last executing test programs: 1m26.692281182s ago: executing program 1 (id=79): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2d, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x3, 0x0, 0x100000000, 0x40008, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x3, 0x5}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x4, 0x2, 0x0, 0xffffffff, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x8, 0xc4100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0x4}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 1m25.712859193s ago: executing program 1 (id=83): preadv2(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0xfffffffd, 0x558, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x404f444) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) process_madvise(r1, &(0x7f0000000480)=[{0x0, 0x2c}, {&(0x7f0000000000)='\x00', 0x1}], 0x2, 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x801, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0xfd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x100000000000000, 0x0, 0x8, 0x40000000000, 0x0, 0x0, 0x0, 0x3}, r0, 0xc, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r5) unshare(0x600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x9f4c7000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x45, &(0x7f0000000100)={0x77359400}) statx(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x6000, 0x8, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@pppol2tp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/129, 0x81}], 0x1, &(0x7f0000000240)=""/226, 0xe2}, 0x23) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x6, 0x80, 0x0, 0x0, 0x1fe, 0x0, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3ad6, 0x6b06}, 0x8000, 0x5, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000040)="b9010360fe40f000009e0ff008001fffffe1000087e9450077fbac141411ac", 0x0, 0x104, 0x6000000000000000, 0x10a, 0x0, &(0x7f0000000400)="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"}, 0x50) 1m25.475513279s ago: executing program 1 (id=85): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x3}, 0x112013, 0x0, 0xffffffff, 0x0, 0x4, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_config_ext={0x0, 0x100000001}, 0x10088a, 0x7ff, 0x5, 0x3, 0xb, 0x2002, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@broadcast, 0x4e20, 0x3, 0xcd, 0x8}}, 0x44) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(r2, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1:0', 0x3) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000040)={@val={0x0, 0x809b}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "0e68d940ef41bd31c9d0f60cb9146752a18ae3ecffa5c69a", "416bdcb2f4c06fe12fa97b3a2f47b08f71242d80164c6a557c8b609fba4d1850"}}}}}}}, 0x72) 1m24.96322064s ago: executing program 1 (id=87): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c, 0x40000000}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="4700000001003f", 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) close(0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28602000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000009060104000000000000000003000003200008800c000780060004404e200000100007800900120073797a32000000000900000073797a31000000000800094000000faa"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x1000) 1m24.371753813s ago: executing program 1 (id=89): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080)=0x1, 0x6, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) pipe2$9p(&(0x7f00000005c0), 0x800) io_setup(0x9, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) getpriority(0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0xea60}, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) 1m24.028925931s ago: executing program 1 (id=92): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x11) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000300)={0x8, 0xffffffff, 0x9, 0xec, 0x2, 0xb}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x100, 0x19a) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1m24.028442471s ago: executing program 32 (id=92): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x11) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000300)={0x8, 0xffffffff, 0x9, 0xec, 0x2, 0xb}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x100, 0x19a) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 4.495234251s ago: executing program 0 (id=740): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$KDGKBDIACR(r0, 0x4b4b, &(0x7f0000002f80)=""/54) 4.416771492s ago: executing program 0 (id=744): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="953a82ae7900ef4928c0c7d20404058a76a76251f722322873022960448e41f515bf3f5c0953933fb5642693fdbf449e01820fead95557", @ANYRES64=0x0], 0x20) unshare(0x22020600) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) keyctl$setperm(0x5, r3, 0x30925) keyctl$search(0xa, r3, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1d1502, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40081271, &(0x7f0000001080)) syz_emit_ethernet(0x5a, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="900000003c464afdc36e54f4548f201690780000020f270109684e68c22e5e9db8f9be006d47"], 0x0) r5 = socket(0xa, 0x3, 0x87) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(r6, 0xee00, 0xee01) fchown(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYBLOB="9e0590d2d8a8f3f20123ae072a9b6cbe449ae874951f25ec1dccdd3c1dd42c10afd59b5054d70db9c22c6006398643708e0690509a2443951321fc2293027a19441eae09d9a3ba0a303a47cd0f0d9e1776760e8853253180cbad4c18d2d50d8e550f1e4a32d49831a11c04f98fe2e3b9b72c15d14905bc596a921dbdde4885fe106a4b1ee4a905ec279ff0794a408293e74841952ba4ef5ff928bef9ac52eb0ffcf1388ab5fa828cb681046947bebf8d8e1dd64bc52aea4115901330ffb61d570bf45341d1bf6143a46e16650a9a8fcca627a38a46a7ac265d385f626a15cffe21", @ANYRESHEX=r5], 0x20) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3.15346241s ago: executing program 0 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f08000440000000ff08000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) 3.035057943s ago: executing program 0 (id=762): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000c80)={[{@dioread_nolock}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4cf, &(0x7f0000001200)="$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") ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000bc0), 0x2}, 0x10ed08, 0x1224, 0x0, 0x9, 0x4, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x7) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440500000000600054050640000050007000600000005000100060000000900020073797a31000000003bd5e840fa021d5f62eb34"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000002500)=""/4114, 0x1012}, {&(0x7f0000000940)=""/45, 0x2d}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r4 = io_uring_setup(0x2942, &(0x7f0000000c00)={0x0, 0xb1c5, 0x8, 0x3, 0x26b}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000d00)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000004500)={{r1}, r5, 0x12, @unused=[0x401, 0xfffffffffffffff2, 0xf88, 0x400], @name="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"}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x20008000) sendto$inet6(r3, &(0x7f0000000100)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xb8b413797f05204c}, 0x8081) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x401, 0x25}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xb0c0}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x90, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x76e52e94}}, {0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x7b, 0x2, "c35bd8d13146c6036dffe20c96cdff492b9baa95a47b664a39b889cee13c8a1e794f362896ba1d3fad4d32a0f2864965f279398a84d6fa7e43f27de5e194c5b860b0bf98948eca07d641deaaffb8155cd4fd0836551e49be3e3b4e9d75b1e2f5b06b502097f56de4aef90c9a2031b94702d927c11b867d"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2d, 0x22, 0x0, 0x19, 0x8, 0xac, 0x5, 0x2, 0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x51e, &(0x7f0000000640)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.867224347s ago: executing program 3 (id=765): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x4580, 0x0, 0x1000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, 0x0) syslog(0x3, &(0x7f0000000300)=""/121, 0x79) 2.763881709s ago: executing program 4 (id=767): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x1, 0x25dfdbfd, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x3504, 0x4, 0x1, 0x1, 0x0, 0xabf, 0x1000000}]}]}, 0xfc}}, 0x4000) 2.71464288s ago: executing program 4 (id=768): unshare(0x58000300) mount(0x0, 0x0, &(0x7f0000000080)='ncpfs\x00', 0x144000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000012c0)={[{@block_validity}, {@nouid32}, {@minixdf}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01') sendmmsg$inet(r2, 0x0, 0x0, 0xf00) epoll_create1(0x80000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) 2.26898883s ago: executing program 0 (id=773): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x1fc) write$binfmt_format(r1, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0x4b, r4, 0x2}, 0xc) epoll_pwait(r1, &(0x7f0000000200), 0x0, 0x1, &(0x7f0000000240)={[0x337d]}, 0x8) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x4, 0x1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x18, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x10044b, 0xff, 0x10001, 0x9, 0x80000000, 0xfff, 0x7ff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x2, 0x0, 0x3, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r5, 0x9) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, 0x0, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffd2) socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xc594}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0xb0, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x9e, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb72"]}]}, 0xb0}], 0x1}, 0x0) syz_emit_ethernet(0x11e, &(0x7f0000000700)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x85, &(0x7f0000000000)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) 2.107553664s ago: executing program 5 (id=776): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x38, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) fallocate(r0, 0x8, 0x10001, 0x5) 2.095992164s ago: executing program 3 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 1.956351617s ago: executing program 5 (id=778): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 1.953009477s ago: executing program 3 (id=779): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000d, 0x110, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0x303, 0x8, 0x2b, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000140), 0xd}, 0x0, 0x0, 0xfffffffe, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @remote, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "00000080072000", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x554, r6) 1.577044056s ago: executing program 5 (id=780): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000110000000a000000090002008d001f106f194ea0050001"], 0x30}}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 1.526342486s ago: executing program 5 (id=781): r0 = syz_clone3(&(0x7f0000000700)={0x1000000, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f00000002c0), {0x26}, &(0x7f0000000500)=""/239, 0xef, &(0x7f0000000600)=""/134, &(0x7f00000006c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x3eae, &(0x7f00000034c0)={0x0, 0x7648, 0x1, 0x40000003, 0x2ea}, &(0x7f0000000180), &(0x7f0000003580), &(0x7f0000000280)) r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x6, 0x48180) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000380)={0x0, 0x0, 0x31}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001dc0)=[{0x0, 0x0, 0x0}], 0x1) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVin:De', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r9, 0x7, 0x300, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1.34870767s ago: executing program 4 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 635.703686ms ago: executing program 2 (id=783): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0xa, 0x2, 0x0, @rand_addr=0x64010101, @multicast1}, {0x11, 0x1, 0x0, @multicast1}}}}}, 0x0) 559.251058ms ago: executing program 5 (id=784): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000c80)={[{@dioread_nolock}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4cf, &(0x7f0000001200)="$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") ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000bc0), 0x2}, 0x10ed08, 0x1224, 0x0, 0x9, 0x4, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x7) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440500000000600054050640000050007000600000005000100060000000900020073797a31000000003bd5e840fa021d5f62eb34"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000002500)=""/4114, 0x1012}, {&(0x7f0000000940)=""/45, 0x2d}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r4 = io_uring_setup(0x2942, &(0x7f0000000c00)={0x0, 0xb1c5, 0x8, 0x3, 0x26b}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000d00)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000004500)={{r1}, r5, 0x12, @unused=[0x401, 0xfffffffffffffff2, 0xf88, 0x400], @name="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"}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x20008000) sendto$inet6(r3, &(0x7f0000000100)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xb8b413797f05204c}, 0x8081) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x401, 0x25}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xb0c0}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x90, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x76e52e94}}, {0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x7b, 0x2, "c35bd8d13146c6036dffe20c96cdff492b9baa95a47b664a39b889cee13c8a1e794f362896ba1d3fad4d32a0f2864965f279398a84d6fa7e43f27de5e194c5b860b0bf98948eca07d641deaaffb8155cd4fd0836551e49be3e3b4e9d75b1e2f5b06b502097f56de4aef90c9a2031b94702d927c11b867d"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2d, 0x22, 0x0, 0x19, 0x8, 0xac, 0x5, 0x2, 0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x51e, &(0x7f0000000640)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 493.205629ms ago: executing program 4 (id=785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 492.74414ms ago: executing program 2 (id=786): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x16) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 419.015121ms ago: executing program 2 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x5, 0x9fd, 0x84, 0x1}, 0x50) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 387.117042ms ago: executing program 4 (id=788): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 283.086504ms ago: executing program 2 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 281.359034ms ago: executing program 0 (id=790): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x9, 0x100) 259.110395ms ago: executing program 2 (id=791): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x8}) 177.365887ms ago: executing program 2 (id=792): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) 75.933029ms ago: executing program 3 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 42.22039ms ago: executing program 3 (id=794): r0 = syz_create_resource$binfmt(&(0x7f0000000280)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) lsetxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f0000001340)=@v2={0x5, 0x0, 0x15, 0x7fff, 0x7c2, "f1001d6da061a9a688c6ec7fc42cce95eef7e4916be40179cc71af9855fd7d4e13cc654b9fb9cd068af8b78b1177074833ad4f8a5933af0985e6fcfaf63d4af7bae45dae0d428d346ec920e9c241099d1964863f1f3861740113dbdc550af927f69c33518696759a1d35998f39126388b08bb0c8ee883d2991edbc7b7639accf5c7b72888eea295558732c51922ab3e1a46d979d52bc39a0b9240a4e5b3719324f8c92f3b9b35a8f56a62328a9beeae799c149264bed4662eda760c554b0c3cbd4b598240af00297bc711fe64b34d83dcfbefd637b57e3c2b594ad77fc1b90174046939e655b759f1b6bac9e9f4ed299220244d32bc8178633a08d1a0f03e260c8eae2ba2d0aa992c36bf53e28dbb19520b5f15430d18b6e4b0084fdf30f7404686e8db9c42a7b4edbe0795136a80bf5ec670c7335688151eb346edb8c251dfa5371f4088b969bdb9fce70ec826302f45fa1a8169403d48c098cad5e4d33ff28b6365c2db94897ed79e7b82cd9aefb7a63f6c7b6b5fd4cf97ff109ecd381fabd1da4f1365c20f6071cbe307dd482cd22db3aa80c06e52c677c3ebfb03089e4751247b0695468fd1d937def8c9b5b08aca32d2fb42e617045ec3cc6f02732b5eda648bf4fc6c3041607d0e49d02b3811c5d1bfc21b8babba112721ecaae62e50543009ba27ac0dbeb84704675f264f73fea42bdcc2b5e9b680aa50e9dcc5ad5fb464188b1c9dd4f52a56f4456bcebe317537a66b4bbf224e75536e15e193cd4208835a69f9dc221bd80c3bf356b01f1aa2fd78629931b414d5c99a803ee6d5966d2ba87788e97ab552aede80f0cd8c960175bcc07fe62a2688c1376f05b11abf3f57d0e49783daa5c52f50b728b1bc9ee1f9bc7c812bac2645e29800e2956fd0e47c84266708204d7f2367c1b63dbca2d6a6c2e4b6a0c297bee18b926bb1e79880638e8b64f94199a309c2881f13926fdd99987cfa2b5ddfe306e5a45979482ff48d77fb64ba3fc8d7b85cbff028abb65785711add803ec9603c44b5ad7ae82de98cfa48b0ce11013143fc3b0f561448a73da9dee5fb36094108ebea1ad0b9746cb7c35777f85eef10e2ecdb75cb7416fbc9067d39f0f3f3df9063498077fb7b8ccec9e71a5bd8ae158741c2d93f27aa3df859922f68085d6512d3abb50fc1831f0c375eb8408ba5cb808384752c0077b68178db341a51edff5b708f813ee39924bf916f912a7f465d381529ecb0da6cca9e7d13f1a03acf65dd7f3fe810020325cac548cf28d089d45d77ab6b6354ce975533c78cef2d3f00b6012094081d51d9f5f74b9e105e7c9495f053b8abd13d929af4f7cba23202226defb76b4f161dc3336c7401839a257e6e99b33f3920fe5f6108d34b3989d7b7e84719f80fc47d8096a8e6dcece0b0955344120dca5d05e1841dcaa7038488c52d3f0f339d9d656d22344f2565cd1f412ff1a59fcb5b73b74fb3164d8f0cada2ed41ef4e911a4e8b77cdf2d96a325470edda4364c899b14d3c90e562c615f9d53773fcb9079f7bda47b2813e2d16c094697a32d20473b0374ad8fa0492070c501c6a604a227bc4dbcf1c8579191f7c44e390dc4e3f7068c0cb2aed1ec368e4a9bb5e06cdb9f2d2e0250866e013cc12cba1c0c5eff73aa5009e2d5e7a734da6537eddb6924109b1fa3fdccca107a47feddf46f1ee10ae2ed786b66721b836e73dcbf4f614c36b1085638f8c8b964807318325086917edf8177fbfed9fada9d018066f8c58af0a156ae3976feb7b76f8fb2fb9fd57b4a2ab24537b5f87af849f9210e5afc3e552ed79601f72b3e89d379287b54e12d60d6b0f059f2e6a8345b02636c44b1ed7fb50012f4b17d08d47d465ffad4207fa4761c3fc92ab731833a290b59377ce4cf6734e478541a383c7573dd1728342cd4036b98426987c743667c9705395038b78e0780aa240f2538117ff3cf7e02bbe49779de24c56766d0cff1cb82d215439aafd379aa23548e7618e7beb8e2735e55430db49b737def8712135af5d85d5b18a59b137fce5af06190936e6f352d292b8c043631b00d6f2f593cb5e6ec830d1a9c2de78e65791a10e942f52f5e1a6ef3035aef287713cc655bdd4a0b30d287b2b03c2ecb88f1670377e2d8fb1daefad6da16aaeab145f08ba77bf0c504e0565168ca12b9f197fe61c193582749e5ba512f5887e67eb24e5facfa5723f109d38e3c0ae7b7990a1f4b8b41ebfea03844fd65ab109f286515a650fccad199551dc77d7f87ce36f8863c8d8f5d4c791322b52d8075c022c55281c8c747cd0a610e032bd58edc34bfe39838787cb25e3606f0f20202b10efdfff0123f5411c467135fcc4ef5bd525c0b8b17ddce6fb81e9edfae839c87014fb5ed146b5efd8372ec5613e788dcaf554e5c9059aafd22f8a4971b1948a21f187b6027925a1474d755e67949f6ff88429e67f3a775c3aad07a14a7a8df956051b0a85a85f8d59b39ba9c2205ab7596794f8d9215fa576a30463102ba1e04b32f254169afcfb36442bf96f67d1476b5c1c03789857060e4e6ea383ee035782c0c1a6dd59e53a888961b6b5985907fae3817ced2c42ca8aa8387b210b406e69094e4bd4c0ba8e3c42b29e55413e4879de01d853603f76aa715a0487ac2b73cc6b0f0d036ae9db749b869508cc4816deb614f26faf1439caf38c2e5b31b2e80c3dcf33f9a9be5c1644cb5bbf104f6b42e17d27c36723a2832430c897c0c171f7583df45b4223606eb9ded051493fbf1a1398b2a61f2838632b047f0c1ab29f1637699b5d9285ee44e5bb0339e9cc36d"}, 0x7cb, 0x3) 2.548ms ago: executing program 4 (id=795): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x10000}, 0x14413, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f000000abc0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x842}, 0x40) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x5a, 0x2, 0xfffe}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r4, &(0x7f0000001080)="0b9d", 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xf, 0x0, &(0x7f0000000200)="4916d541fb0000010000518fc99cc7", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.02571ms ago: executing program 3 (id=796): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='n', 0x1) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f00000000c0), 0x3, 0x618, &(0x7f0000000300)="$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") r1 = socket(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x2, 0x0, 0x9, 0x4, 0x0, 0x1, 0x330e6, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x8084, 0xa4, 0x8, 0x6, 0xffffffff, 0x9b9b, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x9900) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000980)={0x0, 0x3c, &(0x7f0000000940)=[@in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0xf}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f00000009c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000a00)={r8, 0x1, 0x2, [0x9, 0x9]}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r9 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 5 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): [ 72.535505][ T4635] syz.0.179: attempt to access beyond end of device [ 72.535505][ T4635] loop0: rw=2049, sector=242, nr_sectors = 8 limit=128 [ 72.599397][ T4672] loop5: detected capacity change from 0 to 1024 [ 72.629438][ T4672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.684803][ T4678] loop3: detected capacity change from 0 to 2048 [ 72.704315][ T4685] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 72.704345][ T4685] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.704376][ T4685] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 72.706723][ T4678] loop3: p1 < > p4 [ 72.712049][ T4685] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 72.712332][ T4678] loop3: p4 size 8388608 extends beyond EOD, truncated [ 73.403507][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.456111][ T4723] loop4: detected capacity change from 0 to 256 [ 73.476844][ T4722] loop5: detected capacity change from 0 to 128 [ 73.619780][ T389] IPVS: starting estimator thread 0... [ 73.737020][ T4735] IPVS: using max 2400 ests per chain, 120000 per kthread [ 73.744241][ T4730] loop4: detected capacity change from 0 to 128 [ 73.794327][ T4722] bond0: option arp_interval: invalid value ( ) [ 73.794497][ T4722] bond0: option arp_interval: allowed values 0 - 2147483647 [ 73.983609][ T4740] loop2: detected capacity change from 0 to 128 [ 74.060791][ T4740] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 74.153368][ T4759] loop3: detected capacity change from 0 to 512 [ 74.158916][ T4759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.160827][ T4759] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.167115][ T4759] EXT4-fs (loop3): mount failed [ 74.198056][ T4740] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.218180][ T4740] ext2 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.249518][ T4759] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.420984][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.480004][ T4790] loop2: detected capacity change from 0 to 164 [ 74.489939][ T4775] loop0: detected capacity change from 0 to 512 [ 74.526495][ T4775] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.533128][ T4775] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 74.533772][ T4775] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.534276][ T4790] Unsupported NM flag settings (240) [ 74.576025][ T4775] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.201: Allocating blocks 41-42 which overlap fs metadata [ 74.576218][ T4775] loop0: lost filesystem error report for type 5 error -117 [ 74.590135][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 74.590156][ C1] EXT4-fs (loop0): initial error at time 1788916149: ext4_mb_mark_diskspace_used:4223 [ 74.590182][ C1] EXT4-fs (loop0): last error at time 1788916149: ext4_mb_mark_diskspace_used:4223 [ 74.625364][ T4775] EXT4-fs (loop0): Remounting filesystem read-only [ 74.626099][ T4775] EXT4-fs (loop0): 1 truncate cleaned up [ 74.627281][ T4775] EXT4-fs (loop0): pa ffff8881072e84d0: logic 1, phys. 41, len 23 [ 74.658777][ T4775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.788699][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.797366][ T4779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.831361][ T4783] loop3: p1 p3 < > [ 74.956813][ T4797] EXT4-fs: Ignoring removed oldalloc option [ 75.001772][ T4797] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.204: Parent and EA inode have the same ino 15 [ 75.001902][ T4797] loop5: lost filesystem error report for type 5 error -117 [ 75.014458][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 75.014476][ C0] EXT4-fs (loop5): initial error at time 1788916150: ext4_xattr_inode_iget:433 [ 75.014507][ C0] EXT4-fs (loop5): last error at time 1788916150: ext4_xattr_inode_iget:433 [ 75.037843][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 75.057724][ T3998] udevd[3998]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 75.067911][ T4797] EXT4-fs (loop5): Remounting filesystem read-only [ 75.068124][ T4797] EXT4-fs (loop5): 1 orphan inode deleted [ 75.106708][ T4797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.192110][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 75.192135][ T29] audit: type=1400 audit(1788916150.201:863): avc: denied { bind } for pid=4795 comm="syz.5.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.235532][ T4844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.242927][ T4844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.291658][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.349921][ T4844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.357447][ T4844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.392438][ T29] audit: type=1400 audit(1788916150.401:864): avc: denied { write } for pid=4845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.422196][ T4861] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.216: iget: bad i_size value: 38620345925642 [ 75.422237][ T4861] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.434897][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 75.434916][ C0] EXT4-fs (loop0): initial error at time 1788916150: ext4_orphan_get:1403: inode 15 [ 75.434962][ C0] EXT4-fs (loop0): last error at time 1788916150: ext4_orphan_get:1403: inode 15 [ 75.435268][ T4861] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.216: couldn't read orphan inode 15 (err -117) [ 75.435298][ T4861] loop0: lost filesystem error report for type 5 error -117 [ 75.455186][ T4861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.461922][ T29] audit: type=1400 audit(1788916150.481:865): avc: denied { write } for pid=4867 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.462566][ T29] audit: type=1400 audit(1788916150.481:866): avc: denied { write } for pid=4860 comm="syz.0.216" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.543022][ T29] audit: type=1400 audit(1788916150.541:867): avc: denied { write } for pid=4860 comm="syz.0.216" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.559599][ T29] audit: type=1400 audit(1788916150.571:868): avc: denied { execute } for pid=4860 comm="syz.0.216" name="file1" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.566587][ T4861] process 'syz.0.216' launched './file1' with NULL argv: empty string added [ 75.569324][ T29] audit: type=1400 audit(1788916150.571:869): avc: denied { execute_no_trans } for pid=4860 comm="syz.0.216" path="/42/file0/file1" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.639196][ T317] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 75.639622][ T317] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 75.639657][ T317] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.639657][ T317] [ 75.639678][ T317] EXT4-fs (loop0): Total free blocks count 0 [ 75.639761][ T317] EXT4-fs (loop0): Free/Dirty block details [ 75.639776][ T317] EXT4-fs (loop0): free_blocks=0 [ 75.639792][ T317] EXT4-fs (loop0): dirty_blocks=3 [ 75.639808][ T317] EXT4-fs (loop0): Block reservation details [ 75.639823][ T317] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 75.641373][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.792297][ T29] audit: type=1400 audit(1788916150.801:870): avc: denied { write } for pid=4883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.827267][ T29] audit: type=1400 audit(1788916150.841:871): avc: denied { write } for pid=4897 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.862781][ T29] audit: type=1400 audit(1788916150.871:872): avc: denied { ioctl } for pid=4879 comm="syz.0.218" path="/dev/usbmon6" dev="devtmpfs" ino=160 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.431386][ T4938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.431431][ T4938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.445598][ T4938] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 76.456974][ T4938] EXT4-fs (loop2): 1 truncate cleaned up [ 76.457347][ T4938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.503663][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.643604][ T4960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.223'. [ 76.643695][ T4960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.223'. [ 76.762802][ T4961] ip_tables: iptables: counters copy to user failed while replacing table [ 77.422610][ T4977] usb usb1: usbfs: process 4977 (syz.4.229) did not claim interface 0 before use [ 77.948871][ T4997] set_capacity_and_notify: 6 callbacks suppressed [ 77.948908][ T4997] loop2: detected capacity change from 0 to 1024 [ 77.967270][ T4997] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 77.967390][ T4997] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.989126][ T4997] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 77.989577][ T4997] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.004963][ T4997] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.234: Inode bitmap for bg 0 marked uninitialized [ 78.005163][ T4997] loop2: lost filesystem error report for type 5 error -117 [ 78.018267][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 78.018290][ C1] EXT4-fs (loop2): initial error at time 1788916153: ext4_read_inode_bitmap:169 [ 78.018312][ C1] EXT4-fs (loop2): last error at time 1788916153: ext4_read_inode_bitmap:169 [ 78.019911][ T4997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.300240][ T4999] EXT4-fs error (device loop2): ext4_lookup:1787: inode #16: comm syz.2.234: iget: bad i_size value: 281474976719656 [ 79.677237][ T5083] ip_tables: iptables: counters copy to user failed while replacing table [ 79.859372][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.961938][ T5109] loop0: detected capacity change from 0 to 512 [ 79.962268][ T5109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.962332][ T5109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.980486][ T5109] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 79.993553][ T5109] EXT4-fs (loop0): 1 truncate cleaned up [ 79.993913][ T5109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.045067][ T5118] loop5: detected capacity change from 0 to 128 [ 80.052652][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.053080][ T5118] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.125304][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.157574][ T5123] loop3: detected capacity change from 0 to 764 [ 80.182936][ T5123] Symlink component flag not implemented [ 80.182946][ T5123] Symlink component flag not implemented [ 80.183351][ T5123] Symlink component flag not implemented (129) [ 80.183365][ T5123] Symlink component flag not implemented (6) [ 80.309272][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 80.309296][ T29] audit: type=1400 audit(1788916155.321:897): avc: denied { ioctl } for pid=5133 comm="syz.3.251" path="socket:[8724]" dev="sockfs" ino=8724 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.363322][ T29] audit: type=1400 audit(1788916155.371:898): avc: denied { write } for pid=5119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.426250][ T5144] loop2: detected capacity change from 0 to 512 [ 80.438749][ T29] audit: type=1400 audit(1788916155.451:899): avc: denied { write } for pid=5145 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.447132][ T5144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.447197][ T5144] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.879000][ T29] audit: type=1400 audit(1788916155.891:900): avc: denied { write } for pid=5152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.905663][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.941077][ T29] audit: type=1400 audit(1788916155.951:901): avc: denied { write } for pid=5163 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.073158][ T29] audit: type=1400 audit(1788916156.081:902): avc: denied { write } for pid=5175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.387699][ T5194] loop3: detected capacity change from 0 to 1764 [ 81.392363][ T5194] iso9660: Bad value for 'gid' [ 81.392542][ T5194] iso9660: Bad value for 'gid' [ 81.450371][ T5194] loop3: detected capacity change from 0 to 256 [ 81.485424][ T5194] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.553414][ T5193] loop5: detected capacity change from 0 to 512 [ 81.607255][ T5193] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.256: bad orphan inode 11862016 [ 81.607299][ T5193] loop5: lost filesystem error report for type 5 error -117 [ 81.622961][ T5193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.646721][ T5193] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.020227][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 82.047707][ T29] audit: type=1400 audit(1788916156.171:903): avc: denied { write } for pid=5190 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.047799][ T29] audit: type=1400 audit(1788916156.691:904): avc: denied { write } for pid=5192 comm="syz.5.256" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.092428][ T3948] IPVS: starting estimator thread 0... [ 82.184592][ T5187] IPVS: using max 2400 ests per chain, 120000 per kthread [ 82.316762][ T29] audit: type=1401 audit(1788916157.331:905): op=setxattr invalid_context="" [ 82.331552][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 82.343801][ T5213] loop2: detected capacity change from 0 to 128 [ 82.520886][ T5219] ip_tables: iptables: counters copy to user failed while replacing table [ 82.762234][ T5226] netlink: 40 bytes leftover after parsing attributes in process `syz.5.261'. [ 82.762265][ T5226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.261'. [ 82.762285][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.261'. [ 82.816664][ T5229] loop4: detected capacity change from 0 to 512 [ 82.930902][ T5233] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 82.948470][ T5229] EXT4-fs (loop4): can't read group descriptor 0 [ 83.053427][ T5233] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.067838][ T5233] ext2 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.080989][ T29] audit: type=1400 audit(1788916158.091:906): avc: denied { write } for pid=5223 comm="syz.0.269" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.636489][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.691726][ T5265] set_capacity_and_notify: 1 callbacks suppressed [ 83.691763][ T5265] loop3: detected capacity change from 0 to 2048 [ 83.729012][ T5263] loop2: detected capacity change from 0 to 512 [ 83.741902][ T5265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 83.780789][ T5263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.781168][ T5263] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.869198][ T5263] hub 8-0:1.0: USB hub found [ 83.869426][ T5263] hub 8-0:1.0: 8 ports detected [ 83.921647][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.081516][ T5266] syz.3.277 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 84.081639][ T5266] CPU: 0 UID: 0 PID: 5266 Comm: syz.3.277 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.081670][ T5266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.081685][ T5266] Call Trace: [ 84.081692][ T5266] [ 84.081700][ T5266] __dump_stack+0x1d/0x30 [ 84.081733][ T5266] dump_stack_lvl+0x95/0xd0 [ 84.081801][ T5266] dump_stack+0x15/0x1b [ 84.081823][ T5266] dump_header+0x80/0x240 [ 84.081857][ T5266] oom_kill_process+0x294/0x420 [ 84.081886][ T5266] out_of_memory+0x981/0xbc0 [ 84.081910][ T5266] try_charge_memcg+0x6ba/0xae0 [ 84.082018][ T5266] __memcg_kmem_charge_page+0x19a/0x3a0 [ 84.082049][ T5266] __alloc_frozen_pages_noprof+0x21d/0x400 [ 84.082100][ T5266] alloc_pages_mpol+0xaf/0x1d0 [ 84.082190][ T5266] alloc_pages_noprof+0x94/0x140 [ 84.082296][ T5266] __vmalloc_node_range_noprof+0x96f/0x1000 [ 84.082337][ T5266] __kvmalloc_node_noprof+0x3be/0x5c0 [ 84.082423][ T5266] ? futex_hash_allocate+0x163/0x890 [ 84.082456][ T5266] ? futex_hash_allocate+0x163/0x890 [ 84.082567][ T5266] ? futex_hash_allocate+0x163/0x890 [ 84.082599][ T5266] ? _raw_spin_unlock+0x9/0x30 [ 84.082638][ T5266] futex_hash_allocate+0x163/0x890 [ 84.082696][ T5266] ? cap_task_prctl+0x13f/0x6b0 [ 84.082776][ T5266] futex_hash_prctl+0xd8/0xf0 [ 84.082816][ T5266] __se_sys_prctl+0x4f4/0x13b0 [ 84.082958][ T5266] __x64_sys_prctl+0x67/0x80 [ 84.082991][ T5266] x64_sys_call+0x2421/0x2550 [ 84.083091][ T5266] do_syscall_64+0x112/0x360 [ 84.083156][ T5266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.083184][ T5266] RIP: 0033:0x7f993b9ce159 [ 84.083205][ T5266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.083255][ T5266] RSP: 002b:00007f993a3e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 84.083279][ T5266] RAX: ffffffffffffffda RBX: 00007f993bc56180 RCX: 00007f993b9ce159 [ 84.083297][ T5266] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 84.083389][ T5266] RBP: 00007f993ba6503b R08: 0000000000000000 R09: 0000000000000000 [ 84.083403][ T5266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.083419][ T5266] R13: 00007f993bc56218 R14: 00007f993bc56180 R15: 00007ffd3b8b9998 [ 84.083515][ T5266] [ 84.392966][ T5307] loop0: detected capacity change from 0 to 1764 [ 84.397186][ T5307] iso9660: Bad value for 'gid' [ 84.397266][ T5307] iso9660: Bad value for 'gid' [ 84.450652][ T5307] loop0: detected capacity change from 0 to 256 [ 84.499758][ T5307] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.790469][ T5308] ip_tables: iptables: counters copy to user failed while replacing table [ 85.174564][ T5266] memory: usage 307172kB, limit 307200kB, failcnt 115 [ 85.174590][ T5266] memory+swap: usage 308296kB, limit 9007199254740988kB, failcnt 0 [ 85.174622][ T5266] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 85.174636][ T5266] Memory cgroup stats for /syz3: [ 85.174839][ T5266] cache 12288 [ 85.174848][ T5266] rss 114688 [ 85.174961][ T5266] shmem 0 [ 85.174968][ T5266] mapped_file 4096 [ 85.174998][ T5266] dirty 4096 [ 85.175005][ T5266] writeback 0 [ 85.175013][ T5266] workingset_refault_anon 147 [ 85.175023][ T5266] workingset_refault_file 2069 [ 85.175031][ T5266] swap 1150976 [ 85.175039][ T5266] swapcached 2023424 [ 85.175047][ T5266] pgpgin 53650 [ 85.175054][ T5266] pgpgout 53619 [ 85.175062][ T5266] pgfault 61779 [ 85.175070][ T5266] pgmajfault 153 [ 85.175078][ T5266] inactive_anon 106496 [ 85.175087][ T5266] active_anon 8192 [ 85.175106][ T5266] inactive_file 8192 [ 85.175114][ T5266] active_file 4096 [ 85.175126][ T5266] unevictable 0 [ 85.175135][ T5266] hierarchical_memory_limit 314572800 [ 85.175144][ T5266] hierarchical_memsw_limit 9223372036854771712 [ 85.175172][ T5266] total_cache 12288 [ 85.175180][ T5266] total_rss 114688 [ 85.175228][ T5266] total_shmem 0 [ 85.175236][ T5266] total_mapped_file 4096 [ 85.175244][ T5266] total_dirty 4096 [ 85.175252][ T5266] total_writeback 0 [ 85.175260][ T5266] total_workingset_refault_anon 147 [ 85.175270][ T5266] total_workingset_refault_file 2069 [ 85.175280][ T5266] total_swap 1150976 [ 85.175288][ T5266] total_swapcached 2023424 [ 85.175297][ T5266] total_pgpgin 53650 [ 85.175305][ T5266] total_pgpgout 53619 [ 85.175375][ T5266] total_pgfault 61779 [ 85.175383][ T5266] total_pgmajfault 153 [ 85.175392][ T5266] total_inactive_anon 106496 [ 85.175401][ T5266] total_active_anon 8192 [ 85.175409][ T5266] total_inactive_file 8192 [ 85.175418][ T5266] total_active_file 4096 [ 85.175462][ T5266] total_unevictable 0 [ 85.175471][ T5266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.277,pid=5257,uid=0 [ 85.175592][ T5266] Memory cgroup out of memory: Killed process 5257 (syz.3.277) total-vm:96364kB, anon-rss:1348kB, file-rss:22576kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 85.507088][ T5321] loop4: detected capacity change from 0 to 512 [ 85.522476][ T5321] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.532664][ T5321] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 85.532824][ T5321] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.548016][ T5321] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.288: Allocating blocks 41-42 which overlap fs metadata [ 85.548064][ T5321] loop4: lost filesystem error report for type 5 error -117 [ 85.561775][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 85.561794][ C1] EXT4-fs (loop4): initial error at time 1788916160: ext4_mb_mark_diskspace_used:4223 [ 85.561814][ C1] EXT4-fs (loop4): last error at time 1788916160: ext4_mb_mark_diskspace_used:4223 [ 85.597089][ T5321] EXT4-fs (loop4): Remounting filesystem read-only [ 85.597136][ T5321] __quota_error: 10 callbacks suppressed [ 85.597156][ T5321] Quota error (device loop4): write_blk: dquota write failed [ 85.597176][ T5321] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 85.597303][ T5321] EXT4-fs (loop4): 1 truncate cleaned up [ 85.712130][ T29] audit: type=1400 audit(1788916160.721:917): avc: denied { write } for pid=5324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.753955][ T29] audit: type=1400 audit(1788916160.761:918): avc: denied { write } for pid=5335 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.834750][ T5321] EXT4-fs (loop4): pa ffff8881072e8460: logic 1, phys. 41, len 23 [ 85.835269][ T5321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.876283][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 85.908739][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.099074][ T5360] loop2: detected capacity change from 0 to 128 [ 86.111322][ T5360] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 86.172135][ T5360] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.173318][ T5360] ext2 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.187711][ T29] audit: type=1400 audit(1788916161.191:919): avc: denied { write } for pid=5344 comm="syz.2.290" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.311297][ T5353] loop5: detected capacity change from 0 to 1024 [ 86.344927][ T5353] EXT4-fs: Ignoring removed orlov option [ 86.351838][ T5353] EXT4-fs: inline encryption not supported [ 86.368020][ T5353] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 86.379577][ T5353] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 86.379960][ T5353] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 86.417829][ T5353] EXT4-fs (loop5): invalid journal inode [ 86.424502][ T5353] EXT4-fs (loop5): can't get journal size [ 86.443237][ T5353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.488516][ T29] audit: type=1400 audit(1788916161.501:920): avc: denied { write } for pid=5339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.530780][ T29] audit: type=1400 audit(1788916161.541:921): avc: denied { write } for pid=5369 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.586867][ T5367] loop4: detected capacity change from 0 to 128 [ 86.700897][ T5374] loop0: detected capacity change from 0 to 512 [ 86.875305][ T5374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.875527][ T5374] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.902374][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.051099][ T29] audit: type=1400 audit(1788916162.061:922): avc: denied { write } for pid=5371 comm="syz.0.295" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.051133][ T29] audit: type=1400 audit(1788916162.061:923): avc: denied { write } for pid=5371 comm="syz.0.295" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.051164][ T29] audit: type=1400 audit(1788916162.061:924): avc: denied { open } for pid=5371 comm="syz.0.295" path="/61/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.092734][ T5384] loop2: detected capacity change from 0 to 8192 [ 87.140639][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.155640][ T12] bridge_slave_1: left allmulticast mode [ 87.155673][ T12] bridge_slave_1: left promiscuous mode [ 87.155799][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.186038][ T12] bridge_slave_0: left allmulticast mode [ 87.186065][ T12] bridge_slave_0: left promiscuous mode [ 87.186200][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.221730][ T5367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.249802][ T5367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.261145][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.262763][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.263275][ T12] bond0 (unregistering): Released all slaves [ 87.273155][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.298'. [ 87.392045][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.420522][ T5411] netlink: 44 bytes leftover after parsing attributes in process `syz.0.300'. [ 87.584692][ T5419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.584793][ T5419] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.638177][ T12] hsr_slave_0: left promiscuous mode [ 87.644587][ T12] hsr_slave_1: left promiscuous mode [ 87.644960][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.658445][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.666501][ T12] veth0_vlan: left promiscuous mode [ 87.688005][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.749284][ T12] team0 (unregistering): Port device team_slave_1 removed [ 87.758560][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.881183][ T5444] usb usb1: usbfs: process 5444 (syz.5.315) did not claim interface 0 before use [ 88.101920][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 88.153247][ T5458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.179900][ T5458] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 88.193534][ T5458] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 88.254204][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.330106][ T5482] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.332679][ T5482] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 88.332733][ T5482] FAT-fs (loop2): Filesystem has been set read-only [ 88.420144][ T5479] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 88.438060][ T5479] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.455317][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 88.459629][ T12] IPVS: stop unused estimator thread 0... [ 88.465275][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 88.467367][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.467398][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.467447][ T5387] bridge_slave_0: entered allmulticast mode [ 88.468231][ T5387] bridge_slave_0: entered promiscuous mode [ 88.472241][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.472273][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.472341][ T5387] bridge_slave_1: entered allmulticast mode [ 88.474259][ T5387] bridge_slave_1: entered promiscuous mode [ 88.537498][ T5387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.557189][ T5496] EXT4-fs: Ignoring removed nobh option [ 88.557472][ T5387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.573885][ T5495] ieee802154 phy1 wpan1: encryption failed: -22 [ 88.584583][ T5496] EXT4-fs (loop4): 1 truncate cleaned up [ 88.584875][ T5496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.621546][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.635198][ T5387] team0: Port device team_slave_0 added [ 88.648521][ T5387] team0: Port device team_slave_1 added [ 88.668014][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.668037][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.702600][ T5387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.710085][ T5499] bio_check_eod: 5 callbacks suppressed [ 88.710186][ T5499] syz.2.338: attempt to access beyond end of device [ 88.710186][ T5499] loop2: rw=2049, sector=138, nr_sectors = 48 limit=128 [ 88.715308][ T5499] syz.2.338: attempt to access beyond end of device [ 88.715308][ T5499] loop2: rw=2049, sector=202, nr_sectors = 2 limit=128 [ 88.722344][ T5499] syz.2.338: attempt to access beyond end of device [ 88.722344][ T5499] loop2: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 88.725910][ T5499] syz.2.338: attempt to access beyond end of device [ 88.725910][ T5499] loop2: rw=2049, sector=210, nr_sectors = 2 limit=128 [ 88.743269][ T5499] syz.2.338: attempt to access beyond end of device [ 88.743269][ T5499] loop2: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 88.746020][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.746033][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.746061][ T5387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.770365][ T5499] syz.2.338: attempt to access beyond end of device [ 88.770365][ T5499] loop2: rw=2049, sector=218, nr_sectors = 2 limit=128 [ 88.894029][ T5512] set_capacity_and_notify: 5 callbacks suppressed [ 88.894141][ T5512] loop5: detected capacity change from 0 to 128 [ 88.924963][ T5387] hsr_slave_0: entered promiscuous mode [ 88.932706][ T5387] hsr_slave_1: entered promiscuous mode [ 88.977592][ T5512] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 88.989590][ T5499] syz.2.338: attempt to access beyond end of device [ 88.989590][ T5499] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 89.063296][ T5499] syz.2.338: attempt to access beyond end of device [ 89.063296][ T5499] loop2: rw=2049, sector=226, nr_sectors = 2 limit=128 [ 89.107090][ T5499] syz.2.338: attempt to access beyond end of device [ 89.107090][ T5499] loop2: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 89.125551][ T5512] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.141396][ T5512] ext2 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.185684][ T5499] syz.2.338: attempt to access beyond end of device [ 89.185684][ T5499] loop2: rw=2049, sector=234, nr_sectors = 2 limit=128 [ 89.276486][ T5515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.276693][ T5515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.383845][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 89.538766][ T3893] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.897796][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 90.052168][ T5570] netlink: 'syz.5.341': attribute type 2 has an invalid length. [ 90.110300][ T5570] 0: entered promiscuous mode [ 90.111062][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 90.129600][ T5579] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 90.299388][ T5387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.314271][ T5387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.322120][ T5387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.346180][ T5387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.355858][ T5387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.368268][ T5387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.376687][ T5387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.392177][ T5387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.407029][ T5615] loop4: detected capacity change from 0 to 512 [ 90.407407][ T5615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.407474][ T5615] EXT4-fs: Ignoring removed nobh option [ 90.430321][ T5615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.430392][ T5615] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.437384][ T5615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.437415][ T5615] EXT4-fs: Cannot specify journal on remount [ 90.472119][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.505219][ T5387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.512452][ T5630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.512578][ T5630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.535123][ T5387] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.538121][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.538163][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.542028][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.542063][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.586967][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.587003][ T5636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.595774][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.595873][ T5636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.639973][ T5641] netlink: 'syz.5.360': attribute type 39 has an invalid length. [ 90.706702][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 90.706763][ T29] audit: type=1400 audit(1788916165.721:1250): avc: denied { write } for pid=5640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.747645][ T29] audit: type=1400 audit(1788916165.761:1251): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.804734][ T5387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.841234][ T29] audit: type=1400 audit(1788916165.851:1252): avc: denied { write } for pid=5659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.862636][ T29] audit: type=1400 audit(1788916165.871:1253): avc: denied { write } for pid=5674 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.926390][ T5387] veth0_vlan: entered promiscuous mode [ 90.930607][ T5387] veth1_vlan: entered promiscuous mode [ 90.941471][ T5387] veth0_macvtap: entered promiscuous mode [ 90.949264][ T5387] veth1_macvtap: entered promiscuous mode [ 90.959290][ T29] audit: type=1400 audit(1788916165.971:1254): avc: denied { write } for pid=5676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.981067][ T29] audit: type=1400 audit(1788916165.991:1255): avc: denied { write } for pid=5690 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.006248][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.015561][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.035054][ T3948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.037118][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.037158][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.037241][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077371][ T29] audit: type=1400 audit(1788916166.091:1256): avc: denied { mount } for pid=5387 comm="syz-executor" name="/" dev="gadgetfs" ino=4372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 91.088129][ T29] audit: type=1400 audit(1788916166.101:1257): avc: denied { write } for pid=5692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.109138][ T29] audit: type=1400 audit(1788916166.121:1258): avc: denied { write } for pid=5704 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.171307][ T29] audit: type=1400 audit(1788916166.181:1259): avc: denied { open } for pid=5709 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.278434][ T5710] loop3: detected capacity change from 0 to 512 [ 91.317624][ T5710] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 91.317682][ T5710] loop3: lost filesystem error report for type 5 error -117 [ 91.326996][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 91.327015][ C0] EXT4-fs (loop3): initial error at time 1788916166: ext4_process_orphan:346 [ 91.327048][ C0] EXT4-fs (loop3): last error at time 1788916166: ext4_process_orphan:346 [ 91.364182][ T5710] EXT4-fs (loop3): 2 truncates cleaned up [ 91.376066][ T5710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.401288][ T5710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.709695][ T5778] loop3: detected capacity change from 0 to 128 [ 91.718894][ T5778] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 91.729457][ T5778] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.730710][ T5778] ext2 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.982943][ T5793] loop2: detected capacity change from 0 to 512 [ 92.986327][ T5793] EXT4-fs: Ignoring removed nobh option [ 93.036711][ T5793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.036796][ T5793] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.061771][ T5387] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.077204][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.139747][ T5802] loop2: detected capacity change from 0 to 1024 [ 93.140849][ T5802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.140903][ T5802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.145746][ T5802] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.147584][ T5802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.655854][ T5827] loop4: detected capacity change from 0 to 512 [ 93.702791][ T5827] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 93.702871][ T5827] loop4: lost filesystem error report for type 5 error -117 [ 93.704563][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 93.704695][ C0] EXT4-fs (loop4): initial error at time 1788916168: ext4_process_orphan:346 [ 93.704800][ C0] EXT4-fs (loop4): last error at time 1788916168: ext4_process_orphan:346 [ 93.707884][ T5827] EXT4-fs (loop4): 2 truncates cleaned up [ 93.719408][ T5827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.728072][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.100506][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.242310][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 94.268773][ T5870] loop0: detected capacity change from 0 to 8192 [ 94.318739][ T5884] loop3: detected capacity change from 0 to 1024 [ 94.350385][ T5884] EXT4-fs: Ignoring removed orlov option [ 94.351103][ T5884] EXT4-fs: inline encryption not supported [ 94.391238][ T5896] loop5: detected capacity change from 0 to 128 [ 94.472492][ T5896] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 94.485881][ T5884] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 94.498701][ T5884] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 94.499065][ T5884] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.507337][ T5896] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.510605][ T5896] ext2 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.567582][ T5884] EXT4-fs (loop3): invalid journal inode [ 94.568112][ T5884] EXT4-fs (loop3): can't get journal size [ 94.655682][ T5884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.956511][ T5918] veth1_to_bond: entered allmulticast mode [ 94.986944][ T5916] loop4: detected capacity change from 0 to 128 [ 95.004493][ T5918] netlink: 156 bytes leftover after parsing attributes in process `syz.2.377'. [ 95.098804][ T3893] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.334116][ T5918] loop2: detected capacity change from 0 to 512 [ 95.348104][ T5918] EXT4-fs: Ignoring removed i_version option [ 95.365145][ T5918] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.377115][ T5918] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.387401][ T5918] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 95.401884][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 95.401909][ C0] EXT4-fs (loop2): initial error at time 1788916170: ext4_mb_generate_buddy:1317 [ 95.401945][ C0] EXT4-fs (loop2): last error at time 1788916170: ext4_mb_generate_buddy:1317 [ 95.427831][ T5918] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.377: Failed to acquire dquot type 1 [ 95.428079][ T5918] loop2: lost filesystem error report for type 5 error -28 [ 95.441492][ T5918] EXT4-fs (loop2): 1 truncate cleaned up [ 95.626508][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.626600][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.641141][ T5978] loop4: detected capacity change from 0 to 128 [ 95.678259][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 95.737251][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 95.737282][ T29] audit: type=1400 audit(1788916170.751:1304): avc: denied { tracepoint } for pid=5988 comm="syz.5.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 95.766613][ T5978] bio_check_eod: 8 callbacks suppressed [ 95.766697][ T5978] syz.4.380: attempt to access beyond end of device [ 95.766697][ T5978] loop4: rw=2049, sector=138, nr_sectors = 48 limit=128 [ 95.767463][ T29] audit: type=1400 audit(1788916170.791:1305): avc: denied { sys_module } for pid=5988 comm="syz.5.382" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.779643][ T5978] syz.4.380: attempt to access beyond end of device [ 95.779643][ T5978] loop4: rw=2049, sector=202, nr_sectors = 2 limit=128 [ 95.800169][ T5978] syz.4.380: attempt to access beyond end of device [ 95.800169][ T5978] loop4: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 95.811256][ T29] audit: type=1326 audit(1788916170.831:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.2.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60509e159 code=0x7ffc0000 [ 95.818846][ T29] audit: type=1326 audit(1788916170.831:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.2.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60509e159 code=0x7ffc0000 [ 95.819420][ T5978] syz.4.380: attempt to access beyond end of device [ 95.819420][ T5978] loop4: rw=2049, sector=210, nr_sectors = 2 limit=128 [ 95.827998][ T5978] syz.4.380: attempt to access beyond end of device [ 95.827998][ T5978] loop4: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 95.829974][ T5978] syz.4.380: attempt to access beyond end of device [ 95.829974][ T5978] loop4: rw=2049, sector=218, nr_sectors = 2 limit=128 [ 95.831617][ T29] audit: type=1326 audit(1788916170.841:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.2.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60509e159 code=0x7ffc0000 [ 95.831648][ T29] audit: type=1326 audit(1788916170.841:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.2.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60509e159 code=0x7ffc0000 [ 95.837360][ T29] audit: type=1326 audit(1788916170.851:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.2.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc60505e98e code=0x7ffc0000 [ 95.837391][ T29] audit: type=1326 audit(1788916170.851:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.2.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc60505e98e code=0x7ffc0000 [ 95.837441][ T29] audit: type=1326 audit(1788916170.851:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.2.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60509e159 code=0x7ffc0000 [ 95.837469][ T29] audit: type=1326 audit(1788916170.851:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.2.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60509e159 code=0x7ffc0000 [ 95.837914][ T5978] syz.4.380: attempt to access beyond end of device [ 95.837914][ T5978] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 95.841015][ T5978] syz.4.380: attempt to access beyond end of device [ 95.841015][ T5978] loop4: rw=2049, sector=226, nr_sectors = 2 limit=128 [ 95.843209][ T5996] netlink: 'syz.5.382': attribute type 39 has an invalid length. [ 95.848595][ T5978] syz.4.380: attempt to access beyond end of device [ 95.848595][ T5978] loop4: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 95.862861][ T5978] syz.4.380: attempt to access beyond end of device [ 95.862861][ T5978] loop4: rw=2049, sector=234, nr_sectors = 2 limit=128 [ 96.098159][ T5978] IPVS: nq: FWM 3 0x00000003 - no destination available [ 96.137697][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 96.168385][ T6012] team1: entered promiscuous mode [ 96.168435][ T6012] team1: entered allmulticast mode [ 96.168711][ T6012] 8021q: adding VLAN 0 to HW filter on device team1 [ 96.179968][ T6011] loop3: detected capacity change from 0 to 512 [ 96.240655][ T6011] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.485428][ T6030] netlink: 128 bytes leftover after parsing attributes in process `syz.2.387'. [ 96.485481][ T6030] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 96.611588][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.392'. [ 96.772262][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 96.783998][ T6060] team1: entered promiscuous mode [ 96.784032][ T6060] team1: entered allmulticast mode [ 96.784222][ T6060] 8021q: adding VLAN 0 to HW filter on device team1 [ 96.786655][ T6055] loop4: detected capacity change from 0 to 128 [ 97.041920][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 97.174011][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.177681][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.292095][ T6110] loop3: detected capacity change from 0 to 1024 [ 97.330634][ T6110] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 48: comm syz.3.407: bad entry in directory: directory entry overrun - offset=12, inode=4098, rec_len=1024, size=1024 fake=0 [ 97.477246][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 97.491479][ T6132] team2: entered promiscuous mode [ 97.491507][ T6132] team2: entered allmulticast mode [ 97.491600][ T6132] 8021q: adding VLAN 0 to HW filter on device team2 [ 97.631400][ T6134] loop2: detected capacity change from 0 to 512 [ 97.679681][ T6134] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.362993][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 98.531967][ T6167] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 98.555703][ T6167] ext2 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.380695][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.381535][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.779929][ T6182] set_capacity_and_notify: 2 callbacks suppressed [ 99.779954][ T6182] loop5: detected capacity change from 0 to 256 [ 99.799990][ T6182] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.312181][ T6207] loop5: detected capacity change from 0 to 512 [ 100.334145][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 100.340042][ T6207] EXT4-fs mount: 11 callbacks suppressed [ 100.340383][ T6207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.340864][ T6207] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.576938][ T6217] loop4: detected capacity change from 0 to 256 [ 100.889429][ T6237] loop2: detected capacity change from 0 to 128 [ 100.894504][ T6238] loop0: detected capacity change from 0 to 4096 [ 100.915061][ T6238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.934516][ T6238] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 100.944111][ T6238] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 100.967719][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.100403][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.100559][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.128733][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.202065][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 101.202094][ T29] audit: type=1400 audit(1788916176.211:1541): avc: denied { write } for pid=6239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.249438][ T6251] netlink: 'syz.5.432': attribute type 39 has an invalid length. [ 101.265144][ T6263] netlink: 'syz.4.435': attribute type 12 has an invalid length. [ 101.268657][ T29] audit: type=1400 audit(1788916176.281:1542): avc: denied { write } for pid=6259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.357264][ T6265] loop0: detected capacity change from 0 to 128 [ 101.366387][ T6265] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 101.381487][ T6265] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.383280][ T6265] ext2 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.396855][ T29] audit: type=1400 audit(1788916176.411:1543): avc: denied { write } for pid=6253 comm="syz.0.433" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.759299][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 101.839008][ T6276] team2: entered promiscuous mode [ 101.839070][ T6276] team2: entered allmulticast mode [ 101.839227][ T6276] 8021q: adding VLAN 0 to HW filter on device team2 [ 101.907994][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 101.967643][ T6289] ieee802154 phy1 wpan1: encryption failed: -22 [ 101.986556][ T6237] loop2: detected capacity change from 0 to 512 [ 102.010016][ T6237] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 102.011062][ T6237] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.431: invalid indirect mapped block 2683928664 (level 1) [ 102.011190][ T6237] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.011509][ T29] audit: type=1400 audit(1788916177.021:1544): avc: denied { write } for pid=6280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.013576][ T6237] EXT4-fs (loop2): 1 truncate cleaned up [ 102.017662][ T6237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.070160][ T6237] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 102.088817][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.111958][ T6237] Cannot find del_set index 2 as target [ 102.150423][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.202073][ T29] audit: type=1400 audit(1788916177.181:1545): avc: denied { write } for pid=6302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.427393][ T6313] loop4: detected capacity change from 0 to 4096 [ 102.605464][ T6313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.720407][ T6301] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 102.722024][ T6301] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 102.869627][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.921444][ T6310] loop0: detected capacity change from 0 to 512 [ 103.122581][ T6310] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.131574][ T6319] loop5: detected capacity change from 0 to 128 [ 103.152262][ T6310] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.446: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 103.152412][ T6310] loop0: lost filesystem error report for type 5 error -117 [ 103.167240][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 103.167261][ C1] EXT4-fs (loop0): initial error at time 1788916178: ext4_xattr_inode_iget:473 [ 103.167291][ C1] EXT4-fs (loop0): last error at time 1788916178: ext4_xattr_inode_iget:473 [ 103.203872][ T6310] EXT4-fs (loop0): 1 orphan inode deleted [ 103.223939][ T6310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.288832][ T6319] bio_check_eod: 23 callbacks suppressed [ 103.288868][ T6319] syz.5.448: attempt to access beyond end of device [ 103.288868][ T6319] loop5: rw=2049, sector=138, nr_sectors = 48 limit=128 [ 103.331153][ T6319] syz.5.448: attempt to access beyond end of device [ 103.331153][ T6319] loop5: rw=2049, sector=202, nr_sectors = 2 limit=128 [ 103.347886][ T6319] syz.5.448: attempt to access beyond end of device [ 103.347886][ T6319] loop5: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 103.387898][ T6333] Unsupported NM flag settings (240) [ 103.433366][ T6310] macvtap1: entered allmulticast mode [ 103.433565][ T6310] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 103.433868][ T6310] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 103.470192][ T6310] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 103.586242][ T6319] syz.5.448: attempt to access beyond end of device [ 103.586242][ T6319] loop5: rw=2049, sector=210, nr_sectors = 2 limit=128 [ 103.603927][ T6319] syz.5.448: attempt to access beyond end of device [ 103.603927][ T6319] loop5: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 103.619861][ T6319] syz.5.448: attempt to access beyond end of device [ 103.619861][ T6319] loop5: rw=2049, sector=218, nr_sectors = 2 limit=128 [ 103.637730][ T6319] syz.5.448: attempt to access beyond end of device [ 103.637730][ T6319] loop5: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 103.653598][ T6319] syz.5.448: attempt to access beyond end of device [ 103.653598][ T6319] loop5: rw=2049, sector=226, nr_sectors = 2 limit=128 [ 103.671460][ T6319] syz.5.448: attempt to access beyond end of device [ 103.671460][ T6319] loop5: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 103.693236][ T6319] syz.5.448: attempt to access beyond end of device [ 103.693236][ T6319] loop5: rw=2049, sector=234, nr_sectors = 2 limit=128 [ 103.746695][ T6310] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 103.782598][ T3379] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 104.114461][ T29] audit: type=1400 audit(1788916179.121:1546): avc: denied { write } for pid=6338 comm="syz.2.451" name="ss" dev="configfs" ino=7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.168929][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.175684][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.201387][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 104.207140][ T29] audit: type=1400 audit(1788916179.221:1547): avc: denied { write } for pid=6320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.227302][ T6348] team2: entered promiscuous mode [ 104.227321][ T6348] team2: entered allmulticast mode [ 104.227436][ T6348] 8021q: adding VLAN 0 to HW filter on device team2 [ 104.264254][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.279977][ T29] audit: type=1400 audit(1788916179.291:1548): avc: denied { write } for pid=6353 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.333849][ T6358] netlink: 'syz.0.456': attribute type 7 has an invalid length. [ 104.346332][ T6347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.346477][ T6347] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.381867][ T29] audit: type=1400 audit(1788916179.452:1549): avc: denied { write } for pid=6344 comm="syz.3.452" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.432850][ T6347] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 104.432874][ T6347] netlink: 220 bytes leftover after parsing attributes in process `syz.3.452'. [ 104.457878][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 104.472924][ T6366] team3: entered promiscuous mode [ 104.474219][ T6366] team3: entered allmulticast mode [ 104.474358][ T6366] 8021q: adding VLAN 0 to HW filter on device team3 [ 104.548253][ T29] audit: type=1400 audit(1788916179.622:1550): avc: denied { write } for pid=6367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.614582][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.614742][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.728589][ T6365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.729340][ T6365] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.774010][ T6384] netlink: 'syz.0.459': attribute type 39 has an invalid length. [ 104.808787][ T6364] set_capacity_and_notify: 4 callbacks suppressed [ 104.808842][ T6364] loop4: detected capacity change from 0 to 512 [ 104.842439][ T6364] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 104.853229][ T6364] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.457: invalid indirect mapped block 2683928664 (level 1) [ 104.853340][ T6364] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 104.867707][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 104.867738][ C1] EXT4-fs (loop4): initial error at time 1788916179: ext4_free_branches:1023: inode 13 [ 104.867763][ C1] EXT4-fs (loop4): last error at time 1788916179: ext4_free_branches:1023: inode 13 [ 104.886387][ T6365] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.915170][ T6364] EXT4-fs (loop4): 1 truncate cleaned up [ 104.928001][ T6364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.939976][ T6399] loop2: detected capacity change from 0 to 764 [ 104.946283][ T6399] Symlink component flag not implemented [ 104.946291][ T6399] Symlink component flag not implemented [ 104.946315][ T6399] Symlink component flag not implemented (129) [ 104.946325][ T6399] Symlink component flag not implemented (6) [ 104.990956][ T6364] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 105.006783][ T6364] Cannot find del_set index 2 as target [ 105.028322][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.031789][ T6404] FAULT_INJECTION: forcing a failure. [ 105.031789][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 105.031820][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.2.461 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.031911][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.031961][ T6404] Call Trace: [ 105.031968][ T6404] [ 105.031983][ T6404] __dump_stack+0x1d/0x30 [ 105.032010][ T6404] dump_stack_lvl+0x95/0xd0 [ 105.032108][ T6404] dump_stack+0x15/0x1b [ 105.032131][ T6404] should_fail_ex+0x262/0x280 [ 105.032158][ T6404] ? __request_module+0x1c4/0x3c0 [ 105.032181][ T6404] should_failslab+0x8c/0xb0 [ 105.032316][ T6404] __kmalloc_cache_noprof+0x7a/0x400 [ 105.032352][ T6404] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 105.032449][ T6404] ? __request_module+0x1c4/0x3c0 [ 105.032473][ T6404] ? crypto_alg_mod_lookup+0xe4/0x490 [ 105.032511][ T6404] __request_module+0x1c4/0x3c0 [ 105.032567][ T6404] ? string+0x200/0x220 [ 105.032592][ T6404] ? crypto_alg_lookup+0x310/0x360 [ 105.032701][ T6404] crypto_alg_mod_lookup+0xe4/0x490 [ 105.032741][ T6404] crypto_alloc_tfm_node+0x91/0x280 [ 105.032833][ T6404] crypto_alloc_aead+0x2d/0x40 [ 105.032863][ T6404] esp6_init_state+0x3ec/0xa00 [ 105.032903][ T6404] ? should_failslab+0x8c/0xb0 [ 105.032961][ T6404] __xfrm_init_state+0x6b9/0xb40 [ 105.033001][ T6404] xfrm_init_state+0x1e/0x80 [ 105.033028][ T6404] pfkey_add+0xfc5/0x12b0 [ 105.033143][ T6404] pfkey_sendmsg+0x839/0x970 [ 105.033180][ T6404] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 105.033249][ T6404] ____sys_sendmsg+0x532/0x580 [ 105.033290][ T6404] ___sys_sendmsg+0x195/0x1e0 [ 105.033368][ T6404] __x64_sys_sendmsg+0xd4/0x160 [ 105.033408][ T6404] x64_sys_call+0x22ab/0x2550 [ 105.033437][ T6404] do_syscall_64+0x112/0x360 [ 105.033506][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.033531][ T6404] RIP: 0033:0x7fc60509e159 [ 105.033549][ T6404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.033594][ T6404] RSP: 002b:00007fc603af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.033618][ T6404] RAX: ffffffffffffffda RBX: 00007fc605325fa0 RCX: 00007fc60509e159 [ 105.033634][ T6404] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 105.033649][ T6404] RBP: 00007fc60513503b R08: 0000000000000000 R09: 0000000000000000 [ 105.033665][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.033679][ T6404] R13: 00007fc605326038 R14: 00007fc605325fa0 R15: 00007ffd6b2337d8 [ 105.033763][ T6404] [ 105.143588][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.274222][ T6420] loop3: detected capacity change from 0 to 128 [ 105.670099][ T6420] loop3: detected capacity change from 0 to 512 [ 105.759519][ T6420] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 105.761590][ T6420] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.474: invalid indirect mapped block 2683928664 (level 1) [ 105.762088][ T6420] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 105.764542][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 105.764567][ C0] EXT4-fs (loop3): initial error at time 1788916180: ext4_free_branches:1023: inode 13 [ 105.764608][ C0] EXT4-fs (loop3): last error at time 1788916180: ext4_free_branches:1023: inode 13 [ 105.768632][ T6420] EXT4-fs (loop3): 1 truncate cleaned up [ 105.787320][ T6420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.903769][ T6420] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 105.935135][ T6456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.935329][ T6456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.953143][ T6420] Cannot find add_set index 0 as target [ 106.059236][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.092917][ T6458] netlink: 'syz.0.479': attribute type 39 has an invalid length. [ 106.213848][ T6459] loop4: detected capacity change from 0 to 512 [ 106.240121][ T6459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.405625][ T6459] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.420383][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 106.420405][ T29] audit: type=1400 audit(1788916181.492:1558): avc: denied { write } for pid=6442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.424001][ T29] audit: type=1400 audit(1788916181.492:1559): avc: denied { write } for pid=6451 comm="syz.4.468" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.443762][ T29] audit: type=1400 audit(1788916181.512:1560): avc: denied { write } for pid=6451 comm="syz.4.468" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.484807][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 106.491435][ T29] audit: type=1400 audit(1788916181.562:1561): avc: denied { write } for pid=6471 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.915694][ T6474] loop3: detected capacity change from 0 to 4096 [ 106.924812][ T6474] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 107.056352][ T6474] loop3: detected capacity change from 0 to 512 [ 107.063250][ T6474] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 107.342862][ T6470] team1: entered promiscuous mode [ 107.343013][ T6470] team1: entered allmulticast mode [ 107.343112][ T6470] 8021q: adding VLAN 0 to HW filter on device team1 [ 107.447517][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.508089][ T29] audit: type=1400 audit(1788916182.582:1562): avc: denied { read } for pid=6499 comm="syz.2.478" path="socket:[12393]" dev="sockfs" ino=12393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.567152][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.567332][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.605506][ T29] audit: type=1400 audit(1788916182.682:1563): avc: denied { write } for pid=6484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.667417][ T29] audit: type=1400 audit(1788916182.742:1564): avc: denied { write } for pid=6521 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.722303][ T6517] netlink: 'syz.0.483': attribute type 39 has an invalid length. [ 107.799107][ T6519] loop4: detected capacity change from 0 to 512 [ 107.850236][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 107.885178][ T6519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.890871][ T6537] team3: entered promiscuous mode [ 107.890892][ T6537] team3: entered allmulticast mode [ 107.891122][ T6537] 8021q: adding VLAN 0 to HW filter on device team3 [ 107.899965][ T6519] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.945102][ T6538] loop5: detected capacity change from 0 to 512 [ 107.969800][ T6519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.008697][ T6538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.022350][ T6538] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.048454][ T29] audit: type=1400 audit(1788916183.122:1565): avc: denied { write } for pid=6532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.074094][ T29] audit: type=1400 audit(1788916183.142:1566): avc: denied { write } for pid=6529 comm="syz.5.488" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.076930][ T29] audit: type=1400 audit(1788916183.152:1567): avc: denied { write } for pid=6552 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.309689][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.375249][ T6579] loop5: detected capacity change from 0 to 128 [ 108.409501][ T6586] netlink: 'syz.3.496': attribute type 4 has an invalid length. [ 108.417334][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 108.576338][ T6597] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 108.686994][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.687115][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.688764][ T6597] EXT4-fs (loop4): 1 orphan inode deleted [ 108.689294][ T6597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.693659][ T6597] ext4 filesystem being mounted at /120/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.705300][ T71] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 1 [ 108.922222][ T6636] netlink: 'syz.5.504': attribute type 39 has an invalid length. [ 108.974976][ T6638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.988211][ T6638] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.293721][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.369283][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.387007][ T6676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.514'. [ 109.525699][ T6679] FAT-fs (loop4): Directory bread(block 1048) failed [ 109.525794][ T6679] FAT-fs (loop4): Directory bread(block 1049) failed [ 109.525818][ T6679] FAT-fs (loop4): Directory bread(block 1050) failed [ 109.525837][ T6679] FAT-fs (loop4): Directory bread(block 1051) failed [ 109.525852][ T6679] FAT-fs (loop4): Directory bread(block 1052) failed [ 109.525891][ T6679] FAT-fs (loop4): Directory bread(block 1053) failed [ 109.525910][ T6679] FAT-fs (loop4): Directory bread(block 1054) failed [ 109.525930][ T6679] FAT-fs (loop4): Directory bread(block 1055) failed [ 109.599610][ T6672] bio_check_eod: 8 callbacks suppressed [ 109.599651][ T6672] syz.3.512: attempt to access beyond end of device [ 109.599651][ T6672] loop3: rw=2049, sector=138, nr_sectors = 48 limit=128 [ 109.621352][ T6672] syz.3.512: attempt to access beyond end of device [ 109.621352][ T6672] loop3: rw=2049, sector=202, nr_sectors = 2 limit=128 [ 109.633702][ T6672] syz.3.512: attempt to access beyond end of device [ 109.633702][ T6672] loop3: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 109.642665][ T6672] syz.3.512: attempt to access beyond end of device [ 109.642665][ T6672] loop3: rw=2049, sector=210, nr_sectors = 2 limit=128 [ 109.666501][ T6672] syz.3.512: attempt to access beyond end of device [ 109.666501][ T6672] loop3: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 109.699663][ T6672] syz.3.512: attempt to access beyond end of device [ 109.699663][ T6672] loop3: rw=2049, sector=218, nr_sectors = 2 limit=128 [ 109.710765][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.710839][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.712817][ T6699] FAULT_INJECTION: forcing a failure. [ 109.712817][ T6699] name fail_futex, interval 1, probability 0, space 0, times 1 [ 109.712847][ T6699] CPU: 0 UID: 0 PID: 6699 Comm: syz.5.518 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.712876][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.712907][ T6699] Call Trace: [ 109.712914][ T6699] [ 109.712922][ T6699] __dump_stack+0x1d/0x30 [ 109.712950][ T6699] dump_stack_lvl+0x95/0xd0 [ 109.713045][ T6699] dump_stack+0x15/0x1b [ 109.713068][ T6699] should_fail_ex+0x262/0x280 [ 109.713091][ T6699] should_fail+0xb/0x20 [ 109.713115][ T6699] get_futex_key+0x12d/0xb10 [ 109.713191][ T6699] futex_wake+0x89/0x400 [ 109.713334][ T6699] do_futex+0x3f8/0x460 [ 109.713368][ T6699] __se_sys_futex+0x2f6/0x370 [ 109.713402][ T6699] __x64_sys_futex+0x78/0x90 [ 109.713434][ T6699] x64_sys_call+0x22e2/0x2550 [ 109.713502][ T6699] do_syscall_64+0x112/0x360 [ 109.713533][ T6699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.713557][ T6699] RIP: 0033:0x7f0ec8dae159 [ 109.713610][ T6699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.713632][ T6699] RSP: 002b:00007f0ec78070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.713657][ T6699] RAX: ffffffffffffffda RBX: 00007f0ec9035fa8 RCX: 00007f0ec8dae159 [ 109.713674][ T6699] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0ec9035fac [ 109.713731][ T6699] RBP: 00007f0ec9035fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 109.713747][ T6699] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 109.713762][ T6699] R13: 00007f0ec9036038 R14: 00007ffe72ae79e0 R15: 00007ffe72ae7ac8 [ 109.713784][ T6699] [ 109.722737][ T6672] syz.3.512: attempt to access beyond end of device [ 109.722737][ T6672] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 109.733183][ T6672] syz.3.512: attempt to access beyond end of device [ 109.733183][ T6672] loop3: rw=2049, sector=226, nr_sectors = 2 limit=128 [ 109.746002][ T6672] syz.3.512: attempt to access beyond end of device [ 109.746002][ T6672] loop3: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 109.757709][ T6672] syz.3.512: attempt to access beyond end of device [ 109.757709][ T6672] loop3: rw=2049, sector=234, nr_sectors = 2 limit=128 [ 109.944015][ T6679] FAT-fs (loop4): FAT read failed (blocknr 128) [ 110.001944][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.011533][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.084437][ T6700] netlink: 'syz.0.529': attribute type 39 has an invalid length. [ 110.277250][ T6734] set_capacity_and_notify: 6 callbacks suppressed [ 110.277276][ T6734] loop2: detected capacity change from 0 to 512 [ 110.343402][ T6734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.358395][ T6734] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.645680][ T6752] loop4: detected capacity change from 0 to 2048 [ 110.653993][ T6754] loop5: detected capacity change from 0 to 4096 [ 110.662844][ T6754] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 110.685673][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.685965][ T6752] loop4: p1 < > p4 [ 110.686779][ T6752] loop4: p4 size 8388608 extends beyond EOD, truncated [ 110.717339][ T6754] loop5: detected capacity change from 0 to 512 [ 110.734339][ T6754] EXT4-fs (loop5): 1 orphan inode deleted [ 110.738674][ T6754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.741909][ T6754] ext4 filesystem being mounted at /67/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.744716][ T31] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 1 [ 111.395307][ T6866] loop0: detected capacity change from 0 to 512 [ 111.411551][ T6866] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.540: inode has both inline data and extents flags [ 111.411589][ T6866] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.414557][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 111.414578][ C0] EXT4-fs (loop0): initial error at time 1788916186: ext4_orphan_get:1403: inode 15 [ 111.414627][ C0] EXT4-fs (loop0): last error at time 1788916186: ext4_orphan_get:1403: inode 15 [ 111.416747][ T6866] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.540: couldn't read orphan inode 15 (err -117) [ 111.416773][ T6866] loop0: lost filesystem error report for type 5 error -117 [ 111.417255][ T6866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.451948][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 111.451965][ T29] audit: type=1400 audit(1788916186.502:1600): avc: denied { write } for pid=6868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.549873][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.597482][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.643252][ T6871] loop3: detected capacity change from 0 to 8192 [ 111.734661][ T29] audit: type=1400 audit(1788916186.802:1601): avc: denied { write } for pid=6884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.785739][ T29] audit: type=1400 audit(1788916186.862:1602): avc: denied { write } for pid=6905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.873666][ T6903] loop4: detected capacity change from 0 to 512 [ 111.900200][ T6903] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.912392][ T6903] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.537: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 111.912536][ T6903] loop4: lost filesystem error report for type 5 error -117 [ 111.927274][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 111.927302][ C0] EXT4-fs (loop4): initial error at time 1788916186: ext4_xattr_inode_iget:473 [ 111.927328][ C0] EXT4-fs (loop4): last error at time 1788916186: ext4_xattr_inode_iget:473 [ 111.965377][ T6903] EXT4-fs (loop4): 1 orphan inode deleted [ 111.970121][ T29] audit: type=1400 audit(1788916187.042:1603): avc: denied { write } for pid=6911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.990027][ T6903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.021814][ T29] audit: type=1400 audit(1788916187.092:1604): avc: denied { write } for pid=6922 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.057146][ T6903] macvtap1: entered allmulticast mode [ 112.057274][ T6903] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 112.070659][ T6903] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 112.085141][ T6903] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 112.099533][ T6903] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 112.165899][ T3395] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 112.332569][ T29] audit: type=1400 audit(1788916187.402:1605): avc: denied { write } for pid=6927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.378971][ T29] audit: type=1400 audit(1788916187.452:1606): avc: denied { write } for pid=6939 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.491028][ T29] audit: type=1400 audit(1788916187.562:1607): avc: denied { write } for pid=6943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.550315][ T29] audit: type=1400 audit(1788916187.622:1608): avc: denied { write } for pid=6954 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.553421][ T6958] netlink: 'syz.2.542': attribute type 10 has an invalid length. [ 112.553439][ T6958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.542'. [ 112.664156][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.689660][ T6962] loop5: detected capacity change from 0 to 128 [ 112.716432][ T6964] loop0: detected capacity change from 0 to 512 [ 112.741505][ T6964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.741909][ T6964] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.756975][ T29] audit: type=1400 audit(1788916187.832:1609): avc: denied { write } for pid=6957 comm="syz.0.553" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.023867][ T6962] loop5: detected capacity change from 0 to 512 [ 113.057357][ T6962] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 113.067716][ T6962] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.541: invalid indirect mapped block 2683928664 (level 1) [ 113.067845][ T6962] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 113.069658][ T6962] EXT4-fs (loop5): 1 truncate cleaned up [ 113.073438][ T6962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.091855][ T6962] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 113.107243][ T6962] Cannot find add_set index 0 as target [ 113.142692][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.171260][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.176472][ T6994] team_slave_0: entered allmulticast mode [ 113.703566][ T7006] bond0: option arp_interval: invalid value ( ) [ 113.703677][ T7006] bond0: option arp_interval: allowed values 0 - 2147483647 [ 113.710163][ T7032] netlink: 44 bytes leftover after parsing attributes in process `syz.4.558'. [ 113.895749][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.908119][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.331333][ T7045] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 114.347058][ T7045] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.561: invalid indirect mapped block 2683928664 (level 1) [ 114.347350][ T7045] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 114.354545][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 114.354586][ C0] EXT4-fs (loop4): initial error at time 1788916189: ext4_free_branches:1023: inode 13 [ 114.354657][ C0] EXT4-fs (loop4): last error at time 1788916189: ext4_free_branches:1023: inode 13 [ 114.362264][ T7045] EXT4-fs (loop4): 1 truncate cleaned up [ 114.377107][ T7045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.451905][ T7045] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 114.467658][ T7045] Cannot find del_set index 2 as target [ 114.518666][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.693141][ T7113] macvtap1: entered allmulticast mode [ 114.695101][ T7113] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 114.695162][ T7113] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 114.696111][ T7113] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 114.734464][ T7113] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 114.745908][ T37] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 114.858381][ T7103] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 114.861767][ T7103] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.584: invalid indirect mapped block 2683928664 (level 1) [ 114.861877][ T7103] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 114.864546][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 114.864566][ C0] EXT4-fs (loop0): initial error at time 1788916189: ext4_free_branches:1023: inode 13 [ 114.864596][ C0] EXT4-fs (loop0): last error at time 1788916189: ext4_free_branches:1023: inode 13 [ 114.865800][ T7103] EXT4-fs (loop0): 1 truncate cleaned up [ 114.871638][ T7103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.968743][ T7103] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 114.988318][ T7103] Cannot find del_set index 2 as target [ 114.995225][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.996033][ T7104] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.046592][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.075486][ T7120] bond0: option arp_interval: invalid value ( ) [ 115.075579][ T7120] bond0: option arp_interval: allowed values 0 - 2147483647 [ 115.101662][ T7104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.340875][ T7156] set_capacity_and_notify: 8 callbacks suppressed [ 115.340930][ T7156] loop0: detected capacity change from 0 to 128 [ 115.517648][ T7166] loop5: detected capacity change from 0 to 8192 [ 115.685615][ T31] IPVS: starting estimator thread 0... [ 115.774658][ T7199] IPVS: using max 2160 ests per chain, 108000 per kthread [ 115.779961][ T7156] loop0: detected capacity change from 0 to 512 [ 115.864959][ T7156] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 115.875274][ T7156] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.592: invalid indirect mapped block 2683928664 (level 1) [ 115.875346][ T7156] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 115.884539][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 115.884561][ C0] EXT4-fs (loop0): initial error at time 1788916190: ext4_free_branches:1023: inode 13 [ 115.884591][ C0] EXT4-fs (loop0): last error at time 1788916190: ext4_free_branches:1023: inode 13 [ 115.889681][ T7156] EXT4-fs (loop0): 1 truncate cleaned up [ 115.929963][ T7156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.970904][ T7156] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 115.995962][ T7156] Cannot find del_set index 2 as target [ 116.012779][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.394006][ T7265] loop2: detected capacity change from 0 to 512 [ 116.425132][ T7262] loop0: detected capacity change from 0 to 128 [ 116.476081][ T7265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.476191][ T7265] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.498824][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 116.498841][ T29] audit: type=1400 audit(1788916191.572:1635): avc: denied { write } for pid=7270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.540736][ T29] audit: type=1400 audit(1788916191.680:1636): avc: denied { write } for pid=7263 comm="syz.2.604" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.578369][ T29] audit: type=1400 audit(1788916191.710:1637): avc: denied { write } for pid=7284 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.580977][ T7269] loop5: detected capacity change from 0 to 512 [ 116.664461][ T7265] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 116.664493][ T7265] netlink: 220 bytes leftover after parsing attributes in process `syz.2.604'. [ 116.680043][ T7269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.680631][ T7269] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.723461][ T7262] loop0: detected capacity change from 0 to 512 [ 116.766799][ T7262] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 116.773229][ T7262] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.603: invalid indirect mapped block 2683928664 (level 1) [ 116.773358][ T7262] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 116.774545][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 116.774563][ C0] EXT4-fs (loop0): initial error at time 1788916191: ext4_free_branches:1023: inode 13 [ 116.774593][ C0] EXT4-fs (loop0): last error at time 1788916191: ext4_free_branches:1023: inode 13 [ 116.776568][ T7262] EXT4-fs (loop0): 1 truncate cleaned up [ 116.790538][ T7262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.807417][ T7269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.859146][ T7262] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 116.892788][ T7262] Cannot find del_set index 2 as target [ 116.913809][ T29] audit: type=1400 audit(1788916192.040:1638): avc: denied { write } for pid=7291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.936973][ T29] audit: type=1400 audit(1788916192.070:1639): avc: denied { write } for pid=7302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.937919][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.058259][ T7307] loop0: detected capacity change from 0 to 128 [ 117.169894][ T7307] bio_check_eod: 26 callbacks suppressed [ 117.170008][ T7307] syz.0.594: attempt to access beyond end of device [ 117.170008][ T7307] loop0: rw=2049, sector=138, nr_sectors = 48 limit=128 [ 117.173721][ T7307] syz.0.594: attempt to access beyond end of device [ 117.173721][ T7307] loop0: rw=2049, sector=202, nr_sectors = 2 limit=128 [ 117.176282][ T7319] loop5: detected capacity change from 0 to 512 [ 117.187986][ T7307] syz.0.594: attempt to access beyond end of device [ 117.187986][ T7307] loop0: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 117.190748][ T7319] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 117.193196][ T7307] syz.0.594: attempt to access beyond end of device [ 117.193196][ T7307] loop0: rw=2049, sector=210, nr_sectors = 2 limit=128 [ 117.197246][ T7307] syz.0.594: attempt to access beyond end of device [ 117.197246][ T7307] loop0: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 117.199184][ T7307] syz.0.594: attempt to access beyond end of device [ 117.199184][ T7307] loop0: rw=2049, sector=218, nr_sectors = 2 limit=128 [ 117.201605][ T7307] syz.0.594: attempt to access beyond end of device [ 117.201605][ T7307] loop0: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 117.203534][ T7307] syz.0.594: attempt to access beyond end of device [ 117.203534][ T7307] loop0: rw=2049, sector=226, nr_sectors = 2 limit=128 [ 117.231195][ T7307] syz.0.594: attempt to access beyond end of device [ 117.231195][ T7307] loop0: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 117.263803][ T7307] syz.0.594: attempt to access beyond end of device [ 117.263803][ T7307] loop0: rw=2049, sector=234, nr_sectors = 2 limit=128 [ 117.286984][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.339604][ T29] audit: type=1400 audit(1788916192.470:1640): avc: denied { write } for pid=7312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.381974][ T29] audit: type=1400 audit(1788916192.510:1641): avc: denied { write } for pid=7332 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.530164][ T7264] loop4: detected capacity change from 0 to 8192 [ 117.646058][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.656195][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.677358][ T7328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.678230][ T7328] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.720649][ T29] audit: type=1400 audit(1788916192.850:1642): avc: denied { write } for pid=7337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.783081][ T29] audit: type=1400 audit(1788916192.910:1643): avc: denied { write } for pid=7352 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.879467][ T7328] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.938200][ T29] audit: type=1400 audit(1788916193.070:1644): avc: denied { map } for pid=7359 comm="syz.4.599" path="socket:[13237]" dev="sockfs" ino=13237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.228350][ T7408] netlink: 72 bytes leftover after parsing attributes in process `syz.4.606'. [ 118.387960][ T7411] bond0: option arp_interval: invalid value ( ) [ 118.388060][ T7411] bond0: option arp_interval: allowed values 0 - 2147483647 [ 118.503745][ T7408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.514156][ T7408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.791951][ T7435] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 118.796375][ T7435] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.609: invalid indirect mapped block 2683928664 (level 1) [ 118.796442][ T7435] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 118.799926][ T7435] EXT4-fs (loop5): 1 truncate cleaned up [ 118.807385][ T7435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.833453][ T7435] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 118.873262][ T7435] Cannot find add_set index 0 as target [ 118.921202][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.957990][ T7472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.985558][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.5.615'. [ 118.995264][ T5387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.108171][ T7484] FAT-fs (loop5): unable to read block(17179869180) for building NFS inode [ 119.123489][ T3388] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.0003/input/input5 [ 119.134718][ T3388] hid-generic 0005:057B:030A.0003: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 119.263593][ T7495] fido_id[7495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 119.936792][ T7537] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 119.947650][ T7537] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.627: invalid indirect mapped block 2683928664 (level 1) [ 119.947720][ T7537] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 119.962039][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 119.962070][ C0] EXT4-fs (loop4): initial error at time 1788916195: ext4_free_branches:1023: inode 13 [ 119.962097][ C0] EXT4-fs (loop4): last error at time 1788916195: ext4_free_branches:1023: inode 13 [ 119.996174][ T7537] EXT4-fs (loop4): 1 truncate cleaned up [ 120.018718][ T7537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.025848][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.030956][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.069843][ T7537] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 120.128349][ T7537] Cannot find del_set index 2 as target [ 120.175950][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.291649][ T7565] loop5: p1 p3 < > [ 120.322269][ T7559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.415310][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 120.416634][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 121.332706][ T7746] set_capacity_and_notify: 12 callbacks suppressed [ 121.332801][ T7746] loop0: detected capacity change from 0 to 128 [ 121.578530][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 121.578562][ T29] audit: type=1400 audit(1788916196.710:1691): avc: denied { write } for pid=7779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.650939][ T29] audit: type=1400 audit(1788916196.780:1692): avc: denied { write } for pid=7793 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.761780][ T7746] bond0: option arp_interval: invalid value ( ) [ 121.761839][ T7746] bond0: option arp_interval: allowed values 0 - 2147483647 [ 121.889526][ T29] audit: type=1400 audit(1788916197.020:1693): avc: denied { write } for pid=7798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.913083][ T29] audit: type=1400 audit(1788916197.020:1694): avc: denied { write } for pid=7809 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.012722][ T29] audit: type=1400 audit(1788916197.140:1695): avc: denied { write } for pid=7813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.053917][ T29] audit: type=1400 audit(1788916197.180:1696): avc: denied { write } for pid=7824 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.171687][ T29] audit: type=1400 audit(1788916197.300:1697): avc: denied { write } for pid=7828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.194355][ T29] audit: type=1400 audit(1788916197.300:1698): avc: denied { write } for pid=7839 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.246703][ T7844] loop2: detected capacity change from 0 to 256 [ 122.277556][ T7850] netlink: 72 bytes leftover after parsing attributes in process `syz.0.658'. [ 122.368968][ T29] audit: type=1400 audit(1788916197.500:1699): avc: denied { write } for pid=7853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.430211][ T29] audit: type=1400 audit(1788916197.560:1700): avc: denied { write } for pid=7870 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.431853][ T7845] loop5: detected capacity change from 0 to 512 [ 122.464289][ T7845] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.479701][ T7845] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.499534][ T7845] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #17: comm syz.5.649: corrupted in-inode xattr: e_name out of bounds [ 122.499644][ T7845] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 122.514026][ T7845] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.649: couldn't read orphan inode 17 (err -117) [ 122.514132][ T7845] loop5: lost filesystem error report for type 5 error -117 [ 122.514529][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 122.514546][ C1] EXT4-fs (loop5): initial error at time 1788916197: ext4_iget_extra_inode:5210: inode 17 [ 122.514574][ C1] EXT4-fs (loop5): last error at time 1788916197: ext4_orphan_get:1408 [ 122.590973][ T7845] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 122.615633][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.627447][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.829811][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 123.018910][ T7917] can0: slcan on ttyS3. [ 123.054703][ T7917] can0 (unregistered): slcan off ttyS3. [ 123.359023][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.359116][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.442977][ T7952] loop2: detected capacity change from 0 to 512 [ 123.456861][ T7952] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.674: corrupted in-inode xattr: invalid ea_ino [ 123.456974][ T7952] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.470305][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 123.470332][ C1] EXT4-fs (loop2): initial error at time 1788916198: ext4_iget_extra_inode:5210: inode 15 [ 123.470360][ C1] EXT4-fs (loop2): last error at time 1788916198: ext4_iget_extra_inode:5210: inode 15 [ 123.487438][ T7952] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.674: couldn't read orphan inode 15 (err -117) [ 123.487524][ T7952] loop2: lost filesystem error report for type 5 error -117 [ 123.513815][ T7935] netlink: 'syz.5.672': attribute type 39 has an invalid length. [ 123.834605][ T7965] loop0: detected capacity change from 0 to 512 [ 123.851099][ T7965] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.853054][ T7965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.859569][ T7965] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #17: comm syz.0.675: corrupted in-inode xattr: e_name out of bounds [ 123.859652][ T7965] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 123.860229][ T7965] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.675: couldn't read orphan inode 17 (err -117) [ 123.860267][ T7965] loop0: lost filesystem error report for type 5 error -117 [ 123.883501][ T7965] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 124.122701][ T7952] netlink: 1 bytes leftover after parsing attributes in process `syz.2.674'. [ 124.615281][ T8009] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.680'. [ 124.766831][ T8026] netlink: 72 bytes leftover after parsing attributes in process `syz.3.686'. [ 125.074168][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.079672][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.595768][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 126.595813][ T29] audit: type=1400 audit(1788916201.730:1743): avc: denied { write } for pid=8281 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.697687][ T29] audit: type=1400 audit(1788916201.830:1744): avc: denied { write } for pid=8285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.720997][ T29] audit: type=1400 audit(1788916201.830:1745): avc: denied { write } for pid=8296 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.798214][ T29] audit: type=1400 audit(1788916201.930:1746): avc: denied { write } for pid=8300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.821567][ T29] audit: type=1400 audit(1788916201.930:1747): avc: denied { write } for pid=8311 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.899203][ T29] audit: type=1400 audit(1788916202.030:1748): avc: denied { write } for pid=8315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.922275][ T29] audit: type=1400 audit(1788916202.030:1749): avc: denied { write } for pid=8326 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.000104][ T29] audit: type=1400 audit(1788916202.130:1750): avc: denied { write } for pid=8330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.036890][ T29] audit: type=1400 audit(1788916202.170:1751): avc: denied { write } for pid=8341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.135683][ T29] audit: type=1400 audit(1788916202.270:1752): avc: denied { write } for pid=8345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.745139][ T8456] netlink: 'syz.0.697': attribute type 21 has an invalid length. [ 127.753287][ T8456] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.697'. [ 127.881857][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.882131][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.883431][ T8463] usb usb1: usbfs: process 8463 (syz.0.691) did not claim interface 0 before use [ 127.883512][ T8463] usb usb1: selecting invalid altsetting 1947 [ 128.008386][ T8465] netlink: 'syz.3.693': attribute type 32 has an invalid length. [ 128.085791][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.093616][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.093691][ T8461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.148063][ T8466] netlink: 'syz.4.692': attribute type 39 has an invalid length. [ 128.268172][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.706'. [ 128.332303][ T8493] loop0: detected capacity change from 0 to 128 [ 128.397614][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.711'. [ 128.662411][ T8493] loop0: detected capacity change from 0 to 512 [ 128.700131][ T8493] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 128.703863][ T8493] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.704: invalid indirect mapped block 2683928664 (level 1) [ 128.703945][ T8493] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 128.714526][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 128.714556][ C1] EXT4-fs (loop0): initial error at time 1788916203: ext4_free_branches:1023: inode 13 [ 128.714602][ C1] EXT4-fs (loop0): last error at time 1788916203: ext4_free_branches:1023: inode 13 [ 128.727992][ T8493] EXT4-fs (loop0): 1 truncate cleaned up [ 128.789581][ T8493] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 128.809736][ T8493] Cannot find del_set index 2 as target [ 128.870828][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 129.170904][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 129.218957][ T8561] loop0: detected capacity change from 0 to 512 [ 129.295150][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.728'. [ 129.306317][ T8561] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.447308][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.447480][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.541691][ T8607] netlink: 'syz.4.732': attribute type 39 has an invalid length. [ 129.783679][ T8650] loop2: detected capacity change from 0 to 1024 [ 129.798167][ T8650] EXT4-fs: Ignoring removed nobh option [ 129.798360][ T8650] EXT4-fs: Ignoring removed bh option [ 129.798464][ T8650] EXT4-fs: Ignoring removed nobh option [ 129.817674][ T8650] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 129.910462][ T8647] loop0: detected capacity change from 0 to 512 [ 129.974085][ T8647] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.929802][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.756'. [ 130.964773][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.964856][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.964900][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.964933][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.178144][ T8706] loop0: detected capacity change from 0 to 512 [ 131.256499][ T8706] EXT4-fs mount: 14 callbacks suppressed [ 131.256528][ T8706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.256630][ T8706] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.578308][ T8726] loop4: detected capacity change from 0 to 1024 [ 131.609336][ T8726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.700822][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 131.700845][ T29] audit: type=1400 audit(1788916206.830:1795): avc: denied { write } for pid=8686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.731978][ T29] audit: type=1400 audit(1788916206.850:1796): avc: denied { write } for pid=8731 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.791460][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.769'. [ 131.791488][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.769'. [ 131.923470][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.961052][ T29] audit: type=1400 audit(1788916207.090:1797): avc: denied { write } for pid=8735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.999788][ T8758] veth1_to_bond: entered allmulticast mode [ 132.009557][ T8748] loop2: detected capacity change from 0 to 128 [ 132.011189][ T8748] FAT-fs (loop2): Directory bread(block 1048) failed [ 132.011212][ T8748] FAT-fs (loop2): Directory bread(block 1049) failed [ 132.011299][ T8748] FAT-fs (loop2): Directory bread(block 1050) failed [ 132.011319][ T8748] FAT-fs (loop2): Directory bread(block 1051) failed [ 132.011404][ T8748] FAT-fs (loop2): Directory bread(block 1052) failed [ 132.011503][ T8748] FAT-fs (loop2): Directory bread(block 1053) failed [ 132.011523][ T8748] FAT-fs (loop2): Directory bread(block 1054) failed [ 132.011543][ T8748] FAT-fs (loop2): Directory bread(block 1055) failed [ 132.045708][ T8758] netlink: 156 bytes leftover after parsing attributes in process `syz.0.773'. [ 132.118533][ T29] audit: type=1400 audit(1788916207.250:1798): avc: denied { write } for pid=8762 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.211609][ T29] audit: type=1400 audit(1788916207.340:1799): avc: denied { shutdown } for pid=8769 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.231891][ T29] audit: type=1400 audit(1788916207.340:1800): avc: denied { read } for pid=8769 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.436298][ T8758] loop0: detected capacity change from 0 to 512 [ 132.459277][ T8748] FAT-fs (loop2): FAT read failed (blocknr 128) [ 132.465963][ T8758] EXT4-fs: Ignoring removed i_version option [ 132.560450][ T8758] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.840275][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.914719][ T29] audit: type=1400 audit(1788916208.030:1801): avc: denied { write } for pid=8775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.982380][ T29] audit: type=1400 audit(1788916208.110:1802): avc: denied { write } for pid=8795 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.293842][ T29] audit: type=1400 audit(1788916208.420:1803): avc: denied { write } for pid=8799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.339329][ T29] audit: type=1400 audit(1788916208.470:1804): avc: denied { write } for pid=8810 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.430390][ T8758] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.444902][ T8758] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 133.460276][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 133.460295][ C1] EXT4-fs (loop0): initial error at time 1788916208: ext4_mb_generate_buddy:1317 [ 133.460322][ C1] EXT4-fs (loop0): last error at time 1788916208: ext4_mb_generate_buddy:1317 [ 133.494167][ T8758] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.773: Failed to acquire dquot type 1 [ 133.494249][ T8758] loop0: lost filesystem error report for type 5 error -28 [ 133.518857][ T8758] EXT4-fs (loop0): 1 truncate cleaned up [ 133.550562][ T8758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.734822][ T8834] loop5: detected capacity change from 0 to 512 [ 133.819715][ T8834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.819782][ T8834] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.909460][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.192863][ T3893] ================================================================== [ 134.192906][ T3893] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 134.192965][ T3893] [ 134.192976][ T3893] read-write to 0xffff888107358230 of 8 bytes by task 31 on cpu 0: [ 134.192996][ T3893] __xa_clear_mark+0xf5/0x1e0 [ 134.193030][ T3893] __folio_end_writeback+0xe7/0x530 [ 134.193063][ T3893] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 134.193091][ T3893] folio_end_writeback+0x1c/0x70 [ 134.193112][ T3893] ext4_finish_bio+0x454/0x770 [ 134.193131][ T3893] ext4_release_io_end+0x9f/0x1f0 [ 134.193149][ T3893] ext4_end_io_end+0x18d/0x240 [ 134.193170][ T3893] ext4_end_io_rsv_work+0x15b/0x1f0 [ 134.193190][ T3893] process_scheduled_works+0x56a/0xa50 [ 134.193223][ T3893] worker_thread+0x569/0x750 [ 134.193256][ T3893] kthread+0x223/0x270 [ 134.193279][ T3893] ret_from_fork+0x146/0x330 [ 134.193311][ T3893] ret_from_fork_asm+0x1a/0x30 [ 134.193338][ T3893] [ 134.193344][ T3893] read to 0xffff888107358230 of 8 bytes by task 3893 on cpu 1: [ 134.193364][ T3893] xas_find_marked+0x211/0x650 [ 134.193398][ T3893] filemap_get_folios_tag+0xf7/0x400 [ 134.193423][ T3893] filemap_fdatawait_keep_errors+0x6c/0x190 [ 134.193463][ T3893] sync_inodes_sb+0x424/0x4d0 [ 134.193493][ T3893] sync_filesystem+0x108/0x190 [ 134.193516][ T3893] generic_shutdown_super+0x4c/0x220 [ 134.193545][ T3893] kill_block_super+0x2d/0xb0 [ 134.193577][ T3893] ext4_kill_sb+0x42/0x80 [ 134.193604][ T3893] deactivate_locked_super+0x75/0x200 [ 134.193631][ T3893] deactivate_super+0x9a/0xb0 [ 134.193656][ T3893] cleanup_mnt+0x2c3/0x340 [ 134.193679][ T3893] __cleanup_mnt+0x19/0x20 [ 134.193701][ T3893] task_work_run+0x130/0x1a0 [ 134.193723][ T3893] exit_to_user_mode_loop+0x1e4/0x8c0 [ 134.193753][ T3893] do_syscall_64+0x212/0x360 [ 134.193779][ T3893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.193801][ T3893] [ 134.193806][ T3893] value changed: 0x000000001ffffff0 -> 0x000000001fffff00 [ 134.193819][ T3893] [ 134.193824][ T3893] Reported by Kernel Concurrency Sanitizer on: [ 134.193836][ T3893] CPU: 1 UID: 0 PID: 3893 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 134.193884][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.193900][ T3893] ================================================================== [ 134.196576][ T8862] loop4: detected capacity change from 0 to 128 [ 134.204114][ T3893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.293822][ T8862] bond0: option arp_interval: invalid value ( ) [ 134.293902][ T8862] bond0: option arp_interval: allowed values 0 - 2147483647 [ 134.470713][ T8865] printk: console [ttyS0] disabled