last executing test programs: 1m31.639647725s ago: executing program 3 (id=276): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x24000080) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 1m31.511912317s ago: executing program 3 (id=281): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='lock m'], 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m31.411888288s ago: executing program 3 (id=284): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xc, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xff0a, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2}}, 0x2b) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m31.292522209s ago: executing program 3 (id=288): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m31.273250949s ago: executing program 3 (id=289): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000010800)={0x0, 0x0, &(0x7f00000107c0)={&(0x7f0000003840)=@delchain={0x730, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x9, 0x6}, {0xd, 0x2}}, [@f_tcindex={{0xc}, {0xbc, 0x2, [@TCA_TCINDEX_POLICE={0x4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0x9}}, @TCA_TCINDEX_POLICE={0x94, 0x6, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x9, 0x7, 0xfffff2cc, {0x6f, 0x2, 0x9, 0x8000, 0x8, 0x10}, {0x6, 0x0, 0x2a8c, 0x5, 0x1, 0x7}, 0x8, 0x4, 0xafe}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x6, 0x5, 0x7ff, {0x7, 0x0, 0x0, 0x3, 0x400, 0x1ff}, {0xbb, 0x1, 0x6, 0x8, 0x1, 0x116}, 0x9, 0x1, 0x3}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4322}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x60a2}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff2, 0xe}}]}}, @f_rsvp={{0x9}, {0x638, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_RSVP_POLICE={0x47c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x95, 0x6, 0x1, 0x10, 0x9, {0x8, 0x1, 0x200, 0x7, 0x5, 0x5}, {0x7, 0x2, 0x101, 0x1, 0x4a, 0x4}, 0x7, 0xffff1380, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x5, 0x1, 0x1, 0x5e, 0x64, 0x7, 0xd, 0xf, 0xb7d, 0x81, 0x2, 0xfffffff7, 0x9, 0x6c, 0x2, 0x8, 0x4, 0x1, 0x8000, 0xdd, 0x7, 0x4, 0x4, 0x0, 0x8001, 0x2, 0x8, 0xff, 0x0, 0x3, 0x9, 0x81, 0x4, 0x7860fe36, 0x3, 0x9, 0x1, 0x200, 0x7fff, 0xfffffffa, 0x3, 0x9ea, 0x6, 0x6, 0x8, 0x10001, 0x1, 0x0, 0x5, 0x3, 0x3, 0x10001, 0x4, 0x6, 0x101, 0xc56a746b, 0x2, 0x8, 0x7fffffff, 0x7fff, 0x0, 0x0, 0x0, 0x9, 0x240b, 0x2, 0x44bd, 0x9, 0xfffffffb, 0x1, 0x3, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x4, 0x3, 0x1, 0x8, 0xfffffff9, 0x1, 0x10000, 0x1, 0x9, 0x40, 0xfffffff9, 0x5, 0x75e, 0xfffffff7, 0x518d, 0x0, 0x7, 0x6, 0x7, 0x1, 0x0, 0x81, 0x10, 0x5, 0x7, 0x0, 0x8000, 0x0, 0x4, 0x6, 0x2, 0xfffffff7, 0x6a, 0x4, 0x0, 0x3, 0x8, 0xfffffff7, 0x5, 0xd, 0x0, 0x5, 0x4, 0x6, 0xc3a, 0x80000001, 0x9, 0x4, 0x3, 0x80000001, 0x7, 0x44, 0x8, 0xfffffffa, 0x81, 0x1688, 0x4, 0x10, 0x4, 0x1, 0x10001, 0x8, 0x6, 0x10001, 0x2, 0x34, 0xfff, 0x22d, 0x8, 0xdd, 0x9, 0x1, 0x5, 0x3, 0x9, 0x5e7b8185, 0xe631, 0x0, 0x1, 0x3, 0x9, 0x7, 0xe, 0x6, 0xbe, 0x4, 0x1, 0x40, 0x1, 0x3, 0xdb37, 0x5, 0x5, 0x307, 0x4, 0x8, 0x13a, 0x8, 0x8001, 0xff, 0x34, 0x75, 0xc, 0x2, 0x9, 0xff, 0x0, 0x1, 0x3, 0x9, 0x0, 0x2, 0x8, 0x1, 0x0, 0x4, 0x4, 0x80, 0x3, 0x6, 0x7, 0x6, 0x2, 0x2, 0x3, 0x8, 0xff, 0x3, 0xaa11, 0x101, 0x3ff, 0x3, 0x7, 0x7, 0x6, 0x7, 0x9, 0x9, 0x7fff, 0x2, 0x513, 0x6, 0x1, 0x9, 0x2, 0x0, 0x3ff, 0x2, 0x3, 0x1, 0x6, 0x8, 0x1ff, 0x40, 0x7b21, 0x3c7, 0x800, 0x5, 0x77, 0x80, 0x9, 0x1, 0x7, 0x9, 0x1, 0x20471e25, 0x7, 0x1, 0x3, 0x2, 0x5, 0x1613e000, 0x6, 0x1, 0x9, 0x2, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0x1a8, 0x6, [@m_csum={0x128, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6234, 0x8, 0x20000000, 0x9, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x7, 0xffffffffffffffff, 0x6, 0x9}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x0, 0x5, 0xabb5, 0x100}, 0x6a}}]}, {0xa5, 0x6, "944c985fb4ce8e44a33a89a0ba583a586ec5b4cb1a6aa4e2631902b8e897570ae8c131b63967eea0810720c5a31d1f395dc4c39130f2af03c61903f8bdc5ccc1bfb0cef96bfa6226bfc047e4cc3fc5c45c1e03d2ee83b74e7aa398b70d953c4be416787d65a2fe92c8bffb6a2dd2c3b3bb9f8b6afc45546ef4deb0bfa792f08f08cd14bb4745f9698e86d1ea6016a2ceb43dacb8e9dcd753aaf510a5b7f7320cfa"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x7c, 0x9, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xb}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1000}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x10}}]}, {0x17, 0x6, "273f6967a4c06a6679942a1a780c508f0a7524"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m30.415721341s ago: executing program 3 (id=311): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000040)={0x2, 0xcc30}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m30.415501931s ago: executing program 32 (id=311): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000040)={0x2, 0xcc30}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 53.432560958s ago: executing program 1 (id=1040): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 53.34125702s ago: executing program 1 (id=1044): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9e2, 0x9, 0x7, 0x7, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000080)={0x17c04, r1, 0x2, 0xdf1c, 0x10000007, 0xdeb1}) 53.208122801s ago: executing program 1 (id=1049): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000) io_uring_enter(r1, 0x7fffdfe, 0x2438, 0xd, 0x0, 0xfffffe86) 53.194102012s ago: executing program 1 (id=1050): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000001580)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0xc7}}, {@data_err_ignore}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 53.059783694s ago: executing program 1 (id=1054): mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 52.804196706s ago: executing program 1 (id=1056): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 52.804105777s ago: executing program 33 (id=1056): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 4.207814585s ago: executing program 6 (id=2022): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) 4.106996906s ago: executing program 6 (id=2024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x68}, 0x40) 4.057997577s ago: executing program 6 (id=2025): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x241}], 0x1}}], 0x1, 0x4000801) 3.198723998s ago: executing program 6 (id=2048): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) 2.709182634s ago: executing program 6 (id=2056): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) 1.266070723s ago: executing program 5 (id=2100): socket(0x28, 0x801, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1d31, &(0x7f0000000040)={0x0, 0xc8a3, 0xc001, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x63a, 0x7721, 0x16, 0x0, 0x0) 1.222384804s ago: executing program 5 (id=2101): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 1.064298556s ago: executing program 5 (id=2107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018}) shutdown(r0, 0x1) 1.010336306s ago: executing program 5 (id=2109): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 719.82767ms ago: executing program 2 (id=2125): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x58, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x63e7, @local, 0xfffffff8}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x2}]}, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0}) 680.360141ms ago: executing program 0 (id=2127): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010002"], 0x0) 659.249471ms ago: executing program 2 (id=2128): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="67301133"], 0x4c}}, 0x4000015) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 639.586951ms ago: executing program 0 (id=2129): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 616.938972ms ago: executing program 6 (id=2130): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) 616.524972ms ago: executing program 4 (id=2131): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x2a) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)) 562.590292ms ago: executing program 4 (id=2132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x304}, "ad5f76f7684b5e3e", "4f2c3e223509000000000000000000d3", '\x00', "5075c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) 537.184292ms ago: executing program 2 (id=2133): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x4070bd28, 0x2, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x2c}}, 0x18) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x40800) 468.325873ms ago: executing program 4 (id=2134): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(0x3) 428.013324ms ago: executing program 4 (id=2135): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x2a, 0x0, 0x9, 0xb, 0x0, 0x9, 0x0, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x5, 0x7}, 0x0, 0xa0, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4f3c, 0x171903) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cd}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000000)={0x5}, 0x1) 417.256124ms ago: executing program 0 (id=2136): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) fchmod(r2, 0x20) 388.272524ms ago: executing program 2 (id=2137): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) 345.850045ms ago: executing program 0 (id=2138): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x200, 0x1) getdents64(r0, 0x0, 0x0) 217.840526ms ago: executing program 2 (id=2139): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpid() perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x301, 0x800000, 0x25dddbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2) 217.007946ms ago: executing program 4 (id=2149): perf_event_open(&(0x7f0000000500)={0x2, 0xd7, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x4, 0x43a1bd56, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64) getpgid(0x0) gettid() syz_read_part_table(0x59c, &(0x7f0000000000)="$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") 157.345998ms ago: executing program 5 (id=2140): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000000040), 0x0, 0x20000000}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x4, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 130.785218ms ago: executing program 2 (id=2141): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x2, 0x0, 0x3, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0xff8, 0x0, @multicast2}, 0x23, 0x0, 0x0, 0x0, 0x0, 0xf00}}], 0x3284b164842c97f7, 0x8014) 123.627528ms ago: executing program 5 (id=2142): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}]) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 95.627878ms ago: executing program 0 (id=2143): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x700, 0x12) 603.84µs ago: executing program 4 (id=2144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x85}, 0x9}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfff57a000000ad6e911b51818462", 0x26}, {&(0x7f0000000140)="10ef371344587793f83c", 0xa}], 0x2}, 0x0) 0s ago: executing program 0 (id=2145): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 68.276551][ T5499] veth0: entered promiscuous mode [ 68.288680][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 68.301943][ T3295] loop4: lost filesystem error report for type 5 error -117 [ 68.302034][ T3295] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 68.321447][ T3295] loop4: lost filesystem error report for type 5 error -117 [ 68.321579][ T3295] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 68.327965][ T5497] Set syz1 is full, maxelem 6117 reached [ 68.340158][ T3295] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 68.519590][ T5517] tap0: tun_chr_ioctl cmd 2147767507 [ 68.549269][ T5516] loop1: detected capacity change from 0 to 512 [ 68.568210][ T5516] EXT4-fs (loop1): 1 truncate cleaned up [ 68.574951][ T5516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.671037][ T30] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 68.856191][ T5546] netlink: 'syz.0.779': attribute type 3 has an invalid length. [ 68.872621][ T5546] netlink: 'syz.0.779': attribute type 4 has an invalid length. [ 68.887133][ T4304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.888234][ T4508] Bluetooth: hci0: command 0x1003 tx timeout [ 68.897301][ T5546] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.779'. [ 68.947453][ T5548] : renamed from bond0 (while UP) [ 69.385714][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.396342][ T5569] loop5: detected capacity change from 0 to 32768 [ 69.445940][ T5569] loop5: p1 p3 < > [ 69.526879][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.543894][ T3411] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.655840][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 69.657891][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 69.845390][ T5588] : renamed from bond0 [ 69.947081][ T5601] loop4: detected capacity change from 0 to 512 [ 69.981852][ T5601] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.800: iget: bad i_size value: 38620345925642 [ 70.024575][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 70.067007][ T5601] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.067253][ T5601] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.800: couldn't read orphan inode 15 (err -117) [ 70.076437][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 70.076461][ C1] EXT4-fs (loop4): initial error at time 1782489381: ext4_orphan_get:1399: inode 15 [ 70.076502][ C1] EXT4-fs (loop4): last error at time 1782489381: ext4_orphan_get:1399: inode 15 [ 70.139935][ T5606] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 70.155759][ T5601] loop4: lost filesystem error report for type 5 error -117 [ 70.156320][ T5601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.176829][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 70.200477][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 70.200495][ T28] audit: type=1400 audit(1782489381.546:1155): avc: denied { write } for pid=5598 comm="syz.4.800" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.258921][ T5606] gretap0: entered promiscuous mode [ 70.293481][ T5601] EXT4-fs (loop4): shut down requested (1) [ 70.313289][ T28] audit: type=1400 audit(1782489381.666:1156): avc: denied { read } for pid=2961 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 70.360187][ T28] audit: type=1400 audit(1782489381.666:1157): avc: denied { search } for pid=2961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.360356][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.416531][ T28] audit: type=1400 audit(1782489381.666:1158): avc: denied { write search } for pid=2961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.466514][ T28] audit: type=1400 audit(1782489381.666:1159): avc: denied { add_name } for pid=2961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.489049][ T5618] loop4: detected capacity change from 0 to 256 [ 70.510255][ T5618] msdos: Bad value for 'time_offset' [ 70.518760][ T28] audit: type=1400 audit(1782489381.666:1160): avc: denied { create } for pid=2961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.561009][ T28] audit: type=1400 audit(1782489381.666:1161): avc: denied { append open } for pid=2961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.608493][ T28] audit: type=1400 audit(1782489381.666:1162): avc: denied { getattr } for pid=2961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.680574][ T28] audit: type=1400 audit(1782489381.986:1163): avc: denied { mount } for pid=5621 comm="syz.1.809" name="/" dev="hugetlbfs" ino=11844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 70.845165][ T5632] loop0: detected capacity change from 0 to 512 [ 70.851830][ T5632] EXT4-fs: inline encryption not supported [ 70.869927][ T5632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.893021][ T5632] EXT4-fs (loop0): 1 truncate cleaned up [ 70.930820][ T5632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.004582][ T28] audit: type=1400 audit(1782489382.356:1164): avc: denied { write } for pid=5631 comm="syz.0.813" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.066240][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.130425][ T5651] ip_vti0: entered promiscuous mode [ 71.161624][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 71.227376][ T5662] syz_tun: entered allmulticast mode [ 71.262870][ T5662] dvmrp8: entered allmulticast mode [ 71.294747][ T5661] syz_tun: left allmulticast mode [ 71.568737][ T5685] loop4: detected capacity change from 0 to 1024 [ 71.598555][ T5685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 71.618083][ T5685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.661321][ T5685] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.699842][ T5691] netlink: 'syz.0.838': attribute type 12 has an invalid length. [ 71.713344][ T5685] EXT4-fs (loop4): shut down requested (0) [ 72.499176][ T5714] loop5: detected capacity change from 0 to 512 [ 72.507222][ T5714] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.846: corrupted in-inode xattr: invalid ea_ino [ 72.520993][ T5714] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.521180][ T5714] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.846: couldn't read orphan inode 15 (err -117) [ 72.530349][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 72.530392][ C0] EXT4-fs (loop5): initial error at time 1782489383: ext4_iget_extra_inode:5180: inode 15 [ 72.530426][ C0] EXT4-fs (loop5): last error at time 1782489383: ext4_iget_extra_inode:5180: inode 15 [ 72.568945][ T5714] loop5: lost filesystem error report for type 5 error -117 [ 72.569508][ T5714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.660529][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.772981][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.774821][ T5725] netlink: 'syz.0.852': attribute type 15 has an invalid length. [ 72.844617][ T5731] loop5: detected capacity change from 0 to 256 [ 72.853347][ T5731] msdos: Bad value for 'time_offset' [ 72.974028][ T5739] loop0: detected capacity change from 0 to 128 [ 72.981914][ T5739] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.996240][ T5739] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.047846][ T49] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.335513][ T5746] loop4: detected capacity change from 0 to 32768 [ 73.501398][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 73.510390][ T5748] netlink: 'syz.2.862': attribute type 5 has an invalid length. [ 73.518316][ T5748] netlink: 48 bytes leftover after parsing attributes in process `syz.2.862'. [ 73.529705][ T5748] geneve2: entered promiscuous mode [ 73.536375][ T5748] geneve2: entered allmulticast mode [ 73.542232][ T5746] loop4: p1 p3 < > [ 73.655708][ T5756] loop2: detected capacity change from 0 to 256 [ 73.683371][ T5756] msdos: Bad value for 'time_offset' [ 73.717721][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 73.718896][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 73.784591][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 73.860104][ T5779] loop2: detected capacity change from 0 to 128 [ 73.939641][ T5783] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 74.076825][ T5794] loop2: detected capacity change from 0 to 512 [ 74.083924][ T5794] EXT4-fs: Ignoring removed oldalloc option [ 74.091104][ T5794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.102460][ T5794] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.882: invalid indirect mapped block 83886080 (level 1) [ 74.116237][ T5794] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.116428][ T5794] EXT4-fs (loop2): Remounting filesystem read-only [ 74.125574][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 74.125594][ C1] EXT4-fs (loop2): initial error at time 1782489385: ext4_free_branches:1023: inode 16 [ 74.125633][ C1] EXT4-fs (loop2): last error at time 1782489385: ext4_free_branches:1023: inode 16 [ 74.136667][ T5655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.138726][ T5794] EXT4-fs (loop2): 1 orphan inode deleted [ 74.172137][ T5794] EXT4-fs (loop2): 1 truncate cleaned up [ 74.178531][ T5794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.194813][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.306064][ T5794] loop2: detected capacity change from 0 to 4096 [ 74.315023][ T5807] loop1: detected capacity change from 0 to 512 [ 74.326139][ T5794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.354150][ T5794] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 74.368815][ T5794] System zones: 0-5 [ 74.410548][ T5810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.888'. [ 74.426468][ T5794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.601080][ T5818] loop5: detected capacity change from 0 to 512 [ 74.644397][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.694808][ T5818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.765958][ T5825] EXT4-fs: Ignoring removed i_version option [ 74.774692][ T5818] ext4 filesystem being mounted at /113/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.811474][ T5825] EXT4-fs: Ignoring removed bh option [ 74.847345][ T5825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.848081][ T5830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.895'. [ 74.875867][ T5825] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.890170][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.897458][ T5832] vlan2: entered promiscuous mode [ 74.922346][ T5832] bridge0: entered promiscuous mode [ 74.935829][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.949730][ T5830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.895'. [ 74.992116][ T5836] ip_vti0: entered promiscuous mode [ 75.003499][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 75.178751][ T5857] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.198701][ T5857] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.907: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.230095][ T5857] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.230232][ T5857] __quota_error: 15 callbacks suppressed [ 75.230284][ T5857] Quota error (device loop4): write_blk: dquota write failed [ 75.239368][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 75.239401][ C0] EXT4-fs (loop4): initial error at time 1782489386: ext4_map_blocks:833: inode 3: block 1 [ 75.239436][ C0] EXT4-fs (loop4): last error at time 1782489386: ext4_map_blocks:833: inode 3: block 1 [ 75.356237][ T5857] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 75.389210][ T5857] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.907: Failed to acquire dquot type 0 [ 75.411994][ T5857] loop4: lost filesystem error report for type 5 error -117 [ 75.414882][ T5857] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.907: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.442353][ T5857] loop4: lost filesystem error report for type 5 error -117 [ 75.442542][ T5857] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.907: Invalid inode bitmap blk 0 in block_group 0 [ 75.462835][ T49] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.480303][ T5857] loop4: lost filesystem error report for type 5 error -117 [ 75.480462][ T49] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.488093][ T5857] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 75.503073][ T49] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 75.505848][ T5857] loop4: lost filesystem error report for type 5 error -117 [ 75.514578][ T49] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 75.540100][ T5857] EXT4-fs (loop4): 1 orphan inode deleted [ 75.551007][ T5857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.573674][ T49] loop4: lost filesystem error report for type 5 error -117 [ 75.609100][ T5857] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 75.643139][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.792846][ T5893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.814861][ T5893] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.829994][ T28] audit: type=1400 audit(1782489387.166:1180): avc: denied { write } for pid=5892 comm="syz.4.922" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.908707][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.931495][ T28] audit: type=1400 audit(1782489387.276:1181): avc: denied { listen } for pid=5898 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.993197][ T5905] syzkaller1: entered promiscuous mode [ 75.998818][ T5905] syzkaller1: entered allmulticast mode [ 76.103890][ T28] audit: type=1400 audit(1782489387.456:1182): avc: denied { read } for pid=5907 comm="syz.1.928" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.407297][ T5917] netlink: 6392 bytes leftover after parsing attributes in process `syz.2.932'. [ 76.416551][ T5917] netlink: 6392 bytes leftover after parsing attributes in process `syz.2.932'. [ 76.616755][ T5926] netlink: 'syz.5.935': attribute type 14 has an invalid length. [ 76.624727][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.935'. [ 76.639371][ T5926] netlink: 'syz.5.935': attribute type 14 has an invalid length. [ 76.648193][ T49] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.657168][ T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.669126][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.935'. [ 76.679634][ T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.690801][ T49] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.850538][ T28] audit: type=1326 audit(1782489388.196:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.0.941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dd0eace59 code=0x0 [ 77.605769][ T5953] set_capacity_and_notify: 4 callbacks suppressed [ 77.605794][ T5953] loop5: detected capacity change from 0 to 512 [ 77.627729][ T5953] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.947: iget: bad i_size value: 38620345925642 [ 77.645397][ T5953] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.646940][ T5953] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.947: couldn't read orphan inode 15 (err -117) [ 77.656228][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 77.656249][ C0] EXT4-fs (loop5): initial error at time 1782489388: ext4_orphan_get:1399: inode 15 [ 77.656279][ C0] EXT4-fs (loop5): last error at time 1782489388: ext4_orphan_get:1399: inode 15 [ 77.693258][ T5953] loop5: lost filesystem error report for type 5 error -117 [ 77.700506][ T5953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.724080][ T28] audit: type=1400 audit(1782489389.076:1184): avc: denied { write } for pid=5952 comm="syz.5.947" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.805972][ T5957] EXT4-fs (loop5): shut down requested (1) [ 77.901005][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.133420][ T28] audit: type=1400 audit(1782489389.486:1185): avc: denied { name_connect } for pid=5969 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 78.609099][ T28] audit: type=1400 audit(1782489389.956:1186): avc: denied { write } for pid=6024 comm="syz.2.958" path="socket:[13392]" dev="sockfs" ino=13392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.781824][ T6039] loop4: detected capacity change from 0 to 512 [ 78.796995][ T6039] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.959: corrupted in-inode xattr: invalid ea_ino [ 78.843386][ T6039] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.845031][ T6039] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.959: couldn't read orphan inode 15 (err -117) [ 78.854369][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 78.854407][ C0] EXT4-fs (loop4): initial error at time 1782489390: ext4_iget_extra_inode:5180: inode 15 [ 78.854442][ C0] EXT4-fs (loop4): last error at time 1782489390: ext4_iget_extra_inode:5180: inode 15 [ 78.943203][ T6039] loop4: lost filesystem error report for type 5 error -117 [ 78.957215][ T6039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.349953][ T6083] bridge1: entered promiscuous mode [ 79.355271][ T6083] bridge1: entered allmulticast mode [ 79.413034][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.470915][ T6092] netlink: 'syz.0.964': attribute type 6 has an invalid length. [ 79.632551][ T6110] loop0: detected capacity change from 0 to 512 [ 79.646273][ T6110] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.973: corrupted in-inode xattr: invalid ea_ino [ 79.664994][ T6110] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.665149][ T6110] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.973: couldn't read orphan inode 15 (err -117) [ 79.674402][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 79.674422][ C0] EXT4-fs (loop0): initial error at time 1782489391: ext4_iget_extra_inode:5180: inode 15 [ 79.674456][ C0] EXT4-fs (loop0): last error at time 1782489391: ext4_iget_extra_inode:5180: inode 15 [ 79.712856][ T6110] loop0: lost filesystem error report for type 5 error -117 [ 79.714508][ T6110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.963054][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.718137][ T6169] netlink: 4136 bytes leftover after parsing attributes in process `syz.4.993'. [ 80.886969][ T6178] netlink: 'syz.4.997': attribute type 4 has an invalid length. [ 81.251977][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 81.251991][ T28] audit: type=1400 audit(1782489392.596:1196): avc: denied { read write } for pid=6198 comm="syz.2.1006" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.286517][ T28] audit: type=1400 audit(1782489392.596:1197): avc: denied { open } for pid=6198 comm="syz.2.1006" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.337616][ T6201] 9pnet: p9_errstr2errno: server reported unknown error ½p [ 81.346603][ T6207] loop2: detected capacity change from 0 to 512 [ 81.361178][ T6207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.418665][ T6207] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1010: iget: bad i_size value: 38620345925642 [ 81.465149][ T6207] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.465319][ T6207] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1010: couldn't read orphan inode 15 (err -117) [ 81.474512][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 81.474533][ C0] EXT4-fs (loop2): initial error at time 1782489392: ext4_orphan_get:1399: inode 15 [ 81.474578][ C0] EXT4-fs (loop2): last error at time 1782489392: ext4_orphan_get:1399: inode 15 [ 81.522921][ T6207] loop2: lost filesystem error report for type 5 error -117 [ 81.524365][ T6207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.533210][ T6217] loop5: detected capacity change from 0 to 1024 [ 81.549519][ T6207] EXT4-fs error (device loop2): ext4_check_dx_root:2201: inode #2: comm syz.2.1010: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 81.553701][ T28] audit: type=1400 audit(1782489392.896:1198): avc: denied { write } for pid=6204 comm="syz.2.1010" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.621869][ T28] audit: type=1400 audit(1782489392.896:1199): avc: denied { write } for pid=6204 comm="syz.2.1010" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.646393][ T28] audit: type=1400 audit(1782489392.896:1200): avc: denied { write } for pid=6204 comm="syz.2.1010" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.668896][ T28] audit: type=1400 audit(1782489392.896:1201): avc: denied { write } for pid=6204 comm="syz.2.1010" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.691815][ T6217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.704038][ T28] audit: type=1400 audit(1782489392.896:1202): avc: denied { write } for pid=6204 comm="syz.2.1010" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.719602][ T6217] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.726674][ T28] audit: type=1400 audit(1782489392.896:1203): avc: denied { rename } for pid=6204 comm="syz.2.1010" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.779461][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.788841][ T28] audit: type=1400 audit(1782489393.146:1204): avc: denied { write } for pid=6216 comm="syz.5.1013" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.830737][ T6217] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.1013: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.858720][ T6232] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1016'. [ 81.872604][ T6217] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 81.891744][ T6217] EXT4-fs (loop5): This should not happen!! Data will be lost [ 81.891744][ T6217] [ 81.919277][ T28] audit: type=1400 audit(1782489393.266:1205): avc: denied { getopt } for pid=6235 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.928360][ T6237] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.1013: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.982641][ T6237] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.1013: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.005800][ T6237] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.1013: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.062937][ T6237] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.1013: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.205435][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.207074][ T6272] loop2: detected capacity change from 0 to 128 [ 82.237850][ T6272] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.272321][ T6275] loop5: detected capacity change from 0 to 1024 [ 82.279543][ T6272] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.279587][ T6275] EXT4-fs: inline encryption not supported [ 82.329501][ T6275] EXT4-fs: Ignoring removed bh option [ 82.361017][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.361638][ T6275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.448268][ T6292] loop1: detected capacity change from 0 to 512 [ 82.458362][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.479844][ T6292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.498829][ T6292] EXT4-fs (loop1): 1 truncate cleaned up [ 82.506118][ T6292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.548105][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.596685][ T6307] loop1: detected capacity change from 0 to 1024 [ 82.614822][ T6307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 82.673776][ T6307] loop1: detected capacity change from 1024 to 64 [ 82.688124][ T6315] syzkaller0: entered promiscuous mode [ 82.693689][ T6315] syzkaller0: entered allmulticast mode [ 82.919848][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 82.929647][ T6309] kmmpd-loop1: attempt to access beyond end of device [ 82.929647][ T6309] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 82.943784][ T6309] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 83.185972][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.193251][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.200517][ T6320] bridge_slave_0: entered allmulticast mode [ 83.207148][ T6320] bridge_slave_0: entered promiscuous mode [ 83.214080][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.221280][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.236732][ T6320] bridge_slave_1: entered allmulticast mode [ 83.243485][ T6320] bridge_slave_1: entered promiscuous mode [ 83.264430][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.276756][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.301710][ T6320] team0: Port device team_slave_0 added [ 83.308707][ T6320] team0: Port device team_slave_1 added [ 83.325006][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.334761][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.393363][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.405608][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.421909][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.455481][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.485533][ T6344] loop2: detected capacity change from 0 to 8192 [ 83.493150][ T6320] hsr_slave_0: entered promiscuous mode [ 83.503448][ T6320] hsr_slave_1: entered promiscuous mode [ 83.509926][ T6320] debugfs: 'hsr0' already exists in 'hsr' [ 83.520335][ T6320] Cannot create hsr debugfs directory [ 83.527352][ T6068] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.536416][ T6344] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.644551][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1064'. [ 83.656624][ T6320] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.670423][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.679582][ T6320] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 83.698073][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.709731][ T6320] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 83.720253][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.731246][ T6320] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 83.747225][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.815038][ T6320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.833563][ T6320] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.847473][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.854624][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.872773][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.879878][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.918689][ T6365] loop5: detected capacity change from 0 to 512 [ 83.944781][ T6366] loop2: detected capacity change from 0 to 512 [ 83.952756][ T6365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.969127][ T6366] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1067: corrupted in-inode xattr: invalid ea_ino [ 83.990782][ T6366] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.990940][ T6366] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1067: couldn't read orphan inode 15 (err -117) [ 84.000153][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 84.000175][ C1] EXT4-fs (loop2): initial error at time 1782489395: ext4_iget_extra_inode:5180: inode 15 [ 84.000220][ C1] EXT4-fs (loop2): last error at time 1782489395: ext4_iget_extra_inode:5180: inode 15 [ 84.038461][ T6366] loop2: lost filesystem error report for type 5 error -117 [ 84.039011][ T6366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.040331][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.069075][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.090939][ T6382] netlink: 'syz.5.1069': attribute type 21 has an invalid length. [ 84.107141][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1069'. [ 84.116798][ T6382] netlink: 'syz.5.1069': attribute type 21 has an invalid length. [ 84.125132][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1069'. [ 84.219554][ T6320] veth0_vlan: entered promiscuous mode [ 84.231166][ T6320] veth1_vlan: entered promiscuous mode [ 84.254185][ T6320] veth0_macvtap: entered promiscuous mode [ 84.261948][ T6320] veth1_macvtap: entered promiscuous mode [ 84.270624][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.276269][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.295090][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.297296][ T6402] ALSA: seq fatal error: cannot create timer (-22) [ 84.321529][ T6068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.330705][ T6068] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.341017][ T6068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.351342][ T6068] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.469680][ T3389] IPVS: starting estimator thread 0... [ 84.492402][ T6418] syzkaller1: entered promiscuous mode [ 84.498096][ T6418] syzkaller1: entered allmulticast mode [ 84.572399][ T6417] IPVS: using max 2400 ests per chain, 120000 per kthread [ 85.118387][ T6438] loop4: detected capacity change from 0 to 1024 [ 85.127205][ T6438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.145749][ T6438] EXT4-fs (loop4): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 85.163958][ T6438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.176568][ T6438] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.191850][ T6438] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1085: bg 0: block 112: padding at end of block bitmap is not set [ 85.206970][ T6438] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 85.219479][ T6438] EXT4-fs (loop4): This should not happen!! Data will be lost [ 85.219479][ T6438] [ 85.238281][ T3295] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 85.250216][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.347608][ T6456] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1091'. [ 85.602284][ T4304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.602364][ T4508] Bluetooth: hci0: command 0x1003 tx timeout [ 85.882803][ T6477] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 85.992484][ T6486] loop0: detected capacity change from 0 to 8192 [ 86.005740][ T6486] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.095796][ T6493] pimreg: entered allmulticast mode [ 86.103119][ T6493] syz_tun: entered allmulticast mode [ 86.108674][ T6493] syz_tun: left allmulticast mode [ 86.114143][ T6492] pimreg: left allmulticast mode [ 86.466894][ T6525] loop6: detected capacity change from 0 to 512 [ 86.485714][ T6525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.498785][ T6525] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.521939][ T6320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.438984][ T6542] netlink: 'syz.6.1127': attribute type 10 has an invalid length. [ 87.447097][ T6542] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.1127'. [ 87.478735][ T6544] loop6: detected capacity change from 0 to 512 [ 87.562977][ T6430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.680113][ T6548] bond0: entered promiscuous mode [ 87.689244][ T6548] bond_slave_0: entered promiscuous mode [ 87.697747][ T6548] bond_slave_1: entered promiscuous mode [ 87.725183][ T6548] batadv0: entered promiscuous mode [ 87.736049][ T6548] debugfs: 'hsr1' already exists in 'hsr' [ 87.742387][ T6548] Cannot create hsr debugfs directory [ 87.751023][ T6548] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 87.932921][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1137'. [ 87.981607][ T6566] team1: entered promiscuous mode [ 87.991013][ T6566] team1: entered allmulticast mode [ 88.000869][ T6566] 8021q: adding VLAN 0 to HW filter on device team1 [ 88.141240][ T6578] netlink: 'syz.6.1143': attribute type 2 has an invalid length. [ 88.191225][ T6585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6585 comm=syz.0.1146 [ 88.261427][ T6594] netlink: 'syz.6.1152': attribute type 11 has an invalid length. [ 88.273076][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1152'. [ 88.287060][ T6594] netlink: 'syz.6.1152': attribute type 11 has an invalid length. [ 88.294986][ T6073] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.304231][ T6073] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.312946][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1152'. [ 88.323811][ T6068] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.333066][ T6068] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.395402][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1156'. [ 88.700377][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1160'. [ 88.716882][ T6621] 9pnet_fd: p9_fd_create_tcp (6621): problem binding to privport [ 88.841024][ T6627] loop6: detected capacity change from 0 to 8192 [ 88.909423][ T6073] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.933359][ T6627] loop6: p1 p3 p4 [ 88.943736][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 88.943750][ T28] audit: type=1400 audit(1782489400.296:1224): avc: denied { getopt } for pid=6649 comm="syz.2.1176" lport=45844 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.953339][ T6627] loop6: p1 start 393225 is beyond EOD, truncated [ 88.991556][ T6627] loop6: p3 start 16777216 is beyond EOD, [ 88.991577][ T6654] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 88.991631][ T6627] truncated [ 89.003391][ T6654] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.1178'. [ 89.005747][ T6627] loop6: p4 start 4294967295 is beyond EOD, truncated [ 89.054568][ T2979] loop6: p1 p3 p4 [ 89.058413][ T2979] loop6: p1 start 393225 is beyond EOD, truncated [ 89.065202][ T2979] loop6: p3 start 16777216 is beyond EOD, truncated [ 89.071867][ T2979] loop6: p4 start 4294967295 is beyond EOD, truncated [ 89.323267][ T6687] loop0: detected capacity change from 0 to 1024 [ 89.346949][ T6687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.370025][ T28] audit: type=1400 audit(1782489400.716:1225): avc: denied { write } for pid=6686 comm="syz.0.1193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.394821][ T28] audit: type=1400 audit(1782489400.746:1226): avc: denied { ioctl } for pid=6686 comm="syz.0.1193" path="/242/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.419513][ T28] audit: type=1400 audit(1782489400.746:1227): avc: denied { write } for pid=6686 comm="syz.0.1193" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.467380][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.150954][ T6740] loop6: detected capacity change from 0 to 8192 [ 90.203484][ T6740] loop6: p1 p2 p3 [ 90.207610][ T6740] loop6: p1 start 51379968 is beyond EOD, truncated [ 90.215479][ T6740] loop6: p3 size 100663552 extends beyond EOD, truncated [ 90.229597][ T28] audit: type=1400 audit(1782489401.576:1228): avc: denied { read write } for pid=6739 comm="syz.6.1215" name="loop6p3" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.254453][ T28] audit: type=1400 audit(1782489401.576:1229): avc: denied { open } for pid=6739 comm="syz.6.1215" path="/dev/loop6p3" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.330736][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 90.342241][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 90.750258][ T28] audit: type=1400 audit(1782489402.096:1230): avc: denied { read } for pid=6758 comm="syz.0.1224" lport=53390 faddr=::ffff:10.1.1.1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.954921][ T6761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.963796][ T4508] Bluetooth: hci0: command 0x1003 tx timeout [ 90.970737][ T4304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.021796][ T6771] loop4: detected capacity change from 0 to 256 [ 91.098066][ T6779] netlink: 'syz.5.1231': attribute type 4 has an invalid length. [ 91.118741][ T6779] netlink: 'syz.5.1231': attribute type 4 has an invalid length. [ 91.294909][ T6788] loop4: detected capacity change from 0 to 512 [ 91.308582][ T6787] loop5: detected capacity change from 0 to 4096 [ 91.323089][ T6788] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 91.336933][ T6788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.337184][ T6787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.351388][ T6788] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.383188][ T28] audit: type=1400 audit(1782489402.726:1231): avc: denied { ioctl } for pid=6789 comm="syz.0.1236" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.451804][ T28] audit: type=1400 audit(1782489402.796:1232): avc: denied { write } for pid=6786 comm="syz.5.1235" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.453081][ T6800] IPv4: Oversized IP packet from 127.202.26.0 [ 91.519146][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.534701][ T28] audit: type=1400 audit(1782489402.836:1233): avc: denied { write } for pid=6785 comm="syz.4.1234" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.578664][ T3397] IPVS: starting estimator thread 0... [ 91.585608][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.595114][ T6807] IPVS: rr: FWM 3 0x00000003 - no destination available [ 91.621985][ T6809] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.646082][ T6809] bond1: (slave lo): Enslaving as an active interface with an up link [ 91.664678][ T6809] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 91.683568][ T6811] IPVS: using max 2400 ests per chain, 120000 per kthread [ 91.712055][ T6821] loop5: detected capacity change from 0 to 1024 [ 91.750618][ T6821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.872619][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.968785][ T6848] loop4: detected capacity change from 0 to 128 [ 91.998138][ T6854] xt_hashlimit: size too large, truncated to 1048576 [ 92.516880][ T6896] batman_adv: batadv0: Adding interface: macsec0 [ 92.523376][ T6896] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.554461][ T6896] batman_adv: batadv0: Interface activated: macsec0 [ 92.572047][ T6899] loop4: detected capacity change from 0 to 512 [ 92.580798][ T6899] EXT4-fs: Ignoring removed bh option [ 92.605213][ T6899] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 92.617533][ T6899] EXT4-fs (loop4): 1 truncate cleaned up [ 92.625139][ T6899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.001182][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.131927][ T6919] loop5: detected capacity change from 0 to 512 [ 93.142160][ T6919] EXT4-fs: Ignoring removed nobh option [ 93.158304][ T6919] EXT4-fs (loop5): orphan cleanup on readonly fs [ 93.174953][ T6919] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #11: block 1: comm syz.5.1287: lblock 0 mapped to illegal pblock 1 (length 1) [ 93.190003][ T6919] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 93.190405][ T6919] EXT4-fs (loop5): Remounting filesystem read-only [ 93.199602][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 93.199620][ C0] EXT4-fs (loop5): initial error at time 1782489404: ext4_map_blocks:791: inode 11: block 1 [ 93.199674][ C0] EXT4-fs (loop5): last error at time 1782489404: ext4_map_blocks:791: inode 11: block 1 [ 93.258395][ T6919] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.283069][ T6919] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 93.299960][ T6919] EXT4-fs (loop5): 1 orphan inode deleted [ 93.306528][ T6919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 93.373699][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.493155][ T6930] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.505716][ T6930] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.533127][ T4242] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.781495][ T6951] netlink: 'syz.5.1301': attribute type 9 has an invalid length. [ 93.794128][ T6951] netlink: 371 bytes leftover after parsing attributes in process `syz.5.1301'. [ 93.822844][ T6954] EXT4-fs: Ignoring removed orlov option [ 93.833619][ T6954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.062895][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 94.062910][ T28] audit: type=1400 audit(1782489405.416:1250): avc: denied { create } for pid=6966 comm="syz.2.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 94.096976][ T28] audit: type=1400 audit(1782489405.446:1251): avc: denied { open } for pid=6968 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.116724][ T28] audit: type=1400 audit(1782489405.446:1252): avc: denied { kernel } for pid=6968 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.151830][ T28] audit: type=1400 audit(1782489405.496:1253): avc: denied { write } for pid=6968 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.850744][ T6987] set_capacity_and_notify: 2 callbacks suppressed [ 94.850759][ T6987] loop5: detected capacity change from 0 to 128 [ 95.234820][ T7012] dvmrp8: left allmulticast mode [ 95.434511][ T7037] all: renamed from lo [ 95.454902][ T6888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.485594][ T28] audit: type=1400 audit(1782489406.836:1254): avc: denied { tracepoint } for pid=7040 comm="syz.4.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 95.661217][ T7056] xt_hashlimit: size too large, truncated to 1048576 [ 95.745339][ T7065] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1347'. [ 95.779642][ T7067] loop5: detected capacity change from 0 to 128 [ 96.004439][ T7073] loop0: detected capacity change from 0 to 4096 [ 96.027443][ T28] audit: type=1400 audit(1782489407.376:1255): avc: denied { write } for pid=7072 comm="syz.0.1350" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.064218][ T28] audit: type=1400 audit(1782489407.406:1256): avc: denied { write } for pid=7072 comm="syz.0.1350" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.665003][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.699414][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.734491][ T7089] loop4: detected capacity change from 0 to 2048 [ 96.763022][ T7089] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 96.814186][ T6064] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.433944][ T7117] netlink: 'syz.4.1369': attribute type 2 has an invalid length. [ 97.446237][ T7117] netlink: 'syz.4.1369': attribute type 2 has an invalid length. [ 97.460423][ T7117] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1369'. [ 97.478349][ T7121] loop0: detected capacity change from 0 to 1024 [ 97.490684][ T7121] EXT4-fs: inline encryption not supported [ 97.528161][ T28] audit: type=1400 audit(1782489408.876:1257): avc: denied { write } for pid=7120 comm="syz.0.1370" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.574095][ T28] audit: type=1400 audit(1782489408.876:1258): avc: denied { create } for pid=7120 comm="syz.0.1370" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 97.652885][ T7127] loop0: detected capacity change from 0 to 1024 [ 97.663556][ T7129] loop4: detected capacity change from 0 to 128 [ 97.675715][ T7127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.684397][ T7127] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.703538][ T7127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 97.715685][ T7129] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.741758][ T7127] System zones: 0-1, 3-36 [ 97.777200][ T28] audit: type=1400 audit(1782489409.126:1259): avc: denied { write } for pid=7128 comm="syz.4.1374" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.265125][ T7164] loop0: detected capacity change from 0 to 512 [ 98.271784][ T7164] EXT4-fs: test_dummy_encryption option not supported [ 98.391604][ T7174] loop4: detected capacity change from 0 to 512 [ 98.422975][ T7174] EXT4-fs mount: 9 callbacks suppressed [ 98.422991][ T7174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.441586][ T7174] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.488036][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.863319][ T7198] loop0: detected capacity change from 0 to 512 [ 98.881792][ T7198] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1402: corrupted in-inode xattr: invalid ea_ino [ 98.896576][ T4508] Bluetooth: hci0: command 0x1003 tx timeout [ 98.902713][ T4304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.908336][ T3375] Process accounting resumed [ 98.977569][ T7198] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.978599][ T7198] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1402: couldn't read orphan inode 15 (err -117) [ 98.987780][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 98.987797][ C1] EXT4-fs (loop0): initial error at time 1782489410: ext4_iget_extra_inode:5180: inode 15 [ 98.987827][ C1] EXT4-fs (loop0): last error at time 1782489410: ext4_iget_extra_inode:5180: inode 15 [ 99.028554][ T7198] loop0: lost filesystem error report for type 5 error -117 [ 99.029098][ T7198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.887485][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.033356][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.040534][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.126724][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.139687][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.166270][ T7269] netlink: 'syz.4.1422': attribute type 16 has an invalid length. [ 100.178059][ T7269] netlink: 'syz.4.1422': attribute type 17 has an invalid length. [ 100.260967][ T7269] 8021q: adding VLAN 0 to HW filter on device  [ 100.269450][ T7269] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.281136][ T7269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.313644][ T7269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.322848][ T7269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.334844][ T7269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.345587][ T7269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.353964][ T7280] loop5: detected capacity change from 0 to 512 [ 100.359179][ T7269] veth1_vlan: left promiscuous mode [ 100.368312][ T7269] veth0_vlan: left promiscuous mode [ 100.373984][ T7280] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1428: iget: bad i_size value: 38620345925642 [ 100.375821][ T7269] veth0_vlan: entered promiscuous mode [ 100.386990][ T7280] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.392228][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 100.394041][ T7269] veth1_vlan: entered promiscuous mode [ 100.401414][ C1] EXT4-fs (loop5): initial error at time 1782489411: ext4_orphan_get:1399 [ 100.410417][ T7269] veth1_macvtap: left promiscuous mode [ 100.413274][ C1] : inode 15 [ 100.422554][ T7269] veth0_macvtap: left promiscuous mode [ 100.427214][ C1] [ 100.431167][ T7269] veth0_macvtap: entered promiscuous mode [ 100.435844][ C1] EXT4-fs (loop5): last error at time 1782489411: ext4_orphan_get:1399 [ 100.441706][ T7269] veth1_macvtap: entered promiscuous mode [ 100.443880][ C1] : inode 15 [ 100.456756][ T7269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.458161][ T7280] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1428: couldn't read orphan inode 15 (err -117) [ 100.463253][ T7269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.468076][ T7280] loop5: lost filesystem error report for type 5 error -117 [ 100.482784][ T7269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.487477][ T7280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.497025][ T7269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.523129][ T7269] geneve2: left promiscuous mode [ 100.523654][ T7279] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1428: bg 0: block 5: invalid block bitmap [ 100.528489][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 100.528501][ T28] audit: type=1400 audit(1782489411.876:1265): avc: denied { write } for pid=7279 comm="syz.5.1428" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.569860][ T6066] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.570423][ T7280] EXT4-fs (loop5): shut down requested (0) [ 100.578813][ T6066] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.593597][ T6066] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.602532][ T6066] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.620509][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.627687][ T6075] bridge0: port 1(bridge_slave_0) entered listening state [ 100.636565][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.643668][ T6075] bridge0: port 2(bridge_slave_1) entered listening state [ 100.658250][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.674835][ T6066] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.686672][ T6066] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.698700][ T6075] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.707900][ T6075] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.737087][ T6075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.760370][ T6075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.800078][ T6075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.830354][ T28] audit: type=1400 audit(1782489412.176:1266): avc: denied { bind } for pid=7295 comm="syz.6.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.862490][ T6075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.991178][ T28] audit: type=1326 audit(1782489412.336:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.1441" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44a9cfce59 code=0x0 [ 101.082514][ T28] audit: type=1400 audit(1782489412.426:1268): avc: denied { connect } for pid=7314 comm="syz.4.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.141036][ T28] audit: type=1400 audit(1782489412.436:1269): avc: denied { execute } for pid=7316 comm="syz.4.1444" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 101.230141][ T7324] loop5: detected capacity change from 0 to 1024 [ 101.245143][ T7324] EXT4-fs: Ignoring removed bh option [ 101.269916][ T7324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.283623][ T7324] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.299142][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.308779][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.317855][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.327029][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.336131][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.345203][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.354264][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.363329][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.372410][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.381469][ T7331] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.398962][ T7324] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 3) [ 101.413120][ T28] audit: type=1400 audit(1782489412.746:1270): avc: denied { write } for pid=7323 comm="syz.5.1445" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.435186][ T7324] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 101.458634][ T7324] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.458634][ T7324] [ 101.479565][ T7332] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.501450][ T7332] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.533693][ T7332] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.564397][ T7332] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.585999][ T7332] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.615176][ T7332] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.629645][ T7332] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.655200][ T7323] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.676396][ T7323] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 3: comm syz.5.1445: lblock 3 mapped to illegal pblock 3 (length 1) [ 101.697550][ T7262] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 101.711139][ T7262] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.882276][ T7346] netlink: 'syz.2.1454': attribute type 2 has an invalid length. [ 102.070410][ T7355] loop2: detected capacity change from 0 to 128 [ 102.095209][ T7355] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.145275][ T7355] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.165577][ T28] audit: type=1400 audit(1782489413.516:1271): avc: denied { write } for pid=7354 comm="syz.2.1457" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.201051][ T6064] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 102.233352][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.248473][ T6064] EXT4-fs (loop5): This should not happen!! Data will be lost [ 102.248473][ T6064] [ 102.262745][ T28] audit: type=1400 audit(1782489413.546:1272): avc: denied { write } for pid=7354 comm="syz.2.1457" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.296599][ T6064] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 102.308539][ T28] audit: type=1400 audit(1782489413.546:1273): avc: denied { write } for pid=7354 comm="syz.2.1457" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.330620][ T6064] EXT4-fs (loop5): This should not happen!! Data will be lost [ 102.330620][ T6064] [ 102.340574][ T7362] loop2: detected capacity change from 0 to 1024 [ 102.352671][ T4242] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 102.362456][ T28] audit: type=1400 audit(1782489413.546:1274): avc: denied { write } for pid=7354 comm="syz.2.1457" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.383085][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.410109][ T7362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.515116][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.733910][ T7371] loop0: detected capacity change from 0 to 8192 [ 102.803445][ T7371] loop0: p1 < > p2 p4 < p5 > [ 102.809801][ T7371] loop0: partition table partially beyond EOD, truncated [ 102.830056][ T7371] loop0: p1 start 4294901760 is beyond EOD, truncated [ 102.837477][ T7371] loop0: p2 size 983040 extends beyond EOD, truncated [ 102.854701][ T7371] loop0: p5 size 983040 extends beyond EOD, truncated [ 102.948784][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1467'. [ 103.042943][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 103.043758][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 103.053722][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 103.208115][ T6060] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.419829][ T7399] netlink: 'syz.6.1475': attribute type 6 has an invalid length. [ 103.511207][ T7403] loop6: detected capacity change from 0 to 8192 [ 103.554901][ T7403] loop6: p1 < > p2 p4 < p5 > [ 103.559684][ T7403] loop6: partition table partially beyond EOD, truncated [ 103.567011][ T7403] loop6: p1 start 4294901760 is beyond EOD, truncated [ 103.574101][ T7403] loop6: p2 size 983040 extends beyond EOD, truncated [ 103.582146][ T7403] loop6: p5 size 983040 extends beyond EOD, truncated [ 103.642383][ T7413] loop5: detected capacity change from 0 to 512 [ 103.658663][ T7413] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 103.674369][ T7413] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1481: bad orphan inode 15 [ 103.677920][ T3712] udevd[3712]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 103.686147][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 103.697026][ T7413] loop5: lost filesystem error report for type 5 error -117 [ 103.715183][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 103.732225][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 103.738736][ C0] EXT4-fs (loop5): initial error at time 1782489415: ext4_orphan_get:1425 [ 103.747290][ C0] EXT4-fs (loop5): last error at time 1782489415: ext4_orphan_get:1425 [ 103.757373][ T7413] ext4_test_bit(bit=14, block=18) = 1 [ 103.764018][ T7413] is_bad_inode(inode)=0 [ 103.768360][ T7413] NEXT_ORPHAN(inode)=1023 [ 103.779842][ T7413] max_ino=32 [ 103.783104][ T7413] i_nlink=0 [ 103.790820][ T7413] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1481: bg 0: block 161: padding at end of block bitmap is not set [ 103.812354][ T7413] loop5: lost filesystem error report for type 5 error -117 [ 103.812569][ T7413] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 103.834465][ T7413] loop5: lost filesystem error report for type 5 error -117 [ 103.835190][ T7413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.861273][ T7413] ext2 filesystem being mounted at /220/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 103.915128][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.930762][ T7419] loop2: detected capacity change from 0 to 512 [ 103.986911][ T7419] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1493: invalid indirect mapped block 256 (level 2) [ 104.024009][ T7419] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.024548][ T7419] EXT4-fs (loop2): 2 truncates cleaned up [ 104.033708][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 104.033728][ C1] EXT4-fs (loop2): initial error at time 1782489415: ext4_free_branches:1023: inode 11 [ 104.033756][ C1] EXT4-fs (loop2): last error at time 1782489415: ext4_free_branches:1023: inode 11 [ 104.142847][ T7419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.229971][ T7434] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1493: bg 0: block 5: invalid block bitmap [ 104.269266][ T7434] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 104.311290][ T7434] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.311290][ T7434] [ 104.353735][ T7434] EXT4-fs (loop2): Total free blocks count 0 [ 104.373734][ T7434] EXT4-fs (loop2): Free/Dirty block details [ 104.392395][ T7434] EXT4-fs (loop2): free_blocks=0 [ 104.397387][ T7434] EXT4-fs (loop2): dirty_blocks=1428 [ 104.412416][ T7434] EXT4-fs (loop2): Block reservation details [ 104.427876][ T7434] EXT4-fs (loop2): i_reserved_data_blocks=1428 [ 104.453195][ T7419] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1424 with error 28 [ 104.514418][ T3298] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 105.282751][ T4508] Bluetooth: hci0: command 0x1003 tx timeout [ 105.285927][ T4304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.325019][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1498'. [ 105.548984][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 105.549005][ T28] audit: type=1400 audit(1782489416.896:1288): avc: denied { ioctl } for pid=7473 comm="syz.2.1506" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.579829][ T7475] netlink: 'syz.6.1504': attribute type 16 has an invalid length. [ 105.645216][ T7475] netlink: 'syz.6.1504': attribute type 17 has an invalid length. [ 106.000657][ T7475] team1: left promiscuous mode [ 106.020491][ T7475] team1: left allmulticast mode [ 106.430465][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.437660][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.534344][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.556111][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.654890][ T7503] batman_adv: batadv0: Interface deactivated: macsec0 [ 106.693684][ T6064] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.702847][ T6064] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.736614][ T6064] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.761958][ T6064] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.784398][ T6064] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.804608][ T6064] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.830387][ T6064] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.872336][ T6064] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.914060][ T28] audit: type=1400 audit(1782489418.266:1289): avc: denied { connect } for pid=7521 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.966582][ T28] audit: type=1400 audit(1782489418.296:1290): avc: denied { ioctl } for pid=7517 comm="syz.0.1526" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.004963][ T7529] loop0: detected capacity change from 0 to 128 [ 107.050049][ T7529] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 107.080248][ T7529] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.102135][ T28] audit: type=1400 audit(1782489418.446:1291): avc: denied { write } for pid=7532 comm="syz.2.1531" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.300353][ T7547] loop2: detected capacity change from 0 to 512 [ 107.326828][ T7547] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.349559][ T7547] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.370049][ T7547] EXT4-fs (loop2): 1 truncate cleaned up [ 107.382103][ T7547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.406168][ T3294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.425447][ T28] audit: type=1400 audit(1782489418.776:1292): avc: denied { write } for pid=7546 comm="syz.2.1538" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.505987][ T7555] loop0: detected capacity change from 0 to 512 [ 107.536570][ T7555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.560931][ T7555] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.568516][ T7565] loop4: detected capacity change from 0 to 512 [ 107.578709][ T28] audit: type=1400 audit(1782489418.936:1293): avc: denied { write } for pid=7554 comm="syz.0.1535" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.602628][ T28] audit: type=1400 audit(1782489418.946:1294): avc: denied { write } for pid=7554 comm="syz.0.1535" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.646050][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.656223][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.656782][ T7565] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1544: invalid indirect mapped block 256 (level 2) [ 107.681538][ T7565] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 107.682232][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 107.697811][ C1] EXT4-fs (loop4): initial error at time 1782489419: ext4_free_branches:1023: inode 11 [ 107.697981][ T7565] EXT4-fs (loop4): 2 truncates cleaned up [ 107.707497][ C1] EXT4-fs (loop4): last error at time 1782489419: ext4_free_branches:1023: inode 11 [ 107.715891][ T7569] loop2: detected capacity change from 0 to 512 [ 107.727175][ T7565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.751664][ T7569] FAT-fs (loop2): data area starts beyond volume (68 > 0) [ 107.783880][ T28] audit: type=1400 audit(1782489419.136:1295): avc: denied { write } for pid=7564 comm="syz.4.1544" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.807125][ T7569] FAT-fs (loop2): Can't find a valid FAT filesystem [ 107.869454][ T7578] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1544: bg 0: block 5: invalid block bitmap [ 107.882649][ T3374] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.897743][ T3374] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.919966][ T28] audit: type=1400 audit(1782489419.266:1296): avc: denied { write } for pid=7564 comm="syz.4.1544" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.954089][ T28] audit: type=1400 audit(1782489419.266:1297): avc: denied { write } for pid=7564 comm="syz.4.1544" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.981943][ T7578] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 107.999432][ T7569] loop2: detected capacity change from 0 to 8192 [ 108.047348][ T7578] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.047348][ T7578] [ 108.072750][ T7578] EXT4-fs (loop4): Total free blocks count 0 [ 108.094804][ T7578] EXT4-fs (loop4): Free/Dirty block details [ 108.110358][ T7578] EXT4-fs (loop4): free_blocks=0 [ 108.121607][ T7578] EXT4-fs (loop4): dirty_blocks=1724 [ 108.127233][ T7578] EXT4-fs (loop4): Block reservation details [ 108.133652][ T7578] EXT4-fs (loop4): i_reserved_data_blocks=1724 [ 108.142268][ T7584] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1720 with error 28 [ 108.191510][ T3295] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 108.396608][ T7610] loop4: detected capacity change from 0 to 128 [ 108.423128][ T7610] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.440361][ T7610] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.524436][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.716847][ T7626] loop6: detected capacity change from 0 to 512 [ 108.750600][ T7626] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1569: casefold flag without casefold feature [ 108.806118][ T7626] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.806595][ T7626] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1569: couldn't read orphan inode 15 (err -117) [ 108.816054][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 108.816107][ C0] EXT4-fs (loop6): initial error at time 1782489420: ext4_orphan_get:1399: inode 15 [ 108.816214][ C0] EXT4-fs (loop6): last error at time 1782489420: ext4_orphan_get:1399: inode 15 [ 108.874759][ T7626] loop6: lost filesystem error report for type 5 error -117 [ 108.881891][ T7626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 108.930257][ T7626] ext4 filesystem being mounted at /118/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 108.987816][ T7626] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1569: bg 0: block 449: padding at end of block bitmap is not set [ 109.047408][ T6320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 109.083744][ T7638] loop0: detected capacity change from 0 to 256 [ 109.098190][ T7638] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.139357][ T7638] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 109.155541][ T7638] FAT-fs (loop0): Can't find a valid FAT filesystem [ 109.237611][ T7648] loop0: detected capacity change from 0 to 512 [ 109.275674][ T7648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.340951][ T7648] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.442653][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.556573][ T7665] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 109.596212][ T7665] EXT4-fs (loop5): 1 truncate cleaned up [ 109.619054][ T7665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.712002][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.916596][ T7683] netlink: 'syz.5.1589': attribute type 1 has an invalid length. [ 109.957937][ T7683] bond0: entered promiscuous mode [ 109.975539][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.037987][ T7685] bond0: (slave bridge1): making interface the new active one [ 110.060112][ T7685] bridge1: entered promiscuous mode [ 110.076594][ T7685] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 110.117658][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1591'. [ 110.126935][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1591'. [ 110.136115][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1591'. [ 110.214642][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1591'. [ 110.240842][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1591'. [ 110.270517][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1591'. [ 110.636572][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 110.636585][ T28] audit: type=1400 audit(1782489421.986:1323): avc: denied { tracepoint } for pid=7713 comm="syz.5.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.671522][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1603'. [ 110.685565][ T7712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.710063][ T28] audit: type=1400 audit(1782489422.016:1324): avc: denied { create } for pid=7713 comm="syz.5.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.730887][ T28] audit: type=1400 audit(1782489422.016:1325): avc: denied { mounton } for pid=7711 comm="syz.6.1602" path="/125/file1" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.753624][ T28] audit: type=1400 audit(1782489422.016:1326): avc: denied { write } for pid=7713 comm="syz.5.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.776566][ T28] audit: type=1400 audit(1782489422.106:1327): avc: denied { mount } for pid=7711 comm="syz.6.1602" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.799264][ T28] audit: type=1400 audit(1782489422.106:1328): avc: denied { write } for pid=7711 comm="syz.6.1602" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.822322][ T28] audit: type=1400 audit(1782489422.106:1329): avc: denied { add_name } for pid=7711 comm="syz.6.1602" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.843290][ T28] audit: type=1400 audit(1782489422.106:1330): avc: denied { create } for pid=7711 comm="syz.6.1602" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.875601][ T28] audit: type=1400 audit(1782489422.106:1331): avc: denied { read write } for pid=7711 comm="syz.6.1602" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.900320][ T6320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.921799][ T28] audit: type=1400 audit(1782489422.106:1332): avc: denied { open } for pid=7711 comm="syz.6.1602" path="/125/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.974952][ T7728] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 110.988580][ T7728] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 111.009178][ T7728] EXT4-fs (loop0): 1 truncate cleaned up [ 111.018356][ T7728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.051910][ T7728] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 4: comm syz.0.1609: path /319/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 111.162667][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.191696][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 111.209814][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 111.229562][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 111.242252][ T6060] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.252981][ T6060] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.262122][ T6060] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.271206][ T6060] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.305967][ T7742] erspan0: entered promiscuous mode [ 111.311717][ T7741] erspan0: left promiscuous mode [ 111.686842][ T7768] syzkaller1: entered promiscuous mode [ 111.692398][ T7768] syzkaller1: entered allmulticast mode [ 112.280779][ T7811] set_capacity_and_notify: 6 callbacks suppressed [ 112.280807][ T7811] loop4: detected capacity change from 0 to 1024 [ 112.327523][ T7811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.437940][ T7811] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.521994][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.687419][ T7835] loop4: detected capacity change from 0 to 512 [ 112.706548][ T7835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.728242][ T7835] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.761148][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.800971][ T7837] loop0: detected capacity change from 0 to 8192 [ 113.352445][ T7849] loop0: detected capacity change from 0 to 4096 [ 113.407691][ T7849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.468042][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.554304][ T7867] loop6: detected capacity change from 0 to 512 [ 113.564830][ T7867] EXT4-fs (loop6): 1 truncate cleaned up [ 113.576792][ T7867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.639311][ T6320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.687898][ T7863] loop2: detected capacity change from 0 to 32768 [ 114.297449][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.339739][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.497556][ T7964] tls_set_device_offload: netdev not found [ 115.860082][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 115.860097][ T28] audit: type=1400 audit(1782489427.206:1470): avc: denied { setopt } for pid=7974 comm="syz.6.1723" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.969989][ T7973] loop4: detected capacity change from 0 to 512 [ 116.006363][ T28] audit: type=1400 audit(1782489427.356:1471): avc: denied { attach_queue } for pid=7976 comm="syz.6.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 116.069021][ T7973] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1713: casefold flag without casefold feature [ 116.083186][ T7973] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.092232][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 116.107843][ C1] EXT4-fs (loop4): initial error at time 1782489427: ext4_orphan_get:1399: inode 15 [ 116.117262][ C1] EXT4-fs (loop4): last error at time 1782489427: ext4_orphan_get:1399: inode 15 [ 116.129424][ T7973] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1713: couldn't read orphan inode 15 (err -117) [ 116.141717][ T7973] loop4: lost filesystem error report for type 5 error -117 [ 116.145121][ T7973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 116.167320][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 116.167710][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 116.239841][ T7973] ext4 filesystem being mounted at /338/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 116.277417][ T28] audit: type=1400 audit(1782489427.626:1472): avc: denied { write } for pid=7972 comm="syz.4.1713" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.300960][ T7973] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1713: bg 0: block 449: padding at end of block bitmap is not set [ 116.347821][ T28] audit: type=1400 audit(1782489427.626:1473): avc: denied { create } for pid=7972 comm="syz.4.1713" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 116.418384][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 116.584935][ T7989] 9p: Bad value for 'rfdno' [ 116.614961][ T28] audit: type=1400 audit(1782489427.966:1474): avc: denied { mounton } for pid=7990 comm="syz.2.1719" path="/proc/763/task" dev="proc" ino=19584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 116.686294][ T28] audit: type=1400 audit(1782489427.966:1475): avc: denied { mount } for pid=7990 comm="syz.2.1719" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.746612][ T28] audit: type=1400 audit(1782489428.016:1476): avc: denied { create } for pid=7995 comm="syz.5.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.821626][ T28] audit: type=1400 audit(1782489428.016:1477): avc: denied { write } for pid=7995 comm="syz.5.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.886737][ T28] audit: type=1400 audit(1782489428.016:1478): avc: denied { nlmsg_write } for pid=7995 comm="syz.5.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.933831][ T28] audit: type=1400 audit(1782489428.016:1479): avc: denied { create } for pid=7995 comm="syz.5.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.809903][ T8123] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 117.841246][ T8123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.845403][ T8127] netlink: 'syz.6.1736': attribute type 2 has an invalid length. [ 118.317920][ T8155] __nla_validate_parse: 6 callbacks suppressed [ 118.318000][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 118.366565][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 119.079888][ T8187] loop0: detected capacity change from 0 to 256 [ 119.361753][ T3382] kernel read not supported for file /input/event2 (pid: 3382 comm: kworker/1:3) [ 119.431513][ T8199] loop0: detected capacity change from 0 to 512 [ 119.481511][ T8207] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 119.504735][ T8199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.532584][ T8199] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.549978][ T8212] loop4: detected capacity change from 0 to 512 [ 119.570647][ T8212] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.1773: missing EA_INODE flag [ 119.582268][ T8212] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 119.583889][ T8212] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1773: error while reading EA inode 12 err=-117 [ 119.593034][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 119.593057][ C0] EXT4-fs (loop4): initial error at time 1782489430: ext4_xattr_inode_iget:441: inode 12 [ 119.593082][ C0] EXT4-fs (loop4): last error at time 1782489430: ext4_xattr_inode_iget:441: inode 12 [ 119.631170][ T8212] loop4: lost filesystem error report for type 5 error -117 [ 119.638738][ T8212] EXT4-fs (loop4): 1 orphan inode deleted [ 119.652666][ T8212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.680006][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.757061][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.796653][ T8226] loop2: detected capacity change from 0 to 256 [ 120.645237][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1785'. [ 120.779937][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1792'. [ 120.864047][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 120.864063][ T28] audit: type=1400 audit(1782489432.216:1529): avc: denied { ioctl } for pid=8353 comm="syz.6.1793" path="socket:[19395]" dev="sockfs" ino=19395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.921329][ T8358] net_ratelimit: 3319 callbacks suppressed [ 120.921347][ T8358] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 120.996096][ T8361] syzkaller1: entered promiscuous mode [ 121.001706][ T8361] syzkaller1: entered allmulticast mode [ 121.010386][ T8361] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 121.115347][ T8367] loop0: detected capacity change from 0 to 512 [ 121.140838][ T8367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.145169][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.153834][ T8367] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.160605][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.196133][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.217683][ T28] audit: type=1400 audit(1782489432.566:1530): avc: denied { ioctl } for pid=8370 comm="syz.0.1800" path="socket:[19894]" dev="sockfs" ino=19894 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.267155][ T8364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.278478][ T8364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.287000][ T28] audit: type=1400 audit(1782489432.636:1531): avc: denied { ioctl } for pid=8372 comm="syz.0.1801" path="socket:[19901]" dev="sockfs" ino=19901 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.313905][ T28] audit: type=1400 audit(1782489432.666:1532): avc: denied { read } for pid=8372 comm="syz.0.1801" lport=59378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.384076][ T6071] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.393040][ T6071] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.402617][ T6071] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.411802][ T6071] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.422992][ T6071] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.431890][ T6071] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.441016][ T6071] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.450154][ T6071] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.488062][ T28] audit: type=1400 audit(1782489432.836:1533): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 121.750978][ T28] audit: type=1400 audit(1782489433.096:1534): avc: denied { mount } for pid=8399 comm="syz.2.1810" name="/" dev="ramfs" ino=19939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 121.773423][ T8400] loop2: detected capacity change from 0 to 2048 [ 121.803532][ T8400] GPT:first_usable_lbas don't match. [ 121.808876][ T8400] GPT:34 != 290 [ 121.812505][ T8400] GPT: Use GNU Parted to correct GPT errors. [ 121.818568][ T8400] loop2: p1 p2 p3 [ 121.865512][ T8402] loop2: detected capacity change from 0 to 512 [ 121.872301][ T8402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.883186][ T8402] EXT4-fs (loop2): too many log groups per flexible block group [ 121.891097][ T8402] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 121.898058][ T8402] EXT4-fs (loop2): mount failed [ 121.919005][ T28] audit: type=1400 audit(1782489433.266:1535): avc: denied { create } for pid=8405 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.938760][ T28] audit: type=1400 audit(1782489433.276:1536): avc: denied { setopt } for pid=8405 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.039265][ T8413] loop5: detected capacity change from 0 to 1024 [ 122.046131][ T8413] EXT4-fs: Ignoring removed orlov option [ 122.051886][ T8413] EXT4-fs: Ignoring removed nobh option [ 122.063702][ T8413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.129662][ T28] audit: type=1400 audit(1782489433.476:1537): avc: denied { write } for pid=8412 comm="syz.5.1815" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.151597][ T28] audit: type=1400 audit(1782489433.476:1538): avc: denied { write } for pid=8412 comm="syz.5.1815" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.189461][ T4242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.288622][ T8429] netlink: 'syz.5.1820': attribute type 1 has an invalid length. [ 122.301737][ T8429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.319573][ T8429] bond1: (slave gretap1): making interface the new active one [ 122.327841][ T8429] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 122.356262][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'. [ 122.365258][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'. [ 122.913059][ T8245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.449248][ T8477] loop5: detected capacity change from 0 to 512 [ 123.470652][ T8477] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 123.944192][ T8457] loop2: detected capacity change from 0 to 4096 [ 124.013958][ T8457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.053970][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.303052][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 124.386615][ T8534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1866'. [ 124.396678][ T8534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1866'. [ 124.491173][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 124.500480][ T8544] netlink: 'syz.0.1871': attribute type 26 has an invalid length. [ 124.508738][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 124.518255][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 124.527896][ T8544] netlink: 'syz.0.1871': attribute type 26 has an invalid length. [ 124.535939][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 124.663511][ T8555] loop4: detected capacity change from 0 to 512 [ 124.684215][ T8555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.696870][ T8555] ext4 filesystem being mounted at /363/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.966304][ T8585] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1888'. [ 124.975434][ T8585] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1888'. [ 124.984658][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1888'. [ 125.189300][ T8600] loop2: detected capacity change from 0 to 512 [ 125.204388][ T8600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.219506][ T8600] EXT4-fs (loop2): 1 truncate cleaned up [ 125.225746][ T8600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.241358][ T8600] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.1895: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 125.262155][ T8600] EXT4-fs (loop2): Remounting filesystem read-only [ 125.278724][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.511968][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.560360][ T8616] loop2: detected capacity change from 0 to 4096 [ 125.596530][ T8616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.619900][ T6062] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xa [ 125.746583][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.101134][ T8653] loop5: detected capacity change from 0 to 4096 [ 126.118376][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 126.118389][ T28] audit: type=1400 audit(1782489437.466:1589): avc: denied { append } for pid=8652 comm="syz.5.1915" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.159521][ T28] audit: type=1400 audit(1782489437.506:1590): avc: denied { map } for pid=8652 comm="syz.5.1915" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.229964][ T8656] syzkaller0: entered promiscuous mode [ 126.236162][ T8656] syzkaller0: entered allmulticast mode [ 126.300151][ T28] audit: type=1400 audit(1782489437.646:1591): avc: denied { getopt } for pid=8662 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.367464][ T28] audit: type=1400 audit(1782489437.716:1592): avc: denied { ioctl } for pid=8668 comm="syz.5.1924" path="socket:[20321]" dev="sockfs" ino=20321 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.436174][ T28] audit: type=1400 audit(1782489437.766:1593): avc: denied { setopt } for pid=8672 comm="syz.6.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.492256][ T28] audit: type=1400 audit(1782489437.776:1594): avc: denied { connect } for pid=8673 comm="syz.4.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.541137][ T28] audit: type=1400 audit(1782489437.776:1595): avc: denied { setopt } for pid=8673 comm="syz.4.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.852880][ T28] audit: type=1400 audit(1782489438.196:1596): avc: denied { mount } for pid=8705 comm="syz.4.1939" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 126.892253][ T28] audit: type=1400 audit(1782489438.206:1597): avc: denied { search } for pid=8705 comm="syz.4.1939" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.917801][ T28] audit: type=1400 audit(1782489438.206:1598): avc: denied { search } for pid=8705 comm="syz.4.1939" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.118586][ T8727] loop2: detected capacity change from 0 to 256 [ 127.390515][ T8748] netlink: 'syz.6.1958': attribute type 9 has an invalid length. [ 127.416853][ T8748] netlink: 'syz.6.1958': attribute type 7 has an invalid length. [ 127.436413][ T8748] netlink: 'syz.6.1958': attribute type 8 has an invalid length. [ 127.495465][ T8746] loop0: detected capacity change from 0 to 256 [ 128.332781][ T8740] kexec: Could not allocate control_code_buffer [ 128.454208][ T8761] loop2: detected capacity change from 0 to 512 [ 128.509987][ T8761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.549185][ T8759] loop0: detected capacity change from 0 to 4096 [ 128.550461][ T8761] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.622694][ T8772] sock: sock_set_timeout: `syz.4.1967' (pid 8772) tries to set negative timeout [ 128.626362][ T8759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.722599][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.239800][ T8788] loop6: detected capacity change from 0 to 1024 [ 129.259613][ T8788] EXT4-fs: Ignoring removed bh option [ 129.319801][ T8788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.400557][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.432802][ T8775] syz.4.1969 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 129.456600][ T8775] CPU: 0 UID: 0 PID: 8775 Comm: syz.4.1969 Not tainted syzkaller #0 PREEMPT(lazy) [ 129.456629][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.456652][ T8775] Call Trace: [ 129.456684][ T8775] [ 129.456691][ T8775] __dump_stack+0x1d/0x30 [ 129.456729][ T8775] dump_stack_lvl+0x95/0xd0 [ 129.456786][ T8775] dump_stack+0x15/0x1b [ 129.456864][ T8775] dump_header+0x80/0x240 [ 129.456885][ T8775] oom_kill_process+0x295/0x350 [ 129.456913][ T8775] out_of_memory+0x981/0xbc0 [ 129.457012][ T8775] try_charge_memcg+0x621/0xa00 [ 129.457044][ T8775] charge_memcg+0x6d/0x120 [ 129.457136][ T8775] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 129.457164][ T8775] swap_cache_alloc_folio+0x47b/0x5e0 [ 129.457234][ T8775] swap_cluster_readahead+0x2b1/0x460 [ 129.457263][ T8775] swapin_readahead+0xd8/0x8a0 [ 129.457286][ T8775] ? _raw_spin_unlock+0x9/0x30 [ 129.457345][ T8775] ? swap_put_entries_cluster+0x49c/0x4c0 [ 129.457368][ T8775] ? wake_page_function+0x11a/0x1f0 [ 129.457463][ T8775] ? __wake_up_locked_key+0x3d/0x60 [ 129.457483][ T8775] ? __rcu_read_unlock+0x4e/0x70 [ 129.457503][ T8775] ? swap_cache_get_folio+0x1f7/0x200 [ 129.457526][ T8775] do_swap_page+0x2a2/0x1ec0 [ 129.457601][ T8775] ? __css_rstat_updated+0xbb/0x280 [ 129.457624][ T8775] ? __rcu_read_lock+0x36/0x50 [ 129.457648][ T8775] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 129.457746][ T8775] handle_mm_fault+0xb3c/0x2da0 [ 129.457782][ T8775] do_user_addr_fault+0x634/0x1060 [ 129.457823][ T8775] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 129.457846][ T8775] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 129.457921][ T8775] ? trace_page_fault_user+0x1f/0xa0 [ 129.457949][ T8775] exc_page_fault+0x62/0xa0 [ 129.457974][ T8775] asm_exc_page_fault+0x26/0x30 [ 129.457995][ T8775] RIP: 0033:0x7f4f77d47fb8 [ 129.458054][ T8775] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 129.458072][ T8775] RSP: 002b:00007fffe69aaa40 EFLAGS: 00010246 [ 129.458169][ T8775] RAX: 0000000000000000 RBX: 0000555566c18500 RCX: 00007f4f77d4d68e [ 129.458184][ T8775] RDX: 00007fffe69aaa90 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.458198][ T8775] RBP: 00007f4f78007da0 R08: 0000000000000000 R09: 0000000000000000 [ 129.458210][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001f9be [ 129.458221][ T8775] R13: 00007f4f78005fac R14: 000000000001f75c R15: 00007fffe69aabc0 [ 129.458241][ T8775] [ 129.458268][ T8775] memory: usage 307200kB, limit 307200kB, failcnt 409 [ 129.744436][ T6320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.756181][ T8775] memory+swap: usage 216288kB, limit 9007199254740988kB, failcnt 0 [ 129.764522][ T8775] kmem: usage 215828kB, limit 9007199254740988kB, failcnt 0 [ 129.789899][ T8801] netlink: 4684 bytes leftover after parsing attributes in process `syz.6.1977'. [ 129.803675][ T8799] loop2: detected capacity change from 0 to 2048 [ 129.828927][ T8775] Memory cgroup stats for /syz4: [ 129.829181][ T8775] cache 458752 [ 129.835083][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1979'. [ 129.850421][ T8799] EXT4-fs: Ignoring removed i_version option [ 129.883072][ T8775] rss 4096 [ 129.898702][ T8775] shmem 0 [ 129.903937][ T8799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.911696][ T8775] mapped_file 0 [ 129.943097][ T8799] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.953279][ T8775] dirty 0 [ 129.956586][ T8775] writeback 0 [ 129.959867][ T8775] workingset_refault_anon 115 [ 129.964585][ T8775] workingset_refault_file 2005 [ 129.969481][ T8775] swap 356352 [ 129.972864][ T8775] swapcached 9629696 [ 129.976968][ T8775] pgpgin 103367 [ 129.980572][ T8775] pgpgout 103251 [ 129.984260][ T8775] pgfault 109651 [ 129.987972][ T8775] pgmajfault 85 [ 129.991567][ T8775] inactive_anon 8192 [ 129.995514][ T8775] active_anon 4096 [ 129.999307][ T8775] inactive_file 0 [ 130.003203][ T8775] active_file 458752 [ 130.011540][ T8775] unevictable 0 [ 130.015189][ T8775] hierarchical_memory_limit 314572800 [ 130.020835][ T8775] hierarchical_memsw_limit 9223372036854771712 [ 130.027232][ T8775] total_cache 458752 [ 130.032119][ T8775] total_rss 4096 [ 130.036558][ T8775] total_shmem 0 [ 130.037792][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.040221][ T8775] total_mapped_file 0 [ 130.054145][ T8775] total_dirty 0 [ 130.057649][ T8775] total_writeback 0 [ 130.061481][ T8775] total_workingset_refault_anon 115 [ 130.067133][ T8775] total_workingset_refault_file 2005 [ 130.072527][ T8775] total_swap 356352 [ 130.088816][ T8775] total_swapcached 9629696 [ 130.132013][ T8775] total_pgpgin 103367 [ 130.144288][ T8775] total_pgpgout 103251 [ 130.154262][ T8775] total_pgfault 109651 [ 130.199562][ T8775] total_pgmajfault 85 [ 130.204153][ T8775] total_inactive_anon 8192 [ 130.209100][ T8775] total_active_anon 4096 [ 130.214127][ T8775] total_inactive_file 0 [ 130.226745][ T8775] total_active_file 458752 [ 130.238369][ T8775] total_unevictable 0 [ 130.254135][ T8775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1969,pid=8775,uid=0 [ 130.278648][ T8775] Memory cgroup out of memory: Killed process 8775 (syz.4.1969) total-vm:96216kB, anon-rss:1232kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 130.370521][ T8841] netlink: 'syz.4.1993': attribute type 4 has an invalid length. [ 130.698597][ T8866] loop6: detected capacity change from 0 to 1024 [ 130.706847][ T8866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.729769][ T8866] EXT4-fs: inline encryption not supported [ 130.735900][ T8866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.758323][ T8866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.771877][ T8866] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.783980][ T8855] loop4: detected capacity change from 0 to 32768 [ 130.811428][ T6071] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm kworker/u8:13: lblock 0 mapped to illegal pblock 0 (length 1) [ 130.827360][ T6071] EXT4-fs (loop6): Remounting filesystem read-only [ 130.836021][ T8855] loop4: p1 p3 < > [ 130.845544][ T6320] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.055098][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 131.074819][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 131.167416][ T8882] loop4: detected capacity change from 0 to 256 [ 131.435480][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 131.435493][ T28] audit: type=1400 audit(1782489442.786:1617): avc: denied { setopt } for pid=8899 comm="syz.6.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.484238][ T28] audit: type=1400 audit(1782489442.816:1618): avc: denied { bind } for pid=8899 comm="syz.6.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.522235][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.529500][ C1] bridge0: topology change detected, propagating [ 131.535932][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.543239][ C1] bridge0: topology change detected, propagating [ 131.595752][ T8909] tls_set_device_offload_rx: netdev not found [ 132.235747][ T28] audit: type=1400 audit(1782489443.586:1619): avc: denied { ioctl } for pid=8947 comm="syz.2.2037" path="socket:[21806]" dev="sockfs" ino=21806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.869108][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.002108][ T8990] sg_write: data in/out 491520/136 bytes for SCSI command 0x0-- guessing data in; [ 133.002108][ T8990] program syz.2.2054 not setting count and/or reply_len properly [ 133.084462][ T8994] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.092812][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.130370][ T8996] loop2: detected capacity change from 0 to 512 [ 133.148908][ T8996] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 133.176397][ T8996] netlink: 'syz.2.2057': attribute type 12 has an invalid length. [ 133.192012][ T8996] netlink: 'syz.2.2057': attribute type 29 has an invalid length. [ 133.206294][ T8996] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2057'. [ 133.222445][ T8996] netlink: 'syz.2.2057': attribute type 2 has an invalid length. [ 133.231134][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 133.237556][ T8996] netlink: 'syz.2.2057': attribute type 3 has an invalid length. [ 133.240869][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2061'. [ 133.252324][ T8996] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2057'. [ 133.270915][ T9004] geneve3: entered promiscuous mode [ 133.276217][ T9004] geneve3: entered allmulticast mode [ 133.567034][ T9024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=9024 comm=syz.4.2069 [ 133.739536][ T28] audit: type=1400 audit(1782489445.086:1620): avc: denied { view } for pid=9038 comm="syz.4.2077" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 133.877327][ T28] audit: type=1400 audit(1782489445.226:1621): avc: denied { mounton } for pid=9050 comm="syz.2.2081" path="/424/file1" dev="tmpfs" ino=2224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 133.991444][ T28] audit: type=1400 audit(1782489445.326:1622): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.021110][ T28] audit: type=1400 audit(1782489445.326:1623): avc: denied { open } for pid=3295 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.069618][ T28] audit: type=1400 audit(1782489445.326:1624): avc: denied { ioctl } for pid=4242 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.096983][ T28] audit: type=1400 audit(1782489445.336:1625): avc: denied { open } for pid=9060 comm="syz.5.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 134.108299][ T9059] loop0: detected capacity change from 0 to 8192 [ 134.123426][ T28] audit: type=1400 audit(1782489445.336:1626): avc: denied { perfmon } for pid=9060 comm="syz.5.2084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.178633][ T9071] loop4: detected capacity change from 0 to 512 [ 134.222226][ T9071] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2089: inode has both inline data and extents flags [ 134.239191][ T9071] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.239307][ T9071] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2089: couldn't read orphan inode 15 (err -117) [ 134.248553][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 134.248607][ C1] EXT4-fs (loop4): initial error at time 1782489445: ext4_orphan_get:1399: inode 15 [ 134.248637][ C1] EXT4-fs (loop4): last error at time 1782489445: ext4_orphan_get:1399: inode 15 [ 134.315125][ T9071] loop4: lost filesystem error report for type 5 error -117 [ 134.318272][ T9071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.325840][ T3390] kernel read not supported for file /ppp (pid: 3390 comm: kworker/1:5) [ 134.372577][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.397208][ T9085] loop0: detected capacity change from 0 to 1024 [ 134.410450][ T9088] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2094'. [ 134.459337][ T9085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.473885][ T9085] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.496694][ T9085] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.2095: lblock 0 mapped to illegal pblock 0 (length 1) [ 134.513800][ T9085] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.2095: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 134.540513][ T9085] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.2095: lblock 0 mapped to illegal pblock 0 (length 1) [ 134.559386][ T9085] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 134.572688][ T9085] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.572688][ T9085] [ 134.597748][ T3294] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 134.610596][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.630345][ T9102] 9pnet: p9_errstr2errno: server reported unknown error e_0 [ 134.887531][ T9130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2113'. [ 135.122461][ T4508] Bluetooth: hci0: command 0x1003 tx timeout [ 135.130155][ T4304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.454474][ T9182] loop0: detected capacity change from 0 to 512 [ 135.483835][ T9182] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2138: inode has both inline data and extents flags [ 135.507419][ T9182] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.509159][ T9182] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2138: couldn't read orphan inode 15 (err -117) [ 135.518353][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 135.518378][ C1] EXT4-fs (loop0): initial error at time 1782489446: ext4_orphan_get:1399: inode 15 [ 135.518412][ C1] EXT4-fs (loop0): last error at time 1782489446: ext4_orphan_get:1399: inode 15 [ 135.595581][ T9182] loop0: lost filesystem error report for type 5 error -117 [ 135.596054][ T9182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.633319][ T9186] loop4: detected capacity change from 0 to 2048 [ 135.682258][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.703722][ T9186] Alternate GPT is invalid, using primary GPT. [ 135.711697][ T9186] loop4: p2 p3 p7 [ 135.778798][ T3390] ================================================================== [ 135.786895][ T3390] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 135.793959][ T3390] [ 135.796260][ T3390] read-write to 0xffff888237c2a8e4 of 4 bytes by task 936 on cpu 0: [ 135.804211][ T3390] wq_worker_running+0x9b/0x120 [ 135.809051][ T3390] synchronize_rcu_expedited+0x5f8/0x770 [ 135.814661][ T3390] try_check_zero+0x189/0x260 [ 135.819323][ T3390] process_srcu+0x1ea/0xd90 [ 135.823810][ T3390] process_scheduled_works+0x4d4/0x9a0 [ 135.829261][ T3390] worker_thread+0x569/0x750 [ 135.833843][ T3390] kthread+0x221/0x270 [ 135.837895][ T3390] ret_from_fork+0x146/0x330 [ 135.842494][ T3390] ret_from_fork_asm+0x1a/0x30 [ 135.847265][ T3390] [ 135.849568][ T3390] read to 0xffff888237c2a8e4 of 4 bytes by task 3390 on cpu 1: [ 135.857086][ T3390] kick_pool+0x49/0x2d0 [ 135.861227][ T3390] __queue_work+0x8e9/0xb90 [ 135.865713][ T3390] queue_work_on+0xa9/0x140 [ 135.870197][ T3390] process_srcu+0xa39/0xd90 [ 135.874683][ T3390] process_scheduled_works+0x4d4/0x9a0 [ 135.880123][ T3390] worker_thread+0x569/0x750 [ 135.884701][ T3390] kthread+0x221/0x270 [ 135.888750][ T3390] ret_from_fork+0x146/0x330 [ 135.893324][ T3390] ret_from_fork_asm+0x1a/0x30 [ 135.898079][ T3390] [ 135.900378][ T3390] value changed: 0x00000000 -> 0x00000001 [ 135.906069][ T3390] [ 135.908407][ T3390] Reported by Kernel Concurrency Sanitizer on: [ 135.914552][ T3390] CPU: 1 UID: 0 PID: 3390 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.923900][ T3390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.934020][ T3390] Workqueue: rcu_gp process_srcu [ 135.938951][ T3390] ================================================================== [ 135.967794][ T9199] loop0: detected capacity change from 0 to 2048 [ 136.028623][ T9199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.051693][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 136.059233][ T9199] EXT4-fs (loop0): shut down requested (2) [ 136.064770][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 136.069551][ T9199] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 136.089038][ T9199] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 136.109367][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 136.118307][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 136.127420][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 136.136692][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 136.145927][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 136.155179][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 136.164666][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 136.173627][ T3294] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 136.207245][ T5940] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.