last executing test programs: 9.726171361s ago: executing program 2 (id=1019): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x853}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x1, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0xfdef) ftruncate(r0, 0x7000000) 8.372128218s ago: executing program 2 (id=1024): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001d80)='ns/mnt\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.185683888s ago: executing program 2 (id=1042): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0x9a3}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000540)}], 0x2}}, {{&(0x7f0000001e40)={0xa, 0x4e22, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, 0x0}}], 0x2, 0x40000) shutdown(r1, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) recvmmsg$unix(r2, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002480)=""/3, 0x3}], 0x1}}], 0x1, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000200), 0xfe, 0x46e, &(0x7f00000007c0)="$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") 7.104845341s ago: executing program 2 (id=1035): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.24571352s ago: executing program 0 (id=1048): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x100, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x10002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000090) 5.142581133s ago: executing program 0 (id=1049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 4.655985474s ago: executing program 0 (id=1060): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x1, 0x30e, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x52) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 4.134214396s ago: executing program 3 (id=1057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c068, 0x9, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee01, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010700000000000000"], 0x38}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f000009ddc0), 0x20100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f000009de00)={{0x3, 0x80}, {0x0, 0x2}, 0xbde, 0x5, 0x4}) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3a03000000001e00"], 0x8) r4 = fcntl$dupfd(r0, 0x406, r0) connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 4.05655829s ago: executing program 3 (id=1059): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x100, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x10002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000090) 4.002634372s ago: executing program 3 (id=1061): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000280)={[{@mb_optimize_scan}, {@init_itable}, {@bsdgroups}]}, 0xff, 0xbd9, &(0x7f0000000300)="$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") r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[], 0xfebc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3.606595818s ago: executing program 1 (id=1063): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\x03\x00\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x81, @vifc_lcl_ifindex, @broadcast}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x4000000, 0xffffffff}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x2c}}, 0x30004004) 3.606253868s ago: executing program 3 (id=1064): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0x9a3}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000540)}], 0x2}}, {{&(0x7f0000001e40)={0xa, 0x4e22, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, 0x0}}], 0x2, 0x40000) shutdown(r1, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) recvmmsg$unix(r2, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002480)=""/3, 0x3}], 0x1}}], 0x1, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000200), 0xfe, 0x46e, &(0x7f00000007c0)="$eJzs3MtvVFUYAPDvTjst5WEr4gMEra9IfLS0PGThBqOJC01MdIFxNZZCkIEaWhMgRNEYXBoS98aliX+BG3Fj1JWJW90bE0LYSFxdc2fuHcYyM+20U0aZ3y+55Zy5Zzjnu+ce5sw53AYwsCazH0nE1oj4LSLG69l/F5is/3HzxlhEXJxLIk3fvJ7Uyv114+JcUbR435Z6Jh3qUO/ldyIq1er82Tw/vXT6/enF8xeeP3m6cmL+xPyZ2cOHD+zfM3Jo9mBP4tyWtXXXhwu7d7769pXX545eefenb7L2bs3PN8fRK5P1q9vSU9mPUq9r7J9tTelkuI8NoSvZGM26q1wb/+MxFGONc+Pxyid9bRywodK0lI62P30pTdN0U60ccPdJjG0YUMUHffb9tzhWP3vYut7pR99dOxKNdYyb+VE/M9z4el7ewPonI+Lopb+/zI7YoHUIAIBmV49ExHOt5n+leKCp3D353tBERNwbEdsj4r6I2BER90fUyj4YEQ91Wf/yHZLb5z/p+JoCW6Vs/vdibW9r+fyvsTkzMZTnttXiT+L4yer8vvya7I3yaJaf6VDH9y//+nm7c83zv+zI6i/mgnk7/hxetkB3rFKurCfmZtc+johkokX8SRTbONn8eGdE7Ory7y72hE4+8/XudmVWjr+DHuwzpV9FPF3v/0uxLP5C0nZ/cuaFQ7MHpzdFdX7fdHFX3O7nXy6/0a7+dcXfA9euprG55f3fiH8i2RSxeP7Cqdp+7WL3dVz+/bO232nWdv8vVUaSt2rpkfy1c5WlpbMzESPJa7e/PnvrvUX+XGVpJGbq9//eJ1qP/+1x60o8HBHZTbwnIh6JiEfztj8WEY9HxKcd4v/xpSff6z7+DqvyPZTFf2yl/o/m/u8ycb1SHTr1w7fdx1/I+v9ALbU3fyXr/5XiWm0D13PtAAAA4P+iVNvFT0pTjXSpNDVV/z/8O2JzqbqwuPTs8YUPzhyr7/ZPRLlUrHTV14PLSbH+OdGUn12W35+vG38xNFbLT80tVLtdKwZ6a0ub8Z/5o9MDPMDdwfNaMLiMfxhcxj8MLuMfBpfxD4Or1fj/qA/tAO68FT7/x+5UO4A7z/wfBpfxD4PL+IeB1PbZ+NLaH/mXaJEYXemC9ybx3ciGV5EnotT3q1qOiP9E5642UYy6duG0fNfwqn+ZxRoToy1P9e/fJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF76JwAA///jGNH6") 3.531153092s ago: executing program 1 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac9}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x59, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000001c0)="87", 0x1, 0x81, &(0x7f0000000280)={0x11, 0xc, r6, 0x1, 0x5, 0x6, @broadcast}, 0x14) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3a}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)='\a', 0x1}], 0x1}, 0x200480d4) 3.530740181s ago: executing program 3 (id=1066): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000040), 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) ioctl$FITRIM(r0, 0xc0185879, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x7f, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xcf, 0x0, 0x0) io_setup(0x400, 0x0) io_destroy(0x0) 3.421610196s ago: executing program 3 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) 3.317057881s ago: executing program 1 (id=1068): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 3.055383001s ago: executing program 0 (id=1069): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 3.039285612s ago: executing program 1 (id=1071): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x100, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x10002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8000000000000000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000090) 1.66502242s ago: executing program 0 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1.66441823s ago: executing program 1 (id=1073): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x201, &(0x7f0000001500)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x7f, 0x0, 0x30, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0xfffffffffffffffe, 0x6}}}, 0x118) ioctl$sock_FIOSETOWN(r4, 0x8901, 0x0) 1.66235701s ago: executing program 2 (id=1084): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f00000001c0)="01", 0x1) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000380)) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f00000003c0)="f72c83f170f44e9c95d5d54f0f3faa3964629d6a1da23c05ce8b4185e0f3971f280009c344d943ca93632f9f0d2a268b53124aa4f8bb9ac959b9b45140192298ea4840eafd05614ffc34734da0ab7d598f7ac347cccf27f2c7670a6fe8c21a202d582d8b1063958e78b7fc64c7384670", 0x70}, {&(0x7f0000001740)="85f05bddc4b5592960885b4c3adba11e892b7faa54714dff23e652acb86f307b98973882de1a19c5a3b20f7c5452dbb59e696c76c5981b59", 0x38}, {&(0x7f00000018c0)="734abfbfaed5f34bba735a", 0xb}, {&(0x7f0000001900)="20be6f1533579ce0c6a18194e0cb3306a37c8f44496f24bc5c243520324793a53ef5906e4d73b40e281675670ebe0234cb0c390d9ff9d5e78f901b835310369cecec40b087c819a4eb21f7b2d6a5279251f63a5929d4cf8f865d5ca8c0ff559101b671d7a0f2ca32ac13cb004e65df9d518708d6d3ff2b9b5c469f4902e0eeec37101288ac76cf20ed83c11e002bfdf1d34fbd4a615e3fcbe4dca76bca69037e996a8434e1ea76e7", 0xa8}, {&(0x7f00000019c0)="7fa3f8f34e68699dd686c8edde62f798e016ef3c41264a226f93e20fddd07722d2d6294c9bddd9144ebceb407a500e7419d8367ba706", 0x36}, {0x0}, {&(0x7f0000001a40)="ebf62b91612ab6baf20d72a427efaf884943fed988dad70aac5d1bf35d497e359f7c6814ab9ebb4d1f28d2800ab492ef71dd91ead633d549dcd4a9787155e7652355736b59dd5365b95b655c565466b71794908366b6f41b191ae0311c112dd8739949b388cf22af27b0bba9847718b9247809a04375ddc1d4ba1987ea10ca63b6336f29f92f8c6889523c346ac9ef5735de7ee40cc50eb93f6ba7eed4a86e28831c53ebd2192d5ccf203d7ce07c966a1be1d69eb4199976d84fd810179c6c", 0xbf}, {0x0}], 0x8, &(0x7f0000002400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x90, 0x880}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400020e0000002cbd7040fcdbdf2505000600000000000a004e2100000007ff0100000000000000000000000000010100008000000000020001000000000000003a007effff5f05000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.469444058s ago: executing program 4 (id=1074): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1.094689484s ago: executing program 4 (id=1075): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) 936.330601ms ago: executing program 4 (id=1076): syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c672c4e23832f90150ab8568d0c31651713ca5f4a7614bcb04bac8a32f90ae8411029580dec30eaeb30d4500a00000000000007e9d7b285bfc87f477d90463153fb255ba"], 0x1, 0x1045, &(0x7f0000001140)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) clock_gettime(0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'syz_tun\x00', 0x1}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8002, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) 206.272161ms ago: executing program 1 (id=1078): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) poll(0x0, 0x0, 0x3ff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x20000010304, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4ea0, @private=0xa010101}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x40, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40000) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000010701020000000000000000030000010c0007800800018f049e8c4fcd00b554dede19ce06f6e6f2760c00078008000140000000020c000240fffffffffffffff90900010073797a3000000000440007800800014000000004080001400000003c080200000000800008000140"], 0x9c}, 0x1, 0x0, 0x0, 0x44}, 0x24008044) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 206.060101ms ago: executing program 4 (id=1079): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0x9a3}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000540)}], 0x2}}, {{&(0x7f0000001e40)={0xa, 0x4e22, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, 0x0}}], 0x2, 0x40000) shutdown(r1, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) recvmmsg$unix(r2, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002480)=""/3, 0x3}], 0x1}}], 0x1, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000200), 0xfe, 0x46e, &(0x7f00000007c0)="$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") 203.063351ms ago: executing program 0 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8002b00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7", 0x79) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffefff) 128.610495ms ago: executing program 4 (id=1080): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x5474f5c3ec7f6d3}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x17, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.89482ms ago: executing program 4 (id=1081): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 0s ago: executing program 2 (id=1082): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x1, 0x30e, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x52) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): _r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.237537][ T28] audit: type=1400 audit(1778577407.749:128): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.258298][ T28] audit: type=1400 audit(1778577407.749:129): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.277457][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.278863][ T28] audit: type=1400 audit(1778577407.769:130): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.308274][ T28] audit: type=1400 audit(1778577407.769:131): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.333273][ T28] audit: type=1400 audit(1778577407.769:132): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.364631][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.655865][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.663011][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.670204][ T3303] bridge_slave_0: entered allmulticast mode [ 35.676739][ T3303] bridge_slave_0: entered promiscuous mode [ 35.699545][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.706778][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.713961][ T3303] bridge_slave_1: entered allmulticast mode [ 35.720371][ T3303] bridge_slave_1: entered promiscuous mode [ 35.736185][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.743267][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.750624][ T3302] bridge_slave_0: entered allmulticast mode [ 35.757020][ T3302] bridge_slave_0: entered promiscuous mode [ 35.775348][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.782509][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.789734][ T3298] bridge_slave_0: entered allmulticast mode [ 35.796330][ T3298] bridge_slave_0: entered promiscuous mode [ 35.802981][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.810177][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.817390][ T3302] bridge_slave_1: entered allmulticast mode [ 35.823993][ T3302] bridge_slave_1: entered promiscuous mode [ 35.843083][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.850301][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.857532][ T3298] bridge_slave_1: entered allmulticast mode [ 35.864155][ T3298] bridge_slave_1: entered promiscuous mode [ 35.876910][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.890726][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.897993][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.905189][ T3299] bridge_slave_0: entered allmulticast mode [ 35.911646][ T3299] bridge_slave_0: entered promiscuous mode [ 35.928680][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.942306][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.949475][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.956730][ T3299] bridge_slave_1: entered allmulticast mode [ 35.963211][ T3299] bridge_slave_1: entered promiscuous mode [ 35.975734][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.989931][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.997150][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.004258][ T3306] bridge_slave_0: entered allmulticast mode [ 36.010774][ T3306] bridge_slave_0: entered promiscuous mode [ 36.022904][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.033296][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.047644][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.054787][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.062117][ T3306] bridge_slave_1: entered allmulticast mode [ 36.068531][ T3306] bridge_slave_1: entered promiscuous mode [ 36.080953][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.096391][ T3303] team0: Port device team_slave_0 added [ 36.103119][ T3303] team0: Port device team_slave_1 added [ 36.114728][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.143551][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.157832][ T3302] team0: Port device team_slave_0 added [ 36.164421][ T3302] team0: Port device team_slave_1 added [ 36.176209][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.190620][ T3298] team0: Port device team_slave_0 added [ 36.201245][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.208378][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.234398][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.246382][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.261180][ T3298] team0: Port device team_slave_1 added [ 36.276010][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.283212][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.309333][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.326070][ T3299] team0: Port device team_slave_0 added [ 36.332574][ T3299] team0: Port device team_slave_1 added [ 36.343354][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.350366][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.376606][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.399448][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.406569][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.432800][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.443996][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.451129][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.477287][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.492810][ T3306] team0: Port device team_slave_0 added [ 36.499496][ T3306] team0: Port device team_slave_1 added [ 36.510240][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.517264][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.543371][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.570391][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.577427][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.603848][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.636782][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.643797][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.669812][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.689098][ T3302] hsr_slave_0: entered promiscuous mode [ 36.695065][ T3302] hsr_slave_1: entered promiscuous mode [ 36.701501][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.708559][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.734646][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.754778][ T3303] hsr_slave_0: entered promiscuous mode [ 36.761045][ T3303] hsr_slave_1: entered promiscuous mode [ 36.766926][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.772746][ T3303] Cannot create hsr debugfs directory [ 36.783781][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.790833][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.816810][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.838459][ T3298] hsr_slave_0: entered promiscuous mode [ 36.844441][ T3298] hsr_slave_1: entered promiscuous mode [ 36.850416][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 36.856191][ T3298] Cannot create hsr debugfs directory [ 36.915332][ T3299] hsr_slave_0: entered promiscuous mode [ 36.921437][ T3299] hsr_slave_1: entered promiscuous mode [ 36.927409][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 36.933205][ T3299] Cannot create hsr debugfs directory [ 36.949745][ T3306] hsr_slave_0: entered promiscuous mode [ 36.955900][ T3306] hsr_slave_1: entered promiscuous mode [ 36.961840][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 36.967668][ T3306] Cannot create hsr debugfs directory [ 37.142491][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.151357][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.159361][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.168863][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.181245][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.189814][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.205681][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.214446][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.232806][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.242391][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.250062][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.258643][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.266540][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.275105][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.285693][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.294508][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.328684][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.338368][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.353522][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.362481][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.370383][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.379065][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.392203][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.401776][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.426463][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.435094][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.443103][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.452292][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.467265][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.476134][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.483626][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.492838][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.531298][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.544159][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.553197][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.561746][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.571067][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.578999][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.588125][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.595986][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.604896][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.640137][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.653380][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.663707][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.670808][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.685426][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.692577][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.715897][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.728361][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.748674][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.755832][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.764670][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.771770][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.793995][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.805229][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.812316][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.824248][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.843492][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.850580][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.862482][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.879298][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.891956][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.899068][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.925252][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.932395][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.956133][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.980775][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.987986][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.008818][ T946] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.015937][ T946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.140619][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.241746][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.301937][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.323247][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.346416][ T3303] veth0_vlan: entered promiscuous mode [ 38.370926][ T3303] veth1_vlan: entered promiscuous mode [ 38.402838][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.414822][ T3303] veth0_macvtap: entered promiscuous mode [ 38.437012][ T3303] veth1_macvtap: entered promiscuous mode [ 38.461305][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.483050][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.499574][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.509416][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.525122][ T3298] veth0_vlan: entered promiscuous mode [ 38.541989][ T3298] veth1_vlan: entered promiscuous mode [ 38.548332][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.558810][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.589299][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.589315][ T28] audit: type=1400 audit(1778577413.149:143): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.nHp0n0/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.620520][ T28] audit: type=1400 audit(1778577413.179:144): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.643906][ T28] audit: type=1400 audit(1778577413.179:145): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.nHp0n0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.669573][ T3306] veth0_vlan: entered promiscuous mode [ 38.677986][ T3306] veth1_vlan: entered promiscuous mode [ 38.687896][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.691941][ T3298] veth0_macvtap: entered promiscuous mode [ 38.709316][ T28] audit: type=1400 audit(1778577413.179:146): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.732107][ T28] audit: type=1400 audit(1778577413.179:147): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.nHp0n0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.763486][ T28] audit: type=1400 audit(1778577413.179:148): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.nHp0n0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.778876][ T3298] veth1_macvtap: entered promiscuous mode [ 38.809161][ T28] audit: type=1400 audit(1778577413.179:149): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.833963][ T28] audit: type=1400 audit(1778577413.209:150): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.859737][ T28] audit: type=1400 audit(1778577413.209:151): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=3707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.886212][ T28] audit: type=1400 audit(1778577413.359:152): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.905551][ T3299] veth0_vlan: entered promiscuous mode [ 38.931544][ T3306] veth0_macvtap: entered promiscuous mode [ 38.939204][ T3299] veth1_vlan: entered promiscuous mode [ 38.951115][ T3306] veth1_macvtap: entered promiscuous mode [ 38.959426][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.975572][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.002037][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.011330][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.028135][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.036973][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.049599][ T303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.058647][ T303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.068591][ T3302] veth0_vlan: entered promiscuous mode [ 39.077006][ T3299] veth0_macvtap: entered promiscuous mode [ 39.092887][ T3302] veth1_vlan: entered promiscuous mode [ 39.100356][ T3299] veth1_macvtap: entered promiscuous mode [ 39.107550][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.117019][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.132833][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.144794][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.156041][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.185712][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.209610][ T3514] loop1: detected capacity change from 0 to 1764 [ 39.237884][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.261838][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.283984][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.310303][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339138][ T3302] veth0_macvtap: entered promiscuous mode [ 39.365593][ T3302] veth1_macvtap: entered promiscuous mode [ 39.407291][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.442938][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.470685][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.498295][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.513472][ T3518] loop2: detected capacity change from 0 to 8192 [ 39.523321][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.552557][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.908771][ T3532] Zero length message leads to an empty skb [ 39.982265][ T3534] syzkaller0: entered promiscuous mode [ 39.987918][ T3534] syzkaller0: entered allmulticast mode [ 40.008507][ T3537] syzkaller0: entered promiscuous mode [ 40.014131][ T3537] syzkaller0: entered allmulticast mode [ 40.808997][ T3550] syzkaller0: entered promiscuous mode [ 40.814704][ T3550] syzkaller0: entered allmulticast mode [ 41.161438][ T3561] capability: warning: `syz.1.15' uses deprecated v2 capabilities in a way that may be insecure [ 41.868263][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 42.074083][ T3573] syzkaller0: entered promiscuous mode [ 42.084905][ T3573] syzkaller0: entered allmulticast mode [ 42.094245][ T3579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21'. [ 42.113686][ T3579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'. [ 42.123366][ T3579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21'. [ 42.208297][ T3584] tipc: Started in network mode [ 42.213294][ T3584] tipc: Node identity fa4da5421a71, cluster identity 4711 [ 42.223100][ T3584] tipc: Enabled bearer , priority 0 [ 42.234652][ T3584] syzkaller0: entered promiscuous mode [ 42.240217][ T3584] syzkaller0: entered allmulticast mode [ 42.247561][ T30] syzkaller0: tun_net_xmit 70 [ 42.257859][ T3584] tipc: Resetting bearer [ 42.263697][ T3584] syzkaller0: tun_net_xmit 90 [ 42.276187][ T3583] tipc: Resetting bearer [ 42.284335][ T3583] tipc: Disabling bearer [ 42.292322][ T3586] syzkaller0: entered promiscuous mode [ 42.299207][ T3586] syzkaller0: entered allmulticast mode [ 42.308758][ T3586] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) ! [ 42.408755][ T3588] loop0: detected capacity change from 0 to 512 [ 42.452866][ T3588] EXT4-fs (loop0): 1 truncate cleaned up [ 42.466619][ T3588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.629395][ T3593] syzkaller0: entered promiscuous mode [ 42.643569][ T3593] syzkaller0: entered allmulticast mode [ 42.769656][ T3597] loop3: detected capacity change from 0 to 128 [ 42.784627][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.787415][ T3597] ======================================================= [ 42.787415][ T3597] WARNING: The mand mount option has been deprecated and [ 42.787415][ T3597] and is ignored by this kernel. Remove the mand [ 42.787415][ T3597] option from the mount to silence this warning. [ 42.787415][ T3597] ======================================================= [ 43.495529][ T3604] loop0: detected capacity change from 0 to 1024 [ 43.544021][ T3604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.609958][ T3613] syzkaller0: entered promiscuous mode [ 43.620044][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 43.620061][ T28] audit: type=1400 audit(1778577418.179:211): avc: denied { remount } for pid=3602 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.668489][ T3613] syzkaller0: entered allmulticast mode [ 43.723029][ T3604] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 43.928817][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.486596][ T3621] syzkaller0: entered promiscuous mode [ 44.512886][ T3621] syzkaller0: entered allmulticast mode [ 44.960097][ T3638] loop2: detected capacity change from 0 to 512 [ 44.969250][ T3638] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.061085][ T3631] syzkaller0: entered promiscuous mode [ 45.074222][ T3631] syzkaller0: entered allmulticast mode [ 45.120640][ T3646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.41'. [ 45.249325][ T3655] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 45.311558][ T3657] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 45.337897][ T3657] syzkaller0: entered promiscuous mode [ 45.357354][ T3657] syzkaller0: entered allmulticast mode [ 45.397227][ T3657] tipc: Started in network mode [ 45.405908][ T3657] tipc: Node identity ee4e9f157059, cluster identity 4711 [ 45.413260][ T3657] tipc: Enabled bearer , priority 0 [ 45.430677][ T3656] tipc: Resetting bearer [ 45.484299][ T3656] tipc: Disabling bearer [ 45.536007][ T42] Bluetooth: hci0: sending frame failed (-49) [ 45.542311][ T3658] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 45.548213][ T42] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 45.606257][ T3665] loop2: detected capacity change from 0 to 512 [ 45.645615][ T3665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.675874][ T28] audit: type=1400 audit(1778577420.139:212): avc: denied { ioctl } for pid=3664 comm="syz.2.47" path="socket:[5169]" dev="sockfs" ino=5169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.747432][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.756589][ T28] audit: type=1400 audit(1778577420.219:213): avc: denied { write } for pid=3664 comm="syz.2.47" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.798334][ T3672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.818309][ T28] audit: type=1400 audit(1778577420.229:214): avc: denied { create } for pid=3664 comm="syz.2.47" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.840102][ T3672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.869356][ T28] audit: type=1400 audit(1778577420.229:215): avc: denied { write open } for pid=3664 comm="syz.2.47" path="/11/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.877805][ T3674] syzkaller0: entered promiscuous mode [ 45.970968][ T3674] syzkaller0: entered allmulticast mode [ 45.973126][ T28] audit: type=1400 audit(1778577420.259:216): avc: denied { ioctl } for pid=3664 comm="syz.2.47" path="/11/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.037998][ T28] audit: type=1400 audit(1778577420.359:217): avc: denied { read write } for pid=3671 comm="syz.4.49" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.061948][ T28] audit: type=1400 audit(1778577420.359:218): avc: denied { open } for pid=3671 comm="syz.4.49" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.085423][ T28] audit: type=1400 audit(1778577420.359:219): avc: denied { ioctl } for pid=3671 comm="syz.4.49" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.123837][ T3661] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 46.136238][ T3080] IPVS: starting estimator thread 0... [ 46.151160][ T3661] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 46.225915][ T3681] IPVS: using max 2256 ests per chain, 112800 per kthread [ 46.269917][ T28] audit: type=1400 audit(1778577420.829:220): avc: denied { write } for pid=3683 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.517685][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 47.491971][ T3697] loop4: detected capacity change from 0 to 1024 [ 47.689537][ T3697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.977876][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.464165][ T3799] syzkaller0: entered promiscuous mode [ 48.490172][ T3799] syzkaller0: entered allmulticast mode [ 48.795842][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 48.795868][ T28] audit: type=1400 audit(1778577423.329:222): avc: denied { listen } for pid=3812 comm="syz.0.63" lport=56929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.039676][ T28] audit: type=1400 audit(1778577423.349:223): avc: denied { accept } for pid=3812 comm="syz.0.63" lport=56929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.103085][ T28] audit: type=1400 audit(1778577423.539:224): avc: denied { create } for pid=3832 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.359178][ T3845] syz.0.65 (3845) used greatest stack depth: 9760 bytes left [ 49.474390][ T3856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 49.506707][ T3856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 49.539746][ T3861] syzkaller0: entered promiscuous mode [ 49.556077][ T3861] syzkaller0: entered allmulticast mode [ 49.713928][ T3873] loop0: detected capacity change from 0 to 4096 [ 49.747712][ T3873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.831833][ T28] audit: type=1400 audit(1778577424.389:225): avc: denied { load_policy } for pid=3867 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.854346][ T3873] SELinux: policydb magic number 0x6f5f626d does not match expected magic number 0xf97cff8c [ 49.898538][ T3873] SELinux: failed to load policy [ 50.303815][ T3954] loop2: detected capacity change from 0 to 512 [ 50.320659][ T3954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.333544][ T3952] syzkaller0: entered promiscuous mode [ 50.351073][ T3954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.366689][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.389314][ T3952] syzkaller0: entered allmulticast mode [ 50.413668][ T3954] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.494954][ T28] audit: type=1400 audit(1778577425.049:226): avc: denied { write } for pid=3945 comm="syz.2.71" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.579711][ T28] audit: type=1400 audit(1778577425.049:227): avc: denied { read append } for pid=3945 comm="syz.2.71" path="/18/file1/freezer.self_freezing" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.596086][ T3963] netlink: 'syz.4.74': attribute type 1 has an invalid length. [ 51.008045][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.477276][ T28] audit: type=1400 audit(1778577426.039:228): avc: denied { read } for pid=3970 comm="syz.2.76" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.543580][ T28] audit: type=1400 audit(1778577426.039:229): avc: denied { open } for pid=3970 comm="syz.2.76" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.576964][ T3961] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 51.666948][ T28] audit: type=1400 audit(1778577426.219:230): avc: denied { create } for pid=3972 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.713694][ T3964] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 51.735190][ T28] audit: type=1400 audit(1778577426.249:231): avc: denied { write } for pid=3972 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.778749][ T3973] syzkaller0: entered promiscuous mode [ 51.796934][ T3973] syzkaller0: entered allmulticast mode [ 51.937074][ T3976] syzkaller0: entered promiscuous mode [ 51.948714][ T3976] syzkaller0: entered allmulticast mode [ 51.988648][ T3982] tipc: Started in network mode [ 51.997322][ T3982] tipc: Node identity 6a6cb7959f8a, cluster identity 4711 [ 52.018037][ T3982] tipc: Enabled bearer , priority 0 [ 52.040693][ T3982] syzkaller0: entered promiscuous mode [ 52.062627][ T3982] syzkaller0: entered allmulticast mode [ 52.096308][ T3982] tipc: Resetting bearer [ 52.108810][ T3981] tipc: Resetting bearer [ 52.124403][ T3981] tipc: Disabling bearer [ 52.409540][ T3986] loop2: detected capacity change from 0 to 128 [ 52.733211][ T3986] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.983868][ T3986] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.441737][ T4014] syzkaller0: entered promiscuous mode [ 53.459897][ T4014] syzkaller0: entered allmulticast mode [ 53.809843][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 53.809861][ T28] audit: type=1400 audit(1778577428.369:322): avc: denied { read write } for pid=4022 comm="syz.2.96" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.913550][ T28] audit: type=1400 audit(1778577428.399:323): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 53.985419][ T28] audit: type=1400 audit(1778577428.469:324): avc: denied { create } for pid=4015 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 54.016189][ T4021] netlink: 'syz.0.93': attribute type 4 has an invalid length. [ 54.030814][ T28] audit: type=1400 audit(1778577428.469:325): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.074608][ T4041] netlink: 'syz.2.102': attribute type 1 has an invalid length. [ 54.082004][ T28] audit: type=1400 audit(1778577428.539:326): avc: denied { read write } for pid=4036 comm="syz.2.101" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.119138][ T28] audit: type=1400 audit(1778577428.539:327): avc: denied { create } for pid=4036 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 54.143289][ T4041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.230594][ T28] audit: type=1400 audit(1778577428.539:328): avc: denied { open } for pid=4036 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 54.258548][ T4043] veth3: entered allmulticast mode [ 54.279538][ T4043] bond1: (slave veth3): Enslaving as an active interface with an up link [ 54.310173][ T28] audit: type=1400 audit(1778577428.539:329): avc: denied { create } for pid=4036 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 54.330861][ T28] audit: type=1400 audit(1778577428.539:330): avc: denied { create } for pid=4036 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 54.352258][ T28] audit: type=1400 audit(1778577428.539:331): avc: denied { open } for pid=4036 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 54.471373][ T4052] netlink: 'syz.0.93': attribute type 4 has an invalid length. [ 54.675013][ T4016] syz.0.93 (4016) used greatest stack depth: 8752 bytes left [ 55.502198][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 55.974355][ T4106] syzkaller0: entered promiscuous mode [ 55.992918][ T4106] syzkaller0: entered allmulticast mode [ 56.023068][ T4100] netlink: 'syz.4.124': attribute type 4 has an invalid length. [ 56.083581][ T4100] netlink: 'syz.4.124': attribute type 4 has an invalid length. [ 58.454319][ T4146] bridge0: port 3(batadv1) entered blocking state [ 58.462951][ T4146] bridge0: port 3(batadv1) entered disabled state [ 58.469924][ T4146] batadv1: entered allmulticast mode [ 58.476345][ T4146] batadv1: entered promiscuous mode [ 58.828681][ T28] kauditd_printk_skb: 285 callbacks suppressed [ 58.828700][ T28] audit: type=1400 audit(1778577433.389:617): avc: denied { open } for pid=4173 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 58.896003][ T28] audit: type=1400 audit(1778577433.389:618): avc: denied { create } for pid=4173 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 58.936244][ T28] audit: type=1400 audit(1778577433.389:619): avc: denied { prog_load } for pid=4173 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.956691][ T3765] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 58.965940][ T3765] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 58.995725][ T28] audit: type=1400 audit(1778577433.389:620): avc: denied { prog_load } for pid=4173 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.035086][ T28] audit: type=1400 audit(1778577433.419:621): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 59.082491][ T28] audit: type=1400 audit(1778577433.419:622): avc: denied { write } for pid=4171 comm="syz.0.155" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 59.129867][ T28] audit: type=1400 audit(1778577433.439:623): avc: denied { prog_load } for pid=4176 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.137596][ T4144] netlink: 'syz.2.142': attribute type 4 has an invalid length. [ 59.199286][ T28] audit: type=1400 audit(1778577433.439:624): avc: denied { open } for pid=4176 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 59.216904][ T4147] netlink: 'syz.2.142': attribute type 4 has an invalid length. [ 59.260931][ T28] audit: type=1400 audit(1778577433.439:625): avc: denied { open } for pid=4176 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 59.300672][ T28] audit: type=1400 audit(1778577433.439:626): avc: denied { open } for pid=4176 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 60.209189][ T4208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.169'. [ 60.235544][ T4208] 8021q: VLANs not supported on ip6_vti0 [ 61.152653][ T4223] netlink: 'syz.0.176': attribute type 4 has an invalid length. [ 61.175825][ T4242] capability: warning: `syz.3.182' uses 32-bit capabilities (legacy support in use) [ 61.202048][ T4223] netlink: 'syz.0.176': attribute type 4 has an invalid length. [ 63.645206][ T4277] netlink: 'syz.2.194': attribute type 4 has an invalid length. [ 63.879644][ T28] kauditd_printk_skb: 244 callbacks suppressed [ 63.879665][ T28] audit: type=1400 audit(1778577438.439:871): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.918454][ T4288] netlink: 'syz.2.194': attribute type 4 has an invalid length. [ 63.945930][ T28] audit: type=1400 audit(1778577438.509:872): avc: denied { read write } for pid=4289 comm="syz.3.200" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.988708][ T28] audit: type=1400 audit(1778577438.519:873): avc: denied { open } for pid=4289 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 64.030954][ T28] audit: type=1400 audit(1778577438.519:874): avc: denied { prog_load } for pid=4289 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 64.068003][ T28] audit: type=1400 audit(1778577438.579:875): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.095618][ T4292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.201'. [ 64.147541][ T28] audit: type=1400 audit(1778577438.709:876): avc: denied { lock } for pid=4291 comm="syz.3.201" path="socket:[6851]" dev="sockfs" ino=6851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=0 [ 64.180885][ T4292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4292 comm=syz.3.201 [ 64.182951][ T28] audit: type=1400 audit(1778577438.729:877): avc: denied { create } for pid=4291 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 64.244450][ T28] audit: type=1400 audit(1778577438.729:878): avc: denied { create } for pid=4291 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 64.286055][ T28] audit: type=1400 audit(1778577438.739:879): avc: denied { listen } for pid=4291 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=0 [ 64.353210][ T28] audit: type=1400 audit(1778577438.909:880): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.847940][ T4330] syzkaller0: entered promiscuous mode [ 64.854414][ T4330] syzkaller0: entered allmulticast mode [ 65.710756][ T4348] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 65.865515][ T4343] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 65.920444][ T4343] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 66.459050][ T4374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.232'. [ 66.550277][ T4380] syzkaller0: entered promiscuous mode [ 66.562498][ T4380] syzkaller0: entered allmulticast mode [ 66.737276][ T4386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.239'. [ 66.773178][ T4386] geneve2: entered promiscuous mode [ 66.877866][ T4398] syzkaller0: entered promiscuous mode [ 66.891347][ T4398] syzkaller0: entered allmulticast mode [ 67.755655][ T4407] netlink: 'syz.1.248': attribute type 4 has an invalid length. [ 67.817975][ T4407] netlink: 'syz.1.248': attribute type 4 has an invalid length. [ 67.851691][ T4424] syzkaller0: entered promiscuous mode [ 68.484180][ T4440] syzkaller0: entered promiscuous mode [ 68.528751][ T4440] syzkaller0: entered allmulticast mode [ 68.665721][ T4452] team0 (unregistering): Port device team_slave_0 removed [ 68.697773][ T4452] team0 (unregistering): Port device team_slave_1 removed [ 68.739961][ T4454] syzkaller0: entered promiscuous mode [ 68.757472][ T4454] syzkaller0: entered allmulticast mode [ 68.888100][ T28] kauditd_printk_skb: 368 callbacks suppressed [ 68.888142][ T28] audit: type=1400 audit(1778577443.449:1249): avc: denied { create } for pid=4457 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 68.936860][ T4471] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 68.940304][ T28] audit: type=1400 audit(1778577443.479:1250): avc: denied { create } for pid=4467 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 69.004863][ T28] audit: type=1400 audit(1778577443.529:1251): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.068493][ T28] audit: type=1400 audit(1778577443.549:1252): avc: denied { bpf } for pid=4473 comm="syz.4.274" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 69.130622][ T28] audit: type=1400 audit(1778577443.549:1253): avc: denied { open } for pid=4473 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 69.180504][ T28] audit: type=1400 audit(1778577443.549:1254): avc: denied { prog_load } for pid=4473 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.232410][ T28] audit: type=1400 audit(1778577443.559:1255): avc: denied { read write } for pid=4473 comm="syz.4.274" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.295577][ T28] audit: type=1400 audit(1778577443.659:1256): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.362388][ T28] audit: type=1400 audit(1778577443.679:1257): avc: denied { read } for pid=4475 comm="syz.3.275" dev="nsfs" ino=4026532597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 69.424176][ T28] audit: type=1400 audit(1778577443.689:1258): avc: denied { open } for pid=4475 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 69.565230][ T4458] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 69.611723][ T4458] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 69.914991][ T4493] bond1: (slave bond_slave_1): Device is not our slave [ 69.949226][ T4493] bond1: option active_slave: invalid value (bond_slave_1) [ 70.000613][ T4493] bond1 (unregistering): Released all slaves [ 70.500484][ T4511] syzkaller0: entered promiscuous mode [ 70.514818][ T4511] syzkaller0: entered allmulticast mode [ 70.638101][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 70.648226][ T4513] syzkaller0: entered promiscuous mode [ 70.653784][ T4513] syzkaller0: entered allmulticast mode [ 70.744497][ T4517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'. [ 70.762628][ T4517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'. [ 71.187262][ T4543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 71.406426][ T4553] syzkaller0: entered promiscuous mode [ 71.447201][ T4553] syzkaller0: entered allmulticast mode [ 71.601431][ T4531] netlink: 'syz.2.295': attribute type 4 has an invalid length. [ 71.626527][ T4531] netlink: 'syz.2.295': attribute type 4 has an invalid length. [ 71.936628][ T4561] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 71.961709][ T4561] syzkaller0: entered promiscuous mode [ 71.974130][ T4561] syzkaller0: entered allmulticast mode [ 72.543817][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.743422][ T4589] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 72.757981][ T4589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.777918][ T4589] bond1: (slave ip6gretap1): making interface the new active one [ 72.787425][ T4589] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 73.296250][ T4598] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 73.313716][ T4598] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 73.736608][ T4612] syzkaller0: entered promiscuous mode [ 73.751888][ T4612] syzkaller0: entered allmulticast mode [ 73.905804][ T28] kauditd_printk_skb: 271 callbacks suppressed [ 73.905821][ T28] audit: type=1400 audit(1778577448.459:1530): avc: denied { prog_load } for pid=4616 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.975808][ T28] audit: type=1400 audit(1778577448.489:1531): avc: denied { prog_load } for pid=4616 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 74.005974][ T28] audit: type=1400 audit(1778577448.489:1532): avc: denied { open } for pid=4616 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 74.048205][ T28] audit: type=1400 audit(1778577448.489:1533): avc: denied { open } for pid=4616 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 74.096792][ T28] audit: type=1400 audit(1778577448.489:1534): avc: denied { read } for pid=4616 comm="syz.0.327" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 74.151330][ T28] audit: type=1400 audit(1778577448.489:1535): avc: denied { open } for pid=4616 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 74.176245][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 74.209614][ T4624] xfrm1: entered promiscuous mode [ 74.227128][ T4624] xfrm1: entered allmulticast mode [ 74.235814][ T28] audit: type=1400 audit(1778577448.489:1536): avc: denied { create } for pid=4616 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 74.245436][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 74.292278][ T28] audit: type=1400 audit(1778577448.489:1537): avc: denied { create } for pid=4616 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 74.339929][ T28] audit: type=1400 audit(1778577448.519:1538): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.396335][ T28] audit: type=1400 audit(1778577448.599:1539): avc: denied { open } for pid=4618 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 74.471647][ T4640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 74.591215][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.598663][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.667229][ T4647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.685089][ T4647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.736308][ T3769] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.757666][ T3769] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.791655][ T3769] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.811083][ T3769] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.890614][ T4657] syzkaller0: entered promiscuous mode [ 74.907065][ T4657] syzkaller0: entered allmulticast mode [ 75.075450][ T4649] netlink: 'syz.1.340': attribute type 4 has an invalid length. [ 75.099061][ T4649] netlink: 'syz.1.340': attribute type 4 has an invalid length. [ 75.277905][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 75.317246][ T4665] team0: Port device team_slave_0 removed [ 75.417362][ T4670] 8021q: VLANs not supported on sit0 [ 75.638894][ T4682] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 75.678883][ T4685] netlink: 'syz.2.355': attribute type 13 has an invalid length. [ 75.692866][ T4682] bond1: (slave geneve2): making interface the new active one [ 75.706339][ T4682] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 75.725822][ T3765] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.746208][ T3765] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.890466][ T3765] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.899580][ T3765] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.927377][ T4689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.958722][ T4696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.357'. [ 76.010749][ T4698] netlink: 44 bytes leftover after parsing attributes in process `syz.3.358'. [ 76.214748][ T4713] netlink: 84 bytes leftover after parsing attributes in process `syz.2.365'. [ 76.602381][ T4710] netlink: 'syz.3.364': attribute type 4 has an invalid length. [ 76.642603][ T4710] netlink: 'syz.3.364': attribute type 4 has an invalid length. [ 76.922253][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.929494][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.034565][ T4739] bridge_slave_0: left allmulticast mode [ 77.055556][ T4739] bridge_slave_0: left promiscuous mode [ 77.073021][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.119796][ T4739] bridge_slave_1: left allmulticast mode [ 77.135936][ T4739] bridge_slave_1: left promiscuous mode [ 77.143187][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.167288][ T4739] bond0: (slave bond_slave_0): Releasing backup interface [ 77.201240][ T4739] bond0: (slave bond_slave_1): Releasing backup interface [ 77.224313][ T4739] team0: Port device team_slave_0 removed [ 77.243110][ T4739] team0: Port device team_slave_1 removed [ 77.259198][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.274493][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.283620][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.300406][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.320378][ T4739] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.659507][ T4754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.961664][ T4759] syzkaller0: entered promiscuous mode [ 77.977585][ T4759] syzkaller0: entered allmulticast mode [ 78.722621][ T4786] netlink: 14 bytes leftover after parsing attributes in process `syz.3.393'. [ 79.217605][ T28] kauditd_printk_skb: 348 callbacks suppressed [ 79.217629][ T28] audit: type=1400 audit(1778577453.779:1888): avc: denied { create } for pid=4778 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 79.220587][ T4779] netlink: 'syz.4.390': attribute type 4 has an invalid length. [ 79.283018][ T4782] netlink: 'syz.4.390': attribute type 4 has an invalid length. [ 79.361751][ T28] audit: type=1400 audit(1778577453.919:1889): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.429021][ T28] audit: type=1400 audit(1778577453.949:1890): avc: denied { create } for pid=4799 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 79.486257][ T28] audit: type=1400 audit(1778577454.009:1891): avc: denied { open } for pid=4799 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 79.534369][ T28] audit: type=1400 audit(1778577454.009:1892): avc: denied { open } for pid=4799 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 79.580086][ T28] audit: type=1400 audit(1778577454.009:1893): avc: denied { prog_load } for pid=4799 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.631693][ T28] audit: type=1400 audit(1778577454.119:1894): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.699044][ T28] audit: type=1400 audit(1778577454.169:1895): avc: denied { open } for pid=4803 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 79.756840][ T4808] netlink: 140 bytes leftover after parsing attributes in process `syz.0.400'. [ 79.761987][ T28] audit: type=1400 audit(1778577454.169:1896): avc: denied { create } for pid=4803 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 79.851505][ T28] audit: type=1400 audit(1778577454.169:1897): avc: denied { allowed } for pid=4803 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 80.129619][ T4827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 80.200231][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 80.230115][ T4830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.409'. [ 80.298467][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 80.315853][ T4830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.409'. [ 80.326337][ T3785] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.344899][ T3785] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.366268][ T3785] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.380691][ T3785] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.087452][ T4832] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 81.106851][ T4832] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 81.540523][ T4838] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 81.571862][ T4838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.634816][ T4838] bond2: (slave gretap1): making interface the new active one [ 81.649298][ T4838] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 81.779438][ T4843] syzkaller0: entered promiscuous mode [ 81.792482][ T4843] syzkaller0: entered allmulticast mode [ 82.990536][ T4864] netlink: 'syz.1.423': attribute type 4 has an invalid length. [ 83.029815][ T4864] netlink: 'syz.1.423': attribute type 4 has an invalid length. [ 83.626065][ T4883] syzkaller0: entered promiscuous mode [ 83.666518][ T4883] syzkaller0: entered allmulticast mode [ 83.897426][ T4893] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 83.911567][ T4893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.140670][ T4912] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 84.240198][ T28] kauditd_printk_skb: 214 callbacks suppressed [ 84.240215][ T28] audit: type=1400 audit(1778577458.799:2112): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.313106][ T4918] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4918 comm=syz.4.443 [ 84.382640][ T28] audit: type=1400 audit(1778577458.939:2113): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.434959][ T28] audit: type=1400 audit(1778577458.989:2114): avc: denied { open } for pid=4919 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 84.495859][ T28] audit: type=1400 audit(1778577458.989:2115): avc: denied { allowed } for pid=4919 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 84.524281][ T28] audit: type=1400 audit(1778577458.989:2116): avc: denied { map_create } for pid=4919 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 84.580473][ T28] audit: type=1400 audit(1778577459.019:2117): avc: denied { read write } for pid=4919 comm="syz.4.444" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.649749][ T28] audit: type=1400 audit(1778577459.049:2118): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.690261][ T28] audit: type=1400 audit(1778577459.099:2119): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.717431][ T4909] netlink: 'syz.1.440': attribute type 4 has an invalid length. [ 84.740942][ T28] audit: type=1400 audit(1778577459.099:2120): avc: denied { open } for pid=4921 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 84.762253][ T4909] netlink: 'syz.1.440': attribute type 4 has an invalid length. [ 84.787936][ T28] audit: type=1400 audit(1778577459.119:2121): avc: denied { read } for pid=4921 comm="syz.2.445" dev="nsfs" ino=4026532563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 85.612939][ T3785] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.634935][ T3785] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.658425][ T3785] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.677098][ T3785] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.696869][ T3785] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.719893][ T3785] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.744564][ T3785] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.770962][ T3785] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.868642][ T4946] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 85.886383][ T4946] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 86.010777][ T4948] syzkaller0: entered promiscuous mode [ 86.035852][ T4948] syzkaller0: entered allmulticast mode [ 86.362264][ T4970] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 86.407975][ T4970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.954543][ T4967] netlink: 'syz.0.461': attribute type 4 has an invalid length. [ 87.287525][ T4991] bridge_slave_1: Caught tx_queue_len zero misconfig [ 87.573637][ T5000] syzkaller0: entered promiscuous mode [ 87.595706][ T5000] syzkaller0: entered allmulticast mode [ 87.702790][ T5006] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 87.794848][ T5012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.442459][ T5023] syzkaller0: entered promiscuous mode [ 88.448246][ T5023] syzkaller0: entered allmulticast mode [ 88.719483][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 88.748422][ T5034] netem: change failed [ 89.479288][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 89.479334][ T28] audit: type=1400 audit(1778577464.039:2343): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.526338][ T28] audit: type=1400 audit(1778577464.079:2344): avc: denied { prog_load } for pid=5042 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.545827][ T28] audit: type=1400 audit(1778577464.079:2345): avc: denied { prog_load } for pid=5045 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.565187][ T28] audit: type=1400 audit(1778577464.079:2346): avc: denied { open } for pid=5042 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 89.605905][ T28] audit: type=1400 audit(1778577464.079:2347): avc: denied { create } for pid=5045 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 89.626788][ T28] audit: type=1400 audit(1778577464.149:2348): avc: denied { create } for pid=5045 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 89.648302][ T28] audit: type=1400 audit(1778577464.159:2349): avc: denied { prog_load } for pid=5045 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.695231][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 89.711764][ T28] audit: type=1400 audit(1778577464.159:2350): avc: denied { read } for pid=5045 comm="syz.2.489" dev="nsfs" ino=4026532563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 89.757890][ T28] audit: type=1400 audit(1778577464.159:2351): avc: denied { create } for pid=5045 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 89.826042][ T28] audit: type=1400 audit(1778577464.159:2352): avc: denied { create } for pid=5045 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 89.919562][ T5039] validate_nla: 1 callbacks suppressed [ 89.919580][ T5039] netlink: 'syz.4.487': attribute type 4 has an invalid length. [ 89.969577][ T5039] netlink: 'syz.4.487': attribute type 4 has an invalid length. [ 90.219985][ T5070] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 90.271379][ T3306] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 90.300987][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 90.301056][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.301072][ T3306] Call Trace: [ 90.301086][ T3306] [ 90.301096][ T3306] __dump_stack+0x1d/0x30 [ 90.301121][ T3306] dump_stack_lvl+0x95/0xd0 [ 90.301198][ T3306] dump_stack+0x15/0x1b [ 90.301217][ T3306] dump_header+0x80/0x240 [ 90.301244][ T3306] oom_kill_process+0x295/0x350 [ 90.301276][ T3306] out_of_memory+0x97d/0xb80 [ 90.301392][ T3306] try_charge_memcg+0x62f/0xa10 [ 90.301469][ T3306] ? radix_tree_lookup+0xfa/0x140 [ 90.301501][ T3306] charge_memcg+0x6d/0x120 [ 90.301562][ T3306] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 90.301598][ T3306] __swap_cache_prepare_and_add+0x69/0x4a0 [ 90.301695][ T3306] ? alloc_pages_mpol+0x217/0x260 [ 90.301728][ T3306] swap_cache_alloc_folio+0xa2/0x120 [ 90.301780][ T3306] swap_cluster_readahead+0x25f/0x3c0 [ 90.301808][ T3306] swapin_readahead+0xde/0x840 [ 90.301836][ T3306] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 90.301877][ T3306] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 90.301946][ T3306] ? __rcu_read_unlock+0x4e/0x70 [ 90.301973][ T3306] ? swap_cache_get_folio+0x1e0/0x1f0 [ 90.302029][ T3306] do_swap_page+0x31e/0x2180 [ 90.302135][ T3306] ? __schedule+0x951/0xd40 [ 90.302177][ T3306] ? __rcu_read_lock+0x36/0x50 [ 90.302263][ T3306] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 90.302286][ T3306] handle_mm_fault+0xb2e/0x2e70 [ 90.302311][ T3306] ? vma_start_read+0x1c7/0x2c0 [ 90.302395][ T3306] do_user_addr_fault+0x62f/0x1050 [ 90.302429][ T3306] ? trace_page_fault_user+0x1f/0xa0 [ 90.302460][ T3306] exc_page_fault+0x62/0xa0 [ 90.302508][ T3306] asm_exc_page_fault+0x26/0x30 [ 90.302601][ T3306] RIP: 0033:0x7f171a467f57 [ 90.302620][ T3306] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 90.302681][ T3306] RSP: 002b:00007ffeccc16a90 EFLAGS: 00010202 [ 90.302708][ T3306] RAX: 0000000000000000 RBX: 0000555563b27500 RCX: 00007f171a467f57 [ 90.302726][ T3306] RDX: 00007ffeccc16ad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.302739][ T3306] RBP: 00007ffeccc16b3c R08: 0000000000000000 R09: 0000000000000000 [ 90.302751][ T3306] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 90.302767][ T3306] R13: 00000000000927c0 R14: 0000000000015e14 R15: 00007ffeccc16b90 [ 90.302837][ T3306] [ 90.549598][ T3306] memory: usage 307200kB, limit 307200kB, failcnt 187 [ 90.556733][ T3306] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 90.564660][ T3306] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 90.572676][ T3306] Memory cgroup stats for /syz2: [ 90.573132][ T3306] cache 0 [ 90.581214][ T3306] rss 12288 [ 90.584463][ T3306] shmem 0 [ 90.587714][ T3306] mapped_file 0 [ 90.591233][ T3306] dirty 0 [ 90.594233][ T3306] writeback 12288 [ 90.598583][ T3306] workingset_refault_anon 6172 [ 90.603507][ T3306] workingset_refault_file 502 [ 90.608449][ T3306] swap 229376 [ 90.611972][ T3306] swapcached 32268288 [ 90.616023][ T3306] pgpgin 73786 [ 90.619517][ T3306] pgpgout 73779 [ 90.623044][ T3306] pgfault 87274 [ 90.626640][ T3306] pgmajfault 795 [ 90.630247][ T3306] inactive_anon 28672 [ 90.634295][ T3306] active_anon 0 [ 90.637988][ T3306] inactive_file 0 [ 90.641680][ T3306] active_file 0 [ 90.645192][ T3306] unevictable 0 [ 90.648776][ T3306] hierarchical_memory_limit 314572800 [ 90.666161][ T3306] hierarchical_memsw_limit 9223372036854771712 [ 90.675147][ T3306] total_cache 0 [ 90.682497][ T3306] total_rss 12288 [ 90.687093][ T3306] total_shmem 0 [ 90.690610][ T3306] total_mapped_file 0 [ 90.701033][ T3306] total_dirty 0 [ 90.720144][ T3306] total_writeback 12288 [ 90.728426][ T3306] total_workingset_refault_anon 6172 [ 90.744080][ T3306] total_workingset_refault_file 502 [ 90.751352][ T3306] total_swap 229376 [ 90.761427][ T3306] total_swapcached 32268288 [ 90.771510][ T3306] total_pgpgin 73786 [ 90.779019][ T3306] total_pgpgout 73779 [ 90.793438][ T3306] total_pgfault 87274 [ 90.798255][ T3306] total_pgmajfault 795 [ 90.806728][ T3306] total_inactive_anon 28672 [ 90.817008][ T3306] total_active_anon 0 [ 90.825333][ T3306] total_inactive_file 0 [ 90.842897][ T3306] total_active_file 0 [ 90.854194][ T3306] total_unevictable 0 [ 90.867462][ T3306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.489,pid=5045,uid=0 [ 90.896770][ T3306] Memory cgroup out of memory: Killed process 5045 (syz.2.489) total-vm:94168kB, anon-rss:1252kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 92.094939][ T5110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.513'. [ 92.459239][ T5099] netlink: 'syz.3.509': attribute type 4 has an invalid length. [ 92.513273][ T5099] netlink: 'syz.3.509': attribute type 4 has an invalid length. [ 94.411108][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 94.420226][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'. [ 94.432536][ T5148] netlink: 'syz.4.529': attribute type 4 has an invalid length. [ 94.440532][ T5148] netlink: 152 bytes leftover after parsing attributes in process `syz.4.529'. [ 94.452255][ T5148] .`: renamed from bond0 [ 94.486099][ T28] kauditd_printk_skb: 270 callbacks suppressed [ 94.486114][ T28] audit: type=1400 audit(1778577469.049:2623): avc: denied { prog_load } for pid=5150 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.528315][ T28] audit: type=1400 audit(1778577469.069:2624): avc: denied { wake_alarm } for pid=5150 comm="syz.4.530" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 94.549799][ T28] audit: type=1400 audit(1778577469.079:2625): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.603151][ T28] audit: type=1400 audit(1778577469.159:2626): avc: denied { relabelfrom } for pid=5152 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 94.736873][ T5153] syzkaller0: entered promiscuous mode [ 94.752360][ T5153] syzkaller0: entered allmulticast mode [ 94.808872][ T28] audit: type=1400 audit(1778577469.369:2627): avc: denied { create } for pid=5152 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=0 [ 94.918520][ T28] audit: type=1400 audit(1778577469.479:2628): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.966935][ T5157] netlink: 763 bytes leftover after parsing attributes in process `syz.4.532'. [ 94.985111][ T28] audit: type=1400 audit(1778577469.519:2629): avc: denied { map_create } for pid=5156 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.017787][ T28] audit: type=1400 audit(1778577469.519:2630): avc: denied { open } for pid=5156 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 95.050967][ T28] audit: type=1400 audit(1778577469.519:2631): avc: denied { open } for pid=5156 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 95.087343][ T28] audit: type=1400 audit(1778577469.519:2632): avc: denied { create } for pid=5156 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.801500][ T5159] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 95.834301][ T5159] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 96.253878][ T5187] netlink: 'syz.1.544': attribute type 4 has an invalid length. [ 96.294712][ T5187] netlink: 'syz.1.544': attribute type 4 has an invalid length. [ 96.331521][ T5187] netlink: 'syz.1.544': attribute type 4 has an invalid length. [ 96.391529][ T965] IPVS: starting estimator thread 0... [ 96.482367][ T5197] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 96.484952][ T5200] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 96.500876][ T5193] IPVS: using max 1824 ests per chain, 91200 per kthread [ 96.924055][ T5225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.559'. [ 96.967008][ T5225] netlink: 'syz.2.559': attribute type 29 has an invalid length. [ 96.983329][ T5225] netlink: 44 bytes leftover after parsing attributes in process `syz.2.559'. [ 97.442610][ T5221] netlink: 'syz.3.557': attribute type 4 has an invalid length. [ 97.474935][ T5221] netlink: 'syz.3.557': attribute type 4 has an invalid length. [ 99.225072][ T5282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5282 comm=syz.2.578 [ 99.561297][ T28] kauditd_printk_skb: 334 callbacks suppressed [ 99.561316][ T28] audit: type=1400 audit(1778577730.120:2967): avc: denied { create } for pid=5287 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 99.634764][ T28] audit: type=1400 audit(1778577730.170:2968): avc: denied { create } for pid=5285 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 99.695976][ T28] audit: type=1400 audit(1778577730.200:2969): avc: denied { write } for pid=5285 comm="syz.1.580" name="fib_trie" dev="proc" ino=4026532401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 99.767953][ T5279] syz.4.569 (5279) used greatest stack depth: 8704 bytes left [ 99.802442][ T28] audit: type=1400 audit(1778577730.360:2970): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.877512][ T28] audit: type=1400 audit(1778577730.380:2971): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.959120][ T28] audit: type=1400 audit(1778577730.410:2972): avc: denied { execmem } for pid=5293 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 100.012090][ T28] audit: type=1400 audit(1778577730.470:2973): avc: denied { open } for pid=5293 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 100.069199][ T28] audit: type=1400 audit(1778577730.480:2974): avc: denied { open } for pid=5292 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 100.129288][ T28] audit: type=1400 audit(1778577730.490:2975): avc: denied { open } for pid=5293 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 100.186798][ T28] audit: type=1400 audit(1778577730.490:2976): avc: denied { allowed } for pid=5292 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 100.218690][ T5288] netlink: 'syz.3.581': attribute type 4 has an invalid length. [ 100.269916][ T5289] netlink: 'syz.3.581': attribute type 4 has an invalid length. [ 102.037882][ T5349] vlan2: entered allmulticast mode [ 102.049007][ T5349] bond0: entered allmulticast mode [ 102.060108][ T5349] bond_slave_0: entered allmulticast mode [ 102.072147][ T5349] bond_slave_1: entered allmulticast mode [ 102.087985][ T5350] netlink: 14 bytes leftover after parsing attributes in process `syz.2.600'. [ 102.149807][ T5350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.192218][ T5350] bond_slave_0: left allmulticast mode [ 102.218625][ T5350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.252667][ T5350] bond_slave_1: left allmulticast mode [ 102.276618][ T5350] bond0 (unregistering): Released all slaves [ 102.507302][ T5353] netlink: 'syz.3.599': attribute type 4 has an invalid length. [ 102.547615][ T5359] mmap: syz.2.603 (5359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.572453][ T5353] netlink: 'syz.3.599': attribute type 4 has an invalid length. [ 102.598235][ T5360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.603'. [ 102.720569][ T5362] syzkaller0: entered promiscuous mode [ 102.738333][ T5362] syzkaller0: entered allmulticast mode [ 103.107713][ T5373] lo: Caught tx_queue_len zero misconfig [ 103.175141][ T5378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5378 comm=syz.1.610 [ 103.214823][ T5379] netlink: 68 bytes leftover after parsing attributes in process `syz.2.611'. [ 104.576132][ T28] kauditd_printk_skb: 862 callbacks suppressed [ 104.576154][ T28] audit: type=1400 audit(1778577735.139:3839): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.641091][ T28] audit: type=1400 audit(1778577735.169:3840): avc: denied { open } for pid=5401 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 104.660697][ T28] audit: type=1400 audit(1778577735.169:3841): avc: denied { open } for pid=5401 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 104.682141][ T28] audit: type=1400 audit(1778577735.169:3842): avc: denied { append } for pid=5401 comm="syz.1.620" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 104.705804][ T28] audit: type=1400 audit(1778577735.169:3843): avc: denied { create } for pid=5401 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 104.727022][ T28] audit: type=1400 audit(1778577735.169:3844): avc: denied { create } for pid=5401 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 104.765792][ T28] audit: type=1400 audit(1778577735.169:3845): avc: denied { create } for pid=5401 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 104.808118][ T28] audit: type=1400 audit(1778577735.179:3846): avc: denied { read write } for pid=5401 comm="syz.1.620" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.865408][ T28] audit: type=1400 audit(1778577735.189:3847): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.929941][ T28] audit: type=1400 audit(1778577735.199:3848): avc: denied { allowed } for pid=5403 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 105.491168][ T5418] netlink: 'syz.3.626': attribute type 7 has an invalid length. [ 105.611389][ T5414] netlink: 'syz.4.624': attribute type 4 has an invalid length. [ 105.930028][ T5426] netlink: 'syz.4.624': attribute type 4 has an invalid length. [ 106.817372][ T5471] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 106.817372][ T5471] The task syz.4.642 (5471) triggered the difference, watch for misbehavior. [ 107.106720][ T5473] netlink: 'syz.3.645': attribute type 4 has an invalid length. [ 107.118689][ T5473] netlink: 'syz.3.645': attribute type 4 has an invalid length. [ 107.173754][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 107.822168][ T5487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5487 comm=syz.3.651 [ 107.873634][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 107.873697][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 107.949783][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 109.100110][ T5518] netlink: 'syz.3.662': attribute type 4 has an invalid length. [ 109.119668][ T5518] netlink: 'syz.3.662': attribute type 4 has an invalid length. [ 109.604388][ T28] kauditd_printk_skb: 342 callbacks suppressed [ 109.604406][ T28] audit: type=1400 audit(1778577740.159:4191): avc: denied { read write } for pid=5541 comm="syz.0.672" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.666805][ T28] audit: type=1400 audit(1778577740.209:4192): avc: denied { open } for pid=5541 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 109.713683][ T28] audit: type=1400 audit(1778577740.209:4193): avc: denied { open } for pid=5541 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 109.762250][ T28] audit: type=1400 audit(1778577740.209:4194): avc: denied { open } for pid=5541 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 109.817283][ T28] audit: type=1400 audit(1778577740.209:4195): avc: denied { prog_load } for pid=5541 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.863801][ T28] audit: type=1400 audit(1778577740.209:4196): avc: denied { map_create } for pid=5541 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.902245][ T28] audit: type=1400 audit(1778577740.209:4197): avc: denied { prog_load } for pid=5541 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.953582][ T28] audit: type=1400 audit(1778577740.209:4198): avc: denied { create } for pid=5541 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 110.018063][ T28] audit: type=1400 audit(1778577740.379:4199): avc: denied { read write } for pid=5541 comm="syz.0.672" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.073710][ T28] audit: type=1400 audit(1778577740.399:4200): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.224788][ T5583] netlink: 'syz.3.686': attribute type 21 has an invalid length. [ 112.228905][ T5576] netlink: 'syz.1.684': attribute type 4 has an invalid length. [ 112.258198][ T5576] netlink: 'syz.1.684': attribute type 4 has an invalid length. [ 112.265976][ T5583] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.297336][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 113.350799][ T5603] bridge0: port 1(batadv2) entered blocking state [ 113.367106][ T5603] bridge0: port 1(batadv2) entered disabled state [ 113.386502][ T5603] batadv2: entered allmulticast mode [ 113.397079][ T5603] batadv2: entered promiscuous mode [ 113.497540][ T5612] netlink: 'syz.4.697': attribute type 4 has an invalid length. [ 113.835943][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 113.845224][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 114.610855][ T28] kauditd_printk_skb: 199 callbacks suppressed [ 114.610873][ T28] audit: type=1400 audit(1778577745.169:4400): avc: denied { create } for pid=5628 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 114.698080][ T28] audit: type=1400 audit(1778577745.199:4401): avc: denied { write } for pid=5628 comm="syz.3.703" name="ptype" dev="proc" ino=4026532612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 114.754797][ T28] audit: type=1400 audit(1778577745.229:4402): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.789182][ T28] audit: type=1400 audit(1778577745.249:4403): avc: denied { open } for pid=5630 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 114.833576][ T28] audit: type=1400 audit(1778577745.259:4404): avc: denied { open } for pid=5630 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 114.874996][ T28] audit: type=1400 audit(1778577745.259:4405): avc: denied { name_bind } for pid=5630 comm="syz.3.704" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 114.939060][ T28] audit: type=1326 audit(1778577745.259:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682a79cdd9 code=0x7ffc0000 [ 114.964831][ T28] audit: type=1326 audit(1778577745.259:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682a79cdd9 code=0x7ffc0000 [ 115.014537][ T28] audit: type=1326 audit(1778577745.259:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682a79cdd9 code=0x7ffc0000 [ 115.089832][ T28] audit: type=1326 audit(1778577745.259:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f682a79cdd9 code=0x7ffc0000 [ 115.119514][ T5622] netlink: 'syz.4.700': attribute type 4 has an invalid length. [ 115.170978][ T5623] netlink: 'syz.4.700': attribute type 4 has an invalid length. [ 115.308651][ T5655] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 115.348889][ T5655] bond2: entered promiscuous mode [ 115.358664][ T5655] bond2: entered allmulticast mode [ 115.373930][ T5655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.391998][ T5659] erspan1: entered allmulticast mode [ 115.431314][ T5659] bond2: (slave erspan1): making interface the new active one [ 115.451839][ T5659] erspan1: entered promiscuous mode [ 115.463316][ T5659] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 115.477910][ T5658] netlink: 'syz.0.715': attribute type 3 has an invalid length. [ 115.749218][ T5672] SELinux: syz.4.719 (5672) wrote to user. This is no longer supported. [ 117.631076][ T5705] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 117.665591][ T5705] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 118.006173][ T5715] syz.0.730 (5715) used greatest stack depth: 8600 bytes left [ 118.464262][ T5738] can0: slcan on ptm0. [ 118.545901][ T5737] can0 (unregistered): slcan off ptm0. [ 118.877204][ T5741] Process accounting resumed [ 119.376561][ T5695] syz.0.727 (5695) used greatest stack depth: 8032 bytes left [ 119.437999][ T5752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.746'. [ 119.616162][ T28] kauditd_printk_skb: 4181 callbacks suppressed [ 119.616178][ T28] audit: type=1400 audit(1778577750.169:8591): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.631039][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 119.665852][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.679693][ T3020] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 119.698048][ T5762] bridge_slave_1: left allmulticast mode [ 119.703911][ T3020] audit: backlog limit exceeded [ 119.711933][ T5762] bridge_slave_1: left promiscuous mode [ 119.717810][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.730478][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.734824][ T28] audit: type=1400 audit(1778577750.169:8592): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.739749][ T3020] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 119.793947][ T5762] bridge_slave_0: left allmulticast mode [ 119.804246][ T5762] bridge_slave_0: left promiscuous mode [ 119.819230][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.825960][ T28] audit: type=1400 audit(1778577750.169:8593): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.833205][ T3020] audit: backlog limit exceeded [ 119.888824][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.949298][ T5746] netlink: 'syz.2.744': attribute type 4 has an invalid length. [ 120.004943][ T5746] netlink: 'syz.2.744': attribute type 4 has an invalid length. [ 120.391061][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 120.443685][ T5774] hsr_slave_1 (unregistering): left promiscuous mode [ 120.799407][ T5784] xt_CONNSECMARK: invalid mode: 66 [ 121.335898][ T5787] binfmt_misc: register: failed to install interpreter file ./file2 [ 123.161272][ T5817] syzkaller0: entered promiscuous mode [ 123.191466][ T5817] syzkaller0: entered allmulticast mode [ 123.221568][ T5822] all: renamed from lo (while UP) [ 124.040657][ T5808] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 124.065148][ T5808] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 124.626907][ T28] kauditd_printk_skb: 15778 callbacks suppressed [ 124.626925][ T28] audit: type=1400 audit(1778577755.179:24232): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.678640][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.691139][ T3020] audit: audit_lost=50 audit_rate_limit=0 audit_backlog_limit=64 [ 124.709912][ T3302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.726178][ T3020] audit: backlog limit exceeded [ 124.731115][ T5855] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.731132][ T5855] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 124.731190][ T5855] audit: backlog limit exceeded [ 124.750953][ T3302] audit: audit_lost=52 audit_rate_limit=0 audit_backlog_limit=64 [ 124.762264][ T3298] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.804178][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 125.150931][ T5867] netlink: 7 bytes leftover after parsing attributes in process `syz.4.786'. [ 125.205815][ T5867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.786'. [ 125.244910][ T5867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.786'. [ 125.313415][ T5868] syzkaller0: entered promiscuous mode [ 125.376347][ T5868] syzkaller0: entered allmulticast mode [ 125.834505][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 126.802766][ T5889] netlink: 'syz.4.793': attribute type 4 has an invalid length. [ 126.853011][ T5889] netlink: 'syz.4.793': attribute type 4 has an invalid length. [ 127.673305][ T5917] syz.4.803 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 129.261746][ T5943] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 129.298461][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 129.316556][ T5946] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 129.636351][ T28] kauditd_printk_skb: 16409 callbacks suppressed [ 129.636370][ T28] audit: type=1400 audit(1778577760.199:40639): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.691908][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.720606][ T28] audit: type=1400 audit(1778577760.199:40640): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.721793][ T3020] audit: audit_lost=54 audit_rate_limit=0 audit_backlog_limit=64 [ 129.784157][ T28] audit: type=1400 audit(1778577760.199:40641): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.841581][ T3020] audit: backlog limit exceeded [ 129.861480][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.863159][ T28] audit: type=1400 audit(1778577760.199:40642): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.897854][ T3020] audit: audit_lost=55 audit_rate_limit=0 audit_backlog_limit=64 [ 129.925010][ T3020] audit: backlog limit exceeded [ 130.111907][ T5972] SET target dimension over the limit! [ 131.224102][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.249229][ T5994] batadv_slave_0: entered promiscuous mode [ 132.137663][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.144874][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.275199][ T6010] bridge_slave_0: left allmulticast mode [ 132.303376][ T6010] bridge_slave_0: left promiscuous mode [ 132.316543][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.359226][ T6010] bridge_slave_1: left allmulticast mode [ 132.378962][ T6010] bridge_slave_1: left promiscuous mode [ 132.397847][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.444222][ T6010] team0: Port device team_slave_1 removed [ 132.467809][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.488859][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.518096][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.537733][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.561899][ T6010] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.583063][ T6021] netlink: 'syz.1.834': attribute type 4 has an invalid length. [ 132.650774][ T6023] netlink: 'syz.1.834': attribute type 4 has an invalid length. [ 132.668986][ T6018] veth1_macvtap: left promiscuous mode [ 134.029480][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 134.648944][ T28] kauditd_printk_skb: 15969 callbacks suppressed [ 134.648963][ T28] audit: type=1400 audit(1778577765.209:56294): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.690945][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.722066][ T3020] audit: audit_lost=162 audit_rate_limit=0 audit_backlog_limit=64 [ 134.724930][ T28] audit: type=1400 audit(1778577765.209:56295): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.751781][ T3020] audit: backlog limit exceeded [ 134.777176][ T28] audit: type=1400 audit(1778577765.209:56296): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.783681][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.840725][ T28] audit: type=1400 audit(1778577765.209:56297): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 134.853610][ T3020] audit: audit_lost=163 audit_rate_limit=0 audit_backlog_limit=64 [ 134.902659][ T3020] audit: backlog limit exceeded [ 136.248132][ T6071] netlink: 'syz.4.855': attribute type 4 has an invalid length. [ 136.708001][ T6090] netlink: 'syz.4.855': attribute type 4 has an invalid length. [ 136.959540][ T6101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.866'. [ 136.974238][ T6090] syz.4.855 (6090) used greatest stack depth: 7536 bytes left [ 137.032370][ T6103] TCP: TCP_TX_DELAY enabled [ 137.258540][ T6105] Cannot find add_set index 0 as target [ 138.880825][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.905708][ T6140] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.939827][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.024588][ T6140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.047513][ T6140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.068237][ T6140] veth1_vlan: left promiscuous mode [ 139.076834][ T6140] veth0_vlan: left promiscuous mode [ 139.087877][ T6140] veth0_vlan: entered promiscuous mode [ 139.115075][ T6140] veth1_vlan: entered promiscuous mode [ 139.140162][ T6140] veth1_macvtap: left promiscuous mode [ 139.155240][ T6140] veth0_macvtap: left promiscuous mode [ 139.176836][ T6140] veth0_macvtap: entered promiscuous mode [ 139.188793][ T6140] veth1_macvtap: entered promiscuous mode [ 139.206871][ T6140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.223969][ T6140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.239618][ T6140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.263595][ T6140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.286712][ T6140] bridge0: port 3(batadv1) entered blocking state [ 139.293254][ T6140] bridge0: port 3(batadv1) entered forwarding state [ 139.305826][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 139.333388][ T6140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.358587][ T6140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.369378][ T6140] bridge0: port 1(batadv2) entered blocking state [ 139.375939][ T6140] bridge0: port 1(batadv2) entered forwarding state [ 139.395564][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 139.491545][ T3769] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.513958][ T3769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.538926][ T3769] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.557888][ T3769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.594835][ T3769] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.614087][ T3769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.635954][ T3658] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.656957][ T3769] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.666012][ T28] kauditd_printk_skb: 19053 callbacks suppressed [ 139.666030][ T28] audit: type=1400 audit(1778577770.209:75351): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 139.704059][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.714619][ T3020] audit: audit_lost=164 audit_rate_limit=0 audit_backlog_limit=64 [ 139.720349][ T6156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.723070][ T3020] audit: backlog limit exceeded [ 139.737195][ T3769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.745642][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.752778][ T3298] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.760920][ T6159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.768170][ T6156] audit: audit_lost=165 audit_rate_limit=0 audit_backlog_limit=64 [ 139.768747][ T6158] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.834884][ T6158] netlink: 14 bytes leftover after parsing attributes in process `syz.2.888'. [ 139.861573][ T6161] ipvlan2: entered promiscuous mode [ 139.878333][ T6161] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 139.906254][ T6161] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 139.919714][ T6161] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 140.787194][ T6183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.808495][ T6183] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.830880][ T6183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.896404][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.913435][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.938218][ T6183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.958834][ T6183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.994867][ T6183] veth1_vlan: left promiscuous mode [ 141.015011][ T6183] veth0_vlan: left promiscuous mode [ 141.035300][ T6183] veth0_vlan: entered promiscuous mode [ 141.054578][ T6183] veth1_vlan: entered promiscuous mode [ 141.083186][ T6183] veth1_macvtap: left promiscuous mode [ 141.097733][ T6183] veth0_macvtap: left promiscuous mode [ 141.110068][ T6183] veth0_macvtap: entered promiscuous mode [ 141.133083][ T6183] veth1_macvtap: entered promiscuous mode [ 141.144538][ T6190] netlink: 'syz.4.894': attribute type 4 has an invalid length. [ 141.161591][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.177305][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.186527][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.195715][ T6183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.207113][ T6183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.228605][ T6191] netlink: 'syz.4.894': attribute type 4 has an invalid length. [ 141.265718][ T3765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.295158][ T3765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.316544][ T3765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.344031][ T3765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.650386][ T6199] x_tables: duplicate underflow at hook 3 [ 141.790584][ T6203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.829651][ T6203] team0: Port device bond0 added [ 142.009884][ T6217] ipt_REJECT: TCP_RESET invalid for non-tcp [ 142.149305][ T6215] syzkaller0: entered promiscuous mode [ 142.177814][ T6215] syzkaller0: entered allmulticast mode [ 142.522986][ T6227] 8021q: adding VLAN 0 to HW filter on device .` [ 142.716636][ T6227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.761303][ T10] gretap1: entered promiscuous mode [ 142.781925][ T3780] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.789947][ T3780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.984143][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 143.182009][ T6244] netlink: 'syz.3.912': attribute type 4 has an invalid length. [ 144.676058][ T28] kauditd_printk_skb: 18656 callbacks suppressed [ 144.676145][ T28] audit: type=1400 audit(1778577775.239:93243): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.734494][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.742959][ T3020] audit: audit_lost=422 audit_rate_limit=0 audit_backlog_limit=64 [ 144.754004][ T3020] audit: backlog limit exceeded [ 144.760710][ T28] audit: type=1400 audit(1778577775.269:93244): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.784382][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.800071][ T3020] audit: audit_lost=423 audit_rate_limit=0 audit_backlog_limit=64 [ 144.808316][ T6253] netlink: 'syz.2.919': attribute type 4 has an invalid length. [ 144.822328][ T3020] audit: backlog limit exceeded [ 144.827300][ T28] audit: type=1400 audit(1778577775.269:93245): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.849794][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.856547][ T6253] netlink: 'syz.2.919': attribute type 4 has an invalid length. [ 144.940320][ T6260] syzkaller0: entered promiscuous mode [ 144.955593][ T6260] syzkaller0: entered allmulticast mode [ 145.160941][ T6268] netlink: 'syz.4.925': attribute type 2 has an invalid length. [ 146.326723][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.350168][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.758156][ T6305] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 146.828147][ T6304] syzkaller0: entered promiscuous mode [ 146.844679][ T6304] syzkaller0: entered allmulticast mode [ 146.985827][ T3773] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.401648][ T6310] netlink: 'syz.2.939': attribute type 4 has an invalid length. [ 147.419237][ T6310] netlink: 'syz.2.939': attribute type 4 has an invalid length. [ 148.548064][ T6332] netlink: 'syz.0.953': attribute type 4 has an invalid length. [ 148.827164][ T6348] netlink: 'syz.0.953': attribute type 4 has an invalid length. [ 149.005789][ T3658] Bluetooth: hci0: command 0x1003 tx timeout [ 149.013438][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.686145][ T28] kauditd_printk_skb: 24087 callbacks suppressed [ 149.686160][ T28] audit: type=1326 audit(1778577780.239:116215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.0.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f04bcc0d60e code=0x7ffc0000 [ 149.740137][ T3020] audit: audit_backlog=66 > audit_backlog_limit=64 [ 149.747217][ T28] audit: type=1400 audit(1778577780.249:116216): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.750102][ T6373] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.776299][ T28] audit: type=1400 audit(1778577780.249:116217): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.785891][ T3020] audit: audit_lost=797 audit_rate_limit=0 audit_backlog_limit=64 [ 149.832395][ T3020] audit: backlog limit exceeded [ 149.841638][ T28] audit: type=1400 audit(1778577780.249:116218): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.850578][ T6373] audit: audit_lost=798 audit_rate_limit=0 audit_backlog_limit=64 [ 149.871110][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.039959][ T6397] netlink: 44 bytes leftover after parsing attributes in process `syz.4.969'. [ 151.606150][ T6400] netlink: 'syz.3.968': attribute type 4 has an invalid length. [ 151.647701][ T6400] netlink: 'syz.3.968': attribute type 4 has an invalid length. [ 152.180572][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.187894][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.457842][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.508776][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.724093][ T6417] gretap1: left promiscuous mode [ 152.785635][ T3773] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.814680][ T3773] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.851729][ T3773] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.873473][ T3773] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.905834][ T6435] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 152.933904][ T6435] syzkaller0: entered promiscuous mode [ 152.949115][ T6435] syzkaller0: entered allmulticast mode [ 152.982241][ T6438] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 153.261242][ T6442] syzkaller0: entered promiscuous mode [ 153.284069][ T6442] syzkaller0: entered allmulticast mode [ 154.270025][ T6457] netlink: 'syz.0.988': attribute type 4 has an invalid length. [ 154.311783][ T6457] netlink: 'syz.0.988': attribute type 4 has an invalid length. [ 154.613146][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 154.695932][ T28] kauditd_printk_skb: 20974 callbacks suppressed [ 154.695951][ T28] audit: type=1400 audit(1778577785.249:136895): avc: denied { prog_load } for pid=6486 comm="syz.4.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 154.737291][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.748534][ T3299] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.759641][ T3020] audit: audit_lost=898 audit_rate_limit=0 audit_backlog_limit=64 [ 154.771987][ T3299] audit: audit_lost=899 audit_rate_limit=0 audit_backlog_limit=64 [ 154.787422][ T3020] audit: backlog limit exceeded [ 154.796279][ T28] audit: type=1400 audit(1778577785.259:136897): avc: denied { open } for pid=6486 comm="syz.4.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 154.815768][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.824770][ T3306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.831798][ T3299] audit: backlog limit exceeded [ 154.908819][ T6491] syzkaller0: entered promiscuous mode [ 154.939002][ T6491] syzkaller0: entered allmulticast mode [ 155.099306][ T6504] netlink: 'syz.3.1004': attribute type 17 has an invalid length. [ 155.125280][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 155.219385][ T6499] syzkaller0: entered promiscuous mode [ 155.259787][ T6499] syzkaller0: entered allmulticast mode [ 157.446016][ T6539] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 157.517363][ T6539] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 157.665951][ T10] IPVS: starting estimator thread 0... [ 157.694018][ T6548] syzkaller0: entered promiscuous mode [ 157.707112][ T6548] syzkaller0: entered allmulticast mode [ 157.765798][ T6546] IPVS: using max 2208 ests per chain, 110400 per kthread [ 158.586883][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 158.637441][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 158.755263][ T6561] syzkaller0: entered promiscuous mode [ 158.768261][ T6561] syzkaller0: entered allmulticast mode [ 159.137189][ T6567] netlink: 'syz.3.1025': attribute type 4 has an invalid length. [ 159.192005][ T6567] netlink: 'syz.3.1025': attribute type 4 has an invalid length. [ 159.248241][ T6567] netlink: 'syz.3.1025': attribute type 4 has an invalid length. [ 159.450979][ T6579] syzkaller0: entered promiscuous mode [ 159.471855][ T6579] syzkaller0: entered allmulticast mode [ 159.629617][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1029'. [ 159.706955][ T28] kauditd_printk_skb: 16025 callbacks suppressed [ 159.706969][ T28] audit: type=1400 audit(1778577791.265:152199): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.750118][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.770196][ T3020] audit: audit_lost=1142 audit_rate_limit=0 audit_backlog_limit=64 [ 159.796812][ T3020] audit: backlog limit exceeded [ 159.810992][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.823512][ T28] audit: type=1400 audit(1778577791.265:152200): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.858003][ T3020] audit: audit_lost=1143 audit_rate_limit=0 audit_backlog_limit=64 [ 159.877054][ T3020] audit: backlog limit exceeded [ 159.890814][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.903936][ T28] audit: type=1400 audit(1778577791.265:152201): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.553898][ T6600] syzkaller0: entered promiscuous mode [ 160.570570][ T6600] syzkaller0: entered allmulticast mode [ 160.937428][ T6611] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 161.008431][ T6611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.096345][ T6614] veth5: entered allmulticast mode [ 161.144455][ T6614] bond3: (slave veth5): Enslaving as an active interface with an up link [ 161.313516][ T6617] syzkaller0: entered promiscuous mode [ 161.336360][ T6617] syzkaller0: entered allmulticast mode [ 161.871664][ T6630] syzkaller0: entered promiscuous mode [ 161.888063][ T6630] syzkaller0: entered allmulticast mode [ 162.534692][ T6640] syzkaller0: entered promiscuous mode [ 162.560206][ T6640] syzkaller0: entered allmulticast mode [ 162.811449][ T6628] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 162.853366][ T6628] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 162.908670][ T6649] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 162.938763][ T6649] syzkaller0: entered promiscuous mode [ 162.958436][ T6649] syzkaller0: entered allmulticast mode [ 163.636436][ T6673] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 163.689445][ T6673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.773585][ T6675] veth3: entered allmulticast mode [ 163.808757][ T6675] bond3: (slave veth3): Enslaving as an active interface with an up link [ 164.037606][ T6683] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 164.069513][ T6683] syzkaller0: entered promiscuous mode [ 164.091149][ T6683] syzkaller0: entered allmulticast mode [ 164.233673][ T6692] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 164.321995][ T6692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.398617][ T6692] bond4: entered allmulticast mode [ 164.715790][ T28] kauditd_printk_skb: 17223 callbacks suppressed [ 164.715805][ T28] audit: type=1400 audit(1778577796.265:167515): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.758857][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.788578][ T3020] audit: audit_lost=1781 audit_rate_limit=0 audit_backlog_limit=64 [ 164.792007][ T28] audit: type=1400 audit(1778577796.265:167516): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.820917][ T3020] audit: backlog limit exceeded [ 164.836515][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.842585][ T28] audit: type=1400 audit(1778577796.275:167517): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.855679][ T3020] audit: audit_lost=1782 audit_rate_limit=0 audit_backlog_limit=64 [ 164.900478][ T6704] netlink: 'syz.4.1070': attribute type 4 has an invalid length. [ 164.901109][ T28] audit: type=1400 audit(1778577796.275:167518): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.917375][ T3020] audit: backlog limit exceeded [ 164.938244][ T6704] netlink: 'syz.4.1070': attribute type 4 has an invalid length. [ 166.076482][ T6718] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 166.130153][ T6718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.233041][ T6718] veth3: entered allmulticast mode [ 166.284078][ T6718] bond0: (slave veth3): Enslaving as an active interface with an up link [ 166.911484][ T6711] netlink: 'syz.2.1084': attribute type 4 has an invalid length. [ 166.965368][ T6711] netlink: 'syz.2.1084': attribute type 4 has an invalid length. [ 168.503941][ T6743] ================================================================== [ 168.512100][ T6743] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 168.520756][ T6743] [ 168.523108][ T6743] write to 0xffff88811b03aa60 of 8 bytes by task 6744 on cpu 1: [ 168.530774][ T6743] shmem_file_splice_read+0x40e/0x5a0 [ 168.536288][ T6743] splice_direct_to_actor+0x26e/0x670 [ 168.541707][ T6743] do_splice_direct+0x119/0x1a0 [ 168.546621][ T6743] do_sendfile+0x382/0x650 [ 168.551084][ T6743] __x64_sys_sendfile64+0x105/0x150 [ 168.556341][ T6743] x64_sys_call+0x2dc4/0x3020 [ 168.561072][ T6743] do_syscall_64+0x12c/0x3b0 [ 168.565715][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.571661][ T6743] [ 168.574012][ T6743] write to 0xffff88811b03aa60 of 8 bytes by task 6743 on cpu 0: [ 168.581765][ T6743] shmem_file_splice_read+0x40e/0x5a0 [ 168.587200][ T6743] splice_direct_to_actor+0x26e/0x670 [ 168.592627][ T6743] do_splice_direct+0x119/0x1a0 [ 168.597531][ T6743] do_sendfile+0x382/0x650 [ 168.601999][ T6743] __x64_sys_sendfile64+0x105/0x150 [ 168.607251][ T6743] x64_sys_call+0x2dc4/0x3020 [ 168.612131][ T6743] do_syscall_64+0x12c/0x3b0 [ 168.616769][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.622715][ T6743] [ 168.625070][ T6743] value changed: 0x000000000000398c -> 0x000000000000398e [ 168.632531][ T6743] [ 168.634882][ T6743] Reported by Kernel Concurrency Sanitizer on: [ 168.641158][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: syz.2.1082 Not tainted syzkaller #0 PREEMPT(full) [ 168.650477][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.660565][ T6743] ================================================================== [ 169.725788][ T28] kauditd_printk_skb: 24101 callbacks suppressed [ 169.725807][ T28] audit: type=1400 audit(1778577801.275:190582): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.742478][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.754056][ T28] audit: type=1400 audit(1778577801.285:190583): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.760337][ T3020] audit: audit_lost=2129 audit_rate_limit=0 audit_backlog_limit=64 [ 169.781988][ T28] audit: type=1400 audit(1778577801.285:190584): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.789461][ T3020] audit: backlog limit exceeded [ 169.817139][ T28] audit: type=1400 audit(1778577801.285:190585): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.834180][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.839058][ T28] audit: type=1400 audit(1778577801.285:190586): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.845353][ T3020] audit: audit_lost=2130 audit_rate_limit=0 audit_backlog_limit=64 [ 174.735815][ T28] kauditd_printk_skb: 44136 callbacks suppressed [ 174.735874][ T28] audit: type=1400 audit(1778577806.295:234722): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.752179][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.765120][ T28] audit: type=1400 audit(1778577806.295:234723): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.770262][ T3020] audit: audit_lost=2131 audit_rate_limit=0 audit_backlog_limit=64 [ 174.794580][ T28] audit: type=1400 audit(1778577806.295:234724): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.799417][ T3020] audit: backlog limit exceeded [ 174.820780][ T28] audit: type=1400 audit(1778577806.295:234725): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.826835][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.847281][ T28] audit: type=1400 audit(1778577806.295:234726): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.853926][ T3020] audit: audit_lost=2132 audit_rate_limit=0 audit_backlog_limit=64