last executing test programs: 3m18.137734146s ago: executing program 32 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x8000000, {0x80, 0x20, 0x90, 0x0, 0x1, 0x12, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048085}, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:dri_device_t:s0\x00', 0x22) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) 3m14.156460321s ago: executing program 33 (id=183): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2m24.049738386s ago: executing program 34 (id=1701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000003240)={@val={0x8, 0xf8}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x4000000000000100, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) 2m20.488163814s ago: executing program 35 (id=1742): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000280), 0x0}, 0x20) 2m16.346206883s ago: executing program 36 (id=1815): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001200)=""/212, 0xd4}], 0x1}, 0x162) 2m14.325521373s ago: executing program 37 (id=1575): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1m58.797364426s ago: executing program 38 (id=2218): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)="11", 0x1) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) 1m55.774235545s ago: executing program 39 (id=2282): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 1m52.168906695s ago: executing program 40 (id=2349): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000780)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x18d) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x1) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 1m47.607913051s ago: executing program 3 (id=2458): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000000c0)='./file2\x00', 0x0, 0x4008, r0}, 0x18) r1 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1m47.373906431s ago: executing program 3 (id=2463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000088a80000810040000800458e0034006400ef9506"], 0x4a) 1m47.207065176s ago: executing program 3 (id=2465): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010004"], 0x408100) 1m47.125891593s ago: executing program 3 (id=2466): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000c00)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x42000, 0x0) sync_file_range(r0, 0x9, 0x40000fe, 0x7) 1m47.05347732s ago: executing program 3 (id=2468): timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x40a9, &(0x7f00000002c0)="$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") timer_gettime(r0, 0x0) timer_gettime(r0, &(0x7f0000000000)) 1m46.720108319s ago: executing program 3 (id=2474): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0x83, 0x0, 0x7, 0x0, @dev, @rand_addr=' \x01\x00', 0x0, 0x7, 0x9}}) 1m46.679750103s ago: executing program 41 (id=2474): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0x83, 0x0, 0x7, 0x0, @dev, @rand_addr=' \x01\x00', 0x0, 0x7, 0x9}}) 1m35.047908486s ago: executing program 7 (id=2741): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m35.028880538s ago: executing program 7 (id=2742): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, &(0x7f0000000080)) 1m34.975602903s ago: executing program 7 (id=2744): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_cmd={0x19, 0x0, 0x8, 0x2, 0x37, 0x19, 0x60, 0x2, 0x0, 0xf8, 0x5, 0x6, 0xffff, 0xa, 0x4e, 0x5, [0x4, 0x4]}}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x20, 0x0) 1m34.920120488s ago: executing program 7 (id=2747): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m34.89309735s ago: executing program 7 (id=2749): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r0, r1, 0x0, 0x12, &(0x7f0000000380)='}\'}\xdc\\\'@)].\\+}\'-\xe5%\x00'}, 0x30) 1m34.6689054s ago: executing program 7 (id=2760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x800000}, 0x1c) 1m34.633185633s ago: executing program 42 (id=2760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x800000}, 0x1c) 1m6.162955982s ago: executing program 5 (id=3472): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 1m6.126747916s ago: executing program 5 (id=3475): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4000) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000002a40)=""/4096, &(0x7f0000003a40)=0x1000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000003d00)={0x6, 'pim6reg1\x00', {0x97}}) 1m6.069994191s ago: executing program 5 (id=3476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup, r2, 0x37, 0x4, 0x0, @void, @value=r2}, 0x20) 1m6.028780285s ago: executing program 5 (id=3477): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m5.96923761s ago: executing program 5 (id=3480): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r1 = open(&(0x7f0000000540)='./file2\x00', 0x108843, 0x11f) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 1m5.86188652s ago: executing program 5 (id=3484): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_adjtime(0x0, 0x0) 1m5.84952044s ago: executing program 43 (id=3484): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_adjtime(0x0, 0x0) 31.590456184s ago: executing program 2 (id=4539): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0x0) 31.487370153s ago: executing program 2 (id=4542): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x42758, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000380)={r1, 0x1, 0x6, @broadcast}, 0x7d) 31.40345399s ago: executing program 2 (id=4549): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x533, &(0x7f0000000880)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oC6GKso43bVT1AOWEKlQJ0SNIqbE3VpTdrJVdl9pEwj1zRaISJzjyB3DuiTsXBDcu5YDEDwtUI3EYNLNjZ2Pv2k7j9Vq7n4802vfmjef7Xpx5b+btel8AE+tKRGxHxExEvB8RC+X+pNzi7e6WH/fZzsOV3Z2HK0lk2Xv/TIryfF/0/EzuUnnOuYj4wXcjfpwcjtve3Lq33GjUH5T5xU5zfbG9uXX9bnN5rb5Wv1+r3Vq6dePNm2/UnqA1c0eWvtScKVNf/fQP26/9NK/WfLmntx2nqdv0yn6c3HREfG8YwUZgqmzPzKgrwueSRsTzEfFycf0vxFTx2zzOO6+dQdUAgCHJsoXIFnrzAMC4S4s5sCStlnMB85Gm1Wp3Du+FuJg2Wu3OtTutjfur3bmyy1FJ79xt1G+Uc4WXo5Lk+aUi/ShfO5C/GRHPRcQvZi8U+epKq7E6yhsfAJhglw6M//+Z7Y7/AMCYO/pjMwDAODL+A8DkMf4DwOQx/gPA5OmO/xee9MeyLPvZMKoDAJwBz/8AMHmM/wAwUb7/7rv5lu2W33+9+sHmxr3WB9dX6+171ebGSnWl9WC9utZqrRXf2dM87nyNVmt96fXY+PDyt9bbncX25tbtZmvjfud28b3et+uV4qjtM2gZADDIcy998uckH5HfulBs0bOWQ2WkNQOGLR11BYCRmRp1BYCR6a721WeBPmDsPXrGf+IPAZgegDFx3B3AXL8/EMqyLBtelYAhu/ol8/8wqcr5/2mfAobJc9z8f7E2sDcJYSxNH13sEQDGWJYlJ13zP056IABwvh1xg3/5LO9DgNEZ8P7/8+Xrb8s3B360evCIj4dZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjf9tb/rZbL/M5HmlarEc8UCwBVkjt3G/UbEfFsRPxptjKb55dGXGcA4Gmlf0vK9b+uLrw6/1jRi5f2kzMR8ZNfvffLD5c7nQd/jJhJ/jW7t7/zcbm/dmywuWG0AAA42t44Xbz2PMh/tvNwZW87y/r8/Tvdu4I87u7OTOzux5+O6eJ1LioRcfHfSZnvSnrmLp7G9kcR8cV+7U9ivpgD6d6yHIyfx37mlOJPnSh++lj8tFygOS3/Lb5wCnWBSfNJ3v+83e/6S+NK8dr/+p8reqinV/Z/+alWdos+8FH8vf5vakD/d+WkMV7//Tvd1IXDZR9FfHk6Yi/2bk//sxc/GRD/1RPG/8tXXnx5UFn264ir0T9+b6zFTnN9sb25df1uc3mtvla/X6vdWrp1482bb9QWiznqxcGjwT/euvbsoLK8/RcHxJ87pv1fH3TSA0+5v/nf+z/82hHxv/lKv/hpvHBE/HxM/MbAFj9u+eLvBj535/FXD7c/Ocnv/9oJ43/6161Dy4YDAKPT3ty6t9xo1B9ISJz/RP5f9hxUo2/i22cVayb6F/38le41faAoyz5XrEE9xmnMugHnwf5FHxH/HXVlAAAAAAAAAAAAAACAvs7iL5ZG3UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADG1/8DAAD//4wA1F8=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setuid(0xee00) fchown(r0, 0x0, 0xee01) 31.266518593s ago: executing program 2 (id=4553): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b4fb9b81300b11a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 30.934753222s ago: executing program 2 (id=4561): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.377551542s ago: executing program 2 (id=4570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 30.371972842s ago: executing program 44 (id=4570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 18.593498789s ago: executing program 8 (id=4907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) socket(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 18.592786739s ago: executing program 8 (id=4909): syz_open_dev$sg(0x0, 0xe6, 0x2602) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 18.36171174s ago: executing program 8 (id=4915): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000004c0)='m', 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x21) 18.328584582s ago: executing program 8 (id=4916): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 18.263379648s ago: executing program 8 (id=4917): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 17.999781411s ago: executing program 8 (id=4925): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@delalloc}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 17.946742626s ago: executing program 45 (id=4925): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@delalloc}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 1.642597484s ago: executing program 9 (id=5357): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0xc7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.589372389s ago: executing program 6 (id=5360): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000001c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.404576195s ago: executing program 9 (id=5363): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) 1.338711481s ago: executing program 9 (id=5365): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 730.047346ms ago: executing program 6 (id=5374): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) r0 = socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000022c0)={'syztnl2\x00', &(0x7f0000002200)={'gre0\x00', 0x0, 0x6e6fb7a5a8bfab4, 0x7800, 0x1, 0x6f, {{0x5, 0x4, 0x3, 0x38, 0x14, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @remote}}}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 622.876165ms ago: executing program 6 (id=5378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000633277fbac141416ac14141694029f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 581.110569ms ago: executing program 6 (id=5380): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x3, 0x6, @remote}, 0x14) close(0x3) 461.381819ms ago: executing program 1 (id=5382): rename(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1000) 439.468311ms ago: executing program 9 (id=5384): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) r1 = syz_io_uring_setup(0x378c, &(0x7f0000000380)={0x0, 0x4093, 0x10100, 0x10000003, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4126}}) io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0xb68c}, {0x60}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}) 432.072192ms ago: executing program 6 (id=5385): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 420.951863ms ago: executing program 1 (id=5386): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) socket$can_j1939(0x1d, 0x2, 0x7) sendfile(r1, r0, 0x0, 0x578410ed) 396.501295ms ago: executing program 6 (id=5388): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) 372.141127ms ago: executing program 1 (id=5389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x3, 0x300) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0x7a) 262.305107ms ago: executing program 1 (id=5394): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000080)={0xe, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) 261.811697ms ago: executing program 4 (id=5395): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 252.434048ms ago: executing program 1 (id=5396): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 199.719263ms ago: executing program 0 (id=5397): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000900)=""/10, 0xa}], 0x1}, 0xe}], 0x2, 0x10023, 0x0) 186.774674ms ago: executing program 4 (id=5398): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0x13, 0x0, &(0x7f0000000140)={0x11, 0xb, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x6}) 159.178026ms ago: executing program 0 (id=5399): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x7e, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x20054040}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x20c89f, 0x1c881, 0x1, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 157.055596ms ago: executing program 4 (id=5400): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x7, @empty, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) 136.628748ms ago: executing program 0 (id=5401): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) preadv2(r1, 0x0, 0x0, 0x0, 0x101, 0x16) 121.96004ms ago: executing program 4 (id=5402): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdc01, {{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x7, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 109.98577ms ago: executing program 1 (id=5403): unshare(0x60000600) sync() sync() sync() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x1000000, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}]}, 0x24}}, 0x8) 91.678832ms ago: executing program 4 (id=5404): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 91.264602ms ago: executing program 0 (id=5405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 76.012573ms ago: executing program 9 (id=5406): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000080)='./file1\x00', 0xc8141, 0x5) fcntl$setlease(r2, 0x400, 0x0) 39.547347ms ago: executing program 0 (id=5407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 15.914249ms ago: executing program 4 (id=5408): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 10.88359ms ago: executing program 0 (id=5409): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 9 (id=5410): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0xa1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write$tun(r0, &(0x7f00000004c0)={@void, @void, @mpls={[], @ipv6=@gre_packet={0xd, 0x6, "ec10fb", 0x44, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x7, 0x1, 0x8, 0x2, 0x0, 0x0, 0x5, 0x4}, 0x1, {0x8000}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x8, 0x0, 0x1, 0x1, 0x7, 0x4c}, 0x2, {0xfffffff8, 0x597, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x6c) kernel console output (not intermixed with test programs): : no params data found [ 184.645651][T14327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.669955][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.698094][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.728849][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.744863][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.844978][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 184.845016][ T28] audit: type=1400 audit(1771532245.624:1500): avc: denied { execute } for pid=14651 comm="syz.4.3485" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=115299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 185.054950][ T28] audit: type=1400 audit(1771532245.834:1501): avc: denied { accept } for pid=14685 comm="syz.1.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.237213][T14710] netlink: 796 bytes leftover after parsing attributes in process `syz.2.3567'. [ 185.380462][T14720] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3569'. [ 185.439944][ T28] audit: type=1400 audit(1771532246.214:1502): avc: denied { create } for pid=14726 comm="syz.2.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 185.500656][ T28] audit: type=1400 audit(1771532246.244:1503): avc: denied { ioctl } for pid=14726 comm="syz.2.3571" path="socket:[116017]" dev="sockfs" ino=116017 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 185.613511][ T28] audit: type=1400 audit(1771532246.384:1504): avc: denied { bind } for pid=14747 comm="syz.2.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.770887][T14759] batadv_slave_1: entered promiscuous mode [ 185.787185][T14758] batadv_slave_1: left promiscuous mode [ 185.854212][T14765] tipc: Started in network mode [ 185.869229][T14765] tipc: Node identity ac14140f, cluster identity 4711 [ 185.888254][ T28] audit: type=1400 audit(1771532246.664:1505): avc: denied { connect } for pid=14768 comm="syz.1.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.910345][T14765] tipc: Enabled bearer , priority 10 [ 186.013754][T14783] loop2: detected capacity change from 0 to 256 [ 186.034805][T14783] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.084380][T14783] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.122050][T14790] xt_hashlimit: size too large, truncated to 1048576 [ 186.283900][T14807] loop2: detected capacity change from 0 to 256 [ 186.390077][ T28] audit: type=1400 audit(1771532247.164:1506): avc: denied { setopt } for pid=14817 comm="syz.1.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.623294][T14838] netlink: 'syz.9.3599': attribute type 1 has an invalid length. [ 186.697165][ T28] audit: type=1400 audit(1771532247.474:1507): avc: denied { bind } for pid=14845 comm="syz.9.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.723919][ T28] audit: type=1400 audit(1771532247.474:1508): avc: denied { write } for pid=14845 comm="syz.9.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.808499][ T28] audit: type=1400 audit(1771532247.584:1509): avc: denied { mounton } for pid=14854 comm="syz.1.3604" path="/309/file0" dev="tmpfs" ino=1606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 187.023451][ T35] tipc: Node number set to 2886997007 [ 187.120812][T14887] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3618'. [ 187.380526][T14914] loop4: detected capacity change from 0 to 1024 [ 187.431649][T14914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.474762][T14914] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.3628: inode #779706732: comm syz.4.3628: iget: illegal inode # [ 187.509488][T14914] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3628: error while reading EA inode 779706732 err=-117 [ 187.565518][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.803750][T14940] bridge1: entered promiscuous mode [ 187.815696][T14940] bridge1: entered allmulticast mode [ 187.830196][T14940] team0: Port device bridge1 added [ 187.856627][T14941] bridge0: port 3(team0) entered blocking state [ 187.867900][T14941] bridge0: port 3(team0) entered disabled state [ 187.874969][T14941] team0: entered allmulticast mode [ 187.880336][T14941] team_slave_0: entered allmulticast mode [ 187.887870][T14941] team_slave_1: entered allmulticast mode [ 187.894599][T14941] team0: entered promiscuous mode [ 187.899808][T14941] team_slave_0: entered promiscuous mode [ 187.905649][T14941] team_slave_1: entered promiscuous mode [ 187.920506][T14946] loop2: detected capacity change from 0 to 512 [ 187.944277][T14946] EXT4-fs: Ignoring removed bh option [ 187.950208][T14946] EXT4-fs: inline encryption not supported [ 187.975564][T14946] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.995923][T14946] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 188.023695][T14946] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3640: bg 0: block 248: padding at end of block bitmap is not set [ 188.040145][T14946] loop2: lost filesystem error report for type 5 error -117 [ 188.041915][T14946] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.3640: Failed to acquire dquot type 1 [ 188.049532][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 188.049556][ C1] EXT4-fs (loop2): last error at time 1771532248: ext4_validate_block_bitmap:441 [ 188.077623][T14946] loop2: lost filesystem error report for type 5 error -117 [ 188.083757][T14946] EXT4-fs (loop2): 1 truncate cleaned up [ 188.123804][T14946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 188.326214][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 188.473941][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3656'. [ 188.543995][T14987] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3658'. [ 188.830667][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3670'. [ 189.154426][T15046] loop9: detected capacity change from 0 to 1024 [ 189.190757][T15046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.272585][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.295847][T15058] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3689'. [ 189.406881][T15069] tmpfs: Too small a size for current use [ 189.426179][T15073] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3696'. [ 189.441870][T15073] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3696'. [ 189.455088][T15076] bridge1: entered promiscuous mode [ 189.460328][T15076] bridge1: entered allmulticast mode [ 189.467631][T15076] team0: Port device bridge1 added [ 189.472796][T15073] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3696'. [ 189.485262][T15073] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3696'. [ 189.495350][T15076] bridge0: port 3(team0) entered blocking state [ 189.501786][T15076] bridge0: port 3(team0) entered disabled state [ 189.519136][T15076] team0: entered allmulticast mode [ 189.528863][T15076] team_slave_0: entered allmulticast mode [ 189.538793][T15076] team_slave_1: entered allmulticast mode [ 189.546667][T15076] team0: entered promiscuous mode [ 189.553176][T15076] team_slave_0: entered promiscuous mode [ 189.560254][T15076] team_slave_1: entered promiscuous mode [ 189.566519][T15076] bridge0: port 3(team0) entered blocking state [ 189.572851][T15076] bridge0: port 3(team0) entered forwarding state [ 189.601693][T15090] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 189.655660][T15097] loop9: detected capacity change from 0 to 512 [ 189.666282][T15097] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3708: invalid indirect mapped block 256 (level 2) [ 189.669376][T15100] loop2: detected capacity change from 0 to 736 [ 189.680060][T15097] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.689287][T15097] EXT4-fs (loop9): 2 truncates cleaned up [ 189.698578][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 189.698599][ C0] EXT4-fs (loop9): initial error at time 1771532250: ext4_free_branches:1023: inode 11 [ 189.698642][ C0] EXT4-fs (loop9): last error at time 1771532250: ext4_free_branches:1023: inode 11 [ 189.699467][T15100] rock: directory entry would overflow storage [ 189.705084][T15097] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.753136][T15100] rock: sig=0x3b10, size=4, remaining=3 [ 189.790520][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.982083][T15131] netlink: 'syz.1.3723': attribute type 15 has an invalid length. [ 190.188286][T15160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15160 comm=syz.4.3735 [ 190.225130][T15165] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3738'. [ 190.305612][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 190.305624][ T28] audit: type=1400 audit(1771532251.084:1526): avc: denied { create } for pid=15177 comm="syz.4.3745" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 190.333649][ T28] audit: type=1400 audit(1771532251.084:1527): avc: denied { read write } for pid=15177 comm="syz.4.3745" name="file1" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 190.356961][ T28] audit: type=1400 audit(1771532251.084:1528): avc: denied { open } for pid=15177 comm="syz.4.3745" path="/38/file1" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 190.420764][T15182] pimreg: entered allmulticast mode [ 190.426739][T15182] pimreg: left allmulticast mode [ 190.517403][ T28] audit: type=1326 audit(1771532251.294:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.4.3750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11f133c629 code=0x0 [ 190.913162][T15205] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.099455][ T28] audit: type=1400 audit(1771532251.874:1530): avc: denied { write } for pid=15211 comm="syz.9.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 191.220297][T15231] netlink: 'syz.2.3767': attribute type 1 has an invalid length. [ 191.242764][ T28] audit: type=1400 audit(1771532252.014:1531): avc: denied { create } for pid=15232 comm="syz.2.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.271269][ T28] audit: type=1400 audit(1771532252.044:1532): avc: denied { write } for pid=15232 comm="syz.2.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.388987][T15249] syzkaller1: entered promiscuous mode [ 191.414204][T15249] syzkaller1: entered allmulticast mode [ 191.637127][ T28] audit: type=1400 audit(1771532252.414:1533): avc: denied { write } for pid=15275 comm="syz.9.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.769888][ T28] audit: type=1400 audit(1771532252.544:1534): avc: denied { bind } for pid=15290 comm="syz.6.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.793012][ T28] audit: type=1400 audit(1771532252.574:1535): avc: denied { listen } for pid=15290 comm="syz.6.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.841193][T15295] loop9: detected capacity change from 0 to 512 [ 191.865549][T15295] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.884152][T15295] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.931381][T15295] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 191.953804][T15295] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 191.984654][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.009827][T15311] netlink: 'syz.9.3797': attribute type 30 has an invalid length. [ 192.021546][ T30] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.032739][ T30] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.050452][ T30] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.066285][ T30] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.132188][T15316] loop9: detected capacity change from 0 to 512 [ 192.150766][T15316] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3799: inode has both inline data and extents flags [ 192.171506][T15316] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.183618][T15316] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3799: couldn't read orphan inode 15 (err -117) [ 192.204656][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 192.204677][ C0] EXT4-fs (loop9): initial error at time 1771532252: ext4_orphan_get:1391: inode 15 [ 192.204706][ C0] EXT4-fs (loop9): last error at time 1771532252: ext4_orphan_get:1391: inode 15 [ 192.231189][T15316] loop9: lost filesystem error report for type 5 error -117 [ 192.231576][T15316] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.388024][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.579036][T15352] batadv_slave_0: entered promiscuous mode [ 192.592332][T15351] batadv_slave_0: left promiscuous mode [ 192.704865][ T10] kernel write not supported for file bpf-map (pid: 10 comm: kworker/0:1) [ 193.066449][T15416] sctp: [Deprecated]: syz.2.3842 (pid 15416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.066449][T15416] Use struct sctp_sack_info instead [ 193.163330][T15422] __nla_validate_parse: 3 callbacks suppressed [ 193.163346][T15422] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3845'. [ 193.260247][T15433] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15433 comm=syz.9.3850 [ 193.806229][T15473] loop2: detected capacity change from 0 to 1024 [ 193.813146][T15473] EXT4-fs: inline encryption not supported [ 193.819417][T15473] EXT4-fs: Ignoring removed nobh option [ 193.825116][T15473] EXT4-fs: Ignoring removed bh option [ 193.838606][T15473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.858305][T15473] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 193.885472][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.906257][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.672563][T15539] loop4: detected capacity change from 0 to 512 [ 194.684490][T15539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.718431][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.879782][T15558] loop4: detected capacity change from 0 to 512 [ 194.895393][T15558] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3899: inode has both inline data and extents flags [ 194.908985][T15558] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.909271][T15558] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3899: couldn't read orphan inode 15 (err -117) [ 194.918442][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 194.918480][ C0] EXT4-fs (loop4): initial error at time 1771532255: ext4_orphan_get:1391: inode 15 [ 194.918515][ C0] EXT4-fs (loop4): last error at time 1771532255: ext4_orphan_get:1391: inode 15 [ 194.957642][T15558] loop4: lost filesystem error report for type 5 error -117 [ 194.958149][T15558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 195.002540][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 195.094717][T15570] loop4: detected capacity change from 0 to 512 [ 195.101709][T15570] EXT4-fs: Ignoring removed bh option [ 195.107778][T15570] EXT4-fs: inline encryption not supported [ 195.116425][T15570] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.151264][T15570] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 195.174774][T15570] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3904: bg 0: block 248: padding at end of block bitmap is not set [ 195.193072][T15570] loop4: lost filesystem error report for type 5 error -117 [ 195.193386][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 195.194746][T15570] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.3904: Failed to acquire dquot type 1 [ 195.200687][ C0] EXT4-fs (loop4): last error at time 1771532255: ext4_validate_block_bitmap:441 [ 195.207361][T15570] loop4: lost filesystem error report for type 5 error -117 [ 195.218363][ C0] [ 195.244777][T15570] EXT4-fs (loop4): 1 truncate cleaned up [ 195.250662][T15570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 195.306847][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 195.358174][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3913'. [ 195.381626][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 195.381646][ T28] audit: type=1400 audit(1771532256.154:1572): avc: denied { write } for pid=15594 comm="syz.9.3915" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 195.442442][T15605] loop4: detected capacity change from 0 to 512 [ 195.465640][T15605] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.484750][T15605] EXT4-fs (loop4): 1 truncate cleaned up [ 195.492202][T15605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.503458][ T28] audit: type=1326 audit(1771532256.274:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15611 comm="syz.1.3923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f192866c629 code=0x0 [ 195.559233][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.881558][T15639] loop9: detected capacity change from 0 to 128 [ 195.913608][T10056] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.989413][T15650] loop2: detected capacity change from 0 to 512 [ 196.007793][T15650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.044003][T15650] ext4 filesystem being mounted at /217/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.068299][T15650] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 196.083183][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3941'. [ 196.094029][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3941'. [ 196.129497][T15657] netlink: 'syz.9.3942': attribute type 3 has an invalid length. [ 196.171694][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.600502][T15712] Invalid argument reading file caps for ./file0 [ 196.608347][T15713] loop9: detected capacity change from 0 to 128 [ 196.663647][ T28] audit: type=1326 audit(1771532257.434:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15719 comm="syz.2.3967" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5845c0c629 code=0x0 [ 196.700447][T15726] loop9: detected capacity change from 0 to 512 [ 196.736434][T15726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.751214][T15726] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.819177][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.983531][T15770] netlink: 'syz.4.3979': attribute type 6 has an invalid length. [ 197.012095][T15773] loop9: detected capacity change from 0 to 512 [ 197.021401][T15773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.037013][T15773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 197.048163][T15773] System zones: 1-2, 4-12, 8-8 [ 197.054369][T15780] 9p: Bad value for 'rfdno' [ 197.061698][T15773] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3980: iget: bad i_size value: 38620345925642 [ 197.083231][T15773] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.083387][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 197.096740][T15773] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3980: couldn't read orphan inode 15 (err -117) [ 197.099235][ C0] EXT4-fs (loop9): initial error at time 1771532257: ext4_orphan_get:1391: inode 15 [ 197.099263][ C0] EXT4-fs (loop9): last error at time 1771532257: ext4_orphan_get:1391: inode 15 [ 197.163166][T15773] loop9: lost filesystem error report for type 5 error -117 [ 197.164337][T15773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.191404][ T28] audit: type=1326 audit(1771532257.964:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f133c629 code=0x7ffc0000 [ 197.219321][ T28] audit: type=1326 audit(1771532257.964:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f133c629 code=0x7ffc0000 [ 197.243738][ T28] audit: type=1326 audit(1771532257.964:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f11f133c629 code=0x7ffc0000 [ 197.267296][ T28] audit: type=1326 audit(1771532257.964:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f133c629 code=0x7ffc0000 [ 197.278324][T15802] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3980: bg 0: block 5: invalid block bitmap [ 197.293174][ T28] audit: type=1326 audit(1771532257.964:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f133c629 code=0x7ffc0000 [ 197.309233][T15802] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 197.340566][T15802] EXT4-fs (loop9): This should not happen!! Data will be lost [ 197.340566][T15802] [ 197.358159][T15802] EXT4-fs (loop9): Total free blocks count 0 [ 197.360844][T15805] loop4: detected capacity change from 0 to 512 [ 197.364911][T15802] EXT4-fs (loop9): Free/Dirty block details [ 197.375208][T15805] EXT4-fs: Ignoring removed orlov option [ 197.377911][T15802] EXT4-fs (loop9): free_blocks=0 [ 197.382495][T15805] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.401321][T15802] EXT4-fs (loop9): dirty_blocks=64 [ 197.406948][T15802] EXT4-fs (loop9): Block reservation details [ 197.413011][T15802] EXT4-fs (loop9): i_reserved_data_blocks=64 [ 197.420735][T15805] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 197.422710][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3987'. [ 197.430359][T15805] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3986: attempt to clear invalid blocks 2 len 1 [ 197.438457][T15808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3987'. [ 197.440944][T15808] geneve2: entered promiscuous mode [ 197.465972][T15808] geneve2: entered allmulticast mode [ 197.472188][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.490269][T15805] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 197.490633][T15805] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, [ 197.499986][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 197.500016][ C1] EXT4-fs (loop4): initial error at time 1771532258: ext4_clear_blocks:876: inode 13 [ 197.500051][ C1] EXT4-fs (loop4): last error at time 1771532258: ext4_clear_blocks:876: inode 13 [ 197.502490][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.508421][T15805] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 197.553909][T15805] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3986: invalid indirect mapped block 1819239214 (level 0) [ 197.554879][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.571842][T15805] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 197.580864][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.601052][T15805] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3986: invalid indirect mapped block 1819239214 (level 1) [ 197.621247][T15805] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 197.621768][T15805] EXT4-fs (loop4): 1 truncate cleaned up [ 197.638378][T15805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.657245][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.657337][T15805] EXT4-fs (loop4): shut down requested (2) [ 197.698363][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.750708][ T28] audit: type=1400 audit(1771532258.524:1580): avc: denied { write } for pid=15820 comm="syz.4.3994" name="file0" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.783260][ T28] audit: type=1400 audit(1771532258.554:1581): avc: denied { ioctl } for pid=15820 comm="syz.4.3994" path="/103/file0" dev="tmpfs" ino=553 ioctlcmd=0x70cf scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.074936][T15858] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 198.341696][T15885] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 198.366823][T15885] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 198.380687][T15885] EXT4-fs (loop9): 1 truncate cleaned up [ 198.386854][T15885] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.411445][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.516411][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4024'. [ 198.747487][T15910] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.4030'. [ 198.761936][T15912] io-wq is not configured for unbound workers [ 198.834215][T15916] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 198.844718][T15916] isofs_fill_super: get root inode failed [ 199.015171][T15934] netlink: 35284 bytes leftover after parsing attributes in process `syz.9.4040'. [ 199.220076][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4047'. [ 199.268509][T15972] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.9.4048: corrupted xattr block 95: invalid header [ 199.288425][T15972] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 199.288694][T15972] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4048: bg 0: block 7: invalid block bitmap [ 199.297937][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 199.297964][ C1] EXT4-fs (loop9): initial error at time 1771532260: ext4_expand_extra_isize_ea:2808: inode 11 [ 199.297994][ C1] EXT4-fs (loop9): last error at time 1771532260: ext4_expand_extra_isize_ea:2808: inode 11 [ 199.342003][T15972] loop9: lost filesystem error report for type 5 error -117 [ 199.342185][T15972] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 199.359570][T15972] loop9: lost filesystem error report for type 5 error -117 [ 199.359769][T15972] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2972: inode #11: comm syz.9.4048: corrupted xattr block 95: invalid header [ 199.381421][T15972] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 199.381871][T15972] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 199.400241][T15972] EXT4-fs (loop9): 1 orphan inode deleted [ 199.410620][T15972] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.444678][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.923214][T16060] SELinux: policydb string does not match my string SE Linux [ 199.937574][T16060] SELinux: failed to load policy [ 200.106358][T16100] netlink: 'syz.4.4068': attribute type 3 has an invalid length. [ 200.122990][T16100] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.4068'. [ 200.663579][T16154] set_capacity_and_notify: 3 callbacks suppressed [ 200.663596][T16154] loop2: detected capacity change from 0 to 512 [ 200.677706][T16154] EXT4-fs: Ignoring removed nobh option [ 200.683649][T16154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.701327][T16154] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4092: iget: bad i_size value: 38620345925642 [ 200.732507][T16154] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.732917][T16154] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4092: couldn't read orphan inode 15 (err -117) [ 200.743125][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 200.743141][ C0] EXT4-fs (loop2): initial error at time 1771532261: ext4_orphan_get:1391: inode 15 [ 200.743164][ C0] EXT4-fs (loop2): last error at time 1771532261: ext4_orphan_get:1391: inode 15 [ 200.781407][T16154] loop2: lost filesystem error report for type 5 error -117 [ 200.788973][T16154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.927208][T16178] loop9: detected capacity change from 0 to 512 [ 200.938056][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.132291][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4111'. [ 201.153632][T16196] hsr_slave_0: left promiscuous mode [ 201.193561][T16196] hsr_slave_1: left promiscuous mode [ 201.354009][T16210] loop2: detected capacity change from 0 to 1024 [ 201.374719][T16210] EXT4-fs: Ignoring removed bh option [ 201.417327][T16210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.462511][ T1109] IPVS: starting estimator thread 0... [ 201.563540][T16219] IPVS: using max 2304 ests per chain, 115200 per kthread [ 201.604673][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.671313][T16241] loop2: detected capacity change from 0 to 1024 [ 201.697000][T16241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.725923][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 201.725938][ T28] audit: type=1400 audit(1771532262.504:1588): avc: denied { link } for pid=16239 comm="syz.2.4127" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.813102][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.141155][T16085] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.300806][T16279] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4145'. [ 202.627491][T16299] loop9: detected capacity change from 0 to 1024 [ 202.647695][T16299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.698346][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.738866][T16305] sctp: [Deprecated]: syz.4.4157 (pid 16305) Use of int in max_burst socket option deprecated. [ 202.738866][T16305] Use struct sctp_assoc_value instead [ 202.919034][ T28] audit: type=1400 audit(1771532263.694:1589): avc: denied { mount } for pid=16325 comm="syz.9.4166" name="/" dev="autofs" ino=120323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 203.079069][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4173'. [ 203.098640][T16341] netlink: 'syz.4.4173': attribute type 29 has an invalid length. [ 203.113409][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4173'. [ 203.482774][T16370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4187'. [ 203.580985][T16381] loop4: detected capacity change from 0 to 512 [ 203.581120][T16375] Process accounting resumed [ 203.604791][T16381] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4192: inode has both inline data and extents flags [ 203.624210][ T28] audit: type=1400 audit(1771532520.389:1590): avc: denied { ioctl } for pid=16383 comm="syz.6.4193" path="socket:[120427]" dev="sockfs" ino=120427 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 203.673429][T16381] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 203.679967][T16381] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4192: couldn't read orphan inode 15 (err -117) [ 203.689238][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 203.689259][ C1] EXT4-fs (loop4): initial error at time 1771532520: ext4_orphan_get:1391: inode 15 [ 203.689295][ C1] EXT4-fs (loop4): last error at time 1771532520: ext4_orphan_get:1391: inode 15 [ 203.726665][T16381] loop4: lost filesystem error report for type 5 error -117 [ 203.727638][T16381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.787588][ T28] audit: type=1400 audit(1771532520.569:1591): avc: denied { setattr } for pid=16380 comm="syz.4.4192" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 203.838955][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.163558][T10056] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.163770][ T3795] Bluetooth: hci0: command 0x1003 tx timeout [ 204.191709][T16406] Invalid argument reading file caps for ./file0 [ 204.219623][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4204'. [ 204.247437][T16414] lo: entered allmulticast mode [ 204.252695][T16414] lo: left allmulticast mode [ 204.280915][ T28] audit: type=1400 audit(1771532521.059:1592): avc: denied { connect } for pid=16417 comm="syz.1.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.609609][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4214'. [ 204.619064][T16434] hsr_slave_0: left promiscuous mode [ 204.624883][T16434] hsr_slave_1: left promiscuous mode [ 204.672133][T16436] erspan0: entered promiscuous mode [ 204.677524][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4215'. [ 204.919917][T16449] loop9: detected capacity change from 0 to 512 [ 204.929808][T16449] EXT4-fs: Ignoring removed orlov option [ 204.943952][ T28] audit: type=1400 audit(1771532521.719:1593): avc: denied { getopt } for pid=16451 comm="syz.4.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.972913][T16449] EXT4-fs: Ignoring removed bh option [ 204.986847][T16449] EXT4-fs: Ignoring removed oldalloc option [ 204.999470][T16449] ext4: Unknown parameter 'smackfsfloor' [ 205.116360][T16467] loop9: detected capacity change from 0 to 512 [ 205.152827][T16467] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 205.170741][T16467] System zones: 0-2, 18-18, 34-35 [ 205.198467][T16467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.212306][T16467] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.300664][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.395348][T16495] syzkaller0: entered promiscuous mode [ 205.400997][T16495] syzkaller0: entered allmulticast mode [ 205.533281][T16512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4247'. [ 205.690120][T16532] sctp: [Deprecated]: syz.4.4256 (pid 16532) Use of int in maxseg socket option. [ 205.690120][T16532] Use struct sctp_assoc_value instead [ 206.162052][T16552] program syz.2.4265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.279503][ T28] audit: type=1400 audit(1771532523.059:1594): avc: denied { ioctl } for pid=16561 comm="syz.2.4269" path="socket:[121343]" dev="sockfs" ino=121343 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 207.199440][T16593] ip6erspan0: entered allmulticast mode [ 207.296076][T16602] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.4287'. [ 207.646191][T16629] loop2: detected capacity change from 0 to 1024 [ 207.674755][T16629] EXT4-fs: Ignoring removed orlov option [ 207.687183][T16629] EXT4-fs: Ignoring removed nobh option [ 207.750688][T16629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.782631][T16645] tipc: Started in network mode [ 207.798906][T16645] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 207.822922][T16645] tipc: Enabling of bearer rejected, failed to enable media [ 207.845043][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.950293][T16667] loop2: detected capacity change from 0 to 1024 [ 207.965125][T16667] EXT4-fs: Ignoring removed bh option [ 207.998547][T16667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.088784][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.101062][T16685] loop4: detected capacity change from 0 to 2048 [ 208.292020][T16717] loop2: detected capacity change from 0 to 512 [ 208.312313][T16717] EXT4-fs: inline encryption not supported [ 208.335768][T16717] EXT4-fs (loop2): orphan cleanup on readonly fs [ 208.362969][T16717] Quota error (device loop2): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 208.386700][T16717] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 208.419825][T16717] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 208.443567][T16717] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4338: bad orphan inode 14 [ 208.464502][T16717] loop2: lost filesystem error report for type 5 error -117 [ 208.464682][T16717] ext4_test_bit(bit=13, block=18) = 1 [ 208.477561][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 208.477598][ C1] EXT4-fs (loop2): last error at time 1771532525: ext4_orphan_get:1417 [ 208.513398][T16717] is_bad_inode(inode)=0 [ 208.517606][T16717] NEXT_ORPHAN(inode)=0 [ 208.521682][T16717] max_ino=32 [ 208.543433][T16717] i_nlink=1 [ 208.546615][T16717] EXT4-fs (loop2): 1 truncate cleaned up [ 208.552660][T16717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.681557][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.827721][T16741] loop2: detected capacity change from 0 to 1024 [ 208.863558][T16741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.904759][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.198054][ T28] audit: type=1400 audit(1771532525.979:1595): avc: denied { create } for pid=16773 comm="syz.4.4357" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 209.465888][T16800] netlink: 'syz.1.4369': attribute type 29 has an invalid length. [ 209.478635][T16800] netlink: 'syz.1.4369': attribute type 29 has an invalid length. [ 209.488433][T16800] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4369'. [ 209.536840][T16804] loop9: detected capacity change from 0 to 512 [ 209.547176][T16804] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.557368][T16804] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 209.566459][T16804] EXT4-fs (loop9): orphan cleanup on readonly fs [ 209.573701][T16804] Quota error (device loop9): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 209.586616][T16804] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.605298][T16804] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 209.620601][ T28] audit: type=1400 audit(1771532526.399:1596): avc: denied { write } for pid=16810 comm="syz.4.4374" lport=35772 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 209.650564][T16804] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 209.667577][T16804] EXT4-fs (loop9): Remounting filesystem read-only [ 209.674133][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 209.674154][ C1] EXT4-fs (loop9): initial error at time 1771532526: mb_free_blocks:2047: inode 12: block 14 [ 209.674198][ C1] EXT4-fs (loop9): last error at time 1771532526: mb_free_blocks:2047: inode 12: block 14 [ 209.704079][ T28] audit: type=1400 audit(1771532526.479:1597): avc: denied { remount } for pid=16813 comm="syz.1.4376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 209.712787][T16804] EXT4-fs (loop9): 1 truncate cleaned up [ 209.735512][T16804] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.745745][ T28] audit: type=1400 audit(1771532526.489:1598): avc: denied { unmount } for pid=9880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 209.777540][ T28] audit: type=1400 audit(1771532526.559:1599): avc: denied { watch } for pid=16803 comm="syz.9.4371" path="/507/file0/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.824552][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.843325][ T28] audit: type=1326 audit(1771532526.619:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.6.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x7fc00000 [ 209.994507][ T28] audit: type=1326 audit(1771532526.769:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.6.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x7ffc0000 [ 210.025941][ T28] audit: type=1326 audit(1771532526.769:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16839 comm="syz.6.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x7ffc0000 [ 210.177265][T16859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4396'. [ 210.237977][T16863] loop2: detected capacity change from 0 to 1024 [ 210.246558][T16863] EXT4-fs: Ignoring removed orlov option [ 210.253904][T16863] EXT4-fs: Ignoring removed nobh option [ 210.273857][T16863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.322339][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.441793][T16877] loop2: detected capacity change from 0 to 128 [ 210.675272][T16899] sctp: [Deprecated]: syz.9.4414 (pid 16899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.675272][T16899] Use struct sctp_sack_info instead [ 210.862375][T16920] loop4: detected capacity change from 0 to 1024 [ 210.886367][T16920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 210.898801][T16920] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.932469][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.957164][T16927] sock: sock_set_timeout: `syz.9.4426' (pid 16927) tries to set negative timeout [ 211.014427][T16935] netlink: 'syz.4.4427': attribute type 3 has an invalid length. [ 211.031096][T16935] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4427'. [ 211.099472][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4432'. [ 211.120993][T16949] loop2: detected capacity change from 0 to 512 [ 211.131441][T16949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.135102][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4432'. [ 211.163137][T16949] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 211.178154][T16949] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.4436: corrupted inode contents [ 211.183397][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 211.196563][ C1] EXT4-fs (loop2): initial error at time 1771532527: mb_free_blocks:2047: inode 11: block 64 [ 211.206759][ C1] EXT4-fs (loop2): last error at time 1771532527: mb_free_blocks:2047: inode 11: block 64 [ 211.228564][T16949] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.236619][T16949] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #11: comm syz.2.4436: mark_inode_dirty error [ 211.260645][T16949] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.260850][T16949] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4436: invalid indirect mapped block 1 (level 1) [ 211.293704][T16949] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.299830][T16949] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.4436: corrupted inode contents [ 211.350980][T16949] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.357315][T16949] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 211.385257][T16949] loop2: lost filesystem error report for type 5 error -117 [ 211.385446][T16949] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.4436: corrupted inode contents [ 211.385849][T16965] EXT4-fs: Ignoring removed orlov option [ 211.397681][T16949] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.436400][T16949] EXT4-fs error (device loop2): ext4_truncate:4587: inode #11: comm syz.2.4436: mark_inode_dirty error [ 211.453554][T16965] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.471768][T16949] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.472868][T16949] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 211.492860][T16965] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 211.494120][T16949] loop2: lost filesystem error report for type 5 error -117 [ 211.502339][T16949] EXT4-fs (loop2): 1 truncate cleaned up [ 211.516500][T16949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.533737][T16965] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4443: attempt to clear invalid blocks 2 len 1 [ 211.551557][T16949] Invalid ELF header magic: != ELF [ 211.566346][T16965] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 211.567117][T16965] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, [ 211.576424][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 211.576465][ C1] EXT4-fs (loop4): initial error at time 1771532528: ext4_clear_blocks:876: inode 13 [ 211.576495][ C1] EXT4-fs (loop4): last error at time 1771532528: ext4_clear_blocks:876: inode 13 [ 211.577581][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.585016][T16965] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 211.628259][T16965] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4443: invalid indirect mapped block 1819239214 (level 0) [ 211.642214][T16965] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 211.642558][T16965] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4443: invalid indirect mapped block 1819239214 (level 1) [ 211.677020][T16965] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 211.677538][T16965] EXT4-fs (loop4): 1 truncate cleaned up [ 211.700012][T16965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.754095][T16965] EXT4-fs (loop4): shut down requested (2) [ 211.770480][T16965] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 211.780636][T16975] sctp: [Deprecated]: syz.2.4446 (pid 16975) Use of int in maxseg socket option. [ 211.780636][T16975] Use struct sctp_assoc_value instead [ 211.793985][T16979] FAT-fs (loop9): bogus number of reserved sectors [ 211.811799][T16965] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 211.821633][T16979] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 211.835464][T16979] FAT-fs (loop9): Can't find a valid FAT filesystem [ 211.863908][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.935839][T16979] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4448'. [ 212.110217][T17002] EXT4-fs: Ignoring removed oldalloc option [ 212.136700][T17002] EXT4-fs: Ignoring removed orlov option [ 212.142584][T17002] EXT4-fs: inline encryption not supported [ 212.189897][T17002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.210182][T17002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.313596][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.997639][T17052] set_capacity_and_notify: 3 callbacks suppressed [ 212.997656][T17052] loop4: detected capacity change from 0 to 1024 [ 213.053785][T17052] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 213.089070][T17052] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.4477: lblock 2 mapped to illegal pblock 2 (length 1) [ 213.127699][T17052] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 213.128030][T17052] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.4477: lblock 0 mapped to illegal pblock 48 (length 1) [ 213.137198][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 213.137230][ C0] EXT4-fs (loop4): initial error at time 1771532529: ext4_map_blocks:776: inode 3: block 2 [ 213.137266][ C0] EXT4-fs (loop4): last error at time 1771532529: ext4_map_blocks:776: inode 3: block 2 [ 213.300667][T17052] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.4477: Failed to acquire dquot type 0 [ 213.334495][T17052] loop4: lost filesystem error report for type 5 error -117 [ 213.334677][T17052] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 213.389759][T17052] loop4: lost filesystem error report for type 5 error -117 [ 213.389994][T17052] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.4477: mark_inode_dirty error [ 213.434038][T17052] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 213.464078][T17052] EXT4-fs (loop4): 1 orphan inode deleted [ 213.476361][T17052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.488617][ T580] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 213.516408][T17068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4483'. [ 213.525735][ T580] __quota_error: 28 callbacks suppressed [ 213.525750][ T580] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 213.550250][T17068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4483'. [ 213.576557][ T580] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:6: Failed to release dquot type 0 [ 213.634578][T17070] vlan3: entered allmulticast mode [ 213.652579][T17070] bridge0: port 4(vlan3) entered blocking state [ 213.672331][T17070] bridge0: port 4(vlan3) entered disabled state [ 213.694084][T17070] vlan3: entered promiscuous mode [ 213.883806][T17077] sctp: [Deprecated]: syz.2.4488 (pid 17077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.883806][T17077] Use struct sctp_sack_info instead [ 214.155247][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.168500][T14327] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 214.212722][T14327] loop4: lost filesystem error report for type 5 error -117 [ 214.212810][T14327] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 214.230355][T14327] loop4: lost filesystem error report for type 5 error -117 [ 214.250683][T14327] EXT4-fs error (device loop4): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 214.275364][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4497'. [ 214.281632][T17098] netlink: 'syz.6.4498': attribute type 3 has an invalid length. [ 214.290271][T17096] bond1: Invalid ad_actor_system MAC address. [ 214.292520][T17098] netlink: 'syz.6.4498': attribute type 7 has an invalid length. [ 214.306385][T17096] bond1: option ad_actor_system: invalid value (4294967295) [ 214.306892][T17098] netlink: 'syz.6.4498': attribute type 8 has an invalid length. [ 214.328469][T17096] bond1 (unregistering): Released all slaves [ 214.329860][T17098] netlink: 'syz.6.4498': attribute type 7 has an invalid length. [ 214.345911][T17098] netlink: 198788 bytes leftover after parsing attributes in process `syz.6.4498'. [ 214.365267][T17101] loop4: detected capacity change from 0 to 2048 [ 214.407548][T17101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.437751][T17101] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 214.456921][T17101] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 214.469910][T17101] EXT4-fs (loop4): This should not happen!! Data will be lost [ 214.469910][T17101] [ 214.480365][T17101] EXT4-fs (loop4): Total free blocks count 0 [ 214.486671][T17101] EXT4-fs (loop4): Free/Dirty block details [ 214.492833][T17101] EXT4-fs (loop4): free_blocks=2415919504 [ 214.496995][T17114] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 214.498951][T17101] EXT4-fs (loop4): dirty_blocks=48 [ 214.516819][T17101] EXT4-fs (loop4): Block reservation details [ 214.522963][T17101] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 214.705536][ T28] audit: type=1400 audit(1771532531.489:1629): avc: denied { wake_alarm } for pid=17137 comm="syz.2.4512" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.927948][ T28] audit: type=1400 audit(1771532531.709:1630): avc: denied { mount } for pid=17156 comm="syz.1.4516" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 215.297490][ T28] audit: type=1326 audit(1771532532.079:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.6.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x7ffc0000 [ 215.358903][ T28] audit: type=1326 audit(1771532532.079:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.6.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x7ffc0000 [ 215.408215][ T28] audit: type=1326 audit(1771532532.109:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.6.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd264dc629 code=0x7ffc0000 [ 215.458387][ T28] audit: type=1326 audit(1771532532.109:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.6.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x7ffc0000 [ 215.508045][ T28] audit: type=1326 audit(1771532532.109:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.6.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x7ffc0000 [ 215.556727][ T28] audit: type=1326 audit(1771532532.109:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.6.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7efd264dc629 code=0x7ffc0000 [ 215.596475][T17200] loop2: detected capacity change from 0 to 512 [ 215.602681][ T28] audit: type=1326 audit(1771532532.109:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17192 comm="syz.6.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x7ffc0000 [ 215.632693][T17200] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.746219][T17206] batadv_slave_1: entered promiscuous mode [ 215.776079][T17205] batadv_slave_1: left promiscuous mode [ 215.826600][T17214] loop2: detected capacity change from 0 to 512 [ 215.867212][T17214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.882546][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4551'. [ 215.901664][T17214] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.914966][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4551'. [ 215.924564][T17220] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.929099][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4551'. [ 215.951117][T12168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.969522][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4551'. [ 215.978896][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4551'. [ 215.989607][T17230] loop2: detected capacity change from 0 to 256 [ 215.992471][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4551'. [ 216.045224][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4551'. [ 216.045457][T17230] FAT-fs (loop2): Directory bread(block 64) failed [ 216.064771][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4551'. [ 216.081371][T17230] FAT-fs (loop2): Directory bread(block 65) failed [ 216.083524][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4551'. [ 216.103301][T17230] FAT-fs (loop2): Directory bread(block 66) failed [ 216.113150][T17230] FAT-fs (loop2): Directory bread(block 67) failed [ 216.121249][T17230] FAT-fs (loop2): Directory bread(block 68) failed [ 216.133010][T17230] FAT-fs (loop2): Directory bread(block 69) failed [ 216.139980][T17230] FAT-fs (loop2): Directory bread(block 70) failed [ 216.147055][T17230] FAT-fs (loop2): Directory bread(block 71) failed [ 216.153788][T17230] FAT-fs (loop2): Directory bread(block 72) failed [ 216.160588][T17230] FAT-fs (loop2): Directory bread(block 73) failed [ 216.288049][T12168] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 216.305027][T12168] FAT-fs (loop2): Filesystem has been set read-only [ 216.763633][T17265] random: crng reseeded on system resumption [ 216.823709][ T3438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.880497][T17277] ip6erspan0: entered allmulticast mode [ 216.904606][ T3438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.976278][ T3438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.048186][ T3438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.071457][T17298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.258515][ T3438] vlan3: left promiscuous mode [ 217.267955][ T3438] bridge0: port 4(vlan3) entered disabled state [ 217.291744][ T3438] team0: left allmulticast mode [ 217.300449][ T3438] team_slave_0: left allmulticast mode [ 217.311024][ T3438] team_slave_1: left allmulticast mode [ 217.325365][ T3438] team0: left promiscuous mode [ 217.334227][ T3438] team_slave_0: left promiscuous mode [ 217.346213][ T3438] team_slave_1: left promiscuous mode [ 217.358438][ T3438] bridge0: port 3(team0) entered disabled state [ 217.382736][ T3438] bridge_slave_1: left allmulticast mode [ 217.398342][ T3438] bridge_slave_1: left promiscuous mode [ 217.423697][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.439948][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4588'. [ 217.459534][ T3438] bridge_slave_0: left promiscuous mode [ 217.480248][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.587821][ T3438] team0: Port device bridge1 removed [ 217.648666][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.659377][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.669438][ T3438] bond0 (unregistering): Released all slaves [ 217.725854][ T3438] tipc: Disabling bearer [ 217.731477][ T3438] tipc: Left network mode [ 217.756855][ T3438] hsr_slave_0: left promiscuous mode [ 217.775933][ T3438] hsr_slave_1: left promiscuous mode [ 217.783912][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.791434][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.803978][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.813714][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.832245][ T3438] veth1_macvtap: left promiscuous mode [ 217.838802][ T3438] veth0_macvtap: left promiscuous mode [ 217.840569][ T9] hid_parser_main: 33 callbacks suppressed [ 217.840666][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 217.846329][ T3438] veth1_vlan: left promiscuous mode [ 217.863084][ T3438] veth0_vlan: left promiscuous mode [ 217.872470][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 217.898728][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 217.944631][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 217.952270][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 217.989570][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 218.019819][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 218.042445][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 218.064683][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 218.090345][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 218.110876][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 218.132027][ T3438] team0 (unregistering): Port device team_slave_0 removed [ 218.193673][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 218.212552][T17279] chnl_net:caif_netlink_parms(): no params data found [ 218.253147][T17382] netlink: 'syz.1.4609': attribute type 4 has an invalid length. [ 218.253936][T17384] fido_id[17384]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.374806][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.393466][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.423790][T17279] bridge_slave_0: entered allmulticast mode [ 218.451614][T17279] bridge_slave_0: entered promiscuous mode [ 218.480939][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.507043][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.537936][T17279] bridge_slave_1: entered allmulticast mode [ 218.572683][T17279] bridge_slave_1: entered promiscuous mode [ 218.620663][T17279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.638827][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 218.638842][ T28] audit: type=1400 audit(1771532535.419:1672): avc: denied { listen } for pid=17400 comm="syz.9.4616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 218.687240][T17279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.699817][ T28] audit: type=1400 audit(1771532535.449:1673): avc: denied { connect } for pid=17400 comm="syz.9.4616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 218.778198][T17279] team0: Port device team_slave_0 added [ 218.804551][T17279] team0: Port device team_slave_1 added [ 218.895844][T17279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.916148][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.973529][T17279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.008073][T17279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.015801][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.042473][T17279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.109049][T17279] hsr_slave_0: entered promiscuous mode [ 219.115886][T17279] hsr_slave_1: entered promiscuous mode [ 219.342056][T17477] geneve2: entered promiscuous mode [ 219.363219][T17479] sctp: [Deprecated]: syz.9.4639 (pid 17479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.363219][T17479] Use struct sctp_sack_info instead [ 219.463575][ T28] audit: type=1400 audit(1771532536.239:1674): avc: denied { search } for pid=17496 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.510486][ T28] audit: type=1400 audit(1771532536.249:1676): avc: denied { read } for pid=17490 comm="syz.4.4645" path="socket:[123804]" dev="sockfs" ino=123804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.541009][ T28] audit: type=1400 audit(1771532536.239:1675): avc: denied { search } for pid=17496 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.675407][T17279] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 219.687059][ T28] audit: type=1400 audit(1771532536.249:1677): avc: denied { search } for pid=17496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.720653][T17279] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 219.732265][ T28] audit: type=1400 audit(1771532536.249:1678): avc: denied { read open } for pid=17496 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.769659][T17279] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 219.801241][ T28] audit: type=1400 audit(1771532536.249:1679): avc: denied { getattr } for pid=17496 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.821365][T17279] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 219.835691][ T28] audit: type=1400 audit(1771532536.249:1680): avc: denied { getattr } for pid=17496 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.932456][ T28] audit: type=1400 audit(1771532536.269:1681): avc: denied { recv } for pid=17496 comm="dhcpcd-run-hook" saddr=10.128.0.163 src=30036 daddr=10.128.0.245 dest=34008 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 220.012840][T17279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.049616][T17279] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.076014][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.083300][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.120336][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.127684][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.272351][T17279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.416019][T17622] xt_hashlimit: size too large, truncated to 1048576 [ 220.513030][T17279] veth0_vlan: entered promiscuous mode [ 220.536098][T17279] veth1_vlan: entered promiscuous mode [ 220.566260][T17279] veth0_macvtap: entered promiscuous mode [ 220.581271][T17279] veth1_macvtap: entered promiscuous mode [ 220.601295][T17279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.620414][T17279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.644454][T16080] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.664387][T16080] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.705023][T16080] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.721402][T16080] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.054159][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 221.054179][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 221.054235][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 221.074458][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 221.074483][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 221.074499][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 221.109352][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 221.109441][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 221.109455][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 221.289411][T17743] loop4: detected capacity change from 0 to 512 [ 221.298682][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4700'. [ 221.303944][T17743] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.325769][T17748] loop9: detected capacity change from 0 to 128 [ 221.332086][T17748] netlink: 'syz.9.4701': attribute type 1 has an invalid length. [ 222.692479][T17901] Invalid argument reading file caps for ./file0 [ 222.703942][T17905] netlink: 'syz.6.4737': attribute type 18 has an invalid length. [ 222.748705][T17907] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 222.755249][T17907] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 222.791070][T17916] loop4: detected capacity change from 0 to 1024 [ 222.799114][T17907] vhci_hcd vhci_hcd.0: Device attached [ 222.824647][T17911] vhci_hcd: connection closed [ 222.824964][ T3438] vhci_hcd vhci_hcd.9: stop threads [ 222.841847][T17916] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 222.862788][T17916] System zones: 0-1, 3-36 [ 222.867272][ T3438] vhci_hcd vhci_hcd.9: release socket [ 222.875742][T17916] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4741: bad orphan inode 134217728 [ 222.886854][ T3438] vhci_hcd vhci_hcd.9: disconnect device [ 222.902995][T17916] loop4: lost filesystem error report for type 5 error -117 [ 222.904837][T17916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.966193][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.984627][T17935] loop4: detected capacity change from 0 to 128 [ 223.293213][T17965] loop8: detected capacity change from 0 to 512 [ 223.312839][T17965] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.4761: EA inode hash validation failed [ 223.338219][T17965] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4761: corrupted inode contents [ 223.350381][T17965] fserror_report: 4 callbacks suppressed [ 223.350396][T17965] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.360310][T17965] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.4761: mark_inode_dirty error [ 223.369667][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 223.369698][ C1] EXT4-fs (loop8): initial error at time 1771532540: ext4_do_update_inode:5569: inode 15 [ 223.369745][ C1] EXT4-fs (loop8): last error at time 1771532540: ext4_do_update_inode:5569: inode 15 [ 223.415833][T17965] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.421208][T17965] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4761: corrupted inode contents [ 223.473495][T17965] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.473669][T17965] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.4761: mark_inode_dirty error [ 223.502313][T17965] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.503568][T17965] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.4761: mark inode dirty (error -117) [ 223.543220][T17965] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.552320][T17965] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -117) [ 223.591585][T17965] EXT4-fs (loop8): 1 orphan inode deleted [ 223.603436][T17965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.640952][T17279] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.677020][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 223.677035][ T28] audit: type=1326 audit(1771532540.459:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17922 comm="syz.6.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x7fc00000 [ 223.719746][ T28] audit: type=1326 audit(1771532540.499:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17967 comm="syz.4.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f11f133c629 code=0x7ffc0000 [ 223.752088][T17991] IPv6: sit1: Disabled Multicast RS [ 223.767016][ T28] audit: type=1400 audit(1771532540.529:1905): avc: denied { bind } for pid=17990 comm="syz.1.4773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.817440][ T28] audit: type=1400 audit(1771532540.529:1906): avc: denied { node_bind } for pid=17990 comm="syz.1.4773" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 223.841523][ T28] audit: type=1326 audit(1771532540.569:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17967 comm="syz.4.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f11f133c629 code=0x7ffc0000 [ 223.885384][T17998] loop4: detected capacity change from 0 to 2048 [ 223.898849][T17998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.927173][ T28] audit: type=1400 audit(1771532540.709:1908): avc: denied { read } for pid=17997 comm="syz.4.4776" path="/261/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 223.978935][ T28] audit: type=1400 audit(1771532540.759:1909): avc: denied { create } for pid=18005 comm="syz.1.4778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.010900][ T28] audit: type=1400 audit(1771532540.789:1910): avc: denied { setopt } for pid=18005 comm="syz.1.4778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.013785][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.031300][ T28] audit: type=1400 audit(1771532540.789:1911): avc: denied { bind } for pid=18005 comm="syz.1.4778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.099632][ T28] audit: type=1326 audit(1771532540.879:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18012 comm="syz.1.4782" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f192866c629 code=0x0 [ 224.280679][T18030] loop4: detected capacity change from 0 to 512 [ 224.295778][T18030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.308925][T18030] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.330569][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.955895][T18043] netlink: 'syz.4.4794': attribute type 6 has an invalid length. [ 225.218609][T18080] loop9: detected capacity change from 0 to 256 [ 226.153347][T18114] SELinux: policydb string does not match my string SE Linux [ 226.178988][T18114] SELinux: failed to load policy [ 226.250922][T18120] loop8: detected capacity change from 0 to 764 [ 226.277711][T18120] rock: directory entry would overflow storage [ 226.287836][T18120] rock: sig=0x5850, size=36, remaining=22 [ 226.974157][T18184] __nla_validate_parse: 8 callbacks suppressed [ 226.974172][T18184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4858'. [ 227.007069][T18187] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.102285][T18195] syzkaller1: entered promiscuous mode [ 227.113427][T18195] syzkaller1: entered allmulticast mode [ 227.336070][T18215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.415002][T18222] loop8: detected capacity change from 0 to 164 [ 227.424432][T18222] ISOFS: unable to read i-node block [ 227.429726][T18222] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 227.957567][T18261] loop4: detected capacity change from 0 to 512 [ 227.975079][T18261] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.993696][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.073608][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.135790][T18274] loop9: detected capacity change from 0 to 512 [ 228.162487][T18274] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.4896: corrupted in-inode xattr: bad e_name length [ 228.188967][T18274] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 228.189178][T18274] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4896: couldn't read orphan inode 15 (err -117) [ 228.198398][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 228.198417][ C0] EXT4-fs (loop9): initial error at time 1771532544: ext4_iget_extra_inode:5025: inode 15 [ 228.198445][ C0] EXT4-fs (loop9): last error at time 1771532544: ext4_iget_extra_inode:5025: inode 15 [ 228.237441][T18274] loop9: lost filesystem error report for type 5 error -117 [ 228.237981][T18274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.260579][T18274] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.4896: dx entry: limit 0 != root limit 125 [ 228.272943][T18274] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4896: Corrupt directory, running e2fsck is recommended [ 228.302344][T18274] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.4896: dx entry: limit 0 != root limit 125 [ 228.327825][T18274] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.4896: Corrupt directory, running e2fsck is recommended [ 228.353886][T18274] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.4896: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 228.428731][T18288] loop8: detected capacity change from 0 to 128 [ 228.429052][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.571668][T18298] loop9: detected capacity change from 0 to 2048 [ 228.599279][ T3419] kernel write not supported for file bpf-prog (pid: 3419 comm: kworker/1:5) [ 228.637141][T18298] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.676631][T18313] netlink: 'syz.8.4909': attribute type 10 has an invalid length. [ 228.695182][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.712104][T18313] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4909'. [ 228.763703][T18313] team0: Port device geneve1 added [ 228.904057][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 228.904072][ T28] audit: type=1400 audit(1771532545.689:1982): avc: denied { mount } for pid=18325 comm="syz.8.4916" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 228.952259][ T28] audit: type=1400 audit(1771532545.719:1983): avc: denied { mounton } for pid=18325 comm="syz.8.4916" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 229.006408][T18332] loop4: detected capacity change from 0 to 128 [ 229.012781][ T28] audit: type=1400 audit(1771532545.729:1984): avc: denied { unmount } for pid=17279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 229.083352][T16083] bio_check_eod: 40 callbacks suppressed [ 229.089454][ T3419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.098102][T16083] kworker/u8:12: attempt to access beyond end of device [ 229.098102][T16083] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 229.173774][ T28] audit: type=1400 audit(1771532545.959:1985): avc: denied { watch } for pid=18339 comm="syz.9.4923" path="/616/file1" dev="tmpfs" ino=3208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.243890][T16083] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.261216][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4926'. [ 229.315073][T16083] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.336697][ T28] audit: type=1400 audit(1771532546.109:1986): avc: denied { mounton } for pid=18352 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 229.391305][ T28] audit: type=1400 audit(1771532546.109:1987): avc: denied { bind } for pid=18349 comm="syz.9.4930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.400507][T18359] loop4: detected capacity change from 0 to 1024 [ 229.426936][T16083] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.465254][T18359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.486825][T16083] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.500042][ T28] audit: type=1400 audit(1771532546.279:1988): avc: denied { read write } for pid=18357 comm="syz.4.4931" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.500196][T18359] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.4931: missing EA_INODE flag [ 229.524001][ T28] audit: type=1400 audit(1771532546.279:1989): avc: denied { open } for pid=18357 comm="syz.4.4931" path="/286/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.552768][T18365] 9pnet: p9_errstr2errno: server reported unknown error [ 229.558904][T18359] EXT4-fs (loop4): Remounting filesystem read-only [ 229.624128][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.676420][T16083] bridge_slave_1: left allmulticast mode [ 229.682111][T16083] bridge_slave_1: left promiscuous mode [ 229.696457][T16083] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.711611][T18385] loop4: detected capacity change from 0 to 2048 [ 229.720565][T16083] bridge_slave_0: left allmulticast mode [ 229.727336][T16083] bridge_slave_0: left promiscuous mode [ 229.742547][T16083] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.774532][T18385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.837263][ T28] audit: type=1400 audit(1771532546.619:1990): avc: denied { read } for pid=18383 comm="syz.4.4936" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 229.861498][T16083] team0: Port device geneve1 removed [ 229.882259][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.945748][T16083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.956064][T16083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.966117][T16083] bond0 (unregistering): Released all slaves [ 230.004377][T18403] syzkaller1: entered promiscuous mode [ 230.020077][T18403] syzkaller1: entered allmulticast mode [ 230.065345][T16083] hsr_slave_0: left promiscuous mode [ 230.084891][T16083] hsr_slave_1: left promiscuous mode [ 230.090690][T16083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.098646][T16083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.109010][T16083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.134549][T16083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.166830][T16083] veth1_macvtap: left promiscuous mode [ 230.172452][T16083] veth0_macvtap: left promiscuous mode [ 230.178583][T16083] veth1_vlan: left promiscuous mode [ 230.184324][T16083] veth0_vlan: left promiscuous mode [ 230.361379][T16083] team0 (unregistering): Port device team_slave_1 removed [ 230.371057][T16083] team0 (unregistering): Port device team_slave_0 removed [ 230.450581][T18429] loop9: detected capacity change from 0 to 512 [ 230.458656][T18429] EXT4-fs: Ignoring removed orlov option [ 230.498662][T18429] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.523454][T18429] ext4 filesystem being mounted at /625/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.547515][T18352] chnl_net:caif_netlink_parms(): no params data found [ 230.550035][ T28] audit: type=1400 audit(1771532547.329:1991): avc: denied { append } for pid=18428 comm="syz.9.4949" path="/625/bus/cgroup.controllers" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 230.613501][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.665514][T18352] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.672710][T18352] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.680172][T18352] bridge_slave_0: entered allmulticast mode [ 230.686991][T18352] bridge_slave_0: entered promiscuous mode [ 230.694751][T18352] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.702002][T18352] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.710802][T18352] bridge_slave_1: entered allmulticast mode [ 230.717947][T18352] bridge_slave_1: entered promiscuous mode [ 230.753060][T18352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.765044][T18352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.787589][T18352] team0: Port device team_slave_0 added [ 230.794405][T18352] team0: Port device team_slave_1 added [ 230.854650][T18352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.868447][T18352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.899920][T18352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.922993][T18352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.930819][T18352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.962305][T18352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.064970][T18352] hsr_slave_0: entered promiscuous mode [ 231.094915][T18352] hsr_slave_1: entered promiscuous mode [ 231.264564][T18352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.282078][T18520] netlink: 'syz.1.4971': attribute type 3 has an invalid length. [ 231.290415][T18520] netlink: 'syz.1.4971': attribute type 1 has an invalid length. [ 231.298745][T18520] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4971'. [ 231.338159][T18525] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4974'. [ 231.348382][T18352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.420148][T18352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.503753][T18548] loop5: detected capacity change from 0 to 7 [ 231.515736][T18352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.517302][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.534363][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.542230][ T3303] loop5: unable to read partition table [ 231.558973][T18557] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.576769][T18548] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.591436][T18548] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.625259][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.633239][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.651282][T18352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.658662][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.666716][T18548] loop5: unable to read partition table [ 231.666740][T18548] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 231.677932][T18352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.678372][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.678464][ T3303] Buffer I/O error on dev loop5, logical block 0, async page read [ 231.699908][T18352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.728645][T18352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.770781][T18352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.784501][T18352] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.796317][T16083] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.803401][T16083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.822754][T16083] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.829879][T16083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.843447][T18583] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 231.855357][T18583] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 231.871848][T18583] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 231.883894][T18352] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.894483][T18352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.905411][T18583] EXT4-fs error (device loop4): ext4_get_journal_inode:5865: inode #32: comm syz.4.4989: iget: special inode unallocated [ 231.925774][T18583] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 231.926688][T18583] EXT4-fs (loop4): no journal found [ 231.935864][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 231.935887][ C1] EXT4-fs (loop4): initial error at time 1771532548: ext4_get_journal_inode:5865: inode 32 [ 231.935916][ C1] EXT4-fs (loop4): last error at time 1771532548: ext4_get_journal_inode:5865: inode 32 [ 231.969451][T18583] EXT4-fs (loop4): can't get journal size [ 231.980918][T18583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.002348][T18583] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 16: comm syz.4.4989: path /301/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 232.036379][T18352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.045781][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.119759][T18610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.134528][T18610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.144333][T18352] veth0_vlan: entered promiscuous mode [ 232.151922][T18352] veth1_vlan: entered promiscuous mode [ 232.166888][T18352] veth0_macvtap: entered promiscuous mode [ 232.174654][T18352] veth1_macvtap: entered promiscuous mode [ 232.185515][T18352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.196599][T18352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.207612][T16083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.216863][T16083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.226767][T16083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.235744][T16083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.278463][T18614] EXT4-fs: Ignoring removed oldalloc option [ 232.293235][T18614] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.4927: Parent and EA inode have the same ino 15 [ 232.306358][T18614] loop0: lost filesystem error report for type 5 error -117 [ 232.311265][T18614] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.4927: Parent and EA inode have the same ino 15 [ 232.318629][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 232.318646][ C1] EXT4-fs (loop0): initial error at time 1771532549: ext4_xattr_inode_iget:437 [ 232.318668][ C1] EXT4-fs (loop0): last error at time 1771532549: ext4_xattr_inode_iget:437 [ 232.355466][T18614] loop0: lost filesystem error report for type 5 error -117 [ 232.356002][T18614] EXT4-fs (loop0): 1 orphan inode deleted [ 232.369639][T18614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.386469][T18614] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.4927: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 232.416742][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.696801][T18646] set_capacity_and_notify: 2 callbacks suppressed [ 232.696817][T18646] loop4: detected capacity change from 0 to 512 [ 232.725363][T18646] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 232.765434][T18646] EXT4-fs (loop4): orphan cleanup on readonly fs [ 232.785702][T18646] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 232.807609][T18646] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 232.830132][T18646] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.5009: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 232.878758][T18646] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 232.882490][T18646] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5009: couldn't read orphan inode 13 (err -117) [ 232.892174][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 232.892204][ C0] EXT4-fs (loop4): last error at time 1771532549: ext4_ext_check_inode:521: inode 13 [ 232.921332][T18646] loop4: lost filesystem error report for type 5 error -117 [ 232.932444][T18646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.959301][T18646] EXT4-fs (loop4): shut down requested (0) [ 232.965918][T18676] loop0: detected capacity change from 0 to 1024 [ 232.982032][T18676] EXT4-fs: Ignoring removed orlov option [ 233.002120][T14327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.014234][T18683] tipc: Started in network mode [ 233.019201][T18683] tipc: Node identity ac141441, cluster identity 4711 [ 233.032458][T18676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.043593][T18683] tipc: Enabling of bearer rejected, failed to enable media [ 233.071465][T18691] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5020'. [ 233.200481][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.210740][T18720] netlink: 182 bytes leftover after parsing attributes in process `syz.6.5025'. [ 233.324732][T18734] bridge_slave_0: left allmulticast mode [ 233.331046][T18734] bridge_slave_0: left promiscuous mode [ 233.339126][T18734] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.351233][T18734] bridge_slave_1: left allmulticast mode [ 233.357645][T18734] bridge_slave_1: left promiscuous mode [ 233.367849][T18734] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.385025][T18734] bond0: (slave bond_slave_0): Releasing backup interface [ 233.400131][T18734] bond0: (slave bond_slave_1): Releasing backup interface [ 233.413709][T18734] team0: Port device team_slave_0 removed [ 233.426889][T18734] team0: Port device team_slave_1 removed [ 233.441175][T18734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.449026][T18734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.458049][T18734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.466137][T18734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.475762][T18734] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.650286][T18794] syzkaller1: entered promiscuous mode [ 233.662707][T18794] syzkaller1: entered allmulticast mode [ 233.838420][ T580] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1a [ 233.926547][T18830] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 234.028242][T18847] tipc: Started in network mode [ 234.039900][T18847] tipc: Node identity ac1414aa, cluster identity 4711 [ 234.053865][T18847] tipc: Enabled bearer , priority 10 [ 234.618930][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 234.618945][ T28] audit: type=1400 audit(1771532551.399:2056): avc: denied { create } for pid=18911 comm="syz.4.5051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 234.657078][ T28] audit: type=1400 audit(1771532551.399:2057): avc: denied { bind } for pid=18911 comm="syz.4.5051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 234.721388][T18924] loop4: detected capacity change from 0 to 128 [ 234.730364][ T28] audit: type=1400 audit(1771532551.399:2058): avc: denied { write } for pid=18911 comm="syz.4.5051" path=2F3331312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 234.767514][T18924] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.796143][T18924] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.807180][ T28] audit: type=1400 audit(1771532551.399:2059): avc: denied { sendto } for pid=18911 comm="syz.4.5051" path=2F3331312FE91F7189591E9233614B scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 234.844274][ T28] audit: type=1400 audit(1771532551.399:2060): avc: denied { setopt } for pid=18911 comm="syz.4.5051" path=2F3331312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 234.880432][T14327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.953697][ T28] audit: type=1400 audit(1771532551.729:2061): avc: denied { connect } for pid=18946 comm="syz.0.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.996512][ T28] audit: type=1400 audit(1771532551.769:2062): avc: denied { bind } for pid=18952 comm="syz.6.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.173484][ T8653] tipc: Node number set to 2886997162 [ 235.356711][ T28] audit: type=1400 audit(1771532552.139:2063): avc: denied { name_connect } for pid=18982 comm="syz.6.5070" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 235.452779][ T28] audit: type=1400 audit(1771532552.229:2064): avc: denied { mounton } for pid=18988 comm="syz.4.5072" path="/proc/704/task" dev="proc" ino=129345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 235.575940][ T28] audit: type=1400 audit(1771532552.359:2065): avc: denied { setopt } for pid=18998 comm="syz.6.5077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.762014][T19010] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 235.776399][T19010] bond1: (slave lo): Enslaving as an active interface with an up link [ 235.785397][T19010] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 235.834729][T19018] loop9: detected capacity change from 0 to 1024 [ 235.849323][T19018] EXT4-fs: Ignoring removed orlov option [ 235.879395][T19018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.920265][T19016] loop4: detected capacity change from 0 to 8192 [ 236.046982][T14327] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 236.061438][T14327] FAT-fs (loop4): Filesystem has been set read-only [ 236.113026][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.237025][T19037] loop9: detected capacity change from 0 to 512 [ 236.305650][T19037] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.352281][T19037] ext4 filesystem being mounted at /646/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.365927][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5088'. [ 236.425215][T19047] bond0: (slave syz_tun): Releasing backup interface [ 236.434027][T19037] support for cryptoloop has been removed. Use dm-crypt instead. [ 236.475632][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.498344][T19054] loop0: detected capacity change from 0 to 128 [ 236.598896][T16080] kworker/u8:11: attempt to access beyond end of device [ 236.598896][T16080] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 236.769777][T19079] veth0: entered promiscuous mode [ 236.788230][T19080] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5107'. [ 236.810584][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5108'. [ 236.833815][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5114'. [ 236.853853][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5114'. [ 236.872719][T19090] netlink: 'syz.6.5114': attribute type 6 has an invalid length. [ 236.890917][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5114'. [ 236.900136][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5114'. [ 236.909510][T19090] netlink: 'syz.6.5114': attribute type 6 has an invalid length. [ 236.965770][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5118'. [ 237.219215][T19124] loop0: detected capacity change from 0 to 4096 [ 237.243215][T19124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.467353][T19130] loop9: detected capacity change from 0 to 128 [ 238.046726][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.143937][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5142'. [ 238.238584][T19170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.421985][T19183] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 238.600537][T19200] loop9: detected capacity change from 0 to 512 [ 238.626778][T19200] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.660609][T19200] ext4 filesystem being mounted at /653/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.824661][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.995225][T19226] netlink: 'syz.1.5166': attribute type 12 has an invalid length. [ 239.003255][T19226] netlink: 'syz.1.5166': attribute type 29 has an invalid length. [ 239.011776][T19226] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5166'. [ 239.103806][T19236] loop9: detected capacity change from 0 to 512 [ 239.127966][T19236] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.158367][T19236] ext4 filesystem being mounted at /656/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.171695][T19236] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.5171: corrupted inode contents [ 239.184097][T19236] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.5171: mark_inode_dirty error [ 239.196069][T19236] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.5171: corrupted inode contents [ 239.208741][T19236] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.5171: mark_inode_dirty error [ 239.211921][T19244] bridge0: port 3(macsec0) entered blocking state [ 239.223349][T19236] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #2: comm syz.9.5171: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 239.223349][T19236] [ 239.261298][T19244] bridge0: port 3(macsec0) entered disabled state [ 239.268687][T19244] macsec0: entered allmulticast mode [ 239.274334][T19244] bridge0: entered allmulticast mode [ 239.281090][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.295100][T19246] loop4: detected capacity change from 0 to 128 [ 239.301349][T19244] macsec0: left allmulticast mode [ 239.307593][T19244] bridge0: left allmulticast mode [ 239.435564][T19256] ip6gre1: entered allmulticast mode [ 239.721995][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 239.722010][ T28] audit: type=1400 audit(1771532556.493:2111): avc: denied { mount } for pid=19280 comm="syz.0.5192" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 239.944069][T19295] loop4: detected capacity change from 0 to 2048 [ 239.974064][T19290] No such timeout policy "syz1" [ 240.003916][ T3303] loop4: p4 < > [ 240.019306][T19295] loop4: p4 < > [ 240.073484][ T28] audit: type=1326 audit(1771532556.843:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19304 comm="syz.1.5201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f192866c629 code=0x0 [ 240.128736][ T28] audit: type=1400 audit(1771532556.893:2113): avc: denied { read } for pid=19306 comm="syz.0.5204" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.152849][ T28] audit: type=1400 audit(1771532556.893:2114): avc: denied { open } for pid=19306 comm="syz.0.5204" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.179840][T19310] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5201'. [ 240.189422][T19310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5201'. [ 240.200513][T19312] xt_hashlimit: size too large, truncated to 1048576 [ 240.221483][ T28] audit: type=1400 audit(1771532556.903:2115): avc: denied { map } for pid=19306 comm="syz.0.5204" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.251774][T19319] syz_tun: entered promiscuous mode [ 240.260535][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5207'. [ 240.391883][T19326] loop9: detected capacity change from 0 to 256 [ 240.541269][ T28] audit: type=1400 audit(1771532557.313:2116): avc: denied { bind } for pid=19339 comm="syz.6.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.595581][ T28] audit: type=1400 audit(1771532557.313:2117): avc: denied { write } for pid=19339 comm="syz.6.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.710477][T19350] loop0: detected capacity change from 0 to 512 [ 240.753904][T19350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.801706][T19350] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.824533][ T28] audit: type=1400 audit(1771532557.603:2118): avc: denied { ioctl } for pid=19348 comm="syz.0.5220" path="/60/file0/file1" dev="loop0" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 240.875013][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.026623][ T28] audit: type=1400 audit(1771532557.803:2119): avc: denied { connect } for pid=19378 comm="syz.0.5232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 241.075205][ T28] audit: type=1400 audit(1771532557.833:2120): avc: denied { getopt } for pid=19378 comm="syz.0.5232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 241.419672][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5244'. [ 241.681985][T19431] loop0: detected capacity change from 0 to 8192 [ 241.717479][T18352] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 241.733646][T18352] FAT-fs (loop0): Filesystem has been set read-only [ 242.267090][T19476] SELinux: failed to load policy [ 242.399943][T19490] tls_set_device_offload: netdev not found [ 243.244286][T19560] netlink: 'syz.9.5306': attribute type 1 has an invalid length. [ 243.269960][T19560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.301958][T19560] bond2: (slave gretap2): making interface the new active one [ 243.318687][T19560] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 243.359259][T19529] loop0: detected capacity change from 0 to 1024 [ 243.372392][T19529] EXT4-fs: inline encryption not supported [ 243.380609][T19529] ext4: Bad value for 'mb_optimize_scan' [ 243.429479][T19566] loop0: detected capacity change from 0 to 512 [ 243.450257][T19566] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5308: couldn't read orphan inode 26 (err -116) [ 243.531143][T19566] loop0: lost filesystem error report for type 5 error -116 [ 243.531591][T19566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.604254][T19566] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.684328][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.802218][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5320'. [ 243.826855][T19609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.870606][T19623] netlink: 'syz.6.5324': attribute type 1 has an invalid length. [ 243.884586][T19623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.957408][T19623] bond1: (slave gretap1): making interface the new active one [ 243.965856][T19623] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 243.997694][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5325'. [ 244.419936][T19668] netlink: 'syz.6.5332': attribute type 2 has an invalid length. [ 244.427969][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5332'. [ 244.613757][T19672] netlink: 'syz.9.5335': attribute type 27 has an invalid length. [ 244.641166][T19672] ip6gre1: left allmulticast mode [ 244.654585][ T3438] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.670830][ T3438] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.679876][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5336'. [ 244.691047][ T3438] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.700673][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5336'. [ 244.710048][ T47] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.730220][T19676] netlink: 'syz.4.5336': attribute type 11 has an invalid length. [ 244.773141][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5336'. [ 244.773145][ T3438] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.817191][ T3438] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.823578][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5336'. [ 244.838241][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 244.838256][ T28] audit: type=1400 audit(1771532561.613:2154): avc: denied { create } for pid=19684 comm="syz.1.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 244.857526][T19676] netlink: 'syz.4.5336': attribute type 11 has an invalid length. [ 244.868156][ T3438] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.894838][ T3438] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.924069][ T28] audit: type=1400 audit(1771532561.663:2155): avc: denied { connect } for pid=19684 comm="syz.1.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 244.978158][ T28] audit: type=1400 audit(1771532561.663:2156): avc: denied { write } for pid=19684 comm="syz.1.5341" path="socket:[130837]" dev="sockfs" ino=130837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 245.073153][T19701] loop0: detected capacity change from 0 to 1024 [ 245.098511][T19701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 245.137933][ T3392] Process accounting resumed [ 245.142934][T19701] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.158104][T19701] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.5347: lblock 3 mapped to illegal pblock 3 (length 3) [ 245.180132][T19701] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 245.199755][T19701] EXT4-fs (loop0): This should not happen!! Data will be lost [ 245.199755][T19701] [ 245.212433][T19701] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: block 3: comm syz.0.5347: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.226752][ T28] audit: type=1400 audit(1771532561.993:2157): avc: denied { map } for pid=19700 comm="syz.0.5347" path="/88/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.262752][T19701] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: block 3: comm syz.0.5347: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.296349][T19701] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: block 3: comm syz.0.5347: lblock 3 mapped to illegal pblock 3 (length 1) [ 245.328270][T19716] EXT4-fs error (device loop0): ext4_ext_remove_space:2956: inode #15: comm syz.0.5347: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 245.379503][T19716] EXT4-fs error (device loop0) in ext4_setattr:5983: Corrupt filesystem [ 245.437172][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 245.634251][ T28] audit: type=1326 audit(1771532562.413:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.6.5360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd264dc629 code=0x0 [ 245.676793][ T28] audit: type=1400 audit(1771532562.413:2159): avc: denied { unmount } for pid=18352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 245.707095][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5361'. [ 245.727480][T16080] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.737037][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5361'. [ 245.753593][T16080] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.772317][T16080] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.821650][T16080] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.999036][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'. [ 246.026869][T19760] netlink: 'syz.1.5367': attribute type 6 has an invalid length. [ 246.061320][T16083] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.070307][T19760] netlink: 'syz.1.5367': attribute type 6 has an invalid length. [ 246.089244][T16083] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.119170][T16083] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.150117][T16083] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.193411][ T28] audit: type=1400 audit(1771532562.963:2160): avc: denied { listen } for pid=19763 comm="syz.1.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.353430][ T28] audit: type=1400 audit(1771532563.123:2161): avc: denied { bind } for pid=19771 comm="syz.1.5371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.408838][ T28] audit: type=1400 audit(1771532563.123:2162): avc: denied { setopt } for pid=19771 comm="syz.1.5371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.570987][T19785] netlink: 'syz.0.5376': attribute type 1 has an invalid length. [ 246.599301][T19790] netlink: 'syz.1.5379': attribute type 7 has an invalid length. [ 246.618238][T19785] bond1: entered promiscuous mode [ 246.635787][T19785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.659922][T19793] bond1: (slave bridge1): making interface the new active one [ 246.682224][T19793] bridge1: entered promiscuous mode [ 246.710489][T19793] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 246.853674][ T28] audit: type=1326 audit(1771532563.623:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19805 comm="syz.9.5384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf1ca4c629 code=0x0 [ 247.129190][T19849] erspan0: entered promiscuous mode [ 247.145682][T19849] gretap0: entered promiscuous mode [ 247.232815][T19863] loop9: detected capacity change from 0 to 1024 [ 247.256369][T19863] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 247.283686][T19863] ext4 filesystem being mounted at /696/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.305278][ C1] ================================================================== [ 247.313383][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 247.320591][ C1] [ 247.322906][ C1] read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 0: [ 247.331064][ C1] can_can_gw_rcv+0x863/0x870 [ 247.335745][ C1] can_rcv_filter+0xc7/0x4f0 [ 247.340348][ C1] can_receive+0x13e/0x190 [ 247.344773][ C1] can_rcv+0x17d/0x1f0 [ 247.348850][ C1] process_backlog+0x363/0x670 [ 247.353621][ C1] __napi_poll+0x61/0x330 [ 247.357965][ C1] net_rx_action+0x452/0x930 [ 247.362559][ C1] handle_softirqs+0xb9/0x2a0 [ 247.367320][ C1] run_ksoftirqd+0x1c/0x30 [ 247.371753][ C1] smpboot_thread_fn+0x32a/0x510 [ 247.376698][ C1] kthread+0x22a/0x280 [ 247.380767][ C1] ret_from_fork+0x150/0x360 [ 247.385363][ C1] ret_from_fork_asm+0x1a/0x30 [ 247.390220][ C1] [ 247.392530][ C1] read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 1: [ 247.400584][ C1] can_can_gw_rcv+0x863/0x870 [ 247.405518][ C1] can_rcv_filter+0xc7/0x4f0 [ 247.410248][ C1] can_receive+0x13e/0x190 [ 247.414753][ C1] can_rcv+0x17d/0x1f0 [ 247.418832][ C1] process_backlog+0x363/0x670 [ 247.423599][ C1] __napi_poll+0x61/0x330 [ 247.428003][ C1] net_rx_action+0x452/0x930 [ 247.432593][ C1] handle_softirqs+0xb9/0x2a0 [ 247.437257][ C1] run_ksoftirqd+0x1c/0x30 [ 247.441665][ C1] smpboot_thread_fn+0x32a/0x510 [ 247.446603][ C1] kthread+0x22a/0x280 [ 247.450658][ C1] ret_from_fork+0x150/0x360 [ 247.455244][ C1] ret_from_fork_asm+0x1a/0x30 [ 247.460015][ C1] [ 247.462323][ C1] value changed: 0x00001094 -> 0x00001095 [ 247.468108][ C1] [ 247.470439][ C1] Reported by Kernel Concurrency Sanitizer on: [ 247.476671][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 247.487521][ C1] Tainted: [W]=WARN [ 247.491307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.501534][ C1] ================================================================== [ 247.512146][ C1] ================================================================== [ 247.520248][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 247.527469][ C1] [ 247.529786][ C1] read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 0: [ 247.537847][ C1] can_rcv_filter+0x242/0x4f0 [ 247.542622][ C1] can_receive+0x13e/0x190 [ 247.547046][ C1] can_rcv+0x17d/0x1f0 [ 247.551127][ C1] process_backlog+0x363/0x670 [ 247.555987][ C1] __napi_poll+0x61/0x330 [ 247.560359][ C1] net_rx_action+0x452/0x930 [ 247.564962][ C1] handle_softirqs+0xb9/0x2a0 [ 247.569653][ C1] do_softirq+0x45/0x60 [ 247.573891][ C1] __local_bh_enable_ip+0x70/0x80 [ 247.579011][ C1] __alloc_skb+0x658/0x690 [ 247.583519][ C1] alloc_skb_with_frags+0x7d/0x470 [ 247.588632][ C1] sock_alloc_send_pskb+0x44d/0x500 [ 247.593835][ C1] unix_dgram_sendmsg+0x391/0x1060 [ 247.598960][ C1] __sys_sendto+0x470/0x4d0 [ 247.603640][ C1] __x64_sys_sendto+0x76/0x90 [ 247.608402][ C1] x64_sys_call+0x2d35/0x3020 [ 247.613172][ C1] do_syscall_64+0x12c/0x370 [ 247.617958][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.623852][ C1] [ 247.626530][ C1] read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 1: [ 247.634586][ C1] can_rcv_filter+0x242/0x4f0 [ 247.639548][ C1] can_receive+0x13e/0x190 [ 247.643976][ C1] can_rcv+0x17d/0x1f0 [ 247.648053][ C1] process_backlog+0x363/0x670 [ 247.652826][ C1] __napi_poll+0x61/0x330 [ 247.657173][ C1] net_rx_action+0x452/0x930 [ 247.661783][ C1] handle_softirqs+0xb9/0x2a0 [ 247.666549][ C1] __irq_exit_rcu+0x39/0xc0 [ 247.671146][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 247.676786][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.682770][ C1] selinux_inode_permission+0x5e/0x7d0 [ 247.688245][ C1] security_inode_permission+0x69/0xa0 [ 247.693713][ C1] link_path_walk+0x1de/0xe30 [ 247.698480][ C1] path_lookupat+0x8c/0x500 [ 247.703076][ C1] filename_lookup+0x190/0x390 [ 247.707848][ C1] do_readlinkat+0x74/0x2f0 [ 247.712446][ C1] __x64_sys_readlink+0x47/0x60 [ 247.717324][ C1] x64_sys_call+0x2b51/0x3020 [ 247.722009][ C1] do_syscall_64+0x12c/0x370 [ 247.726700][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.732596][ C1] [ 247.735002][ C1] value changed: 0x00000000000020d3 -> 0x00000000000020d4 [ 247.742106][ C1] [ 247.744419][ C1] Reported by Kernel Concurrency Sanitizer on: [ 247.750653][ C1] CPU: 1 UID: 0 PID: 2998 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 247.761334][ C1] Tainted: [W]=WARN [ 247.765130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.775442][ C1] ================================================================== [ 247.787342][ C0] ================================================================== [ 247.795538][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 247.802755][ C0] [ 247.805069][ C0] read-write to 0xffff888101c2a248 of 8 bytes by interrupt on cpu 1: [ 247.813217][ C0] can_rcv_filter+0xd9/0x4f0 [ 247.818189][ C0] can_receive+0x13e/0x190 [ 247.822622][ C0] can_rcv+0x17d/0x1f0 [ 247.826692][ C0] process_backlog+0x363/0x670 [ 247.831469][ C0] __napi_poll+0x61/0x330 [ 247.835893][ C0] net_rx_action+0x452/0x930 [ 247.840497][ C0] handle_softirqs+0xb9/0x2a0 [ 247.845173][ C0] do_softirq+0x45/0x60 [ 247.849333][ C0] __local_bh_enable_ip+0x70/0x80 [ 247.854353][ C0] __alloc_skb+0x2b6/0x690 [ 247.859124][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 247.864769][ C0] process_scheduled_works+0x4de/0x9e0 [ 247.870238][ C0] worker_thread+0x581/0x770 [ 247.874929][ C0] kthread+0x22a/0x280 [ 247.879000][ C0] ret_from_fork+0x150/0x360 [ 247.883780][ C0] ret_from_fork_asm+0x1a/0x30 [ 247.888653][ C0] [ 247.890965][ C0] read-write to 0xffff888101c2a248 of 8 bytes by interrupt on cpu 0: [ 247.899375][ C0] can_rcv_filter+0xd9/0x4f0 [ 247.903974][ C0] can_receive+0x13e/0x190 [ 247.908437][ C0] can_rcv+0x17d/0x1f0 [ 247.912606][ C0] process_backlog+0x363/0x670 [ 247.917384][ C0] __napi_poll+0x61/0x330 [ 247.921833][ C0] net_rx_action+0x452/0x930 [ 247.926699][ C0] handle_softirqs+0xb9/0x2a0 [ 247.931475][ C0] do_softirq+0x45/0x60 [ 247.935639][ C0] __local_bh_enable_ip+0x70/0x80 [ 247.940752][ C0] update_defense_level+0x59d/0x5d0 [ 247.945952][ C0] defense_work_handler+0x1f/0x80 [ 247.950999][ C0] process_scheduled_works+0x4de/0x9e0 [ 247.956466][ C0] worker_thread+0x581/0x770 [ 247.961179][ C0] kthread+0x22a/0x280 [ 247.965338][ C0] ret_from_fork+0x150/0x360 [ 247.970021][ C0] ret_from_fork_asm+0x1a/0x30 [ 247.974789][ C0] [ 247.977103][ C0] value changed: 0x000000000000627f -> 0x0000000000006280 [ 247.984197][ C0] [ 247.986513][ C0] Reported by Kernel Concurrency Sanitizer on: [ 247.992911][ C0] CPU: 0 UID: 0 PID: 8710 Comm: kworker/0:8 Tainted: G W syzkaller #0 PREEMPT(full) [ 248.004115][ C0] Tainted: [W]=WARN [ 248.007911][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.018150][ C0] Workqueue: events_long defense_work_handler [ 248.024503][ C0] ================================================================== [ 250.036060][ T8388] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 250.492592][ C1] ================================================================== [ 250.500791][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 250.508107][ C1] [ 250.510418][ C1] read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 0: [ 250.518484][ C1] can_can_gw_rcv+0x863/0x870 [ 250.523166][ C1] can_rcv_filter+0xc7/0x4f0 [ 250.527764][ C1] can_receive+0x13e/0x190 [ 250.532197][ C1] can_rcv+0x17d/0x1f0 [ 250.536272][ C1] process_backlog+0x363/0x670 [ 250.541050][ C1] __napi_poll+0x61/0x330 [ 250.545481][ C1] net_rx_action+0x452/0x930 [ 250.550084][ C1] handle_softirqs+0xb9/0x2a0 [ 250.554766][ C1] do_softirq+0x45/0x60 [ 250.558918][ C1] __local_bh_enable_ip+0x70/0x80 [ 250.563948][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 250.568973][ C1] lock_sock_nested+0x132/0x160 [ 250.573927][ C1] __inet_bind+0x2ce/0x5e0 [ 250.578458][ C1] inet_bind+0x93/0xa0 [ 250.582531][ C1] kernel_bind+0x97/0xe0 [ 250.586782][ C1] rds_tcp_conn_path_connect+0x3cb/0x5f0 [ 250.592416][ C1] rds_connect_worker+0x12f/0x1b0 [ 250.597537][ C1] process_scheduled_works+0x4de/0x9e0 [ 250.603027][ C1] worker_thread+0x581/0x770 [ 250.607638][ C1] kthread+0x22a/0x280 [ 250.611709][ C1] ret_from_fork+0x150/0x360 [ 250.616310][ C1] ret_from_fork_asm+0x1a/0x30 [ 250.621170][ C1] [ 250.623483][ C1] read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 1: [ 250.631633][ C1] can_can_gw_rcv+0x863/0x870 [ 250.636314][ C1] can_rcv_filter+0xc7/0x4f0 [ 250.640902][ C1] can_receive+0x13e/0x190 [ 250.645397][ C1] can_rcv+0x17d/0x1f0 [ 250.649459][ C1] process_backlog+0x363/0x670 [ 250.654311][ C1] __napi_poll+0x61/0x330 [ 250.658728][ C1] net_rx_action+0x452/0x930 [ 250.663310][ C1] handle_softirqs+0xb9/0x2a0 [ 250.667974][ C1] do_softirq+0x45/0x60 [ 250.672118][ C1] __local_bh_enable_ip+0x70/0x80 [ 250.677215][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 250.682230][ C1] release_sock+0x116/0x150 [ 250.686720][ C1] tcp_close+0x30/0xd0 [ 250.690802][ C1] inet_release+0xcd/0xf0 [ 250.695124][ C1] sock_close+0x6b/0x150 [ 250.699452][ C1] __fput+0x29b/0x650 [ 250.703423][ C1] fput_close_sync+0xad/0x190 [ 250.708100][ C1] __x64_sys_close+0x55/0xf0 [ 250.712683][ C1] x64_sys_call+0x275d/0x3020 [ 250.717448][ C1] do_syscall_64+0x12c/0x370 [ 250.722068][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.728035][ C1] [ 250.730339][ C1] value changed: 0x00049cf9 -> 0x00049cfa [ 250.736130][ C1] [ 250.738437][ C1] Reported by Kernel Concurrency Sanitizer on: [ 250.744577][ C1] CPU: 1 UID: 0 PID: 18352 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 250.755764][ C1] Tainted: [W]=WARN [ 250.759722][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.769850][ C1] ================================================================== [ 250.863263][ C1] ================================================================== [ 250.871387][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 250.878701][ C1] [ 250.881014][ C1] read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 0: [ 250.889079][ C1] can_rcv_filter+0x242/0x4f0 [ 250.893764][ C1] can_receive+0x13e/0x190 [ 250.898193][ C1] can_rcv+0x17d/0x1f0 [ 250.902266][ C1] process_backlog+0x363/0x670 [ 250.907046][ C1] __napi_poll+0x61/0x330 [ 250.911385][ C1] net_rx_action+0x452/0x930 [ 250.915987][ C1] handle_softirqs+0xb9/0x2a0 [ 250.920759][ C1] do_softirq+0x45/0x60 [ 250.924911][ C1] __local_bh_enable_ip+0x70/0x80 [ 250.930038][ C1] __alloc_skb+0x658/0x690 [ 250.934461][ C1] alloc_skb_with_frags+0x7d/0x470 [ 250.939659][ C1] sock_alloc_send_pskb+0x44d/0x500 [ 250.944950][ C1] unix_dgram_sendmsg+0x391/0x1060 [ 250.950070][ C1] __sys_sendto+0x470/0x4d0 [ 250.954596][ C1] __x64_sys_sendto+0x76/0x90 [ 250.959286][ C1] x64_sys_call+0x2d35/0x3020 [ 250.964088][ C1] do_syscall_64+0x12c/0x370 [ 250.968693][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.974686][ C1] [ 250.977002][ C1] read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 1: [ 250.985322][ C1] can_rcv_filter+0x242/0x4f0 [ 250.990013][ C1] can_receive+0x13e/0x190 [ 250.994553][ C1] can_rcv+0x17d/0x1f0 [ 250.998634][ C1] process_backlog+0x363/0x670 [ 251.003680][ C1] __napi_poll+0x61/0x330 [ 251.008101][ C1] net_rx_action+0x452/0x930 [ 251.012876][ C1] handle_softirqs+0xb9/0x2a0 [ 251.017637][ C1] do_softirq+0x45/0x60 [ 251.021798][ C1] __local_bh_enable_ip+0x70/0x80 [ 251.026990][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 251.031927][ C1] j1939_session_activate+0x1d3/0x220 [ 251.037640][ C1] j1939_sk_sendmsg+0x890/0xc00 [ 251.042511][ C1] ____sys_sendmsg+0x5af/0x600 [ 251.047370][ C1] ___sys_sendmsg+0x195/0x1e0 [ 251.052054][ C1] __sys_sendmmsg+0x185/0x320 [ 251.056774][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 251.061643][ C1] x64_sys_call+0x27aa/0x3020 [ 251.066328][ C1] do_syscall_64+0x12c/0x370 [ 251.070949][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.076840][ C1] [ 251.079245][ C1] value changed: 0x000000000004b61a -> 0x000000000004b61b [ 251.086349][ C1] [ 251.088660][ C1] Reported by Kernel Concurrency Sanitizer on: [ 251.094803][ C1] CPU: 1 UID: 0 PID: 19862 Comm: syz.4.5408 Tainted: G W syzkaller #0 PREEMPT(full) [ 251.105919][ C1] Tainted: [W]=WARN [ 251.109715][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.119855][ C1] ================================================================== [ 251.146879][ C0] ================================================================== [ 251.154991][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 251.162471][ C0] [ 251.164793][ C0] read-write to 0xffff888101c2a248 of 8 bytes by interrupt on cpu 1: [ 251.172858][ C0] can_rcv_filter+0xd9/0x4f0 [ 251.177652][ C0] can_receive+0x13e/0x190 [ 251.182087][ C0] can_rcv+0x17d/0x1f0 [ 251.186178][ C0] process_backlog+0x363/0x670 [ 251.190963][ C0] __napi_poll+0x61/0x330 [ 251.195307][ C0] net_rx_action+0x452/0x930 [ 251.199999][ C0] handle_softirqs+0xb9/0x2a0 [ 251.204765][ C0] do_softirq+0x45/0x60 [ 251.208931][ C0] __local_bh_enable_ip+0x70/0x80 [ 251.213954][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 251.218976][ C0] neigh_periodic_work+0x5e9/0x690 [ 251.224184][ C0] process_scheduled_works+0x4de/0x9e0 [ 251.229737][ C0] worker_thread+0x581/0x770 [ 251.234350][ C0] kthread+0x22a/0x280 [ 251.238412][ C0] ret_from_fork+0x150/0x360 [ 251.243190][ C0] ret_from_fork_asm+0x1a/0x30 [ 251.247964][ C0] [ 251.250275][ C0] read-write to 0xffff888101c2a248 of 8 bytes by interrupt on cpu 0: [ 251.258334][ C0] can_rcv_filter+0xd9/0x4f0 [ 251.262933][ C0] can_receive+0x13e/0x190 [ 251.267441][ C0] can_rcv+0x17d/0x1f0 [ 251.271605][ C0] process_backlog+0x363/0x670 [ 251.276558][ C0] __napi_poll+0x61/0x330 [ 251.281107][ C0] net_rx_action+0x452/0x930 [ 251.285713][ C0] handle_softirqs+0xb9/0x2a0 [ 251.290400][ C0] run_ksoftirqd+0x1c/0x30 [ 251.294817][ C0] smpboot_thread_fn+0x32a/0x510 [ 251.299859][ C0] kthread+0x22a/0x280 [ 251.303924][ C0] ret_from_fork+0x150/0x360 [ 251.308613][ C0] ret_from_fork_asm+0x1a/0x30 [ 251.313393][ C0] [ 251.315705][ C0] value changed: 0x00000000000504a3 -> 0x00000000000504a4 [ 251.322799][ C0] [ 251.325122][ C0] Reported by Kernel Concurrency Sanitizer on: [ 251.331355][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 251.342212][ C0] Tainted: [W]=WARN [ 251.346054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.356189][ C0] ================================================================== [ 253.507425][ C1] ================================================================== [ 253.515542][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 253.522749][ C1] [ 253.525060][ C1] read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 0: [ 253.533116][ C1] can_can_gw_rcv+0x863/0x870 [ 253.537801][ C1] can_rcv_filter+0xc7/0x4f0 [ 253.542509][ C1] can_receive+0x13e/0x190 [ 253.546949][ C1] can_rcv+0x17d/0x1f0 [ 253.551029][ C1] process_backlog+0x363/0x670 [ 253.555892][ C1] __napi_poll+0x61/0x330 [ 253.560397][ C1] net_rx_action+0x452/0x930 [ 253.565168][ C1] handle_softirqs+0xb9/0x2a0 [ 253.569845][ C1] do_softirq+0x45/0x60 [ 253.574167][ C1] __local_bh_enable_ip+0x70/0x80 [ 253.579192][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 253.584141][ C1] release_sock+0x116/0x150 [ 253.588640][ C1] inet_stream_connect+0x57/0x70 [ 253.593584][ C1] kernel_connect+0x9f/0xf0 [ 253.598103][ C1] rds_tcp_conn_path_connect+0x50d/0x5f0 [ 253.603735][ C1] rds_connect_worker+0x12f/0x1b0 [ 253.608854][ C1] process_scheduled_works+0x4de/0x9e0 [ 253.614326][ C1] worker_thread+0x581/0x770 [ 253.618919][ C1] kthread+0x22a/0x280 [ 253.622985][ C1] ret_from_fork+0x150/0x360 [ 253.627586][ C1] ret_from_fork_asm+0x1a/0x30 [ 253.632365][ C1] [ 253.634724][ C1] read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 1: [ 253.642782][ C1] can_can_gw_rcv+0x863/0x870 [ 253.647460][ C1] can_rcv_filter+0xc7/0x4f0 [ 253.652059][ C1] can_receive+0x13e/0x190 [ 253.656479][ C1] can_rcv+0x17d/0x1f0 [ 253.660556][ C1] process_backlog+0x363/0x670 [ 253.665324][ C1] __napi_poll+0x61/0x330 [ 253.669668][ C1] net_rx_action+0x452/0x930 [ 253.674359][ C1] handle_softirqs+0xb9/0x2a0 [ 253.679036][ C1] do_softirq+0x45/0x60 [ 253.683281][ C1] __local_bh_enable_ip+0x70/0x80 [ 253.688387][ C1] kernel_fpu_end+0x6c/0x80 [ 253.692991][ C1] crc32c+0x77/0x290 [ 253.696891][ C1] journal_submit_commit_record+0x285/0x410 [ 253.702879][ C1] jbd2_journal_commit_transaction+0x2052/0x3420 [ 253.709297][ C1] kjournald2+0x22e/0x3e0 [ 253.713716][ C1] kthread+0x22a/0x280 [ 253.717870][ C1] ret_from_fork+0x150/0x360 [ 253.722463][ C1] ret_from_fork_asm+0x1a/0x30 [ 253.727235][ C1] [ 253.729556][ C1] value changed: 0x0008d4f7 -> 0x0008d4f8 [ 253.735351][ C1] [ 253.738100][ C1] Reported by Kernel Concurrency Sanitizer on: [ 253.744243][ C1] CPU: 1 UID: 0 PID: 2959 Comm: jbd2/sda1-8 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.755445][ C1] Tainted: [W]=WARN [ 253.759330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.769468][ C1] ================================================================== [ 253.864192][ C0] ================================================================== [ 253.872482][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 253.879702][ C0] [ 253.882021][ C0] read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 1: [ 253.890265][ C0] can_rcv_filter+0x242/0x4f0 [ 253.895020][ C0] can_receive+0x13e/0x190 [ 253.899466][ C0] can_rcv+0x17d/0x1f0 [ 253.903568][ C0] process_backlog+0x363/0x670 [ 253.908432][ C0] __napi_poll+0x61/0x330 [ 253.912776][ C0] net_rx_action+0x452/0x930 [ 253.917384][ C0] handle_softirqs+0xb9/0x2a0 [ 253.922064][ C0] run_ksoftirqd+0x1c/0x30 [ 253.926482][ C0] smpboot_thread_fn+0x32a/0x510 [ 253.931693][ C0] kthread+0x22a/0x280 [ 253.935759][ C0] ret_from_fork+0x150/0x360 [ 253.940376][ C0] ret_from_fork_asm+0x1a/0x30 [ 253.945145][ C0] [ 253.947462][ C0] read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 0: [ 253.955525][ C0] can_rcv_filter+0x242/0x4f0 [ 253.960211][ C0] can_receive+0x13e/0x190 [ 253.964633][ C0] can_rcv+0x17d/0x1f0 [ 253.968710][ C0] process_backlog+0x363/0x670 [ 253.973486][ C0] __napi_poll+0x61/0x330 [ 253.977822][ C0] net_rx_action+0x452/0x930 [ 253.982522][ C0] handle_softirqs+0xb9/0x2a0 [ 253.987283][ C0] do_softirq+0x45/0x60 [ 253.991441][ C0] __local_bh_enable_ip+0x70/0x80 [ 253.996458][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 254.001482][ C0] batadv_iv_ogm_queue_add+0x5ba/0x910 [ 254.007034][ C0] batadv_iv_ogm_schedule+0x513/0x810 [ 254.012409][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x419/0x470 [ 254.019439][ C0] process_scheduled_works+0x4de/0x9e0 [ 254.025088][ C0] worker_thread+0x581/0x770 [ 254.029687][ C0] kthread+0x22a/0x280 [ 254.033852][ C0] ret_from_fork+0x150/0x360 [ 254.038458][ C0] ret_from_fork_asm+0x1a/0x30 [ 254.043243][ C0] [ 254.045594][ C0] value changed: 0x0000000000092f09 -> 0x0000000000092f0a [ 254.052692][ C0] [ 254.055014][ C0] Reported by Kernel Concurrency Sanitizer on: [ 254.061160][ C0] CPU: 0 UID: 0 PID: 19871 Comm: kworker/u8:18 Tainted: G W syzkaller #0 PREEMPT(full) [ 254.072370][ C0] Tainted: [W]=WARN [ 254.076179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.086374][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 254.094193][ C0] ================================================================== [ 254.177056][ C0] ================================================================== [ 254.185162][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 254.192489][ C0] [ 254.194804][ C0] read-write to 0xffff888101c2a248 of 8 bytes by interrupt on cpu 1: [ 254.202870][ C0] can_rcv_filter+0xd9/0x4f0 [ 254.207475][ C0] can_receive+0x13e/0x190 [ 254.212072][ C0] can_rcv+0x17d/0x1f0 [ 254.216233][ C0] process_backlog+0x363/0x670 [ 254.221074][ C0] __napi_poll+0x61/0x330 [ 254.225415][ C0] net_rx_action+0x452/0x930 [ 254.230108][ C0] handle_softirqs+0xb9/0x2a0 [ 254.234832][ C0] do_softirq+0x45/0x60 [ 254.238994][ C0] __local_bh_enable_ip+0x70/0x80 [ 254.244015][ C0] _raw_write_unlock_bh+0x1f/0x30 [ 254.249127][ C0] __tcp_close+0x79f/0x1130 [ 254.253632][ C0] tcp_close+0x28/0xd0 [ 254.257783][ C0] inet_release+0xcd/0xf0 [ 254.262203][ C0] sock_release+0x4b/0xe0 [ 254.266635][ C0] rds_tcp_conn_path_connect+0x5b8/0x5f0 [ 254.272386][ C0] rds_connect_worker+0x12f/0x1b0 [ 254.277430][ C0] process_scheduled_works+0x4de/0x9e0 [ 254.282896][ C0] worker_thread+0x581/0x770 [ 254.287621][ C0] kthread+0x22a/0x280 [ 254.291789][ C0] ret_from_fork+0x150/0x360 [ 254.296481][ C0] ret_from_fork_asm+0x1a/0x30 [ 254.301253][ C0] [ 254.303772][ C0] read-write to 0xffff888101c2a248 of 8 bytes by interrupt on cpu 0: [ 254.311832][ C0] can_rcv_filter+0xd9/0x4f0 [ 254.316523][ C0] can_receive+0x13e/0x190 [ 254.320963][ C0] can_rcv+0x17d/0x1f0 [ 254.325135][ C0] process_backlog+0x363/0x670 [ 254.329998][ C0] __napi_poll+0x61/0x330 [ 254.334339][ C0] net_rx_action+0x452/0x930 [ 254.338943][ C0] handle_softirqs+0xb9/0x2a0 [ 254.343620][ C0] do_softirq+0x45/0x60 [ 254.347773][ C0] __local_bh_enable_ip+0x70/0x80 [ 254.352802][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 254.357739][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 254.363464][ C0] process_scheduled_works+0x4de/0x9e0 [ 254.369016][ C0] worker_thread+0x581/0x770 [ 254.373616][ C0] kthread+0x22a/0x280 [ 254.377679][ C0] ret_from_fork+0x150/0x360 [ 254.382278][ C0] ret_from_fork_asm+0x1a/0x30 [ 254.387046][ C0] [ 254.389365][ C0] value changed: 0x0000000000095d66 -> 0x0000000000095d67 [ 254.396459][ C0] [ 254.398772][ C0] Reported by Kernel Concurrency Sanitizer on: [ 254.404918][ C0] CPU: 0 UID: 0 PID: 16085 Comm: kworker/u8:13 Tainted: G W syzkaller #0 PREEMPT(full) [ 254.416127][ C0] Tainted: [W]=WARN [ 254.419920][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.429970][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 254.436841][ C0] ================================================================== [ 256.573949][ C0] ================================================================== [ 256.582154][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 256.589404][ C0] [ 256.591902][ C0] read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 1: [ 256.599964][ C0] can_can_gw_rcv+0x863/0x870 [ 256.604725][ C0] can_rcv_filter+0xc7/0x4f0 [ 256.609324][ C0] can_receive+0x13e/0x190 [ 256.613747][ C0] can_rcv+0x17d/0x1f0 [ 256.617824][ C0] process_backlog+0x363/0x670 [ 256.622603][ C0] __napi_poll+0x61/0x330 [ 256.626953][ C0] net_rx_action+0x452/0x930 [ 256.631555][ C0] handle_softirqs+0xb9/0x2a0 [ 256.636239][ C0] run_ksoftirqd+0x1c/0x30 [ 256.640657][ C0] smpboot_thread_fn+0x32a/0x510 [ 256.645609][ C0] kthread+0x22a/0x280 [ 256.649681][ C0] ret_from_fork+0x150/0x360 [ 256.654287][ C0] ret_from_fork_asm+0x1a/0x30 [ 256.659063][ C0] [ 256.661382][ C0] read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 0: [ 256.669446][ C0] can_can_gw_rcv+0x863/0x870 [ 256.674130][ C0] can_rcv_filter+0xc7/0x4f0 [ 256.678736][ C0] can_receive+0x13e/0x190 [ 256.683160][ C0] can_rcv+0x17d/0x1f0 [ 256.687330][ C0] process_backlog+0x363/0x670 [ 256.692123][ C0] __napi_poll+0x61/0x330 [ 256.696459][ C0] net_rx_action+0x452/0x930 [ 256.701060][ C0] handle_softirqs+0xb9/0x2a0 [ 256.705749][ C0] do_softirq+0x45/0x60 [ 256.709900][ C0] __local_bh_enable_ip+0x70/0x80 [ 256.714961][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 256.719952][ C0] wg_packet_encrypt_worker+0x169/0xde0 [ 256.725658][ C0] process_scheduled_works+0x4de/0x9e0 [ 256.731122][ C0] worker_thread+0x581/0x770 [ 256.735811][ C0] kthread+0x22a/0x280 [ 256.739882][ C0] ret_from_fork+0x150/0x360 [ 256.744664][ C0] ret_from_fork_asm+0x1a/0x30 [ 256.749526][ C0] [ 256.751865][ C0] value changed: 0x000d2790 -> 0x000d2791 [ 256.757583][ C0] [ 256.759893][ C0] Reported by Kernel Concurrency Sanitizer on: [ 256.766046][ C0] CPU: 0 UID: 0 PID: 8710 Comm: kworker/0:8 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.777071][ C0] Tainted: [W]=WARN [ 256.780949][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.791010][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 256.797615][ C0] ================================================================== [ 256.947198][ C0] ================================================================== [ 256.955399][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 256.962615][ C0] [ 256.964926][ C0] read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 1: [ 256.973074][ C0] can_rcv_filter+0x242/0x4f0 [ 256.977874][ C0] can_receive+0x13e/0x190 [ 256.982384][ C0] can_rcv+0x17d/0x1f0 [ 256.986461][ C0] process_backlog+0x363/0x670 [ 256.991340][ C0] __napi_poll+0x61/0x330 [ 256.995765][ C0] net_rx_action+0x452/0x930 [ 257.000368][ C0] handle_softirqs+0xb9/0x2a0 [ 257.005131][ C0] do_softirq+0x45/0x60 [ 257.009294][ C0] __local_bh_enable_ip+0x70/0x80 [ 257.014328][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 257.019561][ C0] j1939_session_activate+0x1d3/0x220 [ 257.024964][ C0] j1939_sk_sendmsg+0x890/0xc00 [ 257.029832][ C0] ____sys_sendmsg+0x5af/0x600 [ 257.034605][ C0] ___sys_sendmsg+0x195/0x1e0 [ 257.039301][ C0] __sys_sendmmsg+0x185/0x320 [ 257.044072][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 257.048928][ C0] x64_sys_call+0x27aa/0x3020 [ 257.053623][ C0] do_syscall_64+0x12c/0x370 [ 257.058250][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.064186][ C0] [ 257.066526][ C0] read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 0: [ 257.074852][ C0] can_rcv_filter+0x242/0x4f0 [ 257.079560][ C0] can_receive+0x13e/0x190 [ 257.084001][ C0] can_rcv+0x17d/0x1f0 [ 257.088174][ C0] process_backlog+0x363/0x670 [ 257.092965][ C0] __napi_poll+0x61/0x330 [ 257.097307][ C0] net_rx_action+0x452/0x930 [ 257.101997][ C0] handle_softirqs+0xb9/0x2a0 [ 257.106761][ C0] do_softirq+0x45/0x60 [ 257.110916][ C0] __local_bh_enable_ip+0x70/0x80 [ 257.115940][ C0] __alloc_skb+0x658/0x690 [ 257.120362][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 257.126008][ C0] process_scheduled_works+0x4de/0x9e0 [ 257.131478][ C0] worker_thread+0x581/0x770 [ 257.136181][ C0] kthread+0x22a/0x280 [ 257.140248][ C0] ret_from_fork+0x150/0x360 [ 257.144851][ C0] ret_from_fork_asm+0x1a/0x30 [ 257.149639][ C0] [ 257.151957][ C0] value changed: 0x00000000000d97bb -> 0x00000000000d97bc [ 257.159054][ C0] [ 257.161400][ C0] Reported by Kernel Concurrency Sanitizer on: [ 257.167635][ C0] CPU: 0 UID: 0 PID: 16078 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(full) [ 257.179031][ C0] Tainted: [W]=WARN [ 257.182826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.192881][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 257.199684][ C0] ================================================================== [ 257.283947][ C1] ================================================================== [ 257.292147][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 257.299604][ C1] [ 257.301919][ C1] read-write to 0xffff888101c2a248 of 8 bytes by interrupt on cpu 0: [ 257.310151][ C1] can_rcv_filter+0xd9/0x4f0 [ 257.314763][ C1] can_receive+0x13e/0x190 [ 257.319187][ C1] can_rcv+0x17d/0x1f0 [ 257.323268][ C1] process_backlog+0x363/0x670 [ 257.328040][ C1] __napi_poll+0x61/0x330