last executing test programs: 4m19.40165071s ago: executing program 3 (id=245): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x4) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r2, r1, 0x0, 0x40001) 4m18.612912257s ago: executing program 3 (id=258): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x8}, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000022f0bae5670bc70eaaaaaaaaaabb88a810008100020086dd62ae047600442f"], 0x86) 4m18.469032521s ago: executing program 3 (id=261): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x60, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0xc48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000500), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 4m18.269177619s ago: executing program 3 (id=265): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x2]}) rmdir(&(0x7f0000000100)='./control\x00') 4m17.758661436s ago: executing program 3 (id=271): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="96", 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 4m17.351032801s ago: executing program 3 (id=276): pipe2$9p(&(0x7f00000001c0), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES8], 0x44}}, 0x2404000c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m17.321756092s ago: executing program 32 (id=276): pipe2$9p(&(0x7f00000001c0), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES8], 0x44}}, 0x2404000c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m8.978882582s ago: executing program 4 (id=418): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x4, 0x1296, &(0x7f0000001b80)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b4) chdir(&(0x7f0000000580)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000dc0), 0x100) 4m8.576772076s ago: executing program 4 (id=432): r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 4m8.281673526s ago: executing program 4 (id=440): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) linkat(r1, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 4m8.067676683s ago: executing program 4 (id=444): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m7.852492891s ago: executing program 4 (id=447): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x1a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) 4m7.29907996s ago: executing program 4 (id=454): bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_open_dev$sg(0x0, 0xa, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f00000008c0)=""/102400, 0x19000, 0x1000000000) 4m7.271057521s ago: executing program 33 (id=454): bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) syz_open_dev$sg(0x0, 0xa, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f00000008c0)=""/102400, 0x19000, 0x1000000000) 3.084677973s ago: executing program 1 (id=5264): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x25, 0x17}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.808378053s ago: executing program 1 (id=5267): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000000), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.654439418s ago: executing program 1 (id=5270): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x27) 2.557639522s ago: executing program 5 (id=5273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40404) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000580000001a0a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) 2.557121512s ago: executing program 1 (id=5274): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 2.490900614s ago: executing program 5 (id=5275): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 2.183080755s ago: executing program 0 (id=5279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 2.176596745s ago: executing program 0 (id=5280): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32, @ANYBLOB="00000000000000feffffff0000000000040002"], 0xac}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = msgget$private(0x0, 0x3ac) msgrcv(r1, &(0x7f00000000c0)={0x0, ""/252}, 0x104, 0xced6b2bc496a26e6, 0x0) msgsnd(r1, &(0x7f00000010c0)={0x2}, 0x8, 0x800) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000200)=""/138) 1.667041273s ago: executing program 1 (id=5288): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x100000005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.43996035s ago: executing program 0 (id=5292): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000000)={'vlan1\x00', @random="fab200000708"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r2) 1.370039773s ago: executing program 0 (id=5293): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 1.139074201s ago: executing program 2 (id=5294): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, 0x0, 0x6002, 0x0, 0x200, 0x0, 0x0}, {[0x1, 0x2, 0x80000000, 0x7]}, 0x8000, 0x64, &(0x7f0000000300)=""/100}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f0000000200)=""/227, 0xe3) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfdef) 1.046698514s ago: executing program 5 (id=5296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.026821595s ago: executing program 6 (id=5298): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x86, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x50) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200), 0x0, 0xa0, &(0x7f0000000240), 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xc, 0x5, 0x2, 0x7, 0x0, 0x1, 0x6, '\x00', r2}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 846.445161ms ago: executing program 1 (id=5299): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 846.297031ms ago: executing program 6 (id=5300): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 569.99897ms ago: executing program 2 (id=5301): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) chdir(&(0x7f0000000080)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 517.607892ms ago: executing program 5 (id=5302): socket(0x8000000010, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 516.266042ms ago: executing program 2 (id=5312): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x75fd, &(0x7f0000000040)={0x0, 0x8002ce0, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) io_uring_enter(r2, 0x6dd7, 0x7721, 0x16, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) 502.636463ms ago: executing program 6 (id=5303): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 454.947594ms ago: executing program 0 (id=5304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 454.637174ms ago: executing program 2 (id=5305): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xc8d, [0x40000000000000, 0xe9f, 0x671, 0x9c3, 0x81, 0x1]}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000280)={0x2, 0x0, 0x98, &(0x7f00000001c0)={0x2, 0x0, 0xf}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)='/dev/vsock\x00', 0x153080, &(0x7f0000000300)={@_ha_fsid={[0x8, 0x101]}, {0x20, 0x1ff, 0xa}}, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0xfffffffb}) r4 = perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x8, 0x6, 0x5, 0x5, 0x0, 0x7, 0x1000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400}, 0x180, 0x3, 0x9, 0x5, 0x2, 0x10, 0x149, 0x0, 0x9, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, r1, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendfile(r3, r4, 0x0, 0x3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={0x0}}, 0x20048084) 436.465615ms ago: executing program 5 (id=5306): writev(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) close_range(r0, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) 436.039006ms ago: executing program 6 (id=5307): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x53c6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 433.619885ms ago: executing program 0 (id=5308): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 340.157878ms ago: executing program 2 (id=5309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`', @ANYRES16, @ANYBLOB="050427bd7000fedbdf25010000000800", @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c4}, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 324.593289ms ago: executing program 6 (id=5310): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) keyctl$session_to_parent(0x12) 321.784369ms ago: executing program 5 (id=5311): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 182.727524ms ago: executing program 6 (id=5313): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=5314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x32, 0xffffffffffffffff, 0x72a4c000) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 51.934630][ T9919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.953286][ T9919] vhci_hcd vhci_hcd.0: Device attached [ 151.966392][ T9919] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 151.973041][ T9919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.981623][ T9919] vhci_hcd vhci_hcd.0: Device attached [ 151.989411][ T9919] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 152.021933][ T9919] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 152.052927][ T9919] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 152.059649][ T9919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.076434][ T4202] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 152.080470][ T9919] vhci_hcd vhci_hcd.0: Device attached [ 152.100163][ T9941] vhci_hcd: connection closed [ 152.100384][ T50] vhci_hcd vhci_hcd.5: stop threads [ 152.114991][ T9920] vhci_hcd: connection reset by peer [ 152.115139][ T9931] vhci_hcd: connection closed [ 152.120356][ T9927] vhci_hcd: connection closed [ 152.120559][ T9923] vhci_hcd: connection closed [ 152.126321][ T50] vhci_hcd vhci_hcd.5: release socket [ 152.137725][ T9935] vhci_hcd: connection closed [ 152.142331][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 152.154770][ T50] vhci_hcd vhci_hcd.5: stop threads [ 152.160640][ T50] vhci_hcd vhci_hcd.5: release socket [ 152.167045][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 152.172904][ T50] vhci_hcd vhci_hcd.5: stop threads [ 152.186941][ T50] vhci_hcd vhci_hcd.5: release socket [ 152.193584][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 152.233899][ T50] vhci_hcd vhci_hcd.5: stop threads [ 152.240242][ T50] vhci_hcd vhci_hcd.5: release socket [ 152.246445][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 152.253075][ T50] vhci_hcd vhci_hcd.5: stop threads [ 152.258884][ T50] vhci_hcd vhci_hcd.5: release socket [ 152.264883][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 152.289939][ T50] vhci_hcd vhci_hcd.5: stop threads [ 152.295229][ T50] vhci_hcd vhci_hcd.5: release socket [ 152.301492][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 152.363321][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2571'. [ 152.524109][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2577'. [ 152.558931][ T9973] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.2587'. [ 152.596414][ T5142] usb 3-1: enqueue for inactive port 0 [ 152.602645][ T5142] usb 3-1: enqueue for inactive port 0 [ 152.686571][ T5142] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 153.282875][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2592'. [ 153.515614][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2603'. [ 153.618746][T10030] netlink: 212916 bytes leftover after parsing attributes in process `syz.6.2604'. [ 154.250038][ T28] kauditd_printk_skb: 24713 callbacks suppressed [ 154.250056][ T28] audit: type=1400 audit(2000000374.934:318781): avc: denied { mount } for pid=10055 comm="syz.0.2614" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=0 [ 154.272325][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.280183][T10054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.301470][ T3038] audit: audit_lost=18185 audit_rate_limit=0 audit_backlog_limit=64 [ 154.302963][ T3308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.310204][T10057] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.316919][ T3308] audit: audit_lost=18186 audit_rate_limit=0 audit_backlog_limit=64 [ 154.332213][T10057] audit: audit_lost=18187 audit_rate_limit=0 audit_backlog_limit=64 [ 154.332591][T10054] audit: audit_lost=18188 audit_rate_limit=0 audit_backlog_limit=64 [ 154.340312][ T3038] audit: backlog limit exceeded [ 155.860086][T10154] __nla_validate_parse: 2 callbacks suppressed [ 155.860106][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2655'. [ 157.147387][ T4202] usb 11-1: enqueue for inactive port 0 [ 157.153081][ T4202] usb 11-1: enqueue for inactive port 0 [ 157.252895][ T4202] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 157.983228][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2685'. [ 159.255965][ T28] kauditd_printk_skb: 18281 callbacks suppressed [ 159.255984][ T28] audit: type=1400 audit(2000000379.944:333366): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.276482][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.324326][ T3038] audit: audit_lost=19420 audit_rate_limit=0 audit_backlog_limit=64 [ 159.359022][ T4868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.365667][ T3038] audit: backlog limit exceeded [ 159.375888][ T4868] audit: audit_lost=19421 audit_rate_limit=0 audit_backlog_limit=64 [ 159.384397][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.406430][ T3038] audit: audit_lost=19422 audit_rate_limit=0 audit_backlog_limit=64 [ 159.420314][ T4868] audit: backlog limit exceeded [ 159.439118][ T3038] audit: backlog limit exceeded [ 160.413633][T10344] netlink: 'syz.6.2736': attribute type 3 has an invalid length. [ 160.423727][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2736'. [ 161.327654][T10358] syz.5.2742 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 161.342277][T10358] CPU: 1 UID: 0 PID: 10358 Comm: syz.5.2742 Not tainted syzkaller #0 PREEMPT(full) [ 161.342305][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.342316][T10358] Call Trace: [ 161.342324][T10358] [ 161.342335][T10358] __dump_stack+0x1d/0x30 [ 161.342368][T10358] dump_stack_lvl+0x95/0xd0 [ 161.342450][T10358] dump_stack+0x15/0x1b [ 161.342472][T10358] dump_header+0x80/0x240 [ 161.342495][T10358] oom_kill_process+0x295/0x350 [ 161.342517][T10358] out_of_memory+0x97d/0xb80 [ 161.342635][T10358] try_charge_memcg+0x62e/0xa10 [ 161.342762][T10358] obj_cgroup_charge_pages+0x23/0xc0 [ 161.342790][T10358] __memcg_kmem_charge_page+0x9e/0x170 [ 161.342817][T10358] __alloc_frozen_pages_noprof+0x18a/0x360 [ 161.342853][T10358] alloc_pages_mpol+0xb3/0x260 [ 161.342881][T10358] alloc_pages_noprof+0x8f/0x140 [ 161.342916][T10358] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 161.342983][T10358] __kvmalloc_node_noprof+0x3d4/0x650 [ 161.343008][T10358] ? futex_hash_allocate+0x190/0x9d0 [ 161.343160][T10358] ? futex_hash_allocate+0x190/0x9d0 [ 161.343233][T10358] futex_hash_allocate+0x190/0x9d0 [ 161.343262][T10358] ? cap_task_prctl+0x13f/0x6e0 [ 161.343352][T10358] futex_hash_prctl+0xd8/0xf0 [ 161.343383][T10358] __se_sys_prctl+0xa3d/0x13f0 [ 161.343546][T10358] __x64_sys_prctl+0x67/0x80 [ 161.343571][T10358] x64_sys_call+0x2533/0x3020 [ 161.343636][T10358] do_syscall_64+0x12c/0x370 [ 161.343668][T10358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.343696][T10358] RIP: 0033:0x7f574c87c819 [ 161.343716][T10358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.343777][T10358] RSP: 002b:00007f574b2cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 161.343800][T10358] RAX: ffffffffffffffda RBX: 00007f574caf5fa0 RCX: 00007f574c87c819 [ 161.343814][T10358] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 161.343826][T10358] RBP: 00007f574c912c91 R08: 0000000000000000 R09: 0000000000000000 [ 161.343840][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.343855][T10358] R13: 00007f574caf6038 R14: 00007f574caf5fa0 R15: 00007ffdb2d41658 [ 161.343925][T10358] [ 161.343966][T10358] memory: usage 307200kB, limit 307200kB, failcnt 282 [ 161.619593][T10358] memory+swap: usage 307516kB, limit 9007199254740988kB, failcnt 0 [ 161.629669][T10358] kmem: usage 307004kB, limit 9007199254740988kB, failcnt 0 [ 161.637061][T10358] Memory cgroup stats for /syz5: [ 161.637302][T10358] cache 0 [ 161.645444][T10358] rss 184320 [ 161.649289][T10358] shmem 0 [ 161.661920][T10358] mapped_file 0 [ 161.665426][T10358] dirty 0 [ 161.694251][T10358] writeback 0 [ 161.710707][T10358] workingset_refault_anon 593 [ 161.724310][T10358] workingset_refault_file 2239 [ 161.730381][T10358] swap 323584 [ 161.733813][T10358] swapcached 2764800 [ 161.738967][T10358] pgpgin 197423 [ 161.742838][T10358] pgpgout 197378 [ 161.747052][T10358] pgfault 134872 [ 161.771576][T10358] pgmajfault 96 [ 161.775510][T10358] inactive_anon 184320 [ 161.779970][T10358] active_anon 0 [ 161.783604][T10358] inactive_file 0 [ 161.787709][T10358] active_file 0 [ 161.791346][T10358] unevictable 0 [ 161.795055][T10358] hierarchical_memory_limit 314572800 [ 161.801532][T10358] hierarchical_memsw_limit 9223372036854771712 [ 161.808138][T10358] total_cache 0 [ 161.811807][T10358] total_rss 184320 [ 161.831378][T10358] total_shmem 0 [ 161.836869][T10358] total_mapped_file 0 [ 161.840994][T10358] total_dirty 0 [ 161.844517][T10358] total_writeback 0 [ 161.849983][T10358] total_workingset_refault_anon 593 [ 161.855417][T10358] total_workingset_refault_file 2239 [ 161.861197][T10358] total_swap 323584 [ 161.865215][T10358] total_swapcached 2764800 [ 161.870578][T10358] total_pgpgin 197423 [ 161.874709][T10358] total_pgpgout 197378 [ 161.879045][T10358] total_pgfault 134872 [ 161.883229][T10358] total_pgmajfault 96 [ 161.887520][T10358] total_inactive_anon 184320 [ 161.892379][T10358] total_active_anon 0 [ 161.897268][T10358] total_inactive_file 0 [ 161.901567][T10358] total_active_file 0 [ 161.905623][T10358] total_unevictable 0 [ 161.912845][T10358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2742,pid=10357,uid=0 [ 161.928524][T10358] Memory cgroup out of memory: Killed process 10358 (syz.5.2742) total-vm:96080kB, anon-rss:1400kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 164.156813][T10475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10475 comm=syz.6.2795 [ 164.267806][ T28] kauditd_printk_skb: 21720 callbacks suppressed [ 164.267824][ T28] audit: type=1400 audit(2000000384.944:354826): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.283080][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.308801][ T3038] audit: audit_lost=19510 audit_rate_limit=0 audit_backlog_limit=64 [ 164.320962][ T28] audit: type=1400 audit(2000000384.954:354827): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.356488][ T3038] audit: backlog limit exceeded [ 164.363557][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.363665][T10481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.366598][ T28] audit: type=1400 audit(2000000384.954:354828): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.388317][ T28] audit: type=1400 audit(2000000384.954:354829): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.405779][T10481] audit: audit_lost=19511 audit_rate_limit=0 audit_backlog_limit=64 [ 166.401071][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2850'. [ 167.702535][T10643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10643 comm=syz.0.2873 [ 169.388433][ T28] kauditd_printk_skb: 11549 callbacks suppressed [ 169.388456][ T28] audit: type=1400 audit(2000000389.884:363686): avc: denied { open } for pid=10667 comm="syz.0.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 169.454846][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.463108][T10686] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.467188][T10687] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.470758][ T3038] audit: audit_lost=20410 audit_rate_limit=0 audit_backlog_limit=64 [ 169.485546][T10686] audit: audit_lost=20411 audit_rate_limit=0 audit_backlog_limit=64 [ 169.494582][T10687] audit: audit_lost=20412 audit_rate_limit=0 audit_backlog_limit=64 [ 169.502855][ T28] audit: type=1400 audit(2000000389.844:363685): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.503283][T10687] audit: backlog limit exceeded [ 169.530170][T10686] audit: backlog limit exceeded [ 170.012996][T10727] netlink: 'syz.6.2910': attribute type 1 has an invalid length. [ 170.222100][T10742] netlink: 'syz.6.2917': attribute type 5 has an invalid length. [ 171.108220][T10787] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.115736][T10787] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.130695][T10787] batman_adv: batadv0: Interface deactivated: dummy0 [ 171.177184][T10787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.189374][T10787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.272896][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.293217][ T50] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.335896][ T50] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.345007][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.818725][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.836999][ T50] Bluetooth: hci1: Frame reassembly failed (-84) [ 172.126869][T10843] netlink: 'syz.5.2958': attribute type 10 has an invalid length. [ 172.264171][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2965'. [ 172.533853][T10868] bridge0: port 3(erspan0) entered blocking state [ 172.552936][T10868] bridge0: port 3(erspan0) entered disabled state [ 172.571307][T10868] erspan0: entered allmulticast mode [ 172.586511][T10868] erspan0: entered promiscuous mode [ 172.590999][T10875] netlink: 'syz.0.2970': attribute type 10 has an invalid length. [ 172.623466][T10875] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.712987][T10880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2974'. [ 173.867575][ T3823] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.873958][ T43] Bluetooth: hci1: command 0x1003 tx timeout [ 173.874141][T10831] Bluetooth: hci0: command 0x1003 tx timeout [ 173.881375][T10830] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 173.976339][T10922] netlink: 'syz.0.2990': attribute type 10 has an invalid length. [ 173.985187][T10922] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 174.022350][T10925] netlink: 'syz.1.2991': attribute type 1 has an invalid length. [ 174.060833][T10925] 8021q: adding VLAN 0 to HW filter on device bond6 [ 174.093400][T10925] bond6: (slave veth3): Enslaving as an active interface with a down link [ 174.138828][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2991'. [ 174.167171][T10925] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 174.208867][T10925] bond6: (slave batadv1): making interface the new active one [ 174.235348][T10925] batadv1: entered promiscuous mode [ 174.243516][T10925] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 174.396443][ T28] kauditd_printk_skb: 31632 callbacks suppressed [ 174.396460][ T28] audit: type=1400 audit(2000000651.073:390005): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.430998][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.432112][T10934] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.438572][ T3038] audit: audit_lost=22184 audit_rate_limit=0 audit_backlog_limit=64 [ 174.445451][T10934] audit: audit_lost=22185 audit_rate_limit=0 audit_backlog_limit=64 [ 174.453260][ T28] audit: type=1400 audit(2000000651.103:390006): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.453321][ T28] audit: type=1400 audit(2000000651.103:390007): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.453417][ T28] audit: type=1400 audit(2000000651.103:390008): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.453444][ T28] audit: type=1400 audit(2000000651.103:390009): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.453468][ T28] audit: type=1400 audit(2000000651.103:390010): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.092721][T10969] netlink: 'syz.6.3010': attribute type 21 has an invalid length. [ 175.577559][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3032'. [ 176.193912][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3045'. [ 177.073736][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3075'. [ 178.177839][T11171] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.3091'. [ 178.207524][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3091'. [ 179.323211][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3122'. [ 179.407579][ T28] kauditd_printk_skb: 21076 callbacks suppressed [ 179.407610][ T28] audit: type=1400 audit(2000000912.085:409555): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.451583][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'. [ 179.480266][ T28] audit: type=1400 audit(2000000912.095:409556): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.542882][ T28] audit: type=1400 audit(2000000912.095:409557): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.588172][ T28] audit: type=1400 audit(2000000912.095:409558): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.640761][ T28] audit: type=1400 audit(2000000912.095:409559): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.665488][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.680447][ T3038] audit: audit_lost=22696 audit_rate_limit=0 audit_backlog_limit=64 [ 179.698535][ T3038] audit: backlog limit exceeded [ 179.708914][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.713405][T11240] audit: audit_backlog=65 > audit_backlog_limit=64 [ 180.114465][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3142'. [ 180.200479][T11287] netlink: 'syz.0.3147': attribute type 4 has an invalid length. [ 180.226519][T11287] netlink: 'syz.0.3147': attribute type 4 has an invalid length. [ 180.283837][T11297] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 180.294789][T11298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3150'. [ 180.316343][T11297] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 180.367369][T11305] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.3154'. [ 180.410423][T11308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.428231][T11308] batadv_slave_0: entered promiscuous mode [ 181.548998][T11353] bond0: entered promiscuous mode [ 181.567703][T11353] bridge2: entered promiscuous mode [ 181.576849][T11353] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 181.711553][T11360] netlink: 'syz.6.3178': attribute type 1 has an invalid length. [ 181.732538][T11360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.888824][T11360] bond3: (slave veth9): Enslaving as an active interface with a down link [ 182.088986][T11380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3185'. [ 182.294311][T11385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3187'. [ 182.541456][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'. [ 182.871462][T11420] bond0: entered promiscuous mode [ 182.927544][T11420] bond_slave_0: entered promiscuous mode [ 182.933838][T11420] bond_slave_1: entered promiscuous mode [ 182.960438][T11420] bridge3: entered promiscuous mode [ 182.987567][T11420] debugfs: 'hsr1' already exists in 'hsr' [ 183.013670][T11420] Cannot create hsr debugfs directory [ 183.669192][T11437] __nla_validate_parse: 3 callbacks suppressed [ 183.669211][T11437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3211'. [ 183.874758][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3219'. [ 183.955813][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3219'. [ 184.044117][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3224'. [ 184.076084][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3223'. [ 184.456853][ T28] kauditd_printk_skb: 17467 callbacks suppressed [ 184.456871][ T28] audit: type=1400 audit(2000000917.065:425717): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.491000][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.513632][ T4868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.526475][ T3308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.533180][ T3038] audit: audit_lost=23133 audit_rate_limit=0 audit_backlog_limit=64 [ 184.543277][ T4868] audit: audit_lost=23134 audit_rate_limit=0 audit_backlog_limit=64 [ 184.552914][ T3308] audit: audit_lost=23135 audit_rate_limit=0 audit_backlog_limit=64 [ 184.565751][ T3038] audit: backlog limit exceeded [ 184.576723][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.583364][ T4868] audit: backlog limit exceeded [ 184.621359][T11487] netlink: 'syz.6.3234': attribute type 4 has an invalid length. [ 184.672690][T11488] netlink: 'syz.6.3234': attribute type 4 has an invalid length. [ 184.849337][T11487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.910504][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.944842][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.984264][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.028570][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.487642][ T12] batadv1: left promiscuous mode [ 185.912664][T11525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.972206][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3252'. [ 186.068943][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 186.434144][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3262'. [ 187.511200][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3278'. [ 187.604454][T11574] netlink: 'syz.6.3270': attribute type 1 has an invalid length. [ 187.659911][T11574] bond4: entered promiscuous mode [ 187.665156][T11574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.676679][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3270'. [ 187.728489][T11574] bond4: (slave bridge4): making interface the new active one [ 187.736115][T11574] bridge4: entered promiscuous mode [ 187.743357][T11574] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 188.308476][T11609] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.512340][ T28] kauditd_printk_skb: 18758 callbacks suppressed [ 189.512361][ T28] audit: type=1400 audit(2000000922.195:439599): avc: denied { read write } for pid=4868 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 189.621235][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.628973][ T28] audit: type=1400 audit(2000000922.285:439600): avc: denied { prog_load } for pid=11651 comm="syz.6.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 189.691474][ T4868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.734403][ T4868] audit: audit_lost=24763 audit_rate_limit=0 audit_backlog_limit=64 [ 189.753128][ T4868] audit: backlog limit exceeded [ 189.852333][ T4868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.862190][T11655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.867283][ T4868] audit: audit_lost=24764 audit_rate_limit=0 audit_backlog_limit=64 [ 189.879995][ T4868] audit: backlog limit exceeded [ 189.939685][T11658] netlink: 'syz.5.3307': attribute type 4 has an invalid length. [ 189.978631][T11658] netlink: 'syz.5.3307': attribute type 4 has an invalid length. [ 190.295487][T11666] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.418290][T11666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.577806][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.889513][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.908641][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.926808][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.976956][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.005760][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.027334][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.056748][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.127443][T11685] __nla_validate_parse: 3 callbacks suppressed [ 191.127461][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3318'. [ 191.628548][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3329'. [ 191.645986][T11715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3330'. [ 191.689734][T11715] erspan0: left allmulticast mode [ 191.695332][T11715] bridge0: port 3(erspan0) entered disabled state [ 191.704503][T11715] bond0: (slave bridge0): Releasing backup interface [ 191.723094][T11715] batman_adv: batadv0: Removing interface: dummy0 [ 191.736230][T11715] bridge_slave_0: left allmulticast mode [ 191.742145][T11715] bridge_slave_0: left promiscuous mode [ 191.749658][T11715] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.757770][T11715] bridge_slave_1: left allmulticast mode [ 191.764283][T11715] bridge_slave_1: left promiscuous mode [ 191.770960][T11715] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.785202][T11715] bond0: (slave bond_slave_0): Releasing backup interface [ 191.801841][T11715] bond0: (slave bond_slave_1): Releasing backup interface [ 191.817266][T11715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.848499][T11715] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.883316][T11730] netlink: 'syz.5.3337': attribute type 27 has an invalid length. [ 191.942312][T11730] bond2: left promiscuous mode [ 191.966373][T11730] vcan1: left promiscuous mode [ 191.985247][T11730] gre1: left promiscuous mode [ 191.987673][T11738] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3339'. [ 192.030728][T11736] 8021q: adding VLAN 0 to HW filter on device .` [ 192.044885][T11736] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.065404][T11736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.019631][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3349'. [ 193.030339][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.123870][T11768] bond3: (slave dummy0): Removing an active aggregator [ 193.136630][ T12] bond3: Warning: Found an uninitialized port [ 193.154834][T11768] bond3: (slave dummy0): Releasing backup interface [ 193.163385][T11773] netlink: 'syz.5.3351': attribute type 1 has an invalid length. [ 193.200909][T11768] bridge_slave_0: left allmulticast mode [ 193.206835][T11768] bridge_slave_0: left promiscuous mode [ 193.213794][T11768] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.232407][T11768] vlan4: left promiscuous mode [ 193.244931][T11768] geneve0: left promiscuous mode [ 193.270089][T11768] bridge_slave_1: left allmulticast mode [ 193.285172][T11768] bridge_slave_1: left promiscuous mode [ 193.301343][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.324699][T11768] bond0: (slave bond_slave_0): Releasing backup interface [ 193.352253][T11768] bond0: (slave bond_slave_1): Releasing backup interface [ 193.396170][T11768] team0: Port device team_slave_0 removed [ 193.421517][T11768] bond4: (slave veth1_to_team): Removing an active aggregator [ 193.458038][T11768] bond4: (slave veth1_to_team): Releasing backup interface [ 193.508039][T11768] team0: Port device team_slave_1 removed [ 193.514883][T11768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.546660][T11768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.557479][T11768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.564897][T11768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.581320][T11768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.651843][T11773] bond0: entered promiscuous mode [ 193.686590][T11773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.728016][T11778] syzkaller0: entered promiscuous mode [ 193.734050][T11778] syzkaller0: entered allmulticast mode [ 193.766453][T11779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.809263][T11779] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 193.871974][T11779] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 193.898387][T11779] bond0: (slave vti0): making interface the new active one [ 193.906712][T11779] vti0: entered promiscuous mode [ 193.928432][T11779] bond0: (slave vti0): Enslaving as an active interface with an up link [ 194.286657][T11803] netlink: 'syz.5.3365': attribute type 4 has an invalid length. [ 194.310734][T11803] netlink: 'syz.5.3365': attribute type 4 has an invalid length. [ 194.455887][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3370'. [ 194.515761][ T28] kauditd_printk_skb: 12234 callbacks suppressed [ 194.515781][ T28] audit: type=1400 audit(2000000927.195:449992): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.516416][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.522344][ T28] audit: type=1400 audit(2000000927.195:449993): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.545889][T11816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.583758][ T3038] audit: audit_lost=25380 audit_rate_limit=0 audit_backlog_limit=64 [ 194.602040][ T4013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.606851][ T28] audit: type=1400 audit(2000000927.195:449994): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.611259][ T4013] audit: audit_lost=25381 audit_rate_limit=0 audit_backlog_limit=64 [ 194.632704][T11818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.640775][T11819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.989276][T11846] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.3383'. [ 195.017550][T11846] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3383'. [ 195.041518][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'. [ 195.073080][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 195.855388][T11897] netlink: 'syz.1.3406': attribute type 27 has an invalid length. [ 196.179226][T11897] team1: left promiscuous mode [ 196.208094][T11897] team1: left allmulticast mode [ 196.237941][T11897] team2: left promiscuous mode [ 196.268569][T11897] team2: left allmulticast mode [ 196.296910][T11897] gretap1: left promiscuous mode [ 196.303845][T11897] ipip0: left promiscuous mode [ 196.431709][T11901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.502850][T11901] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.599213][T11901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.753170][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.765721][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.774662][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.798900][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.808082][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.819890][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.895787][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.904724][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.927551][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.953785][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.997900][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.011776][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 197.632826][T11965] netlink: 'syz.6.3432': attribute type 27 has an invalid length. [ 197.657385][T11965] batadv_slave_0: left promiscuous mode [ 197.675930][T11965] ipip0: left promiscuous mode [ 197.703845][T11965] bond1: left promiscuous mode [ 197.723553][T11965] bond4: left promiscuous mode [ 197.728559][T11965] bridge4: left promiscuous mode [ 197.827781][T11966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.838896][T11966] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.848693][T11966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.218580][T11990] netlink: 'syz.1.3444': attribute type 1 has an invalid length. [ 198.294035][T11990] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.413643][T11994] bond7: (slave veth9): Enslaving as an active interface with a down link [ 198.555631][T11990] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 198.592907][T11990] bond7: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 198.803606][T12001] netlink: 'syz.2.3447': attribute type 27 has an invalid length. [ 199.108976][T12001] gtp0: left promiscuous mode [ 199.138557][T12001] bond2: left promiscuous mode [ 199.163189][T12001] vcan1: left promiscuous mode [ 199.250668][T12001] geneve2: left promiscuous mode [ 199.257710][T12001] geneve2: left allmulticast mode [ 199.297799][T12001] ipip0: left promiscuous mode [ 199.464362][T12006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.497940][T12006] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.525923][ T28] kauditd_printk_skb: 24577 callbacks suppressed [ 199.525943][ T28] audit: type=1400 audit(2000000932.215:462714): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.557357][T12006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.590593][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.592548][ T28] audit: type=1400 audit(2000000932.215:462715): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.607812][ T3038] audit: audit_lost=29335 audit_rate_limit=0 audit_backlog_limit=64 [ 199.637813][ T3038] audit: backlog limit exceeded [ 199.649629][T12011] ªªªªª6: renamed from wg2 [ 199.650527][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.666039][ T4424] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.672147][ T3038] audit: audit_lost=29336 audit_rate_limit=0 audit_backlog_limit=64 [ 199.687352][ T3038] audit: backlog limit exceeded [ 199.701682][ T4424] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.707793][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.718294][ T4307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.737364][ T4424] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 199.765745][ T4424] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.784176][ T4424] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.802628][ T4424] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 199.832232][ T4424] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.865479][ T4424] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.921126][ T4424] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 199.944697][ T4424] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.972079][ T4424] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.988851][ T4424] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 202.534816][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3506'. [ 202.702628][T12162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3511'. [ 203.960025][T12191] netlink: 'syz.5.3526': attribute type 4 has an invalid length. [ 203.981762][T12196] netlink: 'syz.0.3524': attribute type 27 has an invalid length. [ 203.990936][T12191] netlink: 'syz.5.3526': attribute type 4 has an invalid length. [ 204.027724][T12196] erspan0: left promiscuous mode [ 204.040953][T12196] bond1: left promiscuous mode [ 204.056471][T12196] vcan1: left promiscuous mode [ 204.062080][T12196] team0: left promiscuous mode [ 204.080869][T12196] team0: left allmulticast mode [ 204.094216][T12196] team1: left promiscuous mode [ 204.107743][T12196] team1: left allmulticast mode [ 204.153917][T12199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.181948][T12199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.216528][T12198] netlink: 'syz.6.3528': attribute type 5 has an invalid length. [ 204.535570][T12240] netlink: 'syz.5.3546': attribute type 27 has an invalid length. [ 204.544706][ T28] kauditd_printk_skb: 19783 callbacks suppressed [ 204.544724][ T28] audit: type=1400 audit(2000000937.225:481910): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.582313][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.593555][ T3038] audit: audit_lost=29534 audit_rate_limit=0 audit_backlog_limit=64 [ 204.617026][ T28] audit: type=1400 audit(2000000937.225:481911): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.640383][ T3038] audit: backlog limit exceeded [ 204.645618][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.653863][ T3038] audit: audit_lost=29535 audit_rate_limit=0 audit_backlog_limit=64 [ 204.662160][T12240] bond0: left promiscuous mode [ 204.666253][ T3308] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.668048][T12240] vti0: left promiscuous mode [ 204.680029][ T3038] audit: backlog limit exceeded [ 204.685503][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.718574][T12241] 8021q: adding VLAN 0 to HW filter on device .` [ 204.748193][T12241] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.777520][T12241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.292078][T12281] netlink: 'syz.6.3561': attribute type 27 has an invalid length. [ 205.430113][T12285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.468882][T12285] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.500826][T12285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.881222][T12329] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3582'. [ 206.012753][T12339] syzkaller0: entered promiscuous mode [ 206.019501][T12339] syzkaller0: entered allmulticast mode [ 206.030847][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'. [ 206.042678][T12340] netlink: 'syz.1.3585': attribute type 27 has an invalid length. [ 206.132165][T12340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.150015][T12340] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.173897][T12340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.340059][T12357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3594'. [ 206.376984][T12363] netlink: 'syz.6.3596': attribute type 1 has an invalid length. [ 206.428492][T12363] bond5: entered promiscuous mode [ 206.443611][T12363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.491205][T12363] bond5: (slave bridge5): making interface the new active one [ 206.513502][T12363] bridge5: entered promiscuous mode [ 206.556403][T12363] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 206.827602][T12390] netlink: 'syz.0.3605': attribute type 27 has an invalid length. [ 206.928352][T12397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.949669][T12397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.628924][T12452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=12452 comm=syz.1.3634 [ 207.646596][T12452] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3634'. [ 207.970252][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3650'. [ 208.562838][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'. [ 208.581343][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3656'. [ 208.895783][T12502] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 208.902457][T12502] syzkaller0: Linktype set failed because interface is up [ 209.292609][T12019] Process accounting resumed [ 209.548401][ T28] kauditd_printk_skb: 19758 callbacks suppressed [ 209.548430][ T28] audit: type=1400 audit(2000000942.225:498903): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 209.597390][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.604674][ T3038] audit: audit_lost=30459 audit_rate_limit=0 audit_backlog_limit=64 [ 209.610057][ T4307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.616806][ T28] audit: type=1400 audit(2000000942.225:498904): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 209.635562][ T4307] audit: audit_lost=30460 audit_rate_limit=0 audit_backlog_limit=64 [ 209.643440][ T3038] audit: backlog limit exceeded [ 209.656711][T12555] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.663480][T12555] audit: audit_lost=30461 audit_rate_limit=0 audit_backlog_limit=64 [ 209.664301][ T28] audit: type=1400 audit(2000000942.225:498905): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.089196][T12582] geneve2: entered promiscuous mode [ 210.130084][ T4424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.139339][ T4424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.171375][ T4424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.221312][ T4424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.606409][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3711'. [ 211.191707][T12657] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3726'. [ 211.240234][T12657] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3726'. [ 211.249981][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3726'. [ 211.329931][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3728'. [ 211.757645][T12683] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 212.042796][T12707] -1: renamed from syzkaller0 [ 212.938038][T12750] xt_hashlimit: size too large, truncated to 1048576 [ 212.985219][T12752] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.3767'. [ 213.003978][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3767'. [ 213.289698][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3774'. [ 213.342392][T12770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3775'. [ 213.490994][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'. [ 213.503931][T12780] geneve3: entered promiscuous mode [ 213.513090][ T4424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 52812 - 0 [ 213.527957][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3782'. [ 213.540380][ T4424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 52812 - 0 [ 213.561914][ T4424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 52812 - 0 [ 213.585205][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3782'. [ 213.594972][ T4424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 52812 - 0 [ 214.559242][ T28] kauditd_printk_skb: 20539 callbacks suppressed [ 214.559261][ T28] audit: type=1400 audit(2000000947.245:517472): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.624715][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.625568][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.633434][T12850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.639665][T12851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.646983][ T3038] audit: audit_lost=31119 audit_rate_limit=0 audit_backlog_limit=64 [ 214.652545][ T3315] audit: audit_lost=31120 audit_rate_limit=0 audit_backlog_limit=64 [ 214.661434][T12850] audit: audit_lost=31121 audit_rate_limit=0 audit_backlog_limit=64 [ 214.678519][T12851] audit: audit_lost=31122 audit_rate_limit=0 audit_backlog_limit=64 [ 214.678543][T12851] audit: backlog limit exceeded [ 214.818014][T12858] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 214.992305][ T164] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.011411][ T164] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.180636][ T164] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.243330][ T164] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 215.551259][T12894] xt_hashlimit: size too large, truncated to 1048576 [ 215.698605][T12905] netlink: 'syz.2.3833': attribute type 1 has an invalid length. [ 215.707844][T12905] netlink: 'syz.2.3833': attribute type 4 has an invalid length. [ 215.718080][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3834'. [ 215.745109][T12905] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3833'. [ 215.787988][T12910] netlink: 'syz.2.3833': attribute type 1 has an invalid length. [ 215.796647][T12910] netlink: 'syz.2.3833': attribute type 4 has an invalid length. [ 215.815513][T12910] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3833'. [ 215.917451][T11672] IPVS: starting estimator thread 0... [ 215.938166][T12932] sch_fq: defrate 0 ignored. [ 216.016487][T12929] IPVS: using max 2592 ests per chain, 129600 per kthread [ 216.113616][T12941] syzkaller0: entered promiscuous mode [ 216.139584][T12941] syzkaller0: entered allmulticast mode [ 216.465378][T12960] xt_hashlimit: size too large, truncated to 1048576 [ 218.540759][T13053] ip6gre1: entered promiscuous mode [ 218.554981][T13053] ip6gre1: entered allmulticast mode [ 218.917010][T13066] bond5: left promiscuous mode [ 218.921830][T13066] bridge5: left promiscuous mode [ 219.432389][T13116] netlink: 'syz.1.3927': attribute type 10 has an invalid length. [ 219.458714][T13116] team0: Port device vxcan1 added [ 219.565785][ T28] kauditd_printk_skb: 19092 callbacks suppressed [ 219.565802][ T28] audit: type=1400 audit(2000000952.255:535704): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.620566][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.628548][ T4013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.635362][ T4013] audit: audit_lost=31409 audit_rate_limit=0 audit_backlog_limit=64 [ 219.646724][ T3038] audit: audit_lost=31410 audit_rate_limit=0 audit_backlog_limit=64 [ 219.648303][T13125] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.654919][ T4013] audit: backlog limit exceeded [ 219.656630][ T3038] audit: backlog limit exceeded [ 219.674504][ T28] audit: type=1400 audit(2000000952.285:535705): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.697240][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.128475][T13194] netlink: 'syz.2.3959': attribute type 27 has an invalid length. [ 221.237226][T13195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.258208][T13195] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.270329][T13195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.356461][T13194] ip6gre1: left promiscuous mode [ 221.371209][T13194] ip6gre1: left allmulticast mode [ 221.512087][T13199] geneve2: left promiscuous mode [ 221.647261][T13214] netlink: 'syz.2.3968': attribute type 1 has an invalid length. [ 221.694840][T13214] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 221.705264][T13214] bond6: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 221.718789][T13214] bond6: (slave vxcan1): making interface the new active one [ 221.727328][T13214] bond6: (slave vxcan1): Enslaving as an active interface with an up link [ 221.748971][T13214] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 221.761610][T13214] bond6: (slave vxcan3): Enslaving as a backup interface with an up link [ 221.817511][T13230] serio: Serial port ttyS3 [ 221.876853][T13236] __nla_validate_parse: 5 callbacks suppressed [ 221.876872][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3978'. [ 221.986120][T13253] netlink: 'syz.0.3985': attribute type 4 has an invalid length. [ 222.011779][T13253] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3985'. [ 222.052199][T13253] .`: renamed from bond0 [ 222.263468][T13279] bond7: entered promiscuous mode [ 222.956208][T13319] netlink: 'syz.5.4011': attribute type 1 has an invalid length. [ 223.015559][T13319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.046224][T13321] bond4: (slave veth13): Enslaving as an active interface with a down link [ 223.087160][T13319] bond4: (slave dummy0): making interface the new active one [ 223.100416][T13319] dummy0: entered promiscuous mode [ 223.107045][T13319] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 223.141764][T13319] bond4 (unregistering): (slave veth13): Releasing active interface [ 223.197915][T13319] bond4 (unregistering): (slave dummy0): Releasing active interface [ 223.219892][T13319] bond4 (unregistering): Released all slaves [ 223.695473][T13343] geneve3: left promiscuous mode [ 223.712951][ T4424] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 52812 - 0 [ 223.750530][ T4424] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 52812 - 0 [ 223.761567][T13357] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.4027'. [ 223.780513][ T4424] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 52812 - 0 [ 223.789700][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4027'. [ 223.817279][ T4424] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 52812 - 0 [ 224.187911][T13384] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4039'. [ 224.575928][ T28] kauditd_printk_skb: 24188 callbacks suppressed [ 224.575950][ T28] audit: type=1400 audit(2000000957.265:558369): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.608313][ T28] audit: type=1400 audit(2000000957.295:558370): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.643594][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.659815][ T28] audit: type=1400 audit(2000000957.295:558371): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.660478][ T3038] audit: audit_lost=31920 audit_rate_limit=0 audit_backlog_limit=64 [ 224.682924][ T28] audit: type=1400 audit(2000000957.295:558372): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.683027][ T28] audit: type=1400 audit(2000000957.295:558373): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.749696][ T28] audit: type=1400 audit(2000000957.295:558374): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.772669][ T28] audit: type=1400 audit(2000000957.295:558375): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.784923][ T3038] audit: backlog limit exceeded [ 225.707993][T13469] syzkaller0: entered promiscuous mode [ 225.717819][T13469] syzkaller0: entered allmulticast mode [ 226.192518][T13505] IPv6: sit1: Disabled Multicast RS [ 227.210072][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4102'. [ 227.257457][T13531] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.284892][T13535] macsec1: entered promiscuous mode [ 227.297394][T13535] bond6: entered promiscuous mode [ 227.308477][T13535] bond6: left promiscuous mode [ 227.370227][T13539] netlink: 'syz.2.4104': attribute type 1 has an invalid length. [ 227.440315][T13539] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.563772][T13539] bond8: (slave veth7): Enslaving as an active interface with a down link [ 227.612021][T13552] bond8: (slave dummy0): making interface the new active one [ 227.708611][T13552] dummy0: entered promiscuous mode [ 227.726340][T13552] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 227.772868][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4113'. [ 227.786641][T13539] bond8 (unregistering): (slave veth7): Releasing active interface [ 227.840960][T13539] bond8 (unregistering): (slave dummy0): Releasing active interface [ 227.850309][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4113'. [ 227.881024][T13539] bond8 (unregistering): Released all slaves [ 228.015266][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4115'. [ 228.133025][T13577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4120'. [ 228.147825][T13577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4120'. [ 228.379730][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4125'. [ 228.409160][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4125'. [ 228.440697][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4125'. [ 228.468595][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4125'. [ 228.605535][T13605] bond7: entered promiscuous mode [ 229.189333][T13625] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.262377][T13621] 8021q: adding VLAN 0 to HW filter on device .` [ 229.317604][T13621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.366538][T13637] IPv6: sit2: Disabled Multicast RS [ 229.598591][ T28] kauditd_printk_skb: 33846 callbacks suppressed [ 229.598628][ T28] audit: type=1400 audit(2000000962.265:576346): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.598740][ T28] audit: type=1400 audit(2000000962.285:576347): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.600150][ T28] audit: type=1400 audit(2000000962.285:576348): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.600187][ T28] audit: type=1400 audit(2000000962.285:576349): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.600237][ T28] audit: type=1400 audit(2000000962.285:576350): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.600265][ T28] audit: type=1400 audit(2000000962.285:576351): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.600289][ T28] audit: type=1400 audit(2000000962.285:576352): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.600372][ T28] audit: type=1400 audit(2000000962.285:576353): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.600434][ T28] audit: type=1400 audit(2000000962.285:576354): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.600454][ T28] audit: type=1400 audit(2000000962.285:576355): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.583868][T13684] netlink: 'syz.5.4164': attribute type 22 has an invalid length. [ 230.608503][T13684] netlink: 'syz.5.4164': attribute type 22 has an invalid length. [ 230.768510][T13693] bond4: entered promiscuous mode [ 231.885300][T13736] netlink: 'syz.2.4183': attribute type 1 has an invalid length. [ 231.911569][T13736] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 231.972603][T13736] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 231.994603][T13736] bond8: (slave ip6gre2): making interface the new active one [ 232.047455][T13736] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 234.606477][ T28] kauditd_printk_skb: 19928 callbacks suppressed [ 234.606554][ T28] audit: type=1400 audit(2000000967.295:593503): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.660870][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.668962][ T3038] audit: audit_lost=38140 audit_rate_limit=0 audit_backlog_limit=64 [ 234.669191][T13856] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.680387][ T3038] audit: backlog limit exceeded [ 234.691939][ T28] audit: type=1400 audit(2000000967.325:593504): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.715393][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.726940][ T3315] audit: audit_lost=38141 audit_rate_limit=0 audit_backlog_limit=64 [ 234.738632][T13858] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.745797][T13856] audit: audit_lost=38142 audit_rate_limit=0 audit_backlog_limit=64 [ 234.982446][T13875] __nla_validate_parse: 5 callbacks suppressed [ 234.982510][T13875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4240'. [ 235.213113][T13880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.259663][T13880] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.301915][T13880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.463762][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4251'. [ 236.139374][T13926] syzkaller0: entered promiscuous mode [ 236.167897][T13926] syzkaller0: entered allmulticast mode [ 236.287614][T13933] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 236.647711][T13956] syzkaller0: entered promiscuous mode [ 236.670437][T13956] syzkaller0: entered allmulticast mode [ 238.837419][T14049] syzkaller0: entered promiscuous mode [ 238.850491][T14049] syzkaller0: entered allmulticast mode [ 239.617155][ T28] kauditd_printk_skb: 19672 callbacks suppressed [ 239.617173][ T28] audit: type=1400 audit(2000000972.305:611262): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.624565][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.652725][T14078] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.659490][ T3038] audit: audit_lost=38781 audit_rate_limit=0 audit_backlog_limit=64 [ 239.666729][ T4307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.690292][ T3038] audit: backlog limit exceeded [ 239.692827][ T4307] audit: audit_lost=38782 audit_rate_limit=0 audit_backlog_limit=64 [ 239.695925][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.713134][T14079] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.713798][ T4307] audit: backlog limit exceeded [ 239.960899][T14098] Bluetooth: hci0: Frame reassembly failed (-90) [ 239.980175][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 240.778107][T14136] netlink: 'syz.1.4350': attribute type 1 has an invalid length. [ 240.826731][T14136] 8021q: adding VLAN 0 to HW filter on device bond8 [ 241.058948][T14149] netlink: 'syz.0.4355': attribute type 4 has an invalid length. [ 241.111478][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4356'. [ 241.127799][T14149] netlink: 'syz.0.4355': attribute type 4 has an invalid length. [ 241.162834][T14151] 8021q: adding VLAN 0 to HW filter on device bond9 [ 241.216149][T14155] netlink: 'syz.1.4356': attribute type 1 has an invalid length. [ 241.495259][T14172] syzkaller0: entered promiscuous mode [ 241.503641][T14172] syzkaller0: entered allmulticast mode [ 241.688371][T14189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4371'. [ 241.845453][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4376'. [ 241.939578][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4376'. [ 241.981604][T14199] 8021q: VLANs not supported on sit0 [ 242.025882][T10910] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.131368][T14206] geneve2: entered promiscuous mode [ 242.174237][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.185498][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.226561][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.246035][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.402520][T14226] xt_CT: No such helper "snmp_trap" [ 242.428029][T14226] xt_time: unknown flags 0xc [ 242.488377][T14236] netlink: 'syz.5.4391': attribute type 1 has an invalid length. [ 242.577500][T14236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.636245][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4391'. [ 242.645177][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4391'. [ 242.770779][T14243] macsec1: entered promiscuous mode [ 242.800759][T14243] bond5: entered promiscuous mode [ 242.820299][T14243] macsec1: entered allmulticast mode [ 242.839104][T14243] bond5: entered allmulticast mode [ 243.272107][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4406'. [ 243.333913][T14275] netlink: 'syz.5.4408': attribute type 4 has an invalid length. [ 243.334393][T14270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4406'. [ 243.362119][T14275] netlink: 'syz.5.4408': attribute type 4 has an invalid length. [ 243.396388][T14275] bond4: left promiscuous mode [ 243.407418][T14275] geneve2: left promiscuous mode [ 243.418870][T14275] bond5: left allmulticast mode [ 243.428705][T14275] bond5: left promiscuous mode [ 243.436077][T14275] macsec1: left promiscuous mode [ 243.451705][T14275] macsec1: left allmulticast mode [ 243.468237][ T50] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.486486][ T50] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.525607][ T50] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.564077][ T50] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 243.871473][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4421'. [ 244.141423][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4432'. [ 244.626424][ T28] kauditd_printk_skb: 17407 callbacks suppressed [ 244.626443][ T28] audit: type=1400 audit(2000000977.305:625577): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 244.653875][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 244.673229][ T3038] audit: audit_lost=39815 audit_rate_limit=0 audit_backlog_limit=64 [ 244.694652][ T3038] audit: backlog limit exceeded [ 244.702055][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 244.715951][T14338] audit: audit_backlog=65 > audit_backlog_limit=64 [ 244.722587][T14338] audit: audit_lost=39816 audit_rate_limit=0 audit_backlog_limit=64 [ 244.728928][ T3038] audit: audit_lost=39817 audit_rate_limit=0 audit_backlog_limit=64 [ 244.733893][T14338] audit: backlog limit exceeded [ 244.770114][ T28] audit: type=1400 audit(2000000977.315:625578): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.419844][T14375] bridge8: entered promiscuous mode [ 245.450138][T14375] bridge8: port 1(macvtap1) entered blocking state [ 245.463301][T14375] bridge8: port 1(macvtap1) entered disabled state [ 245.497016][T14375] macvtap1: entered allmulticast mode [ 245.505660][T14375] bridge8: entered allmulticast mode [ 245.512255][T14375] macvtap1: left allmulticast mode [ 245.519268][T14375] bridge8: left allmulticast mode [ 245.526394][T14375] bridge8: left promiscuous mode [ 245.939692][T14393] 8021q: adding VLAN 0 to HW filter on device bond9 [ 245.999034][T14393] bond9: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 246.056405][ T50] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 246.176775][ T12] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 246.630702][T14433] __nla_validate_parse: 3 callbacks suppressed [ 246.630718][T14433] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4475'. [ 246.762126][T14436] netlink: 'syz.6.4476': attribute type 13 has an invalid length. [ 246.792365][T14436] netlink: 'syz.6.4476': attribute type 17 has an invalid length. [ 246.909235][T14436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.953836][T14439] netlink: 'syz.2.4477': attribute type 1 has an invalid length. [ 246.977055][T14439] bond10: entered promiscuous mode [ 246.986956][T14439] 8021q: adding VLAN 0 to HW filter on device bond10 [ 247.012925][T14439] bond10: (slave bridge6): making interface the new active one [ 247.021390][T14439] bridge6: entered promiscuous mode [ 247.028240][T14439] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 247.188946][T14446] netlink: 'syz.6.4480': attribute type 1 has an invalid length. [ 247.223509][T14446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 248.410265][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4505'. [ 248.433505][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4508'. [ 248.451914][T14508] 8021q: adding VLAN 0 to HW filter on device bond10 [ 248.477785][T14508] macvlan0: entered promiscuous mode [ 248.485324][T14508] bond10: entered promiscuous mode [ 248.492387][T14508] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 248.501436][T14508] bond10: left promiscuous mode [ 248.501507][T14518] netlink: 'syz.5.4510': attribute type 10 has an invalid length. [ 248.527567][T14520] netlink: 'syz.2.4511': attribute type 1 has an invalid length. [ 248.538889][T14518] team0: Port device netdevsim1 added [ 248.564151][T14520] 8021q: adding VLAN 0 to HW filter on device bond11 [ 248.608653][T14527] netlink: 'syz.1.4514': attribute type 4 has an invalid length. [ 248.621922][T14528] bond11: (slave gretap1): making interface the new active one [ 248.631495][T14528] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 248.648054][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4513'. [ 248.660839][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4511'. [ 248.661024][T14527] netlink: 'syz.1.4514': attribute type 4 has an invalid length. [ 248.677106][T14520] vlan5: entered allmulticast mode [ 248.683362][T14520] bond11: entered allmulticast mode [ 248.690134][T14520] gretap1: entered allmulticast mode [ 248.969229][T14557] netlink: 'syz.6.4524': attribute type 7 has an invalid length. [ 249.019362][T14562] netlink: 'syz.1.4526': attribute type 10 has an invalid length. [ 249.050307][T14562] team0: Device netdevsim1 is of different type [ 249.109372][T14564] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4527'. [ 249.273927][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4530'. [ 249.640397][ T28] kauditd_printk_skb: 22560 callbacks suppressed [ 249.640417][ T28] audit: type=1400 audit(2000000982.315:644757): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.696785][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.713674][ T3038] audit: audit_lost=40945 audit_rate_limit=0 audit_backlog_limit=64 [ 249.745730][ T3038] audit: backlog limit exceeded [ 249.751296][ T28] audit: type=1400 audit(2000000982.315:644758): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.774662][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.782576][T14587] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.794133][ T4868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.804798][T14587] audit: audit_lost=40946 audit_rate_limit=0 audit_backlog_limit=64 [ 249.835771][ T3038] audit: audit_lost=40947 audit_rate_limit=0 audit_backlog_limit=64 [ 251.062310][T14625] macsec1: entered promiscuous mode [ 251.081750][T14625] geneve1: entered promiscuous mode [ 251.102239][T14625] macsec1: entered allmulticast mode [ 251.126422][T14625] geneve1: entered allmulticast mode [ 251.358089][T14643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.446606][T14654] bond0: (slave bridge7): making interface the new active one [ 251.507726][T14654] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 251.672609][T14671] macsec1: entered promiscuous mode [ 251.699423][T14671] geneve1: entered promiscuous mode [ 251.704765][T14671] macsec1: entered allmulticast mode [ 251.722110][T14671] geneve1: entered allmulticast mode [ 251.909038][T14681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4574'. [ 252.510676][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4578'. [ 253.424345][T14706] ªªªªªª: renamed from vlan0 [ 253.525420][T14712] syzkaller0: entered promiscuous mode [ 253.531855][T14712] syzkaller0: entered allmulticast mode [ 253.704986][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4595'. [ 253.792782][T14736] validate_nla: 1 callbacks suppressed [ 253.792802][T14736] netlink: 'syz.6.4597': attribute type 2 has an invalid length. [ 253.873584][T14736] netlink: 'syz.6.4597': attribute type 2 has an invalid length. [ 254.353499][T14762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4608'. [ 254.553548][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4608'. [ 254.646718][ T28] kauditd_printk_skb: 16949 callbacks suppressed [ 254.646804][ T28] audit: type=1400 audit(2000000987.325:660954): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.693341][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.700378][ T3038] audit: audit_lost=41199 audit_rate_limit=0 audit_backlog_limit=64 [ 254.709173][ T28] audit: type=1400 audit(2000000987.375:660955): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.732446][ T3038] audit: backlog limit exceeded [ 254.741197][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.749289][ T3038] audit: audit_lost=41200 audit_rate_limit=0 audit_backlog_limit=64 [ 254.757518][ T28] audit: type=1400 audit(2000000987.375:660956): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.780198][ T3038] audit: backlog limit exceeded [ 254.785289][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.090027][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4617'. [ 255.275117][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4616'. [ 256.719864][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4644'. [ 256.962364][T14865] netlink: 'syz.5.4650': attribute type 4 has an invalid length. [ 257.013130][T14866] netlink: 'syz.5.4650': attribute type 4 has an invalid length. [ 257.213171][T14868] netlink: 'syz.5.4651': attribute type 4 has an invalid length. [ 257.250915][T14868] netlink: 'syz.5.4651': attribute type 4 has an invalid length. [ 257.424207][T14873] netlink: 'syz.1.4647': attribute type 4 has an invalid length. [ 257.757691][T14886] syzkaller0: entered promiscuous mode [ 257.774255][T14886] syzkaller0: entered allmulticast mode [ 257.932532][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4664'. [ 257.973314][T14900] bond11: entered promiscuous mode [ 257.997301][T14900] 8021q: adding VLAN 0 to HW filter on device bond11 [ 258.043021][T14908] bridge4: entered promiscuous mode [ 258.059345][T14908] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 258.249393][T14913] syzkaller0: entered promiscuous mode [ 258.266354][T14913] syzkaller0: entered allmulticast mode [ 258.668782][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4675'. [ 258.766884][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4675'. [ 259.447561][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4685'. [ 259.656678][ T28] kauditd_printk_skb: 20446 callbacks suppressed [ 259.656720][ T28] audit: type=1400 audit(2000000992.345:678047): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.680048][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.723216][ T3038] audit: audit_lost=42320 audit_rate_limit=0 audit_backlog_limit=64 [ 259.732508][ T28] audit: type=1400 audit(2000000992.345:678048): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.740483][ T3038] audit: backlog limit exceeded [ 259.791292][ T4868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.800647][ T4868] audit: audit_lost=42321 audit_rate_limit=0 audit_backlog_limit=64 [ 259.807850][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.820102][T14970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.827894][ T4868] audit: backlog limit exceeded [ 259.990275][T14979] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4693'. [ 261.717693][T15035] netlink: 'syz.5.4715': attribute type 13 has an invalid length. [ 261.725611][T15035] netlink: 'syz.5.4715': attribute type 17 has an invalid length. [ 261.816841][T15035] 8021q: adding VLAN 0 to HW filter on device .` [ 261.840527][T15035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.220285][T15052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.516209][T15093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4740'. [ 263.549139][T15095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4750'. [ 263.580597][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4740'. [ 263.984540][T15114] bond6: entered allmulticast mode [ 264.081304][T15114] bridge8: entered promiscuous mode [ 264.100581][T15114] bridge8: entered allmulticast mode [ 264.108515][T15114] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 264.489747][T15145] netlink: 'syz.5.4764': attribute type 4 has an invalid length. [ 264.519090][T15145] netlink: 'syz.5.4764': attribute type 4 has an invalid length. [ 264.593194][T15150] netlink: 'syz.5.4766': attribute type 1 has an invalid length. [ 264.642338][T15150] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.666253][ T28] kauditd_printk_skb: 32083 callbacks suppressed [ 264.666271][ T28] audit: type=1400 audit(2000000997.345:693742): avc: denied { module_request } for pid=15113 comm="syz.0.4748" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 264.679351][T15150] bond7: (slave dummy0): making interface the new active one [ 264.698315][T15154] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.704984][T15150] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 264.710077][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.710094][ T3038] audit: audit_lost=47786 audit_rate_limit=0 audit_backlog_limit=64 [ 264.710112][ T3038] audit: backlog limit exceeded [ 264.710156][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.710169][ T3038] audit: audit_lost=47787 audit_rate_limit=0 audit_backlog_limit=64 [ 264.710184][ T3038] audit: backlog limit exceeded [ 264.710220][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.710233][ T3038] audit: audit_lost=47788 audit_rate_limit=0 audit_backlog_limit=64 [ 264.783990][T15155] bond7 (unregistering): (slave dummy0): Releasing active interface [ 264.834551][T15155] bond7 (unregistering): Released all slaves [ 265.026026][T15174] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4775'. [ 265.079660][T15178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15178 comm=syz.5.4778 [ 265.093912][T15178] netlink: 'syz.5.4778': attribute type 1 has an invalid length. [ 265.102690][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4775'. [ 265.164709][T15178] bond7: (slave gretap2): making interface the new active one [ 265.187567][T15178] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 265.514628][T15208] bond3: entered promiscuous mode [ 265.553819][T15208] ip6gretap0: entered promiscuous mode [ 265.564173][T15208] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 265.604380][T15208] bond3 (unregistering): (slave ip6gretap0): Releasing backup interface [ 265.618382][T15208] ip6gretap0: left promiscuous mode [ 265.628795][T15208] bond3 (unregistering): Released all slaves [ 265.817170][T15224] geneve1: left allmulticast mode [ 265.839302][T15224] geneve1: left promiscuous mode [ 265.864104][T15232] netlink: 'syz.1.4801': attribute type 4 has an invalid length. [ 265.882467][T15232] netlink: 'syz.1.4801': attribute type 4 has an invalid length. [ 265.930201][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4803'. [ 266.982352][T15273] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4816'. [ 266.985060][T15276] netlink: 'syz.2.4817': attribute type 13 has an invalid length. [ 267.195567][T15289] netlink: 'syz.0.4822': attribute type 1 has an invalid length. [ 267.262558][T15289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.544261][T15314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4833'. [ 267.583409][T15314] ip6gre2: entered promiscuous mode [ 267.610310][T15314] ip6gre2: entered allmulticast mode [ 267.739831][T15314] netlink: 'syz.6.4833': attribute type 6 has an invalid length. [ 267.769439][T15314] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4833'. [ 267.802300][T15328] netlink: 'syz.1.4839': attribute type 1 has an invalid length. [ 267.838982][T15328] netlink: 'syz.1.4839': attribute type 4 has an invalid length. [ 267.888941][T15328] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4839'. [ 268.413996][T15368] netlink: 'syz.6.4855': attribute type 1 has an invalid length. [ 268.472469][T15368] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.504436][T15371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.553099][T15368] vlan5: entered promiscuous mode [ 268.579421][T15368] bond9: entered promiscuous mode [ 268.649222][T15372] bond9: (slave geneve2): making interface the new active one [ 268.685744][T15372] geneve2: entered promiscuous mode [ 268.707670][T15372] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 268.750958][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.770247][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.786920][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.815752][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.306624][T15399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 269.396402][T15403] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4870'. [ 269.604112][T15414] netlink: 'syz.5.4875': attribute type 13 has an invalid length. [ 269.631369][T15412] netlink: 'syz.2.4874': attribute type 1 has an invalid length. [ 269.639598][T15412] netlink: 'syz.2.4874': attribute type 4 has an invalid length. [ 269.647964][T15412] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4874'. [ 269.683567][ T28] kauditd_printk_skb: 37684 callbacks suppressed [ 269.683586][ T28] audit: type=1400 audit(2000001002.365:713586): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 269.748987][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.754605][T15418] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.764057][ T4013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.772148][ T28] audit: type=1400 audit(2000001002.365:713587): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 269.773934][ T3038] audit: audit_lost=53736 audit_rate_limit=0 audit_backlog_limit=64 [ 269.806191][ T4013] audit: audit_lost=53737 audit_rate_limit=0 audit_backlog_limit=64 [ 269.815071][ T4013] audit: backlog limit exceeded [ 269.825816][T15418] audit: audit_lost=53738 audit_rate_limit=0 audit_backlog_limit=64 [ 269.866910][ T28] audit: type=1400 audit(2000001002.365:713588): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 271.610763][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4897'. [ 271.643084][T15473] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 271.654756][T15473] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 271.672001][T15476] syzkaller0: entered promiscuous mode [ 271.690166][T15476] syzkaller0: entered allmulticast mode [ 271.737436][T15473] macvlan2: entered promiscuous mode [ 271.773294][T15473] macvlan2: entered allmulticast mode [ 271.809412][T15473] bond12: (slave macvlan2): Error -98 calling set_mac_address [ 271.941363][T15484] netlink: 'syz.1.4902': attribute type 4 has an invalid length. [ 272.275343][T15505] netlink: 'syz.0.4910': attribute type 1 has an invalid length. [ 272.321928][T15505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.340013][T15505] vlan0: entered promiscuous mode [ 272.345101][T15505] bond4: entered promiscuous mode [ 272.360707][T15505] bond4: (slave geneve3): making interface the new active one [ 272.368366][T15505] geneve3: entered promiscuous mode [ 272.375228][T15505] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 272.386341][ T164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.399360][ T164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.410730][ T164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.422106][ T164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.144215][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4916'. [ 273.937763][T15563] netlink: 'syz.2.4930': attribute type 1 has an invalid length. [ 273.964931][T15563] netlink: 'syz.2.4930': attribute type 1 has an invalid length. [ 273.989432][T15563] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4930'. [ 274.167166][ T164] Bluetooth: hci0: Frame reassembly failed (-84) [ 274.691554][ T28] kauditd_printk_skb: 20807 callbacks suppressed [ 274.691572][ T28] audit: type=1400 audit(2000001007.375:730458): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.755186][ T28] audit: type=1400 audit(2000001007.405:730459): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.788870][T15595] netlink: 'syz.6.4943': attribute type 4 has an invalid length. [ 274.800510][ T28] audit: type=1400 audit(2000001007.405:730460): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.806370][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.851938][ T4013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.858837][ T28] audit: type=1400 audit(2000001007.405:730461): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.884338][T15596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.891316][T15596] audit: audit_lost=55051 audit_rate_limit=0 audit_backlog_limit=64 [ 274.908252][ T3038] audit: audit_lost=55052 audit_rate_limit=0 audit_backlog_limit=64 [ 274.917795][ T3038] audit: backlog limit exceeded [ 275.091666][T15608] netlink: 'syz.1.4949': attribute type 3 has an invalid length. [ 275.135317][T15608] netlink: 'syz.1.4949': attribute type 1 has an invalid length. [ 275.154334][T15608] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4949'. [ 275.406782][T15620] lo: entered allmulticast mode [ 275.429514][T15620] tunl0: entered allmulticast mode [ 275.448064][T15620] gre0: entered allmulticast mode [ 275.471314][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4955'. [ 275.499878][T15620] gretap0: entered allmulticast mode [ 275.675889][T15620] erspan0: entered allmulticast mode [ 275.702755][T15620] ip_vti0: entered allmulticast mode [ 275.726429][T15620] ip6_vti0: entered allmulticast mode [ 275.733143][T15620] sit0: entered allmulticast mode [ 275.758934][T15620] ip6tnl0: entered allmulticast mode [ 275.871383][T15620] ip6gre0: entered allmulticast mode [ 275.887127][T15620] ip6gretap0: entered allmulticast mode [ 275.934710][T15620] vcan0: entered allmulticast mode [ 275.960475][T15620] bond0: entered allmulticast mode [ 275.966422][T15620] bond_slave_0: entered allmulticast mode [ 275.974382][T15620] bond_slave_1: entered allmulticast mode [ 275.999949][T15620] team0: entered allmulticast mode [ 276.016570][T15620] team_slave_0: entered allmulticast mode [ 276.029165][T15620] team_slave_1: entered allmulticast mode [ 276.035362][T15620] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 276.045318][T15620] dummy0: entered allmulticast mode [ 276.061539][T15620] nlmon0: entered allmulticast mode [ 276.082432][T15620] caif0: entered allmulticast mode [ 276.096143][T15620] batadv0: entered allmulticast mode [ 276.102492][T15620] vxcan0: entered allmulticast mode [ 276.108705][T15620] vxcan1: entered allmulticast mode [ 276.114237][T15620] veth0: entered allmulticast mode [ 276.120280][T15620] veth1: entered allmulticast mode [ 276.127029][T15620] wg0: entered allmulticast mode [ 276.132364][T15620] wg1: entered allmulticast mode [ 276.137893][T15620] wg2: entered allmulticast mode [ 276.143446][T15620] veth0_to_bridge: entered allmulticast mode [ 276.152008][T15620] bridge_slave_0: entered allmulticast mode [ 276.159202][T15620] veth1_to_bridge: entered allmulticast mode [ 276.167544][T15620] bridge_slave_1: entered allmulticast mode [ 276.173755][T15620] veth0_to_bond: entered allmulticast mode [ 276.185692][T10910] Bluetooth: hci0: command 0x1003 tx timeout [ 276.185750][T10909] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 276.191965][T15620] veth1_to_bond: entered allmulticast mode [ 276.204283][T15620] veth0_to_team: entered allmulticast mode [ 276.267998][T15620] veth1_to_team: entered allmulticast mode [ 276.324342][T15620] veth0_to_batadv: entered allmulticast mode [ 276.342457][T15635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4959'. [ 276.354440][T15620] batadv_slave_0: entered allmulticast mode [ 276.360991][T15620] veth1_to_batadv: entered allmulticast mode [ 276.368135][T15620] batadv_slave_1: entered allmulticast mode [ 276.377649][T15620] xfrm0: entered allmulticast mode [ 276.383331][T15620] veth0_to_hsr: entered allmulticast mode [ 276.389916][T15620] hsr_slave_0: entered allmulticast mode [ 276.396809][T15620] veth1_to_hsr: entered allmulticast mode [ 276.402961][T15620] hsr_slave_1: entered allmulticast mode [ 276.411147][T15620] hsr0: entered allmulticast mode [ 276.417090][T15620] veth1_virt_wifi: entered allmulticast mode [ 276.423732][T15620] veth0_virt_wifi: entered allmulticast mode [ 276.430548][T15620] veth1_vlan: entered allmulticast mode [ 276.438704][T15620] veth0_vlan: entered allmulticast mode [ 276.445897][T15620] vlan0: entered allmulticast mode [ 276.452612][T15620] vlan1: entered allmulticast mode [ 276.458804][T15620] macvlan0: entered allmulticast mode [ 276.464998][T15620] macvlan1: entered allmulticast mode [ 276.474038][T15620] ipvlan0: entered allmulticast mode [ 276.480014][T15620] ipvlan1: entered allmulticast mode [ 276.486076][T15620] veth1_macvtap: entered allmulticast mode [ 276.492307][T15620] veth0_macvtap: entered allmulticast mode [ 276.500506][T15620] macvtap0: entered allmulticast mode [ 276.508384][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4959'. [ 276.508572][T15620] macsec0: entered allmulticast mode [ 276.524107][T15620] geneve0: entered allmulticast mode [ 276.532190][T15620] geneve1: entered allmulticast mode [ 276.538737][T15620] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 276.546930][T15620] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 276.555217][T15620] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 276.565617][T15620] bridge1: entered allmulticast mode [ 276.572039][T15620] ip6tnl1: entered allmulticast mode [ 276.578053][T15620] batadv1: entered allmulticast mode [ 276.585199][T15620] vlan2: entered allmulticast mode [ 276.592740][T15620] ip6gre1: entered allmulticast mode [ 276.598814][T15620] ipip0: entered allmulticast mode [ 276.605194][T15620] gtp0: entered allmulticast mode [ 276.610945][T15620] veth2: entered allmulticast mode [ 276.618294][T15620] veth3: entered allmulticast mode [ 276.624199][T15620] bridge0: entered allmulticast mode [ 276.630120][T15620] bridge2: entered allmulticast mode [ 276.635836][T15620] bond1: entered allmulticast mode [ 276.641662][T15620] sit1: entered allmulticast mode [ 276.648655][T15620] ip6_vti1: entered allmulticast mode [ 276.654408][T15620] bond2: entered allmulticast mode [ 276.660626][T15620] veth4: entered allmulticast mode [ 276.666478][T15620] veth5: entered allmulticast mode [ 276.672168][T15620] ipip1: entered allmulticast mode [ 276.679809][T15620] veth6: entered allmulticast mode [ 276.687698][T15620] veth7: entered allmulticast mode [ 276.693731][T15620] vlan3: entered allmulticast mode [ 276.700062][T15620] bond3: entered allmulticast mode [ 276.705607][T15620] veth8: entered allmulticast mode [ 276.712940][T15620] veth9: entered allmulticast mode [ 276.718718][T15620] bridge3: entered allmulticast mode [ 276.724875][T15620] hsr1: entered allmulticast mode [ 276.731064][T15620] veth10: entered allmulticast mode [ 276.738417][T15620] veth11: entered allmulticast mode [ 276.744981][T15620] veth12: entered allmulticast mode [ 276.753996][T15620] veth13: entered allmulticast mode [ 276.760522][T15620] bond4: entered allmulticast mode [ 276.768907][T15620] bridge4: entered allmulticast mode [ 276.776308][T15620] vlan4: entered allmulticast mode [ 276.781850][T15620] veth14: entered allmulticast mode [ 276.788372][T15620] veth15: entered allmulticast mode [ 276.794448][T15620] veth16: entered allmulticast mode [ 276.802675][T15620] veth17: entered allmulticast mode [ 276.808598][T15620] veth18: entered allmulticast mode [ 276.814506][T15620] veth19: entered allmulticast mode [ 276.820336][T15620] bond5: entered allmulticast mode [ 276.827670][T15620] bridge5: entered allmulticast mode [ 276.833617][T15620] veth20: entered allmulticast mode [ 276.839294][T15620] veth21: entered allmulticast mode [ 276.844980][T15620] bridge6: entered allmulticast mode [ 276.850590][T15620] ip6gretap1: entered allmulticast mode [ 276.858141][T15620] 0: entered allmulticast mode [ 276.864543][T15620] bond6: entered allmulticast mode [ 276.877058][T15620] bond7: left promiscuous mode [ 276.883062][T15620] bond7: entered allmulticast mode [ 276.890760][T15620] veth22: entered allmulticast mode [ 276.896658][T15620] veth23: entered allmulticast mode [ 276.902371][T15620] bridge7: entered allmulticast mode [ 276.923321][T15620] bridge8: entered allmulticast mode [ 276.943731][T15620] bond8: entered allmulticast mode [ 276.954781][T15620] bridge9: entered allmulticast mode [ 276.971862][T15620] ip6gre2: left promiscuous mode [ 276.988725][T15620] bond9: entered allmulticast mode [ 276.999645][T15620] geneve2: entered allmulticast mode [ 277.029352][T15620] vlan5: left promiscuous mode [ 277.041731][T15620] bond9: left promiscuous mode [ 277.053548][T15620] geneve2: left promiscuous mode [ 277.059588][T15620] vlan5: entered allmulticast mode [ 277.124659][ T50] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.135361][ T50] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.188088][ T50] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.211361][ T50] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.522200][T15730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4995'. [ 278.604092][T15730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15730 comm=syz.5.4995 [ 279.654832][ T4424] Bluetooth: hci0: Frame reassembly failed (-84) [ 279.696410][ T28] kauditd_printk_skb: 28003 callbacks suppressed [ 279.696429][ T28] audit: type=1400 audit(2000001012.385:749648): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.739867][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.749211][ T4868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.756418][ T4868] audit: audit_lost=57992 audit_rate_limit=0 audit_backlog_limit=64 [ 279.758635][ T4013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.765030][ T3038] audit: audit_lost=57993 audit_rate_limit=0 audit_backlog_limit=64 [ 279.780769][ T4868] audit: backlog limit exceeded [ 279.789741][ T28] audit: type=1400 audit(2000001012.385:749649): avc: denied { map_create } for pid=15780 comm="syz.1.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 279.798188][T15786] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.830086][ T3038] audit: backlog limit exceeded [ 280.590881][T15797] ------------[ cut here ]------------ [ 280.596440][T15797] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 280.608808][T15797] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#1: syz.6.5024/15797 [ 280.619364][T15797] Modules linked in: [ 280.623336][T15797] CPU: 1 UID: 0 PID: 15797 Comm: syz.6.5024 Not tainted syzkaller #0 PREEMPT(full) [ 280.632802][T15797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.642932][T15797] RIP: 0010:u32_change+0x1463/0x14d0 [ 280.651098][T15797] Code: 31 ed e9 96 fe ff ff e8 8b e0 c1 fc 48 8d 3d 54 19 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 94 68 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 280.671062][T15797] RSP: 0018:ffffc9000e8975e0 EFLAGS: 00010287 [ 280.677691][T15797] RAX: ffffffff84978005 RBX: ffffc9000e8977f0 RCX: 0000000000000010 [ 280.685909][T15797] RDX: ffffffff867e6894 RSI: 0000000000000020 RDI: ffffffff87209960 [ 280.693906][T15797] RBP: ffffc9000e8976e8 R08: 0001888104c86a87 R09: 0000000000000000 [ 280.701932][T15797] R10: ffff888104c86a00 R11: 0000000000000002 R12: ffff88811a49b500 [ 280.710479][T15797] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88811a49b5c0 [ 280.718517][T15797] FS: 00007f61c10bf6c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 280.727583][T15797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.734256][T15797] CR2: 00007f61c271edd5 CR3: 00000001672b6000 CR4: 00000000003506f0 [ 280.743129][T15797] DR0: 0000200000000440 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.751264][T15797] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 280.759288][T15797] Call Trace: [ 280.762597][T15797] [ 280.765550][T15797] tc_new_tfilter+0xfc0/0x1200 [ 280.771057][T15797] ? ns_capable+0x7c/0xb0 [ 280.775476][T15797] ? __pfx_tc_new_tfilter+0x10/0x10 [ 280.780833][T15797] rtnetlink_rcv_msg+0x64b/0x720 [ 280.785827][T15797] ? avc_has_perm_noaudit+0xab/0x130 [ 280.791324][T15797] netlink_rcv_skb+0x123/0x220 [ 280.796713][T15797] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.802511][T15797] rtnetlink_rcv+0x1c/0x30 [ 280.807029][T15797] netlink_unicast+0x5c0/0x690 [ 280.811832][T15797] netlink_sendmsg+0x5c8/0x6f0 [ 280.816867][T15797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.822342][T15797] ____sys_sendmsg+0x563/0x5b0 [ 280.827730][T15797] ___sys_sendmsg+0x195/0x1e0 [ 280.832595][T15797] __sys_sendmmsg+0x185/0x320 [ 280.837871][T15797] __x64_sys_sendmmsg+0x57/0x70 [ 280.842765][T15797] x64_sys_call+0x27aa/0x3020 [ 280.847630][T15797] do_syscall_64+0x12c/0x370 [ 280.852342][T15797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.858883][T15797] RIP: 0033:0x7f61c266c819 [ 280.863367][T15797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.883467][T15797] RSP: 002b:00007f61c10bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 280.892461][T15797] RAX: ffffffffffffffda RBX: 00007f61c28e5fa0 RCX: 00007f61c266c819 [ 280.900602][T15797] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 280.908626][T15797] RBP: 00007f61c2702c91 R08: 0000000000000000 R09: 0000000000000000 [ 280.917312][T15797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.925393][T15797] R13: 00007f61c28e6038 R14: 00007f61c28e5fa0 R15: 00007ffe67cabce8 [ 280.933514][T15797] [ 280.936590][T15797] ---[ end trace 0000000000000000 ]--- [ 280.999638][T15804] netlink: 'syz.2.5027': attribute type 1 has an invalid length. [ 281.058041][T15804] 8021q: adding VLAN 0 to HW filter on device bond14 [ 281.080132][T15804] bond13: (slave bond14): making interface the new active one [ 281.129007][T15804] bond13: (slave bond14): Enslaving as an active interface with an up link [ 281.271114][T15809] bond13: (slave gretap3): Enslaving as a backup interface with an up link [ 281.706648][T10910] Bluetooth: hci0: command 0x1003 tx timeout [ 281.745808][T10909] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 281.765815][T15828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5035'. [ 281.792877][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5036'. [ 281.852372][T15828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15828 comm=syz.1.5035 [ 282.309730][T15860] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.349316][T15860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.745273][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5067'. [ 284.705722][ T3038] audit_log_start: 26964 callbacks suppressed [ 284.705744][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.769462][ T3038] audit: audit_lost=62302 audit_rate_limit=0 audit_backlog_limit=64 [ 284.791051][ T3038] audit: backlog limit exceeded [ 284.805269][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.822661][ T3038] audit: audit_lost=62303 audit_rate_limit=0 audit_backlog_limit=64 [ 284.849466][ T3038] audit: backlog limit exceeded [ 284.868167][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.895566][ T3038] audit: audit_lost=62304 audit_rate_limit=0 audit_backlog_limit=64 [ 284.915504][ T3038] audit: backlog limit exceeded [ 284.922796][T15945] audit: audit_backlog=65 > audit_backlog_limit=64 [ 286.494694][T15971] netlink: 'syz.1.5093': attribute type 21 has an invalid length. [ 286.577509][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5096'. [ 288.869940][T16051] 8021q: VLANs not supported on bond0 [ 288.888989][T16051] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5128'. [ 288.952292][T16051] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.965174][T16051] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.974927][T16051] .` (unregistering): (slave batadv0): Releasing backup interface [ 288.990426][T16051] .` (unregistering): Released all slaves [ 289.716166][ T28] kauditd_printk_skb: 34067 callbacks suppressed [ 289.716186][ T28] audit: type=1400 audit(2000001022.395:774006): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 289.731069][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.763166][ T3038] audit: audit_lost=70223 audit_rate_limit=0 audit_backlog_limit=64 [ 289.773145][ T3038] audit: backlog limit exceeded [ 289.782396][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.793950][ T3038] audit: audit_lost=70224 audit_rate_limit=0 audit_backlog_limit=64 [ 289.804706][T16079] syzkaller0: entered promiscuous mode [ 289.809933][ T28] audit: type=1400 audit(2000001022.405:774007): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 289.831909][ T3038] audit: backlog limit exceeded [ 289.837709][ T28] audit: type=1400 audit(2000001022.405:774008): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 289.841112][T16083] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.860882][T16079] syzkaller0: entered allmulticast mode [ 290.170899][T16096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.203995][T16096] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.219777][T16096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.009988][T16131] vlan6: entered allmulticast mode [ 291.025097][T16131] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5158'. [ 291.050118][T16131] bond0 (unregistering): left promiscuous mode [ 291.059580][T16131] bond_slave_0: left promiscuous mode [ 291.067911][T16131] bond_slave_1: left promiscuous mode [ 291.080347][T16131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.097816][T16131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.110311][T16131] bond0 (unregistering): Released all slaves [ 292.298454][T16181] syzkaller0: entered promiscuous mode [ 292.333780][T16181] syzkaller0: entered allmulticast mode [ 292.707479][T16193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5182'. [ 292.804097][T16193] bond15: entered promiscuous mode [ 292.825553][T16193] 8021q: adding VLAN 0 to HW filter on device bond15 [ 292.842059][T16199] 8021q: adding VLAN 0 to HW filter on device bond15 [ 292.860069][T16199] bond15: (slave sit3): The slave device specified does not support setting the MAC address [ 293.020832][T16199] bond15: (slave sit3): Error -95 calling set_mac_address [ 294.174709][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5198'. [ 294.222306][T16239] bond8: entered promiscuous mode [ 294.243187][T16239] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.284908][T16239] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.292580][T16239] bond8: (slave sit3): The slave device specified does not support setting the MAC address [ 294.303688][T16239] bond8: (slave sit3): Error -95 calling set_mac_address [ 294.669385][T16280] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 294.669385][T16280] The task syz.5.5205 (16280) triggered the difference, watch for misbehavior. [ 294.687654][T16279] netlink: 'syz.2.5214': attribute type 4 has an invalid length. [ 294.718732][T16279] netlink: 'syz.2.5214': attribute type 4 has an invalid length. [ 294.726939][ T3038] audit_log_start: 19796 callbacks suppressed [ 294.726985][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.726999][ T3038] audit: audit_lost=71497 audit_rate_limit=0 audit_backlog_limit=64 [ 294.727014][ T3038] audit: backlog limit exceeded [ 294.727089][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.727145][ T3038] audit: audit_lost=71498 audit_rate_limit=0 audit_backlog_limit=64 [ 294.727161][ T3038] audit: backlog limit exceeded [ 294.727220][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.727231][ T3038] audit: audit_lost=71499 audit_rate_limit=0 audit_backlog_limit=64 [ 294.727245][ T3038] audit: backlog limit exceeded [ 294.727370][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.821610][T16277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5213'. [ 294.904860][T16284] serio: Serial port ttyS3 [ 295.071148][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5224'. [ 295.123692][T16302] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16302 comm=syz.6.5224 [ 296.141853][T16349] serio: Serial port ttyS3 [ 296.293321][ T4868] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 296.355622][ T4868] CPU: 1 UID: 0 PID: 4868 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 296.355663][ T4868] Tainted: [W]=WARN [ 296.355671][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.355744][ T4868] Call Trace: [ 296.355752][ T4868] [ 296.355761][ T4868] __dump_stack+0x1d/0x30 [ 296.355793][ T4868] dump_stack_lvl+0x95/0xd0 [ 296.355818][ T4868] dump_stack+0x15/0x1b [ 296.355842][ T4868] dump_header+0x80/0x240 [ 296.355868][ T4868] oom_kill_process+0x295/0x350 [ 296.355965][ T4868] out_of_memory+0x97d/0xb80 [ 296.355987][ T4868] try_charge_memcg+0x62e/0xa10 [ 296.356082][ T4868] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 296.356120][ T4868] __swap_cache_prepare_and_add+0x67/0x460 [ 296.356155][ T4868] ? alloc_pages_mpol+0x217/0x260 [ 296.356274][ T4868] swap_cache_alloc_folio+0xa2/0x120 [ 296.356389][ T4868] swap_cluster_readahead+0x36b/0x3d0 [ 296.356423][ T4868] swapin_readahead+0xde/0x840 [ 296.356483][ T4868] ? __rcu_read_unlock+0x4e/0x70 [ 296.356507][ T4868] ? __perf_event_task_sched_in+0xa65/0xad0 [ 296.356534][ T4868] ? __list_add_valid_or_report+0x38/0xe0 [ 296.356558][ T4868] ? xfd_validate_state+0x45/0xf0 [ 296.356666][ T4868] ? __rcu_read_unlock+0x4e/0x70 [ 296.356689][ T4868] ? swap_cache_get_folio+0x26f/0x280 [ 296.356721][ T4868] do_swap_page+0x2fe/0x21e0 [ 296.356754][ T4868] ? __schedule+0x93c/0xd40 [ 296.356829][ T4868] ? __rcu_read_lock+0x36/0x50 [ 296.356851][ T4868] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 296.356882][ T4868] handle_mm_fault+0xb46/0x3020 [ 296.356975][ T4868] ? vma_start_read+0x1c7/0x2c0 [ 296.357006][ T4868] do_user_addr_fault+0x62f/0x1050 [ 296.357042][ T4868] ? trace_page_fault_user+0x1f/0xe0 [ 296.357083][ T4868] exc_page_fault+0x62/0xa0 [ 296.357105][ T4868] asm_exc_page_fault+0x26/0x30 [ 296.357128][ T4868] RIP: 0033:0x7f61c2627997 [ 296.357147][ T4868] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 296.357203][ T4868] RSP: 002b:00007ffe67cabfe0 EFLAGS: 00010202 [ 296.357225][ T4868] RAX: 0000000000000000 RBX: 00005555764c5500 RCX: 00007f61c2627997 [ 296.357240][ T4868] RDX: 00007ffe67cac020 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.357255][ T4868] RBP: 00007ffe67cac08c R08: 0000000000000000 R09: 0000000000000000 [ 296.357269][ T4868] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 296.357334][ T4868] R13: 00000000000927c0 R14: 00000000000483b6 R15: 00007ffe67cac0e0 [ 296.357362][ T4868] [ 296.677319][ T4868] memory: usage 176152kB, limit 307200kB, failcnt 771 [ 296.685679][ T4868] memory+swap: usage 175352kB, limit 9007199254740988kB, failcnt 0 [ 296.730609][ T4868] kmem: usage 141612kB, limit 9007199254740988kB, failcnt 0 [ 296.745706][ T4868] Memory cgroup stats for /syz6: [ 296.746717][ T4868] cache 532480 [ 296.778874][ T4868] rss 110592 [ 296.785934][ T4868] shmem 0 [ 296.791979][ T4868] mapped_file 0 [ 296.801767][ T4868] dirty 4096 [ 296.808965][ T4868] writeback 0 [ 296.815499][ T4868] workingset_refault_anon 4530 [ 296.825512][ T4868] workingset_refault_file 4967 [ 296.839154][ T4868] swap 909312 [ 296.846292][ T4868] swapcached 23109632 [ 296.854519][ T4868] pgpgin 295786 [ 296.866218][ T4868] pgpgout 295620 [ 296.873750][ T4868] pgfault 248363 [ 296.881629][ T4868] pgmajfault 642 [ 296.889295][ T4868] inactive_anon 0 [ 296.896484][ T4868] active_anon 147456 [ 296.904859][ T4868] inactive_file 0 [ 296.912759][ T4868] active_file 524288 [ 296.924880][ T4868] unevictable 8192 [ 296.932000][ T4868] hierarchical_memory_limit 314572800 [ 296.943184][ T4868] hierarchical_memsw_limit 9223372036854771712 [ 296.964242][ T4868] total_cache 532480 [ 296.969359][ T4868] total_rss 110592 [ 296.973174][ T4868] total_shmem 0 [ 296.998657][ T4868] total_mapped_file 0 [ 297.003141][ T4868] total_dirty 4096 [ 297.009510][ T4868] total_writeback 0 [ 297.013519][ T4868] total_workingset_refault_anon 4530 [ 297.032953][ T4868] total_workingset_refault_file 4967 [ 297.040653][T16374] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 297.047252][T16374] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 297.055193][ T4868] total_swap 909312 [ 297.059618][T16374] vhci_hcd vhci_hcd.0: Device attached [ 297.065383][ T4868] total_swapcached 23109632 [ 297.074220][ T4868] total_pgpgin 295786 [ 297.079091][ T4868] total_pgpgout 295620 [ 297.083201][ T4868] total_pgfault 248363 [ 297.088197][ T4868] total_pgmajfault 642 [ 297.092346][ T4868] total_inactive_anon 0 [ 297.098619][ T4868] total_active_anon 147456 [ 297.103114][ T4868] total_inactive_file 0 [ 297.133437][ T4868] total_active_file 524288 [ 297.145823][T16379] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 297.152496][T16379] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.167403][T16374] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 297.174070][T16374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.196502][T16384] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 297.198801][T16383] macvtap1: entered promiscuous mode [ 297.203197][T16384] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.206148][ T4868] total_unevictable 8192 [ 297.214718][T16383] team0: entered promiscuous mode [ 297.218290][T16384] vhci_hcd vhci_hcd.0: Device attached [ 297.224844][T16379] vhci_hcd vhci_hcd.0: Device attached [ 297.226106][ T4868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5233,pid=16326,uid=0 [ 297.226183][ T4868] Memory cgroup out of memory: OOM victim 16326 (syz.6.5233) is already exiting. Skip killing the task [ 297.227405][T16374] vhci_hcd vhci_hcd.0: Device attached [ 297.233197][T16383] team_slave_0: entered promiscuous mode [ 297.240657][T16384] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 297.281212][T16384] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.289001][T16383] team_slave_1: entered promiscuous mode [ 297.299158][T16383] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 297.330646][T16384] vhci_hcd vhci_hcd.0: Device attached [ 297.335885][T16383] team0: Device macvtap1 is already an upper device of the team interface [ 297.346860][ T5142] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 297.420206][T16383] team0: left promiscuous mode [ 297.433441][T16396] netlink: 'syz.6.5252': attribute type 1 has an invalid length. [ 297.443309][T16383] team_slave_0: left promiscuous mode [ 297.448796][T16374] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(7) [ 297.455372][T16374] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 297.463774][T16383] team_slave_1: left promiscuous mode [ 297.472177][T16383] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 297.479883][T16374] vhci_hcd vhci_hcd.0: Device attached [ 297.537109][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5252'. [ 297.599872][T16374] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 297.606999][T16374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.619473][T16396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.628422][T16398] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 297.638057][T16374] vhci_hcd vhci_hcd.0: Device attached [ 297.648008][T16398] bond0: entered allmulticast mode [ 297.654830][T16385] vhci_hcd: connection closed [ 297.654981][T16399] vhci_hcd: connection closed [ 297.655002][T16380] vhci_hcd: connection closed [ 297.655065][T16393] vhci_hcd: connection closed [ 297.660456][T16375] vhci_hcd: connection reset by peer [ 297.664859][T16377] vhci_hcd: connection closed [ 297.681427][ T50] vhci_hcd vhci_hcd.0: stop threads [ 297.681529][T16387] vhci_hcd: connection closed [ 297.693739][ T50] vhci_hcd vhci_hcd.0: release socket [ 297.714291][T16401] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 297.734895][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 297.742875][ T50] vhci_hcd vhci_hcd.0: stop threads [ 297.748468][ T50] vhci_hcd vhci_hcd.0: release socket [ 297.754256][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 297.761666][ T50] vhci_hcd vhci_hcd.0: stop threads [ 297.769258][ T50] vhci_hcd vhci_hcd.0: release socket [ 297.776137][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 297.777380][T16410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5256'. [ 297.782098][ T50] vhci_hcd vhci_hcd.0: stop threads [ 297.799424][ T50] vhci_hcd vhci_hcd.0: release socket [ 297.805430][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 297.811789][ T50] vhci_hcd vhci_hcd.0: stop threads [ 297.817507][ T50] vhci_hcd vhci_hcd.0: release socket [ 297.833027][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 297.843058][ T50] vhci_hcd vhci_hcd.0: stop threads [ 297.853701][ T50] vhci_hcd vhci_hcd.0: release socket [ 297.863839][T16414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5259'. [ 297.873878][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 297.881058][ T50] vhci_hcd vhci_hcd.0: stop threads [ 297.903397][ T50] vhci_hcd vhci_hcd.0: release socket [ 297.906124][T16410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16410 comm=syz.1.5256 [ 297.909180][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 298.011867][T16426] xfrm0: entered promiscuous mode [ 298.301380][T16438] netlink: 'syz.5.5269': attribute type 1 has an invalid length. [ 298.359835][T16438] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.376690][T16438] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5269'. [ 298.394181][T16438] bond9: entered allmulticast mode [ 298.407805][T16438] bond9: (slave ip6gretap2): making interface the new active one [ 298.420240][T16438] ip6gretap2: entered allmulticast mode [ 298.428351][T16438] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 298.924999][T16464] syzkaller0: entered promiscuous mode [ 298.933070][T16464] syzkaller0: entered allmulticast mode [ 299.169612][T16481] netlink: 'syz.2.5285': attribute type 2 has an invalid length. [ 299.170437][T16483] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5286'. [ 299.235251][T16483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16483 comm=syz.6.5286 [ 299.735778][ T28] kauditd_printk_skb: 20928 callbacks suppressed [ 299.735798][ T28] audit: type=1400 audit(2000001288.410:803047): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 299.854040][ T28] audit: type=1400 audit(2000001288.450:803049): avc: denied { allowed } for pid=16500 comm="syz.0.5293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 299.876852][ T28] audit: type=1400 audit(2000001288.450:803050): avc: denied { create } for pid=16500 comm="syz.0.5293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 299.901699][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.908750][T16505] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.915448][T16505] audit: audit_lost=74124 audit_rate_limit=0 audit_backlog_limit=64 [ 299.923711][ T3038] audit: audit_lost=74125 audit_rate_limit=0 audit_backlog_limit=64 [ 299.932577][ T3038] audit: backlog limit exceeded [ 299.936891][T16505] audit: backlog limit exceeded [ 299.937943][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.106949][T16510] syzkaller0: entered promiscuous mode [ 300.112725][T16510] syzkaller0: entered allmulticast mode [ 300.242945][T16515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5300'. [ 300.345590][T16519] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16519 comm=syz.6.5300 [ 300.760310][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5309'. [ 300.784276][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5309'. [ 300.804853][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5309'. [ 300.831530][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5309'. [ 301.038486][T16520] ================================================================== [ 301.046715][T16520] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 301.053684][T16520] [ 301.056581][T16520] read-write to 0xffff888119af2d2c of 4 bytes by task 16517 on cpu 0: [ 301.064861][T16520] fifo_open+0x86/0x5d0 [ 301.069050][T16520] do_dentry_open+0x4ca/0xa90 [ 301.073850][T16520] vfs_open+0x37/0x1e0 [ 301.078046][T16520] path_openat+0x1b70/0x2050 [ 301.082660][T16520] do_file_open_root+0x233/0x430 [ 301.087628][T16520] file_open_root+0xfd/0x130 [ 301.092432][T16520] do_handle_open+0x6b6/0x790 [ 301.097331][T16520] __x64_sys_open_by_handle_at+0x44/0x50 [ 301.103261][T16520] x64_sys_call+0x153d/0x3020 [ 301.108058][T16520] do_syscall_64+0x12c/0x370 [ 301.112690][T16520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.118780][T16520] [ 301.121124][T16520] read to 0xffff888119af2d2c of 4 bytes by task 16520 on cpu 1: [ 301.128949][T16520] wait_for_partner+0xd5/0x1e0 [ 301.133743][T16520] fifo_open+0x462/0x5d0 [ 301.138187][T16520] do_dentry_open+0x4ca/0xa90 [ 301.142896][T16520] vfs_open+0x37/0x1e0 [ 301.147102][T16520] path_openat+0x1b70/0x2050 [ 301.151714][T16520] do_file_open+0x16c/0x290 [ 301.156249][T16520] do_sys_openat2+0x94/0x130 [ 301.160867][T16520] __x64_sys_openat+0xf2/0x120 [ 301.165658][T16520] x64_sys_call+0x1e39/0x3020 [ 301.170443][T16520] do_syscall_64+0x12c/0x370 [ 301.175233][T16520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.181415][T16520] [ 301.183760][T16520] value changed: 0x00000001 -> 0x00000002 [ 301.189502][T16520] [ 301.191948][T16520] Reported by Kernel Concurrency Sanitizer on: [ 301.198218][T16520] CPU: 1 UID: 0 PID: 16520 Comm: syz.1.5299 Tainted: G W syzkaller #0 PREEMPT(full) [ 301.209272][T16520] Tainted: [W]=WARN [ 301.213099][T16520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.223174][T16520] ================================================================== [ 302.507008][ T5142] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 304.746249][ T28] kauditd_printk_skb: 27648 callbacks suppressed [ 304.746268][ T28] audit: type=1400 audit(2000001293.430:828647): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.762452][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 304.774788][ T28] audit: type=1400 audit(2000001293.430:828648): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.774879][ T28] audit: type=1400 audit(2000001293.430:828649): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.774930][ T28] audit: type=1400 audit(2000001293.430:828650): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.774993][ T28] audit: type=1400 audit(2000001293.430:828651): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.775020][ T28] audit: type=1400 audit(2000001293.430:828652): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.775044][ T28] audit: type=1400 audit(2000001293.430:828653): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.775070][ T28] audit: type=1400 audit(2000001293.430:828654): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.775115][ T28] audit: type=1400 audit(2000001293.430:828655): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.756325][ T28] kauditd_printk_skb: 43623 callbacks suppressed [ 309.756345][ T28] audit: type=1400 audit(2000001298.430:872277): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.770537][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 309.784901][ T28] audit: type=1400 audit(2000001298.440:872278): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.793894][ T3038] audit: audit_lost=74811 audit_rate_limit=0 audit_backlog_limit=64 [ 309.814245][ T28] audit: type=1400 audit(2000001298.440:872279): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.824089][ T3038] audit: backlog limit exceeded [ 309.845430][ T28] audit: type=1400 audit(2000001298.440:872280): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.851744][ T3038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 309.871542][ T28] audit: type=1400 audit(2000001298.440:872281): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.879961][ T3038] audit: audit_lost=74812 audit_rate_limit=0 audit_backlog_limit=64