last executing test programs: 3m47.119002525s ago: executing program 0 (id=328): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003b0c28bd7000fedbdf8eb4000000", @ANYRES32=r2, @ANYBLOB="0008000000620000300012800b00010065727370616e0000200002800400120006000f00f321000006000e"], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) sendto$inet6(r0, 0x0, 0x4881b39f, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) sendmmsg$inet(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x3, 0xfffffc00, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c) write$P9_RREAD(r6, &(0x7f0000002080)=ANY=[], 0xec1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m46.110414532s ago: executing program 0 (id=336): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001d0}, 0x40004) 3m45.961576435s ago: executing program 0 (id=339): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003b0c28bd7000fedbdf8eb4000000", @ANYRES32, @ANYBLOB="0008000000620000300012800b00010065727370616e0000200002800400120006000f00f321000006000e"], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x208, 0xffffffff, 0x9}, 0x10) sendmmsg$inet(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x3, 0xfffffc00, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c) write$P9_RREAD(r6, &(0x7f0000002080)=ANY=[], 0xec1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m40.896266006s ago: executing program 0 (id=363): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x208018, &(0x7f0000000040)=ANY=[], 0x0, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") syz_emit_ethernet(0x46, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0xfff9, 0x5, 0x8004, 0xb9e3, 0x3, 0x26d, 0x6, 0x5}, 0x20) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESOCT=r3], 0x8) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x0, 0x800}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000a40)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="24000000000000002900000037000000fc0200000000bd4d0000000000000001773424175d02d95b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x40) readv(r5, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) r7 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x2000002, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc242, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:hald_dccm_exec_t:s0\x00', 0x26, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b02000000000200080101010300020006000100000000000000000000628a1c7a00f03e05fd2333acee15deff1b4de563bf3ffcd43eb5f23a37e4f0d65c5924c053d075dce864f6dd65e84d719a917d4ab3bd67806a57ae0554af4f5e2ee029c852cc64b10bfd36d6bbe35f4286c2d087fe1faed67926dadd1be05c7298c5311f0100dec8a85de5c4af19fd613e35de7817db2dbdca40f782b8318bd8bcfa0994fe5016ea2fe50c9cdd48f73421afaf17449302f820e16fa368b1bc4101478f00"/206], 0x20) 3m40.137563662s ago: executing program 0 (id=371): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa0579725135", 0x2f) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x32) syz_io_uring_complete(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$can_j1939(r1, 0x0, 0x0) epoll_create1(0x0) 3m38.66980257s ago: executing program 0 (id=379): r0 = socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x20) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) 3m38.6695947s ago: executing program 32 (id=379): r0 = socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x20) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) 1m20.285915119s ago: executing program 2 (id=1171): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xbce, &(0x7f0000001800)="$eJzs3b9vHFUeAPDvzK5/xnd2Tldc7k6KT1ckEsr6RwIJEUVCiSiQiBSogvGPyMomQbaRcBQJp0OiARQqKipACiUtihBQUSCowl+AIkXISY/R7I7tjb1rx3jXY5zPRxrve/Oyft8Z5bvvzc6MJ4Cn1nD2I404EhEfJBGD+fo0Irprpd6IpYj/RMSj5ZuT2ZLEysqrvyWRRMTD5ZuTq78ryV8PZT/KtXfGT99E/KO0ud/5xRtXJqrV6bm8PrJw9a2R+cUbJ2avTlyevjx9bfy50ZNjz5868+yp9Tf17m5bF0+n7//40ouf3770yQ9fnvnve0mci4G8rXE72mU4htf2SaNyRLze7s4KUsq3p9l2AgCw/6QNc7gjMRilWqluMCqzhQYHAAAAtMW7EbECAAAAHHCJ438AAAA44FavA3i4fHNydSn2igRgrzw4HxFD9fxfvb+/3lKOpdprb3RFRP+jpOHOoPr93kNt6H84Iu58fPpotsSW9+H/vuETC9itpVsR8a9m439Sy/+h/I9ubMz/NCJG29D/8Ia6+QfsnWb5Xx9lt8//c23oX/4DAAAAAABA+9w9Xz+Rv/n8f7p2/U80Of9XanLu7s/Y/vxfer8N3QBNPDgf8ULDs30eNeR/bqiU1/5Wux6gK5mZrU6PRsTfI+J4dPVk9bEt+vjsq7M/t2prvP4vW7L+e/JrAfM47pd7Hn/P1MTCxG62Gah7cCvi3+Vm+Z+sjf9Ji+t/X9nwu5Za9PHdxa9nWvXfLP/vPJb/QKesfBpxrOn4v/5Et2Tr5/ON1OYDI6uzgs0u/u/bL1r1L/+hONn43791/g8ljc/rnN95H6P9Jy63ats+/5vP/7uTC7Wninbn696ZWFiYG4voTl7etL5vfOcxw0FUy5Px9XzJ8v/4/5sf/281/8+S7I38UyKNiIn8Nau/uaHPnkvff9gqnt2N/wM73wHAmiz/p3Y0/u+88NFryxda9f9k4/+p2ph+PF/j+z/Y2pMmaNFxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH6SRsRAJGllrZymlUrEoYj4Z/Sn1evzC8/MXH/72lTWFjEUXenMbHV6NCIG6/Ukq4/Vyuv18Q31kxFxOCJuD/bV6pXJ69WpojceAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANYciYiCStBIRaa2cppVKve3XwaKjAwAAANpmqOgAAAAAgI7b4fF/X6fiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAv6/DRu/eSiFg621dbMt15W1ehkQGdlhYdAFCY0i7eO93GOIC9Vy46AKAwjvGBZJv23pYtZhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5NjR+7eSyJi6Wxfbcl0521dSaGhAR2WFh0AUJhS0QEAhSkXHQBQmK6iAwAKt91Xfb0tW8wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4m84s3rkxUq9NzHSz80vku2lEo5buk6b8pR0SHw0jK+2AnKOxVoZz/d9sv8cxlwTSsKe4zCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIPvjwAAAP//sNz8pA==") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x400, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0xed84}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setfsuid(0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611859000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e22, 0x2, @private2}}, 0x0, 0x0, 0x23, 0x0, "ac21ed5895e46bb0b3081b85dfbae656157d82a706735ba8f8e87a3d5b2f4bcc81dbf4908e293bc9a6c12031e7927537f56d04220c48f47d564f56a67aa22d4d584a064f4d51f862e2f6c68534ecf1f7"}, 0xd8) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x14, 0x21, 0x937, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) rmdir(&(0x7f0000000000)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xffd2) 1m17.555391297s ago: executing program 2 (id=1179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='4'], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}], 0x20) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0xe, 0x2}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x5}, 0x8) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x4, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x29, 0x1ff, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6b}, {@multicast2, 0x4e20, 0x10000, 0xcd, 0xc}}, 0x44) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) inotify_add_watch(r7, &(0x7f0000001c80)='./file0\x00', 0x20) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r8}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r9, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r8}, 0x20) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001cc0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="1a00"/12, @ANYRES32=r10, @ANYBLOB="c304f768f2e9d6b8278fe089405f28e2824dd3da47a39a901807fd3c4a387f13b413eec4c83727053e8f24aba54639b110a142a84108be709cb52792aeb9be5fab2e001ed66ca68c0c87fb2be8f4588d9e50e1d9ca96f18aff01000000000000d7aff6e5c5ec38c6183ce0de67e80f1879ee1009970207168bf1e8ab04ffffffffffffff7fbf5a3ee4b1ff60faf6020c2bee9497002cd62e3cdd69f688ad36211ec0f8551c620f72b9e120e0549284f19cbfbe69e41b1c89831bf64744fdf9b159255dd0b9860ffe59182a", @ANYRES64=r8], 0x20) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)={{0x10b, 0x5, 0x3, 0xfc, 0x3b5, 0x8001, 0x8e, 0x80000000}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1920) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20008000) 1m17.138410253s ago: executing program 2 (id=1185): syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@usrjquota}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@dax_inode}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000040)="36830b", 0x3}], 0x2, 0x0, 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={&(0x7f0000000980)="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", &(0x7f0000000180)=""/114, &(0x7f0000000200)="527baa47e7bb4b8b67abc7b976533b3a445ac8f0b246f75972e7edee563dea9f43c411482762693d26c892e3be4f05fb5a08b228fa26c2f72bd4b569b4dfc771f6055b6a457c055c049fca970441e8564577d277fbe475a0f806858b4ab353d966a4bfa7de0088a8e312df1954bde4bc6fefe72d19eec7b45d4cd80469f7225f0e83f975cf", &(0x7f0000001980)="67e8c47a79ecef8fe3fab6053ebadc92494b347e7d64dc6072ab8bcbaa198c862b0b34e465d9a7b08eb582f2b59bcc93b7936e9e977f364af81e1ea585b8f23635e540992d8074ba46b698ca99efd2fb9a6441f0c2c7f505093724810620e838bec5c520672bb538dd0c469fad5e9843528254c00735753a16a5", 0xc, r0, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r2, &(0x7f0000000dc0)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40000040, 0x0) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private2}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000082620000003f14000200fe"], 0x64}}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000000b06010800000000000000000600000205000100070000002c0007801800018014000240fe8000090000000000000000000000bb060004404e21000005000700880000000900020073797a3100"], 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000080c0)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x8, @private2, 0x6}, 0x1c, &(0x7f0000002280)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160018000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 1m16.312754445s ago: executing program 2 (id=1187): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8], 0x7c}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) listen(0xffffffffffffffff, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x11, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) r4 = socket(0xa, 0x2, 0x0) r5 = dup(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)=r5}, 0x20) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@broadcast, @private}, &(0x7f0000000240)=0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0xee01) setpriority(0x2, 0x0, 0xb842) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1m15.988606443s ago: executing program 2 (id=1190): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) 1m15.657834152s ago: executing program 2 (id=1192): getpgid(0x0) 1m15.570191619s ago: executing program 33 (id=1192): getpgid(0x0) 5.480863612s ago: executing program 5 (id=1805): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000, 0x2}, 0x0, 0xff7ffffffffffffe, 0xffffffffffffffff, 0xb) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0), 0x12) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e00", 0x22}], 0x1}, 0x24048800) socket$netlink(0x10, 0x3, 0x0) 4.58984485s ago: executing program 5 (id=1815): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x208, 0xffffffff, 0x9}, 0x10) sendmmsg$inet(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x3, 0xfffffc00, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c) write$P9_RREAD(r6, &(0x7f0000002080)=ANY=[], 0xec1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.169659856s ago: executing program 1 (id=1816): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) 3.886304171s ago: executing program 1 (id=1818): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x400) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000, 0x2}, 0x0, 0xff7ffffffffffffe, 0xffffffffffffffff, 0xb) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0), 0x12) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) socket$netlink(0x10, 0x3, 0x0) 3.78746997s ago: executing program 3 (id=1820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x5865, r7, 0x3e}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) socket$rds(0x15, 0x5, 0x0) 3.154712505s ago: executing program 5 (id=1822): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) stat(&(0x7f0000004680)='./file0\x00', &(0x7f00000046c0)) 3.1020708s ago: executing program 4 (id=1823): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000b, 0x1, @perf_bp={0x0, 0xf}, 0x104101, 0x4, 0x9, 0x8, 0xe, 0x4, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x8000000001, 0xffffffffffffffff, 0x8) dup3(0xffffffffffffffff, r0, 0x0) 3.09419941s ago: executing program 3 (id=1825): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000, 0x2}, 0x0, 0xff7ffffffffffffe, 0xffffffffffffffff, 0xb) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0), 0x12) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e00", 0x22}], 0x1}, 0x24048800) socket$netlink(0x10, 0x3, 0x0) 3.072640332s ago: executing program 5 (id=1826): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0001054e81f78206000000000000000601000000d2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006", 0xa2}], 0x1}, 0x4008850) 2.997329139s ago: executing program 4 (id=1827): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x2, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x15}, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x9, 0xfffe}, 0x0, 0x1, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x7}, {0x3, 0xfff1}, {0xfff2, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_CHAIN={0x8}]}, 0x3c}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) 2.878018289s ago: executing program 5 (id=1828): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) creat(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r7 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r7, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x15, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d7360362"], 0x44}}, 0x2000800) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000680)={@loopback={0x0, 0x3fc}, 0x66, r6}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private2}, &(0x7f0000000080)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000000)={0x1e57, 0x0, 0xffff7000, 0xa, 0x2, "04ad7d2ed56d7f7f598da7590de9d3000d00", 0x6, 0x205}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0x25, 0x0}, 0x10) 2.848444411s ago: executing program 1 (id=1829): r0 = socket$packet(0x11, 0x2, 0x300) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0xe6cf}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r2], 0x18}, 0x2000c8d0) dup2(r1, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x17, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0x9, 0x4, 0x3, 0x20, 0x10}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8d26}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9c}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 2.498111382s ago: executing program 4 (id=1830): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x400, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setfsuid(0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r0, &(0x7f0000000240)=""/28, 0xffd2) 2.427052569s ago: executing program 5 (id=1831): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff074}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 2.40373353s ago: executing program 4 (id=1832): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109601, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000580)="fae238da1307de453279fa5b0784332931", 0x11}], 0x1) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) 2.218604566s ago: executing program 3 (id=1834): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@nouid32}, {@i_version}, {@delalloc}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x487, &(0x7f0000000340)="$eJzs3MtvG0UcAODfrpO09JVQyqOlQKBCRDySJi3QAxcQSByKQIJDgVNw0qpq2qAmSLSKaECovSChSnAGjkj8Bdy4IOCEhMQJ7qhSBb20cApae7e1XTtPN27j75OczHhmPTOend3ZHdsBdK3B7E8SsS0i/oiI/mq0PsNg9d+1K3Plf6/MlZNYWHjz76SS7+qVuXKRtdhuax4ZSiPST5O8kHozZ86eGJ+amjydx0dmT74/MnPm7DPHT44fmzw2eWrs0KGDB0aff27s2ba0M2vX1T0fTe/d/erbF18rH7n43s/fZfXdlqfXtmNV+m5+ajBr+D8LFY1pj8ddayrudrO9Jpz0dLAirEgpIrLu6q2M//4oxY3O649XPulo5YBbKjs3bWqdPL8AbGBJdLoGQGcUJ/oLfXPl7Bp4zdfBd5jLL1YvgLJ2X8sf1ZSeSPM8vQ3Xt+00GBFH5v/7KntEO+5DAAAs4bPyl4fj6eq8o37+l8Z9Nfl25GsoAxFxd0TsjIh7ImJXRNwbUcl7f0Q8sMLyG5eGbp7/pJdW1bBlyuZ/L+RrW/Xzv2L2FwOlPLa90v7e5Ojxqcn9+XsyFL2bsvjoImX88PJvn7dKq53/ZY+s/GIumNfjUk/DDbqJ8dnxyqS0DS5/HLGnp1n7k+srAUlE7I6IPSt76R1F4PiT3+5tlSlZsv2LaMM608I3EU9U+38+GtpfW8dF1idHNsfU5P6RYq+42S+/nn+jVflL938z7Vs7zPp/S/3+n6d8fSYPDLxbu147s/LSz/95oeU1zWr3/77krcrxqFh2/XB8dvb0aERfcrgSr3t+7Ma2RbzIn7V/aF/z8b8z3ybr/wcjItuJH4qIhyPikbzuj0bEYxGxb5H2//RS67TV9X/7ZO2faHr8u77/DyR1/b/yQOnEj9+3Kn95/X+wEhrKn6kc/5aw3Aqu5b0DAACAO0Va+Qx8kg5fD6fp8HD1M/y7Yks6NT0z+9TR6Q9OTVQ/Kz8QvWlxp6u/5n7oaDKfv2I1PpbfKy7SD+T3jb8oRSU+XJ6emuhw26HbbW0x/jN/lTpdO+CWa7aONtbkC23AxtM4/tP66LnX17MywLryfW3oXkuM/3S96gGsP+d/6F7Nxv+5hri1ANiYVnv+39zmegDrz/wfupfxD92rYfyX4vdO1QRYR2v5Xv8dEdia/1rF7VKfDROItGOl7+qJWNFWy/89iFsdeOf2qMYyAp0+MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTH/wEAAP//tADp4w==") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) 2.076471199s ago: executing program 4 (id=1835): syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x58ee, 0x800, 0x200, 0x13c}, 0x0, 0x0) r0 = io_uring_setup(0xad5, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1, 0xe9}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x101, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x8}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_adjtime(0x1, &(0x7f0000000080)={0x3, 0x5, 0xfa, 0x6, 0x0, 0x1, 0x400, 0xd6, 0xfffffffffffffffe, 0x8, 0x7, 0x6, 0x2d698880, 0x9, 0xd15c, 0x5, 0xf4, 0x80000000, 0xfffffffffffffff7, 0x6, 0x3, 0x738b4069, 0x8, 0x400, 0x80000000, 0x9}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6627993fc9cad4e1) r5 = getpgid(0x0) syz_pidfd_open(r5, 0x0) capset(&(0x7f00000002c0)={0x19980330, r5}, &(0x7f0000000300)={0xfffffffc, 0x9ec6, 0x7, 0xa4a, 0x5, 0x6}) mq_open(&(0x7f0000000000)='syzkaller\x00', 0x0, 0x104, &(0x7f0000000040)={0x5, 0xe, 0x5acd, 0x3}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) close(r0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1.933763741s ago: executing program 6 (id=1836): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) stat(&(0x7f0000004680)='./file0\x00', &(0x7f00000046c0)) 1.926704542s ago: executing program 1 (id=1837): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x400000000000b, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_config_ext={0xd07, 0x2003c}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200812, &(0x7f0000000e00)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1000343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '\xff\xf1\x7fe\xd8;\xc2\x1c\xa7q~\xe6\xf01;p\xa4o\xe8w\x92y]n\xab\xc7\x1c\x1b\xd7mO\x81\x1f\'^\x9e[\xf0\xbc\r\x1e5\xf3\xf7\x0f\x14S\xa3Iz\x98\xc2\x8e;\x84\x9c\t\x8f\xddUP\xcd\x88n\xe8\xcc\x1a8>\xd4:G\xa5\xbd),\xec\xc3\xcf-\xa1\x88\xb6\xd0:p\xcb\x11=\xe5P\xa1\x1f\xe4\xecH\x7f\xf4I\xf3\xf8E\xd9r}O\x97\xde\xcb\xd4\xd9\xbdg\x87\xcc\x0f\x12\x9cM\x8a\x96$\xa8\xc71\xef\xe2!\xcb\x84$\xbaH\xf2\x99\x13\n\xba\xed\xcc\xbc\xa1\x9ao\nR&oc\x97V W\xbd\xd5L\xc8\xber\x17L\x19\xe3O\x10K$\xfe\xab\x82\xf13\x06.X\x02A\xaf\xa10\xf3\x99\xf2Z\xaa\xa4\xab\xefvh\xaa\x05\x8az\r\x85\xe8GN\x0eZ\x979\x92\xd8=\xe9p\xf3pW\x06k\x88\x00\x00\x00\xa9\x01\x01\x00\x00\x88\xea\xceR\x95\x8e\x87\xe0C\x95\xac\x9e\xfc\x95\xdaT\xfbh9/ \x1b\xc5\x8f7U\v\f^:\xb4gr\x1f\xc6\x1a0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x208, 0xffffffff, 0x9}, 0x10) sendmmsg$inet(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x3, 0xfffffc00, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c) write$P9_RREAD(r6, &(0x7f0000002080)=ANY=[], 0xec1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.822199851s ago: executing program 6 (id=1841): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xfffc, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042cbd7000fedbdfb554462500", @ANYRES32=0x0, @ANYBLOB="d9410500000000001400350073797a5f74756e000000000000000000050021000500000014001680100001800c0009"], 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x37, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="013701329eff"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000001b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f0000000400), 0x0}, 0x20) 1.561783734s ago: executing program 6 (id=1842): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x400, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setfsuid(0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r0, &(0x7f0000000240)=""/28, 0xffd2) 962.810586ms ago: executing program 1 (id=1843): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xbce, &(0x7f0000001800)="$eJzs3b9vHFUeAPDvzK5/xnd2Tldc7k6KT1ckEsr6RwIJEUVCiSiQiBSogvGPyMomQbaRcBQJp0OiARQqKipACiUtihBQUSCowl+AIkXISY/R7I7tjb1rx3jXY5zPRxrve/Oyft8Z5bvvzc6MJ4Cn1nD2I404EhEfJBGD+fo0Irprpd6IpYj/RMSj5ZuT2ZLEysqrvyWRRMTD5ZuTq78ryV8PZT/KtXfGT99E/KO0ud/5xRtXJqrV6bm8PrJw9a2R+cUbJ2avTlyevjx9bfy50ZNjz5868+yp9Tf17m5bF0+n7//40ouf3770yQ9fnvnve0mci4G8rXE72mU4htf2SaNyRLze7s4KUsq3p9l2AgCw/6QNc7gjMRilWqluMCqzhQYHAAAAtMW7EbECAAAAHHCJ438AAAA44FavA3i4fHNydSn2igRgrzw4HxFD9fxfvb+/3lKOpdprb3RFRP+jpOHOoPr93kNt6H84Iu58fPpotsSW9+H/vuETC9itpVsR8a9m439Sy/+h/I9ubMz/NCJG29D/8Ia6+QfsnWb5Xx9lt8//c23oX/4DAAAAAABA+9w9Xz+Rv/n8f7p2/U80Of9XanLu7s/Y/vxfer8N3QBNPDgf8ULDs30eNeR/bqiU1/5Wux6gK5mZrU6PRsTfI+J4dPVk9bEt+vjsq7M/t2prvP4vW7L+e/JrAfM47pd7Hn/P1MTCxG62Gah7cCvi3+Vm+Z+sjf9Ji+t/X9nwu5Za9PHdxa9nWvXfLP/vPJb/QKesfBpxrOn4v/5Et2Tr5/ON1OYDI6uzgs0u/u/bL1r1L/+hONn43791/g8ljc/rnN95H6P9Jy63ats+/5vP/7uTC7Wninbn696ZWFiYG4voTl7etL5vfOcxw0FUy5Px9XzJ8v/4/5sf/281/8+S7I38UyKNiIn8Nau/uaHPnkvff9gqnt2N/wM73wHAmiz/p3Y0/u+88NFryxda9f9k4/+p2ph+PF/j+z/Y2pMmaNFxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH6SRsRAJGllrZymlUrEoYj4Z/Sn1evzC8/MXH/72lTWFjEUXenMbHV6NCIG6/Ukq4/Vyuv18Q31kxFxOCJuD/bV6pXJ69WpojceAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANYciYiCStBIRaa2cppVKve3XwaKjAwAAANpmqOgAAAAAgI7b4fF/X6fiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAv6/DRu/eSiFg621dbMt15W1ehkQGdlhYdAFCY0i7eO93GOIC9Vy46AKAwjvGBZJv23pYtZhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5NjR+7eSyJi6Wxfbcl0521dSaGhAR2WFh0AUJhS0QEAhSkXHQBQmK6iAwAKt91Xfb0tW8wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4m84s3rkxUq9NzHSz80vku2lEo5buk6b8pR0SHw0jK+2AnKOxVoZz/d9sv8cxlwTSsKe4zCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIPvjwAAAP//sNz8pA==") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x400, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0xed84}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setfsuid(0x0) open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x2) 960.660486ms ago: executing program 6 (id=1844): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000, 0x2}, 0x0, 0xff7ffffffffffffe, 0xffffffffffffffff, 0xb) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0), 0x12) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a0010000000", 0x28}], 0x1}, 0x24048800) socket$netlink(0x10, 0x3, 0x0) 849.765475ms ago: executing program 4 (id=1845): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0xa0340) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xfbff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0xfff, 0x16, "e533991cd00ee11a"}) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000180)=""/183, 0xb7, 0x7f) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 221.13141ms ago: executing program 3 (id=1846): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xbce, &(0x7f0000001800)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x400, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000300), 0x0) read(r1, &(0x7f0000000240)=""/28, 0xffd2) 164.463725ms ago: executing program 1 (id=1847): r0 = socket$packet(0x11, 0x2, 0x300) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x10, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0xe6cf}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16], 0x18}, 0x2000c8d0) dup2(r1, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x17, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0x9, 0x4, 0x3, 0x20, 0x10}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8d26}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9c}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 0s ago: executing program 6 (id=1848): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000044}, 0x40001) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r0, 0x101, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:default_context_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r10 = io_uring_setup(0x7a74, &(0x7f0000000740)={0x0, 0x8033, 0x4000, 0x2, 0x2f}) syz_io_uring_setup(0x3db4, &(0x7f00000007c0)={0x0, 0x6cc9, 0x10, 0x0, 0x232, 0x0, r10}, &(0x7f0000000840), &(0x7f0000000880)) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xf, 0x3, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x40, 0x40, 0x7}}) sendmsg$nl_route(r11, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@ipmr_newroute={0x28, 0x18, 0x300, 0x80, 0x25dfdbff, {0x80, 0x10, 0x10, 0x7, 0xfd, 0x3, 0xfd, 0x4, 0x1e00}, [@RTA_MULTIPATH={0xc, 0x9, {0xe, 0x0, 0x7, r12}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc91ba061f840ad2c}, 0x4000004) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r13, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}}, 0x4001040) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c00), r1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r14, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4040080) r15 = memfd_secret(0x80000) sendmsg$IPVS_CMD_SET_CONFIG(r15, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008045}, 0x404c000) ioctl$AUTOFS_DEV_IOCTL_READY(r15, 0xc0189376, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r11, {0x6856}}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f0000000e40)=0x0) bind$nfc_llcp(r16, &(0x7f0000000e80)={0x27, r17, 0xffffffffffffffff, 0x2, 0x6, 0x2, "db04bc9638e1869b9d07285f592c3654eb9d56c652fa82d2eabad2c274e4c61122e2e4fbf1c86f11851086f163a57100d8486dec7e854bf448853fd647f78e", 0xa}, 0x60) r18 = semget$private(0x0, 0x8bc91c17ae9ded99, 0x18b) semtimedop(r18, &(0x7f0000000f00)=[{0x4, 0x9, 0x800}, {0x1, 0x9}, {0x3, 0x8, 0x800}, {0x6, 0xca0, 0x1000}, {0x0, 0xca41, 0x1000}, {0x3}], 0x6, &(0x7f0000000f40)={0x0, 0x3938700}) kernel console output (not intermixed with test programs): sys_bpf+0x41/0x50 [ 227.556101][ T7626] x64_sys_call+0x10cb/0x3020 [ 227.556139][ T7626] do_syscall_64+0x12c/0x370 [ 227.556186][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.556255][ T7626] RIP: 0033:0x7f16d661c629 [ 227.556276][ T7626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.556369][ T7626] RSP: 002b:00007f16d506f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.556394][ T7626] RAX: ffffffffffffffda RBX: 00007f16d6895fa0 RCX: 00007f16d661c629 [ 227.556414][ T7626] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 227.556431][ T7626] RBP: 00007f16d506f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.556447][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.556514][ T7626] R13: 00007f16d6896038 R14: 00007f16d6895fa0 R15: 00007ffcf5b93c28 [ 227.556640][ T7626] [ 227.598352][ T7628] loop1: detected capacity change from 0 to 128 [ 227.786505][ T7626] syz.4.1149: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 227.853568][ T7626] CPU: 0 UID: 0 PID: 7626 Comm: syz.4.1149 Tainted: G W syzkaller #0 PREEMPT(full) [ 227.853675][ T7626] Tainted: [W]=WARN [ 227.853683][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.853696][ T7626] Call Trace: [ 227.853702][ T7626] [ 227.853709][ T7626] __dump_stack+0x1d/0x30 [ 227.853816][ T7626] dump_stack_lvl+0x95/0xd0 [ 227.853847][ T7626] dump_stack+0x15/0x1b [ 227.853868][ T7626] warn_alloc+0x145/0x1c0 [ 227.853897][ T7626] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 227.853970][ T7626] ? selinux_file_open+0x2e6/0x330 [ 227.853994][ T7626] ? __rcu_read_unlock+0x4e/0x70 [ 227.854022][ T7626] ? avc_has_perm_noaudit+0xab/0x130 [ 227.854080][ T7626] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 227.854125][ T7626] __vmalloc_noprof+0xa4/0xf0 [ 227.854227][ T7626] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 227.854272][ T7626] bpf_prog_alloc_no_stats+0x47/0x390 [ 227.854365][ T7626] ? bpf_prog_alloc+0x2a/0x150 [ 227.854383][ T7626] bpf_prog_alloc+0x3c/0x150 [ 227.854404][ T7626] bpf_prog_load+0x506/0x1140 [ 227.854437][ T7626] ? security_bpf+0x2b/0x90 [ 227.854474][ T7626] __sys_bpf+0x505/0x7e0 [ 227.854576][ T7626] __x64_sys_bpf+0x41/0x50 [ 227.854611][ T7626] x64_sys_call+0x10cb/0x3020 [ 227.854662][ T7626] do_syscall_64+0x12c/0x370 [ 227.854738][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.854760][ T7626] RIP: 0033:0x7f16d661c629 [ 227.854818][ T7626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.854917][ T7626] RSP: 002b:00007f16d506f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.854938][ T7626] RAX: ffffffffffffffda RBX: 00007f16d6895fa0 RCX: 00007f16d661c629 [ 227.854957][ T7626] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 227.854974][ T7626] RBP: 00007f16d506f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.855027][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.855043][ T7626] R13: 00007f16d6896038 R14: 00007f16d6895fa0 R15: 00007ffcf5b93c28 [ 227.855068][ T7626] [ 228.074640][ T7626] Mem-Info: [ 228.078027][ T7626] active_anon:12102 inactive_anon:0 isolated_anon:0 [ 228.078027][ T7626] active_file:22450 inactive_file:3047 isolated_file:0 [ 228.078027][ T7626] unevictable:0 dirty:100 writeback:0 [ 228.078027][ T7626] slab_reclaimable:3483 slab_unreclaimable:18261 [ 228.078027][ T7626] mapped:32942 shmem:3260 pagetables:5665 [ 228.078027][ T7626] sec_pagetables:0 bounce:0 [ 228.078027][ T7626] kernel_misc_reclaimable:0 [ 228.078027][ T7626] free:1874374 free_pcp:3530 free_cma:0 [ 228.123090][ T7626] Node 0 active_anon:48408kB inactive_anon:0kB active_file:89800kB inactive_file:12188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131768kB dirty:400kB writeback:0kB shmem:13040kB kernel_stack:4624kB pagetables:22660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 228.236940][ T7648] loop5: detected capacity change from 0 to 128 [ 228.484358][ T7626] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.232070][ T7626] lowmem_reserve[]: 0 2879 7857 7857 [ 229.237618][ T7626] Node 0 DMA32 free:2944568kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948196kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 230.288396][ T7626] lowmem_reserve[]: 0 0 4978 4978 [ 230.537618][ T7626] Node 0 Normal free:4521168kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59668kB inactive_anon:0kB active_file:89800kB inactive_file:12216kB unevictable:0kB writepending:456kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:16688kB local_pcp:7224kB free_cma:0kB [ 231.114774][ T7626] lowmem_reserve[]: 0 0 0 0 [ 231.119530][ T7626] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 231.149234][ T7626] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 1*16kB (M) 4*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944568kB [ 231.180224][ T7626] Node 0 Normal: 830*4kB (UM) 339*8kB (UME) 558*16kB (UME) 513*32kB (UME) 334*64kB (UME) 181*128kB (UME) 123*256kB (UME) 61*512kB (UM) 35*1024kB (UME) 27*2048kB (UM) 1051*4096kB (UM) = 4534672kB [ 231.222647][ T7626] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 231.235944][ T7659] loop5: detected capacity change from 0 to 512 [ 231.242718][ T7659] EXT4-fs: Ignoring removed i_version option [ 231.255608][ T7626] 26741 total pagecache pages [ 231.260363][ T7626] 0 pages in swap cache [ 231.275017][ T7626] Free swap = 124996kB [ 231.279241][ T7626] Total swap = 124996kB [ 231.283463][ T7626] 2097051 pages RAM [ 231.295087][ T7660] loop2: detected capacity change from 0 to 4096 [ 231.302185][ T7626] 0 pages HighMem/MovableOnly [ 231.307308][ T7660] EXT4-fs (loop2): inodes count not valid: 32 vs 27 [ 231.314123][ T7626] 81602 pages reserved [ 231.357038][ T7659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.384062][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 231.384082][ T28] audit: type=1326 audit(487.355:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0446fbc629 code=0x7ffc0000 [ 231.415892][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1158'. [ 231.569734][ T28] audit: type=1326 audit(487.395:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0446fbc629 code=0x7ffc0000 [ 231.647107][ T28] audit: type=1326 audit(487.395:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0446fbc629 code=0x7ffc0000 [ 231.693710][ T28] audit: type=1326 audit(487.395:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0446fbc629 code=0x7ffc0000 [ 231.743637][ T28] audit: type=1326 audit(487.395:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0446fbc629 code=0x7ffc0000 [ 231.769665][ T28] audit: type=1326 audit(487.395:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0446fbc629 code=0x7ffc0000 [ 231.793636][ T28] audit: type=1326 audit(487.395:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0446fbc629 code=0x7ffc0000 [ 231.817023][ T28] audit: type=1326 audit(487.405:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0446fbc629 code=0x7ffc0000 [ 231.840532][ T28] audit: type=1326 audit(487.405:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0446fbc629 code=0x7ffc0000 [ 231.863737][ T28] audit: type=1326 audit(487.405:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0446f7cece code=0x7ffc0000 [ 231.915137][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.438836][ T7680] loop1: detected capacity change from 0 to 8192 [ 233.645168][ T7676] netlink: 'syz.5.1159': attribute type 10 has an invalid length. [ 233.659138][ T7678] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 233.676080][ T7678] FAT-fs (loop1): Filesystem has been set read-only [ 233.698764][ T7678] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 233.746136][ T7691] loop4: detected capacity change from 0 to 128 [ 233.852615][ T7691] syz.4.1163: attempt to access beyond end of device [ 233.852615][ T7691] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 233.891797][ T7700] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1164'. [ 233.900942][ T7700] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1164'. [ 233.910316][ T7700] netlink: 'syz.2.1164': attribute type 6 has an invalid length. [ 233.938486][ T7700] netlink: 'syz.2.1164': attribute type 5 has an invalid length. [ 233.948854][ T7700] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1164'. [ 234.754295][ T7709] loop2: detected capacity change from 0 to 512 [ 234.832011][ T7709] EXT4-fs: Ignoring removed i_version option [ 234.849650][ T7709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.916634][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.272886][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'. [ 235.300804][ T7718] loop2: detected capacity change from 0 to 4096 [ 235.783928][ T7718] EXT4-fs (loop2): inodes count not valid: 32 vs 27 [ 236.181385][ T7729] loop5: detected capacity change from 0 to 512 [ 236.269893][ T7729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.289754][ T7722] team0: Port device macvlan1 removed [ 237.555161][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.566899][ T7740] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 237.722589][ T7742] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 237.751308][ T7742] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1179'. [ 237.774340][ T7748] loop3: detected capacity change from 0 to 512 [ 237.782586][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 237.792260][ T7748] EXT4-fs: Ignoring removed i_version option [ 237.803990][ T7748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.816621][ T7751] siw: device registration error -23 [ 237.854610][ T7754] loop1: detected capacity change from 0 to 8192 [ 237.971036][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1179'. [ 237.990786][ T7758] loop5: detected capacity change from 0 to 1764 [ 238.010881][ T28] kauditd_printk_skb: 528 callbacks suppressed [ 238.010895][ T28] audit: type=1400 audit(493.985:3622): avc: denied { watch } for pid=7757 comm="syz.5.1183" path="/119/file0/file0" dev="loop5" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 238.042474][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.556043][ T7763] loop2: detected capacity change from 0 to 1024 [ 238.565749][ T7763] EXT4-fs: dax option not supported [ 238.603578][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 238.648640][ T7763] ip6tnl1: entered allmulticast mode [ 238.654420][ T7769] loop3: detected capacity change from 0 to 1024 [ 238.662214][ T28] audit: type=1326 audit(494.625:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 238.687957][ T7769] EXT4-fs: Ignoring removed bh option [ 238.693450][ T7769] ext4: Unknown parameter 'euid' [ 238.704755][ T28] audit: type=1326 audit(494.625:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 238.779314][ T28] audit: type=1326 audit(494.625:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 238.817974][ T28] audit: type=1326 audit(494.625:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 238.842321][ T28] audit: type=1326 audit(494.625:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 239.003818][ T28] audit: type=1326 audit(494.625:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 239.042498][ T7776] loop2: detected capacity change from 0 to 8192 [ 239.056702][ T28] audit: type=1326 audit(494.625:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 239.056910][ T7776] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.080120][ T28] audit: type=1326 audit(494.625:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 239.080159][ T28] audit: type=1326 audit(494.625:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 239.190773][ T3320] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 239.205037][ T7784] loop5: detected capacity change from 0 to 128 [ 239.211159][ T3320] FAT-fs (loop2): Filesystem has been set read-only [ 239.275687][ T7784] syz.5.1189: attempt to access beyond end of device [ 239.275687][ T7784] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 239.427380][ T7789] netlink: 'syz.3.1191': attribute type 10 has an invalid length. [ 239.583512][ T6367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.822013][ T6367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.015833][ T6367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.083266][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1186'. [ 240.103453][ T6367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.396910][ T7799] lo speed is unknown, defaulting to 1000 [ 240.928811][ T7805] loop5: detected capacity change from 0 to 8192 [ 241.297394][ T7828] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1200'. [ 241.325980][ T7828] netlink: zone id is out of range [ 241.337327][ T7828] netlink: zone id is out of range [ 241.357807][ T7828] netlink: zone id is out of range [ 241.369316][ T6367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.385500][ T7841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7841 comm=syz.5.1202 [ 241.408462][ T6367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.423624][ T7828] netlink: set zone limit has 8 unknown bytes [ 241.449136][ T6367] bond0 (unregistering): Released all slaves [ 241.496231][ T7832] netlink: 'syz.3.1201': attribute type 8 has an invalid length. [ 241.634847][ T6367] veth0_macvtap: left promiscuous mode [ 241.643263][ T6367] veth1_vlan: left promiscuous mode [ 241.649423][ T6367] veth0_vlan: left promiscuous mode [ 241.961826][ T6367] team0 (unregistering): Port device macvlan1 removed [ 242.027258][ T6367] team0 (unregistering): Port device team_slave_1 removed [ 242.042887][ T6367] team0 (unregistering): Port device team_slave_0 removed [ 243.300915][ T28] kauditd_printk_skb: 192 callbacks suppressed [ 243.300939][ T28] audit: type=1400 audit(499.275:3824): avc: denied { create } for pid=7868 comm="syz.4.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 243.391384][ T7874] netlink: 'syz.1.1207': attribute type 10 has an invalid length. [ 243.414297][ T7799] chnl_net:caif_netlink_parms(): no params data found [ 243.554024][ T28] audit: type=1400 audit(499.365:3825): avc: denied { write } for pid=7863 comm="syz.1.1207" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 243.606886][ T7881] IPVS: stopping master sync thread 7883 ... [ 243.614748][ T7883] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 243.624901][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.632129][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.639430][ T7799] bridge_slave_0: entered allmulticast mode [ 243.646232][ T7799] bridge_slave_0: entered promiscuous mode [ 243.653484][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.660812][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.668023][ T7799] bridge_slave_1: entered allmulticast mode [ 243.674603][ T7799] bridge_slave_1: entered promiscuous mode [ 243.693052][ T28] audit: type=1400 audit(499.565:3826): avc: denied { create } for pid=7879 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.729372][ T7887] loop1: detected capacity change from 0 to 128 [ 243.739306][ T7799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.750250][ T7799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.772143][ T7799] team0: Port device team_slave_0 added [ 243.779903][ T7887] FAT-fs (loop1): bogus logical sector size 2134 [ 243.799947][ T28] audit: type=1400 audit(499.565:3827): avc: denied { setopt } for pid=7879 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 243.816509][ T7887] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 243.838361][ T7799] team0: Port device team_slave_1 added [ 243.845861][ T7887] FAT-fs (loop1): Can't find a valid FAT filesystem [ 243.873744][ T7887] syz_tun: entered promiscuous mode [ 243.889808][ T28] audit: type=1400 audit(499.665:3828): avc: denied { write } for pid=7879 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.930896][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 243.948534][ T7887] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 243.965457][ T28] audit: type=1400 audit(499.665:3829): avc: denied { nlmsg_write } for pid=7879 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 244.007282][ T28] audit: type=1400 audit(499.665:3830): avc: denied { create } for pid=7879 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.052650][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 244.066948][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.074057][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.083536][ T28] audit: type=1400 audit(499.665:3831): avc: denied { write } for pid=7879 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.150464][ T7904] loop5: detected capacity change from 0 to 128 [ 244.166999][ T7904] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 244.178151][ T7904] FAT-fs (loop5): Filesystem has been set read-only [ 244.186630][ T7904] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 244.198043][ T28] audit: type=1400 audit(499.725:3832): avc: denied { create } for pid=7879 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.314572][ T7799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.326082][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.333082][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.359236][ T7799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.397610][ T7909] loop5: detected capacity change from 0 to 128 [ 244.407964][ T7799] hsr_slave_0: entered promiscuous mode [ 244.414024][ T7799] hsr_slave_1: entered promiscuous mode [ 244.424442][ T28] audit: type=1400 audit(499.725:3833): avc: denied { write } for pid=7879 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.459496][ T7799] debugfs: 'hsr0' already exists in 'hsr' [ 244.491620][ T7799] Cannot create hsr debugfs directory [ 244.553197][ T7911] syz.5.1216: attempt to access beyond end of device [ 244.553197][ T7911] loop5: rw=2049, sector=697, nr_sectors = 344 limit=128 [ 244.835968][ T7799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.895314][ T7799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.922293][ T7799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.952264][ T7799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.967033][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1212'. [ 245.057665][ T7936] netlink: 'syz.5.1220': attribute type 10 has an invalid length. [ 245.548055][ T7799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.562172][ T7948] nfs4: Unknown parameter 'þ/a3Â~' [ 245.609678][ T7799] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.731050][ T7948] loop3: detected capacity change from 0 to 4096 [ 245.757089][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.764318][ T6363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.844779][ T6363] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.852013][ T6363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.894504][ T7799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.944759][ T7799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.006804][ T7948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.105920][ T7966] loop5: detected capacity change from 0 to 1024 [ 246.116904][ T7966] EXT4-fs: Ignoring removed orlov option [ 246.131844][ T7966] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 246.166882][ T7966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.245736][ T7966] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 246.371258][ T7799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.483309][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.696557][ T7994] loop5: detected capacity change from 0 to 2048 [ 246.729234][ T7994] EXT4-fs: Ignoring removed orlov option [ 246.750164][ T7994] EXT4-fs: Ignoring removed oldalloc option [ 246.770678][ T7994] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 246.828964][ T7799] veth0_vlan: entered promiscuous mode [ 246.835908][ T7994] 9p: Bad value for 'rfdno' [ 246.849879][ T7799] veth1_vlan: entered promiscuous mode [ 246.881531][ T7799] veth0_macvtap: entered promiscuous mode [ 246.906459][ T7799] veth1_macvtap: entered promiscuous mode [ 246.943310][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.971095][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.989909][ T6363] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.024677][ T6363] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.075837][ T6363] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.110276][ T6363] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.118345][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1227'. [ 247.327904][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1223'. [ 247.933601][ T8011] loop1: detected capacity change from 0 to 2048 [ 247.951922][ T8018] loop6: detected capacity change from 0 to 512 [ 247.968889][ T8018] EXT4-fs: Ignoring removed i_version option [ 247.992344][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.994209][ T8011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.096118][ T8018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.152261][ T8025] loop3: detected capacity change from 0 to 512 [ 248.177324][ T8025] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.319342][ T8033] loop3: detected capacity change from 0 to 1024 [ 248.322015][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.336443][ T8033] EXT4-fs: Ignoring removed orlov option [ 248.358781][ T8033] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 248.397317][ T8031] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 248.406105][ T8031] FAT-fs (loop5): Filesystem has been set read-only [ 248.418902][ T8033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.509520][ T8033] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 248.648746][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.721564][ T8044] syz.5.1235: attempt to access beyond end of device [ 248.721564][ T8044] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 249.135991][ T8048] nfs4: Unknown parameter 'þ/a3Â~' [ 249.247145][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 249.247169][ T28] audit: type=1326 audit(505.225:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 249.357657][ T28] audit: type=1326 audit(505.265:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 249.432887][ T28] audit: type=1326 audit(505.265:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 249.473958][ T8056] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 249.494831][ T28] audit: type=1326 audit(505.265:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 249.560241][ T8055] set_capacity_and_notify: 2 callbacks suppressed [ 249.560262][ T8055] loop5: detected capacity change from 0 to 8192 [ 249.575868][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.599171][ T28] audit: type=1326 audit(505.265:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 249.648329][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 249.710908][ T28] audit: type=1326 audit(505.265:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 249.763856][ T28] audit: type=1326 audit(505.265:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f2f19cece code=0x7ffc0000 [ 249.811442][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1241'. [ 249.862251][ T28] audit: type=1326 audit(505.265:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 249.886325][ T28] audit: type=1326 audit(505.275:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f2f19cece code=0x7ffc0000 [ 249.909778][ T28] audit: type=1326 audit(505.275:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.1.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f2f19cece code=0x7ffc0000 [ 250.718958][ T8075] loop6: detected capacity change from 0 to 4096 [ 250.735741][ T8075] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 250.793314][ T8082] netlink: 'syz.3.1246': attribute type 4 has an invalid length. [ 250.825754][ T8082] netlink: 'syz.3.1246': attribute type 4 has an invalid length. [ 250.857261][ T9] lo speed is unknown, defaulting to 1000 [ 250.863062][ T7212] lo speed is unknown, defaulting to 1000 [ 251.023765][ T8088] loop3: detected capacity change from 0 to 1024 [ 251.068927][ T8088] EXT4-fs: Ignoring removed orlov option [ 251.127391][ T8088] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 251.188591][ T8088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.232735][ T8088] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 253.573116][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 253.642547][ T8116] netlink: 'syz.6.1256': attribute type 8 has an invalid length. [ 253.723961][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.733397][ T8112] loop1: detected capacity change from 0 to 512 [ 253.742476][ T8112] EXT4-fs: Invalid want_extra_isize 7 [ 253.760719][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.307093][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.345938][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.367315][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.415707][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 254.415723][ T28] audit: type=1400 audit(510.395:4046): avc: denied { mount } for pid=8126 comm="syz.6.1259" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 254.467968][ T8131] loop5: detected capacity change from 0 to 128 [ 254.578934][ T8135] loop4: detected capacity change from 0 to 512 [ 254.603250][ T8131] syz.5.1260: attempt to access beyond end of device [ 254.603250][ T8131] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 254.630105][ T8135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 254.683816][ T8135] EXT4-fs (loop4): 1 truncate cleaned up [ 254.715189][ T8135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.717201][ T8137] loop3: detected capacity change from 0 to 4096 [ 254.736271][ T8137] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 254.763013][ T8129] loop6: detected capacity change from 0 to 1024 [ 254.776338][ T28] audit: type=1400 audit(510.755:4047): avc: denied { create } for pid=8134 comm="syz.4.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.796181][ T28] audit: type=1400 audit(510.775:4048): avc: denied { getopt } for pid=8134 comm="syz.4.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.822532][ T8129] EXT4-fs: inline encryption not supported [ 254.842493][ T28] audit: type=1326 audit(510.815:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 254.842594][ T28] audit: type=1326 audit(510.815:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 254.842883][ T28] audit: type=1326 audit(510.815:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 254.917778][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.927380][ T28] audit: type=1326 audit(510.815:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 254.950884][ T28] audit: type=1326 audit(510.815:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 254.951846][ T8129] EXT4-fs: Ignoring removed nobh option [ 254.977090][ T28] audit: type=1326 audit(510.885:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 254.977131][ T28] audit: type=1326 audit(510.885:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 255.060826][ T8129] EXT4-fs: Ignoring removed bh option [ 255.158378][ T8129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.246179][ T8152] loop3: detected capacity change from 0 to 1024 [ 255.266275][ T8152] EXT4-fs: Ignoring removed orlov option [ 255.285843][ T8152] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 255.297463][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.334084][ T8152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.432752][ T8152] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 255.452178][ T8161] netlink: 'syz.5.1269': attribute type 8 has an invalid length. [ 255.846191][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1268'. [ 255.870996][ T8171] loop5: detected capacity change from 0 to 4096 [ 255.895844][ T8171] EXT4-fs (loop5): inodes count not valid: 32 vs 27 [ 256.154034][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.338097][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 256.983070][ T8185] netlink: 'syz.5.1276': attribute type 2 has an invalid length. [ 257.021652][ T8185] netlink: 'syz.5.1276': attribute type 11 has an invalid length. [ 257.031757][ T8185] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1276'. [ 257.042015][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1275'. [ 257.300073][ T8189] loop5: detected capacity change from 0 to 4096 [ 257.358984][ T8189] EXT4-fs (loop5): inodes count not valid: 32 vs 27 [ 257.449469][ T8198] loop4: detected capacity change from 0 to 2048 [ 257.498577][ T8200] netlink: 'syz.3.1280': attribute type 8 has an invalid length. [ 257.535314][ T8198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.592429][ T8208] loop5: detected capacity change from 0 to 1024 [ 257.599607][ T8208] EXT4-fs: Ignoring removed orlov option [ 257.611280][ T8208] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 257.660271][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.676032][ T8208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.814325][ T8208] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 258.404841][ T8229] loop4: detected capacity change from 0 to 4096 [ 258.421743][ T8229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.034820][ T8238] loop1: detected capacity change from 0 to 4096 [ 259.055935][ T8238] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 259.117192][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.162352][ T8253] EXT4-fs: Ignoring removed bh option [ 259.195074][ T8253] ext4: Unknown parameter 'euid' [ 259.286947][ T8262] netlink: 'syz.6.1292': attribute type 10 has an invalid length. [ 259.307840][ T8262] macvlan1: entered allmulticast mode [ 259.317212][ T8262] veth1_vlan: entered allmulticast mode [ 259.329271][ T8262] team0: Port device macvlan1 added [ 259.340398][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.426349][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 259.426375][ T28] audit: type=1326 audit(515.405:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 259.544776][ T8259] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 259.633195][ T28] audit: type=1326 audit(515.435:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 259.713368][ T28] audit: type=1326 audit(515.445:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 259.772487][ T28] audit: type=1326 audit(515.445:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 259.813719][ T28] audit: type=1326 audit(515.445:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 259.854142][ T28] audit: type=1326 audit(515.445:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 259.936139][ T8276] netlink: 'syz.5.1294': attribute type 10 has an invalid length. [ 259.989885][ T28] audit: type=1326 audit(515.445:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 260.013823][ T8274] set_capacity_and_notify: 2 callbacks suppressed [ 260.013842][ T8274] loop1: detected capacity change from 0 to 1024 [ 260.050940][ T28] audit: type=1326 audit(515.455:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 260.212035][ T8274] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 260.290823][ T8282] loop6: detected capacity change from 0 to 128 [ 260.300903][ T8274] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 260.319245][ T28] audit: type=1326 audit(515.455:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 260.374554][ T8274] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: comm syz.1.1295: inode #1: comm syz.1.1295: iget: illegal inode # [ 260.446069][ T8274] loop1: lost filesystem error report for type 5 error -117 [ 260.446510][ T8274] EXT4-fs (loop1): no journal found [ 260.459144][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 260.459169][ C0] EXT4-fs (loop1): initial error at time 524804: ext4_get_journal_inode:5863 [ 260.459213][ C0] EXT4-fs (loop1): last error at time 524804: ext4_get_journal_inode:5863 [ 260.494579][ T28] audit: type=1326 audit(515.455:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.3.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63da21cece code=0x7ffc0000 [ 260.525165][ T8274] EXT4-fs (loop1): can't get journal size [ 260.541883][ T8274] EXT4-fs (loop1): failed to initialize system zone (-22) [ 260.573027][ T8274] EXT4-fs (loop1): mount failed [ 260.604796][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1298'. [ 260.633114][ T8291] loop4: detected capacity change from 0 to 1024 [ 260.715846][ T8291] EXT4-fs: Ignoring removed bh option [ 260.757691][ T8291] ext4: Unknown parameter 'euid' [ 260.784921][ T8298] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20002 [ 261.388769][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 261.491527][ T8324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1304'. [ 261.552129][ T8322] loop5: detected capacity change from 0 to 4096 [ 261.588709][ T8322] EXT4-fs (loop5): inodes count not valid: 32 vs 27 [ 261.650313][ T8307] loop1: detected capacity change from 0 to 512 [ 261.705218][ T8307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.741832][ T8307] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1303: invalid indirect mapped block 4294967295 (level 1) [ 261.757860][ T8307] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.758352][ T8307] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1303: invalid indirect mapped block 4294967295 (level 1) [ 261.767715][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 261.767736][ C1] EXT4-fs (loop1): initial error at time 524805: ext4_free_branches:1023: inode 11 [ 261.767770][ C1] EXT4-fs (loop1): last error at time 524805: ext4_free_branches:1023: inode 11 [ 261.810693][ T8307] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.811368][ T8307] EXT4-fs (loop1): 2 truncates cleaned up [ 261.851872][ T8307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.893463][ T8340] loop6: detected capacity change from 0 to 4096 [ 261.990804][ T8340] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 262.505927][ T8206] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 262.624694][ T8354] FAULT_INJECTION: forcing a failure. [ 262.624694][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.641691][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.4.1311 Tainted: G W syzkaller #0 PREEMPT(full) [ 262.641785][ T8354] Tainted: [W]=WARN [ 262.641794][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.641811][ T8354] Call Trace: [ 262.641818][ T8354] [ 262.641828][ T8354] __dump_stack+0x1d/0x30 [ 262.641923][ T8354] dump_stack_lvl+0x95/0xd0 [ 262.641951][ T8354] dump_stack+0x15/0x1b [ 262.642030][ T8354] should_fail_ex+0x263/0x280 [ 262.642057][ T8354] should_fail+0xb/0x20 [ 262.642080][ T8354] should_fail_usercopy+0x1a/0x20 [ 262.642110][ T8354] _copy_from_user+0x1c/0xb0 [ 262.642170][ T8354] __sys_bpf+0x183/0x7e0 [ 262.642267][ T8354] __x64_sys_bpf+0x41/0x50 [ 262.642305][ T8354] x64_sys_call+0x10cb/0x3020 [ 262.642390][ T8354] do_syscall_64+0x12c/0x370 [ 262.642453][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.642479][ T8354] RIP: 0033:0x7f16d661c629 [ 262.642500][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.642523][ T8354] RSP: 002b:00007f16d506f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.642546][ T8354] RAX: ffffffffffffffda RBX: 00007f16d6895fa0 RCX: 00007f16d661c629 [ 262.642560][ T8354] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 262.642572][ T8354] RBP: 00007f16d506f090 R08: 0000000000000000 R09: 0000000000000000 [ 262.642585][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.642599][ T8354] R13: 00007f16d6896038 R14: 00007f16d6895fa0 R15: 00007ffcf5b93c28 [ 262.642679][ T8354] [ 262.647350][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.842513][ T8359] loop4: detected capacity change from 0 to 1024 [ 262.859946][ T8359] EXT4-fs: Ignoring removed orlov option [ 262.871343][ T8364] loop1: detected capacity change from 0 to 512 [ 262.878411][ T8359] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 262.913613][ T8364] EXT4-fs: Ignoring removed i_version option [ 262.940780][ T8359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.943937][ T8362] lo speed is unknown, defaulting to 1000 [ 262.972246][ T8364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.999362][ T8376] loop6: detected capacity change from 0 to 1024 [ 263.011526][ T8359] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 263.048271][ T8376] EXT4-fs: Ignoring removed bh option [ 263.048398][ T8376] ext4: Unknown parameter 'euid' [ 263.095995][ T8382] loop5: detected capacity change from 0 to 128 [ 263.184831][ T8382] syz.5.1320: attempt to access beyond end of device [ 263.184831][ T8382] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 263.212993][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.252784][ T8389] veth0_vlan: entered allmulticast mode [ 263.278032][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1323'. [ 263.382795][ T8388] veth1_vlan (unregistering): left allmulticast mode [ 263.447035][ T8388] team0: Port device macvlan1 removed [ 263.841733][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.860666][ T8409] netlink: 'syz.6.1327': attribute type 1 has an invalid length. [ 263.958271][ T8409] netlink: 'syz.6.1327': attribute type 9 has an invalid length. [ 263.966115][ T8409] netlink: 'syz.6.1327': attribute type 7 has an invalid length. [ 263.974125][ T8409] netlink: 'syz.6.1327': attribute type 8 has an invalid length. [ 264.033790][ T8412] lo speed is unknown, defaulting to 1000 [ 264.045422][ T8414] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 264.295182][ T8430] lo speed is unknown, defaulting to 1000 [ 264.313353][ T8429] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.3.1334: corrupted xattr block 95: invalid header [ 264.328918][ T8429] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 264.329244][ T8429] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1334: bg 0: block 7: invalid block bitmap [ 264.338539][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 264.338565][ C0] EXT4-fs (loop3): initial error at time 524808: ext4_expand_extra_isize_ea:2808: inode 11 [ 264.338596][ C0] EXT4-fs (loop3): last error at time 524808: ext4_expand_extra_isize_ea:2808: inode 11 [ 264.361876][ T8416] can: request_module (can-proto-5) failed. [ 264.370361][ T8429] loop3: lost filesystem error report for type 5 error -117 [ 264.400363][ T8429] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 264.416599][ T8429] loop3: lost filesystem error report for type 5 error -117 [ 264.416921][ T8429] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2970: inode #11: comm syz.3.1334: corrupted xattr block 95: invalid header [ 264.445318][ T8429] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 264.445486][ T8429] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 264.465378][ T8429] EXT4-fs (loop3): 1 orphan inode deleted [ 264.473404][ T8429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.492283][ T28] kauditd_printk_skb: 329 callbacks suppressed [ 264.492300][ T28] audit: type=1400 audit(524808.469:4524): avc: denied { create } for pid=8426 comm="syz.3.1334" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 264.570406][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.616000][ T28] audit: type=1326 audit(524808.589:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 264.649150][ T28] audit: type=1326 audit(524808.589:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 264.676632][ T28] audit: type=1326 audit(524808.589:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 264.700680][ T28] audit: type=1326 audit(524808.619:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 264.702200][ T8444] syz.1.1336: attempt to access beyond end of device [ 264.702200][ T8444] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 264.724013][ T28] audit: type=1326 audit(524808.619:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 264.761954][ T28] audit: type=1326 audit(524808.619:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 264.785546][ T28] audit: type=1326 audit(524808.619:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 264.808869][ T28] audit: type=1326 audit(524808.619:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 264.832187][ T28] audit: type=1326 audit(524808.619:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da25c629 code=0x7ffc0000 [ 264.892659][ T8446] EXT4-fs: Ignoring removed orlov option [ 264.906522][ T8446] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 264.950159][ T8446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.082298][ T8457] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 265.107278][ T8446] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 265.667800][ T8469] set_capacity_and_notify: 5 callbacks suppressed [ 265.667821][ T8469] loop6: detected capacity change from 0 to 2048 [ 265.741812][ T8469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.881503][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.972652][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.033217][ T8485] netlink: 'syz.1.1348': attribute type 10 has an invalid length. [ 266.061385][ T8484] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 266.086067][ T8484] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1350'. [ 266.127009][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1350'. [ 266.706879][ T8500] loop3: detected capacity change from 0 to 4096 [ 266.786743][ T8500] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 266.881484][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1358'. [ 266.964601][ T8515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1361'. [ 267.796480][ T8537] loop3: detected capacity change from 0 to 4096 [ 267.867210][ T8537] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 267.967148][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'. [ 268.013641][ T8540] veth1_macvtap: left promiscuous mode [ 268.096656][ T8549] loop5: detected capacity change from 0 to 128 [ 269.348637][ T8571] loop5: detected capacity change from 0 to 1024 [ 269.380542][ T8573] loop1: detected capacity change from 0 to 1024 [ 269.388842][ T8571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.423487][ T8573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.710494][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.723884][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.770632][ T8583] FAULT_INJECTION: forcing a failure. [ 269.770632][ T8583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.874080][ T8583] CPU: 1 UID: 0 PID: 8583 Comm: syz.3.1385 Tainted: G W syzkaller #0 PREEMPT(full) [ 269.874123][ T8583] Tainted: [W]=WARN [ 269.874133][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.874147][ T8583] Call Trace: [ 269.874155][ T8583] [ 269.874165][ T8583] __dump_stack+0x1d/0x30 [ 269.874200][ T8583] dump_stack_lvl+0x95/0xd0 [ 269.874245][ T8583] dump_stack+0x15/0x1b [ 269.874348][ T8583] should_fail_ex+0x263/0x280 [ 269.874377][ T8583] should_fail+0xb/0x20 [ 269.874400][ T8583] should_fail_usercopy+0x1a/0x20 [ 269.874509][ T8583] _copy_to_user+0x20/0xa0 [ 269.874540][ T8583] simple_read_from_buffer+0xb5/0x130 [ 269.874569][ T8583] proc_fail_nth_read+0x10e/0x150 [ 269.874656][ T8583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.874690][ T8583] vfs_read+0x1ab/0x7f0 [ 269.874727][ T8583] ? __rcu_read_unlock+0x4e/0x70 [ 269.874818][ T8583] ? __fget_files+0x184/0x1c0 [ 269.874849][ T8583] ? mutex_lock+0x57/0x90 [ 269.874882][ T8583] ksys_read+0xdc/0x1a0 [ 269.874917][ T8583] __x64_sys_read+0x40/0x50 [ 269.875015][ T8583] x64_sys_call+0x2886/0x3020 [ 269.875096][ T8583] do_syscall_64+0x12c/0x370 [ 269.875138][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.875162][ T8583] RIP: 0033:0x7f63da21cece [ 269.875178][ T8583] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 269.875196][ T8583] RSP: 002b:00007f63d8cb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.875282][ T8583] RAX: ffffffffffffffda RBX: 00007f63d8cb76c0 RCX: 00007f63da21cece [ 269.875300][ T8583] RDX: 000000000000000f RSI: 00007f63d8cb70a0 RDI: 0000000000000003 [ 269.875361][ T8583] RBP: 00007f63d8cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 269.875376][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.875388][ T8583] R13: 00007f63da4d6038 R14: 00007f63da4d5fa0 R15: 00007ffc8f6c9258 [ 269.875469][ T8583] [ 270.124966][ T8585] loop1: detected capacity change from 0 to 4096 [ 270.155805][ T8585] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 270.500218][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 270.500240][ T28] audit: type=1326 audit(524814.406:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 270.535512][ T28] audit: type=1326 audit(524814.406:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 270.567523][ T28] audit: type=1326 audit(524814.406:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 270.607388][ T28] audit: type=1326 audit(524814.406:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 270.692796][ T28] audit: type=1326 audit(524814.406:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 270.956095][ T28] audit: type=1326 audit(524814.406:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 271.118901][ T28] audit: type=1326 audit(524814.406:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8584 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 271.188752][ T8605] loop4: detected capacity change from 0 to 4096 [ 271.218639][ T28] audit: type=1326 audit(524814.406:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8584 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 271.242489][ T28] audit: type=1326 audit(524814.416:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8584 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 271.265800][ T28] audit: type=1326 audit(524814.416:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8584 comm="syz.1.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f2f19cece code=0x7ffc0000 [ 271.294423][ T8605] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 271.364030][ T8609] loop6: detected capacity change from 0 to 512 [ 271.382989][ T8609] msdos: Bad value for 'uid' [ 271.388545][ T8609] msdos: Bad value for 'uid' [ 271.442541][ T8613] 8021q: VLANs not supported on ip_vti0 [ 271.450050][ T8615] loop3: detected capacity change from 0 to 128 [ 271.911157][ T8641] loop5: detected capacity change from 0 to 1024 [ 272.005418][ T8640] loop6: detected capacity change from 0 to 4096 [ 272.072952][ T8640] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 272.357919][ T8648] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.406819][ T8649] loop6: detected capacity change from 0 to 256 [ 272.459683][ T8648] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.495548][ T8649] FAT-fs (loop6): Directory bread(block 64) failed [ 272.503000][ T8649] FAT-fs (loop6): Directory bread(block 65) failed [ 272.509587][ T8649] FAT-fs (loop6): Directory bread(block 66) failed [ 272.516802][ T8649] FAT-fs (loop6): Directory bread(block 67) failed [ 272.523608][ T8649] FAT-fs (loop6): Directory bread(block 68) failed [ 272.530351][ T8649] FAT-fs (loop6): Directory bread(block 69) failed [ 272.538140][ T8649] FAT-fs (loop6): Directory bread(block 70) failed [ 272.548561][ T8649] FAT-fs (loop6): Directory bread(block 71) failed [ 272.549720][ T8648] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.567836][ T8649] FAT-fs (loop6): Directory bread(block 72) failed [ 272.574602][ T8649] FAT-fs (loop6): Directory bread(block 73) failed [ 272.634329][ T8648] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.715008][ T6394] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.742010][ T6394] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.839240][ T6367] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.857492][ T6367] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.679234][ T8667] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 273.695085][ T8667] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1410'. [ 273.712511][ T8667] siw: device registration error -23 [ 273.719031][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1410'. [ 273.801185][ T8676] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 273.877658][ T8681] loop5: detected capacity change from 0 to 128 [ 274.020720][ T8681] syz.5.1416: attempt to access beyond end of device [ 274.020720][ T8681] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 274.054732][ T8684] loop6: detected capacity change from 0 to 8192 [ 274.126739][ T8684] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 274.666940][ T8696] loop1: detected capacity change from 0 to 1024 [ 274.674555][ T8696] EXT4-fs: Ignoring removed nobh option [ 274.680255][ T8696] EXT4-fs: inline encryption not supported [ 274.689647][ T8684] FAT-fs (loop6): Filesystem has been set read-only [ 274.742806][ T8696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.802934][ T8684] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 274.974501][ T8696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.068344][ T8708] loop5: detected capacity change from 0 to 4096 [ 275.080761][ T8708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.134461][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.225730][ T7799] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 275.551891][ T8735] IPv6: addrconf: prefix option has invalid lifetime [ 275.641981][ T8732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 275.659877][ T8729] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.1426: lblock 3 mapped to illegal pblock 3 (length 3) [ 275.676402][ T8729] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 275.688824][ T8729] EXT4-fs (loop5): This should not happen!! Data will be lost [ 275.688824][ T8729] [ 275.814071][ T8742] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.871969][ T8740] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1434'. [ 275.946283][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 275.946298][ T28] audit: type=1400 audit(524819.914:4845): avc: denied { add_name } for pid=8741 comm="syz.3.1436" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 275.984710][ T8742] EXT4-fs (loop3): shut down requested (2) [ 276.019052][ T28] audit: type=1400 audit(524819.984:4846): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 276.068850][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.138483][ T28] audit: type=1400 audit(524819.984:4847): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.160227][ T28] audit: type=1400 audit(524819.984:4848): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.181750][ T28] audit: type=1400 audit(524819.984:4849): avc: denied { add_name } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.210391][ T28] audit: type=1400 audit(524819.984:4850): avc: denied { create } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.231542][ T28] audit: type=1400 audit(524819.984:4851): avc: denied { append open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.255546][ T28] audit: type=1400 audit(524819.984:4852): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.287638][ T8755] set_capacity_and_notify: 2 callbacks suppressed [ 276.287655][ T8755] loop6: detected capacity change from 0 to 1024 [ 276.301860][ T8755] EXT4-fs: Ignoring removed bh option [ 276.312656][ T8755] ext4: Unknown parameter 'euid' [ 276.322755][ T28] audit: type=1326 audit(524820.244:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 276.323238][ T6391] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:53: lblock 8 mapped to illegal pblock 8 (length 8) [ 276.346370][ T28] audit: type=1326 audit(524820.244:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="syz.6.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 276.410827][ T8752] loop3: detected capacity change from 0 to 128 [ 276.433673][ T6391] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 276.466501][ T8759] loop6: detected capacity change from 0 to 128 [ 276.476992][ T6391] EXT4-fs (loop5): This should not happen!! Data will be lost [ 276.476992][ T6391] [ 276.497926][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 276.520998][ T8762] loop5: detected capacity change from 0 to 256 [ 276.527799][ T8763] netlink: 'syz.3.1438': attribute type 10 has an invalid length. [ 276.547740][ T8763] team0: Port device dummy0 added [ 276.558853][ T8762] FAT-fs (loop5): bogus sectors per cluster 0 [ 276.568022][ T8752] 9p: Could not find request transport: xen [ 276.577809][ T8762] FAT-fs (loop5): Can't find a valid FAT filesystem [ 276.602200][ T8752] netlink: 'syz.3.1438': attribute type 10 has an invalid length. [ 276.687694][ T8772] loop6: detected capacity change from 0 to 2048 [ 276.729728][ T8752] team0: Port device dummy0 removed [ 276.759534][ T8752] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 276.795238][ T8772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.952413][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.064006][ T8814] netlink: 'syz.6.1449': attribute type 7 has an invalid length. [ 277.075866][ T8814] netlink: 'syz.6.1449': attribute type 8 has an invalid length. [ 277.137087][ T8823] loop6: detected capacity change from 0 to 512 [ 277.153964][ T8823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.171195][ T8823] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1451: iget: bad extended attribute block 262144 [ 277.190850][ T8823] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.191156][ T8823] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1451: couldn't read orphan inode 15 (err -117) [ 277.200464][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 277.200489][ C1] EXT4-fs (loop6): initial error at time 524821: ext4_orphan_get:1391: inode 15 [ 277.200538][ C1] EXT4-fs (loop6): last error at time 524821: ext4_orphan_get:1391: inode 15 [ 277.245335][ T8823] loop6: lost filesystem error report for type 5 error -117 [ 277.246304][ T8823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.298506][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.362996][ T8840] loop6: detected capacity change from 0 to 1024 [ 277.372408][ T8840] EXT4-fs: Ignoring removed bh option [ 277.393252][ T8840] ext4: Unknown parameter 'euid' [ 277.494830][ T8857] loop6: detected capacity change from 0 to 128 [ 277.652918][ T8875] loop6: detected capacity change from 0 to 4096 [ 277.663891][ T8875] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 277.672578][ T8880] loop1: detected capacity change from 0 to 128 [ 277.722620][ T8880] syz.1.1456: attempt to access beyond end of device [ 277.722620][ T8880] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 277.826769][ T8891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.897585][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.110275][ T8936] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1463'. [ 278.866401][ T8979] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 278.996837][ T8985] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 279.024274][ T8985] siw: device registration error -23 [ 279.031433][ T8985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1470'. [ 279.056013][ T8986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.089539][ T8990] EXT4-fs: Ignoring removed orlov option [ 279.117246][ T8990] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 279.293834][ T8990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.725758][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.784609][ T8990] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 280.635671][ T9016] ext3: Unknown parameter 'fsname' [ 280.902202][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.227850][ T9025] netlink: 'syz.4.1482': attribute type 10 has an invalid length. [ 281.313235][ T9022] set_capacity_and_notify: 5 callbacks suppressed [ 281.313255][ T9022] loop6: detected capacity change from 0 to 2048 [ 281.347252][ T9026] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 281.386970][ T9026] siw: device registration error -23 [ 281.423392][ T9026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1483'. [ 281.477032][ T9022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.617781][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.697640][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 281.697658][ T28] audit: type=1400 audit(524825.661:5005): avc: denied { sqpoll } for pid=9035 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 281.756986][ T9036] loop5: detected capacity change from 0 to 1024 [ 281.773620][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1485'. [ 281.807243][ T9036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.857951][ T9046] loop1: detected capacity change from 0 to 4096 [ 281.871174][ T28] audit: type=1400 audit(524825.831:5006): avc: denied { connect } for pid=9035 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.914517][ T28] audit: type=1400 audit(524825.831:5007): avc: denied { write } for pid=9035 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.942551][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.958259][ T9046] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 281.980724][ T28] audit: type=1400 audit(524825.851:5008): avc: denied { setattr } for pid=9035 comm="syz.5.1487" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 282.120711][ T9059] FAULT_INJECTION: forcing a failure. [ 282.120711][ T9059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.145924][ T9059] CPU: 1 UID: 0 PID: 9059 Comm: syz.5.1491 Tainted: G W syzkaller #0 PREEMPT(full) [ 282.145963][ T9059] Tainted: [W]=WARN [ 282.146050][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.146065][ T9059] Call Trace: [ 282.146073][ T9059] [ 282.146083][ T9059] __dump_stack+0x1d/0x30 [ 282.146117][ T9059] dump_stack_lvl+0x95/0xd0 [ 282.146142][ T9059] dump_stack+0x15/0x1b [ 282.146164][ T9059] should_fail_ex+0x263/0x280 [ 282.146265][ T9059] should_fail+0xb/0x20 [ 282.146283][ T9059] should_fail_usercopy+0x1a/0x20 [ 282.146355][ T9059] _copy_from_iter+0xcf/0xea0 [ 282.146383][ T9059] ? __alloc_skb+0x4f6/0x690 [ 282.146413][ T9059] ? __alloc_skb+0x200/0x690 [ 282.146440][ T9059] netlink_sendmsg+0x4ae/0x6f0 [ 282.146471][ T9059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.146532][ T9059] __sys_sendto+0x470/0x4d0 [ 282.146648][ T9059] __x64_sys_sendto+0x76/0x90 [ 282.146673][ T9059] x64_sys_call+0x2d35/0x3020 [ 282.146700][ T9059] do_syscall_64+0x12c/0x370 [ 282.146816][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.146845][ T9059] RIP: 0033:0x7f6d1030cece [ 282.146866][ T9059] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 282.146888][ T9059] RSP: 002b:00007f6d0eda5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 282.146930][ T9059] RAX: ffffffffffffffda RBX: 00007f6d0eda76c0 RCX: 00007f6d1030cece [ 282.147024][ T9059] RDX: 0000000000000020 RSI: 00007f6d0eda6000 RDI: 0000000000000004 [ 282.147037][ T9059] RBP: 0000000000000000 R08: 00007f6d0eda5f04 R09: 000000000000000c [ 282.147055][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 282.147148][ T9059] R13: 00007f6d0eda5f58 R14: 00007f6d0eda6000 R15: 0000000000000000 [ 282.147168][ T9059] [ 282.351770][ T9060] loop4: detected capacity change from 0 to 4096 [ 282.375910][ T9060] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 282.457777][ T9065] loop5: detected capacity change from 0 to 2048 [ 282.506096][ T9067] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 282.526837][ T9067] siw: device registration error -23 [ 282.527206][ T9065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.539087][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1496'. [ 282.546120][ T9072] loop1: detected capacity change from 0 to 512 [ 282.587157][ T9072] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.635864][ T3480] IPVS: starting estimator thread 0... [ 282.655734][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.725685][ T9075] IPVS: using max 2256 ests per chain, 112800 per kthread [ 282.765236][ T9079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1500'. [ 282.836108][ T9092] loop1: detected capacity change from 0 to 1024 [ 282.844916][ T9092] EXT4-fs: Ignoring removed orlov option [ 282.858705][ T9092] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 282.922104][ T9092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.010597][ T9092] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 283.060154][ T28] audit: type=1400 audit(524827.020:5009): avc: denied { append } for pid=9101 comm="syz.3.1507" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 283.105969][ T9100] loop6: detected capacity change from 0 to 4096 [ 283.126659][ T9100] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 283.178394][ T9104] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 283.226559][ T9104] siw: device registration error -23 [ 283.234769][ T9106] loop3: detected capacity change from 0 to 2048 [ 283.242135][ T9108] loop6: detected capacity change from 0 to 512 [ 283.251105][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1508'. [ 283.278808][ T9106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.299665][ T9108] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.383916][ T9113] netlink: 'syz.6.1511': attribute type 8 has an invalid length. [ 283.431732][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.457950][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.704757][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1513'. [ 283.755473][ T9135] EXT4-fs: Invalid want_extra_isize 7 [ 283.778441][ T9137] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 283.823700][ T9139] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.915684][ T28] audit: type=1400 audit(524827.870:5010): avc: denied { shutdown } for pid=9142 comm="syz.1.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.960624][ T9141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.004930][ T9150] EXT4-fs: Ignoring removed orlov option [ 284.053021][ T9150] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 284.082368][ T9150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.114833][ T9150] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 284.434235][ T9160] lo speed is unknown, defaulting to 1000 [ 284.495768][ T28] audit: type=1400 audit(524828.460:5011): avc: denied { ioctl } for pid=9159 comm="syz.6.1527" path="socket:[22904]" dev="sockfs" ino=22904 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.682283][ T9163] EXT4-fs: Ignoring removed bh option [ 284.687945][ T28] audit: type=1326 audit(524828.530:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9162 comm="syz.4.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 284.717766][ T28] audit: type=1326 audit(524828.530:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9162 comm="syz.4.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 284.791649][ T9163] ext4: Unknown parameter 'euid' [ 284.810748][ T28] audit: type=1326 audit(524828.530:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9162 comm="syz.4.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 284.810811][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.941154][ T9171] EXT4-fs: Invalid want_extra_isize 7 [ 284.978643][ T9171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.994004][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.005088][ T9171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.013691][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.228834][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.311493][ T9174] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 286.125089][ T9183] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.487465][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1540'. [ 286.674049][ T9202] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 286.708296][ T9202] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1543'. [ 286.738639][ T9204] set_capacity_and_notify: 10 callbacks suppressed [ 286.738662][ T9204] loop5: detected capacity change from 0 to 1024 [ 286.743795][ T9202] siw: device registration error -23 [ 286.763121][ T9200] loop1: detected capacity change from 0 to 128 [ 286.770923][ T9202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1543'. [ 286.802211][ T9204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.852534][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 286.852553][ T28] audit: type=1400 audit(524830.819:5056): avc: denied { read } for pid=9199 comm="syz.1.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.012350][ T28] audit: type=1400 audit(524830.949:5057): avc: denied { write } for pid=9199 comm="syz.1.1542" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 287.051380][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.393929][ T9218] loop5: detected capacity change from 0 to 512 [ 287.527316][ T9218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.643849][ T9225] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1548'. [ 287.880320][ T9233] loop4: detected capacity change from 0 to 512 [ 288.195719][ T9228] loop1: detected capacity change from 0 to 2048 [ 288.208660][ T9233] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.334647][ T9228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.422580][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.446258][ T9242] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1554'. [ 288.457501][ T9242] siw: device registration error -23 [ 288.489875][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1554'. [ 288.522149][ T9245] loop3: detected capacity change from 0 to 1024 [ 288.602661][ T9246] loop1: detected capacity change from 0 to 2048 [ 288.615366][ T9245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.647078][ T28] audit: type=1400 audit(524832.608:5058): avc: denied { getopt } for pid=9248 comm="syz.6.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.768650][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.776738][ T9246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.799105][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.947868][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.008323][ T9272] loop6: detected capacity change from 0 to 512 [ 289.018164][ T9272] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.115810][ T9274] loop1: detected capacity change from 0 to 512 [ 289.137164][ T9274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.161499][ T9274] xt_hashlimit: size too large, truncated to 1048576 [ 289.580479][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.693718][ T9284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1567'. [ 290.764977][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1568'. [ 290.845073][ T9291] loop6: detected capacity change from 0 to 1024 [ 290.912317][ T9291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.997500][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1566'. [ 291.010220][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.089277][ T28] audit: type=1326 audit(524835.047:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 291.142052][ T28] audit: type=1326 audit(524835.047:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 291.189750][ T28] audit: type=1326 audit(524835.047:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 291.244896][ T28] audit: type=1326 audit(524835.047:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 291.276120][ T28] audit: type=1326 audit(524835.047:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 291.300250][ T28] audit: type=1326 audit(524835.047:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 291.323829][ T28] audit: type=1326 audit(524835.057:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.6.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 291.381074][ T9321] syzkaller0: entered promiscuous mode [ 291.389851][ T9321] syzkaller0: entered allmulticast mode [ 291.524073][ T9323] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1579'. [ 291.700233][ T9326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.027934][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1581'. [ 292.072639][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.223240][ T9340] set_capacity_and_notify: 1 callbacks suppressed [ 292.223288][ T9340] loop4: detected capacity change from 0 to 512 [ 292.317370][ T9340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.614316][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1582'. [ 292.714766][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1587'. [ 292.762351][ T9346] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #12: block 32: comm syz.4.1585: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=8, size=2048 fake=0 [ 292.781667][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 292.781724][ T28] audit: type=1400 audit(524836.726:5071): avc: denied { remove_name } for pid=9339 comm="syz.4.1585" name="file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.848067][ T9346] EXT4-fs error (device loop4) in ext4_delete_entry:2737: Corrupt filesystem [ 292.877764][ T28] audit: type=1400 audit(524836.726:5072): avc: denied { unlink } for pid=9339 comm="syz.4.1585" name="file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 292.924998][ T28] audit: type=1326 audit(524836.786:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 292.984146][ T28] audit: type=1326 audit(524836.786:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 293.028917][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.038429][ T28] audit: type=1326 audit(524836.796:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 293.097278][ T9361] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1591'. [ 293.104859][ T28] audit: type=1326 audit(524836.796:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 293.117993][ T9361] siw: device registration error -23 [ 293.164473][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1591'. [ 293.215326][ T28] audit: type=1326 audit(524836.796:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 293.264823][ T28] audit: type=1326 audit(524836.796:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 293.310729][ T28] audit: type=1326 audit(524836.796:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 293.345601][ T28] audit: type=1326 audit(524836.796:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 293.397402][ T9353] loop6: detected capacity change from 0 to 1024 [ 293.497298][ T9353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 293.507230][ T9353] System zones: 0-1, 3-36 [ 295.009084][ T9353] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1587: bad orphan inode 134217728 [ 295.026046][ T9353] loop6: lost filesystem error report for type 5 error -117 [ 295.037459][ T9353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.074222][ T9371] loop4: detected capacity change from 0 to 256 [ 295.086458][ T9371] loop4: detected capacity change from 0 to 512 [ 295.122466][ T9371] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 295.129145][ T9371] EXT4-fs (loop4): mount failed [ 295.210853][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.367523][ T9377] loop3: detected capacity change from 0 to 1024 [ 295.376254][ T9377] EXT4-fs: Ignoring removed nobh option [ 295.381920][ T9377] EXT4-fs: inline encryption not supported [ 295.414674][ T9382] loop4: detected capacity change from 0 to 4096 [ 295.447775][ T9382] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 295.466337][ T9377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.531263][ T9389] loop5: detected capacity change from 0 to 128 [ 295.560384][ T9377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.620390][ T9396] io-wq is not configured for unbound workers [ 295.623930][ T9398] syz.5.1600: attempt to access beyond end of device [ 295.623930][ T9398] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 295.669656][ T9396] loop6: detected capacity change from 0 to 256 [ 295.730076][ T9401] loop1: detected capacity change from 0 to 1024 [ 295.785829][ T9401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.806601][ T9395] netlink: 'syz.4.1603': attribute type 8 has an invalid length. [ 295.864885][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.944438][ T9420] syzkaller0: entered promiscuous mode [ 295.949991][ T9420] syzkaller0: entered allmulticast mode [ 295.966390][ T9417] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1610'. [ 295.981235][ T9421] loop3: detected capacity change from 0 to 4096 [ 295.983532][ T9417] siw: device registration error -23 [ 295.994539][ T9417] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1610'. [ 296.034133][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1612'. [ 296.045054][ T9421] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 296.162563][ T9428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.191918][ T9438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 296.225098][ T9438] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #12: comm syz.1.1617: corrupted in-inode xattr: e_value size too large [ 296.254728][ T9445] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #12: comm syz.1.1617: corrupted in-inode xattr: e_value size too large [ 296.307724][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.344086][ T9444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.359659][ T9456] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1624'. [ 296.369099][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 296.375741][ T9456] siw: device registration error -23 [ 296.418608][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.502788][ T9462] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 296.514415][ T9466] syzkaller0: entered promiscuous mode [ 296.519968][ T9466] syzkaller0: entered allmulticast mode [ 296.574602][ T9476] EXT4-fs: Ignoring removed i_version option [ 296.618466][ T9476] EXT4-fs: Ignoring removed oldalloc option [ 296.639309][ T9478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.658449][ T9476] EXT4-fs (loop1): 1 truncate cleaned up [ 296.669692][ T9476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.670593][ T9488] __nla_validate_parse: 1 callbacks suppressed [ 296.670648][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1635'. [ 296.766987][ T9494] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 296.800096][ T9488] bond1: option ad_user_port_key: invalid value (1136) [ 296.809122][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.819708][ T9494] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1638'. [ 296.832429][ T9488] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 296.841494][ T9488] bond1 (unregistering): Released all slaves [ 296.848716][ T9497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.873177][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1638'. [ 296.890349][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.920390][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1635'. [ 296.935323][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1635'. [ 296.945149][ T9500] netlink: 'syz.5.1635': attribute type 6 has an invalid length. [ 296.996129][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.103723][ T9512] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 297.120809][ T9514] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 297.260209][ T9504] team0: Port device macvlan1 removed [ 297.359782][ T9533] syz_tun: entered promiscuous mode [ 297.365913][ T9533] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 297.386752][ T9533] žÿ: renamed from team_slave_1 (while UP) [ 297.461178][ T9524] syzkaller0: entered promiscuous mode [ 297.478801][ T9524] syzkaller0: entered allmulticast mode [ 297.511917][ T9541] set_capacity_and_notify: 9 callbacks suppressed [ 297.511990][ T9541] loop4: detected capacity change from 0 to 2048 [ 297.557066][ T9541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.666407][ T9550] loop6: detected capacity change from 0 to 1024 [ 297.670652][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.760002][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1651'. [ 297.769121][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1651'. [ 297.877497][ T9550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.037841][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.263552][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 298.263567][ T28] audit: type=1400 audit(524842.223:5125): avc: denied { write } for pid=9566 comm="syz.3.1659" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 298.294305][ T9567] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 298.321343][ T28] audit: type=1400 audit(524842.263:5126): avc: denied { relabelto } for pid=9566 comm="syz.3.1659" name="cgroup" dev="tmpfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 298.370739][ T28] audit: type=1400 audit(524842.263:5127): avc: denied { associate } for pid=9566 comm="syz.3.1659" name="cgroup" dev="tmpfs" ino=2014 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:v4l_device_t:s0" [ 298.486951][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1660'. [ 299.239260][ T9579] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1661'. [ 299.776931][ T28] audit: type=1400 audit(524843.713:5128): avc: denied { unlink } for pid=3321 comm="syz-executor" name="cgroup" dev="tmpfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 300.025211][ T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 300.271071][ T6363] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.307024][ T6363] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.330373][ T6363] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.343163][ T9606] loop5: detected capacity change from 0 to 4096 [ 300.362460][ T6363] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.385946][ T9606] EXT4-fs (loop5): inodes count not valid: 32 vs 27 [ 300.421344][ T9609] loop4: detected capacity change from 0 to 4096 [ 300.438789][ T9609] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 300.530406][ T9620] loop1: detected capacity change from 0 to 4096 [ 300.543600][ T9620] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 300.623719][ T9623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1676'. [ 300.728508][ T28] audit: type=1326 audit(524844.622:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 300.803926][ T28] audit: type=1326 audit(524844.622:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 301.381637][ T28] audit: type=1326 audit(524844.622:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 301.423328][ T28] audit: type=1326 audit(524844.622:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 301.432686][ T9641] loop1: detected capacity change from 0 to 512 [ 301.464668][ T28] audit: type=1326 audit(524844.622:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 301.489311][ T28] audit: type=1326 audit(524844.622:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 301.514030][ T9641] EXT4-fs: Invalid want_extra_isize 7 [ 301.731690][ T9653] loop3: detected capacity change from 0 to 4096 [ 301.745683][ T9653] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 301.848804][ T9662] loop4: detected capacity change from 0 to 4096 [ 301.885117][ T9662] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 301.987829][ T9675] loop1: detected capacity change from 0 to 522 [ 302.259713][ T9702] loop1: detected capacity change from 0 to 4096 [ 302.269877][ T9699] EXT4-fs: Invalid want_extra_isize 7 [ 302.306377][ T9702] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 302.358295][ T9705] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.388367][ T9708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.514381][ T9717] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 302.555164][ T9717] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 302.615861][ T9717] JBD2: no valid journal superblock found [ 302.616257][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.621808][ T9717] EXT4-fs (loop3): Could not load journal inode [ 302.696617][ T9723] set_capacity_and_notify: 4 callbacks suppressed [ 302.696634][ T9723] loop1: detected capacity change from 0 to 4096 [ 302.759524][ T9723] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 302.972423][ T9743] loop1: detected capacity change from 0 to 4096 [ 302.994837][ T9747] syzkaller0: entered promiscuous mode [ 303.006537][ T9743] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 303.031650][ T9747] syzkaller0: entered allmulticast mode [ 303.151937][ T9755] loop3: detected capacity change from 0 to 512 [ 303.159615][ T9755] EXT4-fs: Invalid want_extra_isize 7 [ 303.187756][ T9755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.195191][ T9755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.286894][ T9760] loop4: detected capacity change from 0 to 128 [ 303.406931][ T9767] loop5: detected capacity change from 0 to 512 [ 303.413663][ T9760] syz.4.1729: attempt to access beyond end of device [ 303.413663][ T9760] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 303.430697][ T9766] loop1: detected capacity change from 0 to 4096 [ 303.455351][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 303.455370][ T28] audit: type=1326 audit(524847.401:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 303.495674][ T9767] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.505657][ T9766] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 303.526392][ T28] audit: type=1326 audit(524847.401:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 303.565568][ T9767] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 303.602542][ T28] audit: type=1326 audit(524847.411:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 303.645294][ T9767] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 303.690060][ T28] audit: type=1326 audit(524847.411:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 303.746026][ T28] audit: type=1326 audit(524847.411:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 303.770341][ T9781] syz_tun: entered promiscuous mode [ 303.776815][ T9781] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 303.815517][ T9778] žÿ: renamed from team_slave_1 (while UP) [ 303.821983][ T28] audit: type=1326 audit(524847.411:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 303.934316][ T28] audit: type=1326 audit(524847.411:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 303.938394][ T9790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1738'. [ 304.018803][ T28] audit: type=1326 audit(524847.411:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 304.082346][ T9791] syzkaller0: entered promiscuous mode [ 304.083391][ T28] audit: type=1326 audit(524847.411:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 304.095888][ T9791] syzkaller0: entered allmulticast mode [ 304.125812][ T28] audit: type=1326 audit(524847.411:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.6.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6e7479c629 code=0x7ffc0000 [ 304.237302][ T9801] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 304.244454][ T9801] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1743'. [ 304.269529][ T9801] siw: device registration error -23 [ 304.275996][ T9801] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1743'. [ 304.376230][ T9808] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1745'. [ 304.398459][ T9805] loop6: detected capacity change from 0 to 512 [ 304.406401][ T9805] EXT4-fs: Invalid want_extra_isize 7 [ 304.439513][ T9810] netlink: 'syz.3.1744': attribute type 10 has an invalid length. [ 305.025097][ T9816] loop4: detected capacity change from 0 to 4096 [ 305.036307][ T9764] syz.5.1730 (9764) used greatest stack depth: 5776 bytes left [ 305.093861][ T9821] loop6: detected capacity change from 0 to 4096 [ 305.105332][ T9821] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 305.112650][ T9816] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 305.278164][ T9828] vhci_hcd vhci_hcd.3: default hub control req: 8029 v0000 i0000 l31125 [ 305.327207][ T9833] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20000 [ 305.346762][ T9833] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1756'. [ 305.360968][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1756'. [ 305.399137][ T9841] loop6: detected capacity change from 0 to 512 [ 305.411325][ T9841] EXT4-fs: Invalid want_extra_isize 7 [ 305.644877][ T9849] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 305.845957][ T9870] EXT4-fs: Ignoring removed bh option [ 305.886766][ T9870] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.953647][ T9877] msdos: Unknown parameter 'dotnodots' [ 305.998209][ T9870] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 306.162450][ T9870] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1768: bg 0: block 248: padding at end of block bitmap is not set [ 306.244611][ T9870] loop4: lost filesystem error report for type 5 error -117 [ 306.244932][ T9870] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1768: Failed to acquire dquot type 1 [ 306.252381][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 306.252401][ C1] EXT4-fs (loop4): last error at time 524850: ext4_validate_block_bitmap:441 [ 306.310152][ T9870] loop4: lost filesystem error report for type 5 error -117 [ 306.312156][ T9870] EXT4-fs (loop4): 1 truncate cleaned up [ 306.345667][ T9870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 306.497586][ T9877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9877 comm=syz.6.1772 [ 306.744618][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 306.762672][ T9891] EXT4-fs: inline encryption not supported [ 306.768712][ T35] IPVS: starting estimator thread 0... [ 306.819255][ T9891] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 306.847613][ T9891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 306.855591][ T9891] System zones: 1-12 [ 306.867082][ T9892] IPVS: using max 1680 ests per chain, 84000 per kthread [ 306.877198][ T9891] EXT4-fs (loop6): orphan cleanup on readonly fs [ 306.883581][ T9891] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1777: bad orphan inode 267 [ 306.977177][ T9891] loop6: lost filesystem error report for type 5 error -117 [ 306.977382][ T9891] EXT4-fs (loop6): Remounting filesystem read-only [ 306.991264][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 306.991287][ C0] EXT4-fs (loop6): initial error at time 524850: ext4_orphan_get:1417 [ 306.991307][ C0] EXT4-fs (loop6): last error at time 524850: ext4_orphan_get:1417 [ 307.048173][ T9891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 307.172658][ T9905] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 307.287809][ T9913] syz_tun: entered promiscuous mode [ 307.308281][ T9913] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 307.375477][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 307.403278][ T9919] žÿ: renamed from team_slave_1 (while UP) [ 307.444129][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1788'. [ 307.517716][ T9891] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.1777: error -117 reading directory block [ 308.244795][ T9941] set_capacity_and_notify: 5 callbacks suppressed [ 308.244815][ T9941] loop5: detected capacity change from 0 to 1024 [ 308.283012][ T9941] EXT4-fs: Ignoring removed orlov option [ 308.309770][ T9941] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 308.370577][ T9941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.384800][ T9941] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 308.582073][ T9953] loop1: detected capacity change from 0 to 4096 [ 308.596836][ T28] kauditd_printk_skb: 166 callbacks suppressed [ 308.596854][ T28] audit: type=1326 audit(524852.549:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 308.646863][ T9957] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 308.662929][ T9953] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 308.679363][ T28] audit: type=1326 audit(524852.549:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 308.773643][ T28] audit: type=1326 audit(524852.549:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 308.832111][ T28] audit: type=1326 audit(524852.549:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 308.875634][ T28] audit: type=1326 audit(524852.589:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 308.917623][ T28] audit: type=1326 audit(524852.589:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 308.957585][ T28] audit: type=1326 audit(524852.589:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 309.001048][ T28] audit: type=1326 audit(524852.589:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 309.037214][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1801'. [ 309.096671][ T28] audit: type=1326 audit(524852.589:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f16d661c629 code=0x7ffc0000 [ 309.132346][ T28] audit: type=1326 audit(524852.639:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9952 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 309.157004][ T4749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.226493][ T9975] netlink: 'syz.4.1802': attribute type 10 has an invalid length. [ 309.779505][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 310.018027][ T9984] loop1: detected capacity change from 0 to 4096 [ 310.066091][ T9984] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 310.425391][ T9996] loop4: detected capacity change from 0 to 4096 [ 310.448674][ T9998] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 310.477012][T10000] loop6: detected capacity change from 0 to 1024 [ 310.491518][ T9996] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 310.498397][T10000] EXT4-fs: Ignoring removed orlov option [ 310.504960][T10000] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 310.519484][T10001] žÿ: renamed from team_slave_1 (while UP) [ 310.553437][T10000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.575960][T10000] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 310.749494][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1814'. [ 311.390885][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.542860][T10034] netlink: 'syz.1.1818': attribute type 10 has an invalid length. [ 311.680261][T10035] loop4: detected capacity change from 0 to 4096 [ 311.710629][T10035] EXT4-fs (loop4): inodes count not valid: 32 vs 27 [ 312.135999][T10042] loop6: detected capacity change from 0 to 4096 [ 312.156803][T10042] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 312.469535][T10056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1827'. [ 312.516459][T10055] loop1: detected capacity change from 0 to 1024 [ 312.550545][T10055] EXT4-fs: Ignoring removed orlov option [ 312.614934][T10055] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 312.700250][T10055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.759695][T10055] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 312.865921][T10067] loop4: detected capacity change from 0 to 2048 [ 312.902084][T10067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.989206][T10072] loop6: detected capacity change from 0 to 4096 [ 313.012854][T10072] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 313.025572][T10075] EXT4-fs: Ignoring removed i_version option [ 313.049106][T10075] EXT4-fs: Ignoring removed oldalloc option [ 313.070345][T10075] EXT4-fs (loop3): 1 truncate cleaned up [ 313.076553][T10075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.144798][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.271152][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.284803][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.346331][T10089] set_capacity_and_notify: 1 callbacks suppressed [ 313.346421][T10089] loop1: detected capacity change from 0 to 1024 [ 313.396861][T10094] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 313.552854][T10089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.238455][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.541057][T10108] loop1: detected capacity change from 0 to 4096 [ 314.611553][T10108] EXT4-fs (loop1): inodes count not valid: 32 vs 27 [ 314.893903][ T28] kauditd_printk_skb: 266 callbacks suppressed [ 314.893922][ T28] audit: type=1326 audit(524858.849:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 314.947516][ T28] audit: type=1326 audit(524858.879:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 315.045282][ T28] audit: type=1326 audit(524858.879:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 315.065598][T10119] loop1: detected capacity change from 0 to 1024 [ 315.088603][T10117] loop3: detected capacity change from 0 to 4096 [ 315.097493][ T28] audit: type=1326 audit(524858.879:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 315.108413][T10119] EXT4-fs: Ignoring removed orlov option [ 315.131881][T10119] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 315.146886][T10117] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 315.160944][ T28] audit: type=1326 audit(524858.879:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 315.232139][ T3307] ================================================================== [ 315.240287][ T3307] BUG: KCSAN: data-race in drop_nlink / generic_fillattr [ 315.247346][ T3307] [ 315.249691][ T3307] write to 0xffff88811a1880c8 of 4 bytes by task 4170 on cpu 0: [ 315.257346][ T3307] drop_nlink+0x3d/0xa0 [ 315.261534][ T3307] simple_unlink+0x60/0x80 [ 315.265993][ T3307] shmem_unlink+0x12d/0x140 [ 315.270554][ T3307] shmem_rename2+0x18e/0x310 [ 315.275205][ T3307] vfs_rename+0x97f/0xad0 [ 315.279571][ T3307] filename_renameat2+0x3b6/0x6e0 [ 315.284646][ T3307] __se_sys_rename+0x4a/0x1c0 [ 315.289450][ T3307] __x64_sys_rename+0x31/0x40 [ 315.294154][ T3307] x64_sys_call+0x2b3/0x3020 [ 315.298775][ T3307] do_syscall_64+0x12c/0x370 [ 315.303402][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.309354][ T3307] [ 315.311696][ T3307] read to 0xffff88811a1880c8 of 4 bytes by task 3307 on cpu 1: [ 315.319340][ T3307] generic_fillattr+0xfb/0x340 [ 315.324214][ T3307] shmem_getattr+0x181/0x200 [ 315.328838][ T3307] vfs_getattr_nosec+0x146/0x1e0 [ 315.333811][ T3307] __se_sys_newfstat+0x96/0x460 [ 315.338689][ T3307] __x64_sys_newfstat+0x31/0x40 [ 315.343615][ T3307] x64_sys_call+0x2773/0x3020 [ 315.348328][ T3307] do_syscall_64+0x12c/0x370 [ 315.352959][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.358875][ T3307] [ 315.361221][ T3307] value changed: 0x00000001 -> 0x00000000 [ 315.366950][ T3307] [ 315.369288][ T3307] Reported by Kernel Concurrency Sanitizer on: [ 315.375471][ T3307] CPU: 1 UID: 0 PID: 3307 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 315.385915][ T3307] Tainted: [W]=WARN [ 315.389740][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.399820][ T3307] ================================================================== [ 315.408180][ T28] audit: type=1326 audit(524858.879:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 315.464354][ T28] audit: type=1326 audit(524858.879:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2f1dc629 code=0x7ffc0000 [ 315.499351][ T28] audit: type=1400 audit(524859.239:5685): avc: denied { ioctl } for pid=10120 comm="syz.6.1848" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=26325 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 315.526593][T10119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.562536][T10119] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 315.791939][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.