last executing test programs: 4m36.071319528s ago: executing program 1 (id=2882): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, &(0x7f00000001c0)="53e5516ceab3661770cb", 0xa, 0x24004010, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) capset(&(0x7f0000000380)={0x20071026}, &(0x7f00000001c0)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) 4m34.502649239s ago: executing program 1 (id=2884): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x4, "96ce9e25"}]}}, 0x0}, 0x0) 4m31.160613215s ago: executing program 1 (id=2905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) 4m31.081820356s ago: executing program 1 (id=2906): r0 = getegid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000802, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,time_offset=0x0000000000000003,gid=', @ANYRESHEX=r0, @ANYBLOB="2c666d61736b3d30303030303000303030263030303030303030303030362c696f636861727365743d63703836332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c757466382c646d61736b3d3030303030303030303030303030303030303030a930312c00"], 0x1, 0x1537, &(0x7f00000034c0)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 4m31.050842396s ago: executing program 1 (id=2907): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6004000000200600fe8000000000", @ANYRES32=0x41424344, @ANYBLOB="8002000000780003080a"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.stat\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000002280)={0x0, 0x40, 0xffffffff, 0x400, 0x1b, "e60011000027a85ac269dcedd8c9cc9ee200"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r7, 0x5406, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x38d, 0x0, "a0590469a322d928"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000002240)=0x5) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x11) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r5, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) 4m30.879143189s ago: executing program 1 (id=2908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 4m30.80109465s ago: executing program 32 (id=2908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 8.501772734s ago: executing program 0 (id=3766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x86, &(0x7f0000002600)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d1430df285133dc06d3585984aa2bd8fea921f6b14855c68a56a673ccec82815950d271791301dc2aca73a96c5d333407d86fcf7ce740de6b55785ac7a5a3a448019066e1973"], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000180)=0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000480)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$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") r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4, &(0x7f0000000280)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@data_ordered}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='io_uring_poll_arm\x00', r7, 0x0, 0x3}, 0x18) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 6.983225614s ago: executing program 2 (id=3769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 6.230059765s ago: executing program 0 (id=3771): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) 6.186745106s ago: executing program 2 (id=3773): open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) 6.041105857s ago: executing program 2 (id=3775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x86, &(0x7f0000002600)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d1430df285133dc06d358598"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4, &(0x7f0000000280)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@data_ordered}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") 6.002408068s ago: executing program 0 (id=3778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) lseek(0xffffffffffffffff, 0xae7d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_pidfd_open(r1, 0x0) setns(r5, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.151477594s ago: executing program 5 (id=3779): creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) rename(0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2.561789525s ago: executing program 5 (id=3783): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.497902977s ago: executing program 4 (id=3784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 2.354693708s ago: executing program 0 (id=3785): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000140)={0xb45, 0x1, 0x7fffffff, 0xbf0e, 0xc, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xfffffffe, 0xafb}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) 2.354246058s ago: executing program 4 (id=3786): open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) 2.305544569s ago: executing program 5 (id=3787): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r7, &(0x7f00000001c0), 0x0, 0x24004010, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) capset(&(0x7f0000000380)={0x20071026}, &(0x7f00000001c0)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) 2.305066279s ago: executing program 4 (id=3788): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) 1.903471154s ago: executing program 2 (id=3789): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x21) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000100)=0x2bd6c8f962844790) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='cmdline\x00') readv(r6, &(0x7f0000000400)=[{&(0x7f0000000380)=""/103, 0x67}], 0x1) 1.761962727s ago: executing program 4 (id=3790): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 1.653627258s ago: executing program 3 (id=3793): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.623002548s ago: executing program 3 (id=3794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 1.610095738s ago: executing program 3 (id=3795): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r2}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 1.552788519s ago: executing program 0 (id=3796): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000080)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x80000000}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}], [{@appraise}]}, 0x25, 0x365, &(0x7f0000000640)="$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") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff0100"/45, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000"], 0x104}}, 0x0) 1.52869411s ago: executing program 3 (id=3797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1.443798911s ago: executing program 5 (id=3798): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.443269591s ago: executing program 3 (id=3799): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 1.381513652s ago: executing program 5 (id=3800): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 660.803292ms ago: executing program 2 (id=3801): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) 561.314013ms ago: executing program 0 (id=3802): openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 559.967103ms ago: executing program 4 (id=3803): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0) 356.777326ms ago: executing program 4 (id=3804): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x204004, &(0x7f00000004c0)={[{@dioread_nolock}, {@i_version}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141842, 0x0) pwrite64(r1, &(0x7f00000007c0)='c', 0xfdef, 0xfecc) 331.940156ms ago: executing program 2 (id=3805): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 219.451597ms ago: executing program 3 (id=3806): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) getgroups(0x27, &(0x7f0000002540)) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r6, 0x1) listen(0xffffffffffffffff, 0x20000005) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x64, r0, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x64}}, 0x20000014) 0s ago: executing program 5 (id=3807): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000140)={0xb45, 0x1, 0x7fffffff, 0xbf0e, 0xc, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xfffffffe, 0xafb}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 568.418536][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 568.427050][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.435590][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 568.444087][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 568.469726][ T9369] loop4: detected capacity change from 0 to 512 [ 568.486785][ T9369] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3051: Failed to acquire dquot type 0 [ 568.512713][ T9287] device veth1_macvtap entered promiscuous mode [ 568.525648][ T9369] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3051: Failed to acquire dquot type 0 [ 568.538527][ T9369] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3051: Failed to acquire dquot type 0 [ 568.552595][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 568.616806][ T9375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=9375 comm=syz.2.3050 [ 568.712355][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 568.722910][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 568.733465][ T9369] EXT4-fs (loop4): 1 orphan inode deleted [ 568.786879][ T9369] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 568.801347][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 568.820478][ T9369] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.340334][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 570.364930][ T9389] loop4: detected capacity change from 0 to 16 [ 570.372365][ T9389] erofs: (device loop4): mounted with root inode @ nid 36. [ 570.382151][ T9391] loop5: detected capacity change from 0 to 512 [ 570.492005][ T9391] __quota_error: 8 callbacks suppressed [ 570.492023][ T9391] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 570.599995][ T9391] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 571.838044][ T9391] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3056: Failed to acquire dquot type 0 [ 571.852598][ T302] tipc: Left network mode [ 571.864402][ T9391] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 571.882179][ T9391] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 571.901988][ T9391] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3056: Failed to acquire dquot type 0 [ 571.962568][ T9391] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 571.977247][ T9391] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 571.987000][ T9391] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3056: Failed to acquire dquot type 0 [ 572.029970][ T9391] EXT4-fs (loop5): 1 orphan inode deleted [ 572.040595][ T9391] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 572.049657][ T9391] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.098083][ T9422] loop3: detected capacity change from 0 to 512 [ 572.137106][ T9407] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.155242][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.167108][ T9407] device bridge_slave_0 entered promiscuous mode [ 572.190886][ T9407] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.449016][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.459730][ T9407] device bridge_slave_1 entered promiscuous mode [ 572.483211][ T9422] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 572.494051][ T9422] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 572.503820][ T9422] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3066: Failed to acquire dquot type 0 [ 572.516225][ T9422] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 572.528925][ T9422] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 572.538845][ T9422] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3066: Failed to acquire dquot type 0 [ 572.581494][ T9422] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3066: Failed to acquire dquot type 0 [ 572.599333][ T9422] EXT4-fs (loop3): 1 orphan inode deleted [ 572.605690][ T9422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 572.615287][ T9422] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.709486][ T9407] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.716602][ T9407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.723966][ T9407] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.731018][ T9407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.740525][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 572.782807][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 572.793000][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.806689][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.817270][ T9433] loop0: detected capacity change from 0 to 8192 [ 572.827868][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 572.843902][ T9433] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 572.851558][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 572.903680][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.910796][ T8782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.147782][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 573.179139][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.193206][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.204964][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.212057][ T8782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.220530][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 573.229384][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 573.237711][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 573.248453][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 573.304326][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 573.313384][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 573.335459][ T9407] device veth0_vlan entered promiscuous mode [ 573.343294][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 573.368713][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 573.388677][ T302] device bridge_slave_1 left promiscuous mode [ 573.394844][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.426463][ T302] device bridge_slave_0 left promiscuous mode [ 573.455045][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.514848][ T302] device veth1_macvtap left promiscuous mode [ 573.831911][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 573.842869][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 573.862658][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 573.878661][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 573.897052][ T9407] device veth1_macvtap entered promiscuous mode [ 573.904518][ T9456] loop5: detected capacity change from 0 to 16 [ 573.912850][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 573.924329][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 573.933420][ T9456] erofs: (device loop5): mounted with root inode @ nid 36. [ 573.941795][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 574.025563][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 574.034343][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.574109][ T9469] loop5: detected capacity change from 0 to 512 [ 576.697899][ T9484] 9pnet_fd: Insufficient options for proto=fd [ 576.930788][ T9486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=9486 comm=syz.2.3075 [ 577.140447][ T9469] __quota_error: 2 callbacks suppressed [ 577.140476][ T9469] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 577.158033][ T9469] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 577.167678][ T9469] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3077: Failed to acquire dquot type 0 [ 577.235361][ T9469] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 577.385305][ T9469] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 578.950348][ T9469] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3077: Failed to acquire dquot type 0 [ 578.963035][ T9496] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3084'. [ 578.984987][ T9469] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 579.004850][ T9469] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 579.070864][ T9469] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3077: Failed to acquire dquot type 0 [ 579.103878][ T9502] loop2: detected capacity change from 0 to 16 [ 579.116552][ T9469] EXT4-fs (loop5): 1 orphan inode deleted [ 579.122511][ T9469] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 579.131961][ T9469] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.148781][ T9502] erofs: (device loop2): mounted with root inode @ nid 36. [ 579.157574][ T9503] 9pnet_fd: Insufficient options for proto=fd [ 580.511361][ T9524] loop2: detected capacity change from 0 to 512 [ 580.532451][ T28] audit: type=1326 audit(1746614792.355:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.3.3092" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38c258e969 code=0x0 [ 580.912442][ T9524] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 580.969360][ T9524] loop2: detected capacity change from 0 to 512 [ 581.114392][ T9524] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.3093: iget: bogus i_mode (0) [ 581.126320][ T9524] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3093: couldn't read orphan inode 17 (err -117) [ 581.139485][ T9524] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 582.062055][ T9531] loop3: detected capacity change from 0 to 512 [ 582.914297][ T9531] EXT4-fs (loop3): Test dummy encryption mode enabled [ 582.942131][ T9531] EXT4-fs error (device loop3): __ext4_iget:5057: inode #11: block 1: comm syz.3.3094: invalid block [ 582.953837][ T9531] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3094: couldn't read orphan inode 11 (err -117) [ 582.968105][ T9531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 583.154399][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 583.322233][ T9541] loop0: detected capacity change from 0 to 512 [ 583.692891][ T9541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 583.786292][ T9541] EXT4-fs (loop0): orphan cleanup on readonly fs [ 583.808255][ T9541] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3095: bg 0: block 248: padding at end of block bitmap is not set [ 583.827811][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 583.853224][ T9541] Quota error (device loop0): write_blk: dquota write failed [ 583.862750][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 583.868611][ T9541] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 583.868643][ T9541] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3095: Failed to acquire dquot type 1 [ 583.897441][ T9541] EXT4-fs (loop0): 1 truncate cleaned up [ 583.904428][ T9541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 583.980473][ T9549] 9pnet_fd: Insufficient options for proto=fd [ 586.205425][ T9570] loop2: detected capacity change from 0 to 512 [ 586.214335][ T9570] ext4: Unknown parameter 'noacl' [ 586.268015][ T28] audit: type=1400 audit(1746614798.235:386): avc: denied { mounton } for pid=9566 comm="syz.2.3104" path="/bus" dev="ramfs" ino=48574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 588.051087][ T9584] loop3: detected capacity change from 0 to 512 [ 588.083509][ T9586] loop2: detected capacity change from 0 to 512 [ 588.159214][ T9586] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 588.170013][ T9584] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 588.203970][ T9586] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 588.215082][ T9584] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 588.257678][ T9586] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3108: Failed to acquire dquot type 0 [ 588.269275][ T9584] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3109: Failed to acquire dquot type 0 [ 588.300937][ T9586] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 588.311683][ T9586] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 588.321849][ T9586] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3108: Failed to acquire dquot type 0 [ 588.336292][ T9584] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 588.336930][ T9586] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3108: Failed to acquire dquot type 0 [ 588.358991][ T9586] EXT4-fs (loop2): 1 orphan inode deleted [ 588.364747][ T9586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 588.374030][ T9586] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.384893][ T9584] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3109: Failed to acquire dquot type 0 [ 588.397161][ T9584] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3109: Failed to acquire dquot type 0 [ 588.409008][ T9584] EXT4-fs (loop3): 1 orphan inode deleted [ 588.492662][ T9597] loop5: detected capacity change from 0 to 512 [ 588.501862][ T9584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 588.512412][ T9584] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.525829][ T9597] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 588.691109][ T9599] 9pnet_virtio: no channels available for device 127.0.0.1 [ 589.050052][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 590.875439][ T9607] loop2: detected capacity change from 0 to 512 [ 590.902381][ T9610] loop5: detected capacity change from 0 to 512 [ 590.937784][ T9607] EXT4-fs: Ignoring removed mblk_io_submit option [ 590.958129][ T9607] EXT4-fs: Ignoring removed bh option [ 590.966311][ T9610] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3113: casefold flag without casefold feature [ 590.988243][ T9607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 591.028168][ T9610] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3113: couldn't read orphan inode 15 (err -117) [ 591.058246][ T9610] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 591.091885][ T9607] EXT4-fs (loop2): 1 truncate cleaned up [ 591.097574][ T9607] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 591.194365][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 591.230141][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 591.339024][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 591.396787][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 591.406183][ T9622] 9pnet_fd: Insufficient options for proto=fd [ 591.599623][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 591.599646][ T28] audit: type=1326 audit(1746614803.605:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f298e969 code=0x7ffc0000 [ 591.699549][ T28] audit: type=1326 audit(1746614803.705:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc2f298e969 code=0x7ffc0000 [ 591.723334][ T28] audit: type=1326 audit(1746614803.705:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f298e969 code=0x7ffc0000 [ 591.759688][ T28] audit: type=1326 audit(1746614803.735:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f298e969 code=0x7ffc0000 [ 591.784654][ T28] audit: type=1326 audit(1746614803.755:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc2f298e969 code=0x7ffc0000 [ 591.850825][ T28] audit: type=1326 audit(1746614803.755:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f298e969 code=0x7ffc0000 [ 592.387626][ T9634] loop0: detected capacity change from 0 to 512 [ 592.481435][ T9634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 592.778712][ T9634] EXT4-fs (loop0): orphan cleanup on readonly fs [ 592.796779][ T9634] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3118: bg 0: block 248: padding at end of block bitmap is not set [ 592.816662][ T9634] Quota error (device loop0): write_blk: dquota write failed [ 592.824474][ T9634] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 592.835427][ T9634] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3118: Failed to acquire dquot type 1 [ 592.862357][ T9634] EXT4-fs (loop0): 1 truncate cleaned up [ 592.871710][ T9634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 594.345038][ T9633] loop5: detected capacity change from 0 to 512 [ 594.367149][ T28] audit: type=1326 audit(1746614803.755:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f298e969 code=0x7ffc0000 [ 594.394876][ T9638] loop4: detected capacity change from 0 to 256 [ 594.403800][ T28] audit: type=1326 audit(1746614803.765:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fc2f298e969 code=0x7ffc0000 [ 594.430940][ T9638] exfat: Deprecated parameter 'namecase' [ 594.496728][ T9633] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3121: Failed to acquire dquot type 0 [ 596.357369][ T9638] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 596.370816][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 596.388662][ T9633] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3121: Failed to acquire dquot type 0 [ 596.401195][ T9633] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3121: Failed to acquire dquot type 0 [ 596.417861][ T9633] EXT4-fs (loop5): 1 orphan inode deleted [ 596.429986][ T9633] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 596.440065][ T9633] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.468283][ T9652] loop2: detected capacity change from 0 to 512 [ 596.505282][ T9652] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 596.541800][ T9652] loop2: detected capacity change from 0 to 512 [ 596.556191][ T9652] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.3124: iget: bogus i_mode (0) [ 596.567716][ T9652] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3124: couldn't read orphan inode 17 (err -117) [ 596.580699][ T9652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 596.656729][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 596.666879][ T9660] loop4: detected capacity change from 0 to 512 [ 598.020674][ T9662] loop0: detected capacity change from 0 to 512 [ 598.527341][ T9666] loop3: detected capacity change from 0 to 16 [ 598.553808][ T9662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 598.571367][ T9666] erofs: (device loop3): mounted with root inode @ nid 36. [ 598.623862][ T9662] EXT4-fs (loop0): orphan cleanup on readonly fs [ 598.631086][ T9662] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3128: bg 0: block 248: padding at end of block bitmap is not set [ 598.646939][ T9662] __quota_error: 23 callbacks suppressed [ 598.646958][ T9662] Quota error (device loop0): write_blk: dquota write failed [ 598.660110][ T9662] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 598.670052][ T9662] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3128: Failed to acquire dquot type 1 [ 598.682301][ T9662] EXT4-fs (loop0): 1 truncate cleaned up [ 598.692592][ T9660] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 598.718875][ T9660] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 598.755686][ T9660] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3127: Failed to acquire dquot type 0 [ 598.802331][ T9660] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 598.842804][ T9660] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 598.880059][ T9660] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3127: Failed to acquire dquot type 0 [ 598.925444][ T9660] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 598.967657][ T9660] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 598.978652][ T9662] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 598.979843][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 599.037271][ T9660] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3127: Failed to acquire dquot type 0 [ 599.061944][ T9660] EXT4-fs (loop4): 1 orphan inode deleted [ 599.069825][ T9660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 599.083990][ T9660] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.145657][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 602.158466][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 602.283243][ T9708] loop0: detected capacity change from 0 to 512 [ 603.469313][ T9711] loop2: detected capacity change from 0 to 512 [ 606.967323][ T28] audit: type=1400 audit(1746614815.495:412): avc: denied { mounton } for pid=9697 comm="syz.2.3139" path="/file0" dev="ramfs" ino=48797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 607.073685][ T9708] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 607.091762][ T9711] EXT4-fs (loop2): orphan cleanup on readonly fs [ 608.270934][ T28] audit: type=1326 audit(1746614819.865:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.3.3143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38c258e969 code=0x0 [ 608.301115][ T9711] EXT4-fs (loop2): 1 orphan inode deleted [ 608.307438][ T9711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 608.316891][ T9711] EXT4-fs (loop2): unmounting filesystem. [ 610.419806][ T9745] loop0: detected capacity change from 0 to 256 [ 610.496883][ T9745] exfat: Unknown parameter '0x00000000000000030x0000000000000000' [ 611.939772][ T9759] loop5: detected capacity change from 0 to 512 [ 611.968827][ T28] audit: type=1400 audit(1746614823.985:414): avc: denied { create } for pid=9762 comm="syz.3.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 612.087436][ T9768] loop2: detected capacity change from 0 to 512 [ 612.115865][ T9768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 612.253927][ T9768] EXT4-fs (loop2): orphan cleanup on readonly fs [ 612.263703][ T9768] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3155: bg 0: block 248: padding at end of block bitmap is not set [ 612.280037][ T9768] Quota error (device loop2): write_blk: dquota write failed [ 612.287631][ T9768] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 612.297709][ T9768] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3155: Failed to acquire dquot type 1 [ 612.483995][ T9768] EXT4-fs (loop2): 1 truncate cleaned up [ 612.494061][ T9768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 612.581394][ T9759] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 612.752558][ T9759] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 614.412985][ T28] audit: type=1326 audit(1746614825.025:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.4.3160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f792418e969 code=0x0 [ 614.436368][ T9759] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3156: Failed to acquire dquot type 0 [ 614.450231][ T9759] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 614.481449][ T9759] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 614.565721][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 614.581150][ T9759] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3156: Failed to acquire dquot type 0 [ 614.602841][ T9759] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 614.614959][ T9759] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 615.818981][ T9797] loop3: detected capacity change from 0 to 512 [ 617.050350][ T9759] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3156: Failed to acquire dquot type 0 [ 617.062088][ T9759] EXT4-fs (loop5): 1 orphan inode deleted [ 617.067822][ T9759] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 617.076882][ T9759] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.110802][ T9803] loop2: detected capacity change from 0 to 512 [ 617.170644][ T9803] EXT4-fs (loop2): Test dummy encryption mode enabled [ 617.182810][ T9797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 617.192134][ T9797] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.117812][ T9803] EXT4-fs error (device loop2): __ext4_iget:5057: inode #11: block 1: comm syz.2.3162: invalid block [ 618.129865][ T9803] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3162: couldn't read orphan inode 11 (err -117) [ 618.149886][ T9803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 619.287276][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 619.293719][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 619.440684][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 620.474340][ T9828] loop5: detected capacity change from 0 to 512 [ 620.600407][ T9828] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 620.611071][ T9828] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 620.620832][ T9828] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3169: Failed to acquire dquot type 0 [ 620.717799][ T9828] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 620.798144][ T9828] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 620.855449][ T9828] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3169: Failed to acquire dquot type 0 [ 620.928937][ T9828] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 620.940059][ T9828] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 620.946123][ T9842] loop3: detected capacity change from 0 to 512 [ 620.949634][ T9828] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3169: Failed to acquire dquot type 0 [ 620.967950][ T9828] EXT4-fs (loop5): 1 orphan inode deleted [ 620.973745][ T9828] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 620.985105][ T9828] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.002250][ T9842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 621.035324][ T9842] EXT4-fs (loop3): orphan cleanup on readonly fs [ 621.054862][ T9842] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3172: bg 0: block 248: padding at end of block bitmap is not set [ 621.138198][ T9842] Quota error (device loop3): write_blk: dquota write failed [ 621.170455][ T9842] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 621.193324][ T9842] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3172: Failed to acquire dquot type 1 [ 621.922286][ T9842] EXT4-fs (loop3): 1 truncate cleaned up [ 621.966456][ T9842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 622.059535][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 622.133228][ T9860] loop5: detected capacity change from 0 to 512 [ 622.182600][ T9860] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 622.206597][ T9860] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 622.226502][ T9860] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3179: Failed to acquire dquot type 0 [ 622.248298][ T9860] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3179: Failed to acquire dquot type 0 [ 622.272140][ T9860] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3179: Failed to acquire dquot type 0 [ 622.298443][ T9860] EXT4-fs (loop5): 1 orphan inode deleted [ 622.313462][ T9860] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 622.332668][ T9860] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.583621][ T9867] 9pnet_fd: p9_fd_create_tcp (9867): problem connecting socket to 127.0.0.1 [ 623.042080][ T9871] loop4: detected capacity change from 0 to 512 [ 623.070903][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 623.192475][ T9871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 623.201806][ T9871] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.149392][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 625.699231][ T9902] loop0: detected capacity change from 0 to 512 [ 627.041638][ T9907] loop2: detected capacity change from 0 to 512 [ 627.132473][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 627.172289][ T9902] __quota_error: 4 callbacks suppressed [ 627.172309][ T9902] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 627.244084][ T9902] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 627.254033][ T9902] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3191: Failed to acquire dquot type 0 [ 627.266576][ T9907] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 627.275577][ T9907] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.905678][ T9927] loop4: detected capacity change from 0 to 512 [ 627.931941][ T9907] EXT4-fs (loop2): unmounting filesystem. [ 628.319454][ T9902] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 628.357075][ T9927] EXT4-fs (loop4): orphan cleanup on readonly fs [ 628.372002][ T9927] EXT4-fs (loop4): 1 orphan inode deleted [ 628.452058][ T9902] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 628.589445][ T9902] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3191: Failed to acquire dquot type 0 [ 628.634170][ T9902] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 628.671360][ T9902] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 628.706537][ T9902] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3191: Failed to acquire dquot type 0 [ 628.836790][ T9902] EXT4-fs (loop0): 1 orphan inode deleted [ 628.875949][ T9902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 628.971436][ T9902] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.981925][ T9927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 629.032621][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 629.159971][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 629.254342][ T9946] loop2: detected capacity change from 0 to 1024 [ 629.412381][ T9946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 629.989357][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 630.639258][ T9969] loop5: detected capacity change from 0 to 512 [ 630.669953][ T9969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 630.721989][ T9969] EXT4-fs (loop5): orphan cleanup on readonly fs [ 630.739186][ T9969] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3205: bg 0: block 248: padding at end of block bitmap is not set [ 631.058000][ T9969] Quota error (device loop5): write_blk: dquota write failed [ 631.065450][ T9969] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 631.109748][ T9969] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3205: Failed to acquire dquot type 1 [ 631.127208][ T9969] EXT4-fs (loop5): 1 truncate cleaned up [ 631.145371][ T9969] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 631.235248][ T9978] loop2: detected capacity change from 0 to 512 [ 631.288757][ T9978] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3209: casefold flag without casefold feature [ 631.319855][ T9978] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3209: couldn't read orphan inode 15 (err -117) [ 631.345421][ T9978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 631.386490][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 631.419505][ T9984] loop2: detected capacity change from 0 to 512 [ 631.457030][ T9984] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 631.484773][ T9984] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 631.504470][ T9984] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3211: Failed to acquire dquot type 0 [ 631.552837][ T9984] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3211: Failed to acquire dquot type 0 [ 631.719321][ T9984] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3211: Failed to acquire dquot type 0 [ 631.755279][ T9984] EXT4-fs (loop2): 1 orphan inode deleted [ 631.798091][ T9984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 631.827351][ T9984] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.076425][ T9998] 9pnet_fd: p9_fd_create_tcp (9998): problem connecting socket to 127.0.0.1 [ 632.352104][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 632.621482][T10006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 633.078279][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 633.131084][T10018] overlayfs: failed to resolve './file2': -2 [ 633.535439][T10026] netlink: 'syz.3.3224': attribute type 12 has an invalid length. [ 633.559681][T10029] loop0: detected capacity change from 0 to 512 [ 633.599747][T10029] __quota_error: 4 callbacks suppressed [ 633.599766][T10029] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 633.616194][T10029] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 633.626074][T10029] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3226: Failed to acquire dquot type 0 [ 633.637951][T10029] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 634.233257][T10029] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 634.260165][T10029] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3226: Failed to acquire dquot type 0 [ 634.322612][T10029] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 634.472971][T10029] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 634.482561][T10029] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3226: Failed to acquire dquot type 0 [ 634.505002][T10029] EXT4-fs (loop0): 1 orphan inode deleted [ 634.510858][T10029] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 634.522007][T10029] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.915602][T10052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 634.923628][T10052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 635.018040][T10048] 9pnet_fd: p9_fd_create_tcp (10048): problem connecting socket to 127.0.0.1 [ 635.234945][T10051] loop4: detected capacity change from 0 to 512 [ 635.685236][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 635.695001][T10051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.704998][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 635.714096][T10051] EXT4-fs (loop4): orphan cleanup on readonly fs [ 635.721624][T10051] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3230: bg 0: block 248: padding at end of block bitmap is not set [ 635.736491][T10051] Quota error (device loop4): write_blk: dquota write failed [ 635.743976][T10051] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 635.753942][T10051] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3230: Failed to acquire dquot type 1 [ 635.768840][T10051] EXT4-fs (loop4): 1 truncate cleaned up [ 635.775107][T10051] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 635.787025][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 635.803189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 635.834213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 635.852652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 635.862106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 635.871490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 635.880780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 636.817705][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 637.402818][T10076] loop0: detected capacity change from 0 to 512 [ 637.582609][T10080] loop2: detected capacity change from 0 to 512 [ 637.638476][T10076] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 637.667074][T10091] loop3: detected capacity change from 0 to 512 [ 637.673542][T10076] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 637.705577][T10076] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3239: Failed to acquire dquot type 0 [ 637.717502][T10076] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3239: Failed to acquire dquot type 0 [ 637.736359][T10080] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3240: Failed to acquire dquot type 0 [ 637.751593][T10076] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3239: Failed to acquire dquot type 0 [ 637.756262][T10091] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3243: Failed to acquire dquot type 0 [ 637.763791][T10080] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3240: Failed to acquire dquot type 0 [ 637.776127][T10091] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3243: Failed to acquire dquot type 0 [ 637.787146][T10076] EXT4-fs (loop0): 1 orphan inode deleted [ 637.797714][T10091] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3243: Failed to acquire dquot type 0 [ 637.803685][T10076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 637.826593][T10080] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3240: Failed to acquire dquot type 0 [ 637.839311][T10091] EXT4-fs (loop3): 1 orphan inode deleted [ 637.841724][T10097] loop4: detected capacity change from 0 to 128 [ 637.845064][T10091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 637.861280][T10076] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.872527][T10080] EXT4-fs (loop2): 1 orphan inode deleted [ 637.878526][T10091] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.895190][T10080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 637.987576][T10080] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.545526][T10100] 9pnet_fd: p9_fd_create_tcp (10100): problem connecting socket to 127.0.0.1 [ 638.826493][T10102] 9pnet_fd: p9_fd_create_tcp (10102): problem connecting socket to 127.0.0.1 [ 638.881943][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 638.887817][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 638.904683][ T301] kworker/u4:3: attempt to access beyond end of device [ 638.904683][ T301] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 639.542162][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 641.482706][T10136] loop4: detected capacity change from 0 to 512 [ 641.715310][T10136] __quota_error: 16 callbacks suppressed [ 641.715333][T10136] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 641.742124][T10140] loop3: detected capacity change from 0 to 40427 [ 641.748784][T10136] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 641.780668][T10147] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 641.800612][T10136] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3256: Failed to acquire dquot type 0 [ 641.813414][T10151] netlink: 'syz.0.3260': attribute type 12 has an invalid length. [ 641.825114][T10140] F2FS-fs (loop3): invalid crc value [ 641.839705][T10136] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 641.852180][T10136] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 641.855074][T10140] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 641.866838][T10136] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3256: Failed to acquire dquot type 0 [ 641.881029][T10136] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 641.891532][T10136] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 641.899358][T10140] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 641.908994][T10136] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3256: Failed to acquire dquot type 0 [ 641.928566][T10136] EXT4-fs (loop4): 1 orphan inode deleted [ 641.934540][T10136] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 641.945180][T10136] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.183363][T10158] 9pnet_fd: p9_fd_create_tcp (10158): problem connecting socket to 127.0.0.1 [ 642.471201][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 642.489836][ T28] audit: type=1400 audit(1746614854.505:416): avc: denied { bind } for pid=10159 comm="syz.0.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 642.518976][ T28] audit: type=1400 audit(1746614854.505:417): avc: denied { shutdown } for pid=10159 comm="syz.0.3264" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 642.647869][T10169] loop4: detected capacity change from 0 to 2048 [ 642.654713][T10169] EXT4-fs: Ignoring removed bh option [ 642.660487][T10169] EXT4-fs: dax option not supported [ 645.192962][T10181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=10181 comm=syz.3.3265 [ 646.748197][T10197] loop3: detected capacity change from 0 to 512 [ 646.785726][T10195] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 646.862242][T10203] loop2: detected capacity change from 0 to 512 [ 647.035479][T10197] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 647.052901][T10203] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 647.094811][T10197] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 647.104622][T10197] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3273: Failed to acquire dquot type 0 [ 647.107612][T10203] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 647.125927][T10203] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3276: Failed to acquire dquot type 0 [ 647.126202][T10197] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 647.142372][T10203] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 647.147895][T10197] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 647.158555][T10203] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 647.167598][T10197] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3273: Failed to acquire dquot type 0 [ 647.177380][T10203] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3276: Failed to acquire dquot type 0 [ 647.200407][T10203] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 647.211174][T10203] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 647.221914][T10197] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3273: Failed to acquire dquot type 0 [ 647.234226][T10203] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3276: Failed to acquire dquot type 0 [ 647.246084][T10197] EXT4-fs (loop3): 1 orphan inode deleted [ 647.252391][T10203] EXT4-fs (loop2): 1 orphan inode deleted [ 647.255602][T10197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 647.266961][T10203] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 647.267204][T10197] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.276316][T10203] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.336247][T10215] loop0: detected capacity change from 0 to 512 [ 647.736968][T10217] 9pnet_fd: p9_fd_create_tcp (10217): problem connecting socket to 127.0.0.1 [ 648.193842][T10215] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3278: casefold flag without casefold feature [ 648.236714][T10220] fuse: Unknown parameter 'group_id00000000000000000000' [ 648.248690][T10215] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3278: couldn't read orphan inode 15 (err -117) [ 648.261652][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 648.270267][T10215] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 648.337767][T10215] overlayfs: failed to resolve './file2': -2 [ 648.521338][T10228] 9pnet_fd: p9_fd_create_tcp (10228): problem connecting socket to 127.0.0.1 [ 650.064051][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 650.136351][T10233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=10233 comm=syz.4.3281 [ 651.012636][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 651.766065][T10258] loop2: detected capacity change from 0 to 512 [ 651.808192][T10263] fuse: Unknown parameter 'group_id00000000000000000000' [ 651.824144][T10258] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3291: Failed to acquire dquot type 0 [ 651.849800][T10258] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3291: Failed to acquire dquot type 0 [ 651.863355][T10258] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3291: Failed to acquire dquot type 0 [ 651.879916][T10258] EXT4-fs (loop2): 1 orphan inode deleted [ 651.936558][T10258] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 651.955354][T10258] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.086022][T10275] overlayfs: failed to resolve './file2': -2 [ 652.166420][T10277] 9pnet_fd: p9_fd_create_tcp (10277): problem connecting socket to 127.0.0.1 [ 652.522422][T10287] loop0: detected capacity change from 0 to 512 [ 652.564543][T10285] loop3: detected capacity change from 0 to 8192 [ 652.598325][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 652.606772][T10287] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3300: casefold flag without casefold feature [ 652.705563][T10245] loop4: detected capacity change from 0 to 131072 [ 652.712360][T10287] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3300: couldn't read orphan inode 15 (err -117) [ 652.751182][T10245] F2FS-fs (loop4): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 652.772035][T10245] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 652.868878][T10287] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 652.915736][T10245] F2FS-fs (loop4): invalid crc value [ 653.168596][T10245] F2FS-fs (loop4): Found nat_bits in checkpoint [ 653.578343][T10245] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 653.588434][T10245] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 653.678768][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 653.693062][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 653.693080][ T28] audit: type=1400 audit(1746614865.705:433): avc: denied { lock } for pid=10244 comm="syz.4.3288" path="/86/file0/file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 653.699494][T10244] F2FS-fs (loop4): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 653.725117][ T28] audit: type=1400 audit(1746614865.715:434): avc: denied { unlink } for pid=10244 comm="syz.4.3288" name="file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 653.757421][T10305] fuse: Bad value for 'user_id' [ 654.746123][T10328] loop3: detected capacity change from 0 to 512 [ 654.999486][T10328] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.3314: casefold flag without casefold feature [ 655.075711][T10328] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3314: couldn't read orphan inode 15 (err -117) [ 655.098052][T10328] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 655.128265][T10337] fuse: Bad value for 'user_id' [ 655.634272][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 657.478291][T10363] loop5: detected capacity change from 0 to 1024 [ 659.538717][T10363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 660.280337][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 661.580043][ T28] audit: type=1400 audit(1746614873.595:435): avc: denied { wake_alarm } for pid=10411 comm="syz.3.3339" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 663.552331][T10435] loop3: detected capacity change from 0 to 1024 [ 664.282271][T10435] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 664.459242][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 664.971669][T10453] loop4: detected capacity change from 0 to 512 [ 665.146268][T10453] EXT4-fs (loop4): orphan cleanup on readonly fs [ 665.161253][T10453] EXT4-fs (loop4): 1 orphan inode deleted [ 665.297003][ T28] audit: type=1400 audit(1746614877.305:436): avc: denied { setopt } for pid=10456 comm="syz.0.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 665.944198][T10453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 666.051105][T10438] kvm: pic: level sensitive irq not supported [ 666.571855][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 666.863278][T10477] loop3: detected capacity change from 0 to 8192 [ 666.880338][T10477] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 666.998623][ T28] audit: type=1400 audit(1746614879.015:437): avc: denied { create } for pid=10487 comm="syz.0.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 667.025825][ T28] audit: type=1400 audit(1746614879.035:438): avc: denied { write } for pid=10487 comm="syz.0.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 667.047694][ T28] audit: type=1400 audit(1746614879.035:439): avc: denied { nlmsg_write } for pid=10487 comm="syz.0.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 667.086206][ T28] audit: type=1400 audit(1746614879.035:440): avc: denied { execmem } for pid=10487 comm="syz.0.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 667.113824][ T28] audit: type=1400 audit(1746614879.065:441): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 667.209307][ T28] audit: type=1400 audit(1746614879.065:442): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.231067][ T28] audit: type=1400 audit(1746614879.065:443): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 667.253256][ T28] audit: type=1400 audit(1746614879.065:444): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 667.337310][ T28] audit: type=1400 audit(1746614879.065:445): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 667.424745][ T28] audit: type=1400 audit(1746614879.095:446): avc: denied { read write } for pid=9407 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.668732][T10505] loop4: detected capacity change from 0 to 16 [ 667.736522][T10505] erofs: (device loop4): mounted with root inode @ nid 36. [ 668.012197][T10512] loop0: detected capacity change from 0 to 128 [ 668.051601][T10512] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 668.061266][T10512] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 670.740226][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 670.801124][T10526] loop4: detected capacity change from 0 to 8192 [ 670.815689][T10526] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 670.869769][T10536] loop0: detected capacity change from 0 to 16 [ 670.958372][T10536] erofs: (device loop0): mounted with root inode @ nid 36. [ 672.458322][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 672.458345][ T28] audit: type=1400 audit(1746614883.265:488): avc: denied { create } for pid=10539 comm="syz.3.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 673.631995][T10554] loop0: detected capacity change from 0 to 1024 [ 673.642622][ T28] audit: type=1400 audit(1746614883.275:489): avc: denied { bind } for pid=10539 comm="syz.3.3383" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 673.664745][ T28] audit: type=1400 audit(1746614883.285:490): avc: denied { node_bind } for pid=10539 comm="syz.3.3383" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 673.687042][ T28] audit: type=1400 audit(1746614883.285:491): avc: denied { write } for pid=10539 comm="syz.3.3383" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 673.687879][T10554] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 673.734097][T10554] EXT4-fs (loop0): orphan cleanup on readonly fs [ 673.780983][T10554] EXT4-fs error (device loop0): __ext4_get_inode_loc:4508: comm syz.0.3385: Invalid inode table block 0 in block_group 0 [ 673.807214][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 673.820026][T10554] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 673.837804][ T28] audit: type=1400 audit(1746614883.515:492): avc: denied { create } for pid=10539 comm="syz.3.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 673.874936][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 673.882562][T10554] EXT4-fs error (device loop0): ext4_quota_write:7184: inode #3: comm syz.0.3385: mark_inode_dirty error [ 673.894031][ T28] audit: type=1400 audit(1746614885.845:493): avc: denied { create } for pid=10559 comm="syz.4.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 673.913638][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 673.921252][T10554] Quota error (device loop0): write_blk: dquota write failed [ 673.933748][T10554] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 673.947450][T10567] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 673.964724][T10554] EXT4-fs error (device loop0): ext4_acquire_dquot:6789: comm syz.0.3385: Failed to acquire dquot type 0 [ 673.976390][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 673.978862][ T28] audit: type=1400 audit(1746614885.965:494): avc: denied { write } for pid=10565 comm="syz.4.3390" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 673.986751][T10554] EXT4-fs error (device loop0): __ext4_get_inode_loc:4508: comm syz.0.3385: Invalid inode table block 0 in block_group 0 [ 674.029169][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 674.029759][ T28] audit: type=1326 audit(1746614886.045:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.3.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c258e969 code=0x7ffc0000 [ 674.036167][T10554] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 674.068943][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 674.075473][T10554] EXT4-fs error (device loop0): ext4_ext_truncate:4453: inode #15: comm syz.0.3385: mark_inode_dirty error [ 674.087018][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 674.093774][T10554] EXT4-fs error (device loop0): __ext4_get_inode_loc:4508: comm syz.0.3385: Invalid inode table block 0 in block_group 0 [ 674.179152][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 674.185701][T10554] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 674.196090][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 674.204605][T10554] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 674.219589][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 674.226173][T10554] EXT4-fs error (device loop0): __ext4_get_inode_loc:4508: comm syz.0.3385: Invalid inode table block 0 in block_group 0 [ 674.239218][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 675.382938][T10554] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 675.498052][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 675.505790][T10554] EXT4-fs error (device loop0): ext4_truncate:4313: inode #15: comm syz.0.3385: mark_inode_dirty error [ 675.520980][T10591] loop2: detected capacity change from 0 to 8192 [ 675.630560][T10595] loop4: detected capacity change from 0 to 512 [ 675.640533][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 675.648215][T10554] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 675.660052][T10591] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 675.674310][T10554] EXT4-fs (loop0): Remounting filesystem read-only [ 675.847562][T10554] EXT4-fs (loop0): 1 truncate cleaned up [ 675.856461][T10595] EXT4-fs (loop4): 1 orphan inode deleted [ 675.862246][T10595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 675.871636][T10595] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.096446][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 678.096465][ T28] audit: type=1400 audit(1746614888.505:504): avc: denied { write } for pid=10582 comm="syz.4.3398" name="memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 678.168246][T10554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 678.194042][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 678.489608][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 678.496422][ T28] audit: type=1400 audit(1746614890.505:505): avc: denied { write } for pid=10603 comm="syz.5.3401" name="net" dev="proc" ino=51834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 678.535091][ T28] audit: type=1400 audit(1746614890.505:506): avc: denied { add_name } for pid=10603 comm="syz.5.3401" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 678.837503][ T28] audit: type=1400 audit(1746614890.505:507): avc: denied { create } for pid=10603 comm="syz.5.3401" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 679.163784][T10628] loop4: detected capacity change from 0 to 512 [ 679.188758][T10628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 679.197307][T10628] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 679.219859][ T28] audit: type=1400 audit(1746614890.505:508): avc: denied { associate } for pid=10603 comm="syz.5.3401" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 679.242077][T10628] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 679.252135][T10628] EXT4-fs warning (device loop4): ext4_enable_quotas:7024: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 679.302081][T10628] EXT4-fs (loop4): mount failed [ 679.307522][ T28] audit: type=1400 audit(1746614890.505:509): avc: denied { append } for pid=10603 comm="syz.5.3401" name="pfkey" dev="proc" ino=4026532703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 679.345297][ T28] audit: type=1400 audit(1746614891.355:510): avc: denied { write } for pid=10632 comm="syz.0.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 679.414253][ T28] audit: type=1400 audit(1746614891.355:511): avc: denied { read } for pid=10632 comm="syz.0.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 679.640515][ T28] audit: type=1400 audit(1746614891.385:512): avc: denied { ioctl } for pid=10632 comm="syz.0.3409" path="socket:[52586]" dev="sockfs" ino=52586 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 681.651111][T10656] fuse: Invalid rootmode [ 681.908533][T10662] loop4: detected capacity change from 0 to 512 [ 682.100102][T10662] EXT4-fs (loop4): 1 orphan inode deleted [ 682.105930][T10662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 682.121077][T10662] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.781117][T10671] overlayfs: failed to resolve './file2': -2 [ 683.799473][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 683.811956][T10675] overlayfs: missing 'lowerdir' [ 683.821058][T10675] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 683.829824][T10675] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 684.078119][T10681] loop4: detected capacity change from 0 to 128 [ 684.765447][T10681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 684.774222][T10681] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.788961][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 684.791513][T10681] device bridge0 entered promiscuous mode [ 684.803906][T10681] bridge0: port 3(macsec1) entered blocking state [ 684.810437][T10681] bridge0: port 3(macsec1) entered disabled state [ 684.817786][T10681] device bridge0 left promiscuous mode [ 684.839998][ T28] audit: type=1400 audit(1746614896.805:520): avc: denied { ioctl } for pid=10680 comm="syz.4.3421" path="socket:[52739]" dev="sockfs" ino=52739 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 685.044464][ T28] audit: type=1400 audit(1746614896.805:521): avc: denied { create } for pid=10680 comm="syz.4.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 685.955478][T10701] loop0: detected capacity change from 0 to 512 [ 685.962796][T10701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 685.971275][T10701] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 686.052263][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 686.059479][T10701] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 686.069497][T10701] EXT4-fs warning (device loop0): ext4_enable_quotas:7024: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 686.084611][T10701] EXT4-fs (loop0): mount failed [ 687.065015][T10719] loop4: detected capacity change from 0 to 128 [ 687.122420][T10719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 687.152767][T10719] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 687.289504][T10726] loop2: detected capacity change from 0 to 8192 [ 687.296570][T10723] loop5: detected capacity change from 0 to 512 [ 687.303558][ T28] audit: type=1400 audit(1746614899.275:522): avc: denied { read } for pid=10721 comm="syz.2.3433" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 687.351385][T10723] EXT4-fs (loop5): 1 orphan inode deleted [ 687.357184][T10723] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 687.363186][ T28] audit: type=1400 audit(1746614899.275:523): avc: denied { open } for pid=10721 comm="syz.2.3433" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 687.521778][T10723] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.609498][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3428'. [ 687.686109][ T28] audit: type=1400 audit(1746614899.625:524): avc: denied { write } for pid=10718 comm="syz.4.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 687.713705][ T28] audit: type=1400 audit(1746614899.625:525): avc: denied { nlmsg_write } for pid=10718 comm="syz.4.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 689.402574][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 689.410883][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 689.472531][T10744] loop0: detected capacity change from 0 to 256 [ 689.479843][T10744] exfat: Deprecated parameter 'utf8' [ 689.485361][T10744] exfat: Deprecated parameter 'utf8' [ 689.585575][T10744] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 690.668885][T10758] loop4: detected capacity change from 0 to 128 [ 690.969689][ T28] audit: type=1400 audit(1746614901.975:526): avc: denied { write } for pid=10743 comm="syz.0.3437" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 691.023595][ T28] audit: type=1400 audit(1746614902.025:527): avc: denied { add_name } for pid=10743 comm="syz.0.3437" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 691.057474][ T28] audit: type=1400 audit(1746614902.035:528): avc: denied { associate } for pid=10743 comm="syz.0.3437" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 691.089803][ T28] audit: type=1400 audit(1746614902.205:529): avc: denied { write } for pid=10743 comm="syz.0.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 691.139092][T10765] loop2: detected capacity change from 0 to 8192 [ 691.253613][T10758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 691.262497][T10758] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.516724][T10767] binder: 10762:10767 ioctl c018620b 0 returned -14 [ 692.267767][T10767] loop5: detected capacity change from 0 to 8192 [ 692.276741][T10758] device bridge0 entered promiscuous mode [ 692.283089][T10758] bridge0: port 3(macsec1) entered blocking state [ 692.289559][T10758] bridge0: port 3(macsec1) entered disabled state [ 692.301786][ T28] audit: type=1400 audit(1746614903.295:530): avc: denied { read append open } for pid=10743 comm="syz.0.3437" path="/83/file0/blkio.bfq.io_wait_time_recursive" dev="loop0" ino=1048677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 692.301948][T10758] device bridge0 left promiscuous mode [ 692.338019][T10765] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 692.344463][ T28] audit: type=1400 audit(1746614903.445:531): avc: denied { ioctl } for pid=10762 comm="syz.5.3438" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 692.389033][ T28] audit: type=1400 audit(1746614903.455:532): avc: denied { set_context_mgr } for pid=10762 comm="syz.5.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 692.854102][ T28] audit: type=1400 audit(1746614904.575:533): avc: denied { write } for pid=10774 comm="syz.3.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 692.936631][ T28] audit: type=1400 audit(1746614904.905:534): avc: denied { read write } for pid=10778 comm="syz.5.3446" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 692.960721][ T28] audit: type=1400 audit(1746614904.905:535): avc: denied { open } for pid=10778 comm="syz.5.3446" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 693.044365][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 695.197051][T10792] loop2: detected capacity change from 0 to 512 [ 696.672866][T10792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 696.682256][T10792] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.945660][T10798] loop0: detected capacity change from 0 to 8192 [ 697.286798][T10589] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 700.012057][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 700.199937][T10819] loop3: detected capacity change from 0 to 512 [ 701.046696][ T298] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 701.733196][T10819] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #17: comm syz.3.3456: iget: bogus i_mode (0) [ 701.745238][T10819] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3456: couldn't read orphan inode 17 (err -117) [ 701.758535][T10819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 702.792384][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 703.075213][T10858] loop5: detected capacity change from 0 to 8192 [ 703.888448][T10864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=10864 comm=syz.4.3467 [ 704.097044][T10862] loop2: detected capacity change from 0 to 512 [ 704.266593][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 704.266609][ T28] audit: type=1400 audit(1746614916.275:537): avc: denied { read write } for pid=10871 comm="syz.4.3471" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 704.298497][ T28] audit: type=1400 audit(1746614916.315:538): avc: denied { open } for pid=10871 comm="syz.4.3471" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 705.458335][ T28] audit: type=1400 audit(1746614916.315:539): avc: denied { ioctl } for pid=10871 comm="syz.4.3471" path="socket:[53265]" dev="sockfs" ino=53265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 705.509885][T10862] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 705.528638][T10862] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.618859][T10890] loop4: detected capacity change from 0 to 512 [ 705.753516][T10890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 706.534052][T10890] EXT4-fs (loop4): orphan cleanup on readonly fs [ 706.545301][T10890] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3473: bg 0: block 248: padding at end of block bitmap is not set [ 706.562222][T10890] Quota error (device loop4): write_blk: dquota write failed [ 706.569844][T10890] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 706.579871][T10890] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3473: Failed to acquire dquot type 1 [ 706.593975][T10890] EXT4-fs (loop4): 1 truncate cleaned up [ 706.601567][T10890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 707.039094][ T28] audit: type=1400 audit(1746614916.315:540): avc: denied { bind } for pid=10871 comm="syz.4.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 707.085666][ T28] audit: type=1400 audit(1746614917.225:541): avc: denied { write } for pid=10871 comm="syz.4.3471" name="ptype" dev="proc" ino=4026532963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 707.190989][ T28] audit: type=1400 audit(1746614919.205:542): avc: denied { bind } for pid=10895 comm="syz.5.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 707.345593][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 707.637184][ T28] audit: type=1400 audit(1746614919.645:543): avc: denied { setopt } for pid=10902 comm="syz.4.3478" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 707.673210][T10908] loop3: detected capacity change from 0 to 8192 [ 707.675087][ T28] audit: type=1400 audit(1746614919.645:544): avc: denied { getopt } for pid=10902 comm="syz.4.3478" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 708.115427][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 708.243924][T10915] netlink: 'syz.0.3482': attribute type 15 has an invalid length. [ 708.531421][T10917] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 708.716189][T10938] overlayfs: failed to resolve './file2': -2 [ 708.817984][ T725] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 708.961901][T10944] loop4: detected capacity change from 0 to 512 [ 709.936363][T10951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=10951 comm=syz.0.3494 [ 710.024549][T10944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 710.034037][T10944] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.197965][ T725] usb 3-1: Using ep0 maxpacket: 32 [ 710.205992][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 710.206008][ T28] audit: type=1400 audit(1746614922.215:552): avc: denied { write } for pid=10922 comm="syz.2.3487" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 710.254935][ T28] audit: type=1400 audit(1746614922.215:553): avc: denied { ioctl } for pid=10922 comm="syz.2.3487" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 710.270584][T10924] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 710.285817][ T725] usb 3-1: unable to get BOS descriptor or descriptor too short [ 710.313186][ T725] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 710.322120][ T725] usb 3-1: can't read configurations, error -71 [ 710.383825][T10954] loop0: detected capacity change from 0 to 8192 [ 710.393950][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 710.779036][T10968] device wg2 entered promiscuous mode [ 710.806306][T10970] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 711.673385][ T28] audit: type=1400 audit(1746614923.685:554): avc: denied { ioctl } for pid=10982 comm="syz.4.3508" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 713.449052][T10999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=10999 comm=syz.0.3506 [ 713.726463][ T28] audit: type=1400 audit(1746614925.715:555): avc: denied { mounton } for pid=11001 comm="syz.5.3512" path="/119/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 713.788948][T11002] incfs: Can't find or create .index dir in ./file0 [ 713.810600][ T28] audit: type=1400 audit(1746614925.805:556): avc: denied { create } for pid=11001 comm="syz.5.3512" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 713.822632][T11002] incfs: mount failed -5 [ 715.051485][T11012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 715.162154][T11018] loop4: detected capacity change from 0 to 16 [ 715.200735][T11018] erofs: (device loop4): mounted with root inode @ nid 36. [ 715.238382][T11016] loop5: detected capacity change from 0 to 8192 [ 715.939401][ T28] audit: type=1400 audit(1746614927.945:557): avc: denied { create } for pid=11036 comm="syz.3.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 715.950963][T11040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=11040 comm=syz.0.3523 [ 716.247763][ T28] audit: type=1400 audit(1746614927.955:558): avc: denied { unlink } for pid=11027 comm="syz.2.3521" name="#3b" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 716.282216][ T28] audit: type=1400 audit(1746614928.155:559): avc: denied { mount } for pid=11041 comm="syz.4.3526" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 716.386844][T11051] loop4: detected capacity change from 0 to 512 [ 716.429304][T11053] loop5: detected capacity change from 0 to 512 [ 716.504421][T11053] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 716.513889][T11053] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 717.942140][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 717.976429][T11051] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 717.988080][T11065] fuse: Unknown parameter 'user_i00000000000000000000' [ 718.005529][T11051] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 718.016645][T11051] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3529: Failed to acquire dquot type 0 [ 718.035234][T11051] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 718.046918][T11051] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 718.057489][T11051] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3529: Failed to acquire dquot type 0 [ 718.079711][T11051] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 718.115276][T11051] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 718.167457][T11051] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3529: Failed to acquire dquot type 0 [ 718.198630][T11051] EXT4-fs (loop4): 1 orphan inode deleted [ 718.204433][T11051] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 718.247373][T11051] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.311167][T11079] loop5: detected capacity change from 0 to 8192 [ 718.527958][ T28] audit: type=1400 audit(1746614930.475:560): avc: denied { mounton } for pid=11050 comm="syz.4.3529" path="/129/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 718.710096][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 719.451422][T11100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=11100 comm=syz.5.3540 [ 719.896539][T11106] fuse: Unknown parameter 'user_i00000000000000000000' [ 720.828837][T11115] loop2: detected capacity change from 0 to 512 [ 721.058910][T11115] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 721.068358][T11115] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 722.048695][T11121] loop4: detected capacity change from 0 to 512 [ 722.081718][T11121] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 722.093795][T11121] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 722.103250][T11121] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3547: Failed to acquire dquot type 0 [ 722.177132][T11121] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 722.188383][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 722.207962][T11121] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 722.217508][T11121] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3547: Failed to acquire dquot type 0 [ 722.241405][T11133] loop5: detected capacity change from 0 to 256 [ 722.250752][T11121] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 722.262421][T11133] exfat: Deprecated parameter 'namecase' [ 722.275046][T11121] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 722.286738][T11133] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 722.313097][T11121] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3547: Failed to acquire dquot type 0 [ 722.333401][T11121] EXT4-fs (loop4): 1 orphan inode deleted [ 722.339424][T11121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 722.348906][T11121] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 722.460093][T11138] loop3: detected capacity change from 0 to 8192 [ 722.462444][T11140] loop0: detected capacity change from 0 to 16 [ 722.488399][T11140] erofs: (device loop0): mounted with root inode @ nid 36. [ 722.982822][ T28] audit: type=1400 audit(1746614934.585:561): avc: denied { write } for pid=11132 comm="syz.5.3551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 724.347707][ T28] audit: type=1400 audit(1746614934.995:562): avc: denied { write } for pid=11141 comm="syz.2.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 724.423608][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 724.475485][T11161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=11161 comm=syz.5.3556 [ 724.917551][T11163] loop0: detected capacity change from 0 to 512 [ 725.067700][ T28] audit: type=1400 audit(1746614937.075:563): avc: denied { read } for pid=11156 comm="syz.2.3559" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=53910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 725.345839][T11163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 725.355106][T11163] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 725.787397][T11182] loop2: detected capacity change from 0 to 128 [ 725.953600][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 725.974004][ T1575] kworker/u4:7: attempt to access beyond end of device [ 725.974004][ T1575] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 726.123785][T11195] loop5: detected capacity change from 0 to 512 [ 726.139705][T11195] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 726.150365][T11195] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3571: Failed to acquire dquot type 0 [ 726.758489][T11189] loop0: detected capacity change from 0 to 8192 [ 727.030034][T11198] loop4: detected capacity change from 0 to 512 [ 727.042499][T11198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 727.062197][T11195] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3571: Failed to acquire dquot type 0 [ 727.075348][T11198] EXT4-fs (loop4): orphan cleanup on readonly fs [ 727.081350][T11195] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3571: Failed to acquire dquot type 0 [ 727.093528][T11198] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3570: bg 0: block 248: padding at end of block bitmap is not set [ 727.133600][T11198] __quota_error: 5 callbacks suppressed [ 727.133620][T11198] Quota error (device loop4): write_blk: dquota write failed [ 727.147223][T11198] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 727.157188][T11198] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3570: Failed to acquire dquot type 1 [ 727.170000][T11198] EXT4-fs (loop4): 1 truncate cleaned up [ 727.175941][T11198] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 727.187208][T11195] EXT4-fs (loop5): 1 orphan inode deleted [ 727.193438][T11195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 727.202723][T11195] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.170034][T11209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=11209 comm=syz.2.3572 [ 728.684526][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 728.690426][ T298] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 728.764544][T11217] netlink: 'syz.3.3577': attribute type 30 has an invalid length. [ 728.975177][T11235] loop0: detected capacity change from 0 to 512 [ 729.078672][T11236] loop3: detected capacity change from 0 to 128 [ 729.150030][T11235] EXT4-fs (loop0): 1 orphan inode deleted [ 729.155875][T11235] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 729.166807][T11235] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.782918][T11245] incfs: Can't find or create .index dir in ./file0 [ 729.803146][T11245] incfs: mount failed -5 [ 729.809025][ T10] kworker/u4:1: attempt to access beyond end of device [ 729.809025][ T10] loop3: rw=1, sector=145, nr_sectors = 656 limit=128 [ 729.925463][T11247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=11247 comm=syz.4.3586 [ 730.040065][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 730.195667][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 730.275629][T11263] loop3: detected capacity change from 0 to 512 [ 730.289289][T11264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=11264 comm=syz.0.3589 [ 730.340508][T11263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 730.367076][T11263] EXT4-fs (loop3): orphan cleanup on readonly fs [ 730.379150][T11263] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3588: bg 0: block 248: padding at end of block bitmap is not set [ 730.395432][T11263] Quota error (device loop3): write_blk: dquota write failed [ 730.403290][T11263] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 730.413486][T11263] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3588: Failed to acquire dquot type 1 [ 730.428285][T11263] EXT4-fs (loop3): 1 truncate cleaned up [ 730.440494][T11263] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 731.254291][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 731.447161][T11284] loop4: detected capacity change from 0 to 512 [ 731.629725][T11284] EXT4-fs (loop4): 1 orphan inode deleted [ 731.635534][T11284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 731.646413][T11284] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.820078][T11289] loop5: detected capacity change from 0 to 512 [ 732.005182][T11289] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 732.015837][T11289] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 732.026044][T11289] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3603: Failed to acquire dquot type 0 [ 732.038436][T11289] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 732.049134][T11289] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 732.066307][T11289] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3603: Failed to acquire dquot type 0 [ 732.090042][T11289] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 732.110616][T11289] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 732.130901][T11289] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3603: Failed to acquire dquot type 0 [ 732.154362][T11289] EXT4-fs (loop5): 1 orphan inode deleted [ 732.166790][T11289] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 732.185934][T11289] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.307051][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 732.526343][T11312] loop4: detected capacity change from 0 to 512 [ 732.535005][T11312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 732.543551][T11312] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 732.666366][T11317] loop3: detected capacity change from 0 to 16 [ 732.780341][T11312] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 732.790797][T11312] EXT4-fs warning (device loop4): ext4_enable_quotas:7024: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 732.806662][T11312] EXT4-fs (loop4): mount failed [ 732.871562][T11322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=11322 comm=syz.2.3610 [ 733.708481][T11317] erofs: (device loop3): mounted with root inode @ nid 36. [ 733.939623][T11328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=11328 comm=syz.2.3612 [ 737.488747][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 737.549243][T11359] loop5: detected capacity change from 0 to 128 [ 737.571736][T11359] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 737.587672][T11359] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 739.878572][T11366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=11366 comm=syz.2.3623 [ 740.330821][T11378] loop2: detected capacity change from 0 to 512 [ 740.345991][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'. [ 740.359195][T11378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 740.369369][T11378] EXT4-fs (loop2): orphan cleanup on readonly fs [ 740.948185][T11378] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3628: bg 0: block 248: padding at end of block bitmap is not set [ 740.963725][T11378] Quota error (device loop2): write_blk: dquota write failed [ 740.971403][T11378] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 740.981511][T11378] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3628: Failed to acquire dquot type 1 [ 740.997944][T11378] EXT4-fs (loop2): 1 truncate cleaned up [ 741.688778][T11378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 741.689624][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 741.831786][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 742.304931][T11404] incfs: Can't find or create .index dir in ./file0 [ 742.395143][T11404] incfs: mount failed -5 [ 745.235785][T11434] loop4: detected capacity change from 0 to 512 [ 745.243072][T11434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 746.099206][ T28] audit: type=1400 audit(1746614958.115:564): avc: denied { wake_alarm } for pid=11439 comm="syz.3.3645" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 746.130030][T11434] EXT4-fs (loop4): orphan cleanup on readonly fs [ 746.137204][T11434] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3643: bg 0: block 248: padding at end of block bitmap is not set [ 746.152242][T11434] Quota error (device loop4): write_blk: dquota write failed [ 746.160208][T11434] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 746.170199][T11434] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3643: Failed to acquire dquot type 1 [ 746.182424][T11434] EXT4-fs (loop4): 1 truncate cleaned up [ 746.189406][T11434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 746.309288][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 747.069222][T11460] loop4: detected capacity change from 0 to 16 [ 747.289653][T11460] erofs: (device loop4): mounted with root inode @ nid 36. [ 751.110833][T11473] overlayfs: missing 'lowerdir' [ 752.359114][T11501] loop4: detected capacity change from 0 to 512 [ 752.366345][T11501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 752.391116][T11501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 752.398467][T11501] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3662: bg 0: block 248: padding at end of block bitmap is not set [ 752.413246][T11501] Quota error (device loop4): write_blk: dquota write failed [ 752.420718][T11501] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 752.430700][T11501] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.3662: Failed to acquire dquot type 1 [ 752.482332][T11501] EXT4-fs (loop4): 1 truncate cleaned up [ 752.488797][T11501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 754.413478][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 755.185025][T11525] loop4: detected capacity change from 0 to 512 [ 755.235037][T11525] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.3670: casefold flag without casefold feature [ 755.265483][T11525] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3670: couldn't read orphan inode 15 (err -117) [ 755.349620][T11533] loop3: detected capacity change from 0 to 512 [ 755.408127][T11533] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 755.418728][T11525] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 755.500411][ T28] audit: type=1400 audit(1746614967.515:565): avc: denied { mounton } for pid=11524 comm="syz.4.3670" path="/161/file0/file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 755.627736][ T28] audit: type=1400 audit(1746614967.545:566): avc: denied { write } for pid=11524 comm="syz.4.3670" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 756.273400][T11533] loop3: detected capacity change from 0 to 512 [ 756.465624][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 756.503468][T11533] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #17: comm syz.3.3671: iget: bogus i_mode (0) [ 756.515881][T11533] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3671: couldn't read orphan inode 17 (err -117) [ 756.529779][T11533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 756.738383][ T28] audit: type=1400 audit(1746614967.545:567): avc: denied { add_name } for pid=11524 comm="syz.4.3670" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 757.774981][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 757.830460][T11550] loop3: detected capacity change from 0 to 1024 [ 757.832757][ T28] audit: type=1400 audit(1746614967.545:568): avc: denied { setattr } for pid=11524 comm="syz.4.3670" name="work" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 757.871920][T11550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 757.873481][ T28] audit: type=1400 audit(1746614967.545:569): avc: denied { remove_name } for pid=11524 comm="syz.4.3670" name="#3d" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 757.905211][ T28] audit: type=1400 audit(1746614967.545:570): avc: denied { rename } for pid=11524 comm="syz.4.3670" name="#3d" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 757.949827][T11557] loop4: detected capacity change from 0 to 512 [ 757.961287][ T28] audit: type=1400 audit(1746614967.545:571): avc: denied { unlink } for pid=11524 comm="syz.4.3670" name="#3d" dev="loop4" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 757.994103][ T28] audit: type=1400 audit(1746614967.545:572): avc: denied { unlink } for pid=11524 comm="syz.4.3670" name="#3e" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 758.169751][T11557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 758.178945][T11557] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 759.363957][ T28] audit: type=1400 audit(1746614967.785:573): avc: denied { setattr } for pid=11524 comm="syz.4.3670" name="file1" dev="overlay" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 759.387823][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 759.397931][ T28] audit: type=1400 audit(1746614968.385:574): avc: denied { link } for pid=11524 comm="syz.4.3670" name="#25" dev="loop4" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 759.420955][ T28] audit: type=1400 audit(1746614968.435:575): avc: denied { remove_name } for pid=8800 comm="syz-executor" name="file2" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 759.444150][ T28] audit: type=1400 audit(1746614968.435:576): avc: denied { rmdir } for pid=8800 comm="syz-executor" name="file2" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 759.466395][ T28] audit: type=1400 audit(1746614970.365:577): avc: denied { name_bind } for pid=11549 comm="syz.3.3676" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 759.770481][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 759.819924][T11567] loop5: detected capacity change from 0 to 16 [ 759.843604][T11567] erofs: Unknown parameter '[.h`&iR' [ 759.902767][T11567] tipc: Started in network mode [ 759.907739][T11567] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 759.917287][T11567] tipc: Enabled bearer , priority 10 [ 760.156645][T11580] loop3: detected capacity change from 0 to 512 [ 760.747152][T11577] loop4: detected capacity change from 0 to 512 [ 760.839904][T11586] loop5: detected capacity change from 0 to 128 [ 760.850059][T11580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 760.859386][T11580] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 761.202337][T11590] loop2: detected capacity change from 0 to 512 [ 762.164335][T11582] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 762.424093][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 762.454806][T11577] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.3685: casefold flag without casefold feature [ 762.481656][T11590] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 762.495854][T11586] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 762.529954][T11586] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 762.566626][T11577] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3685: couldn't read orphan inode 15 (err -117) [ 762.705078][T11577] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 763.069601][ T2765] tipc: Node number set to 1 [ 763.610062][T11601] loop3: detected capacity change from 0 to 512 [ 763.712860][T11590] loop2: detected capacity change from 0 to 512 [ 763.730736][T11601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 763.739248][T11601] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 763.842460][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 763.868709][T11590] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.3687: iget: bogus i_mode (0) [ 763.880767][T11590] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3687: couldn't read orphan inode 17 (err -117) [ 763.894473][T11590] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 763.931167][T11601] __quota_error: 1 callbacks suppressed [ 763.931188][T11601] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 763.946777][T11601] EXT4-fs warning (device loop3): ext4_enable_quotas:7024: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 763.961919][T11601] EXT4-fs (loop3): mount failed [ 763.988292][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 764.068677][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 764.112619][ T28] audit: type=1326 audit(1746614976.125:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.4.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792418e969 code=0x7ffc0000 [ 764.144436][T11614] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 764.182241][ T28] audit: type=1326 audit(1746614976.125:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.4.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792418e969 code=0x7ffc0000 [ 764.234249][T11618] loop3: detected capacity change from 0 to 512 [ 764.444454][T11618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 764.453766][T11618] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 764.667077][ T28] audit: type=1326 audit(1746614976.145:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.4.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f792418e969 code=0x7ffc0000 [ 764.781294][ T28] audit: type=1326 audit(1746614976.145:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.4.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792418e969 code=0x7ffc0000 [ 764.914245][ T28] audit: type=1326 audit(1746614976.145:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.4.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792418e969 code=0x7ffc0000 [ 765.018144][ T28] audit: type=1400 audit(1746614976.155:584): avc: denied { relabelfrom } for pid=11613 comm="syz.2.3691" name="NETLINK" dev="sockfs" ino=56391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 765.043953][ T28] audit: type=1400 audit(1746614976.275:585): avc: denied { relabelto } for pid=11613 comm="syz.2.3691" name="NETLINK" dev="sockfs" ino=56391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 765.509440][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 765.667923][T11643] loop0: detected capacity change from 0 to 512 [ 766.141969][T11643] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 766.484535][T11643] loop0: detected capacity change from 0 to 512 [ 766.602553][T11643] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.3701: iget: bogus i_mode (0) [ 766.614704][T11643] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3701: couldn't read orphan inode 17 (err -117) [ 766.628122][T11643] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 767.274820][T11655] loop2: detected capacity change from 0 to 512 [ 767.282344][T11655] EXT4-fs (loop2): Test dummy encryption mode enabled [ 767.298556][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 767.334435][T11655] EXT4-fs error (device loop2): __ext4_iget:5057: inode #11: block 1: comm syz.2.3705: invalid block [ 767.346272][T11655] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3705: couldn't read orphan inode 11 (err -117) [ 767.359678][T11655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 768.093385][T11667] loop3: detected capacity change from 0 to 16 [ 768.104205][T11668] loop5: detected capacity change from 0 to 256 [ 768.117480][T11667] erofs: (device loop3): mounted with root inode @ nid 36. [ 768.154390][T11668] exfat: Deprecated parameter 'utf8' [ 768.315795][T11668] exfat: Deprecated parameter 'utf8' [ 768.322336][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 768.340489][T11668] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 768.770956][T11680] loop2: detected capacity change from 0 to 512 [ 768.778316][T11680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 768.791023][T11680] EXT4-fs (loop2): orphan cleanup on readonly fs [ 768.798281][T11680] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3712: bg 0: block 248: padding at end of block bitmap is not set [ 768.813014][T11680] Quota error (device loop2): write_blk: dquota write failed [ 768.820716][T11680] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 768.830962][T11680] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.3712: Failed to acquire dquot type 1 [ 768.845020][T11680] EXT4-fs (loop2): 1 truncate cleaned up [ 768.854513][T11680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 768.887463][T11683] loop4: detected capacity change from 0 to 512 [ 769.123510][T11683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 769.133064][T11683] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 770.070037][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 770.189474][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 770.986998][T11705] loop3: detected capacity change from 0 to 128 [ 772.544180][T11705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 772.608397][T11705] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.630748][T11704] device bridge0 entered promiscuous mode [ 772.637039][T11704] bridge0: port 3(macsec1) entered blocking state [ 772.644179][T11704] bridge0: port 3(macsec1) entered disabled state [ 772.651509][T11704] device bridge0 left promiscuous mode [ 772.707225][T11725] loop0: detected capacity change from 0 to 256 [ 772.717104][T11725] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 772.833237][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 773.078611][T11740] loop3: detected capacity change from 0 to 512 [ 773.086575][T11740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 773.117708][T11742] loop4: detected capacity change from 0 to 512 [ 773.287667][T11740] EXT4-fs (loop3): orphan cleanup on readonly fs [ 773.317918][T11740] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3726: bg 0: block 248: padding at end of block bitmap is not set [ 773.369221][T11740] Quota error (device loop3): write_blk: dquota write failed [ 773.377348][T11740] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 773.387620][T11740] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.3726: Failed to acquire dquot type 1 [ 773.568183][T11740] EXT4-fs (loop3): 1 truncate cleaned up [ 773.972554][T11740] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 774.116232][T11742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 774.125581][T11742] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 774.208615][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 774.423491][T11751] loop5: detected capacity change from 0 to 512 [ 774.517060][T11751] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 774.551868][T11751] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 774.563563][T11751] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3733: Failed to acquire dquot type 0 [ 774.575390][T11751] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 774.586587][T11751] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 774.596384][T11751] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3733: Failed to acquire dquot type 0 [ 774.608651][T11751] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 774.619302][T11751] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 774.628945][T11751] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.3733: Failed to acquire dquot type 0 [ 774.640646][T11751] EXT4-fs (loop5): 1 orphan inode deleted [ 774.646389][T11751] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 774.655661][T11751] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.712834][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 774.734190][T11761] bridge: RTM_NEWNEIGH with invalid ether address [ 774.871777][ T28] audit: type=1326 audit(1746614986.885:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.3.3732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38c258e969 code=0x0 [ 774.965906][T11771] 9pnet_fd: p9_fd_create_tcp (11771): problem connecting socket to 127.0.0.1 [ 775.652048][ T8897] EXT4-fs (loop5): unmounting filesystem. [ 777.272240][ T28] audit: type=1400 audit(1746614988.375:587): avc: denied { setopt } for pid=11784 comm="syz.5.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 777.473859][T11763] loop2: detected capacity change from 0 to 40427 [ 780.148858][T11812] loop4: detected capacity change from 0 to 512 [ 784.772484][T11813] loop0: detected capacity change from 0 to 512 [ 784.829316][T11812] EXT4-fs (loop4): Test dummy encryption mode enabled [ 784.837748][T11813] EXT4-fs (loop0): Test dummy encryption mode enabled [ 784.859691][T11812] EXT4-fs: failed to create workqueue [ 784.865185][T11812] EXT4-fs (loop4): mount failed [ 784.983196][T11813] EXT4-fs: failed to create workqueue [ 784.988759][T11813] EXT4-fs (loop0): mount failed [ 785.006479][T11763] F2FS-fs (loop2): Found nat_bits in checkpoint [ 785.384778][T11822] bridge: RTM_NEWNEIGH with invalid ether address [ 785.634039][ T28] audit: type=1400 audit(1746614997.645:588): avc: denied { mount } for pid=11844 comm="syz.5.3762" name="/" dev="ramfs" ino=56755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 788.748124][T11851] loop5: detected capacity change from 0 to 512 [ 788.761068][T11851] ext4: Unknown parameter 'noacl' [ 789.145864][ T28] audit: type=1400 audit(1746614997.655:589): avc: denied { mount } for pid=11846 comm="syz.0.3763" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 789.410450][T11854] loop4: detected capacity change from 0 to 1024 [ 789.435385][T11854] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 789.452734][ T28] audit: type=1400 audit(1746615000.765:590): avc: denied { mounton } for pid=11844 comm="syz.5.3762" path="/160/bus" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 789.553184][ T28] audit: type=1400 audit(1746615001.435:591): avc: denied { unmount } for pid=9287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 789.591242][T11854] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 789.812191][T11866] loop3: detected capacity change from 0 to 512 [ 789.823831][T11867] loop0: detected capacity change from 0 to 512 [ 790.983180][T11867] EXT4-fs (loop0): Test dummy encryption mode enabled [ 790.991092][T11866] EXT4-fs (loop3): Test dummy encryption mode enabled [ 791.040449][T11854] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.042703][T11866] EXT4-fs error (device loop3): __ext4_iget:5057: inode #11: block 1: comm syz.3.3767: invalid block [ 791.068465][ T28] audit: type=1400 audit(1746615003.085:592): avc: denied { read write } for pid=11853 comm="syz.4.3764" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 791.091365][T11867] EXT4-fs error (device loop0): __ext4_iget:5057: inode #11: block 1: comm syz.0.3766: invalid block [ 791.104294][T11866] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3767: couldn't read orphan inode 11 (err -117) [ 791.116764][T11867] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3766: couldn't read orphan inode 11 (err -117) [ 791.129620][T11866] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 791.139178][T11867] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 791.428053][T11872] bridge: RTM_NEWNEIGH with invalid ether address [ 791.770899][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 791.799184][ T8800] EXT4-fs (loop4): unmounting filesystem. [ 791.858865][ T28] audit: type=1400 audit(1746615003.085:593): avc: denied { open } for pid=11853 comm="syz.4.3764" path="/181/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 791.960330][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 791.969248][T11882] 9pnet_fd: Insufficient options for proto=fd [ 792.013075][T11890] loop3: detected capacity change from 0 to 128 [ 792.031490][T11890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 792.149171][T11897] loop2: detected capacity change from 0 to 512 [ 792.194691][T11897] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 792.206085][T11890] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 793.756591][T11897] loop2: detected capacity change from 0 to 512 [ 793.820442][ T28] audit: type=1400 audit(1746615004.335:594): avc: denied { create } for pid=11891 comm="syz.0.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 793.910642][T11897] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.3775: iget: bogus i_mode (0) [ 793.923359][T11897] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3775: couldn't read orphan inode 17 (err -117) [ 793.936976][T11897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 795.309648][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 795.361748][T11913] fuse: Bad value for 'fd' [ 795.386515][ T28] audit: type=1400 audit(1746615004.375:595): avc: denied { sys_admin } for pid=11891 comm="syz.0.3778" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 795.779626][ T9407] EXT4-fs (loop2): unmounting filesystem. [ 796.331786][T11939] device wg2 entered promiscuous mode [ 796.398017][ T28] audit: type=1400 audit(1746615008.405:596): avc: denied { name_bind } for pid=11945 comm="syz.3.3795" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 796.456288][T11948] loop0: detected capacity change from 0 to 128 [ 796.467454][T11948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 796.476550][T11948] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 796.563433][T11953] overlayfs: conflicting lowerdir path [ 796.599588][T11956] loop3: detected capacity change from 0 to 1024 [ 796.610444][T11956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 796.619147][T11956] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.636735][T11956] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 796.687160][T11956] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 796.898897][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3796'. [ 797.013587][T11963] loop5: detected capacity change from 0 to 128 [ 797.442318][ T9287] EXT4-fs (loop0): unmounting filesystem. [ 797.511944][T11956] EXT4-fs (loop3): This should not happen!! Data will be lost [ 797.511944][T11956] [ 797.648296][T11956] EXT4-fs (loop3): Total free blocks count 0 [ 797.654380][T11956] EXT4-fs (loop3): Free/Dirty block details [ 797.692353][T11973] loop4: detected capacity change from 0 to 2048 [ 797.699092][T11956] EXT4-fs (loop3): free_blocks=4293918720 [ 797.704896][T11956] EXT4-fs (loop3): dirty_blocks=16 [ 797.725066][T11973] EXT4-fs: Ignoring removed i_version option [ 797.731268][T11956] EXT4-fs (loop3): Block reservation details [ 797.738969][T11956] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 797.755825][T11973] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 797.767697][T11973] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.781056][ T9209] EXT4-fs (loop3): unmounting filesystem. [ 797.999133][ T576] ================================================================== [ 798.007243][ T576] BUG: KASAN: use-after-free in kernfs_get+0x21/0x90 [ 798.013935][ T576] Read of size 4 at addr ffff888131163d48 by task kworker/1:6/576 [ 798.021730][ T576] [ 798.024044][ T576] CPU: 1 PID: 576 Comm: kworker/1:6 Not tainted 6.1.134-syzkaller-00002-g48ab183a3ee2 #0 [ 798.033835][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 798.043880][ T576] Workqueue: events flush_stashed_error_work [ 798.049876][ T576] Call Trace: [ 798.053147][ T576] [ 798.056071][ T576] __dump_stack+0x21/0x24 [ 798.060402][ T576] dump_stack_lvl+0xee/0x150 [ 798.065015][ T576] ? __cfi_dump_stack_lvl+0x8/0x8 [ 798.070037][ T576] ? __kasan_check_read+0x11/0x20 [ 798.075145][ T576] ? kernfs_get+0x21/0x90 [ 798.079480][ T576] print_address_description+0x71/0x210 [ 798.085027][ T576] print_report+0x4a/0x60 [ 798.089383][ T576] kasan_report+0x122/0x150 [ 798.093877][ T576] ? kernfs_get+0x21/0x90 [ 798.098203][ T576] kasan_check_range+0x280/0x290 [ 798.103133][ T576] __kasan_check_read+0x11/0x20 [ 798.108083][ T576] kernfs_get+0x21/0x90 [ 798.112241][ T576] sysfs_notify+0x5a/0xd0 [ 798.116573][ T576] ext4_notify_error_sysfs+0x25/0x30 [ 798.121852][ T576] flush_stashed_error_work+0x2cb/0x2f0 [ 798.127396][ T576] process_one_work+0x71f/0xc40 [ 798.132238][ T576] worker_thread+0xa29/0x11f0 [ 798.136909][ T576] kthread+0x281/0x320 [ 798.140980][ T576] ? __cfi_worker_thread+0x10/0x10 [ 798.146082][ T576] ? __cfi_kthread+0x10/0x10 [ 798.150663][ T576] ret_from_fork+0x1f/0x30 [ 798.155072][ T576] [ 798.158078][ T576] [ 798.160395][ T576] Allocated by task 11956: [ 798.164800][ T576] kasan_set_track+0x4b/0x70 [ 798.169413][ T576] kasan_save_alloc_info+0x25/0x30 [ 798.174526][ T576] __kasan_slab_alloc+0x72/0x80 [ 798.179362][ T576] slab_post_alloc_hook+0x4f/0x2d0 [ 798.184467][ T576] kmem_cache_alloc+0x16e/0x330 [ 798.189306][ T576] __kernfs_new_node+0xdb/0x680 [ 798.194150][ T576] kernfs_new_node+0x150/0x260 [ 798.198913][ T576] kernfs_create_dir_ns+0x47/0x130 [ 798.204029][ T576] sysfs_create_dir_ns+0x11c/0x280 [ 798.209141][ T576] kobject_add_internal+0x6fc/0xc20 [ 798.214328][ T576] kobject_init_and_add+0x122/0x190 [ 798.219526][ T576] ext4_register_sysfs+0xbb/0x2c0 [ 798.224540][ T576] ext4_fill_super+0x6d5d/0x78f0 [ 798.229475][ T576] get_tree_bdev+0x444/0x680 [ 798.234125][ T576] ext4_get_tree+0x1c/0x20 [ 798.238685][ T576] vfs_get_tree+0x9a/0x270 [ 798.243092][ T576] do_new_mount+0x25a/0xa20 [ 798.247584][ T576] path_mount+0x675/0x1010 [ 798.251989][ T576] __se_sys_mount+0x318/0x380 [ 798.256658][ T576] __x64_sys_mount+0xbf/0xd0 [ 798.261242][ T576] x64_sys_call+0x65d/0x9a0 [ 798.265744][ T576] do_syscall_64+0x4c/0xa0 [ 798.270174][ T576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.276066][ T576] [ 798.278376][ T576] Freed by task 9209: [ 798.282338][ T576] kasan_set_track+0x4b/0x70 [ 798.286920][ T576] kasan_save_free_info+0x31/0x50 [ 798.291957][ T576] ____kasan_slab_free+0x132/0x180 [ 798.297091][ T576] __kasan_slab_free+0x11/0x20 [ 798.301852][ T576] slab_free_freelist_hook+0xc2/0x190 [ 798.307220][ T576] kmem_cache_free+0x12d/0x300 [ 798.311978][ T576] kernfs_put+0x310/0x480 [ 798.316301][ T576] __kobject_del+0xf8/0x2f0 [ 798.320808][ T576] kobject_del+0x45/0x60 [ 798.325049][ T576] ext4_unregister_sysfs+0x91/0xa0 [ 798.330163][ T576] ext4_put_super+0x73/0xac0 [ 798.334759][ T576] generic_shutdown_super+0x15f/0x370 [ 798.340218][ T576] kill_block_super+0x7f/0xf0 [ 798.344887][ T576] deactivate_locked_super+0xb5/0x120 [ 798.350252][ T576] deactivate_super+0xaf/0xe0 [ 798.354926][ T576] cleanup_mnt+0x45f/0x4e0 [ 798.356194][T11977] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3804: bg 0: block 345: padding at end of block bitmap is not set [ 798.359373][ T576] __cleanup_mnt+0x19/0x20 [ 798.359405][ T576] task_work_run+0x1db/0x240 [ 798.359427][ T576] exit_to_user_mode_loop+0x9b/0xb0 [ 798.359445][ T576] exit_to_user_mode_prepare+0x5a/0xa0 [ 798.374162][T11977] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 798.378075][ T576] syscall_exit_to_user_mode+0x1a/0x30 [ 798.378102][ T576] do_syscall_64+0x58/0xa0 [ 798.387974][T11977] EXT4-fs (loop4): This should not happen!! Data will be lost [ 798.387974][T11977] [ 798.393325][ T576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.431088][ T576] [ 798.433410][ T576] The buggy address belongs to the object at ffff888131163d48 [ 798.433410][ T576] which belongs to the cache kernfs_node_cache of size 136 [ 798.447987][ T576] The buggy address is located 0 bytes inside of [ 798.447987][ T576] 136-byte region [ffff888131163d48, ffff888131163dd0) [ 798.461081][ T576] [ 798.463396][ T576] The buggy address belongs to the physical page: [ 798.469789][ T576] page:ffffea0004c458c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x131163 [ 798.480047][ T576] flags: 0x4000000000000200(slab|zone=1) [ 798.485684][ T576] raw: 4000000000000200 ffffea000425ae40 dead000000000006 ffff8881002ac480 [ 798.494262][ T576] raw: 0000000000000000 0000000000140014 00000001ffffffff 0000000000000000 [ 798.502832][ T576] page dumped because: kasan: bad access detected [ 798.509243][ T576] page_owner tracks the page as allocated [ 798.514951][ T576] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 275, tgid 275 (syz-executor), ts 23657110206, free_ts 0 [ 798.532228][ T576] post_alloc_hook+0x1f5/0x210 [ 798.537011][ T576] prep_new_page+0x1c/0x110 [ 798.541545][ T576] get_page_from_freelist+0x2c6e/0x2ce0 [ 798.547109][ T576] __alloc_pages+0x19e/0x3a0 [ 798.551748][ T576] alloc_slab_page+0x6e/0xf0 [ 798.556357][ T576] new_slab+0x98/0x3d0 [ 798.560430][ T576] ___slab_alloc+0x6f6/0xb50 [ 798.565026][ T576] __slab_alloc+0x5e/0xa0 [ 798.569353][ T576] kmem_cache_alloc+0x1b0/0x330 [ 798.574198][ T576] __kernfs_new_node+0xdb/0x680 [ 798.579045][ T576] kernfs_new_node+0x150/0x260 [ 798.583827][ T576] __kernfs_create_file+0x4e/0x270 [ 798.588948][ T576] sysfs_add_file_mode_ns+0x1ce/0x270 [ 798.594341][ T576] internal_create_group+0x495/0xd00 [ 798.599638][ T576] sysfs_create_groups+0x58/0x120 [ 798.604667][ T576] kobject_add_internal+0x745/0xc20 [ 798.609890][ T576] page_owner free stack trace missing [ 798.615247][ T576] [ 798.617559][ T576] Memory state around the buggy address: [ 798.623178][ T576] ffff888131163c00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 798.631232][ T576] ffff888131163c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 798.639302][ T576] >ffff888131163d00: fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb [ 798.647355][ T576] ^ [ 798.653756][ T576] ffff888131163d80: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 798.661808][ T576] ffff888131163e00: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 798.669856][ T576] ================================================================== [ 798.679282][ T302] kworker/u4:4: attempt to access beyond end of device [ 798.679282][ T302] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 798.693703][ T576] Disabling lock debugging due to kernel taint [ 798.700015][ T576] general protection fault, probably for non-canonical address 0xe0b09c2ac0000489: 0000 [#1] PREEMPT SMP KASAN [ 798.711745][ T576] KASAN: maybe wild-memory-access in range [0x0585015600002448-0x058501560000244f] [ 798.721031][ T576] CPU: 1 PID: 576 Comm: kworker/1:6 Tainted: G B 6.1.134-syzkaller-00002-g48ab183a3ee2 #0 [ 798.732309][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 798.742358][ T576] Workqueue: events flush_stashed_error_work [ 798.748354][ T576] RIP: 0010:kernfs_find_and_get_ns+0x54/0x110 [ 798.754439][ T576] Code: 48 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 03 8c d6 ff 49 8b 5c 24 08 48 85 db 49 0f 44 dc 48 83 c3 50 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 dd 8b d6 ff 48 8b 1b 48 83 c3 60 [ 798.774040][ T576] RSP: 0018:ffffc9000f12fc60 EFLAGS: 00010202 [ 798.780105][ T576] RAX: 00b0a02ac0000489 RBX: 0585015600002449 RCX: ffffffff81ddac1d [ 798.788076][ T576] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888131163d50 [ 798.796053][ T576] RBP: ffffc9000f12fc88 R08: fffffffffffffffa R09: 0000000000000003 [ 798.804022][ T576] R10: ffffed102622c7a9 R11: 1ffff1102622c7a9 R12: ffff888131163d48 [ 798.811996][ T576] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8594b620 [ 798.819966][ T576] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 798.828890][ T576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.835473][ T576] CR2: 0000200001000000 CR3: 00000001103d5000 CR4: 00000000003506a0 [ 798.843450][ T576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 798.851424][ T576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 798.859393][ T576] Call Trace: [ 798.862669][ T576] [ 798.865596][ T576] sysfs_notify+0x71/0xd0 [ 798.869933][ T576] ext4_notify_error_sysfs+0x25/0x30 [ 798.875217][ T576] flush_stashed_error_work+0x2cb/0x2f0 [ 798.880865][ T576] process_one_work+0x71f/0xc40 [ 798.885717][ T576] worker_thread+0xa29/0x11f0 [ 798.890395][ T576] kthread+0x281/0x320 [ 798.894463][ T576] ? __cfi_worker_thread+0x10/0x10 [ 798.899569][ T576] ? __cfi_kthread+0x10/0x10 [ 798.904154][ T576] ret_from_fork+0x1f/0x30 [ 798.908572][ T576] [ 798.911596][ T576] Modules linked in: [ 798.921943][ T576] ---[ end trace 0000000000000000 ]--- [ 798.927679][ T576] RIP: 0010:kernfs_find_and_get_ns+0x54/0x110 [ 798.933917][ T576] Code: 48 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 03 8c d6 ff 49 8b 5c 24 08 48 85 db 49 0f 44 dc 48 83 c3 50 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 dd 8b d6 ff 48 8b 1b 48 83 c3 60 [ 798.953696][ T576] RSP: 0018:ffffc9000f12fc60 EFLAGS: 00010202 [ 799.004206][ T576] RAX: 00b0a02ac0000489 RBX: 0585015600002449 RCX: ffffffff81ddac1d [ 799.012459][ T576] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888131163d50 [ 799.020690][ T576] RBP: ffffc9000f12fc88 R08: fffffffffffffffa R09: 0000000000000003 [ 799.028903][ T576] R10: ffffed102622c7a9 R11: 1ffff1102622c7a9 R12: ffff888131163d48 [ 799.036900][ T576] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8594b620 [ 799.044929][ T576] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 799.053906][ T576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 799.060599][ T576] CR2: 00007ffe7c64d3a8 CR3: 0000000127e84000 CR4: 00000000003506a0 [ 799.068626][ T576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 799.076725][ T576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 799.084827][ T576] Kernel panic - not syncing: Fatal exception [ 799.091257][ T576] Kernel Offset: disabled [ 799.095582][ T576] Rebooting in 86400 seconds..