last executing test programs: 1m14.346467296s ago: executing program 1 (id=576): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x200000000003, 0x1}, 0x10d561, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x6}, 0x108407, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m12.868032029s ago: executing program 1 (id=582): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64], 0x70}, 0x4080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) getpid() r2 = msgget$private(0x0, 0x480) msgsnd(r2, &(0x7f0000000480)=ANY=[], 0x401, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x1400) msgctl$IPC_RMID(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000f206000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000000200000000000009000000718a0c00fcffffffda0be0ffffffffff18180000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x1f, r4, 0xa, 0xf) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000080c000000140001002001000000000000000000000000000114000200fc0200000000000000000000000000ff080018004e244e246ffec4d916392a7a6e2891"], 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=r1, @ANYBLOB="00000000600000003c0012800b000180697036746e6c000700000000000000002001000000000000000000000000000114000200fc020000000000000800000000000000c23584"], 0x5c}, 0x1, 0x0, 0x0, 0x8024}, 0x801) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) unshare(0xc040480) syz_io_uring_setup(0x63f0, &(0x7f0000000000)={0x0, 0x87da, 0x2, 0x80002, 0x124}, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001e002102000000000000000007060000000000000000f380500028804c000a"], 0x6c}}, 0x4000090) 1m11.263546884s ago: executing program 1 (id=588): syz_open_dev$sg(&(0x7f0000000180), 0xffffffffffffffff, 0x40201) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x48040, 0x0, 0x0) unshare(0x8000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 1m9.395980026s ago: executing program 1 (id=589): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1m8.380583329s ago: executing program 1 (id=592): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) close(0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') poll(0x0, 0x0, 0xb) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) unshare(0x2a020480) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m4.610419354s ago: executing program 1 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdfc, 0x9}, 0xf0a0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x109}]}}, 0x0, 0x26, 0x0, 0x8}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32, @ANYBLOB="00000000000000001c001a801800048014000580"], 0x3c}}, 0x0) 49.643258239s ago: executing program 32 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdfc, 0x9}, 0xf0a0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x109}]}}, 0x0, 0x26, 0x0, 0x8}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32, @ANYBLOB="00000000000000001c001a801800048014000580"], 0x3c}}, 0x0) 2.21938303s ago: executing program 4 (id=1559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) 2.117288663s ago: executing program 4 (id=1562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xa8}}, 0x0) 2.092745004s ago: executing program 4 (id=1564): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x20000080) 1.954993707s ago: executing program 4 (id=1567): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x2c020400) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0) 1.689548712s ago: executing program 0 (id=1577): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) 1.382862419s ago: executing program 0 (id=1583): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) socket$inet6(0xa, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r2], 0x7c}}, 0x0) 1.381466129s ago: executing program 2 (id=1584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000008400)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000008340)="d2df03c4ff08000000d9cb4608008cdd8af469377b17410febf46d5c9ae4cf1e9e86", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.319000371s ago: executing program 0 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400000000000000007fff0000", @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 1.235375923s ago: executing program 2 (id=1588): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400000000000000007fff0000", @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.155988384s ago: executing program 2 (id=1591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x205, 0x100, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 1.133615555s ago: executing program 3 (id=1592): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000480)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x4040001}, 0x1) write$ppp(r1, &(0x7f0000000700)="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", 0x1000) 1.102791175s ago: executing program 0 (id=1593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff2, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc7, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088e4}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000680)='l', 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.102615806s ago: executing program 5 (id=1594): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) 1.101660486s ago: executing program 2 (id=1595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x10}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.022545708s ago: executing program 4 (id=1596): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socket$inet6(0xa, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r2], 0x7c}}, 0x0) 1.022383577s ago: executing program 3 (id=1597): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0xf8}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001480)=""/16, 0x10}], 0x1}, 0x80000000}], 0x2, 0x40000102, 0x0) 924.25545ms ago: executing program 3 (id=1598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000008400)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000008340)="d2df03c4ff08000000d9cb4608008cdd8af469377b17410febf46d5c9ae4cf1e9e86", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 904.30881ms ago: executing program 5 (id=1599): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r0, @ANYBLOB="6d9311000000f8dbdf25010000000c0003000300000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) 865.502931ms ago: executing program 2 (id=1600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x1c, r1, 0xf22cbce20af0f23f, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) 814.741612ms ago: executing program 3 (id=1601): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400000000000000007fff0000", @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 813.739052ms ago: executing program 5 (id=1602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="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", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea2d11397d2b33ad100d3753d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d590da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0acd3b4fbe21997754874d1c0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb06b5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa8", 0xbd5}, {&(0x7f0000000500)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b805b34d0056282b7ed43e9c6efe6245152417b356ca23162493370e9055e9320279b93aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a000000809658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f01587e997359498ac5b57e8b86fbf5327519ebc68cb81762ebdada6dca6eaee8ac113c10eead6548244be72d5e261f0084329890a01da108431ece9146f6a5f6214c44e05a9750f872bb69b2ac0386c26b78819c32bec4043042e0c8cfc589a077c5e3b062fd0f5a277056779ea21", 0x12a}, {0x0}], 0x6}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 758.959233ms ago: executing program 0 (id=1603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0f0016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 757.472363ms ago: executing program 3 (id=1604): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400000000000000007fff0000", @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 718.533454ms ago: executing program 3 (id=1605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 687.757864ms ago: executing program 0 (id=1606): r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 686.875395ms ago: executing program 5 (id=1607): socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[{0x10, 0x110, 0xb}], 0x10}, 0xfc40) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000400)="a1aa68ad8c04", 0x6}], 0x1}}], 0x1, 0x4085) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000) 634.844216ms ago: executing program 2 (id=1608): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0xf8}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001480)=""/16, 0x10}], 0x1}, 0x80000000}], 0x2, 0x40000102, 0x0) 588.331157ms ago: executing program 5 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x0) 304.351933ms ago: executing program 5 (id=1610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x10}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 0s ago: executing program 4 (id=1611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000008400)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000008340)="d2df03c4ff08000000d9cb4608008cdd8af469377b17410febf46d5c9ae4cf1e9e86", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): llegal inode # [ 98.871573][ T4238] loop0: lost filesystem error report for type 5 error -117 [ 98.871803][ T4238] EXT4-fs (loop0): Remounting filesystem read-only [ 98.880286][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 98.880307][ C1] EXT4-fs (loop0): initial error at time 1784216705: ext4_orphan_get:1399 [ 98.880344][ C1] EXT4-fs (loop0): last error at time 1784216705: ext4_orphan_get:1399 [ 98.918467][ T4238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.144261][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.223366][ T4244] loop3: detected capacity change from 0 to 164 [ 99.229452][ T4247] loop4: detected capacity change from 0 to 512 [ 99.246899][ T4247] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.258688][ T4247] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 99.271252][ T4247] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.219: inode #15: comm syz.4.219: iget: illegal inode # [ 99.285156][ T4247] loop4: lost filesystem error report for type 5 error -117 [ 99.289286][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 99.291491][ T4247] EXT4-fs (loop4): Remounting filesystem read-only [ 99.299559][ C0] EXT4-fs (loop4): initial error at time 1784216705: ext4_orphan_get:1399 [ 99.315207][ T4248] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 99.324301][ C0] EXT4-fs (loop4): last error at time 1784216705: ext4_orphan_get:1399 [ 99.335240][ T4247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.391119][ T4248] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 99.406513][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.418914][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.428563][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.441790][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.457588][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.933586][ T4283] loop3: detected capacity change from 0 to 512 [ 100.948729][ T4284] loop0: detected capacity change from 0 to 512 [ 100.959391][ T4284] EXT4-fs: Ignoring removed orlov option [ 101.013141][ T4283] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.096224][ T4283] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 101.107439][ T4283] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.224: inode #15: comm syz.3.224: iget: illegal inode # [ 101.125210][ T4283] loop3: lost filesystem error report for type 5 error -117 [ 101.125379][ T4283] EXT4-fs (loop3): Remounting filesystem read-only [ 101.133265][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 101.133292][ C0] EXT4-fs (loop3): initial error at time 1784216707: ext4_orphan_get:1399 [ 101.133331][ C0] EXT4-fs (loop3): last error at time 1784216707: ext4_orphan_get:1399 [ 101.170091][ T4283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.219226][ T4284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.283918][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.438066][ T4299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.230'. [ 101.670182][ T4281] mmap: syz.0.223 (4281) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.229854][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.060638][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.160453][ T4329] loop3: detected capacity change from 0 to 512 [ 104.185820][ T4329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 104.197720][ T4329] System zones: 1-12 [ 104.207283][ T4329] EXT4-fs (loop3): 1 truncate cleaned up [ 104.225831][ T4329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.253127][ T4329] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 104.626810][ T4333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.239'. [ 104.718672][ T4337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4337 comm=syz.4.241 [ 104.908014][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 105.099884][ T4337] netlink: 36 bytes leftover after parsing attributes in process `syz.4.241'. [ 105.648875][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.787064][ T4353] loop3: detected capacity change from 0 to 512 [ 105.796774][ T4351] netlink: 'syz.4.246': attribute type 2 has an invalid length. [ 105.855020][ T4353] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.865703][ T4351] netlink: 'syz.4.246': attribute type 10 has an invalid length. [ 105.913428][ T4353] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 105.931319][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.967499][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.986831][ T4353] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.245: inode #15: comm syz.3.245: iget: illegal inode # [ 106.010752][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.033058][ T4353] loop3: lost filesystem error report for type 5 error -117 [ 106.033310][ T4353] EXT4-fs (loop3): Remounting filesystem read-only [ 106.041753][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 106.041779][ C0] EXT4-fs (loop3): initial error at time 1784216712: ext4_orphan_get:1399 [ 106.041821][ C0] EXT4-fs (loop3): last error at time 1784216712: ext4_orphan_get:1399 [ 106.078756][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.154558][ T4353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.249911][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.336565][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 106.336633][ T28] audit: type=1400 audit(1784216712.679:397): avc: denied { read } for pid=4367 comm="syz.3.250" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 106.453323][ T28] audit: type=1400 audit(1784216712.739:398): avc: denied { create } for pid=4365 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.113206][ T4379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.252'. [ 107.186052][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 107.352245][ T28] audit: type=1400 audit(1784216713.689:399): avc: denied { lock } for pid=4382 comm="syz.0.254" path="socket:[8388]" dev="sockfs" ino=8388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 107.680312][ T4388] loop1: detected capacity change from 0 to 512 [ 107.691120][ T4388] EXT4-fs: Ignoring removed i_version option [ 107.700017][ T4388] EXT4-fs: Ignoring removed bh option [ 107.799687][ T4388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.819353][ T4388] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.895240][ T4388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.484280][ T28] audit: type=1400 audit(1784216714.829:400): avc: denied { write } for pid=4393 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.030786][ T4396] loop2: detected capacity change from 0 to 128 [ 109.098824][ T4396] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 109.123209][ T4396] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.464011][ T28] audit: type=1400 audit(1784216715.529:401): avc: denied { write } for pid=4391 comm="syz.2.256" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.491744][ T4398] loop1: detected capacity change from 0 to 512 [ 109.502731][ T28] audit: type=1400 audit(1784216715.559:402): avc: denied { write } for pid=4391 comm="syz.2.256" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.534716][ T28] audit: type=1400 audit(1784216715.569:403): avc: denied { write } for pid=4391 comm="syz.2.256" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.573606][ T28] audit: type=1400 audit(1784216715.579:404): avc: denied { write } for pid=4391 comm="syz.2.256" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.606226][ T4405] loop0: detected capacity change from 0 to 512 [ 109.628137][ T4405] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.651462][ T4398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.672820][ T28] audit: type=1400 audit(1784216715.599:405): avc: denied { write } for pid=4391 comm="syz.2.256" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.703331][ T4405] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 109.721303][ T4398] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.745375][ T4405] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.261: inode #15: comm syz.0.261: iget: illegal inode # [ 109.895212][ T4407] loop3: detected capacity change from 0 to 8192 [ 109.913066][ T4405] loop0: lost filesystem error report for type 5 error -117 [ 109.913249][ T4405] EXT4-fs (loop0): Remounting filesystem read-only [ 109.923913][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 109.923997][ C0] EXT4-fs (loop0): initial error at time 1784216716: ext4_orphan_get:1399 [ 109.924022][ C0] EXT4-fs (loop0): last error at time 1784216716: ext4_orphan_get:1399 [ 110.028428][ T4405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.143291][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.189682][ T28] audit: type=1400 audit(1784216716.529:406): avc: denied { write } for pid=4397 comm="syz.1.258" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.676983][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 111.271394][ T4421] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 111.652802][ T4436] loop0: detected capacity change from 0 to 512 [ 111.665679][ T4436] EXT4-fs: Ignoring removed i_version option [ 111.672929][ T4436] EXT4-fs: Ignoring removed bh option [ 111.727031][ T4436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.751962][ T4436] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.824080][ T4436] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.387160][ T4441] loop2: detected capacity change from 0 to 8192 [ 112.822672][ T4450] loop3: detected capacity change from 0 to 512 [ 112.920097][ T4450] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.006635][ T4450] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 113.061278][ T4450] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.273: inode #15: comm syz.3.273: iget: illegal inode # [ 113.127187][ T4450] loop3: lost filesystem error report for type 5 error -117 [ 113.127406][ T4450] EXT4-fs (loop3): Remounting filesystem read-only [ 113.137435][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 113.137466][ C1] EXT4-fs (loop3): initial error at time 1784216719: ext4_orphan_get:1399 [ 113.137492][ C1] EXT4-fs (loop3): last error at time 1784216719: ext4_orphan_get:1399 [ 113.185427][ T4454] loop4: detected capacity change from 0 to 8192 [ 113.334910][ T4450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.775632][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.777589][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.885623][ T4465] loop1: detected capacity change from 0 to 1764 [ 116.005332][ T4471] loop0: detected capacity change from 0 to 512 [ 116.018632][ T4471] EXT4-fs: Ignoring removed i_version option [ 116.027662][ T4471] EXT4-fs: Ignoring removed bh option [ 116.114679][ T4471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.137756][ T4471] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.046231][ T4471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.131917][ T4476] loop1: detected capacity change from 0 to 4096 [ 117.212343][ T4476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.251114][ T4476] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.283463][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 117.283528][ T28] audit: type=1400 audit(1784216723.629:408): avc: denied { connect } for pid=4494 comm="syz.4.285" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.325389][ T28] audit: type=1400 audit(1784216723.669:409): avc: denied { ioctl } for pid=4494 comm="syz.4.285" path="socket:[8554]" dev="sockfs" ino=8554 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.372278][ T28] audit: type=1400 audit(1784216723.669:410): avc: denied { write } for pid=4494 comm="syz.4.285" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.582180][ T4507] loop0: detected capacity change from 0 to 512 [ 118.631809][ T4507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.024210][ T4507] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.227395][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.387363][ T28] audit: type=1400 audit(1784216726.719:411): avc: denied { write } for pid=4506 comm="syz.0.288" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.628985][ T54] Bluetooth: hci1: Frame reassembly failed (-84) [ 120.977403][ T4523] loop4: detected capacity change from 0 to 128 [ 121.039873][ T4523] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 121.060319][ T4523] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.234054][ T28] audit: type=1400 audit(1784216727.469:412): avc: denied { write } for pid=4518 comm="syz.4.291" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.299903][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.344996][ T4522] Bluetooth: hci0: command 0x1003 tx timeout [ 121.482064][ T28] audit: type=1400 audit(1784216727.489:413): avc: denied { write } for pid=4518 comm="syz.4.291" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.508350][ T28] audit: type=1400 audit(1784216727.499:414): avc: denied { write } for pid=4518 comm="syz.4.291" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.598401][ T28] audit: type=1400 audit(1784216727.509:415): avc: denied { write } for pid=4518 comm="syz.4.291" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.754926][ T4528] loop3: detected capacity change from 0 to 8192 [ 122.653659][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 122.659314][ T4078] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 122.663205][ T42] Bluetooth: hci1: command 0x1003 tx timeout [ 123.092591][ T4548] loop1: detected capacity change from 0 to 512 [ 123.103337][ T4548] EXT4-fs: Ignoring removed i_version option [ 123.112862][ T4548] EXT4-fs: Ignoring removed bh option [ 123.219764][ T4548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.238198][ T4548] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.754644][ T4548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.788106][ T4558] loop1: detected capacity change from 0 to 512 [ 123.800330][ T4558] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.927784][ T4558] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 123.942737][ T4558] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.302: inode #15: comm syz.1.302: iget: illegal inode # [ 123.959490][ T4558] loop1: lost filesystem error report for type 5 error -117 [ 123.961297][ T4558] EXT4-fs (loop1): Remounting filesystem read-only [ 123.969469][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 123.969500][ C1] EXT4-fs (loop1): initial error at time 1784216730: ext4_orphan_get:1399 [ 123.969544][ C1] EXT4-fs (loop1): last error at time 1784216730: ext4_orphan_get:1399 [ 123.980004][ T4561] loop2: detected capacity change from 0 to 8192 [ 124.021677][ T4558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.719574][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.970728][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.698751][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 125.788984][ T4591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4591 comm=syz.1.311 [ 126.124669][ T4598] loop1: detected capacity change from 0 to 512 [ 126.136087][ T4598] EXT4-fs: Ignoring removed i_version option [ 126.149261][ T4598] EXT4-fs: Ignoring removed bh option [ 126.198675][ T4598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.220666][ T4598] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.264757][ T4598] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.373094][ T4606] loop1: detected capacity change from 0 to 8192 [ 126.412790][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.500769][ T4608] loop0: detected capacity change from 0 to 8192 [ 126.528819][ T4610] loop1: detected capacity change from 0 to 512 [ 126.543824][ T4610] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.556304][ T4610] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 126.571988][ T4610] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.317: inode #15: comm syz.1.317: iget: illegal inode # [ 126.591013][ T4610] loop1: lost filesystem error report for type 5 error -117 [ 126.591400][ T4610] EXT4-fs (loop1): Remounting filesystem read-only [ 126.599737][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 126.599764][ C0] EXT4-fs (loop1): initial error at time 1784216732: ext4_orphan_get:1399 [ 126.599804][ C0] EXT4-fs (loop1): last error at time 1784216732: ext4_orphan_get:1399 [ 126.640531][ T4610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.679557][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.739584][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 126.747749][ T4078] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.128153][ T4626] loop3: detected capacity change from 0 to 512 [ 127.185721][ T4626] EXT4-fs: Ignoring removed orlov option [ 127.331204][ T4631] loop0: detected capacity change from 0 to 512 [ 127.339764][ T4631] EXT4-fs: Ignoring removed i_version option [ 127.349109][ T4631] EXT4-fs: Ignoring removed bh option [ 128.460061][ T4634] Can't find ip_set type hash:ip,porI [ 129.177959][ T4626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.192336][ T4631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.293483][ T4631] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.402660][ T4631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.891797][ T4653] loop4: detected capacity change from 0 to 512 [ 130.065316][ T4653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.092570][ T4657] loop2: detected capacity change from 0 to 8192 [ 130.184110][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.221844][ T4653] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.819535][ T4668] loop3: detected capacity change from 0 to 8192 [ 131.994069][ T4670] loop2: detected capacity change from 0 to 128 [ 132.112794][ T4670] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.138788][ T4670] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.282980][ T28] audit: type=1400 audit(1784216738.539:416): avc: denied { write } for pid=4665 comm="syz.2.330" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.323021][ T28] audit: type=1400 audit(1784216738.559:417): avc: denied { write } for pid=4665 comm="syz.2.330" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.648768][ T28] audit: type=1400 audit(1784216738.579:418): avc: denied { write } for pid=4665 comm="syz.2.330" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.699995][ T28] audit: type=1400 audit(1784216738.589:419): avc: denied { write } for pid=4665 comm="syz.2.330" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.739734][ T28] audit: type=1400 audit(1784216739.079:420): avc: denied { write } for pid=4652 comm="syz.4.327" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.797767][ T117] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.630935][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 134.775321][ T4699] loop3: detected capacity change from 0 to 8192 [ 134.792238][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.826468][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 134.830499][ T4078] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.827704][ T4724] loop1: detected capacity change from 0 to 128 [ 137.718201][ T4742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'. [ 137.803751][ T4724] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.824823][ T4724] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.883577][ T28] audit: type=1400 audit(1784216744.229:421): avc: denied { write } for pid=4721 comm="syz.1.350" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.916545][ T28] audit: type=1400 audit(1784216744.229:422): avc: denied { write } for pid=4721 comm="syz.1.350" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.245721][ T4742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4742 comm=syz.2.355 [ 138.800364][ T28] audit: type=1400 audit(1784216744.269:423): avc: denied { write } for pid=4721 comm="syz.1.350" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.834660][ T28] audit: type=1400 audit(1784216744.269:424): avc: denied { write } for pid=4721 comm="syz.1.350" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.889026][ T4753] loop3: detected capacity change from 0 to 8192 [ 138.928299][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 138.953608][ T4760] loop2: detected capacity change from 0 to 512 [ 138.981736][ T4760] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.018554][ T4760] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 139.068846][ T4760] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.362: inode #15: comm syz.2.362: iget: illegal inode # [ 139.105442][ T4760] loop2: lost filesystem error report for type 5 error -117 [ 139.106713][ T4760] EXT4-fs (loop2): Remounting filesystem read-only [ 139.114962][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 139.114996][ C1] EXT4-fs (loop2): initial error at time 1784216745: ext4_orphan_get:1399 [ 139.115042][ C1] EXT4-fs (loop2): last error at time 1784216745: ext4_orphan_get:1399 [ 139.157172][ T4760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.198011][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.367764][ T4785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'. [ 139.470848][ T4785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4785 comm=syz.1.370 [ 139.581946][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 139.621608][ T4795] loop3: detected capacity change from 0 to 8192 [ 139.755877][ T4809] loop3: detected capacity change from 0 to 512 [ 139.781308][ T4809] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.932606][ T4809] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 139.956470][ T4809] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.380: inode #15: comm syz.3.380: iget: illegal inode # [ 139.986954][ T4809] loop3: lost filesystem error report for type 5 error -117 [ 139.987178][ T4809] EXT4-fs (loop3): Remounting filesystem read-only [ 139.995755][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 139.995785][ C1] EXT4-fs (loop3): initial error at time 1784216746: ext4_orphan_get:1399 [ 139.995816][ C1] EXT4-fs (loop3): last error at time 1784216746: ext4_orphan_get:1399 [ 140.091125][ T4809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.298630][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.515694][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.635518][ T4840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.388'. [ 141.715131][ T4840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4840 comm=syz.2.388 [ 141.721584][ T4842] loop0: detected capacity change from 0 to 8192 [ 141.865230][ T4853] loop2: detected capacity change from 0 to 512 [ 141.893500][ T4853] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.913266][ T4853] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 141.930853][ T4853] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.394: inode #15: comm syz.2.394: iget: illegal inode # [ 141.956687][ T4853] loop2: lost filesystem error report for type 5 error -117 [ 141.958291][ T4853] EXT4-fs (loop2): Remounting filesystem read-only [ 141.967220][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 141.967248][ C0] EXT4-fs (loop2): initial error at time 1784216748: ext4_orphan_get:1399 [ 141.967271][ C0] EXT4-fs (loop2): last error at time 1784216748: ext4_orphan_get:1399 [ 141.971511][ T4859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4859 comm=syz.3.397 [ 142.016898][ T4853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.100243][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.104728][ T4863] loop0: detected capacity change from 0 to 8192 [ 143.791544][ T4078] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.980671][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 144.538540][ T4885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 144.610344][ T4891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4891 comm=syz.3.404 [ 144.941651][ T4901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4901 comm=syz.2.409 [ 145.017452][ T4897] loop3: detected capacity change from 0 to 8192 [ 145.171312][ T4905] loop2: detected capacity change from 0 to 512 [ 145.195934][ T4903] loop4: detected capacity change from 0 to 8192 [ 145.232112][ T4905] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.303141][ T4905] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 145.364170][ T4905] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.412: inode #15: comm syz.2.412: iget: illegal inode # [ 145.418707][ T4905] loop2: lost filesystem error report for type 5 error -117 [ 145.418946][ T4905] EXT4-fs (loop2): Remounting filesystem read-only [ 145.429165][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 145.429196][ C0] EXT4-fs (loop2): initial error at time 1784216751: ext4_orphan_get:1399 [ 145.429221][ C0] EXT4-fs (loop2): last error at time 1784216751: ext4_orphan_get:1399 [ 145.573475][ T4905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.765009][ T117] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.151347][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.261192][ T4925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.418'. [ 146.329631][ T4925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4925 comm=syz.4.418 [ 146.574275][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 147.389952][ T4935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4935 comm=syz.0.429 [ 147.662752][ T4940] netlink: 'syz.4.421': attribute type 10 has an invalid length. [ 147.679635][ T4944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4944 comm=syz.0.422 [ 147.938337][ T4078] Bluetooth: hci0: command 0x1003 tx timeout [ 147.957958][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.239933][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 148.258749][ T4946] loop2: detected capacity change from 0 to 8192 [ 148.375395][ T4959] loop1: detected capacity change from 0 to 8192 [ 148.575321][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 148.863410][ T4978] loop1: detected capacity change from 0 to 512 [ 149.007992][ T4978] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.115796][ T4978] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 149.172092][ T4978] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.435: inode #15: comm syz.1.435: iget: illegal inode # [ 149.191219][ T4978] loop1: lost filesystem error report for type 5 error -117 [ 149.191474][ T4978] EXT4-fs (loop1): Remounting filesystem read-only [ 149.209274][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 149.219293][ C1] EXT4-fs (loop1): initial error at time 1784216755: ext4_orphan_get:1399 [ 149.229309][ C1] EXT4-fs (loop1): last error at time 1784216755: ext4_orphan_get:1399 [ 149.239855][ T4978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.277019][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.660201][ T4078] Bluetooth: hci0: command 0x1003 tx timeout [ 150.669007][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.723672][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 151.742603][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 152.054772][ T4993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4993 comm=syz.0.441 [ 152.128725][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.146295][ T117] Bluetooth: hci1: Frame reassembly failed (-84) [ 152.359723][ T5006] loop2: detected capacity change from 0 to 8192 [ 152.666672][ T5013] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 154.120657][ T3444] Bluetooth: hci2: Frame reassembly failed (-84) [ 154.179350][ T4078] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 154.180902][ T5026] Bluetooth: hci1: command 0x1003 tx timeout [ 154.189414][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.196594][ T5026] Bluetooth: hci0: command 0x1003 tx timeout [ 154.411067][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 154.527740][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 154.643680][ T5040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5040 comm=syz.4.455 [ 154.715183][ T5044] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 155.442079][ T3444] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.639525][ T117] Bluetooth: hci1: Frame reassembly failed (-84) [ 155.825789][ T5062] loop2: detected capacity change from 0 to 128 [ 156.010908][ T5062] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 156.032961][ T5062] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.110084][ T28] audit: type=1400 audit(1784216762.459:425): avc: denied { write } for pid=5056 comm="syz.2.460" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.262830][ T4522] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 156.271308][ T4077] Bluetooth: hci2: command 0x1003 tx timeout [ 156.498079][ T28] audit: type=1400 audit(1784216762.529:426): avc: denied { write } for pid=5056 comm="syz.2.460" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.593920][ T28] audit: type=1400 audit(1784216762.539:427): avc: denied { write } for pid=5056 comm="syz.2.460" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.718661][ T28] audit: type=1400 audit(1784216762.569:428): avc: denied { write } for pid=5056 comm="syz.2.460" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.851695][ T4522] Bluetooth: hci0: command 0x1003 tx timeout [ 157.858506][ T4522] Bluetooth: hci1: command 0x1003 tx timeout [ 157.891082][ T5031] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 157.910153][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 157.928575][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 158.125894][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 158.334164][ T117] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.402898][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 158.431513][ T5089] netlink: 'syz.2.471': attribute type 10 has an invalid length. [ 158.474683][ T5091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5091 comm=syz.1.470 [ 158.574031][ T5095] loop4: detected capacity change from 0 to 128 [ 158.628074][ T5095] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 158.652195][ T5095] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.806973][ T28] audit: type=1400 audit(1784216765.079:429): avc: denied { write } for pid=5084 comm="syz.4.469" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.322460][ T28] audit: type=1400 audit(1784216765.099:430): avc: denied { write } for pid=5084 comm="syz.4.469" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.359687][ T28] audit: type=1400 audit(1784216765.109:431): avc: denied { write } for pid=5084 comm="syz.4.469" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.403803][ T28] audit: type=1400 audit(1784216765.119:432): avc: denied { write } for pid=5084 comm="syz.4.469" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.341191][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.351838][ T4077] Bluetooth: hci0: command 0x1003 tx timeout [ 161.214350][ T3444] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.230984][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 161.317257][ T28] audit: type=1400 audit(1784216767.659:433): avc: denied { create } for pid=5110 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 161.718417][ T5117] loop4: detected capacity change from 0 to 8192 [ 161.750271][ T3444] Bluetooth: hci1: Frame reassembly failed (-84) [ 162.739973][ T5031] Bluetooth: hci0: command 0x1003 tx timeout [ 162.740984][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.779380][ T42] Bluetooth: hci1: command 0x1003 tx timeout [ 163.780765][ T4077] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 164.086142][ T5133] syzkaller0: entered promiscuous mode [ 164.093692][ T5133] syzkaller0: entered allmulticast mode [ 164.108535][ T5133] loop0: detected capacity change from 0 to 512 [ 164.140808][ T5133] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 164.157696][ T5133] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 164.176119][ T5133] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.482: Failed to acquire dquot type 1 [ 164.191546][ T5133] loop0: lost filesystem error report for type 5 error -117 [ 164.194302][ T5133] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 164.203126][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 164.203154][ C1] EXT4-fs (loop0): last error at time 1784216770: ext4_acquire_dquot:7041 [ 164.241600][ T5133] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 164.245417][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 164.262253][ T5133] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.482: Failed to acquire dquot type 1 [ 164.262291][ T5133] loop0: lost filesystem error report for type 5 error -117 [ 164.318464][ T5133] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.482: bg 0: block 248: padding at end of block bitmap is not set [ 164.353821][ T5133] loop0: lost filesystem error report for type 5 error -117 [ 164.355461][ T5133] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 164.386071][ T5133] loop0: lost filesystem error report for type 5 error -117 [ 164.387507][ T5133] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 164.420002][ T5133] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 164.434687][ T5142] loop4: detected capacity change from 0 to 512 [ 164.438093][ T5133] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.482: Failed to acquire dquot type 1 [ 164.461817][ T5133] loop0: lost filesystem error report for type 5 error -117 [ 164.462645][ T5133] EXT4-fs (loop0): 1 orphan inode deleted [ 164.474975][ T5142] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.479930][ T5133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.498902][ T5139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5139 comm=syz.2.484 [ 164.517709][ T5133] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.586115][ T5142] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 164.600215][ T5142] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.483: inode #15: comm syz.4.483: iget: illegal inode # [ 164.616974][ T5142] loop4: lost filesystem error report for type 5 error -117 [ 164.619313][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 164.629693][ T5142] EXT4-fs (loop4): Remounting filesystem read-only [ 164.630429][ C1] EXT4-fs (loop4): initial error at time 1784216770: ext4_orphan_get:1399 [ 164.637820][ T5142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.646729][ C1] [ 164.646741][ C1] EXT4-fs (loop4): last error at time 1784216770: ext4_orphan_get:1399 [ 164.726686][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.905885][ T5158] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 165.260058][ T5170] loop1: detected capacity change from 0 to 128 [ 165.323484][ T5170] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 165.346486][ T5170] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.588354][ T28] audit: type=1400 audit(1784216771.819:434): avc: denied { write } for pid=5159 comm="syz.1.491" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.678922][ T28] audit: type=1400 audit(1784216771.849:435): avc: denied { write } for pid=5159 comm="syz.1.491" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.047905][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.518128][ T28] audit: type=1400 audit(1784216771.869:436): avc: denied { write } for pid=5159 comm="syz.1.491" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.234975][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 167.296132][ T28] audit: type=1400 audit(1784216771.879:437): avc: denied { write } for pid=5159 comm="syz.1.491" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.416049][ T5185] loop4: detected capacity change from 0 to 512 [ 167.440563][ T5185] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.573718][ T5185] EXT4-fs (loop4): orphan cleanup on readonly fs [ 167.583386][ T5185] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 167.612044][ T5185] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.493: attempt to clear invalid blocks 2 len 1 [ 167.645033][ T5185] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.649263][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 167.673515][ C1] EXT4-fs (loop4): initial error at time 1784216773: ext4_clear_blocks:876: inode 13 [ 167.687451][ C1] EXT4-fs (loop4): last error at time 1784216773: ext4_clear_blocks:876: inode 13 [ 167.713108][ T5185] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 167.737826][ T5185] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.493: invalid indirect mapped block 1819239214 (level 0) [ 167.758672][ T5185] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.772023][ T5184] Can't find ip_set type hash:ip,porI [ 168.654448][ T5194] loop3: detected capacity change from 0 to 8192 [ 168.666422][ T5185] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.493: invalid indirect mapped block 1819239214 (level 1) [ 168.691579][ T5185] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 168.705066][ T5185] EXT4-fs (loop4): 1 truncate cleaned up [ 168.741071][ T5185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.759612][ T5185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.841995][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 168.991796][ T5196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5196 comm=syz.1.497 [ 169.223171][ T5212] loop3: detected capacity change from 0 to 512 [ 169.245202][ T5212] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.249726][ T5203] netlink: 'syz.0.500': attribute type 10 has an invalid length. [ 169.257103][ T5212] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 169.280246][ T5212] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.503: inode #15: comm syz.3.503: iget: illegal inode # [ 169.295731][ T5212] loop3: lost filesystem error report for type 5 error -117 [ 169.296019][ T5212] EXT4-fs (loop3): Remounting filesystem read-only [ 169.306315][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 169.306338][ C1] EXT4-fs (loop3): initial error at time 1784216775: ext4_orphan_get:1399 [ 169.306357][ C1] EXT4-fs (loop3): last error at time 1784216775: ext4_orphan_get:1399 [ 169.347855][ T5212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.399225][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.688148][ T5225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.507'. [ 170.321459][ T5232] loop2: detected capacity change from 0 to 256 [ 170.611794][ T5237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 170.720421][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 170.771975][ T5250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5250 comm=syz.2.508 [ 170.904166][ T5248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5248 comm=syz.0.512 [ 171.141554][ T5258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 171.512338][ T5260] loop0: detected capacity change from 0 to 8192 [ 171.605652][ T5264] loop4: detected capacity change from 0 to 8192 [ 172.851540][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 174.632412][ T5283] loop4: detected capacity change from 0 to 1024 [ 174.702729][ T5283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.244513][ T5290] Can't find ip_set type hash:ip,porI [ 177.553334][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 177.583275][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.684225][ T5317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5317 comm=syz.2.526 [ 178.151932][ T5331] loop2: detected capacity change from 0 to 128 [ 178.523143][ T5331] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 178.547188][ T5331] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.719119][ T28] audit: type=1400 audit(1784216784.979:438): avc: denied { write } for pid=5324 comm="syz.2.528" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.012309][ T28] audit: type=1400 audit(1784216785.009:439): avc: denied { write } for pid=5324 comm="syz.2.528" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.040295][ T28] audit: type=1400 audit(1784216785.019:440): avc: denied { write } for pid=5324 comm="syz.2.528" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.079357][ T28] audit: type=1400 audit(1784216785.039:441): avc: denied { write } for pid=5324 comm="syz.2.528" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.153281][ T5327] loop4: detected capacity change from 0 to 8192 [ 179.841335][ T5342] loop4: detected capacity change from 0 to 512 [ 179.878792][ T5342] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.907023][ T5342] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 179.958922][ T5342] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.533: inode #15: comm syz.4.533: iget: illegal inode # [ 180.003963][ T5342] loop4: lost filesystem error report for type 5 error -117 [ 180.006149][ T5342] EXT4-fs (loop4): Remounting filesystem read-only [ 180.019829][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 180.019851][ C0] EXT4-fs (loop4): initial error at time 1784216786: ext4_orphan_get:1399 [ 180.019888][ C0] EXT4-fs (loop4): last error at time 1784216786: ext4_orphan_get:1399 [ 180.156104][ T5342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.248078][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.373215][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 181.886469][ T5368] loop3: detected capacity change from 0 to 128 [ 182.009665][ T5368] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 182.030904][ T5368] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.205377][ T28] audit: type=1400 audit(1784216788.459:442): avc: denied { write } for pid=5362 comm="syz.3.539" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.269358][ T5376] loop2: detected capacity change from 0 to 1024 [ 182.279317][ T28] audit: type=1400 audit(1784216788.479:443): avc: denied { write } for pid=5362 comm="syz.3.539" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.672806][ T28] audit: type=1400 audit(1784216788.489:444): avc: denied { write } for pid=5362 comm="syz.3.539" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.530420][ T5376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.102169][ T28] audit: type=1400 audit(1784216788.509:445): avc: denied { write } for pid=5362 comm="syz.3.539" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.191163][ T5379] Can't find ip_set type hash:ip,porI [ 184.215784][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 184.425135][ T5387] loop1: detected capacity change from 0 to 8192 [ 184.710526][ T5389] loop3: detected capacity change from 0 to 8192 [ 184.850271][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 184.945008][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.968592][ T5401] loop4: detected capacity change from 0 to 512 [ 185.000096][ T5401] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.063843][ T5408] netlink: 'syz.2.547': attribute type 10 has an invalid length. [ 185.095537][ T5401] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 185.114650][ T5401] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.549: inode #15: comm syz.4.549: iget: illegal inode # [ 185.133895][ T5401] loop4: lost filesystem error report for type 5 error -117 [ 185.134295][ T5401] EXT4-fs (loop4): Remounting filesystem read-only [ 185.145038][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 185.145063][ C1] EXT4-fs (loop4): initial error at time 1784216791: ext4_orphan_get:1399 [ 185.145096][ C1] EXT4-fs (loop4): last error at time 1784216791: ext4_orphan_get:1399 [ 185.187387][ T5401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.254201][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.429361][ T5418] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 185.446705][ T5432] loop1: detected capacity change from 0 to 128 [ 185.467354][ T5432] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.522286][ T5432] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.617868][ T5436] loop2: detected capacity change from 0 to 1764 [ 185.654761][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.136580][ T5457] loop4: detected capacity change from 0 to 512 [ 187.145592][ T5449] loop0: detected capacity change from 0 to 8192 [ 187.174204][ T5457] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.224078][ T5457] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 187.284591][ T5457] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.565: inode #15: comm syz.4.565: iget: illegal inode # [ 187.345019][ T5457] loop4: lost filesystem error report for type 5 error -117 [ 187.345350][ T5457] EXT4-fs (loop4): Remounting filesystem read-only [ 187.357842][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 187.357869][ C0] EXT4-fs (loop4): initial error at time 1784216793: ext4_orphan_get:1399 [ 187.357916][ C0] EXT4-fs (loop4): last error at time 1784216793: ext4_orphan_get:1399 [ 187.455408][ T5470] loop0: detected capacity change from 0 to 1024 [ 187.507631][ T5470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.546409][ T5457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.636616][ T5467] netlink: 'syz.2.570': attribute type 10 has an invalid length. [ 187.706512][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.265650][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.105823][ T5508] loop2: detected capacity change from 0 to 128 [ 190.124143][ T5508] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 190.144720][ T5508] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.289298][ T28] audit: type=1400 audit(1784216796.539:446): avc: denied { write } for pid=5498 comm="syz.2.575" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.569982][ T5505] loop3: detected capacity change from 0 to 8192 [ 190.611425][ T28] audit: type=1400 audit(1784216796.549:447): avc: denied { write } for pid=5498 comm="syz.2.575" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.860003][ T5527] FAULT_INJECTION: forcing a failure. [ 190.860003][ T5527] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 190.864845][ T28] audit: type=1400 audit(1784216796.549:448): avc: denied { write } for pid=5498 comm="syz.2.575" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.904115][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.0.584 Not tainted syzkaller #0 PREEMPT(lazy) [ 190.904157][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 190.904178][ T5527] Call Trace: [ 190.904187][ T5527] [ 190.904198][ T5527] __dump_stack+0x1d/0x30 [ 190.904226][ T5527] dump_stack_lvl+0x95/0xd0 [ 190.904266][ T5527] dump_stack+0x15/0x1b [ 190.904288][ T5527] should_fail_ex+0x25e/0x270 [ 190.904395][ T5527] should_fail+0xb/0x20 [ 190.904423][ T5527] should_fail_usercopy+0x1a/0x20 [ 190.904539][ T5527] _copy_from_user+0x1c/0xb0 [ 190.904593][ T5527] sctp_getsockopt_peeloff_flags+0x75/0x180 [ 190.904680][ T5527] sctp_getsockopt+0x353/0xaa0 [ 190.904706][ T5527] sock_common_getsockopt+0x60/0x70 [ 190.904734][ T5527] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 190.904759][ T5527] do_sock_getsockopt+0x2f5/0x570 [ 190.904835][ T5527] ? vfs_write+0x848/0x990 [ 190.904856][ T5527] __x64_sys_getsockopt+0x11d/0x1a0 [ 190.904891][ T5527] x64_sys_call+0x2dcf/0x3020 [ 190.904916][ T5527] do_syscall_64+0x136/0x3c0 [ 190.905046][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.905067][ T5527] RIP: 0033:0x7fab9ba3de59 [ 190.905102][ T5527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.905121][ T5527] RSP: 002b:00007fab9a497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 190.905172][ T5527] RAX: ffffffffffffffda RBX: 00007fab9bcc5fa0 RCX: 00007fab9ba3de59 [ 190.905191][ T5527] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 190.905205][ T5527] RBP: 00007fab9a497090 R08: 0000200000000040 R09: 0000000000000000 [ 190.905221][ T5527] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 190.905237][ T5527] R13: 00007fab9bcc6038 R14: 00007fab9bcc5fa0 R15: 00007fff095abd78 [ 190.905259][ T5527] [ 191.769921][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 191.818790][ T28] audit: type=1400 audit(1784216796.549:449): avc: denied { write } for pid=5498 comm="syz.2.575" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.896935][ T5531] Can't find ip_set type hash:ip,porI [ 191.933229][ T5521] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 191.975063][ T5535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'. [ 193.072230][ T5541] netlink: 96 bytes leftover after parsing attributes in process `syz.1.588'. [ 193.488161][ T5540] loop0: detected capacity change from 0 to 128 [ 193.558238][ T5540] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 193.579178][ T5540] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.776671][ T28] audit: type=1400 audit(1784216799.989:450): avc: denied { write } for pid=5536 comm="syz.0.587" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.060522][ T28] audit: type=1400 audit(1784216800.019:451): avc: denied { write } for pid=5536 comm="syz.0.587" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.086733][ T28] audit: type=1400 audit(1784216800.029:452): avc: denied { write } for pid=5536 comm="syz.0.587" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.296744][ T5552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.590'. [ 195.075587][ T5557] loop1: detected capacity change from 0 to 512 [ 195.084318][ T28] audit: type=1400 audit(1784216800.049:453): avc: denied { write } for pid=5536 comm="syz.0.587" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.329795][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 195.348339][ T5558] loop4: detected capacity change from 0 to 512 [ 195.396537][ T5557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.419510][ T5558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.452364][ T5557] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.496320][ T5558] EXT4-fs (loop4): 1 truncate cleaned up [ 195.518430][ T5558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.723096][ T28] audit: type=1400 audit(1784216802.069:454): avc: denied { create } for pid=5547 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.125979][ T5568] loop0: detected capacity change from 0 to 512 [ 196.801361][ T5568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.944002][ T28] audit: type=1400 audit(1784216803.269:455): avc: denied { write } for pid=5556 comm="syz.1.592" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.056593][ T5568] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.155574][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.622243][ T5578] loop2: detected capacity change from 0 to 128 [ 199.251369][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.407764][ T5578] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 199.427669][ T5578] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.584903][ T28] audit: type=1400 audit(1784216805.839:456): avc: denied { write } for pid=5574 comm="syz.2.595" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.766654][ T28] audit: type=1400 audit(1784216805.859:457): avc: denied { write } for pid=5574 comm="syz.2.595" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.834850][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.848574][ T5585] loop4: detected capacity change from 0 to 8192 [ 199.888963][ T28] audit: type=1400 audit(1784216805.869:458): avc: denied { write } for pid=5574 comm="syz.2.595" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.940842][ T28] audit: type=1400 audit(1784216805.889:459): avc: denied { write } for pid=5574 comm="syz.2.595" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.664666][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 201.219142][ T28] audit: type=1400 audit(1784216807.559:460): avc: denied { create } for pid=5597 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.364659][ T28] audit: type=1400 audit(1784216807.709:461): avc: denied { write } for pid=5597 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.443880][ T5601] loop2: detected capacity change from 0 to 8192 [ 201.600464][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 201.700200][ T5605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5605 comm=syz.0.603 [ 202.919907][ T5628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 203.040470][ T5628] loop4: detected capacity change from 0 to 512 [ 203.170430][ T5633] loop3: detected capacity change from 0 to 128 [ 203.222297][ T5633] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 203.243424][ T5633] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.359794][ T28] audit: type=1400 audit(1784216809.639:462): avc: denied { write } for pid=5624 comm="syz.3.608" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.533285][ T5628] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.719455][ T28] audit: type=1400 audit(1784216809.639:463): avc: denied { write } for pid=5624 comm="syz.3.608" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.774403][ T5628] EXT4-fs (loop4): 1 truncate cleaned up [ 203.816064][ T5628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.876937][ T28] audit: type=1400 audit(1784216809.649:464): avc: denied { write } for pid=5624 comm="syz.3.608" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.994497][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.013999][ T5639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.621'. [ 204.030198][ T28] audit: type=1400 audit(1784216809.659:465): avc: denied { write } for pid=5624 comm="syz.3.608" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.087833][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 205.304773][ T28] audit: type=1400 audit(1784216809.679:466): avc: denied { write } for pid=5624 comm="syz.3.608" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.710554][ T5647] loop2: detected capacity change from 0 to 128 [ 206.062768][ T5649] loop4: detected capacity change from 0 to 128 [ 206.104019][ T5651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 206.121021][ T5639] loop0: detected capacity change from 0 to 512 [ 206.416883][ T5639] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.269339][ T5649] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 207.269444][ T5649] EXT4-fs: failed to create workqueue [ 207.291600][ T5649] EXT4-fs (loop4): mount failed [ 207.459895][ T5639] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 207.459995][ T5639] EXT4-fs: failed to create workqueue [ 207.715271][ T5647] EXT4-fs: error -4 creating inode table initialization thread [ 207.726458][ T5647] EXT4-fs (loop2): mount failed [ 207.734069][ T5639] EXT4-fs (loop0): mount failed [ 208.128184][ T5666] netlink: 48 bytes leftover after parsing attributes in process `syz.2.619'. [ 208.230432][ T5666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5666 comm=syz.2.619 [ 211.701436][ T5681] netlink: 'syz.3.622': attribute type 10 has an invalid length. [ 211.749852][ T5689] capability: warning: `syz.2.624' uses deprecated v2 capabilities in a way that may be insecure [ 211.838241][ T5691] capability: warning: `syz.2.624' uses 32-bit capabilities (legacy support in use) [ 211.897052][ T5691] loop2: detected capacity change from 0 to 1024 [ 212.149926][ T5691] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 212.165427][ T5691] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 212.183828][ T5691] JBD2: no valid journal superblock found [ 212.193241][ T5691] EXT4-fs (loop2): Could not load journal inode [ 212.348712][ T5699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.625'. [ 212.707823][ T5696] netlink: 'syz.3.635': attribute type 10 has an invalid length. [ 213.079923][ T5702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.626'. [ 213.205766][ T5691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 213.294373][ T5707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.628'. [ 213.405433][ T5691] bond1: entered promiscuous mode [ 213.449858][ T5707] loop0: detected capacity change from 0 to 512 [ 213.474029][ T5691] bond1: entered allmulticast mode [ 213.492498][ T5707] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.514419][ T5691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.536384][ T5707] EXT4-fs (loop0): 1 truncate cleaned up [ 213.567440][ T5707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.280784][ T5720] loop3: detected capacity change from 0 to 128 [ 214.344732][ T5720] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 214.361526][ T5720] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.497469][ T28] audit: type=1400 audit(1784216820.759:467): avc: denied { write } for pid=5714 comm="syz.3.630" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.540521][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.808782][ T28] audit: type=1400 audit(1784216820.779:468): avc: denied { write } for pid=5714 comm="syz.3.630" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.962907][ T5723] loop4: detected capacity change from 0 to 8192 [ 215.003056][ T28] audit: type=1400 audit(1784216820.799:469): avc: denied { write } for pid=5714 comm="syz.3.630" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.365970][ T28] audit: type=1400 audit(1784216820.799:470): avc: denied { write } for pid=5714 comm="syz.3.630" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.219653][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 216.409556][ T5735] Can't find ip_set type hash:ip,porI [ 217.230634][ T5746] loop2: detected capacity change from 0 to 128 [ 218.689484][ T5746] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 218.707385][ T5746] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.763735][ T28] audit: type=1400 audit(1784216825.099:471): avc: denied { write } for pid=5736 comm="syz.2.634" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.857058][ T28] audit: type=1400 audit(1784216825.109:472): avc: denied { write } for pid=5736 comm="syz.2.634" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.898344][ T28] audit: type=1400 audit(1784216825.109:473): avc: denied { write } for pid=5736 comm="syz.2.634" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.908614][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.637'. [ 218.926056][ T28] audit: type=1400 audit(1784216825.109:474): avc: denied { write } for pid=5736 comm="syz.2.634" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.040912][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 219.058546][ T28] audit: type=1400 audit(1784216825.109:475): avc: denied { write } for pid=5736 comm="syz.2.634" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.155852][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.167387][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.175256][ T5724] bridge_slave_0: entered allmulticast mode [ 219.193846][ T5724] bridge_slave_0: entered promiscuous mode [ 219.238236][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.270877][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.280022][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.295879][ T5724] bridge_slave_1: entered allmulticast mode [ 219.303850][ T5724] bridge_slave_1: entered promiscuous mode [ 219.310946][ T5769] netlink: 'syz.2.640': attribute type 10 has an invalid length. [ 219.325697][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.377390][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.417824][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.458187][ T5779] loop2: detected capacity change from 0 to 512 [ 219.490918][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.491308][ T5779] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.519602][ T5779] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 219.535117][ T5779] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.644: inode #15: comm syz.2.644: iget: illegal inode # [ 219.548871][ T5760] loop0: detected capacity change from 0 to 1024 [ 219.550707][ T5779] loop2: lost filesystem error report for type 5 error -117 [ 219.559042][ T5779] EXT4-fs (loop2): Remounting filesystem read-only [ 219.563200][ T5724] team0: Port device team_slave_0 added [ 219.567726][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 219.587631][ C1] EXT4-fs (loop2): initial error at time 1784216825: ext4_orphan_get:1399 [ 219.596301][ C1] EXT4-fs (loop2): last error at time 1784216825: ext4_orphan_get:1399 [ 219.606087][ T5779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.620515][ T5724] team0: Port device team_slave_1 added [ 219.639843][ T5781] loop4: detected capacity change from 0 to 8192 [ 219.662830][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.698770][ T5760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.724445][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.867998][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.879187][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.908669][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.056811][ T5791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5791 comm=syz.3.647 [ 220.083288][ T49] bridge_slave_1: left promiscuous mode [ 220.099224][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.146320][ T49] bridge_slave_0: left allmulticast mode [ 220.166999][ T49] bridge_slave_0: left promiscuous mode [ 220.197152][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.374684][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.390461][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.407018][ T49] bond0 (unregistering): Released all slaves [ 220.533355][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.558946][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.679934][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.713222][ T28] audit: type=1400 audit(1784216827.059:476): avc: denied { read } for pid=5800 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.745065][ T5798] loop3: detected capacity change from 0 to 8192 [ 220.769591][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.809971][ T5724] hsr_slave_0: entered promiscuous mode [ 220.823203][ T28] audit: type=1400 audit(1784216827.059:477): avc: denied { read open } for pid=5800 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.856102][ T5724] hsr_slave_1: entered promiscuous mode [ 220.869588][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 220.878705][ T5724] Cannot create hsr debugfs directory [ 221.082924][ T49] hsr_slave_0: left promiscuous mode [ 221.209485][ T49] hsr_slave_1: left promiscuous mode [ 221.215653][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.693249][ T28] audit: type=1400 audit(1784216827.059:478): avc: denied { getattr } for pid=5800 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.745692][ T5813] loop0: detected capacity change from 0 to 128 [ 221.876251][ T5813] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 221.894546][ T5813] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.034329][ T28] audit: type=1400 audit(1784216828.289:479): avc: denied { write } for pid=5806 comm="syz.0.649" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.104216][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.202028][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.219117][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.227999][ T28] audit: type=1400 audit(1784216828.289:480): avc: denied { add_name } for pid=5806 comm="syz.0.649" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.295349][ T49] veth1_macvtap: left promiscuous mode [ 222.310957][ T49] veth0_macvtap: left promiscuous mode [ 222.322702][ T49] veth1_vlan: left promiscuous mode [ 222.334983][ T49] veth0_vlan: left promiscuous mode [ 222.376321][ T28] audit: type=1400 audit(1784216828.309:481): avc: denied { write } for pid=5806 comm="syz.0.649" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.448822][ T28] audit: type=1400 audit(1784216828.319:482): avc: denied { write } for pid=5806 comm="syz.0.649" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.482864][ T28] audit: type=1400 audit(1784216828.329:483): avc: denied { write } for pid=5806 comm="syz.0.649" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.534051][ T28] audit: type=1400 audit(1784216828.349:484): avc: denied { write } for pid=5806 comm="syz.0.649" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.597488][ T49] team0 (unregistering): Port device team_slave_1 removed [ 222.609181][ T28] audit: type=1400 audit(1784216828.349:485): avc: denied { remove_name } for pid=5806 comm="syz.0.649" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.673127][ T49] team0 (unregistering): Port device team_slave_0 removed [ 222.769840][ T5827] netlink: 'syz.4.653': attribute type 10 has an invalid length. [ 222.884949][ T5834] loop4: detected capacity change from 0 to 512 [ 222.930265][ T5834] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.958732][ T5834] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 222.971579][ T5724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.980323][ T5834] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.655: inode #15: comm syz.4.655: iget: illegal inode # [ 222.998765][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.012868][ T5834] loop4: lost filesystem error report for type 5 error -117 [ 223.013194][ T5834] EXT4-fs (loop4): Remounting filesystem read-only [ 223.023268][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 223.023295][ C1] EXT4-fs (loop4): initial error at time 1784216829: ext4_orphan_get:1399 [ 223.023325][ C1] EXT4-fs (loop4): last error at time 1784216829: ext4_orphan_get:1399 [ 223.062646][ T5724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.073146][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.085640][ T49] IPVS: stop unused estimator thread 0... [ 223.093799][ T5724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.108205][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.122135][ T5834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.141669][ T5724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.153263][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.218919][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 223.233609][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.301911][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.369652][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 223.384322][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.395216][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.407787][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.564773][ T5851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5851 comm=syz.4.658 [ 223.583961][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.594728][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.857975][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 223.885656][ T5870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.659'. [ 224.728106][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.283904][ T5724] veth0_vlan: entered promiscuous mode [ 225.321542][ T5724] veth1_vlan: entered promiscuous mode [ 225.353512][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 225.385721][ T5724] veth0_macvtap: entered promiscuous mode [ 225.420596][ T5724] veth1_macvtap: entered promiscuous mode [ 225.458896][ T5879] loop4: detected capacity change from 0 to 1024 [ 225.492389][ T5879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.514064][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.555969][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.594513][ T3444] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.606944][ T3444] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.662256][ T3444] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.684671][ T3444] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.784077][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 225.784097][ T28] audit: type=1400 audit(1784216832.129:495): avc: denied { write } for pid=5931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.862826][ T5945] xt_cgroup: invalid path, errno=-2 [ 225.875357][ T28] audit: type=1400 audit(1784216832.219:496): avc: denied { write } for pid=5943 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.906081][ T28] audit: type=1400 audit(1784216832.249:497): avc: denied { bind } for pid=5944 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.967919][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 225.974485][ T28] audit: type=1400 audit(1784216832.269:498): avc: denied { write } for pid=5944 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 226.020075][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'. [ 226.123729][ T28] audit: type=1400 audit(1784216832.469:499): avc: denied { write } for pid=5951 comm="syz.3.666" path="socket:[12020]" dev="sockfs" ino=12020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.301763][ T28] audit: type=1400 audit(1784216832.649:500): avc: denied { map } for pid=5976 comm="syz.0.673" path="socket:[12894]" dev="sockfs" ino=12894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 226.374486][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.412018][ T28] audit: type=1400 audit(1784216832.759:501): avc: denied { read } for pid=5986 comm="syz.3.678" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.446119][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 226.587994][ T28] audit: type=1400 audit(1784216832.929:502): avc: denied { setopt } for pid=5994 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 226.647377][ T28] audit: type=1400 audit(1784216832.969:503): avc: denied { read write } for pid=6007 comm="syz.0.687" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.693342][ T28] audit: type=1400 audit(1784216832.969:504): avc: denied { open } for pid=6007 comm="syz.0.687" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.759846][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 226.776876][ T6023] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 226.777413][ T6021] netlink: 'syz.0.691': attribute type 22 has an invalid length. [ 226.786817][ T6023] netlink: 224 bytes leftover after parsing attributes in process `syz.4.692'. [ 226.801176][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.691'. [ 226.976660][ T6035] syz.2.693 uses obsolete (PF_INET,SOCK_PACKET) [ 227.013904][ T6039] syz_tun: entered allmulticast mode [ 227.021050][ T6038] syz_tun: left allmulticast mode [ 227.130535][ T6049] Driver unsupported XDP return value 0 on prog (id 215) dev N/A, expect packet loss! [ 227.579692][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 227.664696][ T6099] syzkaller0: entered promiscuous mode [ 227.670608][ T6099] syzkaller0: entered allmulticast mode [ 227.798339][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 227.850878][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 227.954105][ T6132] netlink: 'syz.4.728': attribute type 5 has an invalid length. [ 228.577424][ T6109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.634560][ T6148] netlink: 'syz.3.731': attribute type 11 has an invalid length. [ 228.676401][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.734'. [ 228.693687][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 228.731172][ T6150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.776630][ T6158] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 228.789219][ T6159] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 228.974334][ T6175] IPVS: Unknown mcast interface: vcan0 [ 229.048095][ T117] nci: nci_ntf_packet: unknown ntf opcode 0x3f [ 229.822414][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.830048][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.872871][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.883167][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.918651][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.929315][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.938594][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.951584][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.036446][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.093761][ T6229] syzkaller0: entered promiscuous mode [ 230.100791][ T6229] syzkaller0: entered allmulticast mode [ 231.951139][ T6181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.962869][ T6175] __nla_validate_parse: 6 callbacks suppressed [ 231.962891][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 232.107383][ T6263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.772'. [ 232.180050][ T6267] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 232.300203][ T6278] netlink: 64 bytes leftover after parsing attributes in process `syz.4.776'. [ 232.340696][ T6282] netlink: 84 bytes leftover after parsing attributes in process `syz.0.777'. [ 232.365993][ T6282] vlan2: entered allmulticast mode [ 232.373518][ T6282] bond0: entered allmulticast mode [ 232.379772][ T6282] bond_slave_0: entered allmulticast mode [ 232.387667][ T6282] bond_slave_1: entered allmulticast mode [ 232.476743][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 232.476761][ T28] audit: type=1400 audit(1784216838.819:541): avc: denied { read } for pid=6287 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.583644][ T6308] lo speed is unknown, defaulting to 1000 [ 232.590590][ T6308] lo speed is unknown, defaulting to 1000 [ 232.596850][ T6308] lo speed is unknown, defaulting to 1000 [ 232.664382][ T28] audit: type=1400 audit(1784216839.009:542): avc: denied { name_bind } for pid=6314 comm="syz.4.789" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 232.679210][ T6308] infiniband s: set down [ 232.693851][ T3519] lo speed is unknown, defaulting to 1000 [ 232.703852][ T6308] infiniband s: added lo [ 232.718406][ T6308] RDS/IB: s: added [ 232.728210][ T6308] smc: adding ib device s with port count 1 [ 232.738071][ T6308] smc: ib device s port 1 has no pnetid [ 232.746728][ T28] audit: type=1400 audit(1784216839.039:543): avc: denied { relabelfrom } for pid=6312 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 232.751875][ T6313] syzkaller0: entered promiscuous mode [ 232.769827][ T28] audit: type=1400 audit(1784216839.039:544): avc: denied { relabelto } for pid=6312 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 232.800263][ T6313] syzkaller0: entered allmulticast mode [ 232.817366][ T6308] lo speed is unknown, defaulting to 1000 [ 232.826440][ T3519] lo speed is unknown, defaulting to 1000 [ 232.893070][ T6324] ip6gretap1: entered allmulticast mode [ 232.903602][ T28] audit: type=1400 audit(1784216839.259:545): avc: denied { getopt } for pid=6292 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.924390][ T6308] lo speed is unknown, defaulting to 1000 [ 233.034467][ T28] audit: type=1400 audit(1784216839.379:546): avc: denied { create } for pid=6326 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 233.066446][ T6308] lo speed is unknown, defaulting to 1000 [ 233.069681][ T6335] tipc: Started in network mode [ 233.090164][ T6335] tipc: Node identity , cluster identity 4711 [ 233.113605][ T6335] tipc: Failed to obtain node identity [ 233.123810][ T6335] tipc: Enabling of bearer rejected, failed to enable media [ 233.190811][ T6343] syzkaller0: entered promiscuous mode [ 233.197146][ T6343] syzkaller0: entered allmulticast mode [ 233.206706][ T6308] lo speed is unknown, defaulting to 1000 [ 233.350792][ T6308] lo speed is unknown, defaulting to 1000 [ 233.408787][ T6368] netlink: 'syz.0.806': attribute type 1 has an invalid length. [ 233.453352][ T6374] netlink: 'syz.2.807': attribute type 3 has an invalid length. [ 233.488242][ T28] audit: type=1400 audit(1784216839.829:547): avc: denied { listen } for pid=6367 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 233.502662][ T6368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.522960][ T28] audit: type=1400 audit(1784216839.879:548): avc: denied { accept } for pid=6367 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 233.584234][ T6381] syzkaller0: entered promiscuous mode [ 233.597175][ T6381] syzkaller0: entered allmulticast mode [ 233.611421][ T6380] tipc: Started in network mode [ 233.617144][ T6380] tipc: Node identity cabf31a93b9e, cluster identity 4711 [ 233.627651][ T6380] tipc: Enabled bearer , priority 0 [ 233.639697][ T6380] syzkaller0: entered promiscuous mode [ 233.647568][ T6380] syzkaller0: entered allmulticast mode [ 233.666052][ T6380] tipc: Resetting bearer [ 233.683715][ T6379] tipc: Resetting bearer [ 233.683999][ T28] audit: type=1400 audit(1784216840.029:549): avc: denied { ioctl } for pid=6386 comm="syz.2.812" path="socket:[13831]" dev="sockfs" ino=13831 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 233.699940][ T6387] netlink: 'syz.2.812': attribute type 13 has an invalid length. [ 233.728773][ T6379] tipc: Disabling bearer [ 233.751426][ T6388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.812'. [ 233.838459][ T6388] bond0: (slave bond_slave_0): Releasing backup interface [ 233.905671][ T6388] bond_slave_0: entered promiscuous mode [ 233.916247][ T6388] bond_slave_0: entered allmulticast mode [ 233.924118][ T28] audit: type=1400 audit(1784216840.269:550): avc: denied { setopt } for pid=6397 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.048218][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.813'. [ 234.091201][ T6413] netlink: 'syz.2.820': attribute type 3 has an invalid length. [ 234.147621][ T6420] rdma_rxe: rxe_newlink: failed to add lo [ 234.300371][ T6445] syz_tun: entered allmulticast mode [ 234.312554][ T6444] syz_tun: left allmulticast mode [ 234.423672][ T6458] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 234.466133][ T6461] netlink: 'syz.3.833': attribute type 3 has an invalid length. [ 234.509415][ T6466] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 234.520423][ T6466] netlink: 224 bytes leftover after parsing attributes in process `syz.3.835'. [ 234.610320][ T6479] netlink: 'syz.3.841': attribute type 3 has an invalid length. [ 234.635035][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 234.646386][ T6481] netlink: 'syz.3.842': attribute type 22 has an invalid length. [ 234.657361][ T6481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.842'. [ 234.796731][ T6490] netlink: 84 bytes leftover after parsing attributes in process `syz.3.846'. [ 235.812186][ T6658] tipc: Enabled bearer , priority 0 [ 235.826353][ T6658] syzkaller0: entered promiscuous mode [ 235.833903][ T6658] syzkaller0: entered allmulticast mode [ 235.843244][ T6658] tipc: Resetting bearer [ 235.863166][ T6656] tipc: Resetting bearer [ 235.876993][ T6656] tipc: Disabling bearer [ 236.088116][ T6688] netlink: 'syz.2.930': attribute type 22 has an invalid length. [ 236.798085][ T6788] tipc: Enabled bearer , priority 0 [ 236.809673][ T6788] syzkaller0: entered promiscuous mode [ 236.815392][ T6788] syzkaller0: entered allmulticast mode [ 236.835628][ T6788] tipc: Resetting bearer [ 236.849596][ T6787] tipc: Resetting bearer [ 236.872674][ T6787] tipc: Disabling bearer [ 236.952508][ T6804] netlink: 'syz.5.979': attribute type 44 has an invalid length. [ 237.075806][ T6815] syzkaller0: entered promiscuous mode [ 237.082843][ T6815] syzkaller0: entered allmulticast mode [ 237.255942][ T6842] tipc: Started in network mode [ 237.268027][ T6842] tipc: Node identity de3effa25c7d, cluster identity 4711 [ 237.279129][ T6842] tipc: Enabled bearer , priority 0 [ 237.289003][ T6842] syzkaller0: entered promiscuous mode [ 237.295975][ T6842] syzkaller0: entered allmulticast mode [ 237.309855][ T6842] tipc: Resetting bearer [ 237.319935][ T6841] tipc: Resetting bearer [ 237.333994][ T6841] tipc: Disabling bearer [ 237.557037][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 237.557054][ T28] audit: type=1400 audit(1784216843.899:568): avc: denied { write } for pid=6847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.670755][ T28] audit: type=1400 audit(1784216844.019:569): avc: denied { write } for pid=6889 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.709879][ T6891] __nla_validate_parse: 8 callbacks suppressed [ 237.709930][ T6891] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1014'. [ 237.874361][ T28] audit: type=1400 audit(1784216844.209:570): avc: denied { write } for pid=6901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.918892][ T28] audit: type=1400 audit(1784216844.259:571): avc: denied { write } for pid=6924 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.982206][ T6931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1025'. [ 238.052502][ T28] audit: type=1400 audit(1784216844.399:572): avc: denied { ioctl } for pid=6938 comm="syz.2.1029" path="socket:[15727]" dev="sockfs" ino=15727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.114214][ T28] audit: type=1400 audit(1784216844.459:573): avc: denied { write } for pid=6938 comm="syz.2.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.207797][ T6954] syzkaller0: entered promiscuous mode [ 238.215666][ T6954] syzkaller0: entered allmulticast mode [ 238.641248][ T6971] syzkaller0: entered promiscuous mode [ 238.652618][ T6971] syzkaller0: entered allmulticast mode [ 238.966361][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 239.028760][ T28] audit: type=1400 audit(1784216845.359:574): avc: denied { bind } for pid=6998 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.103159][ T28] audit: type=1400 audit(1784216845.369:575): avc: denied { accept } for pid=6998 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.150196][ T7003] validate_nla: 1 callbacks suppressed [ 239.150221][ T7003] netlink: 'syz.3.1055': attribute type 1 has an invalid length. [ 239.213402][ T28] audit: type=1400 audit(1784216845.369:576): avc: denied { write } for pid=6998 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.235482][ T28] audit: type=1400 audit(1784216845.419:577): avc: denied { read } for pid=6998 comm="syz.5.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.267838][ T7003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.277012][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 239.313330][ T7008] bond1: (slave veth0_to_bond): making interface the new active one [ 239.324349][ T7008] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 239.363548][ T7006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1047'. [ 239.383936][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1047'. [ 239.394643][ T7006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1047'. [ 239.718634][ T7029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1063'. [ 239.774402][ T7027] syzkaller0: entered promiscuous mode [ 239.786181][ T7027] syzkaller0: entered allmulticast mode [ 239.946570][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 240.262730][ T7062] syzkaller0: entered promiscuous mode [ 240.269534][ T7062] syzkaller0: entered allmulticast mode [ 240.434956][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 241.002045][ T7083] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 241.017467][ T7083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.043670][ T7083] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 243.186473][ T7056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.328431][ T7122] __nla_validate_parse: 3 callbacks suppressed [ 243.328449][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 243.345436][ T7120] netlink: 'syz.4.1099': attribute type 1 has an invalid length. [ 243.368028][ T7120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.417706][ T7126] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1098'. [ 243.417710][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 243.445967][ T7120] bond1: (slave veth0_to_bond): Releasing active interface [ 243.472833][ T7120] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 243.485180][ T7130] bond0: entered promiscuous mode [ 243.490452][ T7130] bond_slave_0: entered promiscuous mode [ 243.496453][ T7130] bond_slave_1: entered promiscuous mode [ 243.512845][ T7130] bond0: left promiscuous mode [ 243.517927][ T7130] bond_slave_0: left promiscuous mode [ 243.544244][ T7130] bond_slave_1: left promiscuous mode [ 243.575580][ T7132] bond0: entered promiscuous mode [ 243.606630][ T7132] bond_slave_0: entered promiscuous mode [ 243.631211][ T7132] bond_slave_1: entered promiscuous mode [ 243.642562][ T7132] bond0: left promiscuous mode [ 243.647539][ T7132] bond_slave_0: left promiscuous mode [ 243.653955][ T7132] bond_slave_1: left promiscuous mode [ 243.686447][ T7138] syzkaller0: entered promiscuous mode [ 243.692569][ T7138] syzkaller0: entered allmulticast mode [ 243.706976][ T7141] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 243.722130][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 243.755560][ T7140] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1108'. [ 243.878744][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 243.878761][ T28] audit: type=1400 audit(1784216850.219:579): avc: denied { listen } for pid=7143 comm="syz.2.1110" lport=40413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.014510][ T7158] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 244.030355][ T7158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.047941][ T7158] bond1: (slave veth0_to_bond): Releasing active interface [ 244.062977][ T7158] bond2: (slave veth0_to_bond): making interface the new active one [ 244.072504][ T7158] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 244.126250][ T7159] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1109'. [ 244.145534][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 244.157844][ T7165] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1118'. [ 244.193517][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'. [ 244.377931][ T7184] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 244.412399][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 244.546621][ T28] audit: type=1400 audit(1784216850.889:580): avc: denied { write } for pid=7173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.645084][ T28] audit: type=1400 audit(1784216850.989:581): avc: denied { write } for pid=7206 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.738598][ T7214] netlink: 'syz.5.1133': attribute type 44 has an invalid length. [ 244.965466][ T7231] netlink: 'syz.5.1140': attribute type 3 has an invalid length. [ 245.343527][ T7258] netlink: 'syz.2.1150': attribute type 1 has an invalid length. [ 245.399214][ T7258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.440401][ T7253] bond2: (slave veth0_to_bond): making interface the new active one [ 245.452373][ T7253] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 245.547517][ T28] audit: type=1400 audit(1784216851.889:582): avc: denied { write } for pid=7246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.596840][ T28] audit: type=1400 audit(1784216851.939:583): avc: denied { write } for pid=7269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.666222][ T7271] vlan2: entered allmulticast mode [ 245.672402][ T7271] bond0: entered allmulticast mode [ 245.678382][ T7271] bond_slave_0: entered allmulticast mode [ 245.697055][ T7271] bond_slave_1: entered allmulticast mode [ 246.009072][ T7295] netlink: 'syz.5.1165': attribute type 22 has an invalid length. [ 246.262957][ T7308] syzkaller0: entered promiscuous mode [ 246.274182][ T7308] syzkaller0: entered allmulticast mode [ 246.493549][ T7327] vlan2: entered allmulticast mode [ 246.505206][ T7327] bond0: entered allmulticast mode [ 246.517368][ T7327] bond_slave_1: entered allmulticast mode [ 246.567329][ T7340] netlink: 'syz.4.1179': attribute type 22 has an invalid length. [ 246.575266][ T7342] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 246.626963][ T7342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.645471][ T7342] bond2: (slave veth0_to_bond): Releasing active interface [ 246.684596][ T7342] bond3: (slave veth0_to_bond): making interface the new active one [ 246.694799][ T7342] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 246.912498][ T7363] syzkaller0: entered promiscuous mode [ 246.918589][ T7363] syzkaller0: entered allmulticast mode [ 247.046009][ T7371] netlink: 'syz.0.1198': attribute type 22 has an invalid length. [ 247.354313][ T7391] tipc: Enabled bearer , priority 0 [ 247.367178][ T7391] tipc: Resetting bearer [ 247.395256][ T7390] tipc: Disabling bearer [ 247.494604][ T7404] netlink: 'syz.2.1212': attribute type 22 has an invalid length. [ 247.791181][ T7424] netlink: 'syz.0.1223': attribute type 1 has an invalid length. [ 247.836917][ T7424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.877887][ T7432] bond3: (slave veth0_to_bond): making interface the new active one [ 247.915893][ T7432] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 247.952222][ T7422] syzkaller0: entered promiscuous mode [ 247.957920][ T7422] syzkaller0: entered allmulticast mode [ 248.383663][ T7468] __nla_validate_parse: 17 callbacks suppressed [ 248.383694][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 248.408662][ T7468] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1243'. [ 248.489836][ T7472] syzkaller0: entered promiscuous mode [ 248.497405][ T7472] syzkaller0: entered allmulticast mode [ 248.560881][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 248.657903][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1250'. [ 248.774563][ T7489] syzkaller0: entered promiscuous mode [ 248.787078][ T7489] syzkaller0: entered allmulticast mode [ 248.835825][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 248.858553][ T7497] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1256'. [ 249.068121][ T7504] syzkaller0: entered promiscuous mode [ 249.079433][ T7504] syzkaller0: entered allmulticast mode [ 249.542177][ T7529] validate_nla: 2 callbacks suppressed [ 249.542195][ T7529] netlink: 'syz.4.1272': attribute type 3 has an invalid length. [ 249.558762][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 249.587102][ T7532] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1270'. [ 250.681495][ T7610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'. [ 250.816818][ T28] audit: type=1400 audit(1784216857.159:584): avc: denied { ioctl } for pid=7616 comm="syz.3.1307" path="socket:[18692]" dev="sockfs" ino=18692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 250.858742][ T7617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.879777][ T7617] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1307'. [ 251.310303][ T7654] vlan2: entered allmulticast mode [ 251.315534][ T7654] bond0: entered allmulticast mode [ 251.322159][ T7654] bond_slave_0: entered allmulticast mode [ 251.328007][ T7654] bond_slave_1: entered allmulticast mode [ 251.432182][ T7664] syzkaller0: entered promiscuous mode [ 251.438246][ T7664] syzkaller0: entered allmulticast mode [ 251.484633][ T7667] netlink: 'syz.3.1326': attribute type 13 has an invalid length. [ 251.670636][ T7671] tipc: Started in network mode [ 251.680001][ T7671] tipc: Node identity , cluster identity 4711 [ 251.688198][ T7671] tipc: Failed to obtain node identity [ 251.694324][ T7671] tipc: Enabling of bearer rejected, failed to enable media [ 251.705223][ T7667] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 251.717966][ T7667] syzkaller0: entered promiscuous mode [ 251.735216][ T7667] syzkaller0: entered allmulticast mode [ 251.834146][ T7682] vlan2: entered allmulticast mode [ 251.839746][ T7682] bond0: entered allmulticast mode [ 251.845204][ T7682] bond_slave_0: entered allmulticast mode [ 251.852857][ T7682] bond_slave_1: entered allmulticast mode [ 252.321884][ T7718] tipc: Started in network mode [ 252.332059][ T7718] tipc: Node identity 16427c2c14c3, cluster identity 4711 [ 252.376630][ T7718] tipc: Enabled bearer , priority 0 [ 252.410332][ T7718] tipc: Resetting bearer [ 252.424011][ T7717] tipc: Disabling bearer [ 253.022514][ T7760] tipc: Enabled bearer , priority 0 [ 253.087277][ T7760] tipc: Resetting bearer [ 253.130147][ T7758] tipc: Disabling bearer [ 253.163040][ T7768] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 253.182460][ T7763] syzkaller0: entered promiscuous mode [ 253.196470][ T7763] syzkaller0: entered allmulticast mode [ 253.432714][ T7796] __nla_validate_parse: 5 callbacks suppressed [ 253.432741][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1376'. [ 253.653989][ T7808] tipc: Enabled bearer , priority 0 [ 253.695659][ T7804] tipc: Resetting bearer [ 253.719535][ T7803] tipc: Disabling bearer [ 253.778617][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 253.821653][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1387'. [ 253.943627][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1390'. [ 253.956734][ T7831] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1390'. [ 254.454103][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1404'. [ 254.468737][ T7865] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1404'. [ 254.618598][ T7876] tipc: Started in network mode [ 254.642433][ T7876] tipc: Node identity d6969913edd4, cluster identity 4711 [ 254.664804][ T7876] tipc: Enabled bearer , priority 0 [ 254.799525][ T7876] tipc: Resetting bearer [ 254.812740][ T7875] tipc: Disabling bearer [ 255.024838][ T7899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1416'. [ 255.035838][ T7899] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1416'. [ 255.333027][ T7928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1421'. [ 256.051295][ T7974] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 256.065684][ T7974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.078764][ T7974] bond2: (slave veth0_to_bond): Releasing active interface [ 256.093332][ T7974] bond3: (slave veth0_to_bond): making interface the new active one [ 256.136354][ T7974] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 256.359183][ T7990] syzkaller0: entered promiscuous mode [ 256.374424][ T7990] syzkaller0: entered allmulticast mode [ 256.701510][ T8005] syzkaller0: entered promiscuous mode [ 256.715784][ T8005] syzkaller0: entered allmulticast mode [ 257.208873][ T8042] bridge1: entered promiscuous mode [ 257.222735][ T8042] bridge1: entered allmulticast mode [ 257.249519][ T8042] team0: Port device bridge1 added [ 257.366757][ T23] IPVS: starting estimator thread 0... [ 257.447394][ T8067] syzkaller0: entered promiscuous mode [ 257.455753][ T8067] syzkaller0: entered allmulticast mode [ 257.461905][ T8065] IPVS: using max 2256 ests per chain, 112800 per kthread [ 257.474779][ T8050] bridge2: entered promiscuous mode [ 257.480734][ T8050] bridge2: entered allmulticast mode [ 257.490388][ T8050] team0: Port device bridge2 added [ 257.595090][ T8056] syzkaller0: entered promiscuous mode [ 257.600804][ T8056] syzkaller0: entered allmulticast mode [ 258.173869][ T8119] syzkaller0: entered promiscuous mode [ 258.179919][ T8119] syzkaller0: entered allmulticast mode [ 258.452212][ T8139] __nla_validate_parse: 5 callbacks suppressed [ 258.452230][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1510'. [ 258.472985][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1510'. [ 258.860469][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 258.881159][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1521'. [ 259.313338][ T8180] bridge3: entered promiscuous mode [ 259.332521][ T8180] bridge3: entered allmulticast mode [ 259.362021][ T8180] team0: Port device bridge3 added [ 260.083128][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 260.121519][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1533'. [ 260.192909][ T8200] syzkaller0: entered promiscuous mode [ 260.198659][ T8200] syzkaller0: entered allmulticast mode [ 260.417675][ T8069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.558248][ T8218] tipc: Enabling of bearer rejected, failed to enable media [ 260.609683][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'. [ 260.658437][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1545'. [ 260.696905][ T8228] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1545'. [ 260.761585][ T8231] syzkaller0: entered promiscuous mode [ 260.774330][ T8231] syzkaller0: entered allmulticast mode [ 260.996466][ T28] audit: type=1400 audit(1784216867.339:585): avc: denied { setopt } for pid=8242 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 261.085723][ T8259] tipc: Enabled bearer , priority 0 [ 261.096220][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 261.108062][ T8259] tipc: Resetting bearer [ 261.136945][ T8257] tipc: Disabling bearer [ 261.159152][ T8252] bridge1: entered promiscuous mode [ 261.170138][ T8252] bridge1: entered allmulticast mode [ 261.185814][ T8252] team0: Port device bridge1 added [ 261.259399][ T3519] IPVS: starting estimator thread 0... [ 261.360525][ T8269] IPVS: using max 2352 ests per chain, 117600 per kthread [ 261.453488][ T8275] syzkaller0: entered promiscuous mode [ 261.460501][ T8275] syzkaller0: entered allmulticast mode [ 261.856723][ T8314] tipc: Enabled bearer , priority 0 [ 261.885407][ T8314] tipc: Resetting bearer [ 261.966748][ T8313] tipc: Disabling bearer [ 262.805840][ T8373] syzkaller0: entered promiscuous mode [ 262.817630][ T28] audit: type=1400 audit(1784216869.159:586): avc: denied { ioctl } for pid=8378 comm="syz.0.1606" path="socket:[16360]" dev="sockfs" ino=16360 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.844797][ T8373] syzkaller0: entered allmulticast mode [ 263.456135][ C1] ================================================================== [ 263.464362][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 263.471667][ C1] [ 263.474191][ C1] read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 0: [ 263.482482][ C1] can_can_gw_rcv+0x812/0x820 [ 263.488782][ C1] can_rcv_filter+0xc3/0x480 [ 263.494554][ C1] can_receive+0x13e/0x190 [ 263.500000][ C1] can_rcv+0x17d/0x1f0 [ 263.505104][ C1] process_backlog+0x354/0x680 [ 263.510127][ C1] __napi_poll+0x61/0x300 [ 263.514584][ C1] net_rx_action+0x456/0x930 [ 263.519387][ C1] handle_softirqs+0xb9/0x280 [ 263.524727][ C1] do_softirq+0x45/0x60 [ 263.529916][ C1] __local_bh_enable_ip+0x70/0x80 [ 263.534978][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 263.540734][ C1] netif_set_real_num_tx_queues+0x46d/0x510 [ 263.546932][ C1] __tun_detach+0x84d/0xbc0 [ 263.553275][ C1] tun_chr_close+0x5a/0x100 [ 263.558766][ C1] __fput+0x29e/0x630 [ 263.562879][ C1] ____fput+0x1c/0x30 [ 263.567406][ C1] task_work_run+0x130/0x1a0 [ 263.574139][ C1] exit_to_user_mode_loop+0x1e4/0x8c0 [ 263.579987][ C1] do_syscall_64+0x23c/0x3c0 [ 263.584699][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.591347][ C1] [ 263.594035][ C1] read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 1: [ 263.603252][ C1] can_can_gw_rcv+0x812/0x820 [ 263.608411][ C1] can_rcv_filter+0xc3/0x480 [ 263.613140][ C1] can_receive+0x13e/0x190 [ 263.617744][ C1] can_rcv+0x17d/0x1f0 [ 263.622649][ C1] process_backlog+0x354/0x680 [ 263.627851][ C1] __napi_poll+0x61/0x300 [ 263.632769][ C1] net_rx_action+0x456/0x930 [ 263.638571][ C1] handle_softirqs+0xb9/0x280 [ 263.644765][ C1] do_softirq+0x45/0x60 [ 263.650441][ C1] __local_bh_enable_ip+0x70/0x80 [ 263.656879][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 263.662352][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 263.670488][ C1] process_scheduled_works+0x4d4/0x9a0 [ 263.676354][ C1] worker_thread+0x569/0x750 [ 263.681798][ C1] kthread+0x221/0x270 [ 263.686138][ C1] ret_from_fork+0x146/0x330 [ 263.691432][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.696843][ C1] [ 263.699182][ C1] value changed: 0x00130c14 -> 0x00130c15 [ 263.705428][ C1] [ 263.708118][ C1] Reported by Kernel Concurrency Sanitizer on: [ 263.715140][ C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(lazy) [ 263.727283][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 263.738973][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 263.747452][ C1] ================================================================== [ 266.649888][ C1] ================================================================== [ 266.658273][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 266.665748][ C1] [ 266.668071][ C1] read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 0: [ 266.676154][ C1] can_can_gw_rcv+0x812/0x820 [ 266.680879][ C1] can_rcv_filter+0xc3/0x480 [ 266.686107][ C1] can_receive+0x13e/0x190 [ 266.690561][ C1] can_rcv+0x17d/0x1f0 [ 266.694925][ C1] process_backlog+0x354/0x680 [ 266.699758][ C1] __napi_poll+0x61/0x300 [ 266.704109][ C1] net_rx_action+0x456/0x930 [ 266.708715][ C1] handle_softirqs+0xb9/0x280 [ 266.713401][ C1] do_softirq+0x45/0x60 [ 266.717572][ C1] __local_bh_enable_ip+0x70/0x80 [ 266.722731][ C1] __alloc_skb+0x6b1/0x6f0 [ 266.727199][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 266.732867][ C1] process_scheduled_works+0x4d4/0x9a0 [ 266.738393][ C1] worker_thread+0x569/0x750 [ 266.743193][ C1] kthread+0x221/0x270 [ 266.747274][ C1] ret_from_fork+0x146/0x330 [ 266.751908][ C1] ret_from_fork_asm+0x1a/0x30 [ 266.756703][ C1] [ 266.759034][ C1] read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 1: [ 266.767104][ C1] can_can_gw_rcv+0x812/0x820 [ 266.771798][ C1] can_rcv_filter+0xc3/0x480 [ 266.776417][ C1] can_receive+0x13e/0x190 [ 266.780950][ C1] can_rcv+0x17d/0x1f0 [ 266.785317][ C1] process_backlog+0x354/0x680 [ 266.790129][ C1] __napi_poll+0x61/0x300 [ 266.794851][ C1] net_rx_action+0x456/0x930 [ 266.799641][ C1] handle_softirqs+0xb9/0x280 [ 266.804347][ C1] run_ksoftirqd+0x1c/0x30 [ 266.808799][ C1] smpboot_thread_fn+0x32a/0x510 [ 266.813776][ C1] kthread+0x221/0x270 [ 266.817941][ C1] ret_from_fork+0x146/0x330 [ 266.822550][ C1] ret_from_fork_asm+0x1a/0x30 [ 266.827345][ C1] [ 266.829715][ C1] value changed: 0x0016884b -> 0x0016884c [ 266.835963][ C1] [ 266.838324][ C1] Reported by Kernel Concurrency Sanitizer on: [ 266.844484][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(lazy) [ 266.854226][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 266.865131][ C1] ================================================================== [ 269.934875][ C0] ================================================================== [ 269.943528][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 269.951776][ C0] [ 269.954200][ C0] read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 1: [ 269.963678][ C0] can_can_gw_rcv+0x812/0x820 [ 269.968513][ C0] can_rcv_filter+0xc3/0x480 [ 269.973396][ C0] can_receive+0x13e/0x190 [ 269.977837][ C0] can_rcv+0x17d/0x1f0 [ 269.982014][ C0] process_backlog+0x354/0x680 [ 269.987071][ C0] __napi_poll+0x61/0x300 [ 269.991583][ C0] net_rx_action+0x456/0x930 [ 269.996195][ C0] handle_softirqs+0xb9/0x280 [ 270.000886][ C0] do_softirq+0x45/0x60 [ 270.005063][ C0] __local_bh_enable_ip+0x70/0x80 [ 270.010191][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 270.015225][ C0] packet_poll+0x225/0x310 [ 270.019763][ C0] sock_poll+0x21c/0x240 [ 270.024031][ C0] do_sys_poll+0x6e1/0xc00 [ 270.029873][ C0] __se_sys_ppoll+0x1e2/0x220 [ 270.034575][ C0] __x64_sys_ppoll+0x67/0x80 [ 270.039187][ C0] x64_sys_call+0x28d3/0x3020 [ 270.044149][ C0] do_syscall_64+0x136/0x3c0 [ 270.048778][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.054769][ C0] [ 270.057112][ C0] read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 0: [ 270.065267][ C0] can_can_gw_rcv+0x812/0x820 [ 270.070049][ C0] can_rcv_filter+0xc3/0x480 [ 270.074956][ C0] can_receive+0x13e/0x190 [ 270.079972][ C0] can_rcv+0x17d/0x1f0 [ 270.084099][ C0] process_backlog+0x354/0x680 [ 270.088919][ C0] __napi_poll+0x61/0x300 [ 270.093443][ C0] net_rx_action+0x456/0x930 [ 270.098056][ C0] handle_softirqs+0xb9/0x280 [ 270.102842][ C0] do_softirq+0x45/0x60 [ 270.107088][ C0] __local_bh_enable_ip+0x70/0x80 [ 270.112472][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 270.117419][ C0] batadv_tt_local_purge+0x1a7/0x1f0 [ 270.123368][ C0] batadv_tt_purge+0x2b/0x610 [ 270.128239][ C0] process_scheduled_works+0x4d4/0x9a0 [ 270.133723][ C0] worker_thread+0x569/0x750 [ 270.138343][ C0] kthread+0x221/0x270 [ 270.143144][ C0] ret_from_fork+0x146/0x330 [ 270.147985][ C0] ret_from_fork_asm+0x1a/0x30 [ 270.152818][ C0] [ 270.155195][ C0] value changed: 0x001adcd0 -> 0x001adcd1 [ 270.161180][ C0] [ 270.164535][ C0] Reported by Kernel Concurrency Sanitizer on: [ 270.171737][ C0] CPU: 0 UID: 0 PID: 8386 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(lazy) [ 270.181830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 270.191988][ C0] Workqueue: bat_events batadv_tt_purge [ 270.197559][ C0] ================================================================== [ 273.102852][ C0] ================================================================== [ 273.111079][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 273.119031][ C0] [ 273.121412][ C0] read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 1: [ 273.129497][ C0] can_can_gw_rcv+0x812/0x820 [ 273.134186][ C0] can_rcv_filter+0xc3/0x480 [ 273.138854][ C0] can_receive+0x13e/0x190 [ 273.143379][ C0] can_rcv+0x17d/0x1f0 [ 273.147597][ C0] process_backlog+0x354/0x680 [ 273.152471][ C0] __napi_poll+0x61/0x300 [ 273.156828][ C0] net_rx_action+0x456/0x930 [ 273.161445][ C0] handle_softirqs+0xb9/0x280 [ 273.166169][ C0] do_softirq+0x45/0x60 [ 273.170338][ C0] __local_bh_enable_ip+0x70/0x80 [ 273.175364][ C0] __alloc_skb+0x6b1/0x6f0 [ 273.179811][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 273.185459][ C0] process_scheduled_works+0x4d4/0x9a0 [ 273.191023][ C0] worker_thread+0x569/0x750 [ 273.196095][ C0] kthread+0x221/0x270 [ 273.200258][ C0] ret_from_fork+0x146/0x330 [ 273.205220][ C0] ret_from_fork_asm+0x1a/0x30 [ 273.210020][ C0] [ 273.212361][ C0] read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 0: [ 273.220442][ C0] can_can_gw_rcv+0x812/0x820 [ 273.225148][ C0] can_rcv_filter+0xc3/0x480 [ 273.229765][ C0] can_receive+0x13e/0x190 [ 273.234987][ C0] can_rcv+0x17d/0x1f0 [ 273.239079][ C0] process_backlog+0x354/0x680 [ 273.243851][ C0] __napi_poll+0x61/0x300 [ 273.248281][ C0] net_rx_action+0x456/0x930 [ 273.252885][ C0] handle_softirqs+0xb9/0x280 [ 273.257576][ C0] do_softirq+0x45/0x60 [ 273.261744][ C0] __local_bh_enable_ip+0x70/0x80 [ 273.266782][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 273.271737][ C0] addrconf_ifdown+0x3ba/0xf70 [ 273.276541][ C0] addrconf_notify+0x214/0x8e0 [ 273.281420][ C0] raw_notifier_call_chain+0x72/0x1a0 [ 273.287081][ C0] unregister_netdevice_many_notify+0xe1a/0x1550 [ 273.293448][ C0] unregister_netdevice_queue+0x1cd/0x200 [ 273.299472][ C0] __tun_detach+0x903/0xbc0 [ 273.304091][ C0] tun_chr_close+0x5a/0x100 [ 273.308609][ C0] __fput+0x29e/0x630 [ 273.312607][ C0] ____fput+0x1c/0x30 [ 273.316605][ C0] task_work_run+0x130/0x1a0 [ 273.321204][ C0] exit_to_user_mode_loop+0x1e4/0x8c0 [ 273.326594][ C0] do_syscall_64+0x23c/0x3c0 [ 273.331683][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.337691][ C0] [ 273.340044][ C0] value changed: 0x001ee878 -> 0x001ee879 [ 273.345758][ C0] [ 273.348184][ C0] Reported by Kernel Concurrency Sanitizer on: [ 273.355294][ C0] CPU: 0 UID: 0 PID: 8372 Comm: syz.3.1605 Not tainted syzkaller #0 PREEMPT(lazy) [ 273.365199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 273.375618][ C0] ==================================================================