last executing test programs: 13.314891984s ago: executing program 1 (id=759): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) listxattr(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000009c00000018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000030850000008a000000bca900000000000035090100000000009500500000000006bf9800000000000036080000020000008500000007000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") unlink(&(0x7f0000000280)='./file1/file2\x00') 11.201870364s ago: executing program 1 (id=766): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 11.090054244s ago: executing program 1 (id=770): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/15], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r0, 0x40047457, &(0x7f0000000100)) 10.134963631s ago: executing program 1 (id=778): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x264, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_ACT={0x134, 0x1, [@m_simple={0x130, 0x1, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x8d, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xf0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0xc0, 0x2, [@m_vlan={0xbc, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x8d, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf11"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 10.036701259s ago: executing program 1 (id=780): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) listxattr(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000009c00000018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000030850000008a000000bca900000000000035090100000000009500500000000006bf9800000000000036080000020000008500000007000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") unlink(&(0x7f0000000280)='./file1/file2\x00') 7.96861582s ago: executing program 1 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r2, 0x1, 0x0) ptrace$setregset(0x4205, r2, 0x200, &(0x7f00000001c0)={0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.088636292s ago: executing program 3 (id=796): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'ip6gretap0\x00', 0x100}) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00001a6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1a000000049b00000000007993c333", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/28], 0x48) write(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r4, 0xc138fd0a, &(0x7f0000000300)) 4.329146192s ago: executing program 3 (id=797): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b7893", 0x6f}], 0x1}}], 0x1, 0x2090) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423b", 0x5a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112ab", 0x46}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d", 0x36}, {&(0x7f0000000580)="fb411a9c85", 0x5}], 0x6) write(r0, &(0x7f0000001e00)="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", 0x35b) 3.426714588s ago: executing program 2 (id=799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000009c000000030a01020000000000000000020000060900010073797a300000000079000300fd02b2"], 0xe4}}, 0x0) 3.248665161s ago: executing program 2 (id=800): syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x26, 0x2, [{0x6, 0xb, "5e000000ff000000f5"}, {0x0, 0x5, "0404a6"}, {0x0, 0x10, "960605390006fff5800000b61af9"}]}, @rr={0x7, 0x7, 0x57, [@private=0xa010100]}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 3.143060711s ago: executing program 0 (id=801): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x264, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_ACT={0x134, 0x1, [@m_simple={0x130, 0x1, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x8d, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xf0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0xc0, 0x2, [@m_vlan={0xbc, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x8d, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf11"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.066844445s ago: executing program 3 (id=802): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x65b}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.060166346s ago: executing program 2 (id=803): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1f8, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x8d, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xf8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0xc8, 0x2, [@m_vlan={0xc4, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x95, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd00"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.043922609s ago: executing program 0 (id=804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xe4}}, 0x0) 3.006209536s ago: executing program 0 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 2.997445878s ago: executing program 3 (id=806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x8, 0xb, 0xdc}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 2.860276053s ago: executing program 2 (id=807): syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x27, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}, {0x0, 0xf, "960605390006fff5800000b61a"}]}, @rr={0x7, 0x7, 0x57, [@private=0xa010100]}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 2.799249564s ago: executing program 2 (id=808): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244be", 0xcd}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c91", 0x6a}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423b", 0x5a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512", 0x4a}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d", 0x36}, {&(0x7f0000000580)="fb411a9c85180744d674c3699fcb27d2e189c6", 0x13}, {&(0x7f0000000640)="1cc96615eecaacfeb350b8076b6c81828f6cdf330cb6539f08559aac557883119bb42271c062c2b26c2ad805621611135174ea1fda23d1", 0x37}], 0x7) write(r0, &(0x7f0000001e00)="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", 0x35b) 1.767025285s ago: executing program 3 (id=809): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b00)="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", 0x288}, {&(0x7f0000000700)="449000010000", 0x6}], 0x2}}], 0x1, 0x4008040) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cf", 0x2e}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512d82086a1a2e7f72a", 0x52}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b71", 0x30}], 0x5) write(r0, &(0x7f0000001e00)="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", 0x309) 1.569861301s ago: executing program 4 (id=810): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r3}, 0x38) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c1c41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086", @ANYRESDEC], 0xffdd) 1.166972325s ago: executing program 0 (id=811): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000306"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x13}, @in6=@mcast2, 0xfffd, 0x1, 0x4e23, 0xe, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff9, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x6e6bc0, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe8) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) 945.839616ms ago: executing program 2 (id=812): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b7893", 0x6f}], 0x1}}], 0x1, 0x2090) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423b", 0x5a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262", 0x48}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d", 0x36}, {&(0x7f0000000580)="fb411a9c85", 0x5}], 0x6) write(r0, &(0x7f0000001e00)="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", 0x35b) 380.05062ms ago: executing program 3 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r3, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 246.720055ms ago: executing program 0 (id=814): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x264, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_ACT={0x134, 0x1, [@m_simple={0x130, 0x1, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x8d, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xf0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0xc0, 0x2, [@m_vlan={0xbc, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x8d, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf11"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 196.490064ms ago: executing program 0 (id=815): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'ip6gretap0\x00', 0x100}) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00001a6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r4, 0xc138fd0a, &(0x7f0000000300)) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 148.368983ms ago: executing program 4 (id=816): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x65b}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 126.606637ms ago: executing program 4 (id=817): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1f8, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x8d, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xf8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0xc8, 0x2, [@m_vlan={0xc4, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x95, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd00"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 94.467043ms ago: executing program 4 (id=818): syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x26, 0x2, [{0x6, 0xb, "5e000000ff000000f5"}, {0x0, 0x5, "0404a6"}, {0x0, 0x10, "960605390006fff5800000b61af9"}]}, @rr={0x7, 0x7, 0x57, [@private=0xa010100]}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 55.04927ms ago: executing program 4 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000009c000000030a01020000000000000000020000060900010073797a300000000079000300fd02b2"], 0xe4}}, 0x0) 0s ago: executing program 4 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x8, 0xb, 0xdc}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): t=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.673686][ T29] audit: type=1400 audit(1790974704.067:99): avc: denied { noatsecure } for pid=3169 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.674217][ T29] audit: type=1400 audit(1790974704.067:100): avc: denied { write } for pid=3169 comm="sh" path="pipe:[2522]" dev="pipefs" ino=2522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 22.674253][ T29] audit: type=1400 audit(1790974704.067:101): avc: denied { rlimitinh } for pid=3169 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.674314][ T29] audit: type=1400 audit(1790974704.067:102): avc: denied { siginh } for pid=3169 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.264650][ T29] audit: type=1400 audit(1790974706.657:103): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.264697][ T29] audit: type=1400 audit(1790974706.657:104): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.860009][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 26.860037][ T29] audit: type=1400 audit(1790974708.247:124): avc: denied { write } for pid=3263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.884053][ T29] audit: type=1400 audit(1790974708.267:125): avc: denied { write } for pid=3274 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 31.256837][ T29] audit: type=1400 audit(1790974712.647:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.257188][ T29] audit: type=1400 audit(1790974712.647:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.257826][ T3285] cgroup: Unknown subsys name 'net' [ 31.258095][ T29] audit: type=1400 audit(1790974712.647:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.400833][ T3285] cgroup: Unknown subsys name 'cpuset' [ 31.401580][ T3285] cgroup: Unknown subsys name 'rlimit' [ 31.509520][ T29] audit: type=1400 audit(1790974712.897:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.512962][ T29] audit: type=1400 audit(1790974712.907:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.513099][ T29] audit: type=1400 audit(1790974712.907:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.513275][ T29] audit: type=1400 audit(1790974712.907:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.535826][ T29] audit: type=1400 audit(1790974712.927:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.632722][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.681958][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.420072][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 32.420097][ T29] audit: type=1400 audit(1790974713.807:140): avc: denied { execmem } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.603517][ T29] audit: type=1400 audit(1790974713.997:141): avc: denied { read } for pid=3295 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.603556][ T29] audit: type=1400 audit(1790974713.997:142): avc: denied { open } for pid=3295 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.604390][ T29] audit: type=1400 audit(1790974713.997:143): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 32.608629][ T29] audit: type=1400 audit(1790974713.997:144): avc: denied { module_request } for pid=3295 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 32.730052][ T29] audit: type=1400 audit(1790974714.127:145): avc: denied { sys_module } for pid=3297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 33.160540][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.160576][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.160642][ T3295] bridge_slave_0: entered allmulticast mode [ 33.161279][ T3295] bridge_slave_0: entered promiscuous mode [ 33.200942][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.201055][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.201135][ T3295] bridge_slave_1: entered allmulticast mode [ 33.201727][ T3295] bridge_slave_1: entered promiscuous mode [ 33.294910][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.296383][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.352157][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.352195][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.352262][ T3297] bridge_slave_0: entered allmulticast mode [ 33.352698][ T3297] bridge_slave_0: entered promiscuous mode [ 33.374671][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.374807][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.375078][ T3301] bridge_slave_0: entered allmulticast mode [ 33.376247][ T3301] bridge_slave_0: entered promiscuous mode [ 33.378406][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.378554][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.378718][ T3301] bridge_slave_1: entered allmulticast mode [ 33.380192][ T3301] bridge_slave_1: entered promiscuous mode [ 33.429794][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.430572][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.430814][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.431077][ T3297] bridge_slave_1: entered allmulticast mode [ 33.433087][ T3297] bridge_slave_1: entered promiscuous mode [ 33.447510][ T3295] team0: Port device team_slave_0 added [ 33.470438][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.488441][ T3295] team0: Port device team_slave_1 added [ 33.489620][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.517619][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.533783][ T3301] team0: Port device team_slave_0 added [ 33.548939][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.548992][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.549022][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.549995][ T3297] team0: Port device team_slave_0 added [ 33.551872][ T3297] team0: Port device team_slave_1 added [ 33.572449][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.572492][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.572518][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.574260][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.574307][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.574392][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.607907][ T3301] team0: Port device team_slave_1 added [ 33.645061][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.645109][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.645193][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.694126][ T3297] hsr_slave_0: entered promiscuous mode [ 33.695104][ T3297] hsr_slave_1: entered promiscuous mode [ 33.704844][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.704951][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.705173][ T3302] bridge_slave_0: entered allmulticast mode [ 33.706641][ T3302] bridge_slave_0: entered promiscuous mode [ 33.708887][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.708928][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.709081][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.710591][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.710632][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.710751][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.717784][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.717882][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.718047][ T3303] bridge_slave_0: entered allmulticast mode [ 33.719271][ T3303] bridge_slave_0: entered promiscuous mode [ 33.736919][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.737025][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.737203][ T3302] bridge_slave_1: entered allmulticast mode [ 33.738495][ T3302] bridge_slave_1: entered promiscuous mode [ 33.751963][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.752077][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.752293][ T3303] bridge_slave_1: entered allmulticast mode [ 33.753605][ T3303] bridge_slave_1: entered promiscuous mode [ 33.819562][ T3295] hsr_slave_0: entered promiscuous mode [ 33.823093][ T3295] hsr_slave_1: entered promiscuous mode [ 33.823728][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 33.823769][ T3295] Cannot create hsr debugfs directory [ 33.868721][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.871932][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.892227][ T3301] hsr_slave_0: entered promiscuous mode [ 33.893489][ T3301] hsr_slave_1: entered promiscuous mode [ 33.894278][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 33.894326][ T3301] Cannot create hsr debugfs directory [ 33.896762][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.899090][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.018818][ T3303] team0: Port device team_slave_0 added [ 34.043707][ T3302] team0: Port device team_slave_0 added [ 34.046774][ T3303] team0: Port device team_slave_1 added [ 34.065912][ T3302] team0: Port device team_slave_1 added [ 34.119798][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.119818][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.119887][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.122116][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.122162][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.122265][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.179006][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.179059][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.179158][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.214566][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.214616][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.214669][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.309654][ T3303] hsr_slave_0: entered promiscuous mode [ 34.310967][ T3303] hsr_slave_1: entered promiscuous mode [ 34.311655][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 34.311756][ T3303] Cannot create hsr debugfs directory [ 34.343502][ T3302] hsr_slave_0: entered promiscuous mode [ 34.343983][ T3302] hsr_slave_1: entered promiscuous mode [ 34.344296][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.344308][ T3302] Cannot create hsr debugfs directory [ 34.423701][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.425566][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.426332][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.428442][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.460941][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.463228][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.474144][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.481017][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.518130][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.521065][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.522477][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.531881][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.551709][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.553526][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.554086][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.556047][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.604030][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.606231][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.614223][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.621185][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.635858][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.642691][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.657760][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.659659][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.680724][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.682874][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.683517][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.685803][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.718274][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.727348][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.739556][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.745012][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.773434][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.779006][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.783487][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.786965][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.792227][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.809808][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.819811][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.833266][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.836885][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.839040][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.864731][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.864764][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.881045][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.894136][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.894183][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.925307][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.941405][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.941439][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.960927][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.961040][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.987291][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.000511][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.018468][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.036071][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.036136][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.049250][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.049354][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.082992][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.092705][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.092897][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.124887][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.124930][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.147202][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.161601][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.196845][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.209811][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.209847][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.243093][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.243137][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.390938][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.438344][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.483005][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.536728][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.589913][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.614464][ T3295] veth0_vlan: entered promiscuous mode [ 35.627658][ T3295] veth1_vlan: entered promiscuous mode [ 35.675000][ T3295] veth0_macvtap: entered promiscuous mode [ 35.678106][ T3297] veth0_vlan: entered promiscuous mode [ 35.680347][ T3295] veth1_macvtap: entered promiscuous mode [ 35.703810][ T3297] veth1_vlan: entered promiscuous mode [ 35.706298][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.724740][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.760673][ T3431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.763952][ T3297] veth0_macvtap: entered promiscuous mode [ 35.767927][ T3297] veth1_macvtap: entered promiscuous mode [ 35.806233][ T29] audit: type=1400 audit(1790974717.197:146): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.IyAOt2/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.806325][ T29] audit: type=1400 audit(1790974717.197:147): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.806360][ T29] audit: type=1400 audit(1790974717.197:148): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.IyAOt2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.815296][ T29] audit: type=1400 audit(1790974717.207:149): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.877000][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.891051][ T3301] veth0_vlan: entered promiscuous mode [ 35.912590][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.936676][ T3302] veth0_vlan: entered promiscuous mode [ 35.938475][ T3301] veth1_vlan: entered promiscuous mode [ 35.957539][ T3302] veth1_vlan: entered promiscuous mode [ 35.961656][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.962685][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.962793][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.962930][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.985355][ T3295] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.050273][ T313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.050513][ T390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.050557][ T390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.054976][ T3301] veth0_macvtap: entered promiscuous mode [ 36.075522][ T3301] veth1_macvtap: entered promiscuous mode [ 36.110354][ T3302] veth0_macvtap: entered promiscuous mode [ 36.116017][ T3505] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 36.135998][ T3501] syzkaller0: entered promiscuous mode [ 36.136074][ T3501] syzkaller0: entered allmulticast mode [ 36.154084][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.157498][ T3302] veth1_macvtap: entered promiscuous mode [ 36.174525][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.190651][ T3303] veth0_vlan: entered promiscuous mode [ 36.215408][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.217160][ T3303] veth1_vlan: entered promiscuous mode [ 36.237153][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.240512][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.240596][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.240704][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.240776][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.341334][ T3511] syzkaller0: entered promiscuous mode [ 36.341353][ T3511] syzkaller0: entered allmulticast mode [ 36.369831][ T3303] veth0_macvtap: entered promiscuous mode [ 36.387342][ T3303] veth1_macvtap: entered promiscuous mode [ 36.416896][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.426749][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.448438][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.460430][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.460865][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.461009][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.531543][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.531738][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.532018][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.532091][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.532130][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.668757][ T3530] bond1 (unregistering): Released all slaves [ 36.790897][ T3537] syzkaller0: entered promiscuous mode [ 36.790925][ T3537] syzkaller0: entered allmulticast mode [ 36.867514][ T3538] capability: warning: `syz.2.10' uses 32-bit capabilities (legacy support in use) [ 36.891853][ T3538] loop2: detected capacity change from 0 to 512 [ 36.892152][ T3538] ======================================================= [ 36.892152][ T3538] WARNING: The mand mount option has been deprecated and [ 36.892152][ T3538] and is ignored by this kernel. Remove the mand [ 36.892152][ T3538] option from the mount to silence this warning. [ 36.892152][ T3538] ======================================================= [ 36.945236][ T3538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.945381][ T3538] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.278090][ T3548] loop1: detected capacity change from 0 to 512 [ 37.302184][ T3548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.302331][ T3548] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.553172][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 37.553191][ T29] audit: type=1400 audit(1790974718.947:202): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.191426][ T29] audit: type=1400 audit(1790974719.587:203): avc: denied { read write } for pid=3557 comm="syz.3.20" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.191461][ T29] audit: type=1400 audit(1790974719.587:204): avc: denied { open } for pid=3557 comm="syz.3.20" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.253078][ T3556] syzkaller0: entered promiscuous mode [ 38.253222][ T3556] syzkaller0: entered allmulticast mode [ 38.644061][ T3572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 38.653299][ T3572] loop4: detected capacity change from 0 to 512 [ 38.753445][ T3572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.753655][ T3572] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.795327][ T29] audit: type=1400 audit(1790974720.187:205): avc: denied { write } for pid=3567 comm="syz.4.22" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.540461][ T3577] Illegal XDP return value 4294967274 on prog (id 3) dev syz_tun, expect packet loss! [ 40.351119][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.381608][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.430392][ T29] audit: type=1400 audit(1790974721.817:206): avc: denied { create } for pid=3581 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.432458][ T29] audit: type=1400 audit(1790974721.827:207): avc: denied { ioctl } for pid=3581 comm="syz.4.27" path="socket:[4050]" dev="sockfs" ino=4050 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.432619][ T3582] ip6gretap0: entered promiscuous mode [ 40.437831][ T3585] ip6gretap0: entered promiscuous mode [ 40.445174][ T29] audit: type=1400 audit(1790974721.837:208): avc: denied { read } for pid=3581 comm="syz.4.27" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 40.445273][ T29] audit: type=1400 audit(1790974721.837:209): avc: denied { open } for pid=3581 comm="syz.4.27" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 40.594992][ T29] audit: type=1400 audit(1790974721.887:210): avc: denied { create } for pid=3581 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.595072][ T29] audit: type=1400 audit(1790974721.897:211): avc: denied { read write } for pid=3581 comm="syz.4.27" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 41.467257][ T3586] syz.4.27 (3586) used greatest stack depth: 11072 bytes left [ 42.606211][ T3600] FAULT_INJECTION: forcing a failure. [ 42.606211][ T3600] name failslab, interval 1, probability 0, space 0, times 1 [ 42.606330][ T3600] CPU: 1 UID: 0 PID: 3600 Comm: syz.4.29 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.606368][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.606465][ T3600] Call Trace: [ 42.606475][ T3600] [ 42.606487][ T3600] __dump_stack+0x1d/0x30 [ 42.606522][ T3600] dump_stack_lvl+0x95/0xd0 [ 42.606548][ T3600] dump_stack+0x15/0x1b [ 42.606580][ T3600] should_fail_ex+0x262/0x280 [ 42.606652][ T3600] ? unix_prepare_fpl+0x8a/0x3a0 [ 42.606690][ T3600] should_failslab+0x8c/0xb0 [ 42.606740][ T3600] __kmalloc_cache_noprof+0x7a/0x400 [ 42.606839][ T3600] ? skb_set_owner_w+0x19b/0x200 [ 42.606921][ T3600] ? unix_prepare_fpl+0x8a/0x3a0 [ 42.606974][ T3600] unix_prepare_fpl+0x8a/0x3a0 [ 42.607012][ T3600] unix_scm_to_skb+0x1a9/0x250 [ 42.607104][ T3600] unix_dgram_sendmsg+0x3a5/0x1030 [ 42.607152][ T3600] ? selinux_socket_sendmsg+0x2e2/0x410 [ 42.607211][ T3600] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 42.607251][ T3600] ____sys_sendmsg+0x532/0x580 [ 42.607322][ T3600] ___sys_sendmsg+0x195/0x1e0 [ 42.607376][ T3600] __sys_sendmmsg+0x185/0x320 [ 42.607425][ T3600] __x64_sys_sendmmsg+0x57/0x70 [ 42.607467][ T3600] x64_sys_call+0x1fb4/0x2550 [ 42.607538][ T3600] do_syscall_64+0x112/0x360 [ 42.607564][ T3600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.607602][ T3600] RIP: 0033:0x7eff4ed0e159 [ 42.607634][ T3600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.607687][ T3600] RSP: 002b:00007eff4d767028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 42.607724][ T3600] RAX: ffffffffffffffda RBX: 00007eff4ef95fa0 RCX: 00007eff4ed0e159 [ 42.607759][ T3600] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000004 [ 42.607788][ T3600] RBP: 00007eff4eda506b R08: 0000000000000000 R09: 0000000000000000 [ 42.607802][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.607818][ T3600] R13: 00007eff4ef96038 R14: 00007eff4ef95fa0 R15: 00007ffd0488f368 [ 42.607840][ T3600] [ 42.856271][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 42.856290][ T29] audit: type=1400 audit(1790974724.247:216): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 44.514231][ T29] audit: type=1400 audit(1790974725.907:217): avc: denied { create } for pid=3618 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.515423][ T3619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34'. [ 44.517488][ T3619] bond0: (slave bond_slave_0): Releasing backup interface [ 44.570036][ T3621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 44.594340][ T3619] bond_slave_0: entered promiscuous mode [ 44.594362][ T3619] bond_slave_0: entered allmulticast mode [ 44.878344][ T29] audit: type=1400 audit(1790974726.267:218): avc: denied { create } for pid=3613 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.878380][ T29] audit: type=1400 audit(1790974726.267:219): avc: denied { write } for pid=3613 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.252120][ T29] audit: type=1400 audit(1790974726.647:220): avc: denied { execute } for pid=3618 comm="syz.0.34" path="/4/file1" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.866361][ T29] audit: type=1400 audit(1790974728.257:221): avc: denied { open } for pid=3651 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.866402][ T29] audit: type=1400 audit(1790974728.257:222): avc: denied { kernel } for pid=3651 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.127326][ T29] audit: type=1400 audit(1790974728.517:223): avc: denied { write } for pid=3652 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.251255][ T29] audit: type=1400 audit(1790974728.647:224): avc: denied { write } for pid=3643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.348811][ T29] audit: type=1400 audit(1790974728.737:225): avc: denied { write } for pid=3667 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.492911][ T3653] syz.3.38 (3653) used obsolete PPPIOCDETACH ioctl [ 48.247403][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 48.247435][ T29] audit: type=1400 audit(1790974729.567:227): avc: denied { mounton } for pid=3672 comm="syz.1.40" path="/3/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 48.735750][ T29] audit: type=1400 audit(1790974730.127:228): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 48.774221][ T3684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.783498][ T3684] loop0: detected capacity change from 0 to 512 [ 48.872082][ T3684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.872246][ T3684] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.881330][ T29] audit: type=1400 audit(1790974730.277:229): avc: denied { write } for pid=3678 comm="syz.0.42" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.969764][ T29] audit: type=1400 audit(1790974730.357:230): avc: denied { ioctl } for pid=3689 comm="syz.1.44" path="socket:[5243]" dev="sockfs" ino=5243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.550050][ T3695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 49.672946][ T3695] loop1: detected capacity change from 0 to 512 [ 49.693081][ T3695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.693148][ T3695] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.699232][ T29] audit: type=1400 audit(1790974731.087:231): avc: denied { write } for pid=3692 comm="syz.1.45" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.082386][ T29] audit: type=1400 audit(1790974731.477:232): avc: denied { mount } for pid=3696 comm="syz.3.46" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.108808][ T29] audit: type=1400 audit(1790974731.477:233): avc: denied { search } for pid=3696 comm="syz.3.46" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.108883][ T29] audit: type=1400 audit(1790974731.477:234): avc: denied { read write } for pid=3696 comm="syz.3.46" name="set_event" dev="tracefs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.109001][ T29] audit: type=1400 audit(1790974731.477:235): avc: denied { open } for pid=3696 comm="syz.3.46" path="/13/trace/set_event" dev="tracefs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.507846][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.658617][ T3706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.48'. [ 50.818995][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.861472][ T3711] ip6gretap0: entered promiscuous mode [ 51.755860][ T29] audit: type=1400 audit(1790974733.147:236): avc: denied { create } for pid=3715 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.360849][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 53.360870][ T29] audit: type=1400 audit(1790974734.757:238): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.788446][ T3750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 54.292039][ T3756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 55.495683][ T29] audit: type=1400 audit(1790974736.887:239): avc: denied { write } for pid=3770 comm="syz.0.66" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.714019][ T3773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.723549][ T3773] loop4: detected capacity change from 0 to 512 [ 55.859176][ T3777] ip6gretap0: entered promiscuous mode [ 55.894488][ T3773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.894595][ T3773] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.904002][ T29] audit: type=1400 audit(1790974737.297:240): avc: denied { write } for pid=3760 comm="syz.4.64" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.607406][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.658175][ T3792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.664795][ T3792] loop3: detected capacity change from 0 to 512 [ 57.832830][ T3792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.833149][ T3792] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.837410][ T29] audit: type=1400 audit(1790974739.227:241): avc: denied { write } for pid=3788 comm="syz.3.70" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.211137][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.211726][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.249082][ T29] audit: type=1400 audit(1790974740.637:242): avc: denied { write } for pid=3795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.351527][ T29] audit: type=1400 audit(1790974740.737:243): avc: denied { write } for pid=3816 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.453875][ T3827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 59.529383][ T3836] syzkaller0: entered promiscuous mode [ 59.529405][ T3836] syzkaller0: entered allmulticast mode [ 59.588748][ T29] audit: type=1400 audit(1790974740.977:244): avc: denied { read write } for pid=3840 comm="syz.1.79" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 59.588794][ T29] audit: type=1400 audit(1790974740.977:245): avc: denied { open } for pid=3840 comm="syz.1.79" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 59.612442][ T29] audit: type=1400 audit(1790974740.997:246): avc: denied { create } for pid=3840 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.615602][ T29] audit: type=1400 audit(1790974741.007:247): avc: denied { bind } for pid=3840 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.621419][ T29] audit: type=1400 audit(1790974741.017:248): avc: denied { listen } for pid=3840 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.625867][ T29] audit: type=1400 audit(1790974741.017:249): avc: denied { connect } for pid=3840 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.629039][ T29] audit: type=1400 audit(1790974741.017:250): avc: denied { accept } for pid=3840 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.631538][ T29] audit: type=1400 audit(1790974741.027:251): avc: denied { write } for pid=3840 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.940699][ T3854] FAULT_INJECTION: forcing a failure. [ 60.940699][ T3854] name failslab, interval 1, probability 0, space 0, times 0 [ 60.940738][ T3854] CPU: 1 UID: 0 PID: 3854 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.940764][ T3854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.940778][ T3854] Call Trace: [ 60.940787][ T3854] [ 60.940857][ T3854] __dump_stack+0x1d/0x30 [ 60.940892][ T3854] dump_stack_lvl+0x95/0xd0 [ 60.940919][ T3854] dump_stack+0x15/0x1b [ 60.940947][ T3854] should_fail_ex+0x262/0x280 [ 60.941013][ T3854] ? __kernfs_new_node+0x70/0x440 [ 60.941135][ T3854] should_failslab+0x8c/0xb0 [ 60.941180][ T3854] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 60.941229][ T3854] ? __kernfs_new_node+0x70/0x440 [ 60.941260][ T3854] __kernfs_new_node+0x70/0x440 [ 60.941297][ T3854] ? rb_insert_color+0x6e/0x2a0 [ 60.941318][ T3854] ? __rcu_read_unlock+0x4e/0x70 [ 60.941349][ T3854] ? __rcu_read_unlock+0x4e/0x70 [ 60.941418][ T3854] ? kernfs_activate_one+0x10c/0x140 [ 60.941450][ T3854] ? __rcu_read_unlock+0x4e/0x70 [ 60.941484][ T3854] ? up_write+0x19/0x60 [ 60.941561][ T3854] kernfs_new_node+0xcf/0xf0 [ 60.941582][ T3854] __kernfs_create_file+0x4b/0x180 [ 60.941649][ T3854] ? __pfx_queue_attr_show+0x10/0x10 [ 60.941671][ T3854] ? __pfx_queue_attr_store+0x10/0x10 [ 60.941693][ T3854] sysfs_add_file_mode_ns+0x132/0x1b0 [ 60.941731][ T3854] ? __pfx_queue_attr_visible+0x10/0x10 [ 60.941823][ T3854] internal_create_group+0x43e/0x9e0 [ 60.941902][ T3854] ? kernfs_create_dir_ns+0x158/0x170 [ 60.941937][ T3854] sysfs_create_groups+0x3f/0xf0 [ 60.941978][ T3854] kobject_add_internal+0x49d/0x770 [ 60.942089][ T3854] kobject_add+0xdb/0x150 [ 60.942177][ T3854] ? kobject_add+0xdb/0x150 [ 60.942203][ T3854] ? blk_register_queue+0x37/0x2d0 [ 60.942233][ T3854] blk_register_queue+0x4f/0x2d0 [ 60.942254][ T3854] ? kobject_create_and_add+0xf3/0x160 [ 60.942339][ T3854] __add_disk+0x49a/0x7b0 [ 60.942415][ T3854] add_disk_fwnode+0xf0/0x220 [ 60.942441][ T3854] device_add_disk+0x27/0x40 [ 60.942465][ T3854] md_alloc+0x63b/0xa00 [ 60.942510][ T3854] md_alloc_and_put+0x18/0x170 [ 60.942595][ T3854] add_named_array+0x1cd/0x2a0 [ 60.942629][ T3854] param_attr_store+0x149/0x1d0 [ 60.942668][ T3854] ? __pfx_param_attr_store+0x10/0x10 [ 60.942727][ T3854] module_attr_store+0x4c/0x70 [ 60.942775][ T3854] ? __pfx_module_attr_store+0x10/0x10 [ 60.942815][ T3854] sysfs_kf_write+0xfe/0x120 [ 60.942858][ T3854] ? __pfx_sysfs_kf_write+0x10/0x10 [ 60.942906][ T3854] kernfs_fop_write_iter+0x1d2/0x2e0 [ 60.942943][ T3854] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 60.942974][ T3854] vfs_write+0x57f/0x9a0 [ 60.943019][ T3854] ksys_write+0xdc/0x1a0 [ 60.943064][ T3854] __x64_sys_write+0x40/0x50 [ 60.943168][ T3854] x64_sys_call+0x154e/0x2550 [ 60.943246][ T3854] do_syscall_64+0x112/0x360 [ 60.943270][ T3854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.943295][ T3854] RIP: 0033:0x7f3098dee159 [ 60.943320][ T3854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.943345][ T3854] RSP: 002b:00007f3097847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.943373][ T3854] RAX: ffffffffffffffda RBX: 00007f3099075fa0 RCX: 00007f3098dee159 [ 60.943392][ T3854] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000006 [ 60.943410][ T3854] RBP: 00007f3098e8506b R08: 0000000000000000 R09: 0000000000000000 [ 60.943485][ T3854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.943497][ T3854] R13: 00007f3099076038 R14: 00007f3099075fa0 R15: 00007ffcb404b668 [ 60.943566][ T3854] [ 60.956194][ T3854] kobject: kobject_add_internal failed for queue (error: -12 parent: md0) [ 61.895990][ T3854] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.896395][ T3860] workqueue: Failed to create a rescuer kthread for wq "kdmflush/252:1": -EINTR [ 63.048403][ T3886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.051784][ T3886] loop4: detected capacity change from 0 to 512 [ 63.111647][ T3886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.111791][ T3886] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.164820][ T3877] ip6gretap0: entered promiscuous mode [ 63.379621][ T3891] X25: received unknown 00 with LCI 000 [ 64.596941][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.715319][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 64.715338][ T29] audit: type=1400 audit(1790974746.107:256): avc: denied { ioctl } for pid=3901 comm="syz.0.94" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.815615][ T3908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.95'. [ 65.557110][ T29] audit: type=1400 audit(1790974746.917:257): avc: denied { setopt } for pid=3919 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.557142][ T29] audit: type=1400 audit(1790974746.947:258): avc: denied { write } for pid=3919 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.557262][ T29] audit: type=1400 audit(1790974746.947:259): avc: denied { read } for pid=3919 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.711026][ T3925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 66.944477][ T3953] netlink: 'syz.3.108': attribute type 12 has an invalid length. [ 66.949346][ T3946] ip_tables: iptables: counters copy to user failed while replacing table [ 66.949425][ T29] audit: type=1400 audit(1790974748.337:260): avc: denied { setopt } for pid=3944 comm="syz.0.106" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.233195][ T3959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.240669][ T3959] loop3: detected capacity change from 0 to 512 [ 67.284021][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.284180][ T3959] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.288472][ T29] audit: type=1400 audit(1790974748.677:261): avc: denied { write } for pid=3955 comm="syz.3.109" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.296590][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.309523][ T3985] syzkaller0: entered promiscuous mode [ 69.309571][ T3985] syzkaller0: entered allmulticast mode [ 69.331798][ T3994] netlink: 'syz.2.119': attribute type 12 has an invalid length. [ 69.375528][ T29] audit: type=1400 audit(1790974750.767:262): avc: denied { write } for pid=3997 comm="syz.3.120" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.485867][ T4006] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 70.713288][ T3996] syz.0.115 (3996) used greatest stack depth: 10992 bytes left [ 70.868497][ T4028] netlink: 'syz.0.131': attribute type 12 has an invalid length. [ 71.667594][ T4033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.675776][ T4033] loop1: detected capacity change from 0 to 512 [ 71.711954][ T4033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.712377][ T4033] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.717993][ T29] audit: type=1400 audit(1790974753.107:263): avc: denied { write } for pid=4029 comm="syz.1.132" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.875951][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 72.606029][ T4051] syzkaller0: entered promiscuous mode [ 72.606053][ T4051] syzkaller0: entered allmulticast mode [ 73.617238][ T4063] loop3: detected capacity change from 0 to 512 [ 73.646281][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.656633][ T29] audit: type=1400 audit(1790974755.047:264): avc: denied { mount } for pid=4062 comm="syz.3.141" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 73.773434][ T4070] bond1: entered allmulticast mode [ 73.773663][ T4070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.833175][ T4063] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.835670][ T4063] macvlan2: entered allmulticast mode [ 73.835687][ T4063] bond0: entered allmulticast mode [ 73.835705][ T4063] bond_slave_0: entered allmulticast mode [ 73.835725][ T4063] bond_slave_1: entered allmulticast mode [ 73.835829][ T4063] bond_slave_0: entered promiscuous mode [ 73.835854][ T4063] bond_slave_1: entered promiscuous mode [ 73.836374][ T4063] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 73.953776][ T4073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.961930][ T4073] loop0: detected capacity change from 0 to 512 [ 74.069653][ T4063] netlink: 14 bytes leftover after parsing attributes in process `syz.3.141'. [ 74.084577][ T4073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.084840][ T4073] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.107127][ T29] audit: type=1400 audit(1790974755.497:265): avc: denied { write } for pid=4064 comm="syz.0.144" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.144982][ T4063] bond_slave_0: left promiscuous mode [ 74.145043][ T4063] bond_slave_1: left promiscuous mode [ 74.181315][ T4063] bond0 (unregistering): left allmulticast mode [ 74.181338][ T4063] bond_slave_0: left allmulticast mode [ 74.181789][ T4063] bond_slave_1: left allmulticast mode [ 74.218752][ T4063] bond1: (slave macvlan2): Removing an active aggregator [ 74.227345][ T29] audit: type=1400 audit(1790974755.607:266): avc: denied { bpf } for pid=4068 comm="syz.1.145" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.253444][ T4063] bond1: (slave macvlan2): Releasing backup interface [ 74.280640][ T4063] macvlan2 (unregistering): left allmulticast mode [ 74.318545][ T4063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.343044][ T4063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.347443][ T4063] bond0 (unregistering): Released all slaves [ 74.669499][ T4080] netlink: 'syz.4.143': attribute type 12 has an invalid length. [ 74.699395][ T29] audit: type=1400 audit(1790974756.087:267): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 74.788983][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 74.804760][ T4088] bond1: entered promiscuous mode [ 75.838551][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.925307][ T4111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 76.016766][ T4116] netlink: 'syz.1.159': attribute type 12 has an invalid length. [ 77.092284][ T4140] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 77.092682][ T4140] Zero length message leads to an empty skb [ 77.333565][ T4145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 78.156845][ T4162] netlink: 'syz.1.173': attribute type 12 has an invalid length. [ 78.203237][ T29] audit: type=1400 audit(1790974759.597:268): avc: denied { block_suspend } for pid=4167 comm="syz.1.176" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.564789][ T4183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.575004][ T4183] loop0: detected capacity change from 0 to 512 [ 78.634081][ T4183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.634605][ T4183] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.743582][ T29] audit: type=1400 audit(1790974760.137:269): avc: denied { write } for pid=4164 comm="syz.0.174" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.210860][ T4193] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 79.485923][ T4199] netlink: 'syz.2.186': attribute type 12 has an invalid length. [ 80.244087][ T4203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.248078][ T4203] loop3: detected capacity change from 0 to 512 [ 80.318030][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.318269][ T4203] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.341558][ T29] audit: type=1400 audit(1790974761.737:270): avc: denied { write } for pid=4194 comm="syz.3.185" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.423394][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.608358][ T4210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 81.539118][ T4212] workqueue: Failed to create a rescuer kthread for wq "kdmflush/252:1": -EINTR [ 81.670274][ T29] audit: type=1400 audit(1790974763.047:271): avc: denied { perfmon } for pid=4217 comm="syz.1.191" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.499608][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.245258][ T4243] ip_tables: iptables: counters copy to user failed while replacing table [ 83.973004][ T4254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'. [ 84.033894][ T4264] FAULT_INJECTION: forcing a failure. [ 84.033894][ T4264] name fail_futex, interval 1, probability 0, space 0, times 1 [ 84.034218][ T4264] CPU: 1 UID: 0 PID: 4264 Comm: syz.4.205 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.034312][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 84.034325][ T4264] Call Trace: [ 84.034333][ T4264] [ 84.034340][ T4264] __dump_stack+0x1d/0x30 [ 84.034378][ T4264] dump_stack_lvl+0x95/0xd0 [ 84.034479][ T4264] dump_stack+0x15/0x1b [ 84.034500][ T4264] should_fail_ex+0x262/0x280 [ 84.034606][ T4264] should_fail+0xb/0x20 [ 84.034629][ T4264] get_futex_key+0x12d/0xb10 [ 84.034657][ T4264] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 84.034754][ T4264] futex_wait_setup+0x49/0x3e0 [ 84.034776][ T4264] ? __schedule+0x79e/0xd20 [ 84.034829][ T4264] __futex_wait+0xa9/0x260 [ 84.034850][ T4264] ? __pfx_futex_wake_mark+0x10/0x10 [ 84.034879][ T4264] futex_wait+0x98/0x1c0 [ 84.034920][ T4264] do_futex+0x391/0x460 [ 84.034958][ T4264] __se_sys_futex+0x2f6/0x370 [ 84.034991][ T4264] __x64_sys_futex+0x78/0x90 [ 84.035041][ T4264] x64_sys_call+0x22e2/0x2550 [ 84.035067][ T4264] do_syscall_64+0x112/0x360 [ 84.035094][ T4264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.035192][ T4264] RIP: 0033:0x7eff4ed0e159 [ 84.035266][ T4264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.035350][ T4264] RSP: 002b:00007eff4d7670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 84.035376][ T4264] RAX: ffffffffffffffda RBX: 00007eff4ef95fa8 RCX: 00007eff4ed0e159 [ 84.035396][ T4264] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff4ef95fa8 [ 84.035414][ T4264] RBP: 00007eff4ef95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 84.035432][ T4264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.035467][ T4264] R13: 00007eff4ef96038 R14: 00007ffd0488f280 R15: 00007ffd0488f368 [ 84.035487][ T4264] [ 84.098293][ T4266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.107159][ T4266] loop1: detected capacity change from 0 to 512 [ 84.265144][ T4266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.265339][ T4266] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.449531][ T29] audit: type=1400 audit(1790974765.427:272): avc: denied { mount } for pid=4263 comm="syz.4.205" name="/" dev="ramfs" ino=7217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.449617][ T29] audit: type=1400 audit(1790974765.667:273): avc: denied { write } for pid=4245 comm="syz.1.198" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.902006][ T4278] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 86.565131][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.270237][ T29] audit: type=1400 audit(1790974769.657:274): avc: denied { write } for pid=4318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.334810][ T29] audit: type=1400 audit(1790974769.727:275): avc: denied { write } for pid=4347 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.523126][ T4358] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 88.625289][ T4372] FAULT_INJECTION: forcing a failure. [ 88.625289][ T4372] name fail_futex, interval 1, probability 0, space 0, times 0 [ 88.625350][ T4372] CPU: 0 UID: 0 PID: 4372 Comm: syz.2.233 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.625377][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.625391][ T4372] Call Trace: [ 88.625398][ T4372] [ 88.625409][ T4372] __dump_stack+0x1d/0x30 [ 88.625449][ T4372] dump_stack_lvl+0x95/0xd0 [ 88.625483][ T4372] dump_stack+0x15/0x1b [ 88.625622][ T4372] should_fail_ex+0x262/0x280 [ 88.625668][ T4372] should_fail+0xb/0x20 [ 88.625704][ T4372] get_futex_key+0x12d/0xb10 [ 88.625822][ T4372] futex_wait_setup+0x49/0x3e0 [ 88.625850][ T4372] ? __rcu_read_unlock+0x4e/0x70 [ 88.625901][ T4372] __futex_wait+0xa9/0x260 [ 88.625932][ T4372] ? __pfx_futex_wake_mark+0x10/0x10 [ 88.625976][ T4372] futex_wait+0x98/0x1c0 [ 88.626003][ T4372] do_futex+0x391/0x460 [ 88.626126][ T4372] __se_sys_futex+0x2f6/0x370 [ 88.626173][ T4372] __x64_sys_futex+0x78/0x90 [ 88.626208][ T4372] x64_sys_call+0x22e2/0x2550 [ 88.626286][ T4372] do_syscall_64+0x112/0x360 [ 88.626327][ T4372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.626357][ T4372] RIP: 0033:0x7f60b684e159 [ 88.626377][ T4372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.626406][ T4372] RSP: 002b:00007f60b52a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.626469][ T4372] RAX: ffffffffffffffda RBX: 00007f60b6ad5fa8 RCX: 00007f60b684e159 [ 88.626538][ T4372] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f60b6ad5fa8 [ 88.626559][ T4372] RBP: 00007f60b6ad5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 88.626577][ T4372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.626607][ T4372] R13: 00007f60b6ad6038 R14: 00007ffc4eebe9c0 R15: 00007ffc4eebeaa8 [ 88.626637][ T4372] [ 88.667561][ T29] audit: type=1400 audit(1790974770.057:276): avc: denied { write } for pid=4351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.724041][ T4364] syzkaller0: entered promiscuous mode [ 88.724103][ T4364] syzkaller0: entered allmulticast mode [ 88.917482][ T29] audit: type=1400 audit(1790974770.307:277): avc: denied { write } for pid=4380 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.024625][ T4388] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.238259][ T4428] loop3: detected capacity change from 0 to 512 [ 91.269776][ T4428] bond1: option mode: unable to set because the bond device is up [ 91.777470][ T4436] netlink: 52 bytes leftover after parsing attributes in process `syz.3.251'. [ 91.793454][ T4436] netlink: 14 bytes leftover after parsing attributes in process `syz.3.251'. [ 92.173314][ T4443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.255'. [ 92.306353][ T4445] syzkaller0: entered promiscuous mode [ 92.306373][ T4445] syzkaller0: entered allmulticast mode [ 92.319411][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 92.395051][ T4453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.258'. [ 93.038348][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 93.105943][ T4479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.269'. [ 93.552748][ T29] audit: type=1400 audit(1790974774.887:278): avc: denied { getopt } for pid=4484 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.804994][ T4509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.280'. [ 94.815686][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 95.170293][ T4523] syzkaller0: entered promiscuous mode [ 95.170315][ T4523] syzkaller0: entered allmulticast mode [ 95.949180][ T4539] syzkaller0: entered promiscuous mode [ 95.949206][ T4539] syzkaller0: entered allmulticast mode [ 96.020146][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.292'. [ 96.424693][ T4559] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.433150][ T4559] loop4: detected capacity change from 0 to 512 [ 96.498063][ T4556] syzkaller0: entered promiscuous mode [ 96.498084][ T4556] syzkaller0: entered allmulticast mode [ 96.565522][ T4559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.565738][ T4559] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.575992][ T29] audit: type=1400 audit(1790974777.967:279): avc: denied { write } for pid=4552 comm="syz.4.295" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.715707][ T4580] __nla_validate_parse: 1 callbacks suppressed [ 97.715723][ T4580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 98.812346][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.388553][ T4610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.314'. [ 101.610042][ T4619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.613657][ T4619] loop3: detected capacity change from 0 to 512 [ 101.752142][ T4619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.752285][ T4619] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.756473][ T29] audit: type=1400 audit(1790974783.147:280): avc: denied { write } for pid=4618 comm="syz.3.317" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.973647][ T4655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.977104][ T4655] loop0: detected capacity change from 0 to 512 [ 103.464171][ T29] audit: type=1400 audit(1790974784.377:281): avc: denied { ioctl } for pid=4644 comm="syz.4.334" path="socket:[8011]" dev="sockfs" ino=8011 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.020295][ T4655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.020365][ T4655] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.067849][ T29] audit: type=1400 audit(1790974786.457:282): avc: denied { write } for pid=4650 comm="syz.0.325" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.156810][ T4666] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 105.262445][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.402123][ T4672] loop2: detected capacity change from 0 to 512 [ 105.443273][ T4672] bond1: entered allmulticast mode [ 105.443476][ T4672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.829505][ T4679] netlink: 52 bytes leftover after parsing attributes in process `syz.2.331'. [ 105.841117][ T4679] netlink: 14 bytes leftover after parsing attributes in process `syz.2.331'. [ 105.871549][ T4672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.891704][ T4672] macvlan2: entered allmulticast mode [ 105.891729][ T4672] bond0: entered allmulticast mode [ 105.892028][ T4672] bond_slave_0: entered allmulticast mode [ 105.892087][ T4672] bond_slave_1: entered allmulticast mode [ 105.892127][ T4672] bond_slave_0: entered promiscuous mode [ 105.892145][ T4672] bond_slave_1: entered promiscuous mode [ 105.899788][ T4672] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 105.949217][ T4679] bond_slave_0: left promiscuous mode [ 105.949333][ T4679] bond_slave_1: left promiscuous mode [ 105.990891][ T4679] bond0 (unregistering): left allmulticast mode [ 105.991053][ T4679] bond_slave_0: left allmulticast mode [ 105.992387][ T4679] bond_slave_1: left allmulticast mode [ 106.029877][ T4679] bond1: (slave macvlan2): Removing an active aggregator [ 106.031999][ T4679] bond1: (slave macvlan2): Releasing backup interface [ 106.058228][ T4679] macvlan2 (unregistering): left allmulticast mode [ 106.087445][ T4679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.106683][ T4679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.121746][ T4679] bond0 (unregistering): Released all slaves [ 106.217351][ T4679] syz.2.331 (4679) used greatest stack depth: 10944 bytes left [ 106.902293][ T4710] syzkaller0: entered promiscuous mode [ 106.902388][ T4710] syzkaller0: entered allmulticast mode [ 107.185050][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.313893][ T4723] loop2: detected capacity change from 0 to 512 [ 107.391895][ T4723] bond1: option mode: unable to set because the bond device is up [ 107.469365][ T4726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.349'. [ 107.485419][ T4726] netlink: 14 bytes leftover after parsing attributes in process `syz.2.349'. [ 109.500239][ T4777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.503958][ T4777] loop1: detected capacity change from 0 to 512 [ 109.685212][ T4777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.685438][ T4777] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.751548][ T29] audit: type=1400 audit(1790974791.147:283): avc: denied { write } for pid=4774 comm="syz.1.364" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.740927][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.687655][ T4835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'. [ 114.688802][ T4858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.692151][ T4858] loop2: detected capacity change from 0 to 512 [ 114.920851][ T4858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.921125][ T4858] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.929354][ T29] audit: type=1400 audit(1790974796.317:284): avc: denied { write } for pid=4848 comm="syz.2.381" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.321301][ T4882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.324572][ T4882] loop0: detected capacity change from 0 to 512 [ 116.911891][ T29] audit: type=1400 audit(1790974797.857:285): avc: denied { create } for pid=4874 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.911930][ T29] audit: type=1400 audit(1790974797.937:286): avc: denied { connect } for pid=4874 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.911959][ T29] audit: type=1400 audit(1790974797.967:287): avc: denied { bind } for pid=4874 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.912063][ T29] audit: type=1400 audit(1790974797.967:288): avc: denied { write } for pid=4874 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.166110][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.174176][ T4882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.174258][ T4882] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.186743][ T29] audit: type=1400 audit(1790974798.577:289): avc: denied { write } for pid=4876 comm="syz.0.394" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.461680][ T4908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.464978][ T4908] loop2: detected capacity change from 0 to 512 [ 118.501971][ T4908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.502060][ T4908] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.535648][ T29] audit: type=1400 audit(1790974799.897:290): avc: denied { write } for pid=4904 comm="syz.2.400" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.668920][ T4913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'. [ 119.239277][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.383163][ T29] audit: type=1400 audit(1790974800.777:291): avc: denied { create } for pid=4922 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.384009][ T29] audit: type=1400 audit(1790974800.777:292): avc: denied { setopt } for pid=4922 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.464629][ T4920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.473675][ T4920] loop4: detected capacity change from 0 to 512 [ 119.671526][ T4920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.671730][ T4920] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.680597][ T29] audit: type=1400 audit(1790974801.067:293): avc: denied { write } for pid=4919 comm="syz.4.403" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.247848][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.099176][ T4943] syzkaller0: entered promiscuous mode [ 122.099220][ T4943] syzkaller0: entered allmulticast mode [ 123.723352][ T4981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.770689][ T4981] loop0: detected capacity change from 0 to 512 [ 123.804347][ T4981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.804565][ T4981] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.837221][ T29] audit: type=1400 audit(1790974805.227:294): avc: denied { write } for pid=4966 comm="syz.0.414" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.783907][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.798020][ T5000] loop3: detected capacity change from 0 to 512 [ 125.811876][ T5000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.811975][ T5000] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.814476][ T29] audit: type=1400 audit(1790974807.207:295): avc: denied { write } for pid=4998 comm="syz.3.418" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.063581][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 126.141752][ T5012] syzkaller0: entered promiscuous mode [ 126.141777][ T5012] syzkaller0: entered allmulticast mode [ 126.468399][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.096644][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.959195][ T5122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.982031][ T5121] loop2: detected capacity change from 0 to 512 [ 133.052346][ T5121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.052420][ T5121] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.055483][ T29] audit: type=1400 audit(1790974814.447:296): avc: denied { write } for pid=5118 comm="syz.2.458" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.651118][ T5150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.466'. [ 137.130608][ T5177] loop3: detected capacity change from 0 to 512 [ 137.246262][ T5177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.246339][ T5177] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.250501][ T29] audit: type=1400 audit(1790974818.637:297): avc: denied { write } for pid=5173 comm="syz.3.473" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.225861][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.545935][ T5202] loop4: detected capacity change from 0 to 512 [ 140.621785][ T5202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.622083][ T5202] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.676009][ T29] audit: type=1400 audit(1790974822.067:298): avc: denied { write } for pid=5194 comm="syz.4.478" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.431076][ T5214] syzkaller0: entered promiscuous mode [ 141.431096][ T5214] syzkaller0: entered allmulticast mode [ 142.266139][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.505258][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.675953][ T5230] loop3: detected capacity change from 0 to 512 [ 142.835878][ T5230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.836071][ T5230] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.868560][ T29] audit: type=1400 audit(1790974824.257:299): avc: denied { write } for pid=5224 comm="syz.3.486" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.893027][ T5244] syzkaller0: entered promiscuous mode [ 143.893055][ T5244] syzkaller0: entered allmulticast mode [ 144.429865][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.457537][ T5257] syzkaller0: entered promiscuous mode [ 144.457558][ T5257] syzkaller0: entered allmulticast mode [ 144.729975][ T5264] loop3: detected capacity change from 0 to 512 [ 144.758216][ T5264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.758329][ T5264] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.783340][ T29] audit: type=1400 audit(1790974826.147:300): avc: denied { write } for pid=5258 comm="syz.3.494" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.979981][ T29] audit: type=1400 audit(1790974828.367:301): avc: denied { setopt } for pid=5291 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.175890][ T5301] syzkaller0: entered promiscuous mode [ 147.175914][ T5301] syzkaller0: entered allmulticast mode [ 147.301933][ T5306] loop4: detected capacity change from 0 to 512 [ 147.314551][ T5306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.314710][ T5306] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.390056][ T29] audit: type=1400 audit(1790974828.717:302): avc: denied { write } for pid=5294 comm="syz.4.506" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.252843][ T5315] syzkaller0: entered promiscuous mode [ 148.252864][ T5315] syzkaller0: entered allmulticast mode [ 148.491016][ T5325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.518'. [ 148.532859][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 148.904852][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.037750][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.610536][ T5358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.529'. [ 149.680671][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 150.033270][ T5373] loop3: detected capacity change from 0 to 512 [ 150.069470][ T5373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.069568][ T5373] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.098831][ T29] audit: type=1400 audit(1790974831.487:303): avc: denied { write } for pid=5367 comm="syz.3.532" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.974045][ T5399] FAULT_INJECTION: forcing a failure. [ 151.974045][ T5399] name fail_futex, interval 1, probability 0, space 0, times 0 [ 151.974107][ T5399] CPU: 0 UID: 0 PID: 5399 Comm: syz.0.540 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.974194][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.974224][ T5399] Call Trace: [ 151.974234][ T5399] [ 151.974246][ T5399] __dump_stack+0x1d/0x30 [ 151.974285][ T5399] dump_stack_lvl+0x95/0xd0 [ 151.974319][ T5399] dump_stack+0x15/0x1b [ 151.974377][ T5399] should_fail_ex+0x262/0x280 [ 151.974417][ T5399] should_fail+0xb/0x20 [ 151.974524][ T5399] get_futex_key+0x12d/0xb10 [ 151.974607][ T5399] futex_wake+0x89/0x400 [ 151.974636][ T5399] ? fput+0x91/0xc0 [ 151.974673][ T5399] do_futex+0x3f8/0x460 [ 151.974742][ T5399] __se_sys_futex+0x2f6/0x370 [ 151.974845][ T5399] __x64_sys_futex+0x78/0x90 [ 151.974894][ T5399] x64_sys_call+0x22e2/0x2550 [ 151.974967][ T5399] do_syscall_64+0x112/0x360 [ 151.975002][ T5399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.975042][ T5399] RIP: 0033:0x7f3098dee159 [ 151.975066][ T5399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.975124][ T5399] RSP: 002b:00007f30978470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.975150][ T5399] RAX: ffffffffffffffda RBX: 00007f3099075fa8 RCX: 00007f3098dee159 [ 151.975166][ T5399] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3099075fac [ 151.975188][ T5399] RBP: 00007f3099075fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 151.975254][ T5399] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 151.975273][ T5399] R13: 00007f3099076038 R14: 00007ffcb404b580 R15: 00007ffcb404b668 [ 151.975303][ T5399] [ 152.206750][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 152.265995][ T5403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'. [ 152.418998][ T5407] syzkaller0: entered promiscuous mode [ 152.419025][ T5407] syzkaller0: entered allmulticast mode [ 152.649085][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 153.555292][ T5442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.556'. [ 153.617827][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 153.698281][ T5447] syzkaller0: entered promiscuous mode [ 153.698302][ T5447] syzkaller0: entered allmulticast mode [ 153.840264][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 154.442147][ T5470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.567'. [ 154.496871][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 154.640013][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 154.738817][ T5478] syzkaller0: entered promiscuous mode [ 154.738843][ T5478] syzkaller0: entered allmulticast mode [ 154.976158][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.062537][ T5496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.578'. [ 155.096579][ T5498] FAULT_INJECTION: forcing a failure. [ 155.096579][ T5498] name fail_futex, interval 1, probability 0, space 0, times 0 [ 155.096610][ T5498] CPU: 0 UID: 0 PID: 5498 Comm: syz.0.579 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.096652][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.096695][ T5498] Call Trace: [ 155.096704][ T5498] [ 155.096714][ T5498] __dump_stack+0x1d/0x30 [ 155.096742][ T5498] dump_stack_lvl+0x95/0xd0 [ 155.096834][ T5498] dump_stack+0x15/0x1b [ 155.096863][ T5498] should_fail_ex+0x262/0x280 [ 155.096902][ T5498] should_fail+0xb/0x20 [ 155.096969][ T5498] get_futex_key+0x12d/0xb10 [ 155.097009][ T5498] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 155.097054][ T5498] ? ____sys_sendmsg+0x498/0x580 [ 155.097086][ T5498] futex_wait_setup+0x49/0x3e0 [ 155.097148][ T5498] ? ___sys_sendmsg+0x1ab/0x1e0 [ 155.097183][ T5498] __futex_wait+0xa9/0x260 [ 155.097209][ T5498] ? __pfx_futex_wake_mark+0x10/0x10 [ 155.097240][ T5498] futex_wait+0x98/0x1c0 [ 155.097309][ T5498] do_futex+0x391/0x460 [ 155.097431][ T5498] __se_sys_futex+0x2f6/0x370 [ 155.097472][ T5498] __x64_sys_futex+0x78/0x90 [ 155.097504][ T5498] x64_sys_call+0x22e2/0x2550 [ 155.097536][ T5498] do_syscall_64+0x112/0x360 [ 155.097606][ T5498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.097651][ T5498] RIP: 0033:0x7f3098dee159 [ 155.097667][ T5498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.097701][ T5498] RSP: 002b:00007f30978470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.097792][ T5498] RAX: ffffffffffffffda RBX: 00007f3099075fa8 RCX: 00007f3098dee159 [ 155.097811][ T5498] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3099075fa8 [ 155.097829][ T5498] RBP: 00007f3099075fa0 R08: 0000000000000000 R09: 0000000000000000 [ 155.097847][ T5498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.097865][ T5498] R13: 00007f3099076038 R14: 00007ffcb404b580 R15: 00007ffcb404b668 [ 155.097913][ T5498] [ 155.314302][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 155.740124][ T5513] syzkaller0: entered promiscuous mode [ 155.740155][ T5513] syzkaller0: entered allmulticast mode [ 156.332853][ T5525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.589'. [ 156.387462][ T5528] FAULT_INJECTION: forcing a failure. [ 156.387462][ T5528] name fail_futex, interval 1, probability 0, space 0, times 0 [ 156.387557][ T5528] CPU: 0 UID: 0 PID: 5528 Comm: syz.4.590 Not tainted syzkaller #0 PREEMPT(lazy) [ 156.387608][ T5528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.387626][ T5528] Call Trace: [ 156.387633][ T5528] [ 156.387640][ T5528] __dump_stack+0x1d/0x30 [ 156.387715][ T5528] dump_stack_lvl+0x95/0xd0 [ 156.387746][ T5528] dump_stack+0x15/0x1b [ 156.387770][ T5528] should_fail_ex+0x262/0x280 [ 156.387797][ T5528] should_fail+0xb/0x20 [ 156.387856][ T5528] get_futex_key+0x12d/0xb10 [ 156.387932][ T5528] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 156.388015][ T5528] ? ____sys_sendmsg+0x498/0x580 [ 156.388071][ T5528] futex_wait_setup+0x49/0x3e0 [ 156.388101][ T5528] ? ___sys_sendmsg+0x1ab/0x1e0 [ 156.388136][ T5528] __futex_wait+0xa9/0x260 [ 156.388165][ T5528] ? __pfx_futex_wake_mark+0x10/0x10 [ 156.388229][ T5528] futex_wait+0x98/0x1c0 [ 156.388260][ T5528] do_futex+0x391/0x460 [ 156.388303][ T5528] __se_sys_futex+0x2f6/0x370 [ 156.388341][ T5528] __x64_sys_futex+0x78/0x90 [ 156.388379][ T5528] x64_sys_call+0x22e2/0x2550 [ 156.388419][ T5528] do_syscall_64+0x112/0x360 [ 156.388492][ T5528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.388553][ T5528] RIP: 0033:0x7eff4ed0e159 [ 156.388574][ T5528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.388593][ T5528] RSP: 002b:00007eff4d7670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.388613][ T5528] RAX: ffffffffffffffda RBX: 00007eff4ef95fa8 RCX: 00007eff4ed0e159 [ 156.388627][ T5528] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff4ef95fa8 [ 156.388688][ T5528] RBP: 00007eff4ef95fa0 R08: 0000000000000000 R09: 0000000000000000 [ 156.388778][ T5528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.388791][ T5528] R13: 00007eff4ef96038 R14: 00007ffd0488f280 R15: 00007ffd0488f368 [ 156.388859][ T5528] [ 156.560829][ T5529] loop0: detected capacity change from 0 to 512 [ 156.612089][ T5529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.612156][ T5529] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.621028][ T29] audit: type=1400 audit(1790974838.007:304): avc: denied { write } for pid=5520 comm="syz.0.586" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.941590][ T5544] loop4: detected capacity change from 0 to 512 [ 157.035062][ T5544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.035332][ T5544] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.074458][ T29] audit: type=1400 audit(1790974838.467:305): avc: denied { write } for pid=5530 comm="syz.4.591" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.530258][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.554541][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 159.441449][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 159.776524][ T5579] syzkaller0: entered promiscuous mode [ 159.776629][ T5579] syzkaller0: entered allmulticast mode [ 160.697900][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.326972][ T5596] syzkaller0: entered promiscuous mode [ 161.326993][ T5596] syzkaller0: entered allmulticast mode [ 161.538464][ T29] audit: type=1400 audit(1790974842.927:306): avc: denied { map } for pid=5600 comm="syz.2.611" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.760317][ T5606] syzkaller0: entered promiscuous mode [ 161.760344][ T5606] syzkaller0: entered allmulticast mode [ 162.567298][ T5625] loop1: detected capacity change from 0 to 512 [ 162.610153][ T5625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.610239][ T5625] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.636192][ T29] audit: type=1400 audit(1790974844.027:307): avc: denied { write } for pid=5616 comm="syz.1.619" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.795008][ T5630] syzkaller0: entered promiscuous mode [ 162.795029][ T5630] syzkaller0: entered allmulticast mode [ 164.432064][ T5651] syzkaller0: entered promiscuous mode [ 164.432172][ T5651] syzkaller0: entered allmulticast mode [ 165.312248][ T5664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 165.492226][ T5672] syzkaller0: entered promiscuous mode [ 165.492252][ T5672] syzkaller0: entered allmulticast mode [ 166.954519][ T5688] FAULT_INJECTION: forcing a failure. [ 166.954519][ T5688] name fail_futex, interval 1, probability 0, space 0, times 0 [ 166.954582][ T5688] CPU: 0 UID: 0 PID: 5688 Comm: syz.2.637 Not tainted syzkaller #0 PREEMPT(lazy) [ 166.954694][ T5688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 166.954712][ T5688] Call Trace: [ 166.954722][ T5688] [ 166.954732][ T5688] __dump_stack+0x1d/0x30 [ 166.954814][ T5688] dump_stack_lvl+0x95/0xd0 [ 166.954846][ T5688] dump_stack+0x15/0x1b [ 166.954872][ T5688] should_fail_ex+0x262/0x280 [ 166.954900][ T5688] should_fail+0xb/0x20 [ 166.954922][ T5688] get_futex_key+0x12d/0xb10 [ 166.954958][ T5688] futex_wake+0x89/0x400 [ 166.955041][ T5688] ? fput+0x91/0xc0 [ 166.955067][ T5688] do_futex+0x3f8/0x460 [ 166.955100][ T5688] __se_sys_futex+0x2f6/0x370 [ 166.955154][ T5688] __x64_sys_futex+0x78/0x90 [ 166.955199][ T5688] x64_sys_call+0x22e2/0x2550 [ 166.955238][ T5688] do_syscall_64+0x112/0x360 [ 166.955305][ T5688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.955332][ T5688] RIP: 0033:0x7f60b684e159 [ 166.955351][ T5688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.955387][ T5688] RSP: 002b:00007f60b52a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.955420][ T5688] RAX: ffffffffffffffda RBX: 00007f60b6ad5fa8 RCX: 00007f60b684e159 [ 166.955439][ T5688] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f60b6ad5fac [ 166.955458][ T5688] RBP: 00007f60b6ad5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 166.955477][ T5688] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 166.955494][ T5688] R13: 00007f60b6ad6038 R14: 00007ffc4eebe9c0 R15: 00007ffc4eebeaa8 [ 166.955574][ T5688] [ 168.069049][ T5694] syzkaller0: entered promiscuous mode [ 168.069078][ T5694] syzkaller0: entered allmulticast mode [ 168.373312][ T5701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 168.794513][ T5708] syzkaller0: entered promiscuous mode [ 168.794677][ T5708] syzkaller0: entered allmulticast mode [ 170.047806][ T5737] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7.0.0), cmd(10) [ 170.454055][ T5743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 170.652276][ T5752] syzkaller0: entered promiscuous mode [ 170.652304][ T5752] syzkaller0: entered allmulticast mode [ 170.989260][ T5758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.657'. [ 171.358248][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.843915][ T5803] loop2: detected capacity change from 0 to 512 [ 173.885642][ T5803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.885821][ T5803] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.891983][ T29] audit: type=1400 audit(1790974855.287:308): avc: denied { write } for pid=5794 comm="syz.2.669" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.008429][ T5808] loop3: detected capacity change from 0 to 512 [ 174.024805][ T5808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.024889][ T5808] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.028272][ T29] audit: type=1400 audit(1790974855.417:309): avc: denied { write } for pid=5795 comm="syz.3.671" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.430869][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.443041][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.570557][ T5820] syzkaller0: entered promiscuous mode [ 176.570582][ T5820] syzkaller0: entered allmulticast mode [ 176.602631][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 177.391539][ T5847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.682'. [ 177.393808][ T5848] syzkaller0: entered promiscuous mode [ 177.393828][ T5848] syzkaller0: entered allmulticast mode [ 177.628628][ T5864] loop0: detected capacity change from 0 to 512 [ 179.567118][ T5864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.567387][ T5864] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.800776][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.698'. [ 179.912835][ T5875] workqueue: Failed to create a rescuer kthread for wq "kdmflush/252:1": -EINTR [ 179.978434][ T5898] syzkaller0: entered promiscuous mode [ 179.978457][ T5898] syzkaller0: entered allmulticast mode [ 180.229219][ T29] audit: type=1400 audit(1790974861.617:310): avc: denied { write } for pid=5844 comm="syz.0.683" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.311680][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.514731][ T5936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.714'. [ 182.809469][ T5940] loop1: detected capacity change from 0 to 512 [ 182.854202][ T5940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.854410][ T5940] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.859220][ T29] audit: type=1400 audit(1790974864.247:311): avc: denied { write } for pid=5937 comm="syz.1.715" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.476731][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.646646][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.725'. [ 185.389170][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 187.263569][ T6004] loop1: detected capacity change from 0 to 512 [ 187.348865][ T6004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.349015][ T6004] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.352932][ T29] audit: type=1400 audit(1790974868.747:312): avc: denied { write } for pid=5997 comm="syz.1.731" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.726783][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 187.741068][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'. [ 188.721788][ T6022] loop2: detected capacity change from 0 to 512 [ 188.737759][ T6022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.737842][ T6022] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.771060][ T29] audit: type=1400 audit(1790974870.167:313): avc: denied { write } for pid=6010 comm="syz.2.735" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.037558][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.039291][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 189.109437][ T6044] syzkaller0: entered promiscuous mode [ 189.109462][ T6044] syzkaller0: entered allmulticast mode [ 189.272450][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.748'. [ 191.391772][ T29] audit: type=1400 audit(1790974872.787:314): avc: denied { read write } for pid=6074 comm="syz.0.755" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 191.391806][ T29] audit: type=1400 audit(1790974872.787:315): avc: denied { open } for pid=6074 comm="syz.0.755" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 193.113131][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 193.738834][ T6090] loop1: detected capacity change from 0 to 512 [ 193.764348][ T6090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.764489][ T6090] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.906339][ T29] audit: type=1400 audit(1790974875.297:316): avc: denied { write } for pid=6086 comm="syz.1.759" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.719668][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.291716][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.442541][ T6127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.771'. [ 196.164890][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 196.719668][ T6161] loop1: detected capacity change from 0 to 512 [ 196.817032][ T6161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.817315][ T6161] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.826122][ T29] audit: type=1400 audit(1790974878.217:317): avc: denied { write } for pid=6155 comm="syz.1.780" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.257850][ T6167] syzkaller0: entered promiscuous mode [ 198.258537][ T6167] syzkaller0: entered allmulticast mode [ 198.527187][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.718585][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.787'. [ 202.778653][ T6224] loop4: detected capacity change from 0 to 512 [ 203.012020][ T6224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.012223][ T6224] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.017827][ T29] audit: type=1400 audit(1790974884.407:318): avc: denied { write } for pid=6219 comm="syz.4.798" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.338174][ T6232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.800'. [ 203.649007][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 203.662073][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 204.925882][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.484118][ T6261] syzkaller0: entered promiscuous mode [ 205.484144][ T6261] syzkaller0: entered allmulticast mode [ 206.414622][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.818'. [ 206.452073][ T6289] ================================================================== [ 206.452125][ T6289] BUG: KCSAN: data-race in do_notify_parent_cldstop / wait_consider_task [ 206.452178][ T6289] [ 206.452184][ T6289] write to 0xffff8881049cca94 of 4 bytes by task 6287 on cpu 0: [ 206.452202][ T6289] wait_consider_task+0x5db/0x15f0 [ 206.452233][ T6289] __do_wait+0x33c/0x500 [ 206.452259][ T6289] do_wait+0xb6/0x230 [ 206.452287][ T6289] kernel_wait4+0x19f/0x210 [ 206.452320][ T6289] __x64_sys_wait4+0x91/0x120 [ 206.452353][ T6289] x64_sys_call+0x108f/0x2550 [ 206.452382][ T6289] do_syscall_64+0x112/0x360 [ 206.452406][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.452429][ T6289] [ 206.452434][ T6289] read to 0xffff8881049cca94 of 4 bytes by task 6289 on cpu 1: [ 206.452449][ T6289] do_notify_parent_cldstop+0x1fa/0x2f0 [ 206.452485][ T6289] ptrace_stop+0x2fa/0x590 [ 206.452516][ T6289] ptrace_signal+0x52/0x240 [ 206.452535][ T6289] get_signal+0x799/0xf10 [ 206.452571][ T6289] arch_do_signal_or_restart+0x96/0x480 [ 206.452602][ T6289] exit_to_user_mode_loop+0x15d/0x8c0 [ 206.452639][ T6289] do_syscall_64+0x212/0x360 [ 206.452662][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.452686][ T6289] [ 206.452691][ T6289] value changed: 0x00000013 -> 0x00000000 [ 206.452703][ T6289] [ 206.452707][ T6289] Reported by Kernel Concurrency Sanitizer on: [ 206.452723][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.3.813 Not tainted syzkaller #0 PREEMPT(lazy) [ 206.452747][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 206.452759][ T6289] ==================================================================