last executing test programs: 31.405934658s ago: executing program 0 (id=4855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000090000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37e5b, 0x71e12}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1404c080}, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f0000000540)=@tcp=r1}, 0x20) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x6c, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@routing={0x2b, 0x0, 0x2, 0x6}], {0x4e21, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "34e540e3dd227ff71fcd0abe58075273e435d14b3a977b28387a1ae7465338d4", "5cb275b40fd4031ec1941ebfaa96d7bf", {"cf0372b8d285ee92d104650b69fd413d", "0667f5c2b37bbd83be6ba638018bb23c"}}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 31.33039935s ago: executing program 0 (id=4858): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5d0d, 0x0) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f00000000c0)) 31.32486445s ago: executing program 0 (id=4861): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r1, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x408, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") close_range(r0, 0xffffffffffffffff, 0x0) 31.169366334s ago: executing program 0 (id=4863): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000001c0)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1218, &(0x7f0000001840)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1S0xaxzYh9nkXuyz3nxzkHwsAZzpn9d3/8anurKrbKYbSmpqJ1IyJvZ2S04sDr6+Pn1Wvrq+322uXMS6tXlt/JzIU3fv30m5mIOPPJzwu/zMTe0mf7t1Z+3zu3d37/zytfdqvsVtkfDLPM64PBsLzeW8jNbrVdZH7U65RVJ7v9qrNzqL2TW29HxCjL/ub83I2dTlVl2R/ldmeUw0EOd0ZZflF2+1kURc7PBQ916vFdNn66Xdd1RF2fiuejruv6dMzFmXgh5mMhvouIF+OleDnOxitxLl6N1+J80+skpg8AAAAAAAAAAAAAAAAAAADPjkfd/1+MJff/AQAAAAAAAAAAAAAAAAAA4AR8fPXa+mq7vXY5czai98Puxu7G+DluX7rzpxeduBiL8Uc0t//HxvWlD9prF7OxFN/3bt7N39zdeK7Jrx7kl5ufE7ibn27aDvLL43wezc/E3J38VnSb/Eosxtnjx185Nj8bb715KF/EYvz2eQyiF5vN2Pfz3y5nvv9h+4H8haYfAAAA/B8Uec+x+/eieFj7OH9vf/347wce2F9Px4Xpya6diGr09XbZ6nV2mqJ3UMz+7c3TK+IEx3qyRcStuilmjja1ntKgrZj4kg8VU/+NaSieTHE6jr6Z9CcTJ+H+v8GkZwIAAAAAAAAAAMA/8aiDgfHvzxVOxzEny96bzFIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBUAAAA//+1MMTX") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 30.990333869s ago: executing program 0 (id=4868): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000180)={[{@init_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0x476fa82c}}, {@sysvgroups}]}, 0x3, 0x79b, &(0x7f0000001200)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xd, 0x4, 0x6, 0x7}) 30.692770876s ago: executing program 0 (id=4872): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x0, 0xbbcb}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) close_range(r1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183042, 0x25) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x813) 30.649315787s ago: executing program 32 (id=4872): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x0, 0xbbcb}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) close_range(r1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183042, 0x25) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x813) 3.164459731s ago: executing program 2 (id=5499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x20000880) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="8b332abd70000000000005000000", @ANYRES32=0x0, @ANYBLOB="3d68ffabe0f45a3ce7064b6516549c14e106c9d869298b3abc2ebe4aa9b29eea6210eae484935f6f9887ff5b5b44cbd03050183bbff3258f8b4e5e5d0322d0d18f812097e67876a35a0d96c8f4103aa3f858b82346c195ff90df99b5e36d4da73861c318ecc9e0cccfd4f06b049133d3e5a497b5bbb409a1ba845ad5e9796caf35d04f966ae4e9ad72341de84c7bea0e5b4214c0ebec90cd561fc8594ca2464951eb76d1583f1f49418e46872b433491024bf0bcdcb9b0"], 0x1c}}, 0x24000000) r5 = epoll_create(0x8001) fchmod(r5, 0x100) sched_setaffinity(0x0, 0xfffffffffffffccd, &(0x7f00000001c0)=0x2) unshare(0x64000600) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') syz_emit_ethernet(0x36, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='mpol=interlReave:7-N:', @ANYBLOB='N']) 2.817952519s ago: executing program 2 (id=5506): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x7b) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) 2.752254061s ago: executing program 4 (id=5508): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x8200) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000380)) 2.752124991s ago: executing program 4 (id=5509): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) 2.745344731s ago: executing program 4 (id=5510): syz_usb_connect$midi(0x5, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000020b4041b934000010203010902260001011810040904000001fb020006072401f9ff070009058e01000000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 2.697693832s ago: executing program 2 (id=5512): r0 = syz_open_dev$evdev(&(0x7f0000001600), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x7, 0x15, 0x207, 0x6, "fb7c7839b06c60911032680e676d14148511537ddde6b0f5f7bec527d2b7c9d2"}) 2.662442053s ago: executing program 2 (id=5513): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x112245, 0x0, 0x7ffffffd, 0x7, 0x2, 0x72a2, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000300)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e92000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 2.494905417s ago: executing program 2 (id=5518): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfff) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2.360633631s ago: executing program 2 (id=5519): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) write(0xffffffffffffffff, &(0x7f00000004c0)='lzo-rle', 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) io_uring_setup(0x3f1, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103"], 0xb6) 2.199515494s ago: executing program 4 (id=5526): capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.138809906s ago: executing program 4 (id=5528): syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 2.001023859s ago: executing program 3 (id=5530): r0 = open(0x0, 0x40016b042, 0x2a) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa3fc, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0x3, 0xfffffff8, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r0], 0x0, 0x10, 0x1ff}, 0x94) pwritev2(r0, 0x0, 0x0, 0x1ffffff, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000000700)={[{@resuid}, {@sysvgroups}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@commit={'commit', 0x3d, 0x5}}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@dax_always}, {@data_writeback}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x2d}}], 0x2c}, 0x42, 0x4fc, &(0x7f0000000e40)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000880), &(0x7f0000000880), 0x10f0, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000), 0x0}, 0x20) 1.776655135s ago: executing program 3 (id=5534): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000280)={0x40, 0x5, 0x5, 0xffb}) 1.494147602s ago: executing program 3 (id=5537): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400020000000000100004000000000020"], 0x24, 0x1) rmdir(&(0x7f0000000100)='./control\x00') syz_open_procfs(0x0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, 0x0, 0x0) getpid() prlimit64(0x0, 0x8, 0x0, 0x0) 1.493831232s ago: executing program 4 (id=5538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180)) keyctl$setperm(0x5, r3, 0x300127) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r4, 0x0, 0x4000820) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r5, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 1.285149887s ago: executing program 5 (id=5541): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x5, 0x0, &(0x7f00000000c0)) 1.275540168s ago: executing program 5 (id=5542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x19, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 1.191955519s ago: executing program 1 (id=5544): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1d8, 0x2a8, 0x2a8, 0x1d8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @empty, 0xff000000, 0xffffff00, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x8, 0x0, 0x44}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz0\x00', {0x80000001}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x1d, 0x0, 0x44}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1.19154844s ago: executing program 5 (id=5545): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x3a, 0x1, 0x0, &(0x7f0000000000)) 1.133281031s ago: executing program 5 (id=5546): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000580)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xc404, &(0x7f0000000f00)=ANY=[@ANYBLOB="6e6f74732c757365467265ac720069643d", @ANYRESHEX=0x0, @ANYBLOB=',nfs=nostale_ro,dots,check=strict,nfs,nodots,dots,dots,dots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,sys_immutable,dots,nodots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000009058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0xfffe) accept4(r2, &(0x7f0000000200), &(0x7f0000000280)=0x80, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) 1.109570212s ago: executing program 1 (id=5547): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) 876.162598ms ago: executing program 3 (id=5548): syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x210006, &(0x7f00000003c0)={[{@data_ordered}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a0c}}, {@mb_optimize_scan}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@prjquota}, {@stripe={'stripe', 0x3d, 0x401}}, {@nouid32}, {@data_err_ignore}, {@noquota}]}, 0x1, 0x56e, &(0x7f0000000e40)="$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") socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) r4 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x8, r4) tkill(r4, 0x35) ptrace$setopts(0x4206, r4, 0x5, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) syz_usb_connect$midi(0x5, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x100, 0xdb, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xf9}}}}}]}}, 0x0) 253.548623ms ago: executing program 1 (id=5549): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 210.923554ms ago: executing program 1 (id=5550): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) pwrite64(r0, &(0x7f0000000200)="95d8c36d", 0x4, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x0, 0x4, 0x4, 0x1000000000003}) 182.102715ms ago: executing program 5 (id=5551): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x15) 124.691576ms ago: executing program 3 (id=5552): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)='G', 0x1, 0x81, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @multicast}, 0x14) 37.401848ms ago: executing program 5 (id=5553): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xfc778000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000240)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRES8, @ANYBLOB="04a84ec477ee13036880cb6d822e95c03654b4b5a38a3d2db6abe6e87a4d6f8afc99903ab05faddd4d7faa48fa540569014e6a67d99a7138299a64e20e85cca91b945c5168db27b5e9d9620b5ce0b06b93cd0762aa37524024f2c072c4722523a7f063523a751304f455b69e6357d3c3fdbcfb2da53166e4793519bac97e87436fa36a362732a8a20cf921c672698f5c3483a84f3a977a9118c8334526e82f3473b727293af8e8ca62299a9d", @ANYRES32], 0x1, 0x343, &(0x7f0000000740)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/75, 0x4b) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 37.286999ms ago: executing program 1 (id=5554): madvise(0xffffffffffffffff, 0x0, 0xb) 37.030359ms ago: executing program 3 (id=5555): getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe4, &(0x7f0000001e80)=""/228, 0x0, 0x8}, 0x94) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000004, 0x14010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x7, 0x9}, 0x1112, 0xfff, 0x2, 0x2, 0x102, 0xfffffff8, 0x4d, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008ecb00008500000010000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xe049) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 0s ago: executing program 1 (id=5556): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) kernel console output (not intermixed with test programs): loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 253.857218][ C0] EXT4-fs (loop3): last error at time 1785508606: ext4_quota_enable:7228 [ 253.870862][T11942] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=33554435). Please run e2fsck to fix. [ 253.878025][T11945] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.3724: Failed to acquire dquot type 0 [ 253.893100][T11942] EXT4-fs (loop3): mount failed [ 253.901663][T11945] loop0: lost filesystem error report for type 5 error -117 [ 253.907167][T11945] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 253.928867][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 253.928885][ C0] EXT4-fs (loop0): initial error at time 1785508606: ext4_acquire_dquot:7041 [ 253.928906][ C0] EXT4-fs (loop0): last error at time 1785508606: ext4_acquire_dquot:7041 [ 253.952935][T11945] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #13: comm syz.0.3724: corrupted inode contents [ 253.965397][T11945] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 253.965900][T11945] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #13: comm syz.0.3724: mark_inode_dirty error [ 253.998975][T11945] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 253.999162][T11945] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #13: comm syz.0.3724: corrupted inode contents [ 254.020316][T11945] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 254.020438][T11945] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.3724: mark_inode_dirty error [ 254.044383][T11964] UDC core: g1: couldn't find an available UDC or it's busy [ 254.050600][T11945] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #13: comm syz.0.3724: corrupted inode contents [ 254.064125][T11945] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 254.072794][T11945] loop0: lost filesystem error report for type 5 error -117 [ 254.074376][T11945] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #13: comm syz.0.3724: corrupted inode contents [ 254.095382][T11945] EXT4-fs error (device loop0): ext4_truncate:4691: inode #13: comm syz.0.3724: mark_inode_dirty error [ 254.108159][T11945] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 254.120980][T11945] loop0: lost filesystem error report for type 5 error -117 [ 254.124704][T11945] EXT4-fs (loop0): 1 truncate cleaned up [ 254.148668][T11945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.210268][ T6215] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.283317][T11978] UDC core: g1: couldn't find an available UDC or it's busy [ 254.605790][T11942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.884944][T12043] loop0: detected capacity change from 0 to 512 [ 254.908102][T12043] EXT4-fs: Ignoring removed oldalloc option [ 254.973417][T12043] EXT4-fs error (device loop0): ext4_quota_enable:7228: comm syz.0.3767: Bad quota inum: 33554435, type: 0 [ 255.007068][T12043] loop0: lost filesystem error report for type 5 error -117 [ 255.008681][T12043] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=33554435). Please run e2fsck to fix. [ 255.016096][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 255.016126][ C1] EXT4-fs (loop0): initial error at time 1785508607: ext4_quota_enable:7228 [ 255.016156][ C1] EXT4-fs (loop0): last error at time 1785508607: ext4_quota_enable:7228 [ 255.055453][T12043] EXT4-fs (loop0): mount failed [ 255.082789][ T28] audit: type=1400 audit(1785508607.710:1237): avc: denied { read } for pid=12057 comm="syz.3.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.133600][ T28] audit: type=1400 audit(1785508607.760:1238): avc: denied { write } for pid=12057 comm="syz.3.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.352024][T12076] syz.1.3779 (12076) used obsolete PPPIOCDETACH ioctl [ 255.393429][T12084] loop3: detected capacity change from 0 to 1024 [ 255.400202][T12084] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.408996][T12084] EXT4-fs: Ignoring removed orlov option [ 255.418595][T12084] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 255.427761][T12084] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.3782: Failed to acquire dquot type 0 [ 255.439212][T12084] loop3: lost filesystem error report for type 5 error -117 [ 255.439800][T12084] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, [ 255.444694][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 255.447157][T12084] inode 13: [ 255.454650][ C0] EXT4-fs (loop3): initial error at time 1785508608: ext4_acquire_dquot:7041 [ 255.461049][T12084] block 144: [ 255.464212][ C0] [ 255.464221][ C0] EXT4-fs (loop3): last error at time 1785508608: ext4_acquire_dquot:7041 [ 255.473049][T12084] freeing already freed block (bit 9); block bitmap corrupt. [ 255.476186][ C0] [ 255.497350][T12084] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.3782: corrupted inode contents [ 255.509499][T12084] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #13: comm syz.3.3782: mark_inode_dirty error [ 255.523220][T12084] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.3782: corrupted inode contents [ 255.537017][T12084] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.3782: mark_inode_dirty error [ 255.550405][T12084] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.3782: corrupted inode contents [ 255.562717][T12084] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 255.571838][T12084] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.3782: corrupted inode contents [ 255.583980][T12084] EXT4-fs error (device loop3): ext4_truncate:4691: inode #13: comm syz.3.3782: mark_inode_dirty error [ 255.595496][T12084] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 255.605019][T12084] EXT4-fs (loop3): 1 truncate cleaned up [ 255.611249][T12084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.643889][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.714934][T12043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.873175][T12113] UDC core: g1: couldn't find an available UDC or it's busy [ 256.094484][T12138] UDC core: g1: couldn't find an available UDC or it's busy [ 256.192997][T12144] UDC core: g1: couldn't find an available UDC or it's busy [ 256.564175][T12141] Set syz1 is full, maxelem 65536 reached [ 256.695592][T12168] UDC core: g1: couldn't find an available UDC or it's busy [ 256.759448][T12172] UDC core: g1: couldn't find an available UDC or it's busy [ 257.080131][T12199] UDC core: g1: couldn't find an available UDC or it's busy [ 258.377232][T12323] Set syz1 is full, maxelem 65536 reached [ 258.424595][T12334] UDC core: g1: couldn't find an available UDC or it's busy [ 258.774779][T12363] Set syz1 is full, maxelem 65536 reached [ 258.822442][T12368] UDC core: g1: couldn't find an available UDC or it's busy [ 259.164552][T12392] Set syz1 is full, maxelem 65536 reached [ 259.186809][T12394] UDC core: g1: couldn't find an available UDC or it's busy [ 259.508061][T12418] loop2: detected capacity change from 0 to 512 [ 259.518958][T12418] EXT4-fs: Ignoring removed oldalloc option [ 259.575092][T12418] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.3919: Bad quota inum: 33554435, type: 0 [ 259.586658][T12418] fserror_report: 2 callbacks suppressed [ 259.586671][T12418] loop2: lost filesystem error report for type 5 error -117 [ 259.594833][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 259.609416][ C1] EXT4-fs (loop2): initial error at time 1785508612: ext4_quota_enable:7228 [ 259.616010][T12418] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=33554435). Please run e2fsck to fix. [ 259.618774][ C1] EXT4-fs (loop2): last error at time 1785508612: ext4_quota_enable:7228 [ 259.638764][T12418] EXT4-fs (loop2): mount failed [ 259.851043][T12430] UDC core: g1: couldn't find an available UDC or it's busy [ 260.453582][T12475] Set syz1 is full, maxelem 65536 reached [ 260.926408][T12505] UDC core: g1: couldn't find an available UDC or it's busy [ 261.305131][T12307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.565533][T12555] loop3: detected capacity change from 0 to 512 [ 261.585855][T12555] EXT4-fs: Ignoring removed oldalloc option [ 261.628263][T12562] Set syz1 is full, maxelem 65536 reached [ 261.639867][T12555] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.3978: Bad quota inum: 33554435, type: 0 [ 261.663534][T12555] loop3: lost filesystem error report for type 5 error -117 [ 261.664753][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 261.674862][T12555] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=33554435). Please run e2fsck to fix. [ 261.678971][ C0] EXT4-fs (loop3): initial error at time 1785508614: ext4_quota_enable:7228 [ 261.703020][ C0] EXT4-fs (loop3): last error at time 1785508614: ext4_quota_enable:7228 [ 261.718636][T12555] EXT4-fs (loop3): mount failed [ 261.805204][ T8468] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 261.820721][T12575] tap0: tun_chr_ioctl cmd 1074025681 [ 261.855696][T12575] tap0: tun_chr_ioctl cmd 2147767517 [ 262.039955][T12601] tap0: tun_chr_ioctl cmd 1074025681 [ 262.053461][T12601] tap0: tun_chr_ioctl cmd 2147767517 [ 264.248677][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 264.248695][ T28] audit: type=1400 audit(1785508616.880:1239): avc: denied { create } for pid=12739 comm="syz.4.4052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 264.538928][T12555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.091005][ T6215] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 265.124502][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 265.124544][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.124553][ T6215] Call Trace: [ 265.124559][ T6215] [ 265.124625][ T6215] __dump_stack+0x1d/0x30 [ 265.124647][ T6215] dump_stack_lvl+0x95/0xd0 [ 265.124723][ T6215] dump_stack+0x15/0x1b [ 265.124851][ T6215] dump_header+0x80/0x240 [ 265.124871][ T6215] oom_kill_process+0x295/0x350 [ 265.124896][ T6215] out_of_memory+0x981/0xbc0 [ 265.124970][ T6215] try_charge_memcg+0x621/0xa00 [ 265.125027][ T6215] charge_memcg+0x6d/0x120 [ 265.125049][ T6215] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 265.125107][ T6215] swap_cache_alloc_folio+0x47b/0x5e0 [ 265.125133][ T6215] swap_cluster_readahead+0x2b1/0x460 [ 265.125159][ T6215] swapin_readahead+0xd8/0x8a0 [ 265.125231][ T6215] ? irqentry_exit+0x58f/0x610 [ 265.125250][ T6215] ? __rcu_read_unlock+0x33/0x70 [ 265.125271][ T6215] ? __rcu_read_unlock+0x4e/0x70 [ 265.125288][ T6215] ? swap_cache_get_folio+0x1f7/0x200 [ 265.125340][ T6215] do_swap_page+0x2a2/0x1ec0 [ 265.125367][ T6215] ? __rcu_read_lock+0x36/0x50 [ 265.125414][ T6215] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 265.125483][ T6215] handle_mm_fault+0xb3c/0x2da0 [ 265.125516][ T6215] do_user_addr_fault+0x634/0x1060 [ 265.125551][ T6215] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 265.125571][ T6215] ? trace_page_fault_user+0x1f/0xa0 [ 265.125643][ T6215] exc_page_fault+0x62/0xa0 [ 265.125696][ T6215] asm_exc_page_fault+0x26/0x30 [ 265.125716][ T6215] RIP: 0033:0x7f9ab5b8bf57 [ 265.125795][ T6215] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 60 98 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 59 97 ee 00 48 01 d1 39 7c 24 [ 265.125845][ T6215] RSP: 002b:00007fff5e1b18e0 EFLAGS: 00010202 [ 265.125939][ T6215] RAX: 0000001b31124000 RBX: 0000000000000262 RCX: 0000000000040740 [ 265.125952][ T6215] RDX: 000000000eadb935 RSI: 00007fff5e1b1970 RDI: 0000000000000018 [ 265.125963][ T6215] RBP: 00007fff5e1b191c R08: 0000000037fe93d3 R09: 3fffffffffffffff [ 265.125974][ T6215] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 265.125984][ T6215] R13: 00000000000927c0 R14: 00000000000409f4 R15: 00007fff5e1b1970 [ 265.126003][ T6215] [ 265.463720][ T6215] memory: usage 916kB, limit 307200kB, failcnt 600 [ 265.470326][ T6215] memory+swap: usage 1204kB, limit 9007199254740988kB, failcnt 0 [ 265.478078][ T6215] kmem: usage 636kB, limit 9007199254740988kB, failcnt 0 [ 265.485178][ T6215] Memory cgroup stats for /syz0: [ 265.485410][ T6215] cache 0 [ 265.493277][ T6215] rss 4096 [ 265.496319][ T6215] shmem 0 [ 265.499249][ T6215] mapped_file 0 [ 265.502692][ T6215] dirty 0 [ 265.505796][ T6215] writeback 0 [ 265.509107][ T6215] workingset_refault_anon 209 [ 265.513830][ T6215] workingset_refault_file 2420 [ 265.518704][ T6215] swap 294912 [ 265.522019][ T6215] swapcached 1249280 [ 265.525956][ T6215] pgpgin 204822 [ 265.529418][ T6215] pgpgout 204818 [ 265.532984][ T6215] pgfault 226674 [ 265.536634][ T6215] pgmajfault 144 [ 265.540192][ T6215] inactive_anon 12288 [ 265.544161][ T6215] active_anon 0 [ 265.547645][ T6215] inactive_file 0 [ 265.551279][ T6215] active_file 0 [ 265.556765][ T6215] unevictable 0 [ 265.566204][ T6215] hierarchical_memory_limit 314572800 [ 265.574337][ T6215] hierarchical_memsw_limit 9223372036854771712 [ 265.594504][ T6215] total_cache 0 [ 265.602724][ T6215] total_rss 4096 [ 265.609645][ T6215] total_shmem 0 [ 265.622453][ T6215] total_mapped_file 0 [ 265.628326][ T6215] total_dirty 0 [ 265.632645][ T6215] total_writeback 0 [ 265.636786][ T6215] total_workingset_refault_anon 209 [ 265.642031][ T6215] total_workingset_refault_file 2420 [ 265.648282][ T6215] total_swap 294912 [ 265.652243][ T6215] total_swapcached 1249280 [ 265.656795][ T6215] total_pgpgin 204822 [ 265.660789][ T6215] total_pgpgout 204818 [ 265.668118][ T6215] total_pgfault 226674 [ 265.696759][ T6215] total_pgmajfault 144 [ 265.702362][ T6215] total_inactive_anon 12288 [ 265.711861][ T6215] total_active_anon 0 [ 265.712187][T12789] Set syz1 is full, maxelem 65536 reached [ 265.721675][ T6215] total_inactive_file 0 [ 265.730687][ T6215] total_active_file 0 [ 265.749845][ T6215] total_unevictable 0 [ 265.751621][T12818] UDC core: g1: couldn't find an available UDC or it's busy [ 265.755595][ T6215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4063,pid=12762,uid=0 [ 265.799375][ T6215] Memory cgroup out of memory: Killed process 12762 (syz.0.4063) total-vm:96368kB, anon-rss:1248kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 266.030444][T12846] UDC core: g1: couldn't find an available UDC or it's busy [ 266.112113][T12852] UDC core: g1: couldn't find an available UDC or it's busy [ 266.293812][T12874] UDC core: g1: couldn't find an available UDC or it's busy [ 266.466034][T12883] UDC core: g1: couldn't find an available UDC or it's busy [ 266.936690][T12903] UDC core: g1: couldn't find an available UDC or it's busy [ 267.070046][T12913] UDC core: g1: couldn't find an available UDC or it's busy [ 267.194407][T12924] UDC core: g1: couldn't find an available UDC or it's busy [ 267.204961][T12925] Set syz1 is full, maxelem 65536 reached [ 267.395805][T12945] UDC core: g1: couldn't find an available UDC or it's busy [ 267.467051][T12952] UDC core: g1: couldn't find an available UDC or it's busy [ 267.515153][T12956] Set syz1 is full, maxelem 65536 reached [ 267.722797][T12976] UDC core: g1: couldn't find an available UDC or it's busy [ 267.794070][T12984] UDC core: g1: couldn't find an available UDC or it's busy [ 268.068177][T13004] UDC core: g1: couldn't find an available UDC or it's busy [ 268.177491][ T8459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.190168][T13011] UDC core: g1: couldn't find an available UDC or it's busy [ 268.222281][T13013] Set syz1 is full, maxelem 65536 reached [ 268.293594][ T8459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.341168][T13019] syzkaller0: tun_chr_ioctl cmd 35108 [ 268.366369][ T8459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.431661][ T8459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.541539][ T8459] bridge_slave_1: left allmulticast mode [ 268.553283][ T8459] bridge_slave_1: left promiscuous mode [ 268.573115][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.586529][T13035] UDC core: g1: couldn't find an available UDC or it's busy [ 268.609800][ T8459] bridge_slave_0: left allmulticast mode [ 268.624366][ T8459] bridge_slave_0: left promiscuous mode [ 268.640996][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.810706][ T8459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.824808][ T8459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.834604][ T8459] bond0 (unregistering): Released all slaves [ 268.859339][ T8459] hsr_slave_0: left promiscuous mode [ 268.865213][ T8459] hsr_slave_1: left promiscuous mode [ 268.870869][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.883652][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.891610][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.900229][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.916333][ T8459] veth1_macvtap: left promiscuous mode [ 268.926757][ T8459] veth0_macvtap: left promiscuous mode [ 268.935850][ T8459] veth1_vlan: left promiscuous mode [ 268.945139][ T8459] veth0_vlan: left promiscuous mode [ 268.982381][ T28] audit: type=1400 audit(1785508621.610:1240): avc: denied { write } for pid=13064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.045219][ T8459] team0 (unregistering): Port device team_slave_1 removed [ 269.055341][ T8459] team0 (unregistering): Port device team_slave_0 removed [ 269.071818][ T28] audit: type=1400 audit(1785508621.700:1241): avc: denied { write } for pid=13080 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.118897][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 269.214577][T13092] UDC core: g1: couldn't find an available UDC or it's busy [ 269.290347][ T28] audit: type=1400 audit(1785508621.920:1242): avc: denied { write } for pid=13090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.380191][ T28] audit: type=1400 audit(1785508622.010:1243): avc: denied { write } for pid=13123 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.421518][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 269.439646][T13016] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.452894][T13016] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.460562][T13016] bridge_slave_0: entered allmulticast mode [ 269.466987][T13016] bridge_slave_0: entered promiscuous mode [ 269.474523][T13016] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.482265][T13016] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.489734][T13016] bridge_slave_1: entered allmulticast mode [ 269.498461][T13016] bridge_slave_1: entered promiscuous mode [ 269.530412][T13016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.545339][T13016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.651885][T13151] UDC core: g1: couldn't find an available UDC or it's busy [ 269.665463][T13016] team0: Port device team_slave_0 added [ 269.679720][ T28] audit: type=1400 audit(1785508622.310:1244): avc: denied { write } for pid=13135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.746186][ T28] audit: type=1400 audit(1785508622.370:1245): avc: denied { write } for pid=13158 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.769411][T13016] team0: Port device team_slave_1 added [ 269.819084][T13016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.836391][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.877478][T13016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.918875][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 269.957499][T13016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.971515][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.999975][T13016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.165029][T13016] hsr_slave_0: entered promiscuous mode [ 270.175010][T13016] hsr_slave_1: entered promiscuous mode [ 270.188281][T13016] debugfs: 'hsr0' already exists in 'hsr' [ 270.199151][T13016] Cannot create hsr debugfs directory [ 270.446919][ T28] audit: type=1400 audit(1785508623.080:1246): avc: denied { write } for pid=13192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.476832][ T28] audit: type=1400 audit(1785508623.090:1247): avc: denied { write } for pid=13209 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.586530][ T28] audit: type=1400 audit(1785508623.220:1248): avc: denied { write } for pid=13213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.645630][ T28] audit: type=1400 audit(1785508623.250:1249): avc: denied { write } for pid=13228 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.803974][T13016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.838089][T13016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.867721][ T28] audit: type=1400 audit(1785508623.500:1250): avc: denied { write } for pid=13240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.897663][T13016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.917087][T13016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 270.924962][T13016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.931908][ T28] audit: type=1400 audit(1785508623.550:1251): avc: denied { write } for pid=13261 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.957202][T13016] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 270.965308][T13016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.975835][T13016] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.316986][T13016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.356937][T13016] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.379099][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.386227][ T8467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.408235][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.415373][ T8466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.532532][T13335] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 271.547739][T13335] syzkaller0: linktype set to 0 [ 271.708254][T13016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.922159][T13016] veth0_vlan: entered promiscuous mode [ 271.946590][T13016] veth1_vlan: entered promiscuous mode [ 271.993728][T13016] veth0_macvtap: entered promiscuous mode [ 272.021259][T13016] veth1_macvtap: entered promiscuous mode [ 272.136857][T13016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.150210][T13016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.394910][ T8467] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.410253][ T8467] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.475060][ T8465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.494149][ T8465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.654459][T13452] loop2: detected capacity change from 0 to 512 [ 272.686045][T13452] EXT4-fs: Ignoring removed oldalloc option [ 272.737878][T13452] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.4278: Bad quota inum: 33554435, type: 0 [ 272.771657][T13452] loop2: lost filesystem error report for type 5 error -117 [ 272.771808][T13452] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=33554435). Please run e2fsck to fix. [ 272.779224][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 272.779277][ C0] EXT4-fs (loop2): initial error at time 1785508625: ext4_quota_enable:7228 [ 272.779295][ C0] EXT4-fs (loop2): last error at time 1785508625: ext4_quota_enable:7228 [ 272.819659][T13452] EXT4-fs (loop2): mount failed [ 274.240506][T13614] blkio.reset_stats is deprecated [ 274.586265][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 274.586280][ T28] audit: type=1400 audit(1785508627.220:1258): avc: denied { create } for pid=13645 comm="syz.0.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.637473][T13652] Set syz1 is full, maxelem 65536 reached [ 275.157057][ T28] audit: type=1400 audit(1785508627.780:1259): avc: denied { create } for pid=13693 comm="syz.3.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 275.185707][T13704] Set syz1 is full, maxelem 65536 reached [ 276.751644][ T28] audit: type=1400 audit(1785508629.380:1260): avc: denied { mount } for pid=13784 comm="syz.2.4422" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 276.775949][ T28] audit: type=1400 audit(1785508629.380:1261): avc: denied { unmount } for pid=8559 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 277.344887][T13831] Set syz1 is full, maxelem 65536 reached [ 278.072948][T13881] Set syz1 is full, maxelem 65536 reached [ 278.661493][T13927] loop0: detected capacity change from 0 to 512 [ 278.683992][T13927] EXT4-fs: Ignoring removed oldalloc option [ 278.732540][T13927] EXT4-fs error (device loop0): ext4_quota_enable:7228: comm syz.0.4482: Bad quota inum: 33554435, type: 0 [ 278.746383][T13927] loop0: lost filesystem error report for type 5 error -117 [ 278.746550][T13927] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=33554435). Please run e2fsck to fix. [ 278.769160][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 278.769182][ C1] EXT4-fs (loop0): initial error at time 1785508631: ext4_quota_enable:7228 [ 278.769205][ C1] EXT4-fs (loop0): last error at time 1785508631: ext4_quota_enable:7228 [ 278.794627][T13927] EXT4-fs (loop0): mount failed [ 278.855906][ T8466] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 278.901937][ T28] audit: type=1400 audit(1785508631.530:1262): avc: denied { attach_queue } for pid=13944 comm="syz.3.4487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 279.078477][T13937] Set syz1 is full, maxelem 65536 reached [ 279.505009][T13927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.062713][T14021] loop4: detected capacity change from 0 to 512 [ 280.085137][T14021] EXT4-fs: Ignoring removed oldalloc option [ 280.110375][T14021] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.4520: Bad quota inum: 33554435, type: 0 [ 280.123916][T14021] loop4: lost filesystem error report for type 5 error -117 [ 280.124240][T14021] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=33554435). Please run e2fsck to fix. [ 280.124729][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 280.131906][T14021] EXT4-fs (loop4): mount failed [ 280.146786][ C0] EXT4-fs (loop4): initial error at time 1785508632: ext4_quota_enable:7228 [ 280.166724][ C0] EXT4-fs (loop4): last error at time 1785508632: ext4_quota_enable:7228 [ 280.442058][T14068] loop3: detected capacity change from 0 to 512 [ 280.449654][T14068] EXT4-fs: Ignoring removed oldalloc option [ 280.477117][T14068] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.4535: Bad quota inum: 33554435, type: 0 [ 280.496380][T14068] loop3: lost filesystem error report for type 5 error -117 [ 280.496526][T14068] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=33554435). Please run e2fsck to fix. [ 280.519268][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 280.519289][ C0] EXT4-fs (loop3): initial error at time 1785508633: ext4_quota_enable:7228 [ 280.519313][ C0] EXT4-fs (loop3): last error at time 1785508633: ext4_quota_enable:7228 [ 280.547963][T14068] EXT4-fs (loop3): mount failed [ 281.710954][ T8468] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 282.495301][T14153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.714805][T14216] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 283.235547][T14250] loop3: detected capacity change from 0 to 512 [ 283.269971][T14250] FAT-fs (loop3): bogus logical sector size 0 [ 283.276396][T14250] FAT-fs (loop3): Can't find a valid FAT filesystem [ 283.344756][T14257] Set syz1 is full, maxelem 65536 reached [ 283.351260][T14258] loop3: detected capacity change from 0 to 128 [ 283.368109][T14260] tmpfs: Unsupported parameter 'huge' [ 283.374070][T14258] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.405224][T14258] ext4 filesystem being mounted at /352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.442780][ T28] audit: type=1400 audit(1785508636.080:1263): avc: denied { write } for pid=14256 comm="syz.3.4608" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.465474][ T28] audit: type=1400 audit(1785508636.080:1264): avc: denied { append } for pid=14256 comm="syz.3.4608" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.514015][ T7846] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.649495][ T28] audit: type=1400 audit(1785508636.280:1265): avc: denied { connect } for pid=14284 comm="syz.3.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 283.672580][ T28] audit: type=1400 audit(1785508636.280:1266): avc: denied { write } for pid=14284 comm="syz.3.4619" laddr=fe80::11 lport=1436 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 283.704559][ T28] audit: type=1400 audit(1785508636.330:1267): avc: denied { create } for pid=14287 comm="syz.2.4620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 283.752647][T14294] Set syz1 is full, maxelem 65536 reached [ 283.872222][ T28] audit: type=1400 audit(1785508636.500:1268): avc: denied { read } for pid=14299 comm="syz.0.4626" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 283.895460][ T28] audit: type=1400 audit(1785508636.500:1269): avc: denied { open } for pid=14299 comm="syz.0.4626" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 284.129072][ T28] audit: type=1400 audit(1785508636.760:1270): avc: denied { setopt } for pid=14309 comm="syz.3.4629" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.167289][ T28] audit: type=1400 audit(1785508636.760:1271): avc: denied { read } for pid=14309 comm="syz.3.4629" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.199340][ T28] audit: type=1400 audit(1785508636.820:1272): avc: denied { shutdown } for pid=14309 comm="syz.3.4629" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.268310][T14315] loop3: detected capacity change from 0 to 128 [ 284.301995][T14315] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.322559][T14315] ext4 filesystem being mounted at /362/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.369733][ T7846] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.448156][T14318] loop3: detected capacity change from 0 to 512 [ 284.479834][T14318] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 284.494595][T14318] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 284.910222][T14338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.919599][T14338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.280692][T14378] loop2: detected capacity change from 0 to 512 [ 285.280736][T14377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14377 comm=syz.0.4659 [ 285.323815][T14374] loop1: detected capacity change from 0 to 2048 [ 285.341325][T14378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.360828][T14378] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.376508][T14378] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4660: corrupted xattr block 33: invalid header [ 285.394930][T14374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.395822][T14378] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 285.417088][T14378] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4660: corrupted xattr block 33: invalid header [ 285.430078][T14389] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4660: corrupted xattr block 33: invalid header [ 285.430513][T14378] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 285.443967][T14374] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.474725][T14378] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4660: corrupted xattr block 33: invalid header [ 285.514073][T14389] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 285.543425][T14378] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 285.553121][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.566595][T14389] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4660: corrupted xattr block 33: invalid header [ 285.566764][T14378] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4660: corrupted xattr block 33: invalid header [ 285.593346][T14389] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 285.603498][T14378] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4660: corrupted xattr block 33: invalid header [ 285.621216][T14378] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 285.631292][T14378] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 285.663888][T14399] 9pnet_fd: p9_fd_create_unix (14399): problem creating socket [ 285.684443][ T8559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.762079][T14413] loop1: detected capacity change from 0 to 1024 [ 285.798781][T14413] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 285.819223][T14413] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 285.823554][T14418] loop0: detected capacity change from 0 to 256 [ 285.829124][T14413] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 285.877340][T14413] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.4674: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 285.898926][T14418] FAT-fs (loop0): codepage cp932 not found [ 285.911073][T14413] fserror_report: 11 callbacks suppressed [ 285.911088][T14413] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 285.923613][T14413] EXT4-fs (loop1): no journal found [ 285.932795][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 285.932814][ C0] EXT4-fs (loop1): initial error at time 1785508638: ext4_ext_check_inode:521: inode 3 [ 285.932842][ C0] EXT4-fs (loop1): last error at time 1785508638: ext4_ext_check_inode:521: inode 3 [ 285.953518][T14429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.986096][T14413] EXT4-fs (loop1): can't get journal size [ 285.996267][T14429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.998561][T14413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.005226][T14431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.029191][T14431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.061146][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.109611][T14437] loop1: detected capacity change from 0 to 512 [ 286.128069][T14437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.157590][T14443] loop3: detected capacity change from 0 to 512 [ 286.168211][T14443] EXT4-fs: test_dummy_encryption option not supported [ 286.178992][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.201430][ T8466] Bluetooth: hci0: Frame reassembly failed (-84) [ 286.224219][T14450] loop3: detected capacity change from 0 to 1024 [ 286.268562][T14450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.283648][T14461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4692'. [ 286.291789][T14462] Bluetooth: hci0: Frame reassembly failed (-84) [ 286.308663][T14462] Bluetooth: hci0: Frame reassembly failed (-84) [ 286.317054][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.435153][T14477] loop3: detected capacity change from 0 to 256 [ 286.446669][T14477] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 286.454180][T14477] FAT-fs (loop3): Can't find a valid FAT filesystem [ 287.006354][T14512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.049815][T14512] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.240091][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.357894][T14541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.360554][T14545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.416448][T14545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.457351][ T6215] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.529295][T14557] EXT4-fs: test_dummy_encryption option not supported [ 287.599115][T14560] syz.3.4732 uses obsolete (PF_INET,SOCK_PACKET) [ 287.737633][T14567] syz.3.4735: attempt to access beyond end of device [ 287.737633][T14567] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 287.812413][T14569] FAT-fs (loop3): codepage cp869 not found [ 287.932079][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4738'. [ 288.095238][ T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 288.108458][ T11] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.171764][T14597] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 288.204852][T14451] Bluetooth: hci0: command 0x1003 tx timeout [ 288.205566][ T3779] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 288.212173][T14597] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 288.241376][T14597] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: inode #32: comm syz.3.4747: iget: special inode unallocated [ 288.273100][T14611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.281739][T14597] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 288.281967][T14611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.298856][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 288.305305][ C1] EXT4-fs (loop3): initial error at time 1785508640: ext4_get_journal_inode:5900: inode 32 [ 288.313925][T14597] EXT4-fs (loop3): no journal found [ 288.315330][ C1] EXT4-fs (loop3): last error at time 1785508640: ext4_get_journal_inode:5900: inode 32 [ 288.323838][T14597] EXT4-fs (loop3): can't get journal size [ 288.338318][T14597] EXT4-fs (loop3): filesystem is read-only [ 288.344906][T14597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 288.402097][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.452153][T14593] fido_id[14593]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 288.550173][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 288.550188][ T28] audit: type=1400 audit(1785508641.180:1316): avc: denied { mount } for pid=14627 comm="syz.1.4762" name="/" dev="autofs" ino=55894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 288.618556][T14636] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.638501][T14636] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 288.673163][ T28] audit: type=1400 audit(1785508641.300:1317): avc: denied { write } for pid=14634 comm="syz.4.4764" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.704730][T13016] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.730958][T14645] EXT4-fs: test_dummy_encryption option not supported [ 288.836447][T14647] xt_NFQUEUE: number of total queues is 0 [ 288.925059][T14658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.963657][ T28] audit: type=1400 audit(1785508641.590:1318): avc: denied { write } for pid=14657 comm="syz.3.4775" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.973020][T14666] vfat: Unknown parameter 'umwsk' [ 289.045395][ T28] audit: type=1400 audit(1785508641.680:1319): avc: denied { map } for pid=14657 comm="syz.3.4775" path="/400/file0/pids.current" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 289.099806][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.209752][T14685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.234138][T14685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.266238][T14693] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 289.279588][ T28] audit: type=1400 audit(1785508641.910:1320): avc: denied { ioctl } for pid=14689 comm="syz.2.4790" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 289.323074][T14693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 289.329033][ T28] audit: type=1400 audit(1785508641.950:1321): avc: denied { bind } for pid=14695 comm="syz.3.4792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.352668][T14693] System zones: 1-12 [ 289.358799][T14693] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.4791: bad orphan inode 131072 [ 289.369432][T14693] loop0: lost filesystem error report for type 5 error -117 [ 289.374389][T14693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.443112][ T6215] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.593302][T14719] set_capacity_and_notify: 13 callbacks suppressed [ 289.593316][T14719] loop1: detected capacity change from 0 to 512 [ 289.623592][T14719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 289.640676][T14719] EXT4-fs (loop1): 1 truncate cleaned up [ 289.647858][T14719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.654974][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4804'. [ 289.674276][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4804'. [ 289.683331][T14724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4804'. [ 289.726667][T14726] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4806'. [ 289.782487][T14730] support for the xor transformation has been removed. [ 290.044404][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.085251][T14734] capability: warning: `syz.4.4810' uses deprecated v2 capabilities in a way that may be insecure [ 290.133721][ T28] audit: type=1400 audit(1785508642.760:1322): avc: denied { watch watch_reads } for pid=14740 comm="syz.0.4812" path="/449" dev="tmpfs" ino=2388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 290.207803][ T28] audit: type=1400 audit(1785508642.810:1323): avc: denied { read } for pid=14744 comm="syz.2.4814" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.233958][T14751] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4817'. [ 290.302138][T14760] netlink: 'syz.3.4821': attribute type 13 has an invalid length. [ 290.302216][ T28] audit: type=1400 audit(1785508642.920:1324): avc: denied { read } for pid=14757 comm="syz.0.4818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.337093][T14752] loop1: detected capacity change from 0 to 8192 [ 290.376126][T14752] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 290.395881][T14752] FAT-fs (loop1): Filesystem has been set read-only [ 290.486448][T14776] loop4: detected capacity change from 0 to 1024 [ 290.508722][T14776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 290.522897][T14776] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.535036][ T28] audit: type=1400 audit(1785508643.170:1325): avc: denied { write } for pid=14774 comm="syz.4.4828" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.535359][T14776] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.4828: lblock 0 mapped to illegal pblock 0 (length 1) [ 290.570359][T14776] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 290.584448][T14776] EXT4-fs (loop4): This should not happen!! Data will be lost [ 290.584448][T14776] [ 290.714865][ T8459] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:150: lblock 0 mapped to illegal pblock 0 (length 1) [ 290.763386][ T8459] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 290.788094][T14789] loop3: detected capacity change from 0 to 128 [ 290.796267][ T8459] EXT4-fs (loop4): This should not happen!! Data will be lost [ 290.796267][ T8459] [ 290.818755][T13016] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 290.832216][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 290.844514][T14789] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 290.864446][T14789] FAT-fs (loop3): Filesystem has been set read-only [ 290.906751][T14801] loop2: detected capacity change from 0 to 4096 [ 290.916706][T14801] EXT4-fs: inline encryption not supported [ 290.939571][T14801] EXT4-fs: test_dummy_encryption option not supported [ 290.959644][T14805] loop3: detected capacity change from 0 to 1024 [ 290.997652][T14805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.010170][T14801] loop2: detected capacity change from 0 to 1024 [ 291.049425][T14801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.078385][T14801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.138242][T14821] loop0: detected capacity change from 0 to 2048 [ 291.187180][T14821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.201823][T14821] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 291.216655][T14821] EXT4-fs error (device loop0) in ext4_setattr:6172: error 28 [ 291.240247][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.266068][ T6215] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.334918][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.356163][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.506932][T14835] loop2: detected capacity change from 0 to 128 [ 291.775464][T14841] loop1: detected capacity change from 0 to 512 [ 291.792659][T14841] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 291.811712][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'. [ 291.813248][T14841] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.4852: Unimplemented hash flags: 0x0001 [ 291.905266][T14841] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4852: Corrupt directory, running e2fsck is recommended [ 291.925950][T14841] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 291.963369][T14841] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.4852: corrupted in-inode xattr: invalid ea_ino [ 291.977296][T14841] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.984674][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 292.000256][ C0] EXT4-fs (loop1): initial error at time 1785508644: ext4_iget_extra_inode:5180: inode 15 [ 292.010194][ C0] EXT4-fs (loop1): last error at time 1785508644: ext4_iget_extra_inode:5180: inode 15 [ 292.020261][T14841] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4852: couldn't read orphan inode 15 (err -117) [ 292.038757][T14841] loop1: lost filesystem error report for type 5 error -117 [ 292.040928][T14841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.041511][T14866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.100070][ T6215] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.216298][T14874] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 292.293005][T14880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.320884][T14884] EXT4-fs: Ignoring removed oldalloc option [ 292.327751][T14880] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.361987][T14880] netlink: 'syz.4.4866': attribute type 16 has an invalid length. [ 292.376714][T14884] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.4867: corrupted xattr block 95: invalid header [ 292.390854][T14880] netlink: 'syz.4.4866': attribute type 2 has an invalid length. [ 292.402638][ T9859] bridge0: port 3(syz_tun) entered disabled state [ 292.414063][T14880] netlink: 64102 bytes leftover after parsing attributes in process `syz.4.4866'. [ 292.430898][ T9859] syz_tun (unregistering): left allmulticast mode [ 292.444845][T14884] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 292.444973][T14884] EXT4-fs (loop2): Remounting filesystem read-only [ 292.460833][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 292.460852][ C1] EXT4-fs (loop2): initial error at time 1785508645: ext4_expand_extra_isize_ea:2810: inode 11 [ 292.460896][ C1] EXT4-fs (loop2): last error at time 1785508645: ext4_expand_extra_isize_ea:2810: inode 11 [ 292.490181][ T9859] syz_tun (unregistering): left promiscuous mode [ 292.497001][ T9859] bridge0: port 3(syz_tun) entered disabled state [ 292.512014][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.516149][T14884] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 292.533106][ T11] infiniband syz1: ib_query_port failed (-19) [ 292.542347][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.552807][T14884] EXT4-fs (loop2): 1 orphan inode deleted [ 292.561502][T14884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.618458][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4869'. [ 292.628287][ T8559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.642716][ T8468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.740180][ T8468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.820493][T14908] syzkaller0: entered promiscuous mode [ 292.832118][T14908] syzkaller0: entered allmulticast mode [ 292.866708][ T8468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.945273][T14925] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 292.959918][T14925] EXT4-fs (loop4): Remounting filesystem read-only [ 292.966565][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 292.966590][ C0] EXT4-fs (loop4): initial error at time 1785508645: ext4_mb_generate_buddy:1317 [ 292.966609][ C0] EXT4-fs (loop4): last error at time 1785508645: ext4_mb_generate_buddy:1317 [ 292.991585][T14925] EXT4-fs (loop4): 1 truncate cleaned up [ 292.993888][ T8468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.997806][T14925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.038399][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.110349][T14934] FAT-fs (loop4): IO charset cp862 not found [ 293.189971][T14939] syzkaller0: entered promiscuous mode [ 293.198882][T14939] syzkaller0: entered allmulticast mode [ 293.226069][T14947] ext4: Unknown parameter 'noacl' [ 293.284900][ T8468] bridge_slave_1: left allmulticast mode [ 293.290775][ T8468] bridge_slave_1: left promiscuous mode [ 293.301700][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.322381][ T8468] bridge_slave_0: left allmulticast mode [ 293.342234][ T8468] bridge_slave_0: left promiscuous mode [ 293.356862][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.453378][ T8468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.464362][ T8468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.475994][ T8468] bond0 (unregistering): Released all slaves [ 293.628302][ T8468] hsr_slave_0: left promiscuous mode [ 293.646317][ T8468] hsr_slave_1: left promiscuous mode [ 293.658351][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.678830][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.680496][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4903'. [ 293.699589][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.710481][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 293.710495][ T28] audit: type=1400 audit(1785508646.350:1337): avc: denied { write } for pid=14974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.713895][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.741606][ T28] audit: type=1400 audit(1785508646.380:1338): avc: denied { write } for pid=14995 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.772014][ T8468] veth1_macvtap: left promiscuous mode [ 293.777623][ T8468] veth0_macvtap: left promiscuous mode [ 293.783588][ T8468] veth1_vlan: left promiscuous mode [ 293.789235][ T8468] veth0_vlan: left promiscuous mode [ 293.847707][ T8468] team0 (unregistering): Port device team_slave_1 removed [ 293.857753][ T8468] team0 (unregistering): Port device team_slave_0 removed [ 293.900260][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 293.948184][T14897] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.955630][T14897] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.962797][T14897] bridge_slave_0: entered allmulticast mode [ 293.970038][T14897] bridge_slave_0: entered promiscuous mode [ 293.987202][T14897] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.000963][T14897] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.013965][T14897] bridge_slave_1: entered allmulticast mode [ 294.025453][T14897] bridge_slave_1: entered promiscuous mode [ 294.055709][T15021] EXT4-fs: Ignoring removed nobh option [ 294.082174][T14897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.095648][T14897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.097469][T15021] EXT4-fs: Ignoring removed orlov option [ 294.120987][ T28] audit: type=1400 audit(1785508646.750:1339): avc: denied { write } for pid=15011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.134337][T14897] team0: Port device team_slave_0 added [ 294.156083][T15021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.161307][ T28] audit: type=1400 audit(1785508646.790:1340): avc: denied { write } for pid=15035 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.191867][T14897] team0: Port device team_slave_1 added [ 294.210893][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 294.217615][ T28] audit: type=1400 audit(1785508646.840:1341): avc: denied { write } for pid=15020 comm="syz.4.4908" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.245355][T14897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.252322][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.257372][ T28] audit: type=1400 audit(1785508646.840:1342): avc: denied { write } for pid=15020 comm="syz.4.4908" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.278807][T14897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.303383][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.314045][T14897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.321039][ T28] audit: type=1400 audit(1785508646.840:1343): avc: denied { remove_name } for pid=15020 comm="syz.4.4908" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.328011][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.376462][ T28] audit: type=1400 audit(1785508646.840:1344): avc: denied { rename } for pid=15020 comm="syz.4.4908" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 294.412705][ T28] audit: type=1400 audit(1785508646.840:1345): avc: denied { unlink } for pid=15020 comm="syz.4.4908" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 294.422451][T14897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.491259][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.509359][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.603809][T14897] hsr_slave_0: entered promiscuous mode [ 294.616976][ T28] audit: type=1400 audit(1785508647.250:1346): avc: denied { write } for pid=15047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.617087][T14897] hsr_slave_1: entered promiscuous mode [ 294.659721][T14897] debugfs: 'hsr0' already exists in 'hsr' [ 294.665792][T14897] Cannot create hsr debugfs directory [ 294.738941][T15067] set_capacity_and_notify: 9 callbacks suppressed [ 294.738956][T15067] loop2: detected capacity change from 0 to 512 [ 294.752389][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 294.777411][T15067] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.794304][T15067] EXT4-fs (loop2): blocks per group (3008) and clusters per group (32768) inconsistent [ 294.829812][T15067] loop2: detected capacity change from 0 to 256 [ 294.923524][T14897] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 294.953527][T14897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.963042][T14897] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 294.986271][T14897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.006877][T14897] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.032936][T14897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.081800][T14897] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.121556][T14897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.157634][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 295.393330][T14897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.434948][T14897] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.444178][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.451288][ T8466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.468724][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.475845][ T8468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.491502][T15135] loop4: detected capacity change from 0 to 512 [ 295.523291][T15135] EXT4-fs (loop4): 1 orphan inode deleted [ 295.549314][T15135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.564761][T15135] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.582885][T15135] EXT4-fs (loop4): resizing filesystem from 64 to 2 blocks [ 295.605770][T15135] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 295.708651][T14897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.839789][T14897] veth0_vlan: entered promiscuous mode [ 295.847655][T14897] veth1_vlan: entered promiscuous mode [ 295.866136][T14897] veth0_macvtap: entered promiscuous mode [ 295.873617][T14897] veth1_macvtap: entered promiscuous mode [ 295.885396][T14897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.897317][T14897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.107630][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.164736][ T8463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.177540][T15172] loop4: detected capacity change from 0 to 512 [ 296.186429][ T8463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.215214][T15172] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 1: comm syz.4.4940: invalid block [ 296.229516][T15172] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 296.229973][T15172] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4940: couldn't read orphan inode 11 (err -117) [ 296.239216][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 296.239234][ C1] EXT4-fs (loop4): initial error at time 1785508648: __ext4_iget:5533: inode 11: block 1 [ 296.239285][ C1] EXT4-fs (loop4): last error at time 1785508648: __ext4_iget:5533: inode 11: block 1 [ 296.277845][ T8463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.308947][T15172] loop4: lost filesystem error report for type 5 error -117 [ 296.309850][T15172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.334207][ T8465] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.387872][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.157952][ T8467] Bluetooth: hci0: Frame reassembly failed (-84) [ 297.385565][T15196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.441339][T15236] loop3: detected capacity change from 0 to 1024 [ 297.474804][T15236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.531240][T15236] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 297.705175][T15249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4969'. [ 297.759733][T15252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.777629][T15252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.085808][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.264128][T15282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.275150][T15282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.515769][T15284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.524225][T15284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.536410][T15284] loop5: detected capacity change from 0 to 512 [ 298.556538][T15284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.848569][T15292] loop2: detected capacity change from 0 to 7 [ 299.015133][T15262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.064110][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 299.064122][ T28] audit: type=1400 audit(1785508651.690:1354): avc: denied { write } for pid=15305 comm="syz.1.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.125157][T14897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.165248][ T3779] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 299.213338][T15317] loop2: detected capacity change from 0 to 256 [ 299.227285][T15317] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 299.235637][T15317] FAT-fs (loop2): Can't find a valid FAT filesystem [ 299.274892][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4997'. [ 299.300921][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4997'. [ 299.347972][T15326] loop2: detected capacity change from 0 to 512 [ 299.386784][T15326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.412278][T15326] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.425444][T15336] SELinux: syz.5.5003 (15336) wrote to checkreqprot. This is no longer supported. [ 299.456603][ T8559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.551521][ T28] audit: type=1400 audit(1785508652.180:1355): avc: denied { ioctl } for pid=15350 comm="syz.5.5009" path="socket:[58257]" dev="sockfs" ino=58257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.578961][T15352] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5009'. [ 299.601139][T15352] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.608346][T15352] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.629270][ T28] audit: type=1400 audit(1785508652.180:1356): avc: denied { bind } for pid=15351 comm="syz.3.5011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 299.652915][T15359] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5009'. [ 299.689391][T15359] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.696553][T15359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.703992][T15359] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.711112][T15359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.740658][T15359] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5009'. [ 299.766094][T15359] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.773300][T15359] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.903718][ T28] audit: type=1400 audit(1785508652.530:1357): avc: denied { read write } for pid=15372 comm="syz.1.5017" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 299.938791][ T28] audit: type=1400 audit(1785508652.530:1358): avc: denied { open } for pid=15372 comm="syz.1.5017" path="/393/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 300.126552][T15399] loop3: detected capacity change from 0 to 256 [ 300.133474][T15399] vfat: Deprecated parameter 'posix' [ 300.141180][T15399] FAT-fs: "posix" option is obsolete, not supported now [ 300.150438][T15399] FAT-fs (loop3): codepage cp775 not found [ 300.223071][T15406] loop3: detected capacity change from 0 to 256 [ 300.256785][T15406] FAT-fs (loop3): codepage cp862 not found [ 300.388601][T15421] loop2: detected capacity change from 0 to 512 [ 300.414163][T15421] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.5035: iget: bad i_size value: 38620345925642 [ 300.477102][T15421] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 300.478840][T15421] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.5035: couldn't read orphan inode 15 (err -117) [ 300.488068][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 300.488084][ C0] EXT4-fs (loop2): initial error at time 1785508653: ext4_orphan_get:1399: inode 15 [ 300.488119][ C0] EXT4-fs (loop2): last error at time 1785508653: ext4_orphan_get:1399: inode 15 [ 300.524293][T15430] loop3: detected capacity change from 0 to 512 [ 300.525573][T15421] loop2: lost filesystem error report for type 5 error -117 [ 300.534939][T15421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.557688][T15430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.559216][T15431] loop4: detected capacity change from 0 to 512 [ 300.577654][T15430] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.579605][T15421] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5035'. [ 300.601143][T15430] EXT4-fs error (device loop3): ext4_readdir:225: inode #12: comm syz.3.5041: path /456/file0/file0: directory fails checksum at offset 0 [ 300.698362][ T8559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.705764][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.761158][T15439] loop3: detected capacity change from 0 to 1024 [ 300.769498][T15439] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 300.786787][T15439] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.5046: lblock 2 mapped to illegal pblock 2 (length 1) [ 300.802728][T15439] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 300.803035][T15439] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 300.812166][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 300.812187][ C1] EXT4-fs (loop3): initial error at time 1785508653: ext4_map_blocks:791: inode 3: block 2 [ 300.812223][ C1] EXT4-fs (loop3): last error at time 1785508653: ext4_map_blocks:791: inode 3: block 2 [ 300.847254][T15439] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.5046: lblock 0 mapped to illegal pblock 48 (length 1) [ 300.861611][T15439] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 300.864960][T15439] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 300.917667][T15451] loop4: detected capacity change from 0 to 256 [ 300.929588][T15451] vfat: Bad value for 'umask' [ 300.943505][T15439] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.5046: Failed to acquire dquot type 0 [ 300.951649][T15451] loop4: detected capacity change from 0 to 1024 [ 300.961555][T15439] loop3: lost filesystem error report for type 5 error -117 [ 300.963369][T15439] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 300.987703][T15451] EXT4-fs: Ignoring removed oldalloc option [ 300.994595][T15439] loop3: lost filesystem error report for type 5 error -117 [ 301.002182][T15439] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.5046: mark_inode_dirty error [ 301.023036][T15451] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 301.045004][T15439] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 301.045147][T15439] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 301.067236][T15461] loop2: detected capacity change from 0 to 2048 [ 301.074119][T15451] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c01c, mo2=0002] [ 301.074458][T15439] EXT4-fs (loop3): 1 orphan inode deleted [ 301.089602][T15439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.089676][ T8462] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:153: lblock 1 mapped to illegal pblock 1 (length 1) [ 301.124953][ T28] audit: type=1400 audit(1785508653.750:1359): avc: denied { write } for pid=15438 comm="syz.3.5046" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.145817][T15451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.146935][ T28] audit: type=1400 audit(1785508653.760:1360): avc: denied { create } for pid=15438 comm="syz.3.5046" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 301.182831][T15461] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 301.215797][ T8462] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 301.224390][ T8462] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:153: Failed to release dquot type 0 [ 301.258663][ T8465] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:156: lblock 1 mapped to illegal pblock 1 (length 1) [ 301.283208][T15472] loop2: detected capacity change from 0 to 256 [ 301.292119][ T8465] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 301.292326][ T8465] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:156: Failed to release dquot type 0 [ 301.308744][T15475] EXT4-fs: Ignoring removed oldalloc option [ 301.319517][ T8465] loop3: lost filesystem error report for type 5 error -117 [ 301.321217][ T7846] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 301.342290][T15472] FAT-fs (loop2): codepage cp852 not found [ 301.344128][ T7846] loop3: lost filesystem error report for type 5 error -117 [ 301.377377][T15475] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.5061: corrupted xattr block 95: invalid header [ 301.403614][ T7846] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 301.424963][ T7846] loop3: lost filesystem error report for type 5 error -117 [ 301.432876][ T7846] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 301.470888][T15486] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 301.487030][T15475] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 301.487148][ T7846] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 301.494808][T15475] EXT4-fs (loop5): Remounting filesystem read-only [ 301.496324][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 301.496339][ C1] EXT4-fs (loop5): initial error at time 1785508654: ext4_expand_extra_isize_ea:2810 [ 301.512928][T15486] FAT-fs (loop2): Can't find a valid FAT filesystem [ 301.518290][ C1] : inode 11 [ 301.518305][ C1] EXT4-fs (loop5): last error at time 1785508654: ext4_expand_extra_isize_ea:2810: inode 11 [ 301.545085][T15475] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 301.584036][T15475] EXT4-fs (loop5): 1 orphan inode deleted [ 301.738744][T15495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 301.755662][T15495] EXT4-fs (loop2): 1 truncate cleaned up [ 301.792829][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5076'. [ 301.927715][T15516] EXT4-fs: Ignoring removed oldalloc option [ 301.963540][T15516] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.997284][T15529] EXT4-fs: Ignoring removed bh option [ 302.005718][T15529] EXT4-fs: Ignoring removed bh option [ 302.012492][T15529] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 302.032043][T15516] EXT4-fs warning (device loop5): ext4_group_extend:1861: can't shrink FS - resize aborted [ 302.053808][T15529] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 302.262538][T15550] EXT4-fs: test_dummy_encryption option not supported [ 302.731661][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5100'. [ 302.741173][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5100'. [ 302.750335][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5100'. [ 302.759674][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5100'. [ 303.058501][T15583] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.178879][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5108'. [ 303.197672][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5109'. [ 303.327633][T15613] netlink: 'syz.4.5117': attribute type 3 has an invalid length. [ 303.345557][T15613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5117'. [ 303.377385][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.389405][T15619] 9pnet_fd: p9_fd_create_unix (15619): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 303.406273][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.496704][T15626] EXT4-fs: inline encryption not supported [ 303.512023][T15626] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 303.530300][T15626] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.5123: corrupted in-inode xattr: e_value size too large [ 303.545112][T15626] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 303.545285][T15626] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5123: couldn't read orphan inode 15 (err -117) [ 303.566272][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 303.566312][ C0] EXT4-fs (loop4): initial error at time 1785508656: ext4_iget_extra_inode:5180: inode 15 [ 303.566344][ C0] EXT4-fs (loop4): last error at time 1785508656: ext4_iget_extra_inode:5180: inode 15 [ 303.603796][T15626] loop4: lost filesystem error report for type 5 error -117 [ 303.862356][T15649] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.5133: bad orphan inode 11862016 [ 303.899354][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5136'. [ 303.925012][T15649] loop2: lost filesystem error report for type 5 error -117 [ 303.926179][T15649] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.031365][T15670] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.039841][T15670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.050273][T15673] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 304.050446][T15670] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 304.098781][T15673] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.5143: bad orphan inode 11 [ 304.126156][T15673] loop2: lost filesystem error report for type 5 error -117 [ 304.134836][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 304.149325][ C1] EXT4-fs (loop2): initial error at time 1785508656: ext4_orphan_get:1425 [ 304.158265][ C1] EXT4-fs (loop2): last error at time 1785508656: ext4_orphan_get:1425 [ 304.159423][T15673] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.5143: reserved inode found cleared - inode=18 [ 304.171523][T15670] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.5144: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 304.187820][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 304.187834][ T28] audit: type=1400 audit(1785508656.790:1372): avc: denied { write } for pid=15671 comm="syz.2.5143" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.197979][T15670] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 304.227477][T15670] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5144: couldn't read orphan inode 11 (err -117) [ 304.244663][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 304.254896][ C1] EXT4-fs (loop4): initial error at time 1785508656: ext4_ext_check_inode:521: inode 11 [ 304.264725][ C1] EXT4-fs (loop4): last error at time 1785508656: ext4_ext_check_inode:521: inode 11 [ 304.282507][T15670] loop4: lost filesystem error report for type 5 error -117 [ 304.293698][T15680] EXT4-fs: test_dummy_encryption option not supported [ 304.322996][T15670] EXT4-fs (loop4): shut down requested (1) [ 304.332240][ T28] audit: type=1400 audit(1785508656.970:1373): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 304.376504][ T28] audit: type=1400 audit(1785508656.970:1374): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.405814][ T28] audit: type=1400 audit(1785508656.970:1375): avc: denied { write search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.428316][ T28] audit: type=1400 audit(1785508656.970:1376): avc: denied { add_name } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.456646][ T28] audit: type=1400 audit(1785508656.970:1377): avc: denied { create } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.480942][T15684] EXT4-fs: Invalid want_extra_isize 7 [ 304.487683][ T28] audit: type=1400 audit(1785508656.970:1378): avc: denied { append open } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.517649][ T28] audit: type=1400 audit(1785508656.970:1379): avc: denied { getattr } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.616620][T15684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.625279][T15684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.008748][T15724] EXT4-fs: test_dummy_encryption option not supported [ 305.159736][T15740] set_capacity_and_notify: 19 callbacks suppressed [ 305.159750][T15740] loop5: detected capacity change from 0 to 128 [ 305.191237][T15743] loop4: detected capacity change from 0 to 512 [ 305.204226][T15740] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.214806][T15745] loop2: detected capacity change from 0 to 2048 [ 305.221850][T15743] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 305.223818][ T28] audit: type=1400 audit(1785508657.850:1380): avc: denied { write } for pid=15739 comm="syz.5.5171" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.255375][ T28] audit: type=1400 audit(1785508657.890:1381): avc: denied { write } for pid=15739 comm="syz.5.5171" name="encrypted_dir" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 305.280016][T15743] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5172: bg 0: block 384: padding at end of block bitmap is not set [ 305.288214][T15745] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.297103][T15743] loop4: lost filesystem error report for type 5 error -117 [ 305.305521][T15743] EXT4-fs (loop4): Remounting filesystem read-only [ 305.319380][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 305.319397][ C1] EXT4-fs (loop4): initial error at time 1785508657: ext4_validate_block_bitmap:441 [ 305.319424][ C1] EXT4-fs (loop4): last error at time 1785508657: ext4_validate_block_bitmap:441 [ 305.344454][T15743] EXT4-fs (loop4): 1 truncate cleaned up [ 305.358427][T15751] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.365572][T15751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.372930][T15751] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.380150][T15751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.404108][T15753] loop4: detected capacity change from 0 to 256 [ 305.441208][T15753] FAT-fs (loop4): IO charset cp932 not found [ 305.500426][T15761] loop4: detected capacity change from 0 to 128 [ 305.680505][T15777] loop5: detected capacity change from 0 to 512 [ 305.922052][T15801] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5189'. [ 305.992226][T15808] file system registered [ 306.250623][T15829] loop3: detected capacity change from 0 to 512 [ 306.257582][T15829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 306.270310][T15829] EXT4-fs (loop3): 1 truncate cleaned up [ 306.413852][T15847] loop3: detected capacity change from 0 to 256 [ 306.447678][T15847] FAT-fs (loop3): IO charset cp874 not found [ 306.647702][T15855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.658864][T15855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.679173][T15857] loop1: detected capacity change from 0 to 512 [ 306.696842][T15857] EXT4-fs: test_dummy_encryption option not supported [ 307.096024][ T8466] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 307.240645][T15912] Set syz1 is full, maxelem 65536 reached [ 307.320050][T15920] futex_wake_op: syz.3.5217 tries to shift op by 144; fix this program [ 307.904765][T15885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.975268][T15927] loop3: detected capacity change from 0 to 512 [ 308.003745][T15927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.016498][T15929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.036481][T15929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.046378][T15927] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 308.058512][T15927] EXT4-fs (loop3): 1 truncate cleaned up [ 308.454387][ T8465] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 308.643787][T15964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.653209][T15964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.197323][T15987] loop5: p1 p2 p3 [ 309.229701][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 309.229714][ T28] audit: type=1400 audit(1785508661.860:1404): avc: denied { name_bind } for pid=15991 comm="syz.1.5245" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 309.266621][T15947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.277890][T15994] Invalid argument reading file caps for ./file0 [ 309.280075][ T28] audit: type=1400 audit(1785508661.910:1405): avc: denied { execute } for pid=15993 comm="syz.1.5246" name="file0" dev="tmpfs" ino=2282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 309.316310][ T28] audit: type=1400 audit(1785508661.910:1406): avc: denied { execute_no_trans } for pid=15993 comm="syz.1.5246" path="/431/file0" dev="tmpfs" ino=2282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 309.365441][T16001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.383858][T16001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.399886][ T28] audit: type=1400 audit(1785508662.030:1407): avc: denied { read } for pid=16002 comm="syz.3.5251" path="socket:[61312]" dev="sockfs" ino=61312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 309.969259][T16017] ext4 filesystem being mounted at /442/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.991563][ T28] audit: type=1400 audit(1785508662.620:1408): avc: denied { append } for pid=16016 comm="syz.2.5255" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 309.991783][T16017] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5255: bg 0: block 217: padding at end of block bitmap is not set [ 310.029618][T16017] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 310.142199][T16028] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 310.156691][T16028] FAT-fs (loop4): Can't find a valid FAT filesystem [ 310.208755][T16037] set_capacity_and_notify: 5 callbacks suppressed [ 310.208768][T16037] loop4: detected capacity change from 0 to 512 [ 310.215035][T16037] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 310.220696][ T8466] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 310.406952][ T1039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 310.408695][ T1039] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 310.439306][T16056] loop4: detected capacity change from 0 to 512 [ 310.439588][T16056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.439832][T16056] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 310.442499][T16056] EXT4-fs (loop4): 1 truncate cleaned up [ 310.529293][ T28] audit: type=1326 audit(1785508663.160:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.4.5269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff2483e019 code=0x0 [ 310.580517][ T28] audit: type=1400 audit(1785508663.210:1410): avc: denied { write } for pid=16055 comm="syz.4.5269" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.736684][T16040] Set syz1 is full, maxelem 65536 reached [ 311.144982][T16030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.177374][T16077] loop1: detected capacity change from 0 to 256 [ 311.185147][T16077] FAT-fs (loop1): data area starts beyond volume (274 > 64) [ 311.192630][T16077] FAT-fs (loop1): Can't find a valid FAT filesystem [ 311.406532][T16095] loop3: detected capacity change from 0 to 8192 [ 311.441641][T16104] mmap: syz.1.5287 (16104): VmData 167485440 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 311.460795][T16095] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 311.476578][T16108] netlink: 'syz.4.5289': attribute type 16 has an invalid length. [ 311.485051][T16095] FAT-fs (loop3): Filesystem has been set read-only [ 311.497269][T16108] netlink: 'syz.4.5289': attribute type 2 has an invalid length. [ 311.509550][T16110] loop1: detected capacity change from 0 to 512 [ 311.518511][T16110] EXT4-fs: inline encryption not supported [ 311.519421][T16108] netlink: 64102 bytes leftover after parsing attributes in process `syz.4.5289'. [ 311.535588][T16110] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 311.548019][T16110] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.5290: corrupted in-inode xattr: e_value size too large [ 311.584353][T16110] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.584505][T16110] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.5290: couldn't read orphan inode 15 (err -117) [ 311.593679][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 311.593694][ C1] EXT4-fs (loop1): initial error at time 1785508664: ext4_iget_extra_inode:5180: inode 15 [ 311.593733][ C1] EXT4-fs (loop1): last error at time 1785508664: ext4_iget_extra_inode:5180: inode 15 [ 311.635938][T16110] loop1: lost filesystem error report for type 5 error -117 [ 311.647758][T16114] loop4: detected capacity change from 0 to 256 [ 311.691491][T16114] FAT-fs (loop4): codepage cp861 not found [ 311.747456][T16117] loop4: detected capacity change from 0 to 512 [ 311.763582][T16117] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.903656][T16128] netlink: 'syz.3.5291': attribute type 1 has an invalid length. [ 311.933677][T16128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5291'. [ 311.976847][T16135] loop5: detected capacity change from 0 to 256 [ 312.017887][T16140] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5300'. [ 312.027342][T16135] FAT-fs (loop5): codepage cp866 not found [ 312.302697][ T28] audit: type=1400 audit(1785508664.930:1411): avc: denied { connect } for pid=16166 comm="syz.5.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.344002][T16171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.367139][T16171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.377403][T16177] loop2: detected capacity change from 0 to 512 [ 312.393537][T16177] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.5318: bg 0: block 104: invalid block bitmap [ 312.407545][T16177] loop2: lost filesystem error report for type 5 error -117 [ 312.412212][T16177] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 312.419554][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 312.419572][ C0] EXT4-fs (loop2): initial error at time 1785508665: ext4_validate_block_bitmap:432 [ 312.419590][ C0] EXT4-fs (loop2): last error at time 1785508665: ext4_validate_block_bitmap:432 [ 312.453578][T16177] loop2: lost filesystem error report for type 5 error -117 [ 312.453951][T16177] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5318: invalid indirect mapped block 1 (level 1) [ 312.474888][T16177] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 312.475275][T16177] EXT4-fs (loop2): 1 truncate cleaned up [ 312.492960][ T28] audit: type=1400 audit(1785508665.130:1412): avc: denied { write } for pid=16176 comm="syz.2.5318" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.514909][ T28] audit: type=1400 audit(1785508665.130:1413): avc: denied { write } for pid=16176 comm="syz.2.5318" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.560532][T16186] loop5: detected capacity change from 0 to 256 [ 312.576323][T16186] FAT-fs (loop5): codepage cp861 not found [ 312.621510][T16191] FAT-fs (loop5): IO charset macroman not found [ 312.677739][T16200] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.731912][T16210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.740599][T16210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.808736][T16208] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 312.821714][T16208] EXT4-fs (loop2): 1 truncate cleaned up [ 313.032570][T16222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.069287][T16222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.181137][T16232] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.5340: inode has both inline data and extents flags [ 313.226040][T16232] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 313.231207][T16232] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.5340: couldn't read orphan inode 15 (err -117) [ 313.240505][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 313.240524][ C0] EXT4-fs (loop2): initial error at time 1785508665: ext4_orphan_get:1399: inode 15 [ 313.240561][ C0] EXT4-fs (loop2): last error at time 1785508665: ext4_orphan_get:1399: inode 15 [ 313.277447][T16232] loop2: lost filesystem error report for type 5 error -117 [ 313.425959][T16248] EXT4-fs mount: 46 callbacks suppressed [ 313.425991][T16248] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 313.481469][T16252] syzkaller1: entered promiscuous mode [ 313.488077][T16250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.500237][T16252] syzkaller1: entered allmulticast mode [ 313.506367][T16248] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.525002][T16250] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.541667][T14897] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.583014][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.650252][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5352'. [ 313.735878][T16270] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 313.763169][T16270] EXT4-fs (loop5): 1 truncate cleaned up [ 313.769562][T16270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.041535][T14897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.310195][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 314.310207][ T28] audit: type=1400 audit(1785508666.940:1422): avc: denied { write } for pid=16309 comm="syz.2.5368" name="fs" dev="configfs" ino=41220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 314.486563][T16320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 314.502396][T16320] EXT4-fs (loop2): 1 truncate cleaned up [ 314.508530][T16320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.567670][ T28] audit: type=1400 audit(1785508667.180:1423): avc: denied { write } for pid=16328 comm="syz.3.5375" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 314.826167][ T8559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.923506][T16347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.959578][ T28] audit: type=1400 audit(1785508667.590:1424): avc: denied { write } for pid=16345 comm="syz.4.5381" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.989768][ T28] audit: type=1400 audit(1785508667.590:1425): avc: denied { map } for pid=16345 comm="syz.4.5381" path="/259/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 314.990250][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.012887][ T28] audit: type=1400 audit(1785508667.590:1426): avc: denied { execute } for pid=16345 comm="syz.4.5381" path="/259/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 315.116173][T16360] EXT4-fs: Ignoring removed bh option [ 315.128589][T16363] xt_hashlimit: size too large, truncated to 1048576 [ 315.147026][T16360] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 315.346570][ T28] audit: type=1400 audit(1785508667.970:1427): avc: denied { mount } for pid=16372 comm="syz.5.5389" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 315.376850][T16376] set_capacity_and_notify: 14 callbacks suppressed [ 315.376866][T16376] loop2: detected capacity change from 0 to 512 [ 315.524796][ T28] audit: type=1400 audit(1785508668.140:1428): avc: denied { open } for pid=16381 comm="syz.5.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 315.547267][T16384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.577016][T16388] loop4: detected capacity change from 0 to 512 [ 315.594840][ T28] audit: type=1400 audit(1785508668.140:1429): avc: denied { kernel } for pid=16381 comm="syz.5.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 315.676022][T16394] loop3: detected capacity change from 0 to 256 [ 315.781077][ T28] audit: type=1400 audit(1785508668.360:1430): avc: denied { write } for pid=16397 comm="syz.5.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 315.808786][T16394] FAT-fs (loop3): IO charset koi8-u not found [ 315.859545][T16407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.882083][T16407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.896051][T16411] loop4: detected capacity change from 0 to 512 [ 315.896849][T16409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.911060][T16409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.227346][T16416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.236719][T16416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.322149][ T28] audit: type=1400 audit(1785508668.950:1431): avc: denied { firmware_load } for pid=16419 comm="syz.4.5409" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 316.405494][T16428] loop2: detected capacity change from 0 to 512 [ 316.417332][T16428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.434374][T16433] loop4: detected capacity change from 0 to 512 [ 316.450511][T16428] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.496052][T16433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.511415][T16441] Set syz1 is full, maxelem 65536 reached [ 316.517737][T16441] Set syz1 is full, maxelem 65536 reached [ 316.518421][ T8559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.532808][T16433] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.544303][T16443] loop1: detected capacity change from 0 to 512 [ 316.659717][T13016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.720374][T16448] loop4: detected capacity change from 0 to 512 [ 316.726395][T16448] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.768221][T16456] loop1: detected capacity change from 0 to 512 [ 316.872825][T16456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 316.872852][T16456] System zones: 1-12 [ 316.873982][T16457] loop2: detected capacity change from 0 to 512 [ 316.880853][T16456] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.5423: corrupted in-inode xattr: e_value size too large [ 316.882299][T16457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 316.916738][T16456] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 316.919973][T16457] EXT4-fs (loop2): 1 truncate cleaned up [ 316.920371][T16457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.924655][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 316.924671][ C1] EXT4-fs (loop1): initial error at time 1785508669: ext4_iget_extra_inode:5180: inode 15 [ 316.924700][ C1] EXT4-fs (loop1): last error at time 1785508669: ext4_iget_extra_inode:5180: inode 15 [ 316.939128][T16456] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.5423: couldn't read orphan inode 15 (err -117) [ 316.939234][T16456] loop1: lost filesystem error report for type 5 error -117 [ 316.973437][ T8559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.984332][T16456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.033656][ T8465] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.035833][T16469] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.077178][T16469] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.081750][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5429'. [ 317.098352][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.446613][ T8463] Bluetooth: hci1: Frame reassembly failed (-84) [ 317.462391][T16505] Bluetooth: hci1: Frame reassembly failed (-84) [ 317.475453][T16505] Bluetooth: hci1: Frame reassembly failed (-84) [ 317.566266][ T8462] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 317.784975][ T3390] kernel read not supported for file /252/attr/prev (pid: 3390 comm: kworker/0:3) [ 318.128770][T16557] Set syz1 is full, maxelem 65536 reached [ 318.135218][T16557] Set syz1 is full, maxelem 65536 reached [ 318.147652][T16555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.166407][T16555] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.195164][T14897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.202416][T16569] EXT4-fs: Ignoring removed i_version option [ 318.211741][T16569] EXT4-fs: Ignoring removed oldalloc option [ 318.228427][T16569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.258099][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.407925][T16587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.420631][T16587] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.435324][T16587] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.5474: corrupted xattr block 6: invalid header [ 318.450718][T16595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.457389][T16587] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 318.461290][T16595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.468947][T16587] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.5474: corrupted xattr block 6: invalid header [ 318.489249][T16587] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 318.514175][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.075276][T16614] xt_hashlimit: size too large, truncated to 1048576 [ 319.084879][T14451] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 319.238392][T16630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.262190][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.484747][T16508] Bluetooth: hci1: command 0x1003 tx timeout [ 319.484867][ T3779] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 319.573625][T16651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.582663][T16651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.148410][T16659] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.5500: iget: bad i_size value: 38620345925642 [ 320.161125][T16659] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 320.161365][T16659] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5500: couldn't read orphan inode 15 (err -117) [ 320.170531][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 320.170548][ C1] EXT4-fs (loop3): initial error at time 1785508672: ext4_orphan_get:1399: inode 15 [ 320.170590][ C1] EXT4-fs (loop3): last error at time 1785508672: ext4_orphan_get:1399: inode 15 [ 320.207788][T16659] loop3: lost filesystem error report for type 5 error -117 [ 320.208433][T16659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.230617][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 320.230629][ T28] audit: type=1400 audit(1785508672.860:1450): avc: denied { write } for pid=16658 comm="syz.3.5500" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.261244][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.272930][T16661] tmpfs: Bad value for 'mpol' [ 320.416466][T16667] usb usb1: usbfs: process 16667 (syz.5.5503) did not claim interface 0 before use [ 320.463584][T16511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.511298][ T28] audit: type=1400 audit(1785508673.140:1451): avc: denied { create } for pid=16674 comm="syz.1.5507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 320.532404][ T28] audit: type=1400 audit(1785508673.170:1452): avc: denied { write } for pid=16674 comm="syz.1.5507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 320.572331][T16684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.584588][T16684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.665870][T16690] set_capacity_and_notify: 8 callbacks suppressed [ 320.665886][T16690] loop1: detected capacity change from 0 to 512 [ 320.734545][T16693] loop5: detected capacity change from 0 to 512 [ 320.741781][T16693] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 320.757662][T16698] loop3: detected capacity change from 0 to 512 [ 320.784372][T16698] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 320.815781][T16698] EXT4-fs (loop3): 1 truncate cleaned up [ 320.824238][T16698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.838724][ T28] audit: type=1400 audit(1785508673.470:1453): avc: denied { write } for pid=16697 comm="syz.3.5516" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.934586][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.969233][T16714] loop5: detected capacity change from 0 to 512 [ 320.978499][ T8462] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 321.009805][T16714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.047309][T14897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.086983][T16723] loop5: detected capacity change from 0 to 2048 [ 321.092504][T16682] tmpfs: Unsupported parameter 'huge' [ 321.119590][T16723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.134054][ T28] audit: type=1400 audit(1785508673.760:1454): avc: denied { accept } for pid=16681 comm="syz.1.5511" lport=342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 321.154768][T16723] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.173169][ T28] audit: type=1400 audit(1785508673.800:1455): avc: denied { write } for pid=16722 comm="syz.5.5524" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.195057][T16723] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5524: bg 0: block 345: padding at end of block bitmap is not set [ 321.210971][T16723] EXT4-fs (loop5): Remounting filesystem read-only [ 321.225770][T16730] loop3: detected capacity change from 0 to 512 [ 321.227352][T16732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.240842][T16732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.241900][T14897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.253776][T16730] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.325224][T16736] loop3: detected capacity change from 0 to 512 [ 321.333265][T16736] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.341730][T16736] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 321.352821][T16736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e028, mo2=0002] [ 321.366368][T16736] System zones: 1-12 [ 321.374476][T16736] EXT4-fs (loop3): orphan cleanup on readonly fs [ 321.394205][T16736] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5530: bg 0: block 361: padding at end of block bitmap is not set [ 321.423031][T16736] loop3: lost filesystem error report for type 5 error -117 [ 321.423190][T16736] EXT4-fs (loop3): Remounting filesystem read-only [ 321.430608][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 321.430630][ C1] EXT4-fs (loop3): initial error at time 1785508674: ext4_validate_block_bitmap:441 [ 321.430659][ C1] EXT4-fs (loop3): last error at time 1785508674: ext4_validate_block_bitmap:441 [ 321.468845][T16736] EXT4-fs (loop3): 1 truncate cleaned up [ 321.475190][T16736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 321.545121][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 321.627687][T16747] loop3: detected capacity change from 0 to 512 [ 321.667497][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.667497][ T8465] loop1: rw=1, sector=528, nr_sectors = 32 limit=512 [ 321.685449][T16747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.687741][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.687741][ T8465] loop1: rw=1, sector=592, nr_sectors = 32 limit=512 [ 321.711569][ T28] audit: type=1400 audit(1785508674.340:1456): avc: denied { write } for pid=16746 comm="syz.3.5534" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.733854][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.733854][ T8465] loop1: rw=1, sector=656, nr_sectors = 32 limit=512 [ 321.747767][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.747767][ T8465] loop1: rw=1, sector=720, nr_sectors = 32 limit=512 [ 321.761584][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.761584][ T8465] loop1: rw=1, sector=784, nr_sectors = 32 limit=512 [ 321.776037][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.783508][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.783508][ T8465] loop1: rw=1, sector=848, nr_sectors = 32 limit=512 [ 321.801380][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.801380][ T8465] loop1: rw=1, sector=912, nr_sectors = 32 limit=512 [ 321.815575][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.815575][ T8465] loop1: rw=1, sector=976, nr_sectors = 32 limit=512 [ 321.841762][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.841762][ T8465] loop1: rw=1, sector=1040, nr_sectors = 32 limit=512 [ 321.861178][T16756] loop3: detected capacity change from 0 to 4096 [ 321.861712][ T8465] kworker/u8:156: attempt to access beyond end of device [ 321.861712][ T8465] loop1: rw=1, sector=1104, nr_sectors = 32 limit=512 [ 321.872956][T16756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.911130][ T28] audit: type=1400 audit(1785508674.540:1457): avc: denied { write } for pid=16755 comm="syz.3.5537" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.942344][ T28] audit: type=1400 audit(1785508674.540:1458): avc: denied { setattr } for pid=16755 comm="syz.3.5537" name="control" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 321.964686][ T28] audit: type=1400 audit(1785508674.540:1459): avc: denied { write } for pid=16755 comm="syz.3.5537" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.995314][T16765] loop1: detected capacity change from 0 to 512 [ 322.003245][T16765] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.218632][T16777] tmpfs: Unsupported parameter 'huge' [ 322.429002][ T7846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.463219][T16784] EXT4-fs: Invalid want_extra_isize 7 [ 322.604773][T16784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.613222][T16784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.100207][T16790] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.116254][T16790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.158569][T16790] ext4 filesystem being mounted at /473/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.188359][T16794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.202172][T16794] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.230806][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.240415][T14897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.292202][T16802] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 323.308801][ T2980] ================================================================== [ 323.316910][ T2980] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 323.324814][ T2980] [ 323.327130][ T2980] write to 0xffff8881199a8780 of 4 bytes by task 23642 on cpu 1: [ 323.334833][ T2980] d_make_discardable+0x4f/0x90 [ 323.339683][ T2980] simple_unlink+0x68/0x80 [ 323.344091][ T2980] shmem_unlink+0x12d/0x140 [ 323.348585][ T2980] vfs_unlink+0x1c3/0x490 [ 323.352900][ T2980] filename_unlinkat+0x1dc/0x410 [ 323.357821][ T2980] __se_sys_unlink+0x2b/0xe0 [ 323.362394][ T2980] __x64_sys_unlink+0x1f/0x30 [ 323.367055][ T2980] x64_sys_call+0x2eb6/0x3020 [ 323.371742][ T2980] do_syscall_64+0x136/0x3c0 [ 323.376326][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.382204][ T2980] [ 323.384509][ T2980] read to 0xffff8881199a8780 of 4 bytes by task 2980 on cpu 0: [ 323.392058][ T2980] step_into_slowpath+0xea/0x4c0 [ 323.396985][ T2980] path_lookupat+0x2eb/0x4c0 [ 323.401563][ T2980] filename_lookup+0x18f/0x390 [ 323.406313][ T2980] do_readlinkat+0x74/0x2f0 [ 323.410831][ T2980] __x64_sys_readlink+0x47/0x60 [ 323.415681][ T2980] x64_sys_call+0x2b51/0x3020 [ 323.420344][ T2980] do_syscall_64+0x136/0x3c0 [ 323.424920][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.430800][ T2980] [ 323.433106][ T2980] value changed: 0x08300080 -> 0x00004080 [ 323.438802][ T2980] [ 323.441110][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 323.447240][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 323.456074][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.466109][ T2980] ================================================================== [ 323.497116][T16807] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 1: comm syz.1.5557: invalid block [ 323.508247][T16807] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 323.508625][T16807] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.5557: couldn't read orphan inode 11 (err -117) [ 323.517860][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 323.517897][ C1] EXT4-fs (loop1): initial error at time 1785508676: __ext4_iget:5533: inode 11: block 1 [ 323.517925][ C1] EXT4-fs (loop1): last error at time 1785508676: __ext4_iget:5533: inode 11: block 1 [ 323.555889][T16807] loop1: lost filesystem error report for type 5 error -117 [ 323.556493][T16807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.584847][T10198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.907645][T16707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512