last executing test programs: 5m19.367892062s ago: executing program 32 (id=591): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000040)=0xff56) 4m6.481036695s ago: executing program 3 (id=2169): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") creat(&(0x7f0000000e40)='./bus\x00', 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@errors_continue}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) fallocate(r0, 0x0, 0x8, 0x1101f0) 4m6.243010108s ago: executing program 3 (id=2174): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x2, r0}) 4m6.005241111s ago: executing program 5 (id=2177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)={0x11}, 0x8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) 4m5.938414352s ago: executing program 5 (id=2180): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000001c80)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "3d8cd2", 0x44, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0x4, 0x3, 0x0, 0x1, 0x2}, 0x1, {0x6c5}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x67, 0x1, 0x0, 0x0, 0x6, 0x3c}, 0x2, {0x9, 0x5, 0x0, 0x11, 0x0, 0x1, 0x0, 0x1}}}}}}}}}, 0x0) 4m5.101518453s ago: executing program 5 (id=2183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 4m5.101435643s ago: executing program 3 (id=2184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x40, r0, 0x0, 0x0, 0x3}]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_pgetevents(r1, 0x1, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000140), 0x0) 4m5.101320513s ago: executing program 4 (id=2185): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x80, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) 4m5.040915924s ago: executing program 5 (id=2186): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 4m5.010713605s ago: executing program 4 (id=2187): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r0, &(0x7f0000000280)="1e08", 0x2) 4m4.966260185s ago: executing program 3 (id=2188): r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f00000000c0)='.\x00', 0x517002, 0x0) 4m4.945672556s ago: executing program 5 (id=2189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) dup2(r1, r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4m4.871473077s ago: executing program 4 (id=2190): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) 4m4.837604907s ago: executing program 3 (id=2191): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, r1, 0x25, 0x0, @val=@netfilter}, 0x40) 4m4.759990108s ago: executing program 5 (id=2192): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 4m4.726013988s ago: executing program 4 (id=2193): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x8000000c}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) connect(r0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) 4m4.675343599s ago: executing program 4 (id=2194): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x18}, 0xb7}], 0x1, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) 4m4.351349773s ago: executing program 3 (id=2195): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x100}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4m3.799746561s ago: executing program 4 (id=2197): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x6020) 2m24.070962169s ago: executing program 33 (id=2196): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x2, {0x2, 0x0, 0x6}, 0xfd}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x2, {0x1, 0xff, 0x1}}, 0x18) 2m24.01011372s ago: executing program 34 (id=2182): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$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") 2m23.97583127s ago: executing program 35 (id=2192): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 2m23.912142281s ago: executing program 36 (id=2195): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x100}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m23.808700232s ago: executing program 37 (id=2197): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x6020) 2m7.519253394s ago: executing program 8 (id=2384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000001040)={0x4, 0x6, 0x7, 0x7bd9, 0x7, "97bbc5fca26d3a32f627ea43c95a6ad2221be8", 0x7ff, 0x8faf}) 2m6.610152467s ago: executing program 8 (id=2406): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m6.523428017s ago: executing program 8 (id=2408): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x10cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7, 0xee}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) 2m6.504574458s ago: executing program 8 (id=2409): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) syz_usb_connect(0x5, 0x8f, &(0x7f0000000300)=ANY=[@ANYBLOB="120110015a292e08100c0000a7950102030109027d0002a20000000904"], 0x0) 2m5.62863101s ago: executing program 8 (id=2425): unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) 2m5.288811284s ago: executing program 8 (id=2433): ioprio_set$pid(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) 2m5.234785825s ago: executing program 38 (id=2433): ioprio_set$pid(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) 1m0.531538176s ago: executing program 0 (id=3935): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 1m0.531223446s ago: executing program 0 (id=3937): unshare(0x22020400) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) 59.731402377s ago: executing program 0 (id=3962): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 59.670942228s ago: executing program 0 (id=3966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de35e", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe754}]}}}}}}}, 0x0) 59.627541019s ago: executing program 0 (id=3968): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x104000, 0x0) 59.582820129s ago: executing program 0 (id=3969): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) 43.594958297s ago: executing program 39 (id=3969): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) 8.318466857s ago: executing program 9 (id=4959): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e24, @empty}}, 0xe, 0x9f93}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, &(0x7f00000002c0)=0x84) 8.253610088s ago: executing program 9 (id=4962): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r1, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.06149038s ago: executing program 9 (id=4965): creat(&(0x7f0000000040)='./bus\x00', 0x108) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000004c0)='./bus\x00', 0x2) 7.998995581s ago: executing program 9 (id=4967): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 7.891510033s ago: executing program 9 (id=4979): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x104000, 0x0) 7.829836623s ago: executing program 9 (id=4969): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 2.083079792s ago: executing program 7 (id=5074): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x217b, 0x101, 0x20d, 0x5, 0xffffff00, 0x0, 0x1, 0x8001, r1}, &(0x7f0000000100)=0x20) 2.010807043s ago: executing program 7 (id=5076): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x16) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x3, 0x9}) 1.291622682s ago: executing program 2 (id=5082): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.126736055s ago: executing program 7 (id=5083): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) 1.031626946s ago: executing program 7 (id=5085): socket$nl_netfilter(0x10, 0x3, 0xc) gettid() futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 652.509662ms ago: executing program 6 (id=5097): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) io_cancel(0x0, 0x0, 0x0) 509.371143ms ago: executing program 1 (id=5098): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 509.115393ms ago: executing program 6 (id=5099): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x9}, 0x10cc92, 0xc8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fe}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c"], 0xfdef) 455.620624ms ago: executing program 1 (id=5100): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 455.447234ms ago: executing program 2 (id=5101): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000900)={[{@block_validity}, {@nomblk_io_submit}, {@usrjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@acl}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x596, &(0x7f0000001340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f00000009c0)='./file0\x00', 0x20000, 0x80) 455.366614ms ago: executing program 6 (id=5102): r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000240)='.\x00', r1, &(0x7f0000000200)='./file0\x00') unlinkat(r1, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) 433.162984ms ago: executing program 1 (id=5103): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 371.810165ms ago: executing program 6 (id=5104): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_tid_address(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) fsync(r0) 323.612026ms ago: executing program 1 (id=5105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x2, r2}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) 273.211086ms ago: executing program 2 (id=5106): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r0}, 0x20) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r2, 0x1}, 0x20) 213.600248ms ago: executing program 1 (id=5107): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000009}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 131.379198ms ago: executing program 7 (id=5108): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 131.186158ms ago: executing program 6 (id=5109): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 121.255019ms ago: executing program 2 (id=5110): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f0000000600)="febc", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 91.863369ms ago: executing program 2 (id=5111): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 23.5506ms ago: executing program 7 (id=5112): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r2, 0x0) 23.37877ms ago: executing program 1 (id=5113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x2, 0x7, 0x8106, @void}, "134a318536459f4c076600"/32}}}}}}}, 0x52) 8.01484ms ago: executing program 2 (id=5114): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x5a) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 0s ago: executing program 6 (id=5115): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x51, 0x80, 0xfe, 0x0, 0x9, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) kernel console output (not intermixed with test programs): 0009: unknown main item tag 0x7 [ 315.759355][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.772990][ T3412] hid-generic 0000:0000:0000.0009: ignoring exceeding usage max [ 315.786981][T13899] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 315.795916][ T6247] IPVS: starting estimator thread 0... [ 315.816050][ T3412] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 315.830404][ T3412] hid-generic 0000:0000:0000.0009: unknown main item tag 0x6 [ 315.851997][ T3412] hid-generic 0000:0000:0000.0009: reserved main item tag 0xd [ 315.869388][ T3412] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 315.893785][T13909] IPVS: using max 2256 ests per chain, 112800 per kthread [ 315.928866][T13917] syzkaller1: entered promiscuous mode [ 315.937799][T13918] fido_id[13918]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 315.951699][T13917] syzkaller1: entered allmulticast mode [ 316.021622][T13925] 9p: Could not find request transport: 0x0000000000000004 [ 316.386875][T13971] loop2: detected capacity change from 0 to 512 [ 316.398153][T13971] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3786: Invalid inode bitmap blk 4 in block_group 0 [ 316.414014][T13971] loop2: lost filesystem error report for type 5 error -117 [ 316.423785][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 316.437688][ C0] EXT4-fs (loop2): initial error at time 2000000663: ext4_read_inode_bitmap:139 [ 316.446790][ C0] EXT4-fs (loop2): last error at time 2000000663: ext4_read_inode_bitmap:139 [ 316.465097][T13971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.529380][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.584026][ T3412] tipc: Node number set to 4269801494 [ 316.735249][T13996] loop6: detected capacity change from 0 to 256 [ 316.750421][T13996] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.781987][T13998] syzkaller1: entered promiscuous mode [ 316.794494][T13998] syzkaller1: entered allmulticast mode [ 316.816051][T13996] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.481353][T14043] netlink: 'syz.9.3816': attribute type 4 has an invalid length. [ 317.544460][T14049] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3818'. [ 317.594562][T14053] loop0: detected capacity change from 0 to 128 [ 317.602954][T14053] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.620984][T14053] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.659190][T13987] syz.7.3792 (13987) used greatest stack depth: 7160 bytes left [ 317.669173][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3819'. [ 317.736954][T10275] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.820281][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 317.820300][ T28] audit: type=1400 audit(2000000665.230:4730): avc: denied { mount } for pid=14065 comm="syz.2.3825" name="/" dev="ramfs" ino=39706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 317.895431][ T28] audit: type=1326 audit(2000000665.290:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.7.3826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 317.971805][ T28] audit: type=1326 audit(2000000665.290:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.7.3826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 318.029261][T14066] loop0: detected capacity change from 0 to 8192 [ 318.039120][ T28] audit: type=1326 audit(2000000665.290:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.7.3826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 318.117339][ T28] audit: type=1326 audit(2000000665.290:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.7.3826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 318.168320][ T28] audit: type=1326 audit(2000000665.290:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.7.3826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 318.194476][ T28] audit: type=1326 audit(2000000665.290:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.7.3826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 318.221303][T14066] loop0: p3 p4 < > [ 318.259025][ T28] audit: type=1326 audit(2000000665.290:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.7.3826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 318.291457][T14066] loop0: p3 size 83886080 extends beyond EOD, truncated [ 318.302939][ T28] audit: type=1326 audit(2000000665.290:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.7.3826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 318.338391][ T28] audit: type=1326 audit(2000000665.290:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.7.3826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 318.911590][T14121] loop9: detected capacity change from 0 to 512 [ 318.933014][T14121] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 318.944891][T14121] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 319.017775][T14129] loop6: detected capacity change from 0 to 512 [ 319.045117][T14129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.070320][T14135] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3855'. [ 319.104228][T14129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.129920][T14135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3855'. [ 319.141536][T14129] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.180626][T14144] netlink: 'syz.2.3858': attribute type 1 has an invalid length. [ 319.191510][T14144] netlink: 'syz.2.3858': attribute type 2 has an invalid length. [ 319.222922][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.256377][T14152] loop2: detected capacity change from 0 to 512 [ 319.296571][T14152] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3862: corrupted in-inode xattr: invalid ea_ino [ 319.314801][T14152] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.315348][T14152] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3862: couldn't read orphan inode 15 (err -117) [ 319.324661][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 319.324685][ C0] EXT4-fs (loop2): initial error at time 2000000666: ext4_iget_extra_inode:5128: inode 15 [ 319.324720][ C0] EXT4-fs (loop2): last error at time 2000000666: ext4_iget_extra_inode:5128: inode 15 [ 319.363560][T14152] loop2: lost filesystem error report for type 5 error -117 [ 319.384304][T14152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.420357][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.546592][T14177] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3873'. [ 319.559199][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3873'. [ 319.562959][T14175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3874'. [ 319.592272][T14175] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3874'. [ 319.602118][T14178] loop9: detected capacity change from 0 to 256 [ 319.610079][T14175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3874'. [ 319.620240][T14175] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3874'. [ 319.633661][T14178] FAT-fs (loop9): bogus number of FAT sectors [ 319.635470][T14175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3874'. [ 319.660984][T14178] FAT-fs (loop9): Can't find a valid FAT filesystem [ 319.800561][T14193] loop6: detected capacity change from 0 to 256 [ 319.822759][T14190] loop9: detected capacity change from 0 to 512 [ 319.853536][T14190] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3879: inode has both inline data and extents flags [ 319.884013][ T6251] kernel write not supported for file /735/net/ip6_tables_matches (pid: 6251 comm: kworker/0:14) [ 319.892328][T14190] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.909879][T14190] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3879: couldn't read orphan inode 15 (err -117) [ 319.919165][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 319.919192][ C1] EXT4-fs (loop9): initial error at time 2000000667: ext4_orphan_get:1397: inode 15 [ 319.919232][ C1] EXT4-fs (loop9): last error at time 2000000667: ext4_orphan_get:1397: inode 15 [ 319.998492][T14190] loop9: lost filesystem error report for type 5 error -117 [ 320.000375][T14190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.171044][ T9059] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.193506][T14226] loop2: detected capacity change from 0 to 2048 [ 320.204878][T14226] EXT4-fs: Ignoring removed i_version option [ 320.259284][T14226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.276293][T14226] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.290974][T14226] EXT4-fs (loop2): shut down requested (0) [ 320.321049][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.482237][T14253] netlink: 'syz.7.3907': attribute type 3 has an invalid length. [ 320.500942][T14253] netlink: 'syz.7.3907': attribute type 1 has an invalid length. [ 320.622760][T14263] xt_hashlimit: size too large, truncated to 1048576 [ 321.226740][T14300] loop9: detected capacity change from 0 to 4096 [ 321.245386][T14300] EXT4-fs: Ignoring removed bh option [ 321.256965][T14300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.289979][T14300] EXT4-fs error (device loop9): ext4_empty_dir:3101: inode #12: block 80: comm syz.9.3928: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 321.358751][T14300] EXT4-fs (loop9): Remounting filesystem read-only [ 321.393504][T14300] EXT4-fs warning (device loop9): ext4_empty_dir:3104: inode #12: comm syz.9.3928: directory missing '..' [ 321.447738][ T9059] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.090047][T14352] loop2: detected capacity change from 0 to 512 [ 322.099279][T14352] EXT4-fs: Ignoring removed nobh option [ 322.109660][T14352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 322.128376][T14352] EXT4-fs (loop2): 1 truncate cleaned up [ 322.135015][T14352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.305026][T14363] loop6: detected capacity change from 0 to 512 [ 322.322854][T14363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.341409][T14363] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.357573][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.380076][T14367] netlink: 'syz.7.3957': attribute type 39 has an invalid length. [ 322.448759][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.767867][T14390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.786127][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 322.830397][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 322.871396][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 322.898679][ T9059] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.911099][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 322.936133][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 322.959333][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 322.981591][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 323.005060][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 323.023224][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 323.047461][T14393] netlink: 'syz.6.3970': attribute type 1 has an invalid length. [ 323.568939][T14406] __nla_validate_parse: 6 callbacks suppressed [ 323.568963][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 323.979092][T14435] Cannot find add_set index 0 as target [ 324.020468][ T8821] Bluetooth: hci0: Frame reassembly failed (-84) [ 324.068805][T14442] set_capacity_and_notify: 2 callbacks suppressed [ 324.068857][T14442] loop6: detected capacity change from 0 to 512 [ 324.091192][T14442] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 324.118980][T14442] EXT4-fs (loop6): 1 truncate cleaned up [ 324.142507][T14442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.176158][T14442] EXT4-fs error (device loop6): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.6.3991: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 324.196818][T14442] EXT4-fs (loop6): Remounting filesystem read-only [ 324.203439][T14442] EXT4-fs warning (device loop6): ext4_rename_delete:3739: inode #2: comm syz.6.3991: Deleting old file: nlink 4, error=-117 [ 324.232126][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.251634][T14447] loop7: detected capacity change from 0 to 8192 [ 324.347406][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 324.347426][ T28] audit: type=1400 audit(2000000671.760:4756): avc: denied { connect } for pid=14450 comm="syz.7.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.999394][ T28] audit: type=1326 audit(2000000672.410:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.2.4000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 325.046706][ T28] audit: type=1326 audit(2000000672.410:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.2.4000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 325.085633][ T28] audit: type=1326 audit(2000000672.410:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.2.4000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 325.111592][ T28] audit: type=1326 audit(2000000672.410:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.2.4000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 325.147322][ T28] audit: type=1326 audit(2000000672.410:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.2.4000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 325.180664][ T28] audit: type=1326 audit(2000000672.410:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.2.4000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 325.209699][ T28] audit: type=1326 audit(2000000672.410:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.2.4000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 325.235788][ T28] audit: type=1326 audit(2000000672.410:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.2.4000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 325.279241][T14470] loop2: detected capacity change from 0 to 256 [ 325.287254][T14470] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.300216][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.309283][ T28] audit: type=1326 audit(2000000672.500:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.2.4000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 325.338360][T14470] FAT-fs (loop2): Filesystem has been set read-only [ 325.345279][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.354420][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.364390][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.373111][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.382228][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.391101][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.400046][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.408929][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.417811][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.426719][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.435639][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.450532][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.466703][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.485826][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.515126][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.525990][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.557598][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.575934][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.604234][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.613239][T14475] syzkaller1: entered promiscuous mode [ 325.631632][T14475] syzkaller1: entered allmulticast mode [ 325.633175][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.673773][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.702769][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.721869][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.740717][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.762598][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.777046][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.787505][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.817519][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.843770][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.863772][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.873564][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.905521][T14480] loop6: detected capacity change from 0 to 512 [ 325.906294][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.922955][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.933642][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.945440][T14480] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 325.949568][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.968461][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 325.981765][T14480] EXT4-fs (loop6): 1 orphan inode deleted [ 326.002643][T14480] EXT4-fs (loop6): 1 truncate cleaned up [ 326.023151][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 326.031590][T14480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.032030][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 326.052925][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 326.061680][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 326.067162][T14480] EXT4-fs (loop6): shut down requested (2) [ 326.070496][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 326.084722][ T5347] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 326.090957][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 326.099696][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 326.116164][T14470] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 326.171300][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.182939][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4011'. [ 326.240147][T14486] loop7: detected capacity change from 0 to 8192 [ 326.273501][T14492] loop2: detected capacity change from 0 to 512 [ 326.293315][T14492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.367276][T14492] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.4012: iget: bad i_size value: 38620345925642 [ 326.403775][T14492] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 326.405446][T14492] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4012: couldn't read orphan inode 15 (err -117) [ 326.414678][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 326.414713][ C0] EXT4-fs (loop2): initial error at time 2000000673: ext4_orphan_get:1397: inode 15 [ 326.414749][ C0] EXT4-fs (loop2): last error at time 2000000673: ext4_orphan_get:1397: inode 15 [ 326.451977][T14492] loop2: lost filesystem error report for type 5 error -117 [ 326.467532][T14492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.575640][ T49] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 326.616422][ T3412] kernel read not supported for file /vcs (pid: 3412 comm: kworker/0:5) [ 326.627693][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 326.650443][ T49] EXT4-fs (loop2): This should not happen!! Data will be lost [ 326.650443][ T49] [ 326.661736][ T49] EXT4-fs (loop2): Total free blocks count 0 [ 326.673378][T14511] loop6: detected capacity change from 0 to 512 [ 326.681128][ T49] EXT4-fs (loop2): Free/Dirty block details [ 326.695068][ T49] EXT4-fs (loop2): free_blocks=0 [ 326.700207][ T49] EXT4-fs (loop2): dirty_blocks=3 [ 326.706643][ T49] EXT4-fs (loop2): Block reservation details [ 326.713058][ T49] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 326.736108][T14511] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4022: inode has both inline data and extents flags [ 326.751071][ T9064] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 326.767858][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.778314][T14511] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 326.783712][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 326.799536][ C1] EXT4-fs (loop6): initial error at time 2000000674: ext4_orphan_get:1397: inode 15 [ 326.808979][ C1] EXT4-fs (loop6): last error at time 2000000674: ext4_orphan_get:1397: inode 15 [ 326.811449][T14511] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4022: couldn't read orphan inode 15 (err -117) [ 326.860929][T14511] loop6: lost filesystem error report for type 5 error -117 [ 326.882908][T14511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.926879][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4026'. [ 326.972349][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.088753][T14534] Invalid argument reading file caps for ./file0 [ 327.388443][T14557] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4041'. [ 327.427601][T14561] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4043'. [ 327.445235][T14561] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4043'. [ 327.636739][T14574] loop6: detected capacity change from 0 to 512 [ 327.677977][T14574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.733255][T14574] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.780837][T14574] EXT4-fs: Cannot change journaled quota options when quota turned on [ 327.791170][T14579] syzkaller1: entered promiscuous mode [ 327.810419][T14579] syzkaller1: entered allmulticast mode [ 327.819495][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.867223][T14591] validate_nla: 47 callbacks suppressed [ 327.867241][T14591] netlink: 'syz.7.4055': attribute type 10 has an invalid length. [ 327.888555][T14591] netlink: 55 bytes leftover after parsing attributes in process `syz.7.4055'. [ 328.048466][T14602] loop7: detected capacity change from 0 to 512 [ 328.065480][ T6169] kernel read not supported for file /801/net/snmp (pid: 6169 comm: kworker/1:9) [ 328.080361][T14602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.125440][T14602] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.146200][T14602] EXT4-fs (loop7): shut down requested (1) [ 328.360676][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 328.849850][T14635] netlink: 'syz.6.4070': attribute type 10 has an invalid length. [ 328.862660][T14635] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4070'. [ 328.910396][T14639] loop9: detected capacity change from 0 to 512 [ 328.929314][T14639] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.966613][T14643] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.985637][T14639] EXT4-fs: Cannot change journaled quota options when quota turned on [ 329.002749][T14643] EXT4-fs (loop6): shut down requested (1) [ 329.505105][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 329.505123][ T28] audit: type=1400 audit(2000000676.920:4858): avc: denied { create } for pid=14671 comm="syz.9.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.553361][ T28] audit: type=1400 audit(2000000676.910:4857): avc: denied { cpu } for pid=14670 comm="syz.7.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 329.595070][ T28] audit: type=1400 audit(2000000676.950:4859): avc: denied { write } for pid=14671 comm="syz.9.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.651147][ T28] audit: type=1400 audit(2000000676.950:4860): avc: denied { read } for pid=14671 comm="syz.9.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.694938][ T28] audit: type=1400 audit(2000000677.030:4861): avc: denied { create } for pid=14674 comm="syz.9.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 329.720514][ T28] audit: type=1400 audit(2000000677.040:4862): avc: denied { bind } for pid=14674 comm="syz.9.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 329.740439][ T28] audit: type=1400 audit(2000000677.040:4863): avc: denied { write } for pid=14674 comm="syz.9.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 329.760131][ T28] audit: type=1400 audit(2000000677.050:4864): avc: denied { setopt } for pid=14674 comm="syz.9.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 329.762326][T14677] set_capacity_and_notify: 1 callbacks suppressed [ 329.762369][T14677] loop9: detected capacity change from 0 to 512 [ 329.828288][T14677] EXT4-fs mount: 5 callbacks suppressed [ 329.828345][T14677] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.867468][ T28] audit: type=1400 audit(2000000677.270:4865): avc: denied { map } for pid=14683 comm="syz.6.4088" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=41758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 329.927079][T14677] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.941199][ T28] audit: type=1400 audit(2000000677.270:4866): avc: denied { read write } for pid=14683 comm="syz.6.4088" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=41758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 329.968548][T14677] EXT4-fs (loop9): shut down requested (1) [ 330.020277][ T9059] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.101346][ T6251] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 330.120540][ T6251] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.403827][ T5347] Bluetooth: hci0: command 0x1003 tx timeout [ 330.406460][ T3938] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 330.847974][T14730] loop7: detected capacity change from 0 to 128 [ 330.862488][ T3412] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 330.889450][ T3412] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.934278][T14732] loop6: detected capacity change from 0 to 2048 [ 330.975873][T14732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.032388][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.055275][T14742] loop7: detected capacity change from 0 to 1024 [ 331.076602][T14742] EXT4-fs: Ignoring removed bh option [ 331.152313][T14742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.170515][T14749] loop2: detected capacity change from 0 to 512 [ 331.222999][T14749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.273015][T14749] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.305348][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.354752][T14749] EXT4-fs (loop2): shut down requested (1) [ 331.379898][T14757] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 331.449937][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.512790][T14764] vxcan1: tx drop: invalid da for name 0x00000000000000f5 [ 331.532248][ T67] Bluetooth: hci0: Frame reassembly failed (-84) [ 331.560929][T14768] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4120'. [ 331.583480][T14768] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4120'. [ 331.603988][T14768] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4120'. [ 331.749336][T14779] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 331.760183][ T6169] team_slave_0: entered promiscuous mode [ 331.765944][ T6169] team_slave_1: entered promiscuous mode [ 331.778350][ T6169] bridge1: entered promiscuous mode [ 331.789538][T14779] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 333.603746][ T5347] Bluetooth: hci0: command 0x1003 tx timeout [ 333.603747][ T3938] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 338.697606][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 338.697625][ T28] audit: type=1400 audit(2000000686.110:4901): avc: denied { mounton } for pid=14786 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 338.887518][T14786] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.894667][T14786] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.901897][T14786] bridge_slave_0: entered allmulticast mode [ 338.908847][T14786] bridge_slave_0: entered promiscuous mode [ 338.918017][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.929429][T14786] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.937716][T14786] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.946172][T14786] bridge_slave_1: entered allmulticast mode [ 338.952724][T14786] bridge_slave_1: entered promiscuous mode [ 338.962597][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.988660][T14786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.000174][T14786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.021605][T14786] team0: Port device team_slave_0 added [ 339.029211][T14786] team0: Port device team_slave_1 added [ 339.049425][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.062172][T14786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.069271][T14786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.095424][T14786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.106894][T14786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.113963][T14786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.140010][T14786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.155560][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.183261][T14786] hsr_slave_0: entered promiscuous mode [ 339.189347][T14786] hsr_slave_1: entered promiscuous mode [ 339.195497][T14786] debugfs: 'hsr0' already exists in 'hsr' [ 339.201253][T14786] Cannot create hsr debugfs directory [ 339.221777][ T28] audit: type=1400 audit(2000000686.630:4902): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 339.275202][ T67] bridge_slave_1: left allmulticast mode [ 339.280897][ T67] bridge_slave_1: left promiscuous mode [ 339.287862][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.298225][ T67] bridge_slave_0: left allmulticast mode [ 339.304057][ T67] bridge_slave_0: left promiscuous mode [ 339.309763][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.354993][ T67] erspan0 (unregistering): left promiscuous mode [ 339.363599][ T67] gretap0 (unregistering): left promiscuous mode [ 339.416547][ T67] team0: Port device bridge1 removed [ 339.457143][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.468412][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.478218][ T67] bond0 (unregistering): Released all slaves [ 339.510235][ T67] tipc: Disabling bearer [ 339.516687][ T67] tipc: Left network mode [ 339.528347][ T67] hsr_slave_0: left promiscuous mode [ 339.535080][ T67] hsr_slave_1: left promiscuous mode [ 339.540739][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.549277][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.558407][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.566886][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.580505][ T67] veth1_macvtap: left promiscuous mode [ 339.587489][ T67] veth0_macvtap: left promiscuous mode [ 339.593282][ T67] veth1_vlan: left promiscuous mode [ 339.599714][ T67] veth0_vlan: left promiscuous mode [ 339.680038][ T67] team0 (unregistering): Port device team_slave_1 removed [ 339.691289][ T67] team0 (unregistering): Port device team_slave_0 removed [ 339.739485][ T28] audit: type=1400 audit(2000000687.150:4903): avc: denied { search } for pid=3020 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.762860][ T28] audit: type=1400 audit(2000000687.150:4904): avc: denied { search } for pid=3020 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.788256][ T28] audit: type=1400 audit(2000000687.150:4905): avc: denied { search } for pid=3020 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.811505][ T28] audit: type=1400 audit(2000000687.150:4906): avc: denied { read } for pid=3020 comm="dhcpcd" name="n55" dev="tmpfs" ino=18159 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.837394][ T28] audit: type=1400 audit(2000000687.150:4907): avc: denied { open } for pid=3020 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=18159 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.860748][ T28] audit: type=1400 audit(2000000687.150:4908): avc: denied { getattr } for pid=3020 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=18159 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.884499][ T28] audit: type=1400 audit(2000000687.200:4909): avc: denied { read } for pid=14808 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.907733][ T28] audit: type=1400 audit(2000000687.200:4910): avc: denied { read open } for pid=14808 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.985598][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 340.106461][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 340.167592][ T67] IPVS: stop unused estimator thread 0... [ 340.233186][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 340.350042][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 340.697978][T14786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 340.707741][T14786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.715938][T14786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 340.725854][T14786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.733961][T14786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 340.742532][T14786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.751022][T14786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 340.760343][T14786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.802734][T14786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.814953][T14786] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.826991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.834134][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.849002][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.856148][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.009267][T14786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.102658][T14786] veth0_vlan: entered promiscuous mode [ 341.116050][T14786] veth1_vlan: entered promiscuous mode [ 341.133098][T14786] veth0_macvtap: entered promiscuous mode [ 341.145585][T14786] veth1_macvtap: entered promiscuous mode [ 341.159912][T14786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.172891][T14786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.188635][ T3432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.208445][ T3432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.221594][ T3432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.242642][ T3432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.301723][T14986] loop2: detected capacity change from 0 to 512 [ 341.320514][T14986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 341.329260][T14986] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.345879][T14986] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 341.357776][T14986] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 341.367401][T14986] EXT4-fs (loop2): 1 truncate cleaned up [ 341.390432][T14986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.461675][T14986] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 4: comm syz.2.4142: lblock 0 mapped to illegal pblock 4 (length 1) [ 341.487701][T14986] EXT4-fs (loop2): Remounting filesystem read-only [ 341.520276][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.683075][T15018] loop1: detected capacity change from 0 to 512 [ 341.722766][T15018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.748314][T15018] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.767262][T15018] EXT4-fs (loop1): shut down requested (1) [ 341.796553][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.804999][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4134'. [ 341.938507][ T3412] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 341.956835][ T3412] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.090709][ T3432] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.657045][T15119] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4152'. [ 342.718742][T15125] loop9: detected capacity change from 0 to 512 [ 342.745545][T15125] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.758725][T15125] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.776255][T15125] EXT4-fs (loop9): shut down requested (1) [ 342.792770][ T9059] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.570062][T15163] loop6: detected capacity change from 0 to 1024 [ 343.590142][T15163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.614141][T15163] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.646993][ T67] Bluetooth: hci1: Frame reassembly failed (-84) [ 343.657473][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 344.051111][T15174] loop6: detected capacity change from 0 to 256 [ 344.085886][T15176] loop6: detected capacity change from 0 to 512 [ 344.093531][T15176] EXT4-fs: Ignoring removed nobh option [ 344.102456][T15176] EXT4-fs: Ignoring removed orlov option [ 344.111429][T15176] EXT4-fs error (device loop6): __ext4_iget:5481: inode #11: block 1: comm syz.6.4174: invalid block [ 344.124021][T15176] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 344.124179][T15176] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4174: couldn't read orphan inode 11 (err -117) [ 344.145254][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 344.145289][ C1] EXT4-fs (loop6): initial error at time 2000000691: __ext4_iget:5481: inode 11: block 1 [ 344.145344][ C1] EXT4-fs (loop6): last error at time 2000000691: __ext4_iget:5481: inode 11: block 1 [ 344.163724][T15169] Bluetooth: hci0: command 0x1003 tx timeout [ 344.163823][ T3938] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.189395][T15176] loop6: lost filesystem error report for type 5 error -117 [ 344.190143][T15176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.222539][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 344.222698][ T28] audit: type=1400 audit(2000000691.630:5007): avc: denied { write } for pid=15175 comm="syz.6.4174" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.228835][T15176] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 344.265840][ T28] audit: type=1400 audit(2000000691.640:5008): avc: denied { create } for pid=15179 comm="syz.7.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 344.286360][ T28] audit: type=1400 audit(2000000691.660:5009): avc: denied { connect } for pid=15179 comm="syz.7.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 344.317120][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.327905][ T28] audit: type=1400 audit(2000000691.680:5010): avc: denied { write } for pid=15179 comm="syz.7.4175" path="socket:[43518]" dev="sockfs" ino=43518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 344.361706][T15184] loop7: detected capacity change from 0 to 512 [ 344.369616][T15184] EXT4-fs: Ignoring removed i_version option [ 344.377183][T15184] EXT4-fs: Ignoring removed bh option [ 344.397902][T15184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.421526][T15184] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.439280][ T28] audit: type=1400 audit(2000000691.850:5011): avc: denied { write } for pid=15183 comm="syz.7.4176" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.482843][ T28] audit: type=1400 audit(2000000691.890:5012): avc: denied { name_bind } for pid=15191 comm="syz.6.4178" src=17955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 344.506385][ T28] audit: type=1400 audit(2000000691.890:5013): avc: denied { node_bind } for pid=15191 comm="syz.6.4178" src=17955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 344.530263][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.668837][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4194'. [ 344.697228][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4194'. [ 344.789615][ T28] audit: type=1400 audit(2000000692.200:5014): avc: denied { create } for pid=15211 comm="syz.9.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 344.818064][ T28] audit: type=1400 audit(2000000692.220:5015): avc: denied { setopt } for pid=15211 comm="syz.9.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 344.850607][ T28] audit: type=1400 audit(2000000692.220:5016): avc: denied { connect } for pid=15211 comm="syz.9.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 344.942345][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4190'. [ 344.992746][T15230] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4193'. [ 345.103057][T15240] SELinux: failed to load policy [ 345.496011][T15279] loop7: detected capacity change from 0 to 1024 [ 345.524499][T15285] loop9: detected capacity change from 0 to 512 [ 345.538619][T15285] EXT4-fs: test_dummy_encryption option not supported [ 345.553577][T15279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 345.599848][T15279] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.620503][T15279] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.4218: lblock 0 mapped to illegal pblock 0 (length 1) [ 345.634199][T15279] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 345.646563][T15279] EXT4-fs (loop7): This should not happen!! Data will be lost [ 345.646563][T15279] [ 345.657297][T15279] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.4218: lblock 0 mapped to illegal pblock 0 (length 1) [ 345.671124][T15279] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.4218: lblock 0 mapped to illegal pblock 0 (length 1) [ 345.692327][T15279] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.4218: lblock 0 mapped to illegal pblock 0 (length 1) [ 345.705800][ T5347] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 345.715898][T15279] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.4218: lblock 0 mapped to illegal pblock 0 (length 1) [ 345.742569][T15279] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.4218: lblock 0 mapped to illegal pblock 0 (length 1) [ 345.759995][T15279] EXT4-fs error (device loop7): ext4_ext_remove_space:2969: inode #15: comm syz.7.4218: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 345.788765][T15303] loop9: detected capacity change from 0 to 512 [ 345.824322][T15303] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.839462][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 345.853174][T15302] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c098, mo2=0002] [ 345.875370][T15303] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.881189][T15302] System zones: 0-2, 18-18, 34-35 [ 345.900440][T15303] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 345.916805][T15303] EXT4-fs (loop9): Remounting filesystem read-only [ 345.923540][T15302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.945276][T15302] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.971066][ T9059] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.012930][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4232'. [ 346.023286][T15317] netlink: 'syz.9.4232': attribute type 30 has an invalid length. [ 346.049531][ T67] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.096376][ T67] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.119005][ T67] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.149161][ T67] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.281931][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.551221][T15362] set_capacity_and_notify: 2 callbacks suppressed [ 346.551286][T15362] loop6: detected capacity change from 0 to 512 [ 346.583030][T15362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 346.588543][T15356] team0: Port device syz_tun added [ 346.597468][T15362] System zones: 1-12 [ 346.601815][T15362] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.4255: Directory hole found for htree index block 0 [ 346.614489][T15362] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 346.614876][T15362] EXT4-fs (loop6): Remounting filesystem read-only [ 346.623833][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 346.636983][ C1] EXT4-fs (loop6): initial error at time 2000000694: dx_probe:791: inode 2 [ 346.645711][ C1] EXT4-fs (loop6): last error at time 2000000694: dx_probe:791: inode 2 [ 346.663066][T15362] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 346.672705][T15362] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 346.682164][T15363] team0: Port device syz_tun removed [ 346.683090][T15362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.716138][T15363] bridge_slave_0: left allmulticast mode [ 346.721910][T15363] bridge_slave_0: left promiscuous mode [ 346.729312][T15363] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.746049][T15363] bridge_slave_1: left allmulticast mode [ 346.752231][T15363] bridge_slave_1: left promiscuous mode [ 346.760388][T15363] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.769589][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.780892][T15363] bond0: (slave bond_slave_0): Releasing backup interface [ 346.792618][T15363] bond0: (slave bond_slave_1): Releasing backup interface [ 346.812727][T15363] team0: Port device team_slave_0 removed [ 346.835965][T15363] team0: Port device team_slave_1 removed [ 346.855321][T15363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.863200][T15363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.873136][T15363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.880875][T15363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.893335][T15363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.978134][T15377] loop1: detected capacity change from 0 to 256 [ 346.992816][T15377] FAT-fs (loop1): Directory bread(block 64) failed [ 347.013346][T15377] FAT-fs (loop1): Directory bread(block 65) failed [ 347.022473][T15377] FAT-fs (loop1): Directory bread(block 66) failed [ 347.030785][T15377] FAT-fs (loop1): Directory bread(block 67) failed [ 347.038841][T15377] FAT-fs (loop1): Directory bread(block 68) failed [ 347.047005][T15377] FAT-fs (loop1): Directory bread(block 69) failed [ 347.055551][T15377] FAT-fs (loop1): Directory bread(block 70) failed [ 347.062129][T15377] FAT-fs (loop1): Directory bread(block 71) failed [ 347.070041][T15377] FAT-fs (loop1): Directory bread(block 72) failed [ 347.078052][T15377] FAT-fs (loop1): Directory bread(block 73) failed [ 347.402489][T15382] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 347.629480][T15395] batadv_slave_1: entered promiscuous mode [ 347.637898][T15395] macsec1: entered promiscuous mode [ 347.643431][T15395] macsec1: entered allmulticast mode [ 347.650173][T15395] batadv_slave_1: entered allmulticast mode [ 347.656522][T15395] batadv_slave_1: left allmulticast mode [ 347.656595][T15395] batadv_slave_1: left promiscuous mode [ 348.102493][T15424] loop1: detected capacity change from 0 to 512 [ 348.122636][T15424] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 348.147252][T15424] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.4277: inode has both inline data and extents flags [ 348.169605][T15431] syzkaller1: entered promiscuous mode [ 348.175298][T15424] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.175601][T15424] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4277: couldn't read orphan inode 15 (err -117) [ 348.175595][T15431] syzkaller1: entered allmulticast mode [ 348.184925][T15424] loop1: lost filesystem error report for type 5 error -117 [ 348.209722][T15424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.258582][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.349716][T15438] loop1: detected capacity change from 0 to 512 [ 348.362984][T15438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.379171][T15438] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.408730][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.498126][T15451] loop7: detected capacity change from 0 to 512 [ 348.517586][T15451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.532598][T15451] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.560299][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.645999][T15461] loop6: detected capacity change from 0 to 1024 [ 348.670873][T15461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 348.692457][T15461] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.734626][T15461] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.4294: lblock 3 mapped to illegal pblock 3 (length 3) [ 348.767082][T15461] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 348.795096][T15461] EXT4-fs (loop6): This should not happen!! Data will be lost [ 348.795096][T15461] [ 348.809292][T15461] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4294: bg 0: block 112: padding at end of block bitmap is not set [ 348.828592][T15461] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 3 with error 28 [ 348.850031][T15461] EXT4-fs (loop6): This should not happen!! Data will be lost [ 348.850031][T15461] [ 348.862031][T15461] EXT4-fs (loop6): Total free blocks count 0 [ 348.868424][T15461] EXT4-fs (loop6): Free/Dirty block details [ 348.875013][T15461] EXT4-fs (loop6): free_blocks=0 [ 348.880117][T15461] EXT4-fs (loop6): dirty_blocks=64 [ 348.886954][T15461] EXT4-fs (loop6): Block reservation details [ 348.977122][ T67] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 349.006870][ T9047] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 349.057738][T15486] loop6: detected capacity change from 0 to 1024 [ 349.086511][T15486] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 349.113099][T15486] EXT4-fs (loop6): mount failed [ 349.161000][T15497] netlink: 'syz.2.4306': attribute type 7 has an invalid length. [ 349.169093][T15497] netlink: 'syz.2.4306': attribute type 23 has an invalid length. [ 349.265515][T15509] loop6: detected capacity change from 0 to 1024 [ 349.282489][T15509] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.311131][T15514] netlink: 'syz.9.4315': attribute type 13 has an invalid length. [ 349.320560][T15514] netlink: 24859 bytes leftover after parsing attributes in process `syz.9.4315'. [ 349.335755][T15509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 349.349151][T15509] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.362711][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 349.362728][ T28] audit: type=1400 audit(2000000696.770:5099): avc: denied { write } for pid=15506 comm="syz.6.4311" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.391788][T15509] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.4311: lblock 3 mapped to illegal pblock 3 (length 3) [ 349.416980][T15509] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 349.455196][T15509] EXT4-fs (loop6): This should not happen!! Data will be lost [ 349.455196][T15509] [ 349.518766][ T8821] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 349.545332][ T8821] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 349.558598][T15534] netlink: 'syz.7.4324': attribute type 10 has an invalid length. [ 349.569010][ T8821] EXT4-fs (loop6): This should not happen!! Data will be lost [ 349.569010][ T8821] [ 349.583499][T15534] team0: Port device dummy0 added [ 349.600850][ T9047] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 349.622010][T15534] dummy0: entered promiscuous mode [ 349.631210][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 349.672158][T15539] netlink: 165 bytes leftover after parsing attributes in process `syz.9.4326'. [ 349.791907][ T28] audit: type=1400 audit(2000000697.200:5100): avc: denied { bind } for pid=15548 comm="syz.9.4331" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.818934][T15551] loop6: detected capacity change from 0 to 256 [ 349.851786][T15551] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 349.857179][ T28] audit: type=1400 audit(2000000697.200:5101): avc: denied { name_bind } for pid=15548 comm="syz.9.4331" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 349.886841][ T28] audit: type=1400 audit(2000000697.200:5102): avc: denied { node_bind } for pid=15548 comm="syz.9.4331" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 349.998266][T15562] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 350.053586][T15562] FAT-fs (loop6): Filesystem has been set read-only [ 350.076536][T15562] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 350.158381][ T28] audit: type=1400 audit(2000000697.570:5103): avc: denied { shutdown } for pid=15577 comm="syz.2.4343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 350.232242][T15582] loop1: detected capacity change from 0 to 1024 [ 350.279965][T15582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.329763][ T28] audit: type=1400 audit(2000000697.740:5104): avc: denied { write } for pid=15580 comm="syz.1.4346" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.353501][ T28] audit: type=1400 audit(2000000697.760:5105): avc: denied { sqpoll } for pid=15568 comm="syz.7.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 351.197899][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.477571][T15613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.500583][ T28] audit: type=1400 audit(2000000698.910:5106): avc: denied { write } for pid=15612 comm="syz.7.4359" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.579982][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.582778][T15624] serio: Serial port ptm0 [ 351.619844][T15627] smc: net device vcan0 applied user defined pnetid SYZ1 [ 351.638581][T15627] smc: net device vcan0 erased user defined pnetid SYZ1 [ 351.665883][T15631] set_capacity_and_notify: 1 callbacks suppressed [ 351.665900][T15631] loop7: detected capacity change from 0 to 128 [ 351.696196][T15631] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.710816][T15631] ext4 filesystem being mounted at /471/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.746994][ T9058] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.782695][T15637] loop6: detected capacity change from 0 to 2048 [ 351.796613][ T28] audit: type=1400 audit(2000000699.210:5107): avc: denied { read } for pid=15635 comm="syz.6.4368" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.825260][ T28] audit: type=1400 audit(2000000699.210:5108): avc: denied { open } for pid=15635 comm="syz.6.4368" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.952588][T15649] loop1: detected capacity change from 0 to 512 [ 352.003969][T15649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 352.019036][T15649] System zones: 1-20 [ 352.028325][T15649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.358462][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.512794][T15690] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4391'. [ 352.600446][T15700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4396'. [ 352.850788][T15731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 352.857378][T15731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.870233][T15731] vhci_hcd vhci_hcd.0: Device attached [ 352.881320][T15731] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 352.887908][T15731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.896960][T15731] vhci_hcd vhci_hcd.0: Device attached [ 352.906214][T15731] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 352.912830][T15731] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 352.922119][T15731] vhci_hcd vhci_hcd.0: Device attached [ 352.931886][T15731] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 352.938456][T15731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.965114][T15731] vhci_hcd vhci_hcd.0: Device attached [ 352.987260][T15747] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 352.993928][T15747] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 353.011113][T15747] vhci_hcd vhci_hcd.0: Device attached [ 353.019028][T15741] vhci_hcd: connection closed [ 353.019104][T15732] vhci_hcd: connection closed [ 353.019495][T15738] vhci_hcd: connection closed [ 353.023908][ T3432] vhci_hcd vhci_hcd.1: stop threads [ 353.023930][ T3432] vhci_hcd vhci_hcd.1: release socket [ 353.023957][ T3432] vhci_hcd vhci_hcd.1: disconnect device [ 353.039721][ T106] vhci_hcd vhci_hcd.1: stop threads [ 353.041490][T15736] vhci_hcd: connection closed [ 353.061104][T15748] vhci_hcd: connection closed [ 353.067997][ T106] vhci_hcd vhci_hcd.1: release socket [ 353.079826][ T106] vhci_hcd vhci_hcd.1: disconnect device [ 353.087362][ T106] vhci_hcd vhci_hcd.1: stop threads [ 353.092737][ T106] vhci_hcd vhci_hcd.1: release socket [ 353.099686][ T106] vhci_hcd vhci_hcd.1: disconnect device [ 353.106688][ T106] vhci_hcd vhci_hcd.1: stop threads [ 353.112455][ T106] vhci_hcd vhci_hcd.1: release socket [ 353.118259][ T106] vhci_hcd vhci_hcd.1: disconnect device [ 353.124045][ T3411] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 353.131688][ T3411] usb 3-1: enqueue for inactive port 0 [ 353.147065][ T106] vhci_hcd vhci_hcd.1: stop threads [ 353.157123][ T3411] usb 3-1: enqueue for inactive port 0 [ 353.162689][ T106] vhci_hcd vhci_hcd.1: release socket [ 353.170833][ T3411] usb 3-1: enqueue for inactive port 0 [ 353.178114][ T106] vhci_hcd vhci_hcd.1: disconnect device [ 353.255353][ T3411] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 353.281735][T15758] loop9: detected capacity change from 0 to 4096 [ 353.288893][T15758] EXT4-fs: Ignoring removed bh option [ 353.299402][T15758] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.348522][ T9059] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.430756][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4418'. [ 353.628948][T15786] loop1: detected capacity change from 0 to 164 [ 353.642246][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x0 [ 353.659394][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x0 [ 353.675451][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x0 [ 353.701464][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x0 [ 353.720902][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x2 [ 353.741137][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x0 [ 353.761418][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x0 [ 353.787416][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x7 [ 353.796979][T15796] geneve2: entered promiscuous mode [ 353.817184][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x0 [ 353.833573][ T6174] hid-generic 0000:0000:000E.000D: unknown main item tag 0x0 [ 353.845702][ T6174] hid-generic 0000:0000:000E.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 353.881344][T15801] fido_id[15801]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 354.088814][T15820] loop6: detected capacity change from 0 to 1024 [ 354.107731][T15820] EXT4-fs: inline encryption not supported [ 354.148250][T15820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 354.165634][T15820] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.189715][T15820] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.4432: Freeing blocks not in datazone - block = 0, count = 16 [ 354.268474][ T67] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 354.324949][ T67] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 354.367891][ T67] EXT4-fs (loop6): This should not happen!! Data will be lost [ 354.367891][ T67] [ 354.403772][ T67] EXT4-fs (loop6): Total free blocks count 0 [ 354.429109][ T67] EXT4-fs (loop6): Free/Dirty block details [ 354.441766][ T67] EXT4-fs (loop6): free_blocks=16 [ 354.452902][ T67] EXT4-fs (loop6): dirty_blocks=16 [ 354.466247][ T67] EXT4-fs (loop6): Block reservation details [ 354.480119][ T67] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 354.493154][ T9047] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 354.525316][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 354.540917][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 354.540942][ T28] audit: type=1400 audit(2000000702.950:5176): avc: denied { write } for pid=15833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.581792][T15852] netlink: 'syz.7.4442': attribute type 8 has an invalid length. [ 354.626217][ T28] audit: type=1400 audit(2000000703.040:5177): avc: denied { write } for pid=15854 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.660362][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.667575][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.836494][ T28] audit: type=1400 audit(2000000703.250:5178): avc: denied { write } for pid=15860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.890304][ T28] audit: type=1400 audit(2000000703.300:5179): avc: denied { write } for pid=15877 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.105585][ T28] audit: type=1400 audit(2000000703.520:5180): avc: denied { mounton } for pid=15886 comm="syz.9.4450" path="/494/file0" dev="tmpfs" ino=2562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 355.363463][ T28] audit: type=1400 audit(2000000703.770:5181): avc: denied { create } for pid=15898 comm="syz.2.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 355.369207][T15899] loop1: detected capacity change from 0 to 128 [ 355.392921][ T28] audit: type=1400 audit(2000000703.800:5182): avc: denied { ioctl } for pid=15898 comm="syz.2.4455" path="socket:[45622]" dev="sockfs" ino=45622 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 355.427387][ T28] audit: type=1400 audit(2000000703.800:5183): avc: denied { write } for pid=15898 comm="syz.2.4455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 355.495281][ T28] audit: type=1400 audit(2000000703.880:5184): avc: denied { listen } for pid=15903 comm="syz.1.4458" lport=34122 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 355.543820][T15908] loop1: detected capacity change from 0 to 512 [ 355.556451][T15908] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 355.572039][T15908] System zones: 0-2, 18-18, 34-35 [ 355.586616][T15908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.618547][T15908] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.638384][ T28] audit: type=1400 audit(2000000704.050:5185): avc: denied { ioctl } for pid=15914 comm="syz.6.4461" path="socket:[45650]" dev="sockfs" ino=45650 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 355.710403][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.889362][T15937] loop1: detected capacity change from 0 to 512 [ 355.906008][T15937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.918764][T15937] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.990975][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.004100][T15945] loop2: detected capacity change from 0 to 512 [ 356.023407][T15945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.062301][T15945] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.133427][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.322805][T15968] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 356.377348][ T8821] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 356.417174][T15974] EXT4-fs: Ignoring removed oldalloc option [ 356.431860][T15974] EXT4-fs (loop2): 1 truncate cleaned up [ 356.440181][T15974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.509217][T15976] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.596055][T15983] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.684150][ T8821] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.818528][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.862905][ T3412] IPVS: starting estimator thread 0... [ 356.899413][T16015] set_capacity_and_notify: 4 callbacks suppressed [ 356.899433][T16015] loop9: detected capacity change from 0 to 512 [ 356.924517][T16015] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 356.950484][T16015] EXT4-fs (loop9): invalid journal inode [ 356.965921][T16015] EXT4-fs (loop9): can't get journal size [ 356.981227][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4503'. [ 356.990217][T16009] IPVS: using max 2256 ests per chain, 112800 per kthread [ 357.002358][T16015] EXT4-fs (loop9): 1 truncate cleaned up [ 357.009540][T16015] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.096477][ T9059] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.187064][T16028] loop2: detected capacity change from 0 to 4096 [ 357.220924][T16028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.247636][T16028] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 357.247842][T16034] loop7: detected capacity change from 0 to 2048 [ 357.280652][T16028] SELinux: failed to load policy [ 357.295696][T16017] loop6: detected capacity change from 0 to 128 [ 357.304237][T16017] FAT-fs (loop6): bogus number of reserved sectors [ 357.318029][T16017] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 357.327497][T16017] FAT-fs (loop6): Can't find a valid FAT filesystem [ 357.412763][T16034] loop7: p2 p3 p7 [ 357.494691][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.626589][T16055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4518'. [ 358.100963][T16084] loop6: detected capacity change from 0 to 32768 [ 358.479464][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4549'. [ 358.506484][T16118] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4549'. [ 358.548517][T16122] loop9: detected capacity change from 0 to 128 [ 359.082484][T16162] xt_hashlimit: size too large, truncated to 1048576 [ 359.286516][T16177] loop7: detected capacity change from 0 to 128 [ 359.350001][T16181] loop1: detected capacity change from 0 to 256 [ 359.358574][T16181] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 359.373611][T16181] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 359.545123][ T28] kauditd_printk_skb: 430 callbacks suppressed [ 359.545160][ T28] audit: type=1326 audit(2000000835.955:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 359.582066][ T28] audit: type=1326 audit(2000000835.955:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 359.612215][ T28] audit: type=1326 audit(2000000835.955:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 359.633048][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4593'. [ 359.690450][ T28] audit: type=1326 audit(2000000835.955:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 359.757028][ T28] audit: type=1326 audit(2000000835.955:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 359.793429][ T28] audit: type=1326 audit(2000000835.955:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 359.820974][ T28] audit: type=1326 audit(2000000835.955:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 359.851693][ T28] audit: type=1326 audit(2000000835.965:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 359.881855][ T28] audit: type=1326 audit(2000000835.965:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 359.909009][ T28] audit: type=1326 audit(2000000835.965:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.9.4568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f3c86d60e code=0x7ffc0000 [ 360.005905][T16204] loop6: detected capacity change from 0 to 128 [ 360.112850][T16214] loop6: detected capacity change from 0 to 512 [ 360.139076][T16214] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4592: inode has both inline data and extents flags [ 360.170762][T16214] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 360.172023][T16214] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4592: couldn't read orphan inode 15 (err -117) [ 360.181248][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 360.181285][ C1] EXT4-fs (loop6): initial error at time 2000000836: ext4_orphan_get:1397: inode 15 [ 360.181321][ C1] EXT4-fs (loop6): last error at time 2000000836: ext4_orphan_get:1397: inode 15 [ 360.230100][T16214] loop6: lost filesystem error report for type 5 error -117 [ 360.230708][T16214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.411940][T16232] Invalid argument reading file caps for ./file0 [ 360.430859][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.497589][T16239] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 360.922779][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104e15600: rx timeout, send abort [ 361.010637][T16264] erspan0: entered promiscuous mode [ 361.037324][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4615'. [ 361.116873][T16266] EXT4-fs (loop6): 1 truncate cleaned up [ 361.127184][ T3432] Bluetooth: hci0: Frame reassembly failed (-84) [ 361.146895][T16266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.252576][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.422754][ C1] vcan0: j1939_tp_rxtimer: 0xffff888129ac8200: rx timeout, send abort [ 361.432163][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104e15600: abort rx timeout. Force session deactivation [ 361.931062][ C1] vcan0: j1939_tp_rxtimer: 0xffff888129ac8200: abort rx timeout. Force session deactivation [ 362.110887][T16309] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=16309 comm=syz.2.4624 [ 362.878455][T16324] set_capacity_and_notify: 2 callbacks suppressed [ 362.878472][T16324] loop1: detected capacity change from 0 to 128 [ 363.025471][T16341] can0: slcan on ptm1. [ 363.095020][T16340] can0 (unregistered): slcan off ptm1. [ 363.127315][T16352] netlink: 'syz.6.4654': attribute type 6 has an invalid length. [ 363.193460][T16358] loop6: detected capacity change from 0 to 128 [ 363.203708][ T3938] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 363.209891][ T5347] Bluetooth: hci0: command 0x1003 tx timeout [ 363.245079][T16358] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.277616][T16358] FAT-fs (loop6): Filesystem has been set read-only [ 363.287232][T16358] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.300994][T16358] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.327750][T16358] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.346046][T16358] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.384685][T16358] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.395990][T16358] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.428879][T16358] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.444105][T16358] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.468077][T16357] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 363.887266][T16396] loop7: detected capacity change from 0 to 1024 [ 363.942599][T16396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.164721][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.482308][T16424] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 364.604694][T16431] syzkaller1: entered promiscuous mode [ 364.622167][T16431] syzkaller1: entered allmulticast mode [ 364.751500][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4692'. [ 364.780063][T16436] ipvlan2: entered allmulticast mode [ 364.788365][T16436] syz_tun: entered allmulticast mode [ 364.878459][T16441] sctp: [Deprecated]: syz.2.4694 (pid 16441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.878459][T16441] Use struct sctp_sack_info instead [ 364.954847][T16447] loop7: detected capacity change from 0 to 1024 [ 364.995563][T16447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.066931][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.208847][T16475] loop7: detected capacity change from 0 to 128 [ 365.228361][T16475] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.241105][T16475] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.255345][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 365.255362][ T28] audit: type=1400 audit(2000000841.660:5709): avc: denied { execute } for pid=16474 comm="syz.7.4705" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 365.284661][ T28] audit: type=1400 audit(2000000841.660:5710): avc: denied { execute_no_trans } for pid=16474 comm="syz.7.4705" path="/535/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 365.355939][ T9058] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.485943][T16490] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4712'. [ 365.580677][T16502] loop7: detected capacity change from 0 to 256 [ 365.673100][T16508] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.775984][T16518] loop1: detected capacity change from 0 to 512 [ 365.822688][T16508] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.847527][T16518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.874283][T16518] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.889541][ T28] audit: type=1400 audit(2000000842.300:5711): avc: denied { setattr } for pid=16517 comm="syz.1.4726" path="/145/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 365.951930][T16508] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.986808][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.060650][T16508] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.172891][ T8821] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.198713][ T8821] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.227007][ T28] audit: type=1400 audit(2000000842.640:5712): avc: denied { connect } for pid=16558 comm="syz.2.4740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.249455][ T8821] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.265554][ T8821] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.298366][T16561] loop2: detected capacity change from 0 to 256 [ 366.328950][ T28] audit: type=1400 audit(2000000842.740:5713): avc: denied { watch watch_reads } for pid=16560 comm="syz.2.4742" path="/469/file0/file0/file0" dev="loop2" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 366.390347][ T28] audit: type=1400 audit(2000000842.800:5714): avc: denied { write } for pid=16562 comm="syz.7.4756" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 366.487903][T16569] Process accounting resumed [ 366.540032][T16581] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 366.586025][ T28] audit: type=1400 audit(2000000843.000:5715): avc: denied { write } for pid=16582 comm="syz.7.4755" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 366.653900][ T6251] hid_parser_main: 4 callbacks suppressed [ 366.654014][ T6251] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 366.681577][ T6251] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.845198][T16604] tipc: Started in network mode [ 366.867681][T16604] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 366.897974][T16604] tipc: Enabled bearer , priority 10 [ 366.933072][T16611] loop1: detected capacity change from 0 to 512 [ 366.956947][T16611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.981929][ T28] audit: type=1400 audit(2000000843.390:5716): avc: denied { watch } for pid=16615 comm="syz.2.4770" path="/476/file1" dev="tmpfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 367.002905][T16611] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 367.140930][T16611] EXT4-fs (loop1): shut down requested (1) [ 367.154084][ T28] audit: type=1400 audit(2000000843.560:5717): avc: denied { create } for pid=16610 comm="syz.1.4769" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 367.200163][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.341855][ T3376] hid-generic 0000:0000:0000.000F: unknown main item tag 0x7 [ 367.360615][T16632] syzkaller1: entered promiscuous mode [ 367.366797][ T3376] hid-generic 0000:0000:0000.000F: ignoring exceeding usage max [ 367.379073][T16632] syzkaller1: entered allmulticast mode [ 367.386884][T16628] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 367.397150][ T6251] IPVS: starting estimator thread 0... [ 367.411889][ T3376] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 367.430320][ T3376] hid-generic 0000:0000:0000.000F: unknown main item tag 0x6 [ 367.447271][ T3376] hid-generic 0000:0000:0000.000F: reserved main item tag 0xd [ 367.456749][ T3376] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 367.484725][T16634] IPVS: using max 2256 ests per chain, 112800 per kthread [ 367.512895][T16635] fido_id[16635]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 367.584982][ T28] audit: type=1326 audit(2000000844.000:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16640 comm="syz.2.4780" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f227cdd9 code=0x7ffc0000 [ 367.779800][ T6247] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 367.809285][ T6247] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 367.923788][ T6247] tipc: Node number set to 4269801494 [ 368.093157][T16688] loop7: detected capacity change from 0 to 512 [ 368.122287][T16688] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4800: Invalid inode bitmap blk 4 in block_group 0 [ 368.135420][T16688] loop7: lost filesystem error report for type 5 error -117 [ 368.147751][T16688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.288887][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.462946][T16707] loop2: detected capacity change from 0 to 256 [ 368.478456][T16707] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 368.515479][T16707] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.739600][T16726] netlink: 'syz.1.4828': attribute type 4 has an invalid length. [ 368.979166][T16744] syzkaller1: entered promiscuous mode [ 368.993602][T16744] syzkaller1: entered allmulticast mode [ 369.278800][T16762] loop9: detected capacity change from 0 to 128 [ 369.290715][T16762] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.330320][T16762] ext4 filesystem being mounted at /557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 369.367392][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4834'. [ 369.485630][ T9059] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.702060][T16773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4836'. [ 370.272263][T16799] loop1: detected capacity change from 0 to 8192 [ 370.399660][T16799] loop1: p3 p4 < > [ 370.407280][T16799] loop1: p3 size 83886080 extends beyond EOD, truncated [ 370.443818][ T2981] loop1: p3 p4 < > [ 370.450535][ T2981] loop1: p3 size 83886080 extends beyond EOD, truncated [ 370.506094][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 370.506109][ T28] audit: type=1400 audit(2000000846.920:5738): avc: denied { read append } for pid=16798 comm="syz.1.4848" name="loop1p3" dev="devtmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 370.591313][ T28] audit: type=1400 audit(2000000846.920:5739): avc: denied { open } for pid=16798 comm="syz.1.4848" path="/dev/loop1p3" dev="devtmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 370.686153][ T28] audit: type=1326 audit(2000000847.100:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.7.4854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 370.767251][ T28] audit: type=1326 audit(2000000847.130:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.7.4854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 370.830271][ T28] audit: type=1326 audit(2000000847.130:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.7.4854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 370.892119][ T28] audit: type=1326 audit(2000000847.130:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.7.4854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 370.970133][ T28] audit: type=1326 audit(2000000847.130:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.7.4854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 371.045636][ T28] audit: type=1326 audit(2000000847.130:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.7.4854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 371.072760][ T28] audit: type=1326 audit(2000000847.130:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.7.4854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 371.149442][ T28] audit: type=1326 audit(2000000847.130:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.7.4854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 371.175237][T16834] loop6: detected capacity change from 0 to 512 [ 371.183816][T16834] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 371.202938][T16834] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 371.331819][T16844] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4870'. [ 371.343010][T16846] loop1: detected capacity change from 0 to 512 [ 371.350809][T16848] netlink: 'syz.7.4872': attribute type 1 has an invalid length. [ 371.362359][T16848] netlink: 'syz.7.4872': attribute type 2 has an invalid length. [ 371.370234][T16846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.380184][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4870'. [ 371.401581][T16846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.421396][T16846] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.490392][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.569321][T16868] loop7: detected capacity change from 0 to 512 [ 371.596192][T16868] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.4878: corrupted in-inode xattr: invalid ea_ino [ 371.616015][T16868] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 371.617342][T16868] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4878: couldn't read orphan inode 15 (err -117) [ 371.626623][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 371.626643][ C1] EXT4-fs (loop7): initial error at time 2000000848: ext4_iget_extra_inode:5128: inode 15 [ 371.626674][ C1] EXT4-fs (loop7): last error at time 2000000848: ext4_iget_extra_inode:5128: inode 15 [ 371.671439][T16868] loop7: lost filesystem error report for type 5 error -117 [ 371.699314][T16868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.747382][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.750152][T16883] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4886'. [ 371.765437][T16883] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4886'. [ 371.815599][T16887] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4888'. [ 371.826129][T16887] netlink: 9 bytes leftover after parsing attributes in process `syz.9.4888'. [ 371.841573][T16887] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4888'. [ 371.852075][T16887] netlink: 9 bytes leftover after parsing attributes in process `syz.9.4888'. [ 371.863353][T16887] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4888'. [ 371.928113][T16898] loop7: detected capacity change from 0 to 256 [ 371.936351][T16894] netlink: 212916 bytes leftover after parsing attributes in process `syz.9.4891'. [ 371.952016][T16898] FAT-fs (loop7): bogus number of FAT sectors [ 371.959853][T16898] FAT-fs (loop7): Can't find a valid FAT filesystem [ 372.064312][ T6251] kernel write not supported for file /1274/net/ip6_tables_matches (pid: 6251 comm: kworker/0:14) [ 372.073085][T16903] loop7: detected capacity change from 0 to 256 [ 372.302359][T16921] loop7: detected capacity change from 0 to 2048 [ 372.323378][T16921] EXT4-fs: Ignoring removed i_version option [ 372.367086][T16921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.396733][T16921] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.458451][T16947] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4914: inode has both inline data and extents flags [ 372.486751][T16921] EXT4-fs (loop7): shut down requested (0) [ 372.491727][T16947] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 372.492760][T16947] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4914: couldn't read orphan inode 15 (err -117) [ 372.501959][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 372.501984][ C0] EXT4-fs (loop6): initial error at time 2000000848: ext4_orphan_get:1397: inode 15 [ 372.502034][ C0] EXT4-fs (loop6): last error at time 2000000848: ext4_orphan_get:1397: inode 15 [ 372.542143][T16947] loop6: lost filesystem error report for type 5 error -117 [ 372.543370][T16947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.638036][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.657898][T16960] netlink: 'syz.1.4920': attribute type 3 has an invalid length. [ 372.681201][T16960] netlink: 'syz.1.4920': attribute type 1 has an invalid length. [ 372.762133][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.074828][T16994] xt_hashlimit: size too large, truncated to 1048576 [ 373.201286][T17004] set_capacity_and_notify: 1 callbacks suppressed [ 373.201306][T17004] loop1: detected capacity change from 0 to 4096 [ 373.230484][T17004] EXT4-fs: Ignoring removed bh option [ 373.255766][T17004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.340661][T17004] EXT4-fs error (device loop1): ext4_empty_dir:3101: inode #12: block 80: comm syz.1.4941: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 373.415092][T17004] EXT4-fs (loop1): Remounting filesystem read-only [ 373.430571][T17004] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #12: comm syz.1.4941: directory missing '..' [ 373.476340][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.453408][T17075] loop2: detected capacity change from 0 to 256 [ 374.609513][T17081] netlink: 'syz.2.4973': attribute type 39 has an invalid length. [ 374.860489][T17097] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 374.882950][T17097] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 374.894537][T17093] loop6: detected capacity change from 0 to 4096 [ 374.903580][T17093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.921967][T17097] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 375.027261][T17097] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 375.060729][T17097] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 375.105496][T17097] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 375.126071][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.138292][T17097] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 375.173613][T17097] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 375.219262][T17097] netlink: 'syz.2.4982': attribute type 1 has an invalid length. [ 375.529641][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 375.529706][ T28] audit: type=1326 audit(2000000851.940:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.7.5001" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 375.638370][ T28] audit: type=1326 audit(2000000851.980:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.7.5001" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 375.672451][T17116] SET target dimension over the limit! [ 375.730202][ T28] audit: type=1326 audit(2000000851.980:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.7.5001" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 375.782927][ T28] audit: type=1326 audit(2000000851.980:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.7.5001" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 375.808897][ T28] audit: type=1326 audit(2000000851.980:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.7.5001" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 375.834651][ T28] audit: type=1326 audit(2000000851.980:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.7.5001" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 375.861057][ T28] audit: type=1326 audit(2000000851.980:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.7.5001" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 375.904109][ T28] audit: type=1326 audit(2000000851.980:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.7.5001" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 375.961234][ T28] audit: type=1326 audit(2000000852.270:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.7.5001" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3df435cdd9 code=0x7ffc0000 [ 376.030962][T17127] loop1: detected capacity change from 0 to 512 [ 376.052676][T17127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 376.082833][T17127] EXT4-fs (loop1): 1 truncate cleaned up [ 376.114388][T17127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.127664][T17129] loop6: detected capacity change from 0 to 8192 [ 376.151482][T17127] EXT4-fs error (device loop1): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.1.4995: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 376.174642][ T28] audit: type=1400 audit(2000000852.560:5775): avc: denied { rename } for pid=17126 comm="syz.1.4995" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.215085][T17127] EXT4-fs (loop1): Remounting filesystem read-only [ 376.221774][T17127] EXT4-fs warning (device loop1): ext4_rename_delete:3739: inode #2: comm syz.1.4995: Deleting old file: nlink 4, error=-117 [ 376.257349][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.446182][T17149] loop6: detected capacity change from 0 to 1024 [ 376.464411][T17149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.479228][T17149] EXT4-fs: Ignoring removed orlov option [ 376.518064][T17149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.570083][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.689483][T17158] syzkaller1: entered promiscuous mode [ 376.696473][T17158] syzkaller1: entered allmulticast mode [ 376.979152][T17164] loop1: detected capacity change from 0 to 512 [ 376.996611][T17164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 377.031949][T17164] EXT4-fs (loop1): 1 orphan inode deleted [ 377.043969][T17164] EXT4-fs (loop1): 1 truncate cleaned up [ 377.061903][T17164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.104273][T17164] EXT4-fs (loop1): shut down requested (2) [ 377.147244][T14786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.156237][T17169] loop7: detected capacity change from 0 to 256 [ 377.157440][T17169] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 377.177818][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.186646][T17169] FAT-fs (loop7): Filesystem has been set read-only [ 377.193319][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.205037][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.220427][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.237598][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.263856][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.286542][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.321033][T17171] loop1: detected capacity change from 0 to 8192 [ 377.328615][T17174] __nla_validate_parse: 5 callbacks suppressed [ 377.328636][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5014'. [ 377.331702][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.375078][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.404181][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.420399][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.452062][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.495374][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.519664][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.540286][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.559786][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.585127][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.610575][ T3432] Bluetooth: hci0: Frame reassembly failed (-84) [ 377.627681][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.658032][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.685123][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.708462][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.730288][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.754916][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.774991][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.803062][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.823081][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.847390][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.867110][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.887332][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.904987][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.925309][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.943452][ T3411] kernel read not supported for file /vcs (pid: 3411 comm: kworker/1:6) [ 377.953229][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 377.974993][T17169] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 378.168956][T17200] loop2: detected capacity change from 0 to 512 [ 378.191638][T17200] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.5027: inode has both inline data and extents flags [ 378.207328][T17202] loop7: detected capacity change from 0 to 512 [ 378.241160][T17202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.257479][T17200] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 378.257613][T17200] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5027: couldn't read orphan inode 15 (err -117) [ 378.266845][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 378.266864][ C0] EXT4-fs (loop2): initial error at time 2000000854: ext4_orphan_get:1397: inode 15 [ 378.266897][ C0] EXT4-fs (loop2): last error at time 2000000854: ext4_orphan_get:1397: inode 15 [ 378.308944][T17200] loop2: lost filesystem error report for type 5 error -117 [ 378.309281][T17202] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.5029: iget: bad i_size value: 38620345925642 [ 378.311545][T17200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.321916][T17202] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 378.392816][T17202] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5029: couldn't read orphan inode 15 (err -117) [ 378.402098][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 378.402115][ C1] EXT4-fs (loop7): initial error at time 2000000854: ext4_orphan_get:1397: inode 15 [ 378.402157][ C1] EXT4-fs (loop7): last error at time 2000000854: ext4_orphan_get:1397: inode 15 [ 378.451001][T17202] loop7: lost filesystem error report for type 5 error -117 [ 378.451992][T17202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.453268][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.530648][ T106] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 378.575871][ T106] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 378.589817][ T106] EXT4-fs (loop7): This should not happen!! Data will be lost [ 378.589817][ T106] [ 378.609294][ T106] EXT4-fs (loop7): Total free blocks count 0 [ 378.623122][ T106] EXT4-fs (loop7): Free/Dirty block details [ 378.629343][ T106] EXT4-fs (loop7): free_blocks=0 [ 378.634506][ T106] EXT4-fs (loop7): dirty_blocks=3 [ 378.639952][ T106] EXT4-fs (loop7): Block reservation details [ 378.646871][ T106] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 378.670131][ T9058] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 378.684319][ T9058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.687709][T17219] Invalid argument reading file caps for ./file0 [ 379.072571][T17248] loop6: detected capacity change from 0 to 4096 [ 379.087497][T17248] ext4: Unknown parameter 'appraise' [ 379.136282][T17251] loop2: detected capacity change from 0 to 2048 [ 379.155325][T17251] loop2: p3 < > p4 < > [ 379.168325][T17251] loop2: partition table partially beyond EOD, truncated [ 379.188924][T17251] loop2: p3 start 4284289 is beyond EOD, truncated [ 379.406587][T17265] syzkaller1: entered promiscuous mode [ 379.423767][T17265] syzkaller1: entered allmulticast mode [ 379.616765][T17270] openvswitch: netlink: Missing key (keys=40, expected=100) [ 379.683698][ T3938] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 379.683739][ T5347] Bluetooth: hci0: command 0x1003 tx timeout [ 379.855925][T17279] batadv_slave_0: entered promiscuous mode [ 379.870070][T17278] batadv_slave_0: left promiscuous mode [ 380.754615][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5080'. [ 380.763905][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5080'. [ 380.816456][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5080'. [ 380.826928][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5080'. [ 381.016223][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 381.016242][ T28] audit: type=1400 audit(2000000857.430:5875): avc: denied { write } for pid=17323 comm="syz.1.5081" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 381.070674][ T28] audit: type=1400 audit(2000000857.430:5876): avc: denied { map } for pid=17323 comm="syz.1.5081" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 381.183062][ T28] audit: type=1400 audit(2000000857.590:5877): avc: denied { create } for pid=17333 comm="syz.7.5085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 381.267389][ T28] audit: type=1400 audit(2000000857.680:5878): avc: denied { create } for pid=17337 comm="syz.6.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 381.308688][ T28] audit: type=1400 audit(2000000857.710:5879): avc: denied { sys_admin } for pid=17337 comm="syz.6.5086" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 381.428318][ T28] audit: type=1400 audit(2000000857.840:5880): avc: denied { sqpoll } for pid=17348 comm="syz.6.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 381.537201][ T28] audit: type=1400 audit(2000000857.950:5881): avc: denied { create } for pid=17359 comm="syz.1.5095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 381.578325][T17362] loop1: detected capacity change from 0 to 128 [ 381.606993][ T28] audit: type=1400 audit(2000000858.020:5882): avc: denied { mount } for pid=17361 comm="syz.1.5096" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 381.641811][ T28] audit: type=1326 audit(2000000858.020:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.5097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b416cdd9 code=0x7ffc0000 [ 381.667919][ T28] audit: type=1326 audit(2000000858.020:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.6.5097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b416cdd9 code=0x7ffc0000 [ 381.798610][T17373] loop2: detected capacity change from 0 to 1024 [ 381.816463][T17373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.848000][T17373] EXT4-fs: Ignoring removed orlov option [ 381.880762][T17373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.898587][T17385] lo: entered allmulticast mode [ 381.902882][T17382] loop6: detected capacity change from 0 to 512 [ 381.909913][T17385] lo: left allmulticast mode [ 381.926440][T17382] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 381.945705][T17382] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.5104: invalid indirect mapped block 4294967295 (level 0) [ 381.972231][ T9064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.984343][T17382] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 381.984531][T17382] EXT4-fs (loop6): Remounting filesystem read-only [ 381.993859][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 381.993882][ C0] EXT4-fs (loop6): initial error at time 2000000858: ext4_free_branches:1023: inode 16 [ 381.993921][ C0] EXT4-fs (loop6): last error at time 2000000858: ext4_free_branches:1023: inode 16 [ 382.026869][T17382] EXT4-fs (loop6): 1 orphan inode deleted [ 382.049532][T17382] EXT4-fs (loop6): 1 truncate cleaned up [ 382.066947][T17382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.108765][ T9047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.438880][ C0] ================================================================== [ 382.447120][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 382.454471][ C0] [ 382.456828][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 1: [ 382.464925][ C0] can_can_gw_rcv+0x863/0x870 [ 382.470113][ C0] can_rcv_filter+0xc3/0x480 [ 382.474747][ C0] can_receive+0x13e/0x190 [ 382.479217][ C0] can_rcv+0x17d/0x1f0 [ 382.483328][ C0] process_backlog+0x363/0x670 [ 382.488144][ C0] __napi_poll+0x61/0x300 [ 382.492511][ C0] net_rx_action+0x452/0x930 [ 382.497148][ C0] handle_softirqs+0xb9/0x280 [ 382.502289][ C0] run_ksoftirqd+0x1c/0x30 [ 382.506842][ C0] smpboot_thread_fn+0x32a/0x510 [ 382.511828][ C0] kthread+0x22a/0x280 [ 382.515935][ C0] ret_from_fork+0x146/0x330 [ 382.520569][ C0] ret_from_fork_asm+0x1a/0x30 [ 382.525384][ C0] [ 382.527738][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 0: [ 382.536007][ C0] can_can_gw_rcv+0x863/0x870 [ 382.540747][ C0] can_rcv_filter+0xc3/0x480 [ 382.545381][ C0] can_receive+0x13e/0x190 [ 382.549839][ C0] can_rcv+0x17d/0x1f0 [ 382.553947][ C0] process_backlog+0x363/0x670 [ 382.558761][ C0] __napi_poll+0x61/0x300 [ 382.563224][ C0] net_rx_action+0x452/0x930 [ 382.567861][ C0] handle_softirqs+0xb9/0x280 [ 382.572570][ C0] __irq_exit_rcu+0x42/0xd0 [ 382.577103][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 382.582779][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.588810][ C0] __zap_vma_range+0xc5e/0x2c10 [ 382.593695][ C0] unmap_vmas+0x22a/0x340 [ 382.598064][ C0] exit_mmap+0x1ab/0x5f0 [ 382.602348][ C0] __mmput+0x28/0x1c0 [ 382.606367][ C0] mmput+0x40/0x50 [ 382.610126][ C0] exit_mm+0x113/0x1a0 [ 382.614241][ C0] do_exit+0x442/0x1530 [ 382.618521][ C0] do_group_exit+0xfe/0x140 [ 382.623083][ C0] get_signal+0xe30/0xf20 [ 382.627463][ C0] arch_do_signal_or_restart+0x96/0x450 [ 382.633053][ C0] exit_to_user_mode_loop+0x6a/0x6f0 [ 382.638377][ C0] do_syscall_64+0x232/0x3b0 [ 382.643010][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.648942][ C0] [ 382.651286][ C0] value changed: 0x00003ed1 -> 0x00003ed2 [ 382.657029][ C0] [ 382.659371][ C0] Reported by Kernel Concurrency Sanitizer on: [ 382.665562][ C0] CPU: 0 UID: 0 PID: 17403 Comm: syz.1.5113 Not tainted syzkaller #0 PREEMPT(full) [ 382.674969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.685071][ C0] ================================================================== [ 385.626766][ C0] ================================================================== [ 385.634923][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 385.642190][ C0] [ 385.644543][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 1: [ 385.652629][ C0] can_can_gw_rcv+0x863/0x870 [ 385.657358][ C0] can_rcv_filter+0xc3/0x480 [ 385.661990][ C0] can_receive+0x13e/0x190 [ 385.666448][ C0] can_rcv+0x17d/0x1f0 [ 385.670550][ C0] process_backlog+0x363/0x670 [ 385.675355][ C0] __napi_poll+0x61/0x300 [ 385.679720][ C0] net_rx_action+0x452/0x930 [ 385.684355][ C0] handle_softirqs+0xb9/0x280 [ 385.689067][ C0] run_ksoftirqd+0x1c/0x30 [ 385.693517][ C0] smpboot_thread_fn+0x32a/0x510 [ 385.698497][ C0] kthread+0x22a/0x280 [ 385.702600][ C0] ret_from_fork+0x146/0x330 [ 385.707279][ C0] ret_from_fork_asm+0x1a/0x30 [ 385.712078][ C0] [ 385.714418][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 0: [ 385.722504][ C0] can_can_gw_rcv+0x863/0x870 [ 385.727237][ C0] can_rcv_filter+0xc3/0x480 [ 385.731864][ C0] can_receive+0x13e/0x190 [ 385.736334][ C0] can_rcv+0x17d/0x1f0 [ 385.740440][ C0] process_backlog+0x363/0x670 [ 385.745328][ C0] __napi_poll+0x61/0x300 [ 385.749700][ C0] net_rx_action+0x452/0x930 [ 385.754339][ C0] handle_softirqs+0xb9/0x280 [ 385.759047][ C0] do_softirq+0x45/0x60 [ 385.763234][ C0] __local_bh_enable_ip+0x70/0x80 [ 385.768281][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 385.773265][ C0] nsim_dev_trap_report_work+0x53b/0x640 [ 385.778958][ C0] process_scheduled_works+0x4f0/0x9c0 [ 385.784463][ C0] worker_thread+0x58a/0x780 [ 385.789103][ C0] kthread+0x22a/0x280 [ 385.793204][ C0] ret_from_fork+0x146/0x330 [ 385.797851][ C0] ret_from_fork_asm+0x1a/0x30 [ 385.802650][ C0] [ 385.804999][ C0] value changed: 0x0004695d -> 0x0004695e [ 385.810744][ C0] [ 385.813091][ C0] Reported by Kernel Concurrency Sanitizer on: [ 385.819270][ C0] CPU: 0 UID: 0 PID: 106 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 385.828686][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.838775][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 385.845598][ C0] ================================================================== [ 387.614256][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 387.614276][ T28] audit: type=1400 audit(2000000864.020:5918): avc: denied { egress } for pid=8843 comm="kworker/u8:17" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 387.859532][ T28] audit: type=1400 audit(2000000864.020:5919): avc: denied { sendto } for pid=8843 comm="kworker/u8:17" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 388.647997][ C1] ================================================================== [ 388.656158][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 388.663445][ C1] [ 388.665798][ C1] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 0: [ 388.673888][ C1] can_can_gw_rcv+0x863/0x870 [ 388.678618][ C1] can_rcv_filter+0xc3/0x480 [ 388.683255][ C1] can_receive+0x13e/0x190 [ 388.687728][ C1] can_rcv+0x17d/0x1f0 [ 388.691845][ C1] process_backlog+0x363/0x670 [ 388.696660][ C1] __napi_poll+0x61/0x300 [ 388.701050][ C1] net_rx_action+0x452/0x930 [ 388.705695][ C1] handle_softirqs+0xb9/0x280 [ 388.710404][ C1] do_softirq+0x45/0x60 [ 388.714598][ C1] __local_bh_enable_ip+0x70/0x80 [ 388.719668][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 388.724659][ C1] batadv_dat_purge+0x1e3/0x270 [ 388.729566][ C1] process_scheduled_works+0x4f0/0x9c0 [ 388.735080][ C1] worker_thread+0x58a/0x780 [ 388.739906][ C1] kthread+0x22a/0x280 [ 388.744100][ C1] ret_from_fork+0x146/0x330 [ 388.748752][ C1] ret_from_fork_asm+0x1a/0x30 [ 388.753567][ C1] [ 388.755922][ C1] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 1: [ 388.764021][ C1] can_can_gw_rcv+0x863/0x870 [ 388.768807][ C1] can_rcv_filter+0xc3/0x480 [ 388.773437][ C1] can_receive+0x13e/0x190 [ 388.777909][ C1] can_rcv+0x17d/0x1f0 [ 388.782024][ C1] process_backlog+0x363/0x670 [ 388.786843][ C1] __napi_poll+0x61/0x300 [ 388.791222][ C1] net_rx_action+0x452/0x930 [ 388.795863][ C1] handle_softirqs+0xb9/0x280 [ 388.800585][ C1] do_softirq+0x45/0x60 [ 388.804782][ C1] __local_bh_enable_ip+0x70/0x80 [ 388.809849][ C1] __alloc_skb+0x658/0x690 [ 388.814318][ C1] nsim_dev_trap_report_work+0x18a/0x640 [ 388.820015][ C1] process_scheduled_works+0x4f0/0x9c0 [ 388.825538][ C1] worker_thread+0x58a/0x780 [ 388.830199][ C1] kthread+0x22a/0x280 [ 388.834399][ C1] ret_from_fork+0x146/0x330 [ 388.839061][ C1] ret_from_fork_asm+0x1a/0x30 [ 388.844066][ C1] [ 388.846553][ C1] value changed: 0x00085a6e -> 0x00085a6f [ 388.852323][ C1] [ 388.854673][ C1] Reported by Kernel Concurrency Sanitizer on: [ 388.860870][ C1] CPU: 1 UID: 0 PID: 3459 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 388.870370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.880463][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 388.887292][ C1] ================================================================== [ 391.672176][ C0] ================================================================== [ 391.680340][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 391.687754][ C0] [ 391.690110][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 1: [ 391.698204][ C0] can_can_gw_rcv+0x863/0x870 [ 391.702950][ C0] can_rcv_filter+0xc3/0x480 [ 391.707592][ C0] can_receive+0x13e/0x190 [ 391.712055][ C0] can_rcv+0x17d/0x1f0 [ 391.716169][ C0] process_backlog+0x363/0x670 [ 391.720985][ C0] __napi_poll+0x61/0x300 [ 391.725362][ C0] net_rx_action+0x452/0x930 [ 391.730008][ C0] handle_softirqs+0xb9/0x280 [ 391.734725][ C0] run_ksoftirqd+0x1c/0x30 [ 391.739616][ C0] smpboot_thread_fn+0x32a/0x510 [ 391.744610][ C0] kthread+0x22a/0x280 [ 391.748819][ C0] ret_from_fork+0x146/0x330 [ 391.753465][ C0] ret_from_fork_asm+0x1a/0x30 [ 391.758274][ C0] [ 391.760628][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 0: [ 391.768726][ C0] can_can_gw_rcv+0x863/0x870 [ 391.773542][ C0] can_rcv_filter+0xc3/0x480 [ 391.778176][ C0] can_receive+0x13e/0x190 [ 391.782643][ C0] can_rcv+0x17d/0x1f0 [ 391.786758][ C0] process_backlog+0x363/0x670 [ 391.791573][ C0] __napi_poll+0x61/0x300 [ 391.795947][ C0] net_rx_action+0x452/0x930 [ 391.800582][ C0] handle_softirqs+0xb9/0x280 [ 391.805300][ C0] do_softirq+0x45/0x60 [ 391.809492][ C0] __local_bh_enable_ip+0x70/0x80 [ 391.814549][ C0] __alloc_skb+0x658/0x690 [ 391.819009][ C0] nsim_dev_trap_report_work+0x18a/0x640 [ 391.824702][ C0] process_scheduled_works+0x4f0/0x9c0 [ 391.830213][ C0] worker_thread+0x58a/0x780 [ 391.834852][ C0] kthread+0x22a/0x280 [ 391.839047][ C0] ret_from_fork+0x146/0x330 [ 391.843690][ C0] ret_from_fork_asm+0x1a/0x30 [ 391.848508][ C0] [ 391.850859][ C0] value changed: 0x000c5b7a -> 0x000c5b7b [ 391.856641][ C0] [ 391.858990][ C0] Reported by Kernel Concurrency Sanitizer on: [ 391.865178][ C0] CPU: 0 UID: 0 PID: 106 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 391.874591][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.884689][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 391.891511][ C0] ==================================================================