0x1cf/0x270 [ 159.763828][ C0] nft_synproxy_eval+0x29/0x40 [ 159.768638][ C0] nft_do_chain+0x1ff/0xde0 [ 159.773193][ C0] nft_do_chain_ipv4+0x14e/0x180 [ 159.778174][ C0] nf_hook_slow+0x78/0x180 [ 159.782637][ C0] ip_local_deliver+0x199/0x1e0 [ 159.787538][ C0] ip_rcv_finish+0x188/0x1a0 [ 159.792175][ C0] ip_rcv+0x62/0x160 [ 159.796112][ C0] process_backlog+0x333/0x680 [ 159.800904][ C0] __napi_poll+0x61/0x300 [ 159.805255][ C0] net_rx_action+0x456/0x930 [ 159.809877][ C0] handle_softirqs+0xb9/0x280 [ 159.814587][ C0] do_softirq+0x45/0x60 [ 159.818773][ C0] __local_bh_enable_ip+0x70/0x80 [ 159.823834][ C0] __alloc_skb+0x6b1/0x6f0 [ 159.828293][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 159.833981][ C0] process_scheduled_works+0x4d4/0x9a0 [ 159.839480][ C0] worker_thread+0x569/0x750 [ 159.844107][ C0] kthread+0x221/0x270 [ 159.848203][ C0] ret_from_fork+0x146/0x330 [ 159.852834][ C0] ret_from_fork_asm+0x1a/0x30 [ 159.857641][ C0] [ 159.859988][ C0] value changed: 0x000000000278a120 -> 0x000000000278c830 [ 159.867114][ C0] [ 159.869464][ C0] Reported by Kernel Concurrency Sanitizer on: [ 159.875663][ C0] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.884981][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.895064][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 159.901880][ C0] ==================================================================