last executing test programs: 1m0.649981922s ago: executing program 3 (id=391): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000180)={[{@noinit_itable}, {@init_itable}, {@grpquota}]}, 0x3, 0x481, &(0x7f00000004c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000003c0)=0xc) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, r1, 0x0) 1m0.065067286s ago: executing program 3 (id=395): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100), 0xfd, 0x4b4, &(0x7f0000000a40)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000240)={0x3, 0x5, 0xc7, 0x0, 0x2, 0x1, 0x6892, 0x1}) 59.08252268s ago: executing program 3 (id=409): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x80800) 57.554688718s ago: executing program 3 (id=431): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000040)="b8601a454f44", 0x6}], 0x1) 57.46245323s ago: executing program 3 (id=432): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 57.394445852s ago: executing program 3 (id=435): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x112) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff) 42.284987503s ago: executing program 32 (id=435): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x112) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff) 6.703621716s ago: executing program 1 (id=1277): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000060, 0x0) 5.332023349s ago: executing program 0 (id=1287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 5.096875285s ago: executing program 0 (id=1291): r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") unshare(0x28000600) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x10000000001}, 0x4, 0x0, 0xfff, 0x9, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) connect$inet(r1, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) r2 = socket$inet6(0xa, 0x1, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f00000000c0)={0x0, {{0x29, 0x4e21, 0x6, @loopback, 0xb2}}}, 0x9ff9a974932df96) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) getpid() write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file1\x00'}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000001c0)=0x0) setresuid(0x0, r6, r7) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000300)={{r5}, 0x0, 0x0, 0x7, 0x2, 0x1}) recvfrom$inet6(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) 4.403239802s ago: executing program 1 (id=1296): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 4.123920749s ago: executing program 1 (id=1297): socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) lgetxattr(0x0, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x9, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0x3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {}, 0x1}, 0x18) sendfile(r3, r2, 0x0, 0x1000000000000a) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 3.883222375s ago: executing program 0 (id=1301): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8810) 3.743087508s ago: executing program 0 (id=1302): r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") unshare(0x28000600) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x10000000001}, 0x4, 0x0, 0xfff, 0x9, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) connect$inet(r1, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)={0x0, {{0x29, 0x4e21, 0x6, @loopback, 0xb2}}}, 0x9ff9a974932df96) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r2) ioctl$EVIOCRMFF(r2, 0x5509, &(0x7f0000000040)=0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) getpid() write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file1\x00'}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)=0x0) setresuid(0x0, r5, r6) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000300)={{r4}, 0x0, 0x0, 0x7, 0x2, 0x1}) recvfrom$inet6(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) 3.545924113s ago: executing program 2 (id=1304): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x10026, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1121769e, 0x7, @perf_bp={0x0, 0xb}, 0x1a1ed, 0x3, 0x11000, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800456800280068000040019078ac1e0101e00000010d009078"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 3.415356176s ago: executing program 2 (id=1305): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) acct(0x0) 3.351874738s ago: executing program 2 (id=1306): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2.988611667s ago: executing program 4 (id=1310): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x641, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 2.964713988s ago: executing program 2 (id=1311): r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") unshare(0x28000600) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x10000000001}, 0x4, 0x0, 0xfff, 0x9, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) connect$inet(r1, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) r2 = socket$inet6(0xa, 0x1, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f00000000c0)={0x0, {{0x29, 0x4e21, 0x6, @loopback, 0xb2}}}, 0x9ff9a974932df96) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) ioctl$EVIOCRMFF(r3, 0x5509, &(0x7f0000000040)=0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) getpid() write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file1\x00'}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000001c0)=0x0) setresuid(0x0, r6, r7) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000300)={{r5}, 0x0, 0x0, 0x7, 0x2, 0x1}) recvfrom$inet6(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) 2.892318779s ago: executing program 4 (id=1312): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 2.796828811s ago: executing program 1 (id=1314): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) 2.781136912s ago: executing program 5 (id=1315): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060007"], 0x8c}}, 0x0) 2.712781263s ago: executing program 0 (id=1316): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x122dfb579e447cba) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "0000366834c0a20000b7aac63a0100000000005cc6040700000000770060e000002021e9000000000000000040000000000000d000000000000000000000000f", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) truncate(&(0x7f0000000000)='./file1\x00', 0xd1) 2.712622073s ago: executing program 1 (id=1317): r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") unshare(0x28000600) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) r2 = socket$inet6(0xa, 0x1, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f00000000c0)={0x0, {{0x29, 0x4e21, 0x6, @loopback, 0xb2}}}, 0x9ff9a974932df96) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r3) ioctl$EVIOCRMFF(r3, 0x5509, &(0x7f0000000040)=0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) getpid() write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file1\x00'}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000001c0)=0x0) setresuid(0x0, r6, r7) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000300)={{r5}, 0x0, 0x0, 0x7, 0x2, 0x1}) recvfrom$inet6(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) 2.712486303s ago: executing program 4 (id=1318): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) 2.703385374s ago: executing program 5 (id=1319): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) 2.582625926s ago: executing program 5 (id=1320): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/fail_page_alloc/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.582480697s ago: executing program 4 (id=1321): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000036c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x4, 0x6, "f028be", 0x7, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [], "35553d57b5af7a1f"}}}}}}}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000200c}) 2.374187352s ago: executing program 5 (id=1322): unshare(0x22020400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@minixdf}, {}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@noinit_itable}, {@resgid}, {@dioread_nolock}, {@debug}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x18, 0x4, 0x1000000000000}) 2.304734874s ago: executing program 4 (id=1323): r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") unshare(0x28000600) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x10000000001}, 0x4, 0x0, 0xfff, 0x9, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) connect$inet(r1, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) socket$inet6(0xa, 0x1, 0x9) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r2) ioctl$EVIOCRMFF(r2, 0x5509, &(0x7f0000000040)=0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) getpid() write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file1\x00'}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)=0x0) setresuid(0x0, r5, r6) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000300)={{r4}, 0x0, 0x0, 0x7, 0x2, 0x1}) recvfrom$inet6(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) 2.276336944s ago: executing program 2 (id=1324): r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") unshare(0x28000600) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x10000000001}, 0x4, 0x0, 0xfff, 0x9, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) connect$inet(r1, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)={0x0, {{0x29, 0x4e21, 0x6, @loopback, 0xb2}}}, 0x9ff9a974932df96) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r2) ioctl$EVIOCRMFF(r2, 0x5509, &(0x7f0000000040)=0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) getpid() write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file1\x00'}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)=0x0) setresuid(0x0, r5, r6) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000300)={{r4}, 0x0, 0x0, 0x7, 0x2, 0x1}) recvfrom$inet6(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) 1.947057553s ago: executing program 0 (id=1325): socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) lgetxattr(0x0, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x9, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0x3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {}, 0x1}, 0x18) sendfile(r3, r2, 0x0, 0x1000000000000a) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 1.056809494s ago: executing program 1 (id=1326): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffa, [0xa587, 0xfffffffc], 0x4}, 0x86c6b7ea6b97d8f2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 926.690027ms ago: executing program 2 (id=1327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x2c, 0x0, @opaque="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"}}}, 0x4c) 314.683212ms ago: executing program 5 (id=1328): openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) 314.456982ms ago: executing program 4 (id=1329): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'net_prio'}]}, 0xa) sendfile(r0, r0, 0x0, 0x9) 0s ago: executing program 5 (id=1330): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) kernel console output (not intermixed with test programs): lesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.144333][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.292470][ T4578] loop1: detected capacity change from 0 to 8192 [ 61.524185][ T4602] program syz.4.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.592842][ T4608] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 61.781953][ T4616] EXT4-fs: inline encryption not supported [ 61.819006][ T4616] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 61.867522][ T4616] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.464: invalid indirect mapped block 2683928664 (level 1) [ 61.911440][ T4616] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 61.911880][ T4616] EXT4-fs (loop2): 1 truncate cleaned up [ 61.921285][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 61.921322][ C0] EXT4-fs (loop2): initial error at time 1785207476: ext4_free_branches:1023: inode 13 [ 61.921378][ C0] EXT4-fs (loop2): last error at time 1785207476: ext4_free_branches:1023: inode 13 [ 61.996206][ T4616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.055154][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 62.055234][ T28] audit: type=1400 audit(1785207476.769:414): avc: denied { write } for pid=4615 comm="syz.2.464" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.085918][ T4616] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.464: invalid indirect mapped block 4294967295 (level 0) [ 62.112910][ T4616] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.464: invalid indirect mapped block 65536 (level 1) [ 62.171793][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.299171][ T28] audit: type=1400 audit(1785207477.009:415): avc: denied { read } for pid=4634 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.487522][ T4641] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.516981][ T28] audit: type=1400 audit(1785207477.229:416): avc: denied { watch watch_reads } for pid=4640 comm="syz.2.471" path="/102/bus" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 62.731427][ T4643] set_capacity_and_notify: 6 callbacks suppressed [ 62.731447][ T4643] loop2: detected capacity change from 0 to 8192 [ 62.900400][ T4647] udc usbip-vudc.0: soft-connect without a gadget driver [ 62.931343][ T4649] loop0: detected capacity change from 0 to 512 [ 62.952790][ T4649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.992836][ T4649] EXT4-fs (loop0): 1 orphan inode deleted [ 63.002725][ T4649] EXT4-fs (loop0): 1 truncate cleaned up [ 63.042444][ T4649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.119816][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.346284][ T4663] xt_hashlimit: size too large, truncated to 1048576 [ 63.537993][ T4672] loop4: detected capacity change from 0 to 1024 [ 63.565459][ T4672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.593220][ T28] audit: type=1400 audit(1785207478.309:417): avc: denied { write } for pid=4671 comm="syz.4.484" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.642063][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.751784][ T4679] loop0: detected capacity change from 0 to 2048 [ 63.820151][ T4679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.838518][ T28] audit: type=1400 audit(1785207478.549:418): avc: denied { watch watch_reads } for pid=4678 comm="syz.0.486" path="/81/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.911053][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.965891][ T4687] tap0: tun_chr_ioctl cmd 1074025677 [ 63.977855][ T4687] tap0: linktype set to 825 [ 63.986275][ T28] audit: type=1400 audit(1785207478.549:419): avc: denied { write } for pid=4678 comm="syz.0.486" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.018168][ T4685] loop4: detected capacity change from 0 to 8192 [ 64.038791][ T28] audit: type=1400 audit(1785207478.549:420): avc: denied { setattr } for pid=4678 comm="syz.0.486" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.144323][ T4694] loop0: detected capacity change from 0 to 256 [ 64.710337][ T4706] loop0: detected capacity change from 0 to 256 [ 64.776476][ T4708] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 65.302938][ T28] audit: type=1400 audit(1785207480.009:421): avc: denied { setopt } for pid=4722 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.418663][ T4721] loop1: detected capacity change from 0 to 8192 [ 66.872506][ T4737] loop0: detected capacity change from 0 to 512 [ 67.103026][ T4737] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.186085][ T28] audit: type=1400 audit(1785207481.889:422): avc: denied { write } for pid=4736 comm="syz.0.507" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.248023][ T3300] EXT4-fs unmount: 1 callbacks suppressed [ 67.248040][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.339703][ T28] audit: type=1400 audit(1785207482.049:423): avc: denied { setattr } for pid=4752 comm="syz.1.514" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 67.436807][ T4760] loop1: detected capacity change from 0 to 1024 [ 67.462340][ T4760] EXT4-fs: Ignoring removed bh option [ 67.494758][ T4760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.523023][ T4767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.532100][ T4760] EXT4-fs (loop1): shut down requested (1) [ 67.536295][ T4773] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'fl' '' [ 67.562719][ T4760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 67.566205][ T4767] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.584865][ T4760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 67.605494][ T4760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 67.608175][ T28] audit: type=1400 audit(1785207482.319:424): avc: denied { read } for pid=4758 comm="syz.1.516" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.652766][ T28] audit: type=1400 audit(1785207482.339:425): avc: denied { open } for pid=4758 comm="syz.1.516" path="/127/file1/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.683149][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.701702][ T28] audit: type=1400 audit(1785207482.409:426): avc: denied { write } for pid=4766 comm="syz.0.519" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.773875][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.831912][ T28] audit: type=1400 audit(1785207482.539:427): avc: denied { read } for pid=4781 comm="syz.1.525" name="trace_pipe" dev="tracefs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 67.876158][ T4784] set_capacity_and_notify: 1 callbacks suppressed [ 67.876177][ T4784] loop0: detected capacity change from 0 to 1024 [ 67.913366][ T4784] EXT4-fs: Ignoring removed bh option [ 67.939885][ T4784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.020297][ T4784] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.523: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 68.040163][ T28] audit: type=1400 audit(1785207482.729:428): avc: denied { write } for pid=4783 comm="syz.0.523" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.126920][ T4784] EXT4-fs (loop0): Remounting filesystem read-only [ 68.135286][ T28] audit: type=1400 audit(1785207482.729:429): avc: denied { write } for pid=4783 comm="syz.0.523" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.155823][ T4800] netlink: 'syz.2.530': attribute type 21 has an invalid length. [ 68.182377][ T28] audit: type=1400 audit(1785207482.729:430): avc: denied { remove_name } for pid=4783 comm="syz.0.523" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.195656][ T4800] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.229685][ T28] audit: type=1400 audit(1785207482.829:431): avc: denied { write } for pid=4796 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.262358][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.354355][ T4809] program syz.1.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.490839][ T4816] xt_hashlimit: size too large, truncated to 1048576 [ 68.918866][ T4836] pimreg: tun_chr_ioctl cmd 1074812118 [ 69.025086][ T4844] loop1: detected capacity change from 0 to 128 [ 69.052227][ T4844] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.079561][ T4842] loop0: detected capacity change from 0 to 8192 [ 69.112488][ T4844] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.177436][ T30] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.472552][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 69.577178][ T4871] netlink: 'syz.2.561': attribute type 29 has an invalid length. [ 69.596091][ T4871] netlink: 'syz.2.561': attribute type 29 has an invalid length. [ 69.620352][ T4871] netlink: 'syz.2.561': attribute type 29 has an invalid length. [ 69.811342][ T4874] loop2: detected capacity change from 0 to 8192 [ 71.148324][ T4915] loop2: detected capacity change from 0 to 256 [ 71.321942][ T4923] loop2: detected capacity change from 0 to 256 [ 71.358758][ T4923] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.373968][ T4923] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.445643][ T4925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=4925 comm=syz.2.583 [ 71.533592][ T4927] loop2: detected capacity change from 0 to 8192 [ 71.700382][ T4942] program syz.1.588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.991275][ T4960] netlink: 'syz.4.596': attribute type 15 has an invalid length. [ 72.454647][ T4967] loop0: detected capacity change from 0 to 512 [ 72.463314][ T4967] EXT4-fs: inline encryption not supported [ 72.480292][ T4967] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 72.489349][ T4967] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.598: invalid indirect mapped block 2683928664 (level 1) [ 72.514599][ T4967] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.514954][ T4967] EXT4-fs (loop0): 1 truncate cleaned up [ 72.524328][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 72.524349][ C1] EXT4-fs (loop0): initial error at time 1785207487: ext4_free_branches:1023: inode 13 [ 72.524394][ C1] EXT4-fs (loop0): last error at time 1785207487: ext4_free_branches:1023: inode 13 [ 72.581041][ T4967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.607721][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 72.607739][ T28] audit: type=1400 audit(1785207487.319:434): avc: denied { write } for pid=4966 comm="syz.0.598" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.636929][ T4967] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.598: Invalid block bitmap block 3 in block_group 0 [ 72.638001][ T4971] loop2: detected capacity change from 0 to 1024 [ 72.657999][ T4967] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 72.679339][ T4971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.720125][ T4971] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.737986][ T4971] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.599: bg 0: block 112: padding at end of block bitmap is not set [ 72.753257][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.773136][ T28] audit: type=1400 audit(1785207487.449:435): avc: denied { write } for pid=4970 comm="syz.2.599" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.856350][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.069865][ T4998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.611'. [ 73.088178][ T4998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.611'. [ 73.152286][ T4991] loop2: detected capacity change from 0 to 8192 [ 73.194069][ T4996] loop0: detected capacity change from 0 to 8192 [ 73.213499][ T4996] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.231392][ T28] audit: type=1400 audit(1785207487.939:436): avc: denied { remount } for pid=4995 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 73.252852][ T4996] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 73.308557][ T4996] FAT-fs (loop0): Filesystem has been set read-only [ 73.315219][ T5008] loop4: detected capacity change from 0 to 1024 [ 73.347378][ T5008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.389716][ T5008] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.408418][ T5014] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 73.408418][ T5014] program syz.0.616 not setting count and/or reply_len properly [ 73.432339][ T5008] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.614: bg 0: block 112: padding at end of block bitmap is not set [ 73.449329][ T28] audit: type=1400 audit(1785207488.139:437): avc: denied { write } for pid=5007 comm="syz.4.614" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.485736][ T5018] loop1: detected capacity change from 0 to 512 [ 73.514883][ T5018] EXT4-fs: Ignoring removed i_version option [ 73.547896][ T28] audit: type=1400 audit(1785207488.259:438): avc: denied { setopt } for pid=5019 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.573854][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.574196][ T5018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.602964][ T5018] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.659359][ T5026] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 73.744696][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.753031][ T5028] loop4: detected capacity change from 0 to 8192 [ 73.795021][ T5030] program syz.1.623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.867720][ T5034] loop1: detected capacity change from 0 to 164 [ 73.885749][ T5034] isofs: isofs_export_get_parent(): child directory not normalized! [ 73.901125][ T5035] mmap: syz.0.621 (5035) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.087280][ T5041] loop1: detected capacity change from 0 to 8192 [ 74.417667][ T5056] loop0: detected capacity change from 0 to 512 [ 74.432224][ T5056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.457443][ T5056] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.632: invalid indirect mapped block 4294967295 (level 0) [ 74.480748][ T5056] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.482559][ T5056] EXT4-fs (loop0): Remounting filesystem read-only [ 74.491870][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 74.491896][ C0] EXT4-fs (loop0): initial error at time 1785207489: ext4_free_branches:1023: inode 16 [ 74.491949][ C0] EXT4-fs (loop0): last error at time 1785207489: ext4_free_branches:1023: inode 16 [ 74.560658][ T5056] EXT4-fs (loop0): 1 orphan inode deleted [ 74.582690][ T5056] EXT4-fs (loop0): 1 truncate cleaned up [ 74.606249][ T5056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.628912][ T77] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.654874][ T28] audit: type=1400 audit(1785207489.369:439): avc: denied { watch } for pid=5066 comm="syz.4.634" path="/121" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.708604][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.793460][ T77] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.833387][ T5079] loop0: detected capacity change from 0 to 764 [ 74.871247][ T77] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.896020][ T5081] loop4: detected capacity change from 0 to 8192 [ 74.976375][ T5089] EXT4-fs: Ignoring removed orlov option [ 74.986397][ T77] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.002151][ T5089] EXT4-fs: Ignoring removed bh option [ 75.021247][ T5089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.040283][ T5089] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.063318][ T5089] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 75.104784][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.181963][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.189184][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.196646][ T5059] bridge_slave_0: entered allmulticast mode [ 75.203220][ T5059] bridge_slave_0: entered promiscuous mode [ 75.211272][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.218447][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.225811][ T5059] bridge_slave_1: entered allmulticast mode [ 75.232792][ T5059] bridge_slave_1: entered promiscuous mode [ 75.255751][ T77] bridge_slave_1: left allmulticast mode [ 75.262045][ T77] bridge_slave_1: left promiscuous mode [ 75.267925][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.280103][ T77] bridge_slave_0: left allmulticast mode [ 75.286230][ T77] bridge_slave_0: left promiscuous mode [ 75.300729][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.433759][ T5113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.459601][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.478847][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.489147][ T5113] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 75.501818][ T77] bond0 (unregistering): Released all slaves [ 75.526427][ T5059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.538848][ T5059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.562948][ T5059] team0: Port device team_slave_0 added [ 75.567940][ T28] audit: type=1400 audit(1785207490.279:440): avc: denied { read } for pid=3019 comm="dhcpcd" name="n27" dev="tmpfs" ino=4488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.572795][ T5059] team0: Port device team_slave_1 added [ 75.618136][ T5113] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 75.623551][ T28] audit: type=1400 audit(1785207490.279:441): avc: denied { open } for pid=3019 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=4488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.651339][ T5113] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 75.661035][ T5113] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.648: Failed to acquire dquot type 1 [ 75.673385][ T77] hsr_slave_0: left promiscuous mode [ 75.679141][ T77] hsr_slave_1: left promiscuous mode [ 75.684722][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.702689][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.711372][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.721423][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.729280][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.744273][ T77] veth1_macvtap: left promiscuous mode [ 75.752691][ T77] veth0_macvtap: left promiscuous mode [ 75.761408][ T77] veth1_vlan: left promiscuous mode [ 75.767197][ T77] veth0_vlan: left promiscuous mode [ 75.882857][ T77] team0 (unregistering): Port device team_slave_1 removed [ 75.893855][ T77] team0 (unregistering): Port device team_slave_0 removed [ 75.967183][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.975032][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.001376][ T5059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.012882][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.019952][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.049166][ T5059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.079210][ T5059] hsr_slave_0: entered promiscuous mode [ 76.085451][ T5059] hsr_slave_1: entered promiscuous mode [ 76.091728][ T5059] debugfs: 'hsr0' already exists in 'hsr' [ 76.098172][ T5059] Cannot create hsr debugfs directory [ 76.139405][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 76.335205][ T5059] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.359854][ T5059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.392521][ T5059] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.406918][ T5169] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.437786][ T5169] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.484593][ T5059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.508070][ T5059] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.528674][ T5059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.537739][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 76.553456][ T5059] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.565177][ T5059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.567617][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.604671][ T5184] PM: suspend entry (deep) [ 76.660054][ T5059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.675792][ T5059] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.686412][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.693619][ T2310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.715204][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.722416][ T2310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.753634][ T5059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.764421][ T1612] Filesystems sync: 0.149 seconds [ 76.809387][ T5184] Freezing user space processes [ 76.817867][ T5059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.832493][ T5184] Freezing user space processes completed (elapsed 0.015 seconds) [ 76.840718][ T5184] OOM killer disabled. [ 76.844942][ T5184] Freezing remaining freezable tasks [ 76.851940][ T5184] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 76.860305][ T5184] printk: Suspending console(s) (use no_console_suspend to debug) [ 76.904049][ T5184] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 76.905753][ T5184] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 76.905781][ T5184] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 76.905835][ T5184] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 76.905858][ T5184] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 76.905934][ T5184] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 76.905956][ T5184] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 76.905978][ T5184] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 76.906038][ T5184] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 76.906060][ T5184] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 76.906131][ T5184] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 76.906153][ T5184] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 76.906176][ T5184] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 76.906323][ T5184] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 76.906420][ T5184] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 76.906440][ T5184] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 76.952854][ T2310] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 77.482406][ T5184] ACPI: PM: Preparing to enter system sleep state S3 [ 77.482592][ T5184] ACPI: PM: Saving platform NVS memory [ 77.482704][ T5184] Disabling non-boot CPUs ... [ 77.487982][ T5184] smpboot: CPU 1 is now offline [ 77.494457][ T5184] ACPI: PM: Low-level resume complete [ 77.494522][ T5184] ACPI: PM: Restoring platform NVS memory [ 77.508993][ T5184] Enabling non-boot CPUs ... [ 77.509193][ T5184] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 77.513230][ T5184] CPU1 is up [ 77.513461][ T5184] ACPI: PM: Waking up from system sleep state S3 [ 77.549478][ T5186] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 77.734540][ T5184] OOM killer enabled. [ 77.735173][ T5184] Restarting tasks: Starting [ 77.739735][ T5184] Restarting tasks: Done [ 77.741040][ T5184] random: crng reseeded on system resumption [ 77.744697][ T5184] PM: suspend exit [ 77.768397][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 77.768412][ T28] audit: type=1400 audit(1785207492.515:464): avc: denied { write } for pid=5206 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.802855][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.803142][ T28] audit: type=1400 audit(1785207492.555:465): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.808677][ T5303] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 77.814795][ T5303] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.664: corrupted in-inode xattr: e_value size too large [ 77.817079][ T5303] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.819555][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 77.821943][ C1] EXT4-fs (loop2): initial error at time 1785207492: ext4_iget_extra_inode:5180: inode 15 [ 77.823425][ C1] EXT4-fs (loop2): last error at time 1785207492: ext4_iget_extra_inode:5180: inode 15 [ 77.827256][ T5303] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.664: couldn't read orphan inode 15 (err -117) [ 77.836278][ T5303] loop2: lost filesystem error report for type 5 error -117 [ 77.838189][ T5303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.915950][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.933795][ T28] audit: type=1400 audit(1785207492.685:466): avc: denied { create } for pid=5309 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.027439][ T28] audit: type=1400 audit(1785207492.775:467): avc: denied { write } for pid=5314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.077996][ T5059] veth0_vlan: entered promiscuous mode [ 78.081208][ T28] audit: type=1400 audit(1785207492.835:468): avc: denied { setopt } for pid=5337 comm="syz.1.667" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.094901][ T5059] veth1_vlan: entered promiscuous mode [ 78.110419][ T28] audit: type=1400 audit(1785207492.865:469): avc: denied { write } for pid=5341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.129340][ T5059] veth0_macvtap: entered promiscuous mode [ 78.133940][ T28] audit: type=1400 audit(1785207492.885:470): avc: denied { bind } for pid=5345 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.140960][ T5059] veth1_macvtap: entered promiscuous mode [ 78.144097][ T28] audit: type=1400 audit(1785207492.885:471): avc: denied { connect } for pid=5345 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.158770][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.166557][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.172619][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.182714][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.184511][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.195010][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.198409][ T38] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.295899][ T5356] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 78.309308][ T5356] SELinux: failed to load policy [ 78.377443][ T5370] set_capacity_and_notify: 8 callbacks suppressed [ 78.377461][ T5370] loop1: detected capacity change from 0 to 256 [ 78.453067][ T5371] loop2: detected capacity change from 0 to 128 [ 78.498263][ T5365] loop0: detected capacity change from 0 to 8192 [ 78.536054][ T28] audit: type=1400 audit(1785207493.285:472): avc: denied { bind } for pid=5376 comm="syz.5.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.634014][ T5384] loop1: detected capacity change from 0 to 512 [ 78.722269][ T5393] program syz.5.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.762695][ T28] audit: type=1400 audit(1785207493.515:473): avc: denied { write } for pid=5397 comm="syz.5.690" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.770344][ T5398] netlink: 128 bytes leftover after parsing attributes in process `syz.5.690'. [ 78.771899][ T5400] sg_write: data in/out 221/42 bytes for SCSI command 0x0-- guessing data in; [ 78.771899][ T5400] program syz.2.691 not setting count and/or reply_len properly [ 78.774712][ T5398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.935180][ T5413] loop2: detected capacity change from 0 to 8192 [ 78.965819][ T5418] syz.1.699 uses obsolete (PF_INET,SOCK_PACKET) [ 79.044472][ T5423] sctp: [Deprecated]: syz.1.701 (pid 5423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.044472][ T5423] Use struct sctp_sack_info instead [ 79.241537][ T5440] loop1: detected capacity change from 0 to 512 [ 79.271644][ T5440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.273926][ T5440] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.278680][ T5440] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 105 vs 96 free clusters [ 79.307810][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.410820][ T5449] loop4: detected capacity change from 0 to 8192 [ 80.068000][ T5490] loop2: detected capacity change from 0 to 8192 [ 80.462213][ T5498] loop4: detected capacity change from 0 to 164 [ 80.731117][ T5512] loop5: detected capacity change from 0 to 8192 [ 81.584364][ T5539] netlink: 'syz.0.748': attribute type 3 has an invalid length. [ 81.692881][ T5554] netlink: 36 bytes leftover after parsing attributes in process `syz.5.750'. [ 81.865471][ T5575] netlink: 48 bytes leftover after parsing attributes in process `syz.5.759'. [ 81.880418][ T5571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.921769][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 81.932128][ T5560] netlink: 14 bytes leftover after parsing attributes in process `syz.1.755'. [ 81.940275][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 81.955734][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.121910][ T5591] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.131353][ T5591] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 82.149718][ T5591] FAT-fs (loop5): Filesystem has been set read-only [ 82.155623][ T5591] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 82.342249][ T5607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.344789][ T5607] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.358989][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.451082][ T5621] EXT4-fs: Ignoring removed oldalloc option [ 82.496520][ T5621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.511779][ T5621] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 82.517358][ T5621] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 82.522300][ T5621] EXT4-fs (loop5): This should not happen!! Data will be lost [ 82.522300][ T5621] [ 82.524088][ T5621] EXT4-fs (loop5): Total free blocks count 0 [ 82.524987][ T5621] EXT4-fs (loop5): Free/Dirty block details [ 82.526174][ T5621] EXT4-fs (loop5): free_blocks=4096 [ 82.526953][ T5621] EXT4-fs (loop5): dirty_blocks=16 [ 82.528193][ T5621] EXT4-fs (loop5): Block reservation details [ 82.529204][ T5621] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 82.567718][ T5242] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.571577][ T5059] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.610064][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.780'. [ 82.612950][ T5631] netlink: 'syz.5.780': attribute type 10 has an invalid length. [ 82.614282][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.780'. [ 82.681249][ T5636] EXT4-fs: inline encryption not supported [ 82.683791][ T5636] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 82.685539][ T5636] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.782: invalid indirect mapped block 2683928664 (level 1) [ 82.687761][ T5636] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 82.687998][ T5636] EXT4-fs (loop5): 1 truncate cleaned up [ 82.689608][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 82.689630][ C0] EXT4-fs (loop5): initial error at time 1785207497: ext4_free_branches:1023: inode 13 [ 82.689662][ C0] EXT4-fs (loop5): last error at time 1785207497: ext4_free_branches:1023: inode 13 [ 82.696246][ T5636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.702850][ T5636] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1803188595: comm syz.5.782: invalid block [ 82.704867][ T5636] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.782: invalid indirect mapped block 2054779762 (level 0) [ 82.718807][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.740595][ T5639] netlink: 'syz.5.783': attribute type 4 has an invalid length. [ 82.845982][ T5649] tipc: Started in network mode [ 82.847280][ T5649] tipc: Node identity ac14142f, cluster identity 4711 [ 82.848376][ T5649] tipc: Enabling of bearer rejected, failed to enable media [ 82.894874][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 82.894892][ T28] audit: type=1400 audit(1785207497.645:493): avc: denied { ioctl } for pid=5652 comm="syz.5.791" path="socket:[11420]" dev="sockfs" ino=11420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.904690][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.791'. [ 83.187515][ T5683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.802'. [ 83.293981][ T5691] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 83.295438][ T5691] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 83.441742][ T5701] set_capacity_and_notify: 18 callbacks suppressed [ 83.441761][ T5701] loop2: detected capacity change from 0 to 1024 [ 83.445655][ T5701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.475445][ T5701] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 83.477467][ T5701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.481264][ T28] audit: type=1400 audit(1785207498.235:494): avc: denied { write } for pid=5700 comm="syz.2.810" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.482951][ T5701] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 83.487757][ T28] audit: type=1400 audit(1785207498.235:495): avc: denied { append } for pid=5700 comm="syz.2.810" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.494830][ T28] audit: type=1400 audit(1785207498.235:496): avc: denied { write } for pid=5700 comm="syz.2.810" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.509638][ T5701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.513712][ T5708] tipc: Started in network mode [ 83.514531][ T5708] tipc: Node identity ac14142f, cluster identity 4711 [ 83.516589][ T5708] tipc: New replicast peer: 127.0.0.1 [ 83.517992][ T5708] tipc: Enabled bearer , priority 10 [ 83.550276][ T5710] loop2: detected capacity change from 0 to 512 [ 83.632683][ T5714] loop2: detected capacity change from 0 to 8192 [ 83.915307][ T5720] loop4: detected capacity change from 0 to 1024 [ 83.922579][ T5720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.925163][ T5720] EXT4-fs: Ignoring removed orlov option [ 83.931416][ T5720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.934876][ T5720] EXT4-fs (loop4): shut down requested (2) [ 83.946656][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.097553][ T28] audit: type=1400 audit(1785207498.845:497): avc: denied { read } for pid=5729 comm="syz.5.819" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.141772][ T5732] loop5: detected capacity change from 0 to 8192 [ 84.495355][ T5754] loop0: detected capacity change from 0 to 8192 [ 84.604730][ T5758] loop2: detected capacity change from 0 to 8192 [ 84.629601][ T11] tipc: Node number set to 2886997039 [ 84.692407][ T5762] loop2: detected capacity change from 0 to 8192 [ 84.901126][ T5773] loop4: detected capacity change from 0 to 512 [ 84.911595][ T5773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.913641][ T5773] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.966183][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.007768][ T28] audit: type=1400 audit(1785207499.755:498): avc: denied { read } for pid=5780 comm="syz.4.837" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.037878][ T28] audit: type=1400 audit(1785207499.785:499): avc: denied { mount } for pid=5782 comm="syz.4.838" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.191725][ T5790] loop1: detected capacity change from 0 to 8192 [ 85.389494][ T28] audit: type=1400 audit(1785207500.135:500): avc: denied { read } for pid=5803 comm="syz.0.846" path="socket:[11264]" dev="sockfs" ino=11264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.687827][ T5815] EXT4-fs: Ignoring removed nobh option [ 85.690294][ T5815] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.699039][ T5815] EXT4-fs (loop4): 1 truncate cleaned up [ 85.700694][ T5815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.706711][ T5815] EXT4-fs (loop4): shut down requested (2) [ 85.708014][ T28] audit: type=1400 audit(1785207500.455:501): avc: denied { write } for pid=5814 comm="syz.4.851" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.721216][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.743925][ T28] audit: type=1400 audit(1785207500.495:502): avc: denied { execute } for pid=5821 comm="syz.2.853" name="file0" dev="tmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.744068][ T5822] process 'syz.2.853' launched './file0' with NULL argv: empty string added [ 85.758991][ T5822] Invalid argument reading file caps for ./file0 [ 86.682005][ T5864] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.702062][ T5864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.704293][ T5864] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.729101][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.762798][ T5874] blktrace: Concurrent blktraces are not allowed on sg0 [ 86.775013][ T5875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.786101][ T5875] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.805405][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.839670][ T5881] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.898964][ T5889] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.903060][ T5889] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 86.904318][ T5889] FAT-fs (loop4): Filesystem has been set read-only [ 86.905443][ T5889] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200) [ 87.109323][ T5899] blktrace: Concurrent blktraces are not allowed on sg0 [ 87.237799][ T5915] ISOFS: unable to read i-node block [ 87.238675][ T5915] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 87.358253][ T5929] __nla_validate_parse: 1 callbacks suppressed [ 87.358266][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 87.360621][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.897'. [ 87.364014][ T5929] geneve2: entered promiscuous mode [ 87.364844][ T5929] geneve2: entered allmulticast mode [ 87.366221][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.367746][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.369190][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.371940][ T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.409810][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 87.745790][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.747289][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.940827][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.946848][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.058301][ T5243] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.059913][ T5243] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.061437][ T5243] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.064522][ T5243] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.475120][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 88.475137][ T28] audit: type=1400 audit(1785207503.225:513): avc: denied { listen } for pid=5979 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.757389][ T5992] set_capacity_and_notify: 18 callbacks suppressed [ 88.757410][ T5992] loop1: detected capacity change from 0 to 8192 [ 88.786537][ T6004] loop0: detected capacity change from 0 to 512 [ 88.796970][ T6004] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 88.820464][ T6010] loop5: detected capacity change from 0 to 256 [ 88.826732][ T6010] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.837718][ T6010] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.864843][ T28] audit: type=1400 audit(1785207503.615:514): avc: denied { write } for pid=5999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.873197][ T5243] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 88.906228][ T6020] loop5: detected capacity change from 0 to 512 [ 88.915175][ T6020] EXT4-fs: inline encryption not supported [ 88.922611][ T28] audit: type=1400 audit(1785207503.675:515): avc: denied { write } for pid=6021 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.936329][ T6020] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 88.938565][ T6020] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.929: invalid indirect mapped block 2683928664 (level 1) [ 88.941727][ T6020] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 88.942106][ T6020] EXT4-fs (loop5): 1 truncate cleaned up [ 88.949547][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 88.950552][ C1] EXT4-fs (loop5): initial error at time 1785207503: ext4_free_branches:1023: inode 13 [ 88.952153][ C1] EXT4-fs (loop5): last error at time 1785207503: ext4_free_branches:1023: inode 13 [ 88.954982][ T6020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.970554][ T6027] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 88.975633][ T28] audit: type=1400 audit(1785207503.725:516): avc: denied { write } for pid=6018 comm="syz.5.929" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.976781][ T6020] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.929: invalid indirect mapped block 4294967295 (level 0) [ 88.986799][ T6020] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.929: invalid indirect mapped block 65536 (level 1) [ 89.005780][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.054792][ T6032] loop5: detected capacity change from 0 to 8192 [ 89.101391][ T6039] loop0: detected capacity change from 0 to 128 [ 89.103075][ T6039] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.253249][ T28] audit: type=1400 audit(1785207504.005:517): avc: denied { write } for pid=6046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.277115][ T6060] loop2: detected capacity change from 0 to 512 [ 89.286871][ T6060] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 89.297052][ T28] audit: type=1400 audit(1785207504.045:518): avc: denied { write } for pid=6061 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.342983][ T5242] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 89.508762][ T6081] netlink: 64 bytes leftover after parsing attributes in process `syz.4.944'. [ 89.539385][ T28] audit: type=1400 audit(1785207504.285:519): avc: denied { write } for pid=6075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.595924][ T28] audit: type=1400 audit(1785207504.345:520): avc: denied { write } for pid=6093 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.015775][ T6112] netlink: 'syz.5.954': attribute type 12 has an invalid length. [ 90.017632][ T6112] netlink: 'syz.5.954': attribute type 29 has an invalid length. [ 90.019049][ T6112] netlink: 148 bytes leftover after parsing attributes in process `syz.5.954'. [ 90.021304][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.954'. [ 90.044756][ T6114] loop5: detected capacity change from 0 to 512 [ 90.054536][ T6114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.063502][ T6114] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.078398][ T28] audit: type=1400 audit(1785207504.825:521): avc: denied { write } for pid=6113 comm="syz.5.955" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.084821][ T28] audit: type=1400 audit(1785207504.835:522): avc: denied { write } for pid=6113 comm="syz.5.955" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 90.100632][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.242981][ T6128] loop1: detected capacity change from 0 to 8192 [ 90.285664][ T6130] loop5: detected capacity change from 0 to 8192 [ 90.605273][ T6146] tap0: tun_chr_ioctl cmd 1074025675 [ 90.606408][ T6146] tap0: persist enabled [ 90.616664][ T6146] tap0: tun_chr_ioctl cmd 1074025675 [ 90.617688][ T6146] tap0: persist enabled [ 90.725586][ T6154] VFS: file-max limit 0 reached [ 90.989165][ T6179] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.993123][ T6179] EXT4-fs (loop2): 1 orphan inode deleted [ 90.994527][ T6179] EXT4-fs (loop2): 1 truncate cleaned up [ 90.997715][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.019986][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.664027][ T6220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.705026][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.979199][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 91.980752][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 92.561260][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.569311][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.579292][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.606344][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.614777][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.625291][ T6258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.635677][ T6258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.648263][ T6258] veth1_vlan: left promiscuous mode [ 92.654096][ T6258] veth0_vlan: left promiscuous mode [ 92.661041][ T6258] veth0_vlan: entered promiscuous mode [ 92.667602][ T6258] veth1_vlan: entered promiscuous mode [ 92.677235][ T6258] veth1_macvtap: left promiscuous mode [ 92.688342][ T6258] veth0_macvtap: left promiscuous mode [ 92.700482][ T6258] veth0_macvtap: entered promiscuous mode [ 92.707213][ T6258] veth1_macvtap: entered promiscuous mode [ 92.716382][ T6258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.725126][ T6258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.735392][ T6258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.743998][ T6258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.766455][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.773606][ T5218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.783931][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.791032][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.822722][ T5186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.831625][ T5186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.843910][ T5186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.856200][ T5186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.886918][ T6273] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.904618][ T6273] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.072564][ T6283] syzkaller1: entered promiscuous mode [ 93.078191][ T6283] syzkaller1: entered allmulticast mode [ 93.344582][ T6296] tap0: tun_chr_ioctl cmd 1074025675 [ 93.355498][ T6296] tap0: persist enabled [ 93.361178][ T6296] tap0: tun_chr_ioctl cmd 1074025675 [ 93.366935][ T6296] tap0: persist enabled [ 93.382824][ T6301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.406720][ T6301] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.436107][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.616255][ T6328] EXT4-fs: Ignoring removed bh option [ 93.645593][ T6332] syzkaller1: entered promiscuous mode [ 93.651710][ T6332] syzkaller1: entered allmulticast mode [ 93.661778][ T6328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.695359][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 93.695376][ T28] audit: type=1400 audit(1785207508.445:532): avc: denied { write } for pid=6327 comm="syz.5.1037" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.723896][ T28] audit: type=1400 audit(1785207508.445:533): avc: denied { write } for pid=6327 comm="syz.5.1037" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.723989][ T6328] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.1037: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 93.767836][ T6328] EXT4-fs (loop5): Remounting filesystem read-only [ 93.798114][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.817322][ T6344] set_capacity_and_notify: 10 callbacks suppressed [ 93.817371][ T6344] loop5: detected capacity change from 0 to 7 [ 94.182044][ T6364] loop1: detected capacity change from 0 to 1024 [ 94.207562][ T6364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.240444][ T6364] EXT4-fs: inline encryption not supported [ 94.246628][ T6364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.272782][ T6364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.289777][ T6364] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.324814][ T28] audit: type=1400 audit(1785207509.075:534): avc: denied { write } for pid=6363 comm="syz.1.1050" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.358142][ T6364] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1050: bg 0: block 3: invalid block bitmap [ 94.390040][ T6364] EXT4-fs (loop1): Remounting filesystem read-only [ 94.399776][ T5243] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5075: inode #15: block 3: len 1: ext4_ext_map_blocks returned -30 [ 94.403393][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.435494][ T6364] syz.1.1050 (6364) used greatest stack depth: 9328 bytes left [ 94.438101][ T3361] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.472657][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.546651][ T28] audit: type=1400 audit(1785207509.295:535): avc: denied { setopt } for pid=6379 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.583777][ T28] audit: type=1400 audit(1785207509.315:536): avc: denied { read } for pid=6379 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.601576][ T6378] loop0: detected capacity change from 0 to 8192 [ 94.764917][ T6388] loop1: detected capacity change from 0 to 8192 [ 95.037382][ T6403] loop5: detected capacity change from 0 to 7 [ 95.166543][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 95.176682][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 95.226823][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 95.333607][ T6424] loop1: detected capacity change from 0 to 512 [ 95.342924][ T6424] EXT4-fs: Ignoring removed oldalloc option [ 95.350175][ T6424] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.372521][ T6424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.387042][ T6424] ext4 filesystem being mounted at /274/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.400067][ T28] audit: type=1400 audit(1785207510.155:537): avc: denied { write } for pid=6423 comm="syz.1.1071" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.423413][ T28] audit: type=1400 audit(1785207510.175:538): avc: denied { setattr } for pid=6423 comm="syz.1.1071" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.493322][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.538343][ T6426] loop5: detected capacity change from 0 to 256 [ 95.599261][ T6431] loop0: detected capacity change from 0 to 8192 [ 96.256793][ T6444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1077'. [ 96.273640][ T28] audit: type=1326 audit(1785207511.015:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.5.1076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cd7cde99 code=0x7ffc0000 [ 96.297476][ T6444] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1077'. [ 96.321154][ T28] audit: type=1326 audit(1785207511.025:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.5.1076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cd7cde99 code=0x7ffc0000 [ 96.367309][ T28] audit: type=1326 audit(1785207511.025:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.5.1076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cd7cde99 code=0x7ffc0000 [ 96.642922][ T6455] syzkaller1: entered promiscuous mode [ 96.650743][ T6455] syzkaller1: entered allmulticast mode [ 96.745449][ T6459] loop2: detected capacity change from 0 to 8192 [ 96.775460][ T6339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.995755][ T6487] xt_hashlimit: size too large, truncated to 1048576 [ 97.283231][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 97.545063][ T6525] netlink: 'syz.0.1099': attribute type 21 has an invalid length. [ 97.589086][ T6525] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.812429][ T6542] loop0: detected capacity change from 0 to 8192 [ 98.068413][ T6573] EXT4-fs: Ignoring removed bh option [ 98.088779][ T6573] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 98.112814][ T6573] EXT4-fs (loop5): 1 truncate cleaned up [ 98.122614][ T6573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.183909][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.202489][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'. [ 98.383811][ T6592] netlink: 'syz.5.1112': attribute type 21 has an invalid length. [ 98.392382][ T6592] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.435653][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1113'. [ 98.464522][ T6602] 9p: Bad value for 'wfdno' [ 98.627194][ T6609] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 98.949991][ T6616] set_capacity_and_notify: 3 callbacks suppressed [ 98.950009][ T6616] loop0: detected capacity change from 0 to 512 [ 99.056659][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1120'. [ 99.086552][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'. [ 99.095932][ T6625] netlink: 'syz.4.1124': attribute type 21 has an invalid length. [ 99.116160][ T6623] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1122'. [ 99.117095][ T6625] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.147731][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 99.147749][ T28] audit: type=1400 audit(1785207513.895:570): avc: denied { create } for pid=6628 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.187468][ T28] audit: type=1400 audit(1785207513.925:571): avc: denied { bind } for pid=6628 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.207107][ T28] audit: type=1400 audit(1785207513.925:572): avc: denied { getopt } for pid=6628 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.247995][ T6634] 9p: Bad value for 'wfdno' [ 99.361818][ T6637] loop1: detected capacity change from 0 to 8192 [ 99.811200][ T28] audit: type=1400 audit(1785207514.565:573): avc: denied { write } for pid=6662 comm="syz.5.1137" path="socket:[14486]" dev="sockfs" ino=14486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.881478][ T6665] netlink: 'syz.5.1138': attribute type 3 has an invalid length. [ 99.889605][ T6665] netlink: 'syz.5.1138': attribute type 4 has an invalid length. [ 99.899880][ T6665] netlink: 9067 bytes leftover after parsing attributes in process `syz.5.1138'. [ 100.249043][ T6670] loop5: detected capacity change from 0 to 512 [ 100.275451][ T6670] EXT4-fs: Ignoring removed orlov option [ 100.281537][ T6670] EXT4-fs: Ignoring removed bh option [ 100.291751][ T6670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.308876][ T6670] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.325247][ T6670] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 100.347995][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.729807][ T6695] loop4: detected capacity change from 0 to 8192 [ 101.435354][ T6597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.468118][ T6705] loop0: detected capacity change from 0 to 512 [ 101.475126][ T6705] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.491351][ T28] audit: type=1400 audit(1785207516.245:574): avc: denied { create } for pid=6702 comm="syz.2.1151" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.512759][ T6707] loop1: detected capacity change from 0 to 512 [ 101.523785][ T6707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.558649][ T6707] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1150: invalid indirect mapped block 4294967295 (level 0) [ 101.573971][ T6707] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 101.576936][ T6707] EXT4-fs (loop1): Remounting filesystem read-only [ 101.584542][ T6712] loop5: detected capacity change from 0 to 512 [ 101.586121][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 101.586140][ C0] EXT4-fs (loop1): initial error at time 1785207516: ext4_free_branches:1023: inode 16 [ 101.586168][ C0] EXT4-fs (loop1): last error at time 1785207516: ext4_free_branches:1023: inode 16 [ 101.624868][ T6707] EXT4-fs (loop1): 1 orphan inode deleted [ 101.630653][ T6707] EXT4-fs (loop1): 1 truncate cleaned up [ 101.636786][ T6707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.663572][ T6712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.679702][ T6712] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.694415][ T6714] loop2: detected capacity change from 0 to 8192 [ 101.714171][ T28] audit: type=1400 audit(1785207516.455:575): avc: denied { write } for pid=6711 comm="syz.5.1153" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.744673][ T28] audit: type=1400 audit(1785207516.465:576): avc: denied { ioctl } for pid=6711 comm="syz.5.1153" path="/119/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.760151][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.767920][ T28] audit: type=1400 audit(1785207516.465:577): avc: denied { setattr } for pid=6711 comm="syz.5.1153" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.799009][ T28] audit: type=1400 audit(1785207516.465:578): avc: denied { write } for pid=6711 comm="syz.5.1153" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.805835][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.821107][ T28] audit: type=1400 audit(1785207516.465:579): avc: denied { read write } for pid=6711 comm="syz.5.1153" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.955095][ T6718] loop0: detected capacity change from 0 to 8192 [ 102.865335][ T6753] loop5: detected capacity change from 0 to 2048 [ 102.904572][ T6753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.961570][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.077055][ T6773] netlink: 'syz.1.1174': attribute type 3 has an invalid length. [ 103.114036][ T6773] netlink: 'syz.1.1174': attribute type 4 has an invalid length. [ 103.124761][ T6773] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.1174'. [ 103.636954][ T6802] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 103.645745][ T6802] FAT-fs (loop0): Filesystem has been set read-only [ 103.715461][ T6812] program syz.0.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.759010][ T6816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.771885][ T6816] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.820039][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.486957][ T6836] set_capacity_and_notify: 4 callbacks suppressed [ 104.488522][ T6836] loop5: detected capacity change from 0 to 512 [ 104.506261][ T6836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.542863][ T6836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.586010][ T6836] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.657460][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.752436][ T6848] sctp: [Deprecated]: syz.5.1203 (pid 6848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.752436][ T6848] Use struct sctp_sack_info instead [ 104.798233][ T6839] loop4: detected capacity change from 0 to 256 [ 104.798242][ T6850] loop0: detected capacity change from 0 to 512 [ 104.854280][ T6850] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1205: bg 0: block 127: padding at end of block bitmap is not set [ 104.868714][ T6850] loop0: lost filesystem error report for type 5 error -117 [ 104.869870][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 104.889015][ C0] EXT4-fs (loop0): initial error at time 1785207519: ext4_validate_block_bitmap:441 [ 104.891110][ T6850] ------------[ cut here ]------------ [ 104.899100][ C0] EXT4-fs (loop0): last error at time 1785207519: ext4_validate_block_bitmap:441 [ 104.904606][ T6850] EA inode 11 i_nlink=0 [ 104.904621][ T6850] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.0.1205/6850 [ 104.904674][ T6850] Modules linked in: [ 104.904737][ T6850] CPU: 1 UID: 0 PID: 6850 Comm: syz.0.1205 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.904765][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.904781][ T6850] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 104.904817][ T6850] Code: 86 ba 96 ff 49 8d 7e 40 4c 8d 2d fb 98 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 01 02 da 03 90 90 90 90 90 90 90 [ 104.904840][ T6850] RSP: 0018:ffffc90001daf7f8 EFLAGS: 00010246 [ 104.904920][ T6850] RAX: ffff8881049072b0 RBX: ffff888105ebd648 RCX: ffffffff81c29d46 [ 104.904937][ T6850] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3630 [ 104.904954][ T6850] RBP: 000000000000000b R08: 0001888105ebd5fb R09: 0000000000000000 [ 104.904995][ T6850] R10: ffffc90001daf728 R11: 0001c90001daf728 R12: ffff888105ebd5f8 [ 104.905013][ T6850] R13: ffffffff871d3630 R14: ffff888105ebd5b0 R15: 0000000000000001 [ 104.905027][ T6850] FS: 00007fe4eac576c0(0000) GS:ffff8882ae9cc000(0000) knlGS:0000000000000000 [ 104.905140][ T6850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.905158][ T6850] CR2: 00007f657d5df000 CR3: 000000010279e000 CR4: 00000000003506f0 [ 104.905231][ T6850] Call Trace: [ 104.905240][ T6850] [ 104.905252][ T6850] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 104.905291][ T6850] ext4_xattr_delete_inode+0x6b5/0x790 [ 104.905437][ T6850] ext4_evict_inode+0xb18/0xdf0 [ 104.905466][ T6850] ? __pfx_ext4_evict_inode+0x10/0x10 [ 104.905491][ T6850] evict+0x2a5/0x510 [ 104.905517][ T6850] iput+0x430/0x5a0 [ 104.905547][ T6850] ext4_process_orphan+0x1a4/0x1c0 [ 104.905627][ T6850] ext4_orphan_cleanup+0x6a6/0xa10 [ 104.905673][ T6850] ? ext4_register_li_request+0x403/0x440 [ 104.905712][ T6850] ext4_fill_super+0x33ab/0x3760 [ 104.905750][ T6850] ? set_blocksize+0x14c/0x270 [ 104.915726][ C0] [ 104.919161][ T6850] ? __pfx_ext4_fill_super+0x10/0x10 [ 104.919200][ T6850] get_tree_bdev_flags+0x291/0x300 [ 104.919225][ T6850] ? __pfx_ext4_fill_super+0x10/0x10 [ 104.919274][ T6850] get_tree_bdev+0x1f/0x30 [ 104.919296][ T6850] ext4_get_tree+0x1c/0x30 [ 104.919328][ T6850] vfs_get_tree+0x57/0x1d0 [ 104.919352][ T6850] do_new_mount+0x288/0x8d0 [ 104.919460][ T6850] path_mount+0x4ad/0xb90 [ 104.919489][ T6850] __se_sys_mount+0x28c/0x2e0 [ 104.919550][ T6850] __x64_sys_mount+0x67/0x80 [ 104.919586][ T6850] x64_sys_call+0x2d61/0x3020 [ 104.919690][ T6850] do_syscall_64+0x136/0x3c0 [ 104.919720][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.919747][ T6850] RIP: 0033:0x7fe4ec1ff10a [ 104.919768][ T6850] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.919800][ T6850] RSP: 002b:00007fe4eac56e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.919826][ T6850] RAX: ffffffffffffffda RBX: 00007fe4eac56ee0 RCX: 00007fe4ec1ff10a [ 104.919844][ T6850] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fe4eac56ea0 [ 104.919861][ T6850] RBP: 0000200000000180 R08: 00007fe4eac56ee0 R09: 0000000000000000 [ 104.919879][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 104.919895][ T6850] R13: 00007fe4eac56ea0 R14: 000000000000047a R15: 00002000000001c0 [ 104.919924][ T6850] [ 104.919933][ T6850] ---[ end trace 0000000000000000 ]--- [ 105.010736][ T6850] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.1205: bit already cleared for inode 11 [ 105.010795][ T6850] loop0: lost filesystem error report for type 5 error -117 [ 105.010956][ T6850] EXT4-fs (loop0): 1 orphan inode deleted [ 105.011453][ T6850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.131806][ T6860] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 105.222073][ T6856] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 105.305917][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.363164][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 105.363235][ T28] audit: type=1400 audit(1785207520.115:591): avc: denied { name_bind } for pid=6863 comm="syz.5.1213" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 105.522052][ T6878] loop1: detected capacity change from 0 to 512 [ 105.532117][ T6878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.540577][ T6878] EXT4-fs: inline encryption not supported [ 105.552740][ T6878] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 105.568958][ T6878] EXT4-fs (loop1): 1 truncate cleaned up [ 105.575357][ T6878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.590677][ T28] audit: type=1400 audit(1785207521.340:592): avc: denied { write } for pid=6877 comm="syz.1.1218" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.592257][ T6878] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full [ 105.662888][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.692977][ T6881] sctp: [Deprecated]: syz.4.1219 (pid 6881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.692977][ T6881] Use struct sctp_sack_info instead [ 105.890753][ T6891] loop0: detected capacity change from 0 to 8192 [ 105.897063][ T6885] loop1: detected capacity change from 0 to 256 [ 106.033839][ T6898] loop4: detected capacity change from 0 to 128 [ 106.406649][ T6919] loop5: detected capacity change from 0 to 512 [ 106.479157][ T6919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.524706][ T6919] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.537648][ T6919] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1234: corrupted xattr block 33: invalid header [ 106.559679][ T6919] EXT4-fs (loop5): Remounting filesystem read-only [ 106.573615][ T6919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 106.595766][ T6919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 106.610284][ T6919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 106.611030][ T28] audit: type=1400 audit(1785207522.360:593): avc: denied { append } for pid=6918 comm="syz.5.1234" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.698475][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.785058][ T28] audit: type=1400 audit(1785207522.530:594): avc: denied { setopt } for pid=6940 comm="syz.1.1243" lport=36686 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 106.842236][ T6939] loop5: detected capacity change from 0 to 8192 [ 106.851475][ T6943] loop1: detected capacity change from 0 to 1024 [ 106.894967][ T6943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.466906][ T28] audit: type=1326 audit(1785207523.210:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.4.1249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd06630de99 code=0x0 [ 109.115119][ T6900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.137660][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.287444][ T7000] FAT-fs (loop1): bogus number of FAT sectors [ 109.298025][ T7000] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 109.324414][ T7000] FAT-fs (loop1): Can't find a valid FAT filesystem [ 109.368607][ T28] audit: type=1400 audit(1785207525.110:596): avc: denied { setopt } for pid=6995 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.017015][ T7014] set_capacity_and_notify: 5 callbacks suppressed [ 110.017080][ T7014] loop2: detected capacity change from 0 to 512 [ 110.025082][ T3531] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.030446][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 110.038122][ T7014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.049438][ T7014] EXT4-fs: inline encryption not supported [ 110.057587][ T7014] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 110.075810][ T7014] EXT4-fs (loop2): 1 truncate cleaned up [ 110.082107][ T7014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.102825][ T7014] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full [ 110.104917][ T28] audit: type=1400 audit(1785207525.850:597): avc: denied { write } for pid=7013 comm="syz.2.1265" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.140794][ T7024] loop5: detected capacity change from 0 to 8192 [ 110.152163][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.237801][ T28] audit: type=1400 audit(1785207525.980:598): avc: denied { write } for pid=7030 comm="syz.2.1273" name="tracing_on" dev="tracefs" ino=2140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 110.271019][ T7032] xt_hashlimit: size too large, truncated to 1048576 [ 110.274162][ T28] audit: type=1400 audit(1785207525.980:599): avc: denied { open } for pid=7030 comm="syz.2.1273" path="/247/dir0/tracing_on" dev="tracefs" ino=2140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 110.324107][ T7039] loop2: detected capacity change from 0 to 128 [ 110.335742][ T7039] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.374555][ T7039] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.536199][ T5243] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.545667][ T5243] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.570506][ T5243] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.580991][ T5243] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.694494][ T7055] loop4: detected capacity change from 0 to 8192 [ 110.778618][ T7057] loop2: detected capacity change from 0 to 8192 [ 111.353727][ T28] audit: type=1400 audit(1785207527.100:600): avc: denied { getopt } for pid=7064 comm="syz.5.1285" lport=38206 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 111.467923][ T7073] loop5: detected capacity change from 0 to 512 [ 111.476330][ T7073] EXT4-fs (loop5): orphan cleanup on readonly fs [ 111.482769][ T7073] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 111.491424][ T7073] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 111.506198][ T7073] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1289: attempt to clear invalid blocks 2 len 1 [ 111.509582][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 111.519169][ T7073] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 111.525506][ C0] EXT4-fs (loop5): initial error at time 1785207527: ext4_mb_generate_buddy:1317 [ 111.525537][ C0] EXT4-fs (loop5): last error at time 1785207527: ext4_mb_generate_buddy:1317 [ 111.535272][ T7073] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1289: invalid indirect mapped block 1819239214 (level 0) [ 111.543802][ C0] : inode 13 [ 111.553117][ T7073] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 111.567363][ C0] [ 111.583685][ T7073] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1289: invalid indirect mapped block 1819239214 (level 1) [ 111.597973][ T7073] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 111.598895][ T7073] EXT4-fs (loop5): 1 truncate cleaned up [ 111.620270][ T7073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.672985][ T7076] loop0: detected capacity change from 0 to 8192 [ 111.698513][ T7073] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 111.719770][ T7073] EXT4-fs error (device loop5): __ext4_remount:6844: comm syz.5.1289: Abort forced by user [ 111.735992][ T7073] EXT4-fs (loop5): Remounting filesystem read-only [ 111.743033][ T7073] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 111.752763][ T7079] xt_hashlimit: size too large, truncated to 1048576 [ 111.763608][ T3289] FAULT_INJECTION: forcing a failure. [ 111.763608][ T3289] name fail_page_alloc, interval 1, probability 100, space 0, times 1 [ 111.763899][ T7085] FAULT_INJECTION: forcing a failure. [ 111.763899][ T7085] name fail_page_alloc, interval 1, probability 100, space 0, times 9 [ 111.777686][ T7078] FAULT_INJECTION: forcing a failure. [ 111.777686][ T7078] name fail_page_alloc, interval 1, probability 100, space 0, times 9 [ 111.791478][ T7085] CPU: 0 UID: 0 PID: 7085 Comm: syz.4.1293 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 111.791523][ T7085] Tainted: [W]=WARN [ 111.791531][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.791621][ T7085] Call Trace: [ 111.791628][ T7085] [ 111.791637][ T7085] __dump_stack+0x1d/0x30 [ 111.791664][ T7085] dump_stack_lvl+0x95/0xd0 [ 111.791687][ T7085] dump_stack+0x15/0x1b [ 111.791719][ T7085] should_fail_ex+0x25e/0x270 [ 111.791750][ T7085] should_fail_alloc_page+0xf2/0x100 [ 111.791777][ T7085] __alloc_frozen_pages_noprof+0x108/0x350 [ 111.791938][ T7085] alloc_pages_mpol+0xa9/0x1d0 [ 111.791971][ T7085] alloc_pages_noprof+0x8f/0x140 [ 111.792004][ T7085] pte_alloc_one+0x1c/0xc0 [ 111.792058][ T7085] handle_mm_fault+0x1436/0x2da0 [ 111.792099][ T7085] __get_user_pages+0x129c/0x1f10 [ 111.792210][ T7085] __mm_populate+0x242/0x390 [ 111.792277][ T7085] vm_mmap_pgoff+0x23b/0x2d0 [ 111.792302][ T7085] ksys_mmap_pgoff+0xc1/0x310 [ 111.792330][ T7085] ? __x64_sys_mmap+0x49/0x70 [ 111.792363][ T7085] x64_sys_call+0x14df/0x3020 [ 111.792467][ T7085] do_syscall_64+0x136/0x3c0 [ 111.792493][ T7085] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 111.792537][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.792561][ T7085] RIP: 0033:0x7fd06630de99 [ 111.792650][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.792670][ T7085] RSP: 002b:00007fd064d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 111.792695][ T7085] RAX: ffffffffffffffda RBX: 00007fd066595fa0 RCX: 00007fd06630de99 [ 111.792783][ T7085] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 111.792799][ T7085] RBP: 00007fd0663a3eaf R08: ffffffffffffffff R09: 0000000000000000 [ 111.792814][ T7085] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 111.792828][ T7085] R13: 00007fd066596038 R14: 00007fd066595fa0 R15: 00007fff313fbc58 [ 111.792849][ T7085] [ 111.918215][ T3289] CPU: 0 UID: 0 PID: 3289 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 111.918252][ T3289] Tainted: [W]=WARN [ 111.918268][ T3289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 111.918280][ T3289] Call Trace: [ 111.918290][ T3289] [ 111.918299][ T3289] __dump_stack+0x1d/0x30 [ 111.918369][ T3289] dump_stack_lvl+0x95/0xd0 [ 111.918392][ T3289] dump_stack+0x15/0x1b [ 111.918413][ T3289] should_fail_ex+0x25e/0x270 [ 111.918445][ T3289] should_fail_alloc_page+0xf2/0x100 [ 111.918498][ T3289] __alloc_frozen_pages_noprof+0x108/0x350 [ 111.918532][ T3289] alloc_pages_mpol+0xa9/0x1d0 [ 111.918564][ T3289] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 111.918605][ T3289] handle_mm_fault+0x1020/0x2da0 [ 111.918646][ T3289] do_user_addr_fault+0x402/0x1060 [ 111.918684][ T3289] ? xas_load+0x413/0x430 [ 111.918709][ T3289] exc_page_fault+0x62/0xa0 [ 111.918744][ T3289] asm_exc_page_fault+0x26/0x30 [ 111.918804][ T3289] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 111.918840][ T3289] Code: 1f 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 111.918861][ T3289] RSP: 0018:ffffc900010c3ac0 EFLAGS: 00050206 [ 111.918931][ T3289] RAX: ffff88810460f2b0 RBX: ffff8881099ff000 RCX: 0000000000000200 [ 111.918947][ T3289] RDX: 0000000000000000 RSI: ffff8881099ff000 RDI: 00007f657d5c2000 [ 111.918998][ T3289] RBP: 00007f657d5c2000 R08: 00000000000001c8 R09: 0000000000000000 [ 111.919059][ T3289] R10: 00018881099ff000 R11: 00018881099ff1ff R12: 00007f657d5c2200 [ 111.919075][ T3289] R13: ffffc900010c3df8 R14: 0000000000000200 R15: 00007ffffffff000 [ 111.919096][ T3289] _copy_to_iter+0x141/0xea0 [ 111.919134][ T3289] copy_page_to_iter+0x174/0x210 [ 111.919214][ T3289] filemap_read+0x3ed/0xa20 [ 111.919245][ T3289] blkdev_read_iter+0x21e/0x2d0 [ 111.919285][ T3289] vfs_read+0x699/0x7c0 [ 111.919315][ T3289] ? __pfx_blkdev_read_iter+0x10/0x10 [ 111.919374][ T3289] ksys_read+0xdc/0x1a0 [ 111.919450][ T3289] __x64_sys_read+0x40/0x50 [ 111.919471][ T3289] x64_sys_call+0x2886/0x3020 [ 111.919498][ T3289] do_syscall_64+0x136/0x3c0 [ 111.919524][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.919618][ T3289] RIP: 0033:0x7f657d87c407 [ 111.919635][ T3289] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 111.919654][ T3289] RSP: 002b:00007fff13680af0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 111.919691][ T3289] RAX: ffffffffffffffda RBX: 00007f657d78e880 RCX: 00007f657d87c407 [ 111.919706][ T3289] RDX: 0000000000000200 RSI: 00007f657d5c2000 RDI: 0000000000000009 [ 111.919720][ T3289] RBP: 000055ee3f9818e0 R08: 0000000000000000 R09: 0000000000000000 [ 111.919735][ T3289] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 111.919748][ T3289] R13: 0000000000100000 R14: 000055ee3f98baf8 R15: 00007f657dfd239c [ 111.919887][ T3289] [ 112.100548][ T3531] Bluetooth: hci1: command 0x1003 tx timeout [ 112.105047][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.2.1292 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 112.105096][ T7078] Tainted: [W]=WARN [ 112.105104][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.105117][ T7078] Call Trace: [ 112.105125][ T7078] [ 112.105134][ T7078] __dump_stack+0x1d/0x30 [ 112.105160][ T7078] dump_stack_lvl+0x95/0xd0 [ 112.105195][ T7078] dump_stack+0x15/0x1b [ 112.105216][ T7078] should_fail_ex+0x25e/0x270 [ 112.105295][ T7078] should_fail_alloc_page+0xf2/0x100 [ 112.105322][ T7078] __alloc_frozen_pages_noprof+0x108/0x350 [ 112.105355][ T7078] alloc_pages_mpol+0xa9/0x1d0 [ 112.105435][ T7078] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 112.105522][ T7078] handle_mm_fault+0x1020/0x2da0 [ 112.105563][ T7078] do_user_addr_fault+0x634/0x1060 [ 112.105596][ T7078] ? trace_page_fault_user+0x1f/0xa0 [ 112.105632][ T7078] exc_page_fault+0x62/0xa0 [ 112.105667][ T7078] asm_exc_page_fault+0x26/0x30 [ 112.105689][ T7078] RIP: 0033:0x7fe54e6bb044 [ 112.105774][ T7078] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 112.105794][ T7078] RSP: 002b:00007ffdd8416370 EFLAGS: 00010246 [ 112.105813][ T7078] RAX: 00007fe54d116000 RBX: 00007fe54d1366c0 RCX: 00007fe54e6fdc97 [ 112.105893][ T7078] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe54d1366c0 [ 112.105907][ T7078] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 112.105921][ T7078] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdd84164c0 [ 112.105936][ T7078] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 112.106003][ T7078] [ 112.106014][ T7078] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 112.111845][ T6974] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 112.228314][ T7090] loop2: detected capacity change from 0 to 512 [ 112.271687][ T7092] loop4: detected capacity change from 0 to 8192 [ 112.278976][ T7090] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.526919][ T7090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.536176][ T7090] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 112.549376][ T7090] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 112.549499][ T5059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.558244][ T7090] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.573858][ T7090] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1295: Invalid block bitmap block 0 in block_group 0 [ 112.588402][ T7090] loop2: lost filesystem error report for type 5 error -117 [ 112.588620][ T7090] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1295: Invalid block bitmap block 0 in block_group 0 [ 112.596199][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 112.596221][ C1] EXT4-fs (loop2): last error at time 1785207528: ext4_read_block_bitmap_nowait:483 [ 112.631087][ T7090] loop2: lost filesystem error report for type 5 error -117 [ 112.631895][ T7090] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1295: Invalid block bitmap block 0 in block_group 0 [ 112.671252][ T7090] loop2: lost filesystem error report for type 5 error -117 [ 112.671492][ T7090] Quota error (device loop2): write_blk: dquota write failed [ 112.689445][ T7090] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 112.725494][ T7090] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1295: Failed to acquire dquot type 1 [ 112.744219][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.751573][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.791605][ T7090] loop2: lost filesystem error report for type 5 error -28 [ 112.791881][ T7090] EXT4-fs (loop2): 1 orphan inode deleted [ 112.827047][ T7108] loop5: detected capacity change from 0 to 8192 [ 112.850003][ T5186] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 112.869888][ T5186] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 112.915962][ T5186] loop2: lost filesystem error report for type 5 error -117 [ 112.923484][ T7090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.960707][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.977076][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.064495][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.074904][ T5186] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.083992][ T5186] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.093299][ T5186] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.135004][ T5186] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.731622][ T7137] EXT4-fs: Ignoring removed bh option [ 113.752137][ T7137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.771111][ T28] audit: type=1400 audit(1785207529.520:601): avc: denied { append } for pid=7136 comm="syz.4.1310" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 113.819618][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.079265][ T7159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.128678][ T28] audit: type=1400 audit(1785207529.870:602): avc: denied { write } for pid=7158 comm="syz.0.1316" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.156110][ T28] audit: type=1400 audit(1785207529.870:603): avc: denied { write } for pid=7158 comm="syz.0.1316" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.168192][ T7167] FAULT_INJECTION: forcing a failure. [ 114.168192][ T7167] name fail_page_alloc, interval 1, probability 100, space 0, times 9 [ 114.180361][ T3288] FAULT_INJECTION: forcing a failure. [ 114.180361][ T3288] name fail_page_alloc, interval 1, probability 100, space 0, times 9 [ 114.191964][ T5242] kworker/u8:43: vmalloc error: size 16384, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 114.205364][ T28] audit: type=1400 audit(1785207529.870:604): avc: denied { mounton } for pid=7158 comm="syz.0.1316" path="/240/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.205576][ T7154] FAULT_INJECTION: forcing a failure. [ 114.205576][ T7154] name fail_page_alloc, interval 1, probability 100, space 0, times 5 [ 114.219591][ T3288] CPU: 0 UID: 0 PID: 3288 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.219640][ T3288] Tainted: [W]=WARN [ 114.219648][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.219726][ T3288] Call Trace: [ 114.219733][ T3288] [ 114.219742][ T3288] __dump_stack+0x1d/0x30 [ 114.219768][ T3288] dump_stack_lvl+0x95/0xd0 [ 114.219791][ T3288] dump_stack+0x15/0x1b [ 114.219845][ T3288] should_fail_ex+0x25e/0x270 [ 114.219899][ T3288] should_fail_alloc_page+0xf2/0x100 [ 114.219925][ T3288] __alloc_frozen_pages_noprof+0x108/0x350 [ 114.220002][ T3288] alloc_pages_mpol+0xa9/0x1d0 [ 114.220034][ T3288] folio_alloc_mpol_noprof+0x39/0x80 [ 114.220098][ T3288] shmem_get_folio_gfp+0x3ff/0xd90 [ 114.220130][ T3288] shmem_write_begin+0xfc/0x1f0 [ 114.220158][ T3288] generic_perform_write+0x186/0x490 [ 114.220188][ T3288] ? _raw_spin_unlock+0x9/0x30 [ 114.220295][ T3288] shmem_file_write_iter+0xc5/0xf0 [ 114.220393][ T3288] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 114.220455][ T3288] vfs_write+0x57d/0x990 [ 114.220480][ T3288] ksys_write+0xdc/0x1a0 [ 114.220502][ T3288] __x64_sys_write+0x40/0x50 [ 114.220586][ T3288] x64_sys_call+0x27e1/0x3020 [ 114.220612][ T3288] do_syscall_64+0x136/0x3c0 [ 114.220691][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.220741][ T3288] RIP: 0033:0x7f657d87c407 [ 114.220759][ T3288] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 114.220827][ T3288] RSP: 002b:00007fff13685640 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 114.220850][ T3288] RAX: ffffffffffffffda RBX: 00007f657d78e880 RCX: 00007f657d87c407 [ 114.220870][ T3288] RDX: 0000000000000020 RSI: 000055ee3f9e2b10 RDI: 0000000000000009 [ 114.220885][ T3288] RBP: 000055ee3f9e2b10 R08: 0000000000000000 R09: 0000000000000000 [ 114.220953][ T3288] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020 [ 114.220968][ T3288] R13: 000055ee3f98a090 R14: 00007f657d9c4ea0 R15: 000055ee0e31a9dd [ 114.221033][ T3288] [ 114.221572][ T3288] FAULT_INJECTION: forcing a failure. [ 114.221572][ T3288] name fail_page_alloc, interval 1, probability 100, space 0, times 4 [ 114.242470][ T3289] FAULT_INJECTION: forcing a failure. [ 114.242470][ T3289] name fail_page_alloc, interval 1, probability 100, space 0, times 4 [ 114.257634][ T7167] CPU: 0 UID: 0 PID: 7167 Comm: syz.5.1320 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.257670][ T7167] Tainted: [W]=WARN [ 114.257678][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.257707][ T7167] Call Trace: [ 114.257715][ T7167] [ 114.257724][ T7167] __dump_stack+0x1d/0x30 [ 114.257751][ T7167] dump_stack_lvl+0x95/0xd0 [ 114.257774][ T7167] dump_stack+0x15/0x1b [ 114.257796][ T7167] should_fail_ex+0x25e/0x270 [ 114.257827][ T7167] should_fail_alloc_page+0xf2/0x100 [ 114.257867][ T7167] __alloc_frozen_pages_noprof+0x108/0x350 [ 114.257901][ T7167] alloc_pages_mpol+0xa9/0x1d0 [ 114.257933][ T7167] alloc_pages_noprof+0x8f/0x140 [ 114.258041][ T7167] pte_alloc_one+0x1c/0xc0 [ 114.258076][ T7167] handle_mm_fault+0x1436/0x2da0 [ 114.258117][ T7167] __get_user_pages+0x129c/0x1f10 [ 114.258209][ T7167] __mm_populate+0x242/0x390 [ 114.258243][ T7167] vm_mmap_pgoff+0x23b/0x2d0 [ 114.258388][ T7167] ksys_mmap_pgoff+0xc1/0x310 [ 114.258416][ T7167] ? __x64_sys_mmap+0x49/0x70 [ 114.258458][ T7167] x64_sys_call+0x14df/0x3020 [ 114.258552][ T7167] do_syscall_64+0x136/0x3c0 [ 114.258579][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.258604][ T7167] RIP: 0033:0x7f22cd7cde99 [ 114.258632][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.258700][ T7167] RSP: 002b:00007f22cc227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.258724][ T7167] RAX: ffffffffffffffda RBX: 00007f22cda55fa0 RCX: 00007f22cd7cde99 [ 114.258778][ T7167] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 114.258795][ T7167] RBP: 00007f22cd863eaf R08: ffffffffffffffff R09: 0000000000000000 [ 114.258810][ T7167] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 114.258825][ T7167] R13: 00007f22cda56038 R14: 00007f22cda55fa0 R15: 00007ffe01372228 [ 114.258846][ T7167] [ 114.259663][ T7158] FAULT_INJECTION: forcing a failure. [ 114.259663][ T7158] name fail_page_alloc, interval 1, probability 100, space 0, times 3 [ 114.266804][ T7165] FAULT_INJECTION: forcing a failure. [ 114.266804][ T7165] name fail_page_alloc, interval 1, probability 100, space 0, times 3 [ 114.279659][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.0.1316 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.279696][ T7158] Tainted: [W]=WARN [ 114.279781][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.279795][ T7158] Call Trace: [ 114.279803][ T7158] [ 114.279811][ T7158] __dump_stack+0x1d/0x30 [ 114.279842][ T7158] dump_stack_lvl+0x95/0xd0 [ 114.279864][ T7158] dump_stack+0x15/0x1b [ 114.279885][ T7158] should_fail_ex+0x25e/0x270 [ 114.279916][ T7158] should_fail_alloc_page+0xf2/0x100 [ 114.279952][ T7158] __alloc_frozen_pages_noprof+0x108/0x350 [ 114.280020][ T7158] alloc_pages_mpol+0xa9/0x1d0 [ 114.280054][ T7158] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 114.280222][ T7158] handle_mm_fault+0x1020/0x2da0 [ 114.280263][ T7158] do_user_addr_fault+0x634/0x1060 [ 114.280296][ T7158] ? trace_page_fault_user+0x1f/0xa0 [ 114.280335][ T7158] exc_page_fault+0x62/0xa0 [ 114.280370][ T7158] asm_exc_page_fault+0x26/0x30 [ 114.280400][ T7158] RIP: 0033:0x7fe4ec1bb044 [ 114.280464][ T7158] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 114.280484][ T7158] RSP: 002b:00007fff8dedb6b0 EFLAGS: 00010246 [ 114.280505][ T7158] RAX: 00007fe4eac16000 RBX: 00007fe4eac366c0 RCX: 00007fe4ec1fdc97 [ 114.280520][ T7158] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe4eac366c0 [ 114.280535][ T7158] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 114.280617][ T7158] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff8dedb800 [ 114.280705][ T7158] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 114.280741][ T7158] [ 114.280767][ T7158] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 114.287328][ T5242] ,cpuset= [ 114.304279][ T3288] CPU: 0 UID: 0 PID: 3288 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.304316][ T3288] Tainted: [W]=WARN [ 114.304361][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.304374][ T3288] Call Trace: [ 114.304403][ T3288] [ 114.304413][ T3288] __dump_stack+0x1d/0x30 [ 114.304439][ T3288] dump_stack_lvl+0x95/0xd0 [ 114.304462][ T3288] dump_stack+0x15/0x1b [ 114.304483][ T3288] should_fail_ex+0x25e/0x270 [ 114.304541][ T3288] should_fail_alloc_page+0xf2/0x100 [ 114.304568][ T3288] __alloc_frozen_pages_noprof+0x108/0x350 [ 114.304601][ T3288] alloc_pages_mpol+0xa9/0x1d0 [ 114.304651][ T3288] folio_alloc_mpol_noprof+0x39/0x80 [ 114.304722][ T3288] shmem_get_folio_gfp+0x3ff/0xd90 [ 114.304754][ T3288] shmem_write_begin+0xfc/0x1f0 [ 114.304782][ T3288] generic_perform_write+0x186/0x490 [ 114.304807][ T3288] ? _raw_spin_unlock+0x9/0x30 [ 114.304900][ T3288] shmem_file_write_iter+0xc5/0xf0 [ 114.304952][ T3288] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 114.304983][ T3288] vfs_write+0x57d/0x990 [ 114.305007][ T3288] ksys_write+0xdc/0x1a0 [ 114.305030][ T3288] __x64_sys_write+0x40/0x50 [ 114.305097][ T3288] x64_sys_call+0x27e1/0x3020 [ 114.305203][ T3288] do_syscall_64+0x136/0x3c0 [ 114.305229][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.305253][ T3288] RIP: 0033:0x7f657d87c407 [ 114.305271][ T3288] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 114.305361][ T3288] RSP: 002b:00007fff136856c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 114.305390][ T3288] RAX: ffffffffffffffda RBX: 00007f657d78e880 RCX: 00007f657d87c407 [ 114.305406][ T3288] RDX: 0000000000000027 RSI: 000055ee3f9e2b10 RDI: 0000000000000009 [ 114.305433][ T3288] RBP: 000055ee3f9e2b10 R08: 0000000000000000 R09: 0000000000000000 [ 114.305447][ T3288] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000027 [ 114.305461][ T3288] R13: 000055ee3f98a090 R14: 00007f657d9c4ea0 R15: 000055ee0e31a9dd [ 114.305482][ T3288] [ 114.306209][ T7168] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.0.1316: unable to read itable block [ 114.311341][ T5242] / [ 114.315430][ T7168] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 114.320038][ T3289] CPU: 1 UID: 0 PID: 3289 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.320073][ T3289] Tainted: [W]=WARN [ 114.320080][ T3289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.320130][ T3289] Call Trace: [ 114.320137][ T3289] [ 114.320146][ T3289] __dump_stack+0x1d/0x30 [ 114.320171][ T3289] dump_stack_lvl+0x95/0xd0 [ 114.320194][ T3289] dump_stack+0x15/0x1b [ 114.320214][ T3289] should_fail_ex+0x25e/0x270 [ 114.320264][ T3289] should_fail_alloc_page+0xf2/0x100 [ 114.320291][ T3289] __alloc_frozen_pages_noprof+0x108/0x350 [ 114.320372][ T3289] alloc_pages_mpol+0xa9/0x1d0 [ 114.320404][ T3289] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 114.320484][ T3289] handle_mm_fault+0x1020/0x2da0 [ 114.320524][ T3289] do_user_addr_fault+0x402/0x1060 [ 114.320616][ T3289] ? xas_load+0x413/0x430 [ 114.320684][ T3289] exc_page_fault+0x62/0xa0 [ 114.320719][ T3289] asm_exc_page_fault+0x26/0x30 [ 114.320741][ T3289] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 114.320815][ T3289] Code: 1f 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 114.320835][ T3289] RSP: 0000:ffffc900010c3ac0 EFLAGS: 00050206 [ 114.320854][ T3289] RAX: ffff88810460f2b0 RBX: ffff88811e289000 RCX: 0000000000000200 [ 114.320870][ T3289] RDX: 0000000000000000 RSI: ffff88811e289000 RDI: 00007f657d5c2000 [ 114.320915][ T3289] RBP: 00007f657d5c2000 R08: 0000000000000a52 R09: 0000000000000000 [ 114.320930][ T3289] R10: 000188811e289000 R11: 000188811e2891ff R12: 00007f657d5c2200 [ 114.320946][ T3289] R13: ffffc900010c3df8 R14: 0000000000000200 R15: 00007ffffffff000 [ 114.320968][ T3289] _copy_to_iter+0x141/0xea0 [ 114.321140][ T3289] copy_page_to_iter+0x174/0x210 [ 114.321208][ T3289] filemap_read+0x3ed/0xa20 [ 114.321271][ T3289] blkdev_read_iter+0x21e/0x2d0 [ 114.321303][ T3289] vfs_read+0x699/0x7c0 [ 114.321324][ T3289] ? __pfx_blkdev_read_iter+0x10/0x10 [ 114.321386][ T3289] ksys_read+0xdc/0x1a0 [ 114.321412][ T3289] __x64_sys_read+0x40/0x50 [ 114.321492][ T3289] x64_sys_call+0x2886/0x3020 [ 114.321518][ T3289] do_syscall_64+0x136/0x3c0 [ 114.321585][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.321679][ T3289] RIP: 0033:0x7f657d87c407 [ 114.321765][ T3289] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 114.321785][ T3289] RSP: 002b:00007fff13680ab0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 114.321806][ T3289] RAX: ffffffffffffffda RBX: 00007f657d78e880 RCX: 00007f657d87c407 [ 114.321822][ T3289] RDX: 0000000000000200 RSI: 00007f657d5c2000 RDI: 0000000000000009 [ 114.321855][ T3289] RBP: 000055ee3f9836e0 R08: 0000000000000000 R09: 0000000000000000 [ 114.321869][ T3289] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 114.321891][ T3289] R13: 00000000003f0000 R14: 000055ee3f978648 R15: 00007f657dfd239c [ 114.321912][ T3289] [ 114.321942][ T7165] CPU: 1 UID: 0 PID: 7165 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.322039][ T7165] Tainted: [W]=WARN [ 114.322046][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.322059][ T7165] Call Trace: [ 114.322065][ T7165] [ 114.322073][ T7165] __dump_stack+0x1d/0x30 [ 114.322095][ T7165] dump_stack_lvl+0x95/0xd0 [ 114.322117][ T7165] dump_stack+0x15/0x1b [ 114.322184][ T7165] should_fail_ex+0x25e/0x270 [ 114.322275][ T7165] should_fail_alloc_page+0xf2/0x100 [ 114.322300][ T7165] __alloc_frozen_pages_noprof+0x108/0x350 [ 114.322375][ T7165] alloc_pages_mpol+0xa9/0x1d0 [ 114.322407][ T7165] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 114.322441][ T7165] do_wp_page+0x6f6/0x2030 [ 114.322529][ T7165] ? __rcu_read_lock+0x36/0x50 [ 114.322559][ T7165] handle_mm_fault+0x8bc/0x2da0 [ 114.322598][ T7165] do_user_addr_fault+0x402/0x1060 [ 114.322701][ T7165] exc_page_fault+0x62/0xa0 [ 114.322785][ T7165] asm_exc_page_fault+0x26/0x30 [ 114.322806][ T7165] RIP: 0010:__put_user_4+0xd/0x30 [ 114.322830][ T7165] Code: 66 89 01 31 c9 0f 01 ca e9 50 a8 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 114.322850][ T7165] RSP: 0018:ffffc90011923f10 EFLAGS: 00050202 [ 114.322868][ T7165] RAX: 0000000000000234 RBX: 0000000000000000 RCX: 0000555564bbb7d0 [ 114.322948][ T7165] RDX: 0000000000000177 RSI: 0000000000000000 RDI: ffff888104906c00 [ 114.323025][ T7165] RBP: 0000000000000000 R08: 00018881044f7693 R09: 0000000000000000 [ 114.323040][ T7165] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8881045fe780 [ 114.323054][ T7165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.323074][ T7165] schedule_tail+0x3f/0x90 [ 114.323096][ T7165] ret_from_fork+0x25/0x330 [ 114.323128][ T7165] ret_from_fork_asm+0x1a/0x30 [ 114.323187][ T7165] [ 114.330129][ T5242] ,mems_allowed=0 [ 114.335245][ T7168] EXT4-fs (loop0): I/O error while writing superblock [ 114.339853][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.1.1317 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.339897][ T7154] Tainted: [W]=WARN [ 114.339905][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.339918][ T7154] Call Trace: [ 114.339926][ T7154] [ 114.339965][ T7154] __dump_stack+0x1d/0x30 [ 114.339991][ T7154] dump_stack_lvl+0x95/0xd0 [ 114.340043][ T7154] dump_stack+0x15/0x1b [ 114.340064][ T7154] should_fail_ex+0x25e/0x270 [ 114.340122][ T7154] should_fail_alloc_page+0xf2/0x100 [ 114.340148][ T7154] __alloc_frozen_pages_noprof+0x108/0x350 [ 114.340242][ T7154] alloc_pages_mpol+0xa9/0x1d0 [ 114.340329][ T7154] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 114.340415][ T7154] handle_mm_fault+0x1020/0x2da0 [ 114.340522][ T7154] do_user_addr_fault+0x634/0x1060 [ 114.340639][ T7154] ? trace_page_fault_user+0x1f/0xa0 [ 114.340673][ T7154] exc_page_fault+0x62/0xa0 [ 114.340778][ T7154] asm_exc_page_fault+0x26/0x30 [ 114.340801][ T7154] RIP: 0033:0x7f134622b044 [ 114.340820][ T7154] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 114.340840][ T7154] RSP: 002b:00007fff6b900350 EFLAGS: 00010246 [ 114.340860][ T7154] RAX: 00007f1344c86000 RBX: 00007f1344ca66c0 RCX: 00007f134626dc97 [ 114.340917][ T7154] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f1344ca66c0 [ 114.340931][ T7154] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 114.340946][ T7154] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff6b9004a0 [ 114.340983][ T7154] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 114.341004][ T7154] [ 114.341028][ T7154] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 114.347231][ T7168] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.0.1316: unable to read itable block [ 114.352419][ T5242] [ 114.356911][ T7168] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 114.374409][ T5242] CPU: 1 UID: 0 PID: 5242 Comm: kworker/u8:43 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.374446][ T5242] Tainted: [W]=WARN [ 114.374454][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.374469][ T5242] Workqueue: events_unbound call_usermodehelper_exec_work [ 114.374506][ T5242] Call Trace: [ 114.374514][ T5242] [ 114.374528][ T5242] __dump_stack+0x1d/0x30 [ 114.374552][ T5242] dump_stack_lvl+0x95/0xd0 [ 114.374575][ T5242] dump_stack+0x15/0x1b [ 114.374596][ T5242] warn_alloc+0x145/0x1c0 [ 114.374751][ T5242] ? alloc_pages_noprof+0xb6/0x140 [ 114.374807][ T5242] __vmalloc_node_range_noprof+0xdfd/0x11e0 [ 114.374845][ T5242] __vmalloc_node_noprof+0x89/0xc0 [ 114.374871][ T5242] ? copy_process+0x5a0/0x2310 [ 114.374902][ T5242] ? copy_process+0x5a0/0x2310 [ 114.374990][ T5242] dup_task_struct+0x229/0x6a0 [ 114.375015][ T5242] copy_process+0x5a0/0x2310 [ 114.375038][ T5242] ? lo_rw_aio+0x6fa/0x760 [ 114.375075][ T5242] kernel_clone+0x1c0/0x5f0 [ 114.375133][ T5242] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 114.375164][ T5242] user_mode_thread+0x9c/0xd0 [ 114.375189][ T5242] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 114.375272][ T5242] call_usermodehelper_exec_work+0x7a/0x160 [ 114.375338][ T5242] process_scheduled_works+0x4d4/0x9a0 [ 114.375373][ T5242] worker_thread+0x569/0x750 [ 114.375405][ T5242] ? __pfx_worker_thread+0x10/0x10 [ 114.375443][ T5242] kthread+0x221/0x270 [ 114.375469][ T5242] ? __pfx_kthread+0x10/0x10 [ 114.375567][ T5242] ret_from_fork+0x146/0x330 [ 114.375597][ T5242] ? __pfx_kthread+0x10/0x10 [ 114.375669][ T5242] ret_from_fork_asm+0x1a/0x30 [ 114.375700][ T5242] [ 114.375707][ T5242] Mem-Info: [ 114.384709][ T7168] EXT4-fs (loop0): I/O error while writing superblock [ 114.419096][ T5242] active_anon:9995 inactive_anon:1 isolated_anon:0 [ 114.419096][ T5242] active_file:0 inactive_file:25733 isolated_file:0 [ 114.419096][ T5242] unevictable:0 dirty:192 writeback:5 [ 114.419096][ T5242] slab_reclaimable:3301 slab_unreclaimable:16626 [ 114.419096][ T5242] mapped:29186 shmem:2485 pagetables:3337 [ 114.419096][ T5242] sec_pagetables:0 bounce:0 [ 114.419096][ T5242] kernel_misc_reclaimable:0 [ 114.419096][ T5242] free:1878475 free_pcp:6460 free_cma:0 [ 114.429609][ T7168] EXT4-fs error (device loop0) in ext4_setattr:6172: IO failure [ 114.445845][ T5242] Node 0 active_anon:40212kB inactive_anon:4kB active_file:0kB inactive_file:102932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116744kB dirty:768kB writeback:20kB shmem:10056kB kernel_stack:5216kB pagetables:13348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 114.450798][ T7168] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 114.492000][ T7174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.532815][ T7168] EXT4-fs (loop0): I/O error while writing superblock [ 114.541415][ T5242] Node 0 [ 114.764078][ T3300] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #2: block 4: comm syz-executor: unable to read itable block [ 114.764194][ T3300] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 114.764218][ T3300] EXT4-fs (loop0): I/O error while writing superblock [ 114.764236][ T3300] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: IO failure [ 114.770576][ T5242] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.780587][ T7174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 114.785528][ T5242] lowmem_reserve[]: [ 114.805666][ T7174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.810022][ T5242] 0 [ 114.831193][ T3300] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 114.876892][ T5242] 2878 [ 114.878786][ T3300] EXT4-fs (loop0): I/O error while writing superblock [ 114.901035][ T5242] 7857 [ 114.903712][ T28] audit: type=1400 audit(1785207530.640:605): avc: denied { write } for pid=7173 comm="syz.5.1322" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.913768][ T3300] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 115.062981][ T5242] 7857 [ 115.083928][ T3300] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 115.091234][ T28] audit: type=1400 audit(1785207530.810:606): avc: denied { append } for pid=7173 comm="syz.5.1322" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.094158][ T3300] EXT4-fs (loop0): I/O error while writing superblock [ 115.106873][ T5242] [ 116.283029][ T7174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.284720][ T5242] Node 0 DMA32 free:2947552kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947656kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:104kB free_cma:0kB [ 116.323644][ T5242] lowmem_reserve[]: 0 0 4978 4978 [ 116.328748][ T5242] Node 0 Normal free:4550540kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44332kB inactive_anon:4kB active_file:0kB inactive_file:103888kB unevictable:0kB writepending:1488kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:21320kB local_pcp:4384kB free_cma:0kB [ 116.334855][ T2310] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:5009: inode #2: block 4: comm kworker/u8:7: unable to read itable block [ 116.367916][ T5242] lowmem_reserve[]: 0 0 0 0 [ 116.411810][ T7186] set_capacity_and_notify: 9 callbacks suppressed [ 116.411827][ T7186] loop5: detected capacity change from 0 to 128 [ 116.440153][ T5242] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.458618][ T5242] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 2*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 2*256kB (M) 2*512kB (M) 4*1024kB (M) 4*2048kB (M) 716*4096kB (M) = 2947552kB [ 116.474666][ T2310] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 116.488817][ T7186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 116.499648][ T7186] System zones: 1-3, 19-19, 35-36 [ 116.500913][ T5242] Node 0 Normal: 1109*4kB (UM) 836*8kB (UM) 434*16kB (UME) 169*32kB (UME) 93*64kB (UM) 42*128kB (UME) 11*256kB (UM) 4*512kB (UM) 7*1024kB (UM) 6*2048kB (UME) 1102*4096kB (UM) = 4572916kB [ 116.523682][ T5242] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 116.533044][ T5242] 26068 total pagecache pages [ 116.537913][ T5242] 1 pages in swap cache [ 116.539716][ T2310] EXT4-fs (loop0): I/O error while writing superblock [ 116.542384][ T5242] Free swap = 124992kB [ 116.550071][ T7186] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 116.553403][ T5242] Total swap = 124996kB [ 116.570383][ T5242] 2097051 pages RAM [ 116.572494][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.574221][ T5242] 0 pages HighMem/MovableOnly [ 116.574230][ T5242] 81738 pages reserved [ 116.574499][ T7186] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.592774][ T3300] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 116.631863][ T7186] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 4294901763 (only 1 groups) [ 116.633958][ T3300] EXT4-fs (loop0): I/O error while writing superblock [ 116.650868][ T7162] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 116.660511][ T5059] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.691587][ T3289] ================================================================== [ 116.699725][ T3289] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 116.706872][ T3289] [ 116.709213][ T3289] write to 0xffff888104b41c24 of 4 bytes by task 3288 on cpu 1: [ 116.716861][ T3289] simple_unlink+0x54/0x80 [ 116.721299][ T3289] shmem_unlink+0x12d/0x140 [ 116.725872][ T3289] vfs_unlink+0x1c3/0x490 [ 116.730281][ T3289] filename_unlinkat+0x1dc/0x410 [ 116.735244][ T3289] __se_sys_unlink+0x2b/0xe0 [ 116.739844][ T3289] __x64_sys_unlink+0x1f/0x30 [ 116.744529][ T3289] x64_sys_call+0x2eb6/0x3020 [ 116.749219][ T3289] do_syscall_64+0x136/0x3c0 [ 116.753820][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.761626][ T3289] [ 116.763963][ T3289] read to 0xffff888104b41c24 of 4 bytes by task 3289 on cpu 0: [ 116.771522][ T3289] fill_mg_cmtime+0x5b/0x240 [ 116.776140][ T3289] generic_fillattr+0x24d/0x340 [ 116.781011][ T3289] shmem_getattr+0x181/0x200 [ 116.785636][ T3289] vfs_getattr_nosec+0x146/0x1e0 [ 116.790686][ T3289] vfs_getattr+0x48/0x60 [ 116.794943][ T3289] vfs_statx_path+0x28/0x140 [ 116.799561][ T3289] vfs_statx+0xc4/0x170 [ 116.803744][ T3289] vfs_fstatat+0x118/0x170 [ 116.808177][ T3289] __se_sys_newfstatat+0x55/0x3e0 [ 116.813213][ T3289] __x64_sys_newfstatat+0x55/0x70 [ 116.818250][ T3289] x64_sys_call+0x2c64/0x3020 [ 116.822946][ T3289] do_syscall_64+0x136/0x3c0 [ 116.827547][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.833547][ T3289] [ 116.835886][ T3289] value changed: 0x1a5ac9de -> 0x1ab14caf [ 116.841606][ T3289] [ 116.843940][ T3289] Reported by Kernel Concurrency Sanitizer on: [ 116.850098][ T3289] CPU: 0 UID: 0 PID: 3289 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 116.860526][ T3289] Tainted: [W]=WARN [ 116.864336][ T3289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.874401][ T3289] ================================================================== [ 117.076895][ T5186] bridge_slave_1: left allmulticast mode [ 117.084075][ T5186] bridge_slave_1: left promiscuous mode [ 117.090043][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.097826][ T5186] bridge_slave_0: left allmulticast mode [ 117.104686][ T5186] bridge_slave_0: left promiscuous mode [ 117.110512][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.138602][ T5186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.148189][ T5186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.158150][ T5186] bond0 (unregistering): Released all slaves [ 117.212092][ T5186] tipc: Disabling bearer [ 117.217383][ T5186] tipc: Left network mode [ 117.228541][ T5186] hsr_slave_0: left promiscuous mode [ 117.240077][ T5186] hsr_slave_1: left promiscuous mode [ 117.247977][ T28] audit: type=1400 audit(1785207532.990:607): avc: denied { write } for pid=7199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.251456][ T5186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.292112][ T28] audit: type=1400 audit(1785207533.040:608): avc: denied { write } for pid=7210 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.314366][ T5186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.363073][ T5186] team0 (unregistering): Port device team_slave_1 removed [ 117.373247][ T5186] team0 (unregistering): Port device team_slave_0 removed [ 117.409710][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 117.506977][ T28] audit: type=1400 audit(1785207533.250:609): avc: denied { write } for pid=7213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.552489][ T28] audit: type=1400 audit(1785207533.300:610): avc: denied { write } for pid=7224 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.589820][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 117.682279][ T28] audit: type=1400 audit(1785207533.430:611): avc: denied { write } for pid=7227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.724546][ T28] audit: type=1400 audit(1785207533.470:612): avc: denied { write } for pid=7238 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.762940][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 117.871077][ T28] audit: type=1400 audit(1785207533.620:613): avc: denied { write } for pid=7242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.914826][ T28] audit: type=1400 audit(1785207533.660:614): avc: denied { write } for pid=7253 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.952421][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 118.499575][ T3531] Bluetooth: hci0: command 0x1003 tx timeout [ 118.499582][ T6974] Bluetooth: hci0: Opcode 0x1003 failed: -110