last executing test programs: 2m8.079743725s ago: executing program 2 (id=4333): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 2m7.992823214s ago: executing program 2 (id=4335): unshare(0x2040400) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) 2m7.992502384s ago: executing program 2 (id=4337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m7.885850703s ago: executing program 2 (id=4341): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) 2m7.861509898s ago: executing program 2 (id=4342): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 2m7.801607167s ago: executing program 2 (id=4344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain\n', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='udp 2049\n', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1\n', 0x2) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f00000004c0)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(0x0, 0x0) read(r2, &(0x7f0000000200), 0x3e8) write(r2, &(0x7f0000000500)='4294967295 2000000000 0\n', 0x18) write(r6, &(0x7f0000000540)="000000020000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(0xffffffffffffffff, &(0x7f0000000300), 0x3e8) read(r3, &(0x7f0000000400), 0x3e8) read(r2, &(0x7f0000000500), 0x3e8) 1m52.741151394s ago: executing program 32 (id=4344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain\n', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='udp 2049\n', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1\n', 0x2) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f00000004c0)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(0x0, 0x0) read(r2, &(0x7f0000000200), 0x3e8) write(r2, &(0x7f0000000500)='4294967295 2000000000 0\n', 0x18) write(r6, &(0x7f0000000540)="000000020000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(0xffffffffffffffff, &(0x7f0000000300), 0x3e8) read(r3, &(0x7f0000000400), 0x3e8) read(r2, &(0x7f0000000500), 0x3e8) 18.111495088s ago: executing program 3 (id=5640): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) close(r0) 17.198532393s ago: executing program 3 (id=5668): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 17.198433566s ago: executing program 3 (id=5669): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) poll(&(0x7f0000000000)=[{r0, 0x4102}], 0x1, 0x7f) 17.133889318s ago: executing program 3 (id=5672): r0 = socket(0xa, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_pidfd_open(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) pidfd_getfd(r2, r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 17.131142486s ago: executing program 3 (id=5674): io_setup(0x7d, &(0x7f0000000600)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCGETS(r1, 0x5401, 0x0) io_submit(0x0, 0x0, 0x0) 16.888241477s ago: executing program 3 (id=5678): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0xed6299e24ea52ee2, 0x10001}}], 0x38, 0x4c000}, 0x800) 16.876446959s ago: executing program 33 (id=5678): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0xed6299e24ea52ee2, 0x10001}}], 0x38, 0x4c000}, 0x800) 1.697027759s ago: executing program 4 (id=6000): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x20000000}, 0x1c) 821.025643ms ago: executing program 4 (id=6015): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="08001efbb009006e", 0x8}], 0x1, &(0x7f0000000140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @generic={0x89, 0x7, "34e1f9be2e"}, @noop]}}}], 0x38}, 0x804) 777.30993ms ago: executing program 4 (id=6016): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_net\x00', 0x777) mount(0x0, &(0x7f00000000c0)='./proc_net\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_net/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) 699.302354ms ago: executing program 4 (id=6018): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)}, 0x20048b88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 699.135934ms ago: executing program 4 (id=6020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 615.099258ms ago: executing program 4 (id=6023): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000608000604"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x20000000}, 0x1c) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 419.37591ms ago: executing program 5 (id=6028): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x80, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @sit={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x401}, @IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x2}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4000020) 353.52112ms ago: executing program 5 (id=6030): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 339.729239ms ago: executing program 5 (id=6033): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000700)=@in={0x2, 0x2382, @local}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000800)={0x2, 0x2382, @local}, 0x10) 275.993624ms ago: executing program 1 (id=6035): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4097, 0x1001) symlinkat(&(0x7f0000000340)='./file0\x00', r0, &(0x7f00000007c0)='./file0\x00') 225.693728ms ago: executing program 5 (id=6036): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r1, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x26d7, 0x1000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 225.583643ms ago: executing program 1 (id=6037): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x32) writev(r0, &(0x7f0000000300)=[{&(0x7f0000001240)="7b62945da6", 0x5}, {0x0}], 0x2) 223.997731ms ago: executing program 0 (id=6038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa8000000060a0b040000000900000000020000067400048070000180090001006c61737400000000600002800c000240000000000000000508000140000000050c00024000000000000000000c00024000000000000000080800014000000101080001400000800008000140fffffffa0c00024000000000000000060c00024000000000000000040900020073797a32000000000900010073797a30"], 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 156.004937ms ago: executing program 1 (id=6039): chdir(0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) 155.752585ms ago: executing program 0 (id=6040): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)}, 0x20048b88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 155.665925ms ago: executing program 0 (id=6041): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 132.375471ms ago: executing program 0 (id=6042): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="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", 0x5da}], 0x1}}], 0x1, 0x6064040) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) 67.916063ms ago: executing program 1 (id=6043): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x7, 0x7fff, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x65, 0x3, 0xd1, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x81, 0x0}}}}}) 67.787238ms ago: executing program 0 (id=6044): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 67.708197ms ago: executing program 5 (id=6045): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x3a, 0xd0, 0x0, 0x0) 66.079616ms ago: executing program 1 (id=6051): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 16.167838ms ago: executing program 5 (id=6046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 14.764704ms ago: executing program 1 (id=6047): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000a00000a0900010073787a310000000020000000080a0102000026e718d80000000000050900010073797a3100000000140000001100010000000000000000000000000a"], 0x68}}, 0xc010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007808000640"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000040)='ipvlan1\x00') ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000080)='-\x00', 0x200, &(0x7f00000000c0)={@align=0xd26a, {0x4, 0x101, 0x53, 0x7}}, 0x56b, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000200)=0x9}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r8}, 0x94) 0s ago: executing program 0 (id=6048): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): face: batadv_slave_1 [ 508.327840][T19101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.339347][T19101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.379061][T19101] hsr_slave_0: entered promiscuous mode [ 508.382340][T19101] hsr_slave_1: entered promiscuous mode [ 509.578089][ T5750] Bluetooth: hci0: command tx timeout [ 510.630838][T19118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.639649][T19101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 510.659480][T19101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.663143][T19101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 510.671806][T19101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.675555][T19101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 510.682264][T19101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.686345][T19101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 510.694689][T19101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.771877][T19195] netlink: 'syz.0.4452': attribute type 10 has an invalid length. [ 510.776807][T19101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.794051][T19101] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.802198][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.805140][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.817215][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.820099][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.045291][T19212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4455'. [ 511.189813][T19101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.227516][T19220] tipc: Enabled bearer , priority 0 [ 511.231046][T19220] syzkaller0: entered promiscuous mode [ 511.232924][T19220] syzkaller0: entered allmulticast mode [ 511.236715][T19220] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 511.259454][T19220] tipc: Resetting bearer [ 511.267449][T19218] tipc: Resetting bearer [ 511.287805][T19218] tipc: Disabling bearer [ 511.385733][T19101] veth0_vlan: entered promiscuous mode [ 511.395312][T19101] veth1_vlan: entered promiscuous mode [ 511.466315][T19101] veth0_macvtap: entered promiscuous mode [ 511.480989][T19101] veth1_macvtap: entered promiscuous mode [ 511.505201][T19101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.529137][T19101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.542076][ T5812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.550197][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.566683][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.570508][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.658067][ T5750] Bluetooth: hci0: command tx timeout [ 512.034712][T19242] netlink: 'syz.3.4460': attribute type 10 has an invalid length. [ 512.752861][T19250] syzkaller0: entered promiscuous mode [ 512.755098][T19250] syzkaller0: entered allmulticast mode [ 512.997872][T19254] syzkaller0: entered promiscuous mode [ 512.999830][T19254] syzkaller0: entered allmulticast mode [ 513.003789][T19254] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 513.737914][ T5750] Bluetooth: hci0: command tx timeout [ 514.396757][T19226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.464835][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.467423][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.496360][T19267] syzkaller0: entered promiscuous mode [ 514.498826][T19267] syzkaller0: entered allmulticast mode [ 514.522403][T19267] tipc: Enabled bearer , priority 0 [ 514.526415][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.529166][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.529253][T19267] tipc: Resetting bearer [ 514.539216][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 514.539227][ T42] audit: type=1400 audit(1785167008.790:889): avc: denied { mounton } for pid=19101 comm="syz-executor" path="/syzkaller.uqNt3P/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 514.551809][ T42] audit: type=1400 audit(1785167008.790:890): avc: denied { mount } for pid=19101 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 514.558734][ T42] audit: type=1400 audit(1785167008.800:891): avc: denied { mounton } for pid=19101 comm="syz-executor" path="/syzkaller.uqNt3P/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 514.559022][T19266] tipc: Resetting bearer [ 514.566364][ T42] audit: type=1400 audit(1785167008.800:892): avc: denied { mounton } for pid=19101 comm="syz-executor" path="/syzkaller.uqNt3P/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=63152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 514.584577][ T42] audit: type=1400 audit(1785167008.800:893): avc: denied { unmount } for pid=19101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 514.603787][ T42] audit: type=1400 audit(1785167008.830:894): avc: denied { mounton } for pid=19101 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 514.606248][T19266] tipc: Disabling bearer [ 514.612599][ T42] audit: type=1400 audit(1785167008.830:895): avc: denied { mount } for pid=19101 comm="syz-executor" name="/" dev="gadgetfs" ino=7753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 514.647682][ T42] audit: type=1400 audit(1785167008.830:896): avc: denied { mount } for pid=19101 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 514.649169][T19276] netlink: 'syz.0.4470': attribute type 10 has an invalid length. [ 514.654790][ T42] audit: type=1400 audit(1785167008.830:897): avc: denied { mounton } for pid=19101 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 514.674929][ T42] audit: type=1400 audit(1785167008.830:898): avc: denied { mount } for pid=19101 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 514.721012][T19279] syzkaller0: entered promiscuous mode [ 514.723227][T19279] syzkaller0: entered allmulticast mode [ 514.728057][T19280] syzkaller0: entered promiscuous mode [ 514.729990][T19280] syzkaller0: entered allmulticast mode [ 514.734260][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4473'. [ 515.827729][ T5750] Bluetooth: hci0: command tx timeout [ 516.383742][T19301] tipc: Enabling of bearer rejected, failed to enable media [ 516.432394][T19303] tipc: Enabled bearer , priority 0 [ 516.435572][T19303] syzkaller0: entered promiscuous mode [ 516.438086][T19303] syzkaller0: entered allmulticast mode [ 516.441990][T19303] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 516.464696][T19303] tipc: Resetting bearer [ 516.468803][T19302] tipc: Resetting bearer [ 516.479148][T19302] tipc: Disabling bearer [ 516.631300][T19318] netlink: 'syz.0.4481': attribute type 10 has an invalid length. [ 516.686447][T19325] syzkaller0: entered promiscuous mode [ 516.689106][T19325] syzkaller0: entered allmulticast mode [ 518.321084][T19349] tipc: Enabling of bearer rejected, failed to enable media [ 518.365324][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4488'. [ 518.411807][T19361] tipc: Enabled bearer , priority 0 [ 518.414807][T19361] syzkaller0: entered promiscuous mode [ 518.416735][T19361] syzkaller0: entered allmulticast mode [ 518.419985][T19361] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 518.433883][T19361] tipc: Resetting bearer [ 518.438856][T19360] tipc: Resetting bearer [ 518.450593][T19360] tipc: Disabling bearer [ 518.733001][T19388] syzkaller0: entered promiscuous mode [ 518.734813][T19388] syzkaller0: entered allmulticast mode [ 518.746490][T19393] netlink: 'syz.3.4493': attribute type 10 has an invalid length. [ 520.390669][T19401] tipc: Enabling of bearer rejected, failed to enable media [ 520.463056][T19413] tipc: Enabled bearer , priority 0 [ 520.466824][T19413] syzkaller0: entered promiscuous mode [ 520.469407][T19413] syzkaller0: entered allmulticast mode [ 520.473518][T19413] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 520.492415][T19413] tipc: Resetting bearer [ 520.495540][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4504'. [ 520.499067][T19412] tipc: Resetting bearer [ 520.512199][T19412] tipc: Disabling bearer [ 520.680533][T19430] netlink: 'syz.0.4509': attribute type 10 has an invalid length. [ 520.719613][T19435] syzkaller0: entered promiscuous mode [ 520.721284][T19435] syzkaller0: entered allmulticast mode [ 522.193591][T19459] tipc: Enabling of bearer rejected, failed to enable media [ 522.233763][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 522.233776][ T42] audit: type=1400 audit(1785167016.481:900): avc: denied { bind } for pid=19461 comm="syz.1.4516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 522.266543][T19464] tipc: Enabled bearer , priority 0 [ 522.269142][T19464] syzkaller0: entered promiscuous mode [ 522.270793][T19464] syzkaller0: entered allmulticast mode [ 522.278600][T19464] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 522.292402][T19464] tipc: Resetting bearer [ 522.310040][T19463] tipc: Resetting bearer [ 522.323513][T19463] tipc: Disabling bearer [ 522.370200][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4519'. [ 522.557179][T19485] netlink: 'syz.4.4522': attribute type 10 has an invalid length. [ 522.576650][T19485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.585083][T19485] team0: Port device bond0 added [ 522.625296][T19488] syzkaller0: entered promiscuous mode [ 522.629377][T19488] syzkaller0: entered allmulticast mode [ 523.331769][ T42] audit: type=1400 audit(1785167017.581:901): avc: denied { create } for pid=19500 comm="syz.4.4526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 523.355134][ T42] audit: type=1400 audit(1785167017.581:902): avc: denied { setopt } for pid=19500 comm="syz.4.4526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 523.745947][ T42] audit: type=1400 audit(1785167017.991:903): avc: denied { create } for pid=19505 comm="syz.0.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 523.751566][ T42] audit: type=1400 audit(1785167018.001:904): avc: denied { bind } for pid=19505 comm="syz.0.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 524.573085][T19496] tipc: Enabling of bearer rejected, failed to enable media [ 524.635940][T19513] syzkaller0: entered promiscuous mode [ 524.642659][T19513] syzkaller0: entered allmulticast mode [ 524.681659][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4530'. [ 526.355656][T19528] tipc: Enabling of bearer rejected, failed to enable media [ 526.395512][T19544] netlink: 'syz.4.4535': attribute type 10 has an invalid length. [ 526.485664][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4538'. [ 526.673403][ T5741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 526.676516][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'. [ 526.700278][ T5741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 526.705016][ T5741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 526.710520][ T5741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 526.722508][ T5741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 526.728823][T19567] bond1: (slave bond_slave_1): Device is not our slave [ 526.730945][T19567] bond1: option active_slave: invalid value (bond_slave_1) [ 526.734313][T19567] bond1 (unregistering): Released all slaves [ 526.767611][T19555] tipc: Enabling of bearer rejected, failed to enable media [ 526.783870][ T42] audit: type=1400 audit(1785167021.031:905): avc: denied { write } for pid=19573 comm="syz.0.4544" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 526.831012][T19230] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.861736][T19576] syzkaller0: entered promiscuous mode [ 526.866245][T19576] syzkaller0: entered allmulticast mode [ 526.922019][T19230] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.001410][T19585] netlink: 'syz.4.4546': attribute type 10 has an invalid length. [ 527.024043][T19230] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.038692][T19562] lo speed is unknown, defaulting to 1000 [ 527.079326][T19591] tipc: Started in network mode [ 527.080326][T19593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4550'. [ 527.080837][T19591] tipc: Node identity b632956d6a2, cluster identity 4711 [ 527.085676][T19591] tipc: Enabled bearer , priority 0 [ 527.090973][T19591] syzkaller0: entered promiscuous mode [ 527.092665][T19591] syzkaller0: entered allmulticast mode [ 527.096007][T19591] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 527.144556][T19230] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.155824][T19591] tipc: Resetting bearer [ 527.160137][T19590] tipc: Resetting bearer [ 527.172748][T19590] tipc: Disabling bearer [ 527.285920][ T42] audit: type=1400 audit(1785167021.531:906): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 527.376173][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 527.401386][T19230] bridge_slave_1: left allmulticast mode [ 527.403812][T19230] bridge_slave_1: left promiscuous mode [ 527.406316][T19230] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.415488][T19230] bridge_slave_0: left allmulticast mode [ 527.418288][T19230] bridge_slave_0: left promiscuous mode [ 527.420822][T19230] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.442378][ T42] audit: type=1400 audit(1785167021.691:907): avc: denied { append } for pid=19608 comm="syz.4.4555" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 527.571270][T19230] team0: Port device bond0 removed [ 527.574482][T19230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.579762][T19230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.583554][T19230] bond0 (unregistering): Released all slaves [ 527.605386][T19613] syzkaller0: entered promiscuous mode [ 527.607588][T19613] syzkaller0: entered allmulticast mode [ 527.625932][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4558'. [ 527.638750][ T42] audit: type=1400 audit(1785167021.881:908): avc: denied { search } for pid=5445 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.647009][ T42] audit: type=1400 audit(1785167021.891:909): avc: denied { search } for pid=5445 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.650864][T19562] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.657479][T19562] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.659750][T19562] bridge_slave_0: entered allmulticast mode [ 527.662301][T19562] bridge_slave_0: entered promiscuous mode [ 527.665043][ T42] audit: type=1400 audit(1785167021.891:910): avc: denied { search } for pid=5445 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.665672][T19562] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.673353][ T42] audit: type=1400 audit(1785167021.891:911): avc: denied { read } for pid=5445 comm="dhcpcd" name="n36" dev="tmpfs" ino=12930 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 527.673602][T19562] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.680271][ T42] audit: type=1400 audit(1785167021.891:912): avc: denied { open } for pid=5445 comm="dhcpcd" path="/run/udev/data/n36" dev="tmpfs" ino=12930 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 527.687077][T19562] bridge_slave_1: entered allmulticast mode [ 527.690069][ T42] audit: type=1400 audit(1785167021.891:913): avc: denied { getattr } for pid=5445 comm="dhcpcd" path="/run/udev/data/n36" dev="tmpfs" ino=12930 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 527.693023][T19562] bridge_slave_1: entered promiscuous mode [ 527.719168][T19625] netlink: 'syz.3.4556': attribute type 10 has an invalid length. [ 527.723823][T19230] tipc: Left network mode [ 527.752898][T19562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.761858][T19562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.770443][T19627] tipc: Enabled bearer , priority 0 [ 527.787581][T19562] team0: Port device team_slave_0 added [ 527.789455][T19627] syzkaller0: entered promiscuous mode [ 527.791068][T19627] syzkaller0: entered allmulticast mode [ 527.795940][T19562] team0: Port device team_slave_1 added [ 527.814197][ T42] audit: type=1400 audit(1785167022.061:914): avc: denied { read } for pid=19632 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.825308][T19627] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 527.826259][ T42] audit: type=1400 audit(1785167022.061:915): avc: denied { read open } for pid=19632 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.848956][T19562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.851808][T19562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.861672][T19562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.866628][T19562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.871119][T19562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.882319][T19562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.901337][T19627] tipc: Resetting bearer [ 527.911793][T19626] tipc: Resetting bearer [ 527.925004][T19626] tipc: Disabling bearer [ 527.950209][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 527.973752][T19562] hsr_slave_0: entered promiscuous mode [ 527.976937][T19562] hsr_slave_1: entered promiscuous mode [ 527.979751][T19562] debugfs: 'hsr0' already exists in 'hsr' [ 527.981997][T19562] Cannot create hsr debugfs directory [ 528.047762][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4561'. [ 528.232783][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 528.289994][T19654] bond2: (slave bond_slave_1): Device is not our slave [ 528.292184][T19654] bond2: option active_slave: invalid value (bond_slave_1) [ 528.295280][T19654] bond2 (unregistering): Released all slaves [ 528.312050][T19230] hsr_slave_0: left promiscuous mode [ 528.314973][T19230] hsr_slave_1: left promiscuous mode [ 528.317858][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.320819][T19230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.324390][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.327533][T19230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.373252][T19230] veth1_macvtap: left promiscuous mode [ 528.376408][T19230] veth0_macvtap: left promiscuous mode [ 528.379394][T19230] veth1_vlan: left promiscuous mode [ 528.381563][T19230] veth0_vlan: left promiscuous mode [ 528.555096][T19230] team0 (unregistering): Port device team_slave_1 removed [ 528.562633][T19230] team0 (unregistering): Port device team_slave_0 removed [ 528.690734][T19659] syzkaller0: entered promiscuous mode [ 528.692561][T19659] syzkaller0: entered allmulticast mode [ 528.700072][T19659] tipc: Enabled bearer , priority 0 [ 528.719526][T19657] tipc: Resetting bearer [ 528.735447][T19657] tipc: Disabling bearer [ 528.792860][ T5750] Bluetooth: hci5: command tx timeout [ 528.856535][T19675] tipc: Enabled bearer , priority 0 [ 528.860180][T19675] syzkaller0: entered promiscuous mode [ 528.862561][T19675] syzkaller0: entered allmulticast mode [ 528.870657][T19675] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 528.903050][T19675] tipc: Resetting bearer [ 528.936252][T19674] tipc: Resetting bearer [ 528.951942][T19674] tipc: Disabling bearer [ 529.125986][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4571'. [ 529.189881][T19562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 529.192258][T19230] IPVS: stop unused estimator thread 0... [ 529.198030][T19562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.201771][T19562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 529.210459][T19562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.218020][T19562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 529.227246][T19562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.231013][T19562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 529.241058][T19562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.253079][T19706] syzkaller0: entered promiscuous mode [ 529.255524][T19706] syzkaller0: entered allmulticast mode [ 529.266496][T19706] tipc: Enabled bearer , priority 0 [ 529.279677][T19715] netlink: 'syz.3.4572': attribute type 10 has an invalid length. [ 529.289120][T19705] tipc: Resetting bearer [ 529.307161][T19705] tipc: Disabling bearer [ 529.350653][T19562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.364660][T19562] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.370190][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.373237][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.383224][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.386282][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.430548][T19719] tipc: Enabled bearer , priority 0 [ 529.433704][T19719] syzkaller0: entered promiscuous mode [ 529.436222][T19719] syzkaller0: entered allmulticast mode [ 529.441410][T19719] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 529.475179][T19719] tipc: Resetting bearer [ 529.479511][T19718] tipc: Resetting bearer [ 529.493074][T19718] tipc: Disabling bearer [ 529.569917][T19727] bond1: (slave bond_slave_1): Device is not our slave [ 529.572734][T19727] bond1: option active_slave: invalid value (bond_slave_1) [ 529.582356][T19727] bond1 (unregistering): Released all slaves [ 529.655397][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4582'. [ 529.748316][T19562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.791958][T19562] veth0_vlan: entered promiscuous mode [ 529.807681][T19562] veth1_vlan: entered promiscuous mode [ 529.832344][T19748] syzkaller0: entered promiscuous mode [ 529.834741][T19748] syzkaller0: entered allmulticast mode [ 529.846076][T19748] tipc: Enabled bearer , priority 0 [ 529.852255][T19747] tipc: Resetting bearer [ 529.865499][T19747] tipc: Disabling bearer [ 529.881847][T19562] veth0_macvtap: entered promiscuous mode [ 529.886976][T19562] veth1_macvtap: entered promiscuous mode [ 529.899277][T19562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.907977][T19562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.919404][T19752] tipc: Enabled bearer , priority 0 [ 529.922863][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.926409][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.930835][T19752] syzkaller0: entered promiscuous mode [ 529.932965][T19752] syzkaller0: entered allmulticast mode [ 529.936264][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.942265][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.958285][T19752] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 529.989076][T19752] tipc: Resetting bearer [ 530.000737][T19751] tipc: Resetting bearer [ 530.018738][T19751] tipc: Disabling bearer [ 530.040328][T19759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4590'. [ 530.069521][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.072077][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.100468][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.103528][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.141762][T19765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4594'. [ 530.150722][T19765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4594'. [ 530.161061][T19766] bond1: entered promiscuous mode [ 530.251249][T19778] netlink: 'syz.4.4597': attribute type 10 has an invalid length. [ 530.319470][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4599'. [ 530.348143][T19785] tipc: Enabled bearer , priority 0 [ 530.351475][T19785] syzkaller0: entered promiscuous mode [ 530.353617][T19785] syzkaller0: entered allmulticast mode [ 530.357379][T19785] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 530.372532][T19785] tipc: Resetting bearer [ 530.375918][T19784] tipc: Resetting bearer [ 530.390269][T19784] tipc: Disabling bearer [ 530.597488][T19796] bond2: entered promiscuous mode [ 530.639375][T19799] netlink: 'syz.4.4606': attribute type 10 has an invalid length. [ 530.857062][ T5750] Bluetooth: hci5: command tx timeout [ 530.930276][T19815] tipc: Enabling of bearer rejected, failed to enable media [ 530.952311][ T5741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 530.957834][ T5741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.965435][ T5741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.977806][ T5741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.981138][ T5741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 531.162836][T19831] bond3: entered promiscuous mode [ 531.195815][T19837] netlink: 'syz.4.4615': attribute type 10 has an invalid length. [ 531.220287][T19817] lo speed is unknown, defaulting to 1000 [ 531.318078][T19847] tipc: Enabling of bearer rejected, failed to enable media [ 531.380805][T19230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.483607][T19230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.500875][T19862] netlink: 'syz.4.4623': attribute type 10 has an invalid length. [ 531.572397][T19230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.612944][T19817] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.615592][T19817] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.620443][T19817] bridge_slave_0: entered allmulticast mode [ 531.627631][T19817] bridge_slave_0: entered promiscuous mode [ 531.640682][T19817] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.642911][T19817] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.647743][T19817] bridge_slave_1: entered allmulticast mode [ 531.653994][T19817] bridge_slave_1: entered promiscuous mode [ 531.707783][T19230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.721038][T19817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.727624][T19817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.730339][T19885] tipc: Enabling of bearer rejected, failed to enable media [ 531.751827][T19817] team0: Port device team_slave_0 added [ 531.754916][T19817] team0: Port device team_slave_1 added [ 531.774824][T19817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.779070][T19817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.786467][T19817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.790670][T19817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.792812][T19817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.800336][T19817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.840924][T19892] netlink: 'syz.1.4632': attribute type 10 has an invalid length. [ 531.875808][T19892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.880691][T19892] team0: Port device bond0 added [ 531.891959][T19817] hsr_slave_0: entered promiscuous mode [ 531.894341][T19817] hsr_slave_1: entered promiscuous mode [ 531.896533][T19817] debugfs: 'hsr0' already exists in 'hsr' [ 531.899197][T19817] Cannot create hsr debugfs directory [ 531.942761][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4636'. [ 531.995001][T19230] bridge_slave_1: left allmulticast mode [ 531.996782][T19230] bridge_slave_1: left promiscuous mode [ 531.998495][T19230] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.002272][T19230] bridge_slave_0: left allmulticast mode [ 532.003856][T19230] bridge_slave_0: left promiscuous mode [ 532.005617][T19230] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.105709][T19919] netlink: 'syz.3.4639': attribute type 5 has an invalid length. [ 532.109687][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4639'. [ 532.162971][T19230] team0: Port device bond0 removed [ 532.167304][T19230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.175803][T19230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.181004][T19230] bond0 (unregistering): Released all slaves [ 532.189162][T19230] bond1 (unregistering): Released all slaves [ 532.225750][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 532.299572][T19230] tipc: Left network mode [ 532.430140][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4644'. [ 532.443162][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 532.443173][ T42] audit: type=1400 audit(1785167026.691:943): avc: denied { write } for pid=19930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.458506][T19929] tipc: Enabling of bearer rejected, failed to enable media [ 532.499715][ T42] audit: type=1400 audit(1785167026.751:944): avc: denied { write } for pid=19937 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.544281][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 532.628824][ T34] kernel read not supported for file /vcs (pid: 34 comm: kworker/3:0) [ 532.749742][ T42] audit: type=1400 audit(1785167027.001:945): avc: denied { write } for pid=19958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.765809][T19960] bond1: entered promiscuous mode [ 532.803534][T19230] hsr_slave_0: left promiscuous mode [ 532.804599][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4652'. [ 532.811467][T19230] hsr_slave_1: left promiscuous mode [ 532.813432][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.818663][T19230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.819851][ T42] audit: type=1400 audit(1785167027.071:946): avc: denied { write } for pid=19967 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.829055][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.835623][T19230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.850798][T19230] veth1_macvtap: left promiscuous mode [ 532.852976][T19230] veth0_macvtap: left promiscuous mode [ 532.855861][T19230] veth1_vlan: left promiscuous mode [ 532.858949][T19230] veth0_vlan: left promiscuous mode [ 532.946587][ T5741] Bluetooth: hci5: command tx timeout [ 533.016888][ T5741] Bluetooth: hci4: command tx timeout [ 533.065593][T19230] team0 (unregistering): Port device team_slave_1 removed [ 533.074679][T19230] team0 (unregistering): Port device team_slave_0 removed [ 533.156431][T19974] tipc: Enabling of bearer rejected, failed to enable media [ 533.204080][T19987] netlink: 'syz.3.4656': attribute type 10 has an invalid length. [ 533.206336][ T42] audit: type=1400 audit(1785167027.451:947): avc: denied { write } for pid=19993 comm="syz.1.4657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 533.228871][ T42] audit: type=1400 audit(1785167027.461:948): avc: denied { write } for pid=19991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.298698][ T42] audit: type=1400 audit(1785167027.551:949): avc: denied { write } for pid=20000 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.325293][T20004] bond2: entered promiscuous mode [ 533.384251][ T42] audit: type=1400 audit(1785167027.631:950): avc: denied { write } for pid=20007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.462748][ T42] audit: type=1400 audit(1785167027.711:951): avc: denied { write } for pid=20018 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.528549][T19817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.532091][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4664'. [ 533.541786][T19817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.545107][T20027] tipc: Enabling of bearer rejected, failed to enable media [ 533.550314][T19817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.556117][T19817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.560961][T19817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.571635][T19817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.577835][T19817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 533.589536][T19817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.681097][T19817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.698029][T19817] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.705596][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.708437][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.749276][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.752120][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.801315][T20053] bond4: entered promiscuous mode [ 533.871241][T20063] GUP no longer grows the stack in syz.3.4674 (20063): 200000005000-200000008000 (200000004000) [ 533.880537][T20063] CPU: 2 UID: 0 PID: 20063 Comm: syz.3.4674 Not tainted syzkaller #0 PREEMPT(full) [ 533.880565][T20063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.880578][T20063] Call Trace: [ 533.880585][T20063] [ 533.880594][T20063] dump_stack_lvl+0x100/0x190 [ 533.880627][T20063] gup_vma_lookup.cold+0x83/0x96 [ 533.880656][T20063] fixup_user_fault+0x253/0x510 [ 533.880686][T20063] fault_in_user_writeable+0x70/0xe0 [ 533.880727][T20063] futex_lock_pi+0x689/0x7f0 [ 533.880752][T20063] ? __pfx_futex_lock_pi+0x10/0x10 [ 533.880774][T20063] ? __pfx___futex_wait+0x10/0x10 [ 533.880793][T20063] ? __pfx_try_to_wake_up+0x10/0x10 [ 533.880842][T20063] ? __pfx_futex_wake_mark+0x10/0x10 [ 533.880879][T20063] do_futex+0x371/0x440 [ 533.880906][T20063] ? __pfx_do_futex+0x10/0x10 [ 533.880933][T20063] ? __vm_munmap+0x1d2/0x390 [ 533.880959][T20063] __x64_sys_futex+0x34f/0x4d0 [ 533.880990][T20063] ? __pfx___x64_sys_futex+0x10/0x10 [ 533.881024][T20063] do_syscall_64+0x115/0x870 [ 533.881046][T20063] ? clear_bhb_loop+0x40/0x90 [ 533.881069][T20063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.881089][T20063] RIP: 0033:0x7f4d2a59de99 [ 533.881107][T20063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.881124][T20063] RSP: 002b:00007f4d2b51f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 533.881143][T20063] RAX: ffffffffffffffda RBX: 00007f4d2a825fa0 RCX: 00007f4d2a59de99 [ 533.881156][T20063] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 533.881164][T20063] RBP: 00007f4d2a633eaf R08: 0000000000000000 R09: 0000000000000001 [ 533.881177][T20063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.881187][T20063] R13: 00007f4d2a826038 R14: 00007f4d2a825fa0 R15: 00007ffcde5d92c8 [ 533.881214][T20063] [ 533.886857][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4673'. [ 533.939514][T20069] tipc: Enabled bearer , priority 0 [ 533.954495][T20069] syzkaller0: entered promiscuous mode [ 533.959425][T20069] syzkaller0: entered allmulticast mode [ 533.963660][T20069] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 533.986007][T20069] tipc: Resetting bearer [ 533.990102][T20068] tipc: Resetting bearer [ 534.006134][T20068] tipc: Disabling bearer [ 534.103094][T20091] netlink: 'syz.4.4681': attribute type 10 has an invalid length. [ 534.137596][T19817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.170946][ T42] audit: type=1400 audit(1785167028.422:952): avc: denied { connect } for pid=20098 comm="syz.3.4685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 534.196751][T19817] veth0_vlan: entered promiscuous mode [ 534.203329][T19817] veth1_vlan: entered promiscuous mode [ 534.234355][T19817] veth0_macvtap: entered promiscuous mode [ 534.239443][T19817] veth1_macvtap: entered promiscuous mode [ 534.249612][T19817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.259646][T19817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.269443][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.286534][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.296018][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.302068][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.309011][T20110] tipc: Started in network mode [ 534.311010][T20110] tipc: Node identity 8abfe1e7eccb, cluster identity 4711 [ 534.313829][T20110] tipc: Enabled bearer , priority 0 [ 534.317597][T20110] syzkaller0: entered promiscuous mode [ 534.319759][T20110] syzkaller0: entered allmulticast mode [ 534.326061][T20110] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 534.345278][T20110] tipc: Resetting bearer [ 534.349256][T20109] tipc: Resetting bearer [ 534.362593][T20109] tipc: Disabling bearer [ 534.437158][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.442307][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.457477][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.460105][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.487413][T20125] netlink: 'syz.3.4690': attribute type 10 has an invalid length. [ 534.614254][T20144] tipc: Enabling of bearer rejected, failed to enable media [ 534.865961][T20181] netlink: 'syz.0.4716': attribute type 1 has an invalid length. [ 534.906550][T20183] tipc: Enabling of bearer rejected, failed to enable media [ 534.933588][T20181] netlink: 'syz.0.4716': attribute type 10 has an invalid length. [ 534.936077][T20181] dummy0: entered promiscuous mode [ 535.016672][ T5741] Bluetooth: hci5: command tx timeout [ 535.106674][ T5741] Bluetooth: hci4: command tx timeout [ 535.262678][T20227] syzkaller0: entered promiscuous mode [ 535.265067][T20227] syzkaller0: entered allmulticast mode [ 535.265272][T20226] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 535.269972][T20227] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 535.311502][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802e4cdc00: rx timeout, send abort [ 535.814879][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802e4cdc00: abort rx timeout. Force session deactivation [ 536.194183][T20243] netlink: 'syz.0.4737': attribute type 10 has an invalid length. [ 536.200589][T20243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.204110][T20243] team0: Port device bond0 added [ 537.186434][ T5750] Bluetooth: hci4: command tx timeout [ 537.311644][ C2] vcan0: j1939_tp_rxtimer: 0xffff888038709000: rx timeout, send abort [ 537.814894][ C2] vcan0: j1939_tp_rxtimer: 0xffff888038709000: abort rx timeout. Force session deactivation [ 537.878097][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 537.878115][ T42] audit: type=1400 audit(1785167032.132:969): avc: denied { create } for pid=20257 comm="syz.0.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 537.888041][ T42] audit: type=1400 audit(1785167032.132:970): avc: denied { setopt } for pid=20257 comm="syz.0.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 537.982914][T20266] netlink: 'syz.0.4747': attribute type 10 has an invalid length. [ 538.087101][T20209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.134736][T20277] netlink: 'syz.3.4753': attribute type 27 has an invalid length. [ 538.180137][T20284] netlink: 'syz.4.4756': attribute type 10 has an invalid length. [ 538.325330][T20298] tipc: Enabling of bearer rejected, failed to enable media [ 538.329543][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803e505c00: rx timeout, send abort [ 538.443411][T20310] netlink: 'syz.1.4766': attribute type 10 has an invalid length. [ 538.470803][T20316] gretap0: entered allmulticast mode [ 538.473101][T20315] gretap0: left allmulticast mode [ 538.587970][T20333] capability: warning: `syz.4.4775' uses 32-bit capabilities (legacy support in use) [ 538.633268][T20337] tipc: Enabling of bearer rejected, failed to enable media [ 538.677596][T20344] netlink: 'syz.1.4779': attribute type 10 has an invalid length. [ 538.737175][ T42] audit: type=1400 audit(1785167032.992:971): avc: denied { write } for pid=20349 comm="syz.3.4781" name="usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 538.755477][ T42] audit: type=1400 audit(1785167033.002:972): avc: denied { connect } for pid=20351 comm="syz.4.4782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 538.829600][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803e505c00: abort rx timeout. Force session deactivation [ 538.870933][T20365] netlink: 'syz.1.4788': attribute type 10 has an invalid length. [ 538.905729][T20362] tipc: Cannot configure node identity twice [ 538.908882][T20372] tipc: Enabled bearer , priority 0 [ 538.912078][T20362] tipc: Enabling of bearer rejected, failed to enable media [ 538.916093][T20372] syzkaller0: entered promiscuous mode [ 538.922643][T20372] syzkaller0: entered allmulticast mode [ 538.951598][T20374] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 538.955473][T20374] bond1 (unregistering): Released all slaves [ 538.964711][T20372] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 538.977350][T20372] tipc: Resetting bearer [ 538.980739][T20370] tipc: Resetting bearer [ 538.994843][T20370] tipc: Disabling bearer [ 539.074317][T20387] __nla_validate_parse: 8 callbacks suppressed [ 539.074337][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4797'. [ 539.173415][T20403] bond1: entered promiscuous mode [ 539.236495][T20415] netlink: 'syz.3.4799': attribute type 10 has an invalid length. [ 539.266872][ T5750] Bluetooth: hci4: command tx timeout [ 539.279632][ T42] audit: type=1400 audit(1785167033.522:973): avc: denied { setopt } for pid=20421 comm="syz.1.4810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 539.292341][T20419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4809'. [ 539.292632][ T42] audit: type=1400 audit(1785167033.542:974): avc: denied { map } for pid=20421 comm="syz.1.4810" path="socket:[68096]" dev="sockfs" ino=68096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 539.306276][ T42] audit: type=1400 audit(1785167033.542:975): avc: denied { read write } for pid=20421 comm="syz.1.4810" path="socket:[68096]" dev="sockfs" ino=68096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 539.340395][T20429] tipc: Started in network mode [ 539.342171][T20429] tipc: Node identity ce0f7d49de53, cluster identity 4711 [ 539.344428][T20429] tipc: Enabled bearer , priority 0 [ 539.346976][T20429] syzkaller0: entered promiscuous mode [ 539.348751][T20429] syzkaller0: entered allmulticast mode [ 539.351933][T20429] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 539.369087][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4816'. [ 539.381263][T20433] bond5: entered promiscuous mode [ 539.384332][T20429] tipc: Resetting bearer [ 539.388137][T20427] tipc: Resetting bearer [ 539.405619][T20427] tipc: Disabling bearer [ 539.480235][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4821'. [ 539.650138][T20460] bond3: entered promiscuous mode [ 539.719048][T20469] tipc: Enabled bearer , priority 0 [ 539.721550][T20469] syzkaller0: entered promiscuous mode [ 539.723592][T20469] syzkaller0: entered allmulticast mode [ 539.728784][T20469] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 539.751481][T20469] tipc: Resetting bearer [ 539.755450][T20468] tipc: Resetting bearer [ 539.769546][T20468] tipc: Disabling bearer [ 539.914269][ T42] audit: type=1400 audit(1785167034.162:976): avc: denied { bind } for pid=20476 comm="syz.0.4831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 539.926290][ T42] audit: type=1400 audit(1785167034.162:977): avc: denied { node_bind } for pid=20476 comm="syz.0.4831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 539.949064][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4833'. [ 540.172199][T20496] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 540.184651][T20496] bond2 (unregistering): Released all slaves [ 540.335572][T20502] syzkaller0: entered promiscuous mode [ 540.338787][T20501] netlink: 'syz.4.4840': attribute type 10 has an invalid length. [ 540.342660][T20502] syzkaller0: entered allmulticast mode [ 540.347583][ T42] audit: type=1400 audit(1785167034.602:978): avc: denied { create } for pid=20503 comm="syz.0.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 540.347888][T20502] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 540.379723][T20506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4842'. [ 540.390353][T20508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4843'. [ 540.458106][T20519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20519 comm=syz.0.4848 [ 540.494974][T20523] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 540.501763][T20523] bond6 (unregistering): Released all slaves [ 540.540102][T20528] netlink: 'syz.0.4852': attribute type 10 has an invalid length. [ 540.570495][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4853'. [ 540.723428][T20541] lo speed is unknown, defaulting to 1000 [ 540.807472][T20542] lo speed is unknown, defaulting to 1000 [ 540.894739][T20543] lo speed is unknown, defaulting to 1000 [ 541.011386][T20541] lo speed is unknown, defaulting to 1000 [ 541.548337][T20554] netlink: 'syz.0.4861': attribute type 10 has an invalid length. [ 541.615554][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4862'. [ 541.616878][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4863'. [ 541.668524][T20563] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 541.674237][T20563] bond6 (unregistering): Released all slaves [ 542.730098][T20471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.914652][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 542.914668][ T42] audit: type=1400 audit(1785167037.162:991): avc: denied { create } for pid=20672 comm="syz.1.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 542.921817][T20676] tipc: Enabled bearer , priority 0 [ 542.924968][ T42] audit: type=1400 audit(1785167037.162:992): avc: denied { ioctl } for pid=20672 comm="syz.1.4915" path="socket:[68398]" dev="sockfs" ino=68398 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 542.931037][T20676] syzkaller0: entered promiscuous mode [ 542.939397][T20676] syzkaller0: entered allmulticast mode [ 542.947153][T20676] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 542.965101][T20676] tipc: Resetting bearer [ 542.968280][T20674] tipc: Resetting bearer [ 542.988019][ T42] audit: type=1400 audit(1785167037.232:993): avc: denied { setopt } for pid=20684 comm="syz.1.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 542.996053][T20674] tipc: Disabling bearer [ 543.040193][T20692] validate_nla: 4 callbacks suppressed [ 543.040211][T20692] netlink: 'syz.3.4912': attribute type 10 has an invalid length. [ 543.075145][ T42] audit: type=1400 audit(1785167037.322:994): avc: denied { read write } for pid=20699 comm="syz.0.4923" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 543.078139][ T848] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 543.083329][ T42] audit: type=1400 audit(1785167037.322:995): avc: denied { open } for pid=20699 comm="syz.0.4923" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 543.097623][ T848] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 543.139422][ T42] audit: type=1400 audit(1785167037.392:996): avc: denied { setopt } for pid=20709 comm="syz.4.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 543.151444][ T42] audit: type=1400 audit(1785167037.402:997): avc: denied { getopt } for pid=20709 comm="syz.4.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 543.176801][T20713] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20003 [ 543.188764][T20713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.200580][ T42] audit: type=1400 audit(1785167037.452:998): avc: denied { write } for pid=20699 comm="syz.0.4923" name="hidraw0" dev="devtmpfs" ino=3599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 543.228671][T20713] bond1: left promiscuous mode [ 543.231464][T20713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.235878][T20713] bond2: left promiscuous mode [ 543.242147][T20713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.248287][T20713] bond3: left promiscuous mode [ 543.250434][T20713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.254736][T20713] bond4: left promiscuous mode [ 543.258129][T20713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 543.262047][T20713] bond5: left promiscuous mode [ 543.265168][T20713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.331570][ T42] audit: type=1400 audit(1785167037.582:999): avc: denied { load_policy } for pid=20718 comm="syz.0.4929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 543.417002][T20726] syzkaller0: entered promiscuous mode [ 543.418817][T20726] syzkaller0: entered allmulticast mode [ 543.422167][T20726] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 546.116316][T20705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.152474][ T42] audit: type=1400 audit(1785167040.402:1000): avc: denied { bind } for pid=20737 comm="syz.0.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 546.222284][T20749] netlink: 'syz.4.4941': attribute type 10 has an invalid length. [ 546.262506][T20753] __nla_validate_parse: 8 callbacks suppressed [ 546.262525][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4943'. [ 547.788257][T20760] tipc: Enabling of bearer rejected, failed to enable media [ 547.852707][T20786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4952'. [ 547.888298][T20788] netlink: 'syz.0.4953': attribute type 10 has an invalid length. [ 547.984497][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4956'. [ 548.254621][T20834] netlink: 'syz.3.4965': attribute type 10 has an invalid length. [ 548.995486][T20838] sg_write: data in/out 221/42 bytes for SCSI command 0x0-- guessing data in; [ 548.995486][T20838] program syz.3.4968 not setting count and/or reply_len properly [ 549.098074][T20842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4970'. [ 549.180920][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 549.180937][ T42] audit: type=1400 audit(1785167043.432:1008): avc: denied { append } for pid=20845 comm="syz.3.4971" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 550.967910][T20806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.971715][T20827] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.4966'. [ 551.020925][ T42] audit: type=1400 audit(1785167045.272:1009): avc: denied { ioctl } for pid=20848 comm="syz.3.4973" path="socket:[70689]" dev="sockfs" ino=70689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 551.037842][T20853] netlink: 'syz.1.4975': attribute type 10 has an invalid length. [ 551.039808][T20855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'. [ 551.084329][T20862] tipc: Enabled bearer , priority 0 [ 551.088857][T20862] syzkaller0: entered promiscuous mode [ 551.090516][T20862] syzkaller0: entered allmulticast mode [ 551.093555][T20862] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 551.110230][T20862] tipc: Resetting bearer [ 551.114186][T20860] tipc: Resetting bearer [ 551.131862][T20860] tipc: Disabling bearer [ 551.150492][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4979'. [ 551.219234][T20881] netlink: 'syz.4.4987': attribute type 10 has an invalid length. [ 551.271083][ T42] audit: type=1400 audit(1785167045.512:1010): avc: denied { write } for pid=20885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.360192][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4994'. [ 551.397011][ T42] audit: type=1400 audit(1785167045.652:1011): avc: denied { write } for pid=20907 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.426138][T20913] netlink: 'syz.4.4998': attribute type 10 has an invalid length. [ 551.428258][ T42] audit: type=1400 audit(1785167045.682:1012): avc: denied { append } for pid=20915 comm="syz.0.4999" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.517196][T20925] tipc: Enabled bearer , priority 0 [ 551.529912][T20925] syzkaller0: entered promiscuous mode [ 551.532228][T20925] syzkaller0: entered allmulticast mode [ 551.540462][T20925] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 551.560114][T20925] tipc: Resetting bearer [ 551.564417][T20924] tipc: Resetting bearer [ 551.588107][T20924] tipc: Disabling bearer [ 551.621737][ T42] audit: type=1400 audit(1785167045.872:1013): avc: denied { write } for pid=20930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.679793][ T42] audit: type=1400 audit(1785167045.933:1014): avc: denied { write } for pid=20942 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.688396][T20940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5006'. [ 551.726515][T20950] netlink: 'syz.4.5009': attribute type 10 has an invalid length. [ 551.769098][T20959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.772069][T20959] dummy0: left promiscuous mode [ 551.798958][T20959] bond1: left promiscuous mode [ 551.800573][T20959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.803406][T20959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.811166][T20965] tipc: Enabling of bearer rejected, failed to enable media [ 551.877625][ T42] audit: type=1400 audit(1785167046.133:1015): avc: denied { create } for pid=20972 comm="syz.1.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 551.897119][ T42] audit: type=1400 audit(1785167046.153:1016): avc: denied { listen } for pid=20972 comm="syz.1.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 551.958566][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5019'. [ 551.962119][T20981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5021'. [ 551.964699][T20981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5021'. [ 551.995003][T20983] netlink: 'syz.4.5022': attribute type 10 has an invalid length. [ 552.062166][ T42] audit: type=1400 audit(1785167046.313:1017): avc: denied { bind } for pid=20990 comm="syz.1.5026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 552.069971][T20995] tipc: Enabled bearer , priority 0 [ 552.072438][T20995] syzkaller0: entered promiscuous mode [ 552.074066][T20995] syzkaller0: entered allmulticast mode [ 552.078787][T20995] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 552.102906][T20995] tipc: Resetting bearer [ 552.107236][T20994] tipc: Resetting bearer [ 552.124145][T20994] tipc: Disabling bearer [ 552.159293][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5030'. [ 552.370535][T21040] netlink: 'syz.3.5033': attribute type 10 has an invalid length. [ 552.389586][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5042'. [ 552.419684][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5044'. [ 552.491548][T21046] syzkaller0: entered promiscuous mode [ 552.493217][T21046] syzkaller0: entered allmulticast mode [ 552.498570][T21046] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 552.582219][T21049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.928169][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5054'. [ 555.247448][T21018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.304763][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 555.304778][ T42] audit: type=1400 audit(1785167049.553:1021): avc: denied { getopt } for pid=21088 comm="syz.4.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 555.356734][T21093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5063'. [ 555.361474][T21102] netlink: 'syz.1.5066': attribute type 10 has an invalid length. [ 555.406648][ T42] audit: type=1400 audit(1785167049.663:1022): avc: denied { ioctl } for pid=21113 comm="syz.1.5072" path="socket:[71861]" dev="sockfs" ino=71861 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 555.416872][T21116] netlink: 'syz.1.5072': attribute type 1 has an invalid length. [ 555.476539][T21128] syzkaller0: entered promiscuous mode [ 555.478244][T21128] syzkaller0: entered allmulticast mode [ 555.481378][T21128] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 555.603225][T21138] netlink: 'syz.1.5081': attribute type 10 has an invalid length. [ 555.606934][T21140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.609801][T21140] IPv6: NLM_F_CREATE should be set when creating new route [ 558.392690][T21109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.552905][T21170] __nla_validate_parse: 1 callbacks suppressed [ 558.552924][T21170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5093'. [ 558.568217][T21172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5092'. [ 558.607122][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5093'. [ 558.642895][T21178] tipc: Enabled bearer , priority 0 [ 558.645302][T21178] syzkaller0: entered promiscuous mode [ 558.646928][T21178] syzkaller0: entered allmulticast mode [ 558.650721][T21178] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 558.665824][T21178] tipc: Resetting bearer [ 558.669877][T21179] netlink: 'syz.3.5091': attribute type 10 has an invalid length. [ 558.672533][T21177] tipc: Resetting bearer [ 558.691491][T21177] tipc: Disabling bearer [ 558.716590][ T42] audit: type=1400 audit(1785167052.963:1023): avc: denied { kexec_image_load } for pid=21184 comm="syz.0.5098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 558.738357][ T42] audit: type=1400 audit(1785167052.993:1024): avc: denied { block_suspend } for pid=21186 comm="syz.4.5099" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 558.802572][ T42] audit: type=1400 audit(1785167053.053:1025): avc: denied { ioctl } for pid=21194 comm="syz.0.5103" path="socket:[71936]" dev="sockfs" ino=71936 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 558.810289][ T42] audit: type=1400 audit(1785167053.053:1026): avc: denied { write } for pid=21194 comm="syz.0.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 558.839236][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5102'. [ 558.858929][T21201] syzkaller1: entered promiscuous mode [ 558.860901][T21201] syzkaller1: entered allmulticast mode [ 559.462170][T21234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5113'. [ 559.499751][ T42] audit: type=1400 audit(1785167053.753:1027): avc: denied { read } for pid=21235 comm="syz.3.5114" name="event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 561.990789][T21212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.061439][ T42] audit: type=1400 audit(1785167056.313:1028): avc: denied { append } for pid=21246 comm="syz.1.5117" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 562.102775][T21255] netlink: 'syz.4.5120': attribute type 10 has an invalid length. [ 562.141739][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 562.182725][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5122'. [ 562.282998][T21284] syzkaller0: entered promiscuous mode [ 562.285766][T21284] syzkaller0: entered allmulticast mode [ 562.291384][T21284] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 562.298561][T21283] netlink: 'syz.1.5132': attribute type 10 has an invalid length. [ 562.520293][ T42] audit: type=1400 audit(3932650704.776:1029): avc: denied { write } for pid=21294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.553083][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5137'. [ 562.588618][ T42] audit: type=1400 audit(3932650704.846:1030): avc: denied { write } for pid=21301 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.617198][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.730671][T21311] netlink: 'syz.1.5141': attribute type 10 has an invalid length. [ 562.854054][T21317] usb usb2: usbfs: interface 0 claimed by hub while 'syz.1.5144' sets config #0 [ 562.882942][ T42] audit: type=1400 audit(3932650705.136:1031): avc: denied { mount } for pid=21318 comm="syz.1.5145" name="/" dev="configfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 562.891148][ T42] audit: type=1400 audit(3932650705.136:1032): avc: denied { search } for pid=21318 comm="syz.1.5145" name="/" dev="configfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 562.898545][ T42] audit: type=1400 audit(3932650705.136:1033): avc: denied { search } for pid=21318 comm="syz.1.5145" name="usb_gadget" dev="configfs" ino=5764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 562.909290][ T42] audit: type=1400 audit(3932650705.146:1034): avc: denied { search } for pid=21318 comm="syz.1.5145" name="/" dev="configfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 562.918427][ T42] audit: type=1400 audit(3932650705.146:1035): avc: denied { search } for pid=21318 comm="syz.1.5145" name="usb_gadget" dev="configfs" ino=5764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 562.927991][ T42] audit: type=1400 audit(3932650705.146:1036): avc: denied { search } for pid=21318 comm="syz.1.5145" name="g1" dev="configfs" ino=8028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 562.934868][ T42] audit: type=1400 audit(3932650705.146:1037): avc: denied { search } for pid=21318 comm="syz.1.5145" name="functions" dev="configfs" ino=8029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 565.080652][T21249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.159908][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5146'. [ 565.170406][T21339] netlink: 'syz.4.5150': attribute type 10 has an invalid length. [ 565.239625][T21351] tipc: Enabled bearer , priority 0 [ 565.243164][T21351] syzkaller0: entered promiscuous mode [ 565.245883][T21351] syzkaller0: entered allmulticast mode [ 565.252251][T21351] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 565.272709][T21351] tipc: Resetting bearer [ 565.277196][T21349] tipc: Resetting bearer [ 565.297463][T21349] tipc: Disabling bearer [ 565.419387][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5160'. [ 565.461236][T21371] netlink: 'syz.4.5163': attribute type 10 has an invalid length. [ 565.518011][T21381] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.619858][T21395] syzkaller0: entered promiscuous mode [ 565.622255][T21395] syzkaller0: entered allmulticast mode [ 565.627884][T21395] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 565.642956][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5171'. [ 565.741120][T21402] netlink: 'syz.4.5174': attribute type 10 has an invalid length. [ 566.021012][T21409] /dev/sg0: Can't lookup blockdev [ 566.026156][T21409] random: crng reseeded on system resumption [ 566.033311][T21409] Restarting kernel threads ... [ 566.039625][T21409] Done restarting kernel threads. [ 568.521082][T21383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.632443][T21429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5180'. [ 568.704640][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 568.704657][ T42] audit: type=1400 audit(3932650710.927:1070): avc: denied { write } for pid=21430 comm="syz.1.5186" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 568.753782][ T42] audit: type=1400 audit(3932650710.927:1071): avc: denied { open } for pid=21430 comm="syz.1.5186" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 568.767009][ T42] audit: type=1400 audit(3932650710.967:1072): avc: denied { read } for pid=21424 comm="syz.0.5184" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 568.783344][ T42] audit: type=1400 audit(3932650710.967:1073): avc: denied { open } for pid=21424 comm="syz.0.5184" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 568.791645][ T42] audit: type=1400 audit(3932650711.037:1074): avc: denied { mount } for pid=21424 comm="syz.0.5184" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 568.799330][ T42] audit: type=1400 audit(3932650711.037:1075): avc: denied { mounton } for pid=21434 comm="syz.1.5187" path="/" dev="nsfs" ino=4026533540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 568.862012][T21437] tipc: Enabled bearer , priority 0 [ 568.871855][T21437] syzkaller0: entered promiscuous mode [ 568.874288][T21437] syzkaller0: entered allmulticast mode [ 568.880758][T21437] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 568.897989][T21437] tipc: Resetting bearer [ 568.904457][T21436] tipc: Resetting bearer [ 568.917723][T21436] tipc: Disabling bearer [ 569.089448][T21443] netlink: 'syz.3.5183': attribute type 10 has an invalid length. [ 569.143721][T21446] netlink: 'syz.1.5191': attribute type 6 has an invalid length. [ 569.148683][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5191'. [ 569.231608][ T42] audit: type=1326 audit(3932650711.487:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21452 comm="syz.4.5194" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 569.254175][ T42] audit: type=1326 audit(3932650711.487:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21452 comm="syz.4.5194" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 569.277683][ T42] audit: type=1326 audit(3932650711.487:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21452 comm="syz.4.5194" exe="/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 569.300454][ T42] audit: type=1326 audit(3932650711.487:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21452 comm="syz.4.5194" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 569.397451][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5196'. [ 569.534926][T21464] tipc: Enabled bearer , priority 0 [ 569.537385][T21464] syzkaller0: entered promiscuous mode [ 569.539099][T21464] syzkaller0: entered allmulticast mode [ 569.542578][T21464] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 569.557257][T21464] tipc: Resetting bearer [ 569.561726][T21463] tipc: Resetting bearer [ 569.567570][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5195'. [ 569.575347][T21463] tipc: Disabling bearer [ 569.713054][T21476] netlink: 'syz.4.5205': attribute type 10 has an invalid length. [ 569.877928][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5210'. [ 569.919321][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5212'. [ 570.062144][T21503] tipc: Enabling of bearer rejected, failed to enable media [ 570.094534][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 570.132653][T21509] netlink: 'syz.1.5216': attribute type 10 has an invalid length. [ 570.234718][ T9] usb 5-1: device descriptor read/64, error -71 [ 570.345708][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5220'. [ 570.474613][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 570.604548][ T9] usb 5-1: device descriptor read/64, error -71 [ 570.714737][ T9] usb usb5-port1: attempt power cycle [ 571.054477][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 571.075349][ T9] usb 5-1: device descriptor read/8, error -71 [ 571.205857][T21540] netlink: 'syz.4.5225': attribute type 10 has an invalid length. [ 571.316634][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 571.335808][ T9] usb 5-1: device descriptor read/8, error -71 [ 571.445552][ T9] usb usb5-port1: unable to enumerate USB device [ 572.961723][T21553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5229'. [ 573.130969][T21559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5231'. [ 573.245235][T21519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.352838][T21573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5238'. [ 573.406869][T21591] tipc: Enabling of bearer rejected, failed to enable media [ 573.449262][T21602] netlink: 'syz.1.5248': attribute type 1 has an invalid length. [ 573.452820][T21602] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5248'. [ 573.455334][T21604] netlink: 'syz.3.5234': attribute type 10 has an invalid length. [ 573.623013][T21621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5254'. [ 573.637909][T21621] bond4: entered promiscuous mode [ 573.639635][T21621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 574.160429][T21629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5257'. [ 574.436398][T21641] syzkaller0: entered promiscuous mode [ 574.438483][T21641] syzkaller0: entered allmulticast mode [ 574.442498][T21641] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 575.268329][T21647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5264'. [ 575.308816][T21649] netlink: 'syz.4.5265': attribute type 10 has an invalid length. [ 576.406612][T21593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.470937][T21670] netlink: 'syz.1.5274': attribute type 10 has an invalid length. [ 576.515903][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 576.515916][ T42] audit: type=1400 audit(3932650718.757:1091): avc: denied { create } for pid=21681 comm="syz.1.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 576.526064][ T42] audit: type=1400 audit(3932650718.777:1092): avc: denied { sys_admin } for pid=21681 comm="syz.1.5278" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 576.781769][T21724] netlink: 'syz.3.5287': attribute type 10 has an invalid length. [ 576.806154][T21726] udc usbip-vudc.0: unsupported command 'Öõ3Cõê—' [ 577.798704][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5297'. [ 577.923943][T21743] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 577.929685][T21743] bond5 (unregistering): Released all slaves [ 578.042578][T21746] bond5: option tlb_dynamic_lb: invalid value (22) [ 578.047110][T21746] bond5 (unregistering): Released all slaves [ 578.236571][T21755] netlink: 'syz.1.5304': attribute type 10 has an invalid length. [ 578.683019][T21775] netlink: 'syz.1.5313': attribute type 10 has an invalid length. [ 578.971356][ T42] audit: type=1400 audit(3932650721.217:1093): avc: denied { connect } for pid=21776 comm="syz.1.5314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 578.979470][ T42] audit: type=1400 audit(3932650721.217:1094): avc: denied { write } for pid=21776 comm="syz.1.5314" laddr=fe80::9431:eaff:fe93:204a lport=19269 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 578.990133][ T42] audit: type=1400 audit(3932650721.227:1095): avc: denied { read } for pid=21776 comm="syz.1.5314" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 579.587457][T21696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.676430][T21791] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in; [ 579.676430][T21791] program syz.3.5319 not setting count and/or reply_len properly [ 579.690107][ T42] audit: type=1400 audit(3932650721.937:1096): avc: denied { write } for pid=21783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.778253][ T42] audit: type=1400 audit(3932650722.027:1097): avc: denied { write } for pid=21797 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.810071][T21802] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5322'. [ 579.810861][T21806] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 579.817748][T21802] netlink: 'syz.0.5322': attribute type 10 has an invalid length. [ 579.881677][ T42] audit: type=1400 audit(3932650722.127:1098): avc: denied { write } for pid=21807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.955784][ T42] audit: type=1400 audit(3932650722.207:1099): avc: denied { write } for pid=21821 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.977817][T21823] syzkaller0: entered promiscuous mode [ 579.979438][T21823] syzkaller0: entered allmulticast mode [ 579.982874][T21823] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 580.033042][ T42] audit: type=1400 audit(3932650722.277:1100): avc: denied { connect } for pid=21825 comm="syz.3.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 580.061318][T21828] syzkaller0: entered promiscuous mode [ 580.066732][T21828] syzkaller0: entered allmulticast mode [ 580.707057][T21841] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5334'. [ 580.711225][T21841] netlink: 'syz.4.5334': attribute type 10 has an invalid length. [ 582.863668][T21811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.919694][ T42] audit: type=1400 audit(3932650725.168:1101): avc: denied { mount } for pid=21854 comm="syz.1.5341" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 582.930978][ T42] audit: type=1400 audit(3932650725.178:1102): avc: denied { unmount } for pid=19562 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 582.957598][T21862] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5343'. [ 582.961695][T21862] netlink: 'syz.1.5343': attribute type 10 has an invalid length. [ 582.983108][ T42] audit: type=1400 audit(3932650725.228:1103): avc: denied { cmd } for pid=21864 comm="syz.4.5345" path="socket:[71413]" dev="sockfs" ino=71413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 582.992262][ T42] audit: type=1400 audit(3932650725.228:1104): avc: denied { setopt } for pid=21864 comm="syz.4.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 583.020814][T21871] tipc: Enabled bearer , priority 0 [ 583.023455][T21871] syzkaller0: entered promiscuous mode [ 583.025317][T21871] syzkaller0: entered allmulticast mode [ 583.028376][T21871] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 583.056216][T21871] tipc: Resetting bearer [ 583.059697][T21870] tipc: Resetting bearer [ 583.071301][T21870] tipc: Disabling bearer [ 583.205647][ T42] audit: type=1400 audit(3932650725.458:1105): avc: denied { mount } for pid=21896 comm="syz.1.5356" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 583.247101][T21899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5357'. [ 583.250277][T21899] netlink: 'syz.1.5357': attribute type 10 has an invalid length. [ 583.574775][T21912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5362'. [ 584.028085][T21918] syzkaller0: entered promiscuous mode [ 584.029702][T21918] syzkaller0: entered allmulticast mode [ 584.033068][T21918] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 586.017153][T21876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.068080][ T42] audit: type=1400 audit(3932650728.318:1106): avc: denied { module_load } for pid=21919 comm="syz.3.5367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 586.079628][T21922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5366'. [ 586.084720][T21922] netlink: 'syz.4.5366': attribute type 10 has an invalid length. [ 586.084801][ T42] audit: type=1400 audit(3932650728.338:1107): avc: denied { ioctl } for pid=21924 comm="syz.0.5365" path="socket:[73884]" dev="sockfs" ino=73884 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 586.207478][T21931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.282132][T21941] tipc: Enabled bearer , priority 0 [ 586.288227][T21941] syzkaller0: entered promiscuous mode [ 586.290695][T21941] syzkaller0: entered allmulticast mode [ 586.295052][T21941] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 586.348666][T21931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.399348][T21941] tipc: Resetting bearer [ 586.409944][T21940] tipc: Resetting bearer [ 586.423266][T21940] tipc: Disabling bearer [ 586.517600][T21931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.549998][T21951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5379'. [ 586.553180][T21951] netlink: 'syz.4.5379': attribute type 10 has an invalid length. [ 586.602945][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5380'. [ 586.607759][T21953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5380'. [ 586.619361][T21931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.632575][T21953] geneve2: entered promiscuous mode [ 586.636007][T21953] geneve2: entered allmulticast mode [ 586.718490][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.740399][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.756674][ T5812] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.774576][ T5812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.827864][T21972] netlink: 'syz.0.5388': attribute type 10 has an invalid length. [ 586.887641][T21978] tipc: Enabled bearer , priority 0 [ 586.893446][T21978] syzkaller0: entered promiscuous mode [ 586.898275][T21978] syzkaller0: entered allmulticast mode [ 586.902379][T21978] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 586.913754][ T42] audit: type=1400 audit(3932650729.158:1108): avc: denied { getopt } for pid=21981 comm="syz.1.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 586.929000][T21978] tipc: Resetting bearer [ 586.932905][T21976] tipc: Resetting bearer [ 586.943547][T21976] tipc: Disabling bearer [ 587.010441][ T42] audit: type=1400 audit(3932650729.258:1109): avc: denied { accept } for pid=21985 comm="syz.1.5394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 587.055075][T21995] netlink: 'syz.4.5398': attribute type 10 has an invalid length. [ 587.093429][T21999] lo speed is unknown, defaulting to 1000 [ 587.096649][T21999] lo speed is unknown, defaulting to 1000 [ 587.098829][T21999] lo speed is unknown, defaulting to 1000 [ 587.195103][T22016] tipc: Enabling of bearer rejected, failed to enable media [ 587.229292][T21999] infiniband syz1: set active [ 587.234998][T22014] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.238841][T21999] infiniband syz1: added lo [ 587.255913][T21999] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 587.263693][T21999] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 587.266682][ T24] lo speed is unknown, defaulting to 1000 [ 587.271119][T21999] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 587.297127][T22026] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5407'. [ 587.298318][T21999] RDS/IB: syz1: added [ 587.308867][T21999] smc: adding ib device syz1 with port count 1 [ 587.313119][T22014] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.313926][T21999] smc: ib device syz1 port 1 has no pnetid [ 587.327432][T22016] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5408'. [ 587.332122][ T5813] lo speed is unknown, defaulting to 1000 [ 587.338330][T21999] lo speed is unknown, defaulting to 1000 [ 587.390538][T22031] netlink: 'syz.3.5409': attribute type 10 has an invalid length. [ 587.398483][T22014] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.478838][T22014] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.523858][T21999] lo speed is unknown, defaulting to 1000 [ 587.624113][T22047] tipc: Enabling of bearer rejected, failed to enable media [ 587.637797][T21999] lo speed is unknown, defaulting to 1000 [ 587.724574][T22047] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5418'. [ 587.766062][T21999] lo speed is unknown, defaulting to 1000 [ 587.866573][T21999] lo speed is unknown, defaulting to 1000 [ 587.953209][T21999] lo speed is unknown, defaulting to 1000 [ 588.051398][T21999] lo speed is unknown, defaulting to 1000 [ 588.162582][ T42] audit: type=1400 audit(3932650730.408:1110): avc: denied { append } for pid=22075 comm="syz.0.5425" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 588.281221][ T5812] bridge_slave_1: left allmulticast mode [ 588.283060][ T5812] bridge_slave_1: left promiscuous mode [ 588.285129][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.290010][ T5812] bridge_slave_0: left allmulticast mode [ 588.291805][ T5812] bridge_slave_0: left promiscuous mode [ 588.294131][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.299310][ T5812] pim6reg: left allmulticast mode [ 588.301331][ T5812] lo: left allmulticast mode [ 588.447632][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.453077][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.459494][ T5812] bond0 (unregistering): Released all slaves [ 588.466865][T22082] syzkaller0: entered promiscuous mode [ 588.469168][T22082] syzkaller0: entered allmulticast mode [ 588.473349][T22084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5428'. [ 588.477137][T22084] bridge: RTM_NEWNEIGH with invalid ether address [ 588.479956][T22085] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 588.497418][T22086] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5427'. [ 588.542941][ T5812] tipc: Left network mode [ 588.573156][ T5812] IPVS: stopping master sync thread 8595 ... [ 588.777581][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5431'. [ 588.783675][T22096] netlink: 'syz.4.5431': attribute type 10 has an invalid length. [ 589.022628][ T5812] hsr_slave_0: left promiscuous mode [ 589.034356][ T5812] hsr_slave_1: left promiscuous mode [ 589.037141][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.040780][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.768911][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.782548][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.794799][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.805423][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.991798][T22118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5441'. [ 590.997343][T22118] netlink: 'syz.1.5441': attribute type 10 has an invalid length. [ 591.023532][ T42] audit: type=1400 audit(3932650733.278:1111): avc: denied { write } for pid=22119 comm="syz.1.5442" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 591.030949][ T42] audit: type=1400 audit(3932650733.278:1112): avc: denied { open } for pid=22119 comm="syz.1.5442" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 591.039030][ T42] audit: type=1400 audit(3932650733.278:1113): avc: denied { ioctl } for pid=22119 comm="syz.1.5442" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 591.122951][T22071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.177197][ T42] audit: type=1400 audit(3932650733.428:1114): avc: denied { ioctl } for pid=22127 comm="syz.1.5446" path="socket:[74779]" dev="sockfs" ino=74779 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 591.186443][ T42] audit: type=1400 audit(3932650733.438:1115): avc: denied { setopt } for pid=22129 comm="syz.0.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 591.237611][T22137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5450'. [ 591.241567][T22137] netlink: 'syz.0.5450': attribute type 10 has an invalid length. [ 591.243964][T22139] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5451'. [ 591.247181][T22139] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 591.276102][ T42] audit: type=1326 audit(3932650733.528:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.4.5447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 591.283689][ T42] audit: type=1326 audit(3932650733.528:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.4.5447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 591.291080][ T42] audit: type=1326 audit(3932650733.528:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.4.5447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 591.304875][ T42] audit: type=1326 audit(3932650733.528:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.4.5447" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 591.703039][T22176] netlink: 'syz.3.5462': attribute type 10 has an invalid length. [ 591.911442][T22178] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 592.095617][T22188] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5469'. [ 592.200859][T22195] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5472'. [ 593.338898][T19230] bridge_slave_1: left allmulticast mode [ 593.341482][T19230] bridge_slave_1: left promiscuous mode [ 593.345918][T19230] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.351029][T19230] bridge_slave_0: left allmulticast mode [ 593.354388][T19230] bridge_slave_0: left promiscuous mode [ 593.357080][T19230] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.501281][T19230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.509094][T19230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.512559][T19230] bond0 (unregistering): Released all slaves [ 593.600385][T19230] tipc: Left network mode [ 593.644373][T19230] IPVS: stopping master sync thread 8179 ... [ 593.954769][T19230] hsr_slave_0: left promiscuous mode [ 593.957854][T19230] hsr_slave_1: left promiscuous mode [ 593.960641][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.963671][T19230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.966211][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.968546][T19230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.977121][T19230] veth1_macvtap: left promiscuous mode [ 593.978964][T19230] veth0_macvtap: left promiscuous mode [ 593.980659][T19230] veth1_vlan: left promiscuous mode [ 593.982291][T19230] veth0_vlan: left promiscuous mode [ 594.127695][T19230] team0 (unregistering): Port device team_slave_1 removed [ 594.137447][T19230] team0 (unregistering): Port device team_slave_0 removed [ 594.207173][ T176] smc: removing ib device syz0 [ 594.234584][ T176] smbdirect: ib_dev[syz0] removed [ 594.383237][T22155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.440084][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 594.440101][ T42] audit: type=1400 audit(3932650736.688:1147): avc: denied { read } for pid=22216 comm="syz.4.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 594.531285][T22228] netlink: 'syz.0.5487': attribute type 10 has an invalid length. [ 594.746254][T22253] netlink: 'syz.0.5498': attribute type 10 has an invalid length. [ 594.781335][ T42] audit: type=1400 audit(3932650737.028:1148): avc: denied { create } for pid=22254 comm="syz.0.5499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 594.787224][ T42] audit: type=1400 audit(3932650737.028:1149): avc: denied { bind } for pid=22254 comm="syz.0.5499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 594.991004][T19230] IPVS: stop unused estimator thread 0... [ 595.319523][T22272] netlink: 'syz.4.5507': attribute type 10 has an invalid length. [ 595.350699][T22278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5510'. [ 595.353830][T22278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5510'. [ 595.357890][T22278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5510'. [ 595.361416][T22278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5510'. [ 595.412855][ T42] audit: type=1326 audit(3932650737.658:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22283 comm="syz.4.5513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 595.421323][ T42] audit: type=1326 audit(3932650737.658:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22283 comm="syz.4.5513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 595.429037][ T42] audit: type=1326 audit(3932650737.668:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22283 comm="syz.4.5513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 595.438285][ T42] audit: type=1326 audit(3932650737.668:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22283 comm="syz.4.5513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 595.447793][ T42] audit: type=1326 audit(3932650737.668:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22283 comm="syz.4.5513" exe="/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 595.458640][ T42] audit: type=1326 audit(3932650737.668:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22283 comm="syz.4.5513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 595.468081][ T42] audit: type=1326 audit(3932650737.668:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22283 comm="syz.4.5513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc04f9de99 code=0x7ffc0000 [ 595.652837][T22306] netlink: 'syz.3.5517': attribute type 10 has an invalid length. [ 595.984907][T22315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5526'. [ 596.198585][T22321] program syz.0.5529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.237669][T22323] program syz.0.5530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.480246][T22338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5537'. [ 596.727453][T22366] netlink: 'syz.3.5543': attribute type 10 has an invalid length. [ 596.869255][T22384] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 597.648786][T22243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.982342][T22461] netlink: 'syz.4.5589': attribute type 8 has an invalid length. [ 600.878853][T22447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.961937][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 600.961948][ T42] audit: type=1400 audit(3932650743.209:1164): avc: denied { write } for pid=22487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.003715][ T42] audit: type=1400 audit(3932650743.259:1165): avc: denied { write } for pid=22500 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.078513][ T42] audit: type=1400 audit(3932650743.329:1166): avc: denied { write } for pid=22514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.135490][ T42] audit: type=1400 audit(3932650743.389:1167): avc: denied { write } for pid=22527 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.281246][T22553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5622'. [ 601.941174][T22574] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5629'. [ 601.983971][ T42] audit: type=1400 audit(3932650744.229:1168): avc: denied { name_bind } for pid=22584 comm="syz.3.5634" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 602.193291][ T42] audit: type=1400 audit(3932650744.449:1169): avc: denied { listen } for pid=22607 comm="syz.4.5647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 602.470601][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5657'. [ 602.846300][ T42] audit: type=1400 audit(3932650745.099:1170): avc: denied { connect } for pid=22650 comm="syz.1.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 602.856409][ T42] audit: type=1400 audit(3932650745.109:1171): avc: denied { write } for pid=22650 comm="syz.1.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 602.856789][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5666'. [ 602.907598][ T42] audit: type=1400 audit(3932650745.159:1172): avc: denied { read } for pid=22650 comm="syz.1.5667" path="socket:[75192]" dev="sockfs" ino=75192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 602.939489][T22654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5668'. [ 602.981939][ T42] audit: type=1400 audit(3932650745.229:1173): avc: denied { create } for pid=22657 comm="syz.4.5670" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 603.364623][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 603.370354][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 603.374138][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 603.377767][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 603.380853][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 603.633692][T22675] lo speed is unknown, defaulting to 1000 [ 603.939078][T22675] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.941388][T22675] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.943817][T22675] bridge_slave_0: entered allmulticast mode [ 603.946421][T22675] bridge_slave_0: entered promiscuous mode [ 603.949622][T22675] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.951886][T22675] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.954160][T22675] bridge_slave_1: entered allmulticast mode [ 603.956715][T22675] bridge_slave_1: entered promiscuous mode [ 603.974375][T22675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.978857][T22675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.994026][T22675] team0: Port device team_slave_0 added [ 603.997251][T22675] team0: Port device team_slave_1 added [ 604.013230][T22675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.015356][T22675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.023125][T22675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.027224][T22675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.029352][T22675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.037199][T22675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.058853][T22675] hsr_slave_0: entered promiscuous mode [ 604.061049][T22675] hsr_slave_1: entered promiscuous mode [ 604.065662][T22675] debugfs: 'hsr0' already exists in 'hsr' [ 604.067518][T22675] Cannot create hsr debugfs directory [ 604.223725][T22675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 604.230986][T22675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 604.235067][T22675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 604.238738][T22675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.241423][T22675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 604.246671][T22675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.249561][T22675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 604.256711][T22675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.304821][T22675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.317500][T22675] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.326565][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.328824][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.335633][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.337914][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.365649][T22743] netlink: 'syz.4.5700': attribute type 4 has an invalid length. [ 604.376096][T22743] netlink: 'syz.4.5700': attribute type 4 has an invalid length. [ 604.634701][T22675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.803785][T22675] veth0_vlan: entered promiscuous mode [ 604.811264][T22675] veth1_vlan: entered promiscuous mode [ 604.817577][T22798] 9p: Bad value for 'rfdno' [ 604.837470][T22675] veth0_macvtap: entered promiscuous mode [ 604.849319][T22675] veth1_macvtap: entered promiscuous mode [ 604.869669][T22675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.876999][T22675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.884960][T19230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.888283][T19230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.892154][T19230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.895490][T19230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.009431][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.026302][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.053158][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.055670][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.062335][T22815] lo speed is unknown, defaulting to 1000 [ 605.125536][T22815] lo speed is unknown, defaulting to 1000 [ 605.128688][T22815] lo speed is unknown, defaulting to 1000 [ 605.238857][T22815] infiniband syz0: set active [ 605.240385][ T29] lo speed is unknown, defaulting to 1000 [ 605.245051][T22815] infiniband syz0: added lo [ 605.253484][T22815] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 605.258098][T22815] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 605.263872][T22815] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 605.275209][T22815] RDS/IB: syz0: added [ 605.276552][T22815] smc: adding ib device syz0 with port count 1 [ 605.278485][T22815] smc: ib device syz0 port 1 has no pnetid [ 605.327893][ T29] lo speed is unknown, defaulting to 1000 [ 605.335856][T22815] lo speed is unknown, defaulting to 1000 [ 605.413097][ T5741] Bluetooth: hci1: command tx timeout [ 605.477297][T22838] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 605.479806][T22815] lo speed is unknown, defaulting to 1000 [ 605.488045][ T29] IPVS: starting estimator thread 0... [ 605.592603][T22844] IPVS: using max 43 ests per chain, 103200 per kthread [ 605.600477][T22849] Invalid option length (0) for dns_resolver key [ 605.610792][T22815] lo speed is unknown, defaulting to 1000 [ 605.687067][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.749816][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.794168][ T12] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.820899][ T12] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.849441][ T5812] bridge_slave_1: left allmulticast mode [ 605.853847][ T5812] bridge_slave_1: left promiscuous mode [ 605.858745][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.877041][ T5812] bridge_slave_0: left allmulticast mode [ 605.879387][ T5812] bridge_slave_0: left promiscuous mode [ 605.881863][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.050089][ T5812] batman_adv: batadv0: Removing interface: gretap1 [ 606.092385][ T5812] team0: Port device bond0 removed [ 606.099172][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.100643][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 606.100653][ T42] audit: type=1400 audit(3932650748.349:1182): avc: denied { mounton } for pid=22889 comm="syz.5.5756" path="/2/config" dev="configfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 606.125248][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.131039][ T5812] bond0 (unregistering): Released all slaves [ 606.142193][T22815] lo speed is unknown, defaulting to 1000 [ 606.145071][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 606.234792][ T5812] tipc: Left network mode [ 606.290040][T22815] lo speed is unknown, defaulting to 1000 [ 606.432920][T22815] lo speed is unknown, defaulting to 1000 [ 606.774289][ T5812] hsr_slave_0: left promiscuous mode [ 606.776797][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.779995][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.879775][ T42] audit: type=1400 audit(3932650749.129:1183): avc: denied { read } for pid=22955 comm="syz.1.5784" path="socket:[75377]" dev="sockfs" ino=75377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 606.898807][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 606.906126][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 607.492473][ T5741] Bluetooth: hci1: command tx timeout [ 607.745258][ T42] audit: type=1400 audit(3932650749.999:1184): avc: denied { watch_reads } for pid=22981 comm="syz.4.5791" path="/511" dev="tmpfs" ino=2606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 608.681085][ T5850] lo speed is unknown, defaulting to 1000 [ 608.799041][T23046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5820'. [ 608.810438][T23046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5820'. [ 609.130365][T22894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.194481][ T42] audit: type=1400 audit(3932650751.449:1185): avc: denied { write } for pid=23069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.257698][ T42] audit: type=1400 audit(3932650751.509:1186): avc: denied { write } for pid=23085 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.295975][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 609.368108][T23098] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5837'. [ 609.371270][T23098] unsupported nlmsg_type 40 [ 609.401954][ T42] audit: type=1400 audit(3932650751.649:1187): avc: denied { write } for pid=23099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.489186][ T42] audit: type=1400 audit(3932650751.739:1188): avc: denied { write } for pid=23107 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.529910][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 609.572342][ T5741] Bluetooth: hci1: command tx timeout [ 611.652196][ T5741] Bluetooth: hci1: command tx timeout [ 612.459493][T23106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.549695][ T50] lo speed is unknown, defaulting to 1000 [ 612.571445][ T42] audit: type=1400 audit(3932650754.819:1189): avc: denied { write } for pid=23132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.602446][ T5883] kernel read not supported for file /vcs (pid: 5883 comm: kworker/1:3) [ 612.639616][ T42] audit: type=1400 audit(3932650754.889:1190): avc: denied { write } for pid=23149 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.694377][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 613.024581][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5855'. [ 614.335688][ T42] audit: type=1400 audit(3932650756.589:1191): avc: denied { getopt } for pid=23236 comm="syz.0.5886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 614.710711][T23251] netlink: 'syz.4.5892': attribute type 4 has an invalid length. [ 614.719985][T23251] netlink: 'syz.4.5892': attribute type 4 has an invalid length. [ 615.093155][T23287] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5907'. [ 615.139892][T23291] netlink: 'syz.5.5910': attribute type 4 has an invalid length. [ 615.963476][T23335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5929'. [ 616.113310][T23340] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.115763][T23340] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.163893][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5931'. [ 616.215208][T23340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.221199][T23340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.344927][T23341] geneve3: entered promiscuous mode [ 616.384230][T23364] netlink: 'syz.0.5935': attribute type 35 has an invalid length. [ 616.399651][T23361] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.462023][T23374] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20003 [ 616.473258][T23374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.508644][T23374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.596965][ T42] audit: type=1326 audit(3932650758.849:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.5.5942" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842d39de99 code=0x7ffc0000 [ 616.609663][ T42] audit: type=1326 audit(3932650758.849:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.5.5942" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842d39de99 code=0x7ffc0000 [ 616.628532][ T42] audit: type=1326 audit(3932650758.849:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.5.5942" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842d39de99 code=0x7ffc0000 [ 616.636705][ T42] audit: type=1326 audit(3932650758.849:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.5.5942" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842d39de99 code=0x7ffc0000 [ 616.645231][ T42] audit: type=1326 audit(3932650758.849:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.5.5942" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f842d39de99 code=0x7ffc0000 [ 616.655280][ T42] audit: type=1326 audit(3932650758.849:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.5.5942" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842d39de99 code=0x7ffc0000 [ 616.665437][ T42] audit: type=1326 audit(3932650758.879:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.5.5942" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842d39de99 code=0x7ffc0000 [ 617.374247][T23424] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20003 [ 617.397385][T23424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.406361][T23424] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.408492][T23424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.434789][T23424] bond1: left promiscuous mode [ 617.437182][T23424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.441341][T23424] bond2: left promiscuous mode [ 617.445869][T23424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.451306][T23424] bond3: left promiscuous mode [ 617.459082][T23424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 617.473241][T23424] bond4: left promiscuous mode [ 617.477507][T23424] 8021q: adding VLAN 0 to HW filter on device eth0 [ 617.483390][T23424] 8021q: adding VLAN 0 to HW filter on device eth1 [ 617.488250][T23424] 8021q: adding VLAN 0 to HW filter on device eth2 [ 617.492717][T23424] 8021q: adding VLAN 0 to HW filter on device eth3 [ 617.552100][T23444] tipc: Enabling of bearer rejected, failed to enable media [ 617.983477][T23477] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20003 [ 618.254792][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 618.254809][ T42] audit: type=1400 audit(3932650760.510:1207): avc: denied { read } for pid=23500 comm="syz.1.5990" path="socket:[79145]" dev="sockfs" ino=79145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 618.276186][T23505] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20003 [ 618.291222][T23505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.294974][T23505] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.299304][T23505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.324865][T23505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.335014][T23505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.354552][T23505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 618.358719][T23505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.366661][T23505] veth1_vlan: left promiscuous mode [ 618.369448][T23505] veth0_vlan: left promiscuous mode [ 618.373493][T23505] veth0_vlan: entered promiscuous mode [ 618.376744][T23505] veth1_vlan: entered promiscuous mode [ 618.380655][T23505] veth1_macvtap: left promiscuous mode [ 618.383653][T23505] veth0_macvtap: left promiscuous mode [ 618.386028][T23505] veth0_macvtap: entered promiscuous mode [ 618.389321][T23505] veth1_macvtap: entered promiscuous mode [ 618.393664][T23505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.396445][T23505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.399100][T23505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.402248][T23505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.407043][T23505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.409626][T23505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.412937][T23505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 618.415675][T23505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 618.418507][T23505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 618.424986][T23505] geneve2: left promiscuous mode [ 618.428878][T23505] geneve3: left promiscuous mode [ 618.443573][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.446205][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.454800][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.457591][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.579585][T23528] tmpfs: Bad value for 'mpol' [ 619.755640][T23583] IPv6: sit1: Disabled Multicast RS [ 619.959665][T23603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6038'. [ 620.187757][T23623] [ 620.188723][T23623] ============================= [ 620.190618][T23623] WARNING: suspicious RCU usage [ 620.193684][T23623] syzkaller #0 Not tainted [ 620.195392][T23623] ----------------------------- [ 620.197560][T23623] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 620.200574][T23623] [ 620.200574][T23623] other info that might help us debug this: [ 620.200574][T23623] [ 620.204747][T23623] [ 620.204747][T23623] rcu_scheduler_active = 2, debug_locks = 1 [ 620.207789][T23623] 1 lock held by syz.0.6048/23623: [ 620.209730][T23623] #0: ffff88802ffaead0 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 620.214430][T23623] [ 620.214430][T23623] stack backtrace: [ 620.217019][T23623] CPU: 0 UID: 0 PID: 23623 Comm: syz.0.6048 Not tainted syzkaller #0 PREEMPT(full) [ 620.217044][T23623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 620.217056][T23623] Call Trace: [ 620.217063][T23623] [ 620.217071][T23623] dump_stack_lvl+0x100/0x190 [ 620.217099][T23623] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 620.217134][T23623] xfrm_do_migrate_state+0x2463/0x2f10 [ 620.217165][T23623] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 620.217189][T23623] ? __asan_memset+0x23/0x50 [ 620.217209][T23623] ? __nla_validate_parse+0x1e7/0x28b0 [ 620.217247][T23623] ? __nla_parse+0x40/0x60 [ 620.217286][T23623] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 620.217310][T23623] ? xfrm_user_rcv_msg+0x483/0xd80 [ 620.217328][T23623] xfrm_user_rcv_msg+0x483/0xd80 [ 620.217349][T23623] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 620.217371][T23623] ? kfree_skbmem+0x19f/0x210 [ 620.217398][T23623] ? consume_skb+0xd6/0x110 [ 620.217448][T23623] ? rcu_is_watching+0x12/0xc0 [ 620.217481][T23623] ? trace_contention_end+0x126/0x160 [ 620.217508][T23623] ? __mutex_lock+0x26d/0x1bd0 [ 620.217532][T23623] netlink_rcv_skb+0x159/0x420 [ 620.217547][T23623] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 620.217565][T23623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.217599][T23623] xfrm_netlink_rcv+0x71/0x90 [ 620.217630][T23623] netlink_unicast+0x585/0x850 [ 620.217653][T23623] ? __pfx_netlink_unicast+0x10/0x10 [ 620.217674][T23623] ? __pfx_sock_has_perm+0x10/0x10 [ 620.217699][T23623] netlink_sendmsg+0x8b0/0xda0 [ 620.217723][T23623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.217746][T23623] ? selinux_socket_sendmsg+0x198/0x2f0 [ 620.217778][T23623] ____sys_sendmsg+0xa4d/0xbe0 [ 620.217802][T23623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.217820][T23623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.217859][T23623] ___sys_sendmsg+0x190/0x1e0 [ 620.217891][T23623] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.217914][T23623] ? __lock_acquire+0x49f/0x1a40 [ 620.217966][T23623] __sys_sendmsg+0x160/0x210 [ 620.217991][T23623] ? __pfx___sys_sendmsg+0x10/0x10 [ 620.218028][T23623] do_syscall_64+0x115/0x870 [ 620.218050][T23623] ? clear_bhb_loop+0x40/0x90 [ 620.218074][T23623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.218095][T23623] RIP: 0033:0x7f211199de99 [ 620.218112][T23623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.218130][T23623] RSP: 002b:00007f21127eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.218145][T23623] RAX: ffffffffffffffda RBX: 00007f2111c25fa0 RCX: 00007f211199de99 [ 620.218158][T23623] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 620.218170][T23623] RBP: 00007f2111a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 620.218181][T23623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.218192][T23623] R13: 00007f2111c26038 R14: 00007f2111c25fa0 R15: 00007fffe4a96bc8 [ 620.218219][T23623] [ 623.057046][ T42] audit: type=1400 audit(3932650765.310:1208): avc: denied { write } for pid=23626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.107966][ T42] audit: type=1400 audit(3932650765.360:1209): avc: denied { write } for pid=23629 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.968891][ T42] audit: type=1400 audit(3932650766.220:1210): avc: denied { write } for pid=23632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.014494][ T42] audit: type=1400 audit(3932650766.270:1211): avc: denied { write } for pid=23635 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.053506][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.401560][ T42] audit: type=1400 audit(3932650766.650:1212): avc: denied { write } for pid=23638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.440745][ T42] audit: type=1400 audit(3932650766.690:1213): avc: denied { write } for pid=23641 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.539000][ T42] audit: type=1400 audit(3932650766.790:1214): avc: denied { write } for pid=23644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.596822][ T42] audit: type=1400 audit(3932650766.850:1215): avc: denied { write } for pid=23647 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1