last executing test programs: 4.908445348s ago: executing program 2 (id=1028): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getrandom(0x0, 0x0, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000200), 0x8, 0x81) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) select(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x8d, 0x4, 0x6, 0x8, 0x2, 0xffff}, &(0x7f0000000240)={0x9, 0x5833, 0x169, 0x6, 0x4, 0x7d42d6be, 0x2, 0x8000000000000001}, 0x0, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) r5 = semget$private(0x0, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) semop(r5, &(0x7f0000000140)=[{0x1, 0x5, 0x1800}, {0x4, 0x5}, {0x4, 0x6f, 0x800}], 0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x2}, 0x18) socket$key(0xf, 0x3, 0x2) 4.196909379s ago: executing program 1 (id=1039): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="73991ef3e849fc48727b9ada22dd654a12e33afb383825978e3a3ce02000040000000ff498a77262d91e05ffc18ca6d63d5c1fdd63f473a8d11bc8c8c08e873b397d6887a6896b00c4c4b5f6f6226e73bf8f81855877b80620c592ef500701017346d6f18a4c23d1673a47c450c2a185d03e75dabd256ef1c84b14ae712e91fc50d12094af981b245378d0fc6df6525d89f3850dbe54b87abfe258607b170e11fa036a9f3002a61f8149ebe6f64b0fafb35af7ff08a05aabd5fa3abcb2b18d86df190c51a774b15cefd89db31e375145c18da6fbbc4f0909482107321bbe982d725e2c7d2ffb05f79d36d8fc5917e5a674d3c1302b"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}}, 0x80) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) rmdir(&(0x7f0000000100)='./control\x00') clock_gettime(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000340)) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) 3.829903246s ago: executing program 4 (id=1041): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010100000000000000000000000000000000000000000000000039259990a9536c328470dec6e7839bd2469f29882b4128d835250d217ddfba151c602af787dfbf03afc685677c77a68fb3aebac6fb94b183a856f8f74fa5b01f59bd7eafa54e63"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000e22a2b9691b125901000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) r4 = fsmount(r3, 0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070000000900020073797a3100000000100007800c"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000880) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) ioprio_set$pid(0x3, 0x0, 0x4007) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0xfc, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x28, 0x4, 0x5) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) utimensat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.750052404s ago: executing program 2 (id=1042): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x0, 0x4e6, &(0x7f0000001240)="$eJzs3d9rXFkdAPDvnSRt2qZNqj7UgrVoJS3amaSxbfChRhB9Kljre4zJJIRMMiEzaZtQJMU/QBB/oU8+6YPgswjSP0GEgr6LLLuU3bbLsg+7O8tM7mzT2ZlkQpNMmvl84PTec+7N/Z4z0zkz557LvQF0rYsRMRERPRFxJSIG0/JMmmJjM1X3e/7s4XQ1JVGp3H03iSQtqx8rSZen0j/rj4gf/zDiZ8nn45bW1hemCoX8SprPlReXc6W19avzi1Nz+bn80sTY6I3xm+PXx0f2rK23vv/Wb3/55x/c+ue37v9v8p3LP69WayDdtrUd7dhoc7/NpvfVXou63ohY2U2wQ6wnbU9fpysCAEBbqr/xvxARX4uIF39o3OpXHQAAABwFle8OxEdJRKVSqZyplwEAAABHSqZ2DWySyabXAgxEJpPNbl7D+6U4mSkUS+VvzhZXl2Y2r5Udir7M7HwhP5JeKzwUfUk1P1pbf5m/1pAfi4izEfHrwRO1fHa6WJjp8LkPAAAA6BanGsb/7w9ujv8BAACAI2ao0xUAAAAA9p3xPwAAABx9Lcf/Se/BVgQAAADYDz+6fbuaKvXnX8/cW1tdKN67OpMvLWQXV6ez08WV5excsThXu2ff4k7HKxSLy9+OpdUHuXK+VM6V1tYnF4urS+XJ2nO9J/OeKAgAAAAH7+xXH/83iYiN75yopapj6bY2xuoT+1s7YD9ldrd7sl/1AA5eT6crAHSMC3yhe5mPB3YY2P+mIb/L0wYAAMBhMPzl15r/Nx8IbzADeehe5v+he5n/h+5l/h+63PGdd+lvteFfbRzfWUIAADgUBmopyWTTucCByGSy2YjTtccC9CWz84X8SESciYj/DPYdr+ZHO11pAAAAAAAAAAAAAAAAAAAAAAAAAHjDVCpJVAAAAIAjLSLzdpI+omt48NJA4/mBY8mHg7VlRNz/493fPZgql1dGq+XvfVZe/n1afq0TZzAAAACARvVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB76fmzh9P1dJBxn34vIoaaxe+N/tqy/++DEXHyRRK9W/4uiYiePYi/8SgizjWLn1SrFUMfbNaiMX4mIk4cRPxoHf/UHsSHbva42v9MNPv8ZeJibdn889ebptf19GKr/i9T7/9q/Vyz/u90mzHOP/lbrmX8RxHne5v3P/X4yWv2vz/9yfp6q22VP0UMN/3+SV6JlSsvLudKa+tX5xen5vJz+aWxsdEb4zfHr4+P5GbnC/n036YxfvWVf3yyXftPtog/tEP7L7XZ/o+fPHj2xW3iX/568/f/3Dbxq6/9N9Lvger24fr6xub6Vhf++u8LDUXHtsafadH+nd7/y222/8qdX/y/zV0BgANQWltfmCoU8itWjuxK7wHEqv9/OiRN7uqVv2wtuZO+Mbs+Tuf6JAAAYH+8/NHf6ZoAAAAAAAAAAAAAAAAAAABA93rlpl89EbHXdyM7/uqdBfo711QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG19GgAA//9UPsbW") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000040)=0x5, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x866c6000) unlink(&(0x7f0000000180)='./file1\x00') r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(r1, &(0x7f0000000680), 0x8, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="021300000200"], 0x10}}, 0x4004844) 3.584488751s ago: executing program 4 (id=1043): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x5f}, 0x18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) readv(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, r6, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 3.398002129s ago: executing program 4 (id=1045): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 3.170725792s ago: executing program 2 (id=1049): socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000020, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/exec\x00', 0x2, 0x0) lseek(r1, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180), &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x7, 0xf928, {{0x23, 0x4, 0x2, 0x4, 0x8c, 0x68, 0x0, 0xd, 0x2f, 0x0, @multicast2, @local, {[@rr={0x7, 0x1f, 0x45, [@multicast2, @empty, @multicast1, @private=0xa010102, @loopback, @rand_addr=0x64010102, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0x79, 0x3, 0x8, [{@private=0xa010101, 0xb17e}, {@broadcast, 0x7}, {@empty, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}, {@loopback, 0x8}, {@broadcast, 0x8b7}, {@empty, 0x3ac}, {@broadcast, 0xf1}]}]}}}}}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x17, 0xffffff6e, 0x0, 0x0, 0x5c053, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x0, @value=r6}, 0x50) r7 = dup(r3) write$UHID_INPUT(r7, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) 3.070142092s ago: executing program 2 (id=1050): shmdt(0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf2503000000580001800d0001007564703a73797a310000000044000400200001"], 0x6c}}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xf9, 0x0, 0x7, 0xc, 0x2, 0xf7, 0x7c, 0x4, 0x3, 0x3, 0x3, 0x3, 0x7, 0xec}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd6cbdc6f500006cff00000000000000000000000000000000ff020000000000000000000000000001"], 0x0) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448e3, 0x0) 2.982738451s ago: executing program 1 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = creat(&(0x7f0000000140)='./bus\x00', 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, 0x0, 0x0, 0x8) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) quotactl_fd$Q_QUOTAON(r1, 0x80000601, 0x0, &(0x7f0000000400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_read_part_table(0x5fb, &(0x7f0000000600)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001df00000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 2.960271473s ago: executing program 2 (id=1052): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xfffffffffffffff9}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@data_writeback}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x20000ffffffff}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.534517726s ago: executing program 4 (id=1060): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, 0x0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 2.378555022s ago: executing program 3 (id=1062): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="73991ef3e849fc48727b9ada22dd654a12e33afb383825978e3a3ce02000040000000ff498a77262d91e05ffc18ca6d63d5c1fdd63f473a8d11bc8c8c08e873b397d6887a6896b00c4c4b5f6f6226e73bf8f81855877b80620c592ef500701017346d6f18a4c23d1673a47c450c2a185d03e75dabd256ef1c84b14ae712e91fc50d12094af981b245378d0fc6df6525d89f3850dbe54b87abfe258607b170e11fa036a9f3002a61f8149ebe6f64b0fafb35af7ff08a05aabd5fa3abcb2b18d86df190c51a774b15cefd89db31e375145c18da6fbbc4f0909482107321bbe982d725e2c7d2ffb05f79d36d8fc5917e5a674d3c1302b"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}}, 0x80) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) rmdir(&(0x7f0000000100)='./control\x00') clock_gettime(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000340)) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) 2.180896601s ago: executing program 4 (id=1063): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) 2.08980936s ago: executing program 1 (id=1064): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='objagg_obj_parent_unassign\x00'}, 0x4d) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_test', 0x88040, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x20000001bbc, 0x20041) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@struct={0xa, 0x6, 0x0, 0x4, 0x0, 0x71, [{0x3, 0x2, 0x8}, {0x0, 0x2, 0x7}, {0x7, 0x0, 0x10000}, {0x7, 0x2, 0x40}, {0xd, 0x2, 0xe}, {0xd, 0x0, 0x7}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x30]}}, &(0x7f0000000400)=""/28, 0x72, 0x1c}, 0x28) cachestat(0xffffffffffffffff, &(0x7f0000000240)={0x8, 0x7}, &(0x7f00000002c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000140), 0x0, 0x0, {0x300002c}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd51, {r0}}, 0x58) io_submit(r2, 0x0, &(0x7f0000001300)) write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.067088612s ago: executing program 4 (id=1065): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x46cd40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x5, 0x5, 0x9, 0x8, 0x3, 0x1, 0x800, 0x5, 0x10}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000600000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e4ff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000e0000000000000000018120000", @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.923155407s ago: executing program 3 (id=1067): unshare(0x2c020400) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r0) 1.728112396s ago: executing program 3 (id=1069): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r5, 0x0) lremovexattr(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x4000000) sendmsg$NL80211_CMD_GET_REG(r5, 0x0, 0x4044) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000000040)={0x7815, 0x1, [{0x3}]}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.636871426s ago: executing program 1 (id=1070): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r4, 0x0, 0x20}, 0xc) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@empty, 0x4e21, 0x9, 0x4e22, 0x4, 0xa, 0x0, 0xa0, 0x1d, 0x0, r5}, {0x0, 0xfffffffffffffff9, 0x7, 0x3aad, 0x7, 0x100, 0x4, 0x5}, {0x4, 0x0, 0x9}, 0x0, 0x6e6bb8, 0x3, 0x1, 0x2}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in=@broadcast, 0x3506, 0x4, 0x1, 0x2d, 0xffffffff, 0x4, 0x2}}, 0xe8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x842) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r10, 0xc04c5349, &(0x7f0000000540)={0xc4, 0x4, 0x9}) 1.634542596s ago: executing program 3 (id=1071): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f0000000100)=""/44, 0xbb) syz_clone3(&(0x7f0000000640)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x22}, &(0x7f0000000580)=""/162, 0xa2, &(0x7f0000000300)=""/18, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x8, {r5}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x40, 0x112) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000cc0)={[{@noblock_validity}, {@resuid}, {@mblk_io_submit}, {@noload}, {@dioread_nolock}, {@grpjquota}, {@acl}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@grpjquota}, {@quota}, {@data_err_ignore}], [{@dont_measure}, {@obj_role}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, 'barrier'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x66, 0x65, 0x30, 0x31, 0x37, 0x65, 0x39], 0x2d, [0x34, 0x38, 0x33, 0x35], 0x2d, [0x34, 0x20, 0x66, 0x31], 0x2d, [0x32, 0x64, 0x32, 0x34], 0x2d, [0x30, 0x30, 0x78af27eb55855151, 0x36, 0x35, 0x39, 0x37, 0x37]}}}]}, 0xfd, 0x485, &(0x7f0000000800)="$eJzs3MtvVNUfAPDvnU5Ly+PX/hAfIGgVjcRHS8tDFm40mrjQaKILjKvaFoIM1NCaCCGKLjDGhSG6Ny5N/Atc6caoKxO3ujckxrABXY05M/eW6TADbZlhwPl8kgvn3HuHc7733DNz7jkzBNC3xtMfWcTmiPgtIkYjotx8wnj9ryuXzs7+fensbBbV6mt/ZellcfnS2dn8n6htyab6jmo1z29oUe75NyNmKpX5U3l+cunEO5OLp888dezEzNH5o/Mnpw8d2r9v19DB6QMdiTPFdXnH+ws7t7/4xoWXZw9feOunb1J9N+fHizg6abx+dVt6tNOF9diWhnRW7mFFWJMteX8frPX/0RiIkeVjo/HCRz2tHNBV1Wq12urzOXeuCvyHZdHrGgC9UXzQp+ffYrtFQ4/bwp/P1h+AUtxX8q1+pByl/JzBpufbThqOiMPn/vkybdGleQgAgEbfpfHPk63Gf6W4p+G8/+VrKGMR8f+I2BoRd0XEtoi4O6J27r0RcV+bcrI2+5tXSK4d/5Qurju4VUjjv2fyta2V479i9BdjA3luSy3+wezIscr83vya7InBDSk/teIlK33//K+fNe/7NJ9mH28Y/6UtlV+MBfN6XCw3TdDNzSzNdCT4FP+HETvKreLPltcBU9ttj4gd6yzj2ONf72x37Nr40zVujP86OrDOVP0q4rF6+5+LpvgLWdv1yamnD04fmByOyvzeyeKuuNbPv5x/tV35N27/7krtv7Hl/V+PPz0jZsMRi6fPHK+t1y6uvYzzv388267/b1vn/T+UvV5LD+X73ptZWjo1FTGUvZSyIyv2T199bZEvzk/x79nduv9vrT+e1a7E/RGRbuJdEfFARDyYt91DEfFwROy+Tvw/PvfI2+2OtW//68zKd1CKf65V+48st9hYSl1t/7UnBo7/8G278qurav/9tdSefM9q3v9WW8GbungAAABwhyjVvgOflSaW06XSxET9O/zbYmOpsrC49MSRhXdPztW/Kz8Wg6Vipmu0YT50Kp8bLvLTTfl9+bzxFwMjtfzE7EJlrtfBQ5/b1Kb/J38M9Lp2QNf5vRb0L/0f+pf+D/1L/4f+pf9DnxpqvfuDW10PoCfW/vk/3JV6ALee8T/0L/0f+pf+D32p7W/jSzf1k/87NVG+ParRMjFye1SjSESp60Vsihuf8/lgpwp95ZN6l+hE5Yvu1YmKlVf9n1msM7Gh5aEevikBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB00L8BAAD//4hb4Hg=") 537.218176ms ago: executing program 1 (id=1072): socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000020, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/exec\x00', 0x2, 0x0) lseek(r1, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180), &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x7, 0xf928, {{0x23, 0x4, 0x2, 0x4, 0x8c, 0x68, 0x0, 0xd, 0x2f, 0x0, @multicast2, @local, {[@rr={0x7, 0x1f, 0x45, [@multicast2, @empty, @multicast1, @private=0xa010102, @loopback, @rand_addr=0x64010102, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0x79, 0x3, 0x8, [{@private=0xa010101, 0xb17e}, {@broadcast, 0x7}, {@empty, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}, {@loopback, 0x8}, {@broadcast, 0x8b7}, {@empty, 0x3ac}, {@broadcast, 0xf1}]}]}}}}}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x17, 0xffffff6e, 0x0, 0x0, 0x5c053, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x0, @value=r6}, 0x50) r7 = dup(r3) write$UHID_INPUT(r7, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88dcf146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) 517.970278ms ago: executing program 0 (id=1073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0xd}, {0x77d, 0x6, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x6, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x4, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x1000002, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x8001, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0x2}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0x7fffffff, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x2, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x4}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0xffffffff}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x4}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x3, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x2, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x40000, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x800003, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0xa}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {0x4}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x7, 0xe, 0x30, 0x21000, r0, 0x9, '\x00', r3, r4, 0x3, 0x2, 0x3, 0xb}, 0x50) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @jmp={0x5, 0x1, 0x0, 0x1, 0xb, 0x4, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r6}, 0x18) setgroups(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40040) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_format(r8, &(0x7f0000000800)='-1\x00', 0x3) 426.798597ms ago: executing program 3 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) io_setup(0x200, &(0x7f0000000140)) r5 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$inet6(0xa, 0x2, 0x0) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f0000000440)=ANY=[], 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) 417.075338ms ago: executing program 1 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = creat(&(0x7f0000000140)='./bus\x00', 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, 0x0, 0x0, 0x8) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) quotactl_fd$Q_QUOTAON(r1, 0x80000601, 0x0, &(0x7f0000000400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_read_part_table(0x5fb, &(0x7f0000000600)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001df00000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 266.331953ms ago: executing program 3 (id=1076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 256.210064ms ago: executing program 0 (id=1077): r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) 192.8952ms ago: executing program 0 (id=1078): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010100000000000000000000000000000000000000000000000039259990a9536c328470dec6e7839bd2469f29882b4128d835250d217ddfba151c602af787dfbf03afc685677c77a68fb3aebac6fb94b183a856f8f74fa5b01f59bd7eafa54e63"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000e22a2b9691b12590100000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) r4 = fsmount(r3, 0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070000000900020073797a3100000000100007800c"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000880) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) ioprio_set$pid(0x3, 0x0, 0x4007) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0xfc, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x28, 0x4, 0x5) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) utimensat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 141.994476ms ago: executing program 0 (id=1079): open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 123.959147ms ago: executing program 2 (id=1080): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='objagg_obj_parent_unassign\x00'}, 0x4d) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_test', 0x88040, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x20000001bbc, 0x20041) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@struct={0xa, 0x6, 0x0, 0x4, 0x0, 0x71, [{0x3, 0x2, 0x8}, {0x0, 0x2, 0x7}, {0x7, 0x0, 0x10000}, {0x7, 0x2, 0x40}, {0xd, 0x2, 0xe}, {0xd, 0x0, 0x7}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x30]}}, &(0x7f0000000400)=""/28, 0x72, 0x1c}, 0x28) cachestat(0xffffffffffffffff, &(0x7f0000000240)={0x8, 0x7}, &(0x7f00000002c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000140), 0x0, 0x0, {0x300002c}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd51, {r0}}, 0x58) io_submit(r2, 0x0, &(0x7f0000001300)) write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 28.322607ms ago: executing program 0 (id=1081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r5, 0x0) lremovexattr(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x4000000) sendmsg$NL80211_CMD_GET_REG(r5, 0x0, 0x4044) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x203, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000000040)={0x7815, 0x1, [{0x3}]}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 0s ago: executing program 0 (id=1082): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r4, 0x0, 0x20}, 0xc) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@empty, 0x4e21, 0x9, 0x4e22, 0x4, 0xa, 0x0, 0xa0, 0x1d, 0x0, r5}, {0x0, 0xfffffffffffffff9, 0x7, 0x3aad, 0x7, 0x100, 0x4, 0x5}, {0x4, 0x0, 0x9}, 0x0, 0x6e6bb8, 0x3, 0x1, 0x2}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in=@broadcast, 0x3506, 0x4, 0x1, 0x2d, 0xffffffff, 0x4, 0x2}}, 0xe8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x842) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r10, 0xc04c5349, &(0x7f0000000540)={0xc4, 0x4, 0x9}) kernel console output (not intermixed with test programs): ck 32) failed [ 66.803313][ T4934] FAT-fs (loop0): Directory bread(block 33) failed [ 66.809947][ T4934] FAT-fs (loop0): Directory bread(block 34) failed [ 66.816643][ T4934] FAT-fs (loop0): Directory bread(block 35) failed [ 66.823498][ T4934] FAT-fs (loop0): Directory bread(block 36) failed [ 66.830077][ T4934] FAT-fs (loop0): Directory bread(block 37) failed [ 67.032344][ T4934] FAT-fs (loop0): Directory bread(block 38) failed [ 67.043718][ T4934] FAT-fs (loop0): Directory bread(block 39) failed [ 67.079111][ T4934] FAT-fs (loop0): Directory bread(block 40) failed [ 67.132403][ T4934] FAT-fs (loop0): Directory bread(block 41) failed [ 67.222847][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 67.299160][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 67.563543][ T4944] loop3: detected capacity change from 0 to 1024 [ 67.591356][ T4944] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.618539][ T4944] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.652767][ T4944] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.420: bad orphan inode 11 [ 67.676149][ T4944] ext4_test_bit(bit=10, block=4) = 1 [ 67.681501][ T4944] is_bad_inode(inode)=0 [ 67.685686][ T4944] NEXT_ORPHAN(inode)=3254779904 [ 67.690640][ T4944] max_ino=32 [ 67.693846][ T4944] i_nlink=0 [ 67.733307][ T4944] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.420: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.773412][ T4944] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.420: lblock 0 mapped to illegal pblock 48 (length 1) [ 67.840008][ T4944] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.420: Failed to acquire dquot type 0 [ 67.882010][ T4944] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 67.902301][ T4944] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.420: mark_inode_dirty error [ 67.975092][ T4944] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 68.012303][ T4944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.063820][ T4944] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 68.082807][ T4958] loop2: detected capacity change from 0 to 512 [ 68.131506][ T4944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.150750][ T4958] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 68.206012][ T4963] loop0: detected capacity change from 0 to 1024 [ 68.214187][ T4944] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 68.251724][ T4963] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.262703][ T4963] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.282513][ T4944] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 68.290294][ T4944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.420'. [ 68.325389][ T4944] batadv0: entered promiscuous mode [ 68.330640][ T4944] batadv0: entered allmulticast mode [ 68.339340][ T4944] bond0: (slave batadv0): Releasing backup interface [ 68.354182][ T4944] bridge0: port 3(batadv0) entered blocking state [ 68.360765][ T4944] bridge0: port 3(batadv0) entered disabled state [ 68.406383][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.425686][ T4963] JBD2: no valid journal superblock found [ 68.429289][ T3319] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 68.431446][ T4963] EXT4-fs (loop0): Could not load journal inode [ 68.463400][ T3319] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 68.488247][ T3319] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 68.582018][ T4878] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 68.591268][ T4878] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 68.668556][ T4973] loop0: detected capacity change from 0 to 1024 [ 68.718052][ T4983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 68.747361][ T4973] EXT4-fs: Ignoring removed orlov option [ 68.782776][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 68.841700][ T4973] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 68.864790][ T4953] cgroup: none used incorrectly [ 68.875751][ T4973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.994663][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.067466][ T5006] dvmrp0: entered allmulticast mode [ 69.187706][ T5015] loop0: detected capacity change from 0 to 128 [ 69.208012][ T5015] FAT-fs (loop0): Directory bread(block 32) failed [ 69.221657][ T5015] FAT-fs (loop0): Directory bread(block 33) failed [ 69.228247][ T5015] FAT-fs (loop0): Directory bread(block 34) failed [ 69.333247][ T5015] FAT-fs (loop0): Directory bread(block 35) failed [ 69.382082][ T5015] FAT-fs (loop0): Directory bread(block 36) failed [ 69.388766][ T5015] FAT-fs (loop0): Directory bread(block 37) failed [ 69.396287][ T5015] FAT-fs (loop0): Directory bread(block 38) failed [ 69.403189][ T5015] FAT-fs (loop0): Directory bread(block 39) failed [ 69.410279][ T5015] FAT-fs (loop0): Directory bread(block 40) failed [ 69.417638][ T5015] FAT-fs (loop0): Directory bread(block 41) failed [ 69.476293][ T5022] loop4: detected capacity change from 0 to 2048 [ 69.530838][ T5022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.610107][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 69.639112][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.671041][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 69.880061][ T5031] loop3: detected capacity change from 0 to 1024 [ 69.934530][ T5031] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.945617][ T5031] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.007664][ T5031] JBD2: no valid journal superblock found [ 70.013450][ T5031] EXT4-fs (loop3): Could not load journal inode [ 70.127515][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 70.127527][ T29] audit: type=1400 audit(1763496827.455:5296): avc: denied { create } for pid=5033 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.273547][ T29] audit: type=1400 audit(1763496827.605:5297): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 70.399995][ T29] audit: type=1400 audit(1763496827.725:5298): avc: denied { block_suspend } for pid=5041 comm="syz.4.448" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.421684][ T29] audit: type=1400 audit(1763496827.725:5299): avc: denied { remount } for pid=5041 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.475368][ T5040] cgroup: none used incorrectly [ 70.490739][ T5031] loop3: detected capacity change from 0 to 1024 [ 70.509344][ T5031] EXT4-fs: Ignoring removed orlov option [ 70.533308][ T5031] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.543617][ T29] audit: type=1400 audit(1763496827.775:5300): avc: denied { create } for pid=5033 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.563057][ T29] audit: type=1400 audit(1763496827.775:5301): avc: denied { ioctl } for pid=5033 comm="syz.1.446" path="socket:[9692]" dev="sockfs" ino=9692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.587567][ T29] audit: type=1400 audit(1763496827.775:5302): avc: denied { write } for pid=5033 comm="syz.1.446" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.607899][ T29] audit: type=1400 audit(1763496827.775:5303): avc: denied { create } for pid=5033 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.627317][ T29] audit: type=1326 audit(1763496827.785:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5033 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 70.650654][ T29] audit: type=1326 audit(1763496827.785:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5033 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 70.841455][ T5050] loop0: detected capacity change from 0 to 512 [ 70.848524][ T5050] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 70.893739][ T5031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.043315][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.138331][ T5057] loop2: detected capacity change from 0 to 512 [ 71.182607][ T5057] EXT4-fs: dax option not supported [ 71.361640][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 71.384613][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 71.387719][ T5091] loop4: detected capacity change from 0 to 128 [ 71.429567][ T5091] FAT-fs (loop4): Directory bread(block 32) failed [ 71.441677][ T5091] FAT-fs (loop4): Directory bread(block 33) failed [ 71.451769][ T5091] FAT-fs (loop4): Directory bread(block 34) failed [ 71.463910][ T5091] FAT-fs (loop4): Directory bread(block 35) failed [ 71.529286][ T5091] FAT-fs (loop4): Directory bread(block 36) failed [ 71.564064][ T5091] FAT-fs (loop4): Directory bread(block 37) failed [ 71.653778][ T5091] FAT-fs (loop4): Directory bread(block 38) failed [ 71.698938][ T5091] FAT-fs (loop4): Directory bread(block 39) failed [ 71.708776][ T5091] FAT-fs (loop4): Directory bread(block 40) failed [ 71.728297][ T5091] FAT-fs (loop4): Directory bread(block 41) failed [ 72.027535][ T5104] loop3: detected capacity change from 0 to 1024 [ 72.040350][ T5104] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.051287][ T5104] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.062234][ T5104] JBD2: no valid journal superblock found [ 72.067978][ T5104] EXT4-fs (loop3): Could not load journal inode [ 72.648964][ T5109] loop3: detected capacity change from 0 to 1024 [ 72.811071][ T5109] EXT4-fs: Ignoring removed orlov option [ 72.864150][ T5125] FAULT_INJECTION: forcing a failure. [ 72.864150][ T5125] name failslab, interval 1, probability 0, space 0, times 0 [ 72.876843][ T5125] CPU: 0 UID: 0 PID: 5125 Comm: syz.1.468 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.876871][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.876883][ T5125] Call Trace: [ 72.876890][ T5125] [ 72.876954][ T5125] __dump_stack+0x1d/0x30 [ 72.876976][ T5125] dump_stack_lvl+0xe8/0x140 [ 72.876996][ T5125] dump_stack+0x15/0x1b [ 72.877090][ T5125] should_fail_ex+0x265/0x280 [ 72.877117][ T5125] should_failslab+0x8c/0xb0 [ 72.877179][ T5125] __kmalloc_node_noprof+0xaa/0x580 [ 72.877210][ T5125] ? qdisc_alloc+0x65/0x440 [ 72.877261][ T5125] qdisc_alloc+0x65/0x440 [ 72.877364][ T5125] ? nla_strcmp+0xc3/0xe0 [ 72.877381][ T5125] qdisc_create+0xf5/0x9e0 [ 72.877403][ T5125] tc_modify_qdisc+0xf9c/0x1480 [ 72.877428][ T5125] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 72.877521][ T5125] rtnetlink_rcv_msg+0x65a/0x6d0 [ 72.877550][ T5125] netlink_rcv_skb+0x123/0x220 [ 72.877624][ T5125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.877651][ T5125] rtnetlink_rcv+0x1c/0x30 [ 72.877668][ T5125] netlink_unicast+0x5c0/0x690 [ 72.877713][ T5125] netlink_sendmsg+0x58b/0x6b0 [ 72.877734][ T5125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.877761][ T5125] __sock_sendmsg+0x145/0x180 [ 72.877785][ T5125] ____sys_sendmsg+0x31e/0x4e0 [ 72.877874][ T5125] ___sys_sendmsg+0x17b/0x1d0 [ 72.877904][ T5125] __x64_sys_sendmsg+0xd4/0x160 [ 72.877926][ T5125] x64_sys_call+0x191e/0x3000 [ 72.877944][ T5125] do_syscall_64+0xd2/0x200 [ 72.877966][ T5125] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 72.878041][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.878062][ T5125] RIP: 0033:0x7f179a80f6c9 [ 72.878074][ T5125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.878108][ T5125] RSP: 002b:00007f179926f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.878126][ T5125] RAX: ffffffffffffffda RBX: 00007f179aa65fa0 RCX: 00007f179a80f6c9 [ 72.878136][ T5125] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 72.878146][ T5125] RBP: 00007f179926f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.878156][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.878166][ T5125] R13: 00007f179aa66038 R14: 00007f179aa65fa0 R15: 00007ffc3de1e4a8 [ 72.878239][ T5125] [ 73.301897][ T5109] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 73.670969][ T5130] loop4: detected capacity change from 0 to 512 [ 73.678126][ T5130] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 73.792351][ T5109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.936123][ T5126] cgroup: none used incorrectly [ 73.969132][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.043706][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 75.095520][ T5165] loop4: detected capacity change from 0 to 128 [ 75.148138][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 75.148159][ T29] audit: type=1400 audit(1763496831.595:5523): avc: denied { execmem } for pid=5167 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.173524][ T29] audit: type=1400 audit(1763496831.705:5524): avc: denied { map_create } for pid=5163 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.192699][ T29] audit: type=1400 audit(1763496831.705:5525): avc: denied { map_read map_write } for pid=5163 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.212507][ T29] audit: type=1400 audit(1763496831.715:5526): avc: denied { prog_run } for pid=5163 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.231648][ T29] audit: type=1400 audit(1763496832.415:5527): avc: denied { write } for pid=5167 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.346940][ T5179] loop3: detected capacity change from 0 to 1024 [ 75.382869][ T5179] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.384120][ T29] audit: type=1326 audit(1763496832.625:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 75.393856][ T5179] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.417195][ T29] audit: type=1326 audit(1763496832.625:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 75.432056][ T5165] FAT-fs (loop4): Directory bread(block 32) failed [ 75.450086][ T29] audit: type=1326 audit(1763496832.625:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 75.462350][ T5179] JBD2: no valid journal superblock found [ 75.479858][ T29] audit: type=1326 audit(1763496832.625:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 75.479885][ T29] audit: type=1326 audit(1763496832.625:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 75.485635][ T5179] EXT4-fs (loop3): Could not load journal inode [ 75.491695][ T5165] FAT-fs (loop4): Directory bread(block 33) failed [ 75.613724][ T5165] FAT-fs (loop4): Directory bread(block 34) failed [ 75.620367][ T5165] FAT-fs (loop4): Directory bread(block 35) failed [ 75.627195][ T5165] FAT-fs (loop4): Directory bread(block 36) failed [ 75.638600][ T5165] FAT-fs (loop4): Directory bread(block 37) failed [ 75.645405][ T5165] FAT-fs (loop4): Directory bread(block 38) failed [ 75.655572][ T5165] FAT-fs (loop4): Directory bread(block 39) failed [ 75.662307][ T5165] FAT-fs (loop4): Directory bread(block 40) failed [ 75.689134][ T5165] FAT-fs (loop4): Directory bread(block 41) failed [ 76.305188][ T5206] loop3: detected capacity change from 0 to 1024 [ 76.345849][ T5206] EXT4-fs: Ignoring removed orlov option [ 76.412187][ T5206] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 77.155153][ T5224] loop1: detected capacity change from 0 to 512 [ 77.161707][ T5224] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 77.304737][ T5201] cgroup: none used incorrectly [ 77.408996][ T5206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.441199][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 77.499230][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 77.523132][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.548085][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 77.583933][ T5246] netlink: 'syz.1.502': attribute type 10 has an invalid length. [ 77.606290][ T5246] batadv0: entered allmulticast mode [ 77.628529][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.658032][ T5246] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 77.668792][ T5246] netlink: 'syz.1.502': attribute type 10 has an invalid length. [ 77.676627][ T5246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.502'. [ 77.685962][ T5246] batadv0: entered promiscuous mode [ 77.693093][ T5246] bond0: (slave batadv0): Releasing backup interface [ 77.702312][ T5246] bridge0: port 3(batadv0) entered blocking state [ 77.708953][ T5246] bridge0: port 3(batadv0) entered disabled state [ 77.891745][ T2846] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 77.900990][ T2846] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 78.179517][ T5260] loop1: detected capacity change from 0 to 128 [ 78.271892][ T5260] FAT-fs (loop1): Directory bread(block 32) failed [ 78.286381][ T5260] FAT-fs (loop1): Directory bread(block 33) failed [ 78.366064][ T5260] FAT-fs (loop1): Directory bread(block 34) failed [ 78.384032][ T5260] FAT-fs (loop1): Directory bread(block 35) failed [ 78.390752][ T5260] FAT-fs (loop1): Directory bread(block 36) failed [ 78.397319][ T5260] FAT-fs (loop1): Directory bread(block 37) failed [ 78.431743][ T5260] FAT-fs (loop1): Directory bread(block 38) failed [ 78.438317][ T5260] FAT-fs (loop1): Directory bread(block 39) failed [ 78.444855][ T5260] FAT-fs (loop1): Directory bread(block 40) failed [ 78.451346][ T5260] FAT-fs (loop1): Directory bread(block 41) failed [ 79.940943][ T5269] loop3: detected capacity change from 0 to 512 [ 79.947552][ T5269] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 79.962983][ T5268] loop4: detected capacity change from 0 to 512 [ 79.969567][ T5268] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 80.044526][ T5281] loop0: detected capacity change from 0 to 1024 [ 80.061456][ T5281] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.072494][ T5281] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.161094][ T5287] FAULT_INJECTION: forcing a failure. [ 80.161094][ T5287] name failslab, interval 1, probability 0, space 0, times 0 [ 80.170951][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 80.170965][ T29] audit: type=1400 audit(1763496837.485:5669): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.173786][ T5287] CPU: 0 UID: 0 PID: 5287 Comm: syz.4.515 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.173855][ T5287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.173867][ T5287] Call Trace: [ 80.173874][ T5287] [ 80.173881][ T5287] __dump_stack+0x1d/0x30 [ 80.173903][ T5287] dump_stack_lvl+0xe8/0x140 [ 80.173967][ T5287] dump_stack+0x15/0x1b [ 80.173990][ T5287] should_fail_ex+0x265/0x280 [ 80.174021][ T5287] should_failslab+0x8c/0xb0 [ 80.174048][ T5287] kmem_cache_alloc_noprof+0x50/0x480 [ 80.174122][ T5287] ? alloc_empty_file+0x76/0x200 [ 80.174151][ T5287] ? mntput+0x4b/0x80 [ 80.174168][ T5287] alloc_empty_file+0x76/0x200 [ 80.174197][ T5287] path_openat+0x68/0x2170 [ 80.174272][ T5287] ? _parse_integer_limit+0x170/0x190 [ 80.174362][ T5287] ? kstrtoull+0x111/0x140 [ 80.174407][ T5287] ? kstrtouint+0x76/0xc0 [ 80.174436][ T5287] do_filp_open+0x109/0x230 [ 80.174463][ T5287] do_sys_openat2+0xa6/0x110 [ 80.174484][ T5287] __x64_sys_openat+0xf2/0x120 [ 80.174527][ T5287] x64_sys_call+0x2eab/0x3000 [ 80.174548][ T5287] do_syscall_64+0xd2/0x200 [ 80.174568][ T5287] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.174671][ T5287] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.174769][ T5287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.174789][ T5287] RIP: 0033:0x7fcad7f6f6c9 [ 80.174803][ T5287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.174820][ T5287] RSP: 002b:00007fcad69d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.174837][ T5287] RAX: ffffffffffffffda RBX: 00007fcad81c5fa0 RCX: 00007fcad7f6f6c9 [ 80.174849][ T5287] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 80.174902][ T5287] RBP: 00007fcad69d7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.174914][ T5287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.174925][ T5287] R13: 00007fcad81c6038 R14: 00007fcad81c5fa0 R15: 00007ffc1119aba8 [ 80.174942][ T5287] [ 80.291904][ T5281] JBD2: no valid journal superblock found [ 80.408427][ T5281] EXT4-fs (loop0): Could not load journal inode [ 80.500967][ T29] audit: type=1400 audit(1763496837.825:5670): avc: denied { open } for pid=5289 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.520341][ T29] audit: type=1400 audit(1763496837.825:5671): avc: denied { perfmon } for pid=5289 comm="syz.4.517" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.541156][ T29] audit: type=1400 audit(1763496837.825:5672): avc: denied { kernel } for pid=5289 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.623374][ T29] audit: type=1400 audit(1763496837.855:5673): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.647852][ T29] audit: type=1400 audit(1763496837.855:5674): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.672081][ T29] audit: type=1400 audit(1763496837.855:5675): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.673597][ T5306] $Hÿ: renamed from bond0 (while UP) [ 80.697676][ T29] audit: type=1400 audit(1763496837.895:5676): avc: denied { create } for pid=5289 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.723815][ T29] audit: type=1400 audit(1763496837.895:5677): avc: denied { write } for pid=5289 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.744144][ T29] audit: type=1400 audit(1763496837.895:5678): avc: denied { read } for pid=5289 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.769256][ T5299] loop0: detected capacity change from 0 to 1024 [ 80.776936][ T5306] $Hÿ: entered promiscuous mode [ 80.777568][ T5299] EXT4-fs: Ignoring removed orlov option [ 80.782136][ T5306] bond_slave_0: entered promiscuous mode [ 80.793517][ T5306] bond_slave_1: entered promiscuous mode [ 80.811823][ T5299] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 80.827885][ T5271] cgroup: none used incorrectly [ 80.890899][ T5299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.027516][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.111508][ T5337] loop3: detected capacity change from 0 to 512 [ 83.118465][ T5337] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 83.186127][ T5340] loop2: detected capacity change from 0 to 512 [ 83.192815][ T5340] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 83.431474][ T5352] loop1: detected capacity change from 0 to 128 [ 83.490779][ T5352] FAT-fs (loop1): Directory bread(block 32) failed [ 83.515216][ T5352] FAT-fs (loop1): Directory bread(block 33) failed [ 83.521959][ T5352] FAT-fs (loop1): Directory bread(block 34) failed [ 83.528830][ T5352] FAT-fs (loop1): Directory bread(block 35) failed [ 83.537628][ T5352] FAT-fs (loop1): Directory bread(block 36) failed [ 83.544328][ T5352] FAT-fs (loop1): Directory bread(block 37) failed [ 83.552011][ T5352] FAT-fs (loop1): Directory bread(block 38) failed [ 83.558681][ T5352] FAT-fs (loop1): Directory bread(block 39) failed [ 83.565281][ T5352] FAT-fs (loop1): Directory bread(block 40) failed [ 83.574138][ T5352] FAT-fs (loop1): Directory bread(block 41) failed [ 83.714155][ T5366] loop4: detected capacity change from 0 to 1024 [ 83.755576][ T5366] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.766521][ T5366] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.787968][ T5366] JBD2: no valid journal superblock found [ 83.793842][ T5366] EXT4-fs (loop4): Could not load journal inode [ 83.909124][ T5372] loop4: detected capacity change from 0 to 1024 [ 83.915891][ T5372] EXT4-fs: Ignoring removed orlov option [ 83.922103][ T5372] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 83.971936][ T5372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.991228][ T5385] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.045302][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.104264][ T5355] cgroup: none used incorrectly [ 84.787048][ T5394] loop4: detected capacity change from 0 to 512 [ 84.794014][ T5394] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 84.926490][ T5392] loop3: detected capacity change from 0 to 512 [ 84.933295][ T5392] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 85.033297][ T5398] FAULT_INJECTION: forcing a failure. [ 85.033297][ T5398] name failslab, interval 1, probability 0, space 0, times 0 [ 85.046071][ T5398] CPU: 0 UID: 0 PID: 5398 Comm: syz.4.545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.046161][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.046172][ T5398] Call Trace: [ 85.046177][ T5398] [ 85.046216][ T5398] __dump_stack+0x1d/0x30 [ 85.046241][ T5398] dump_stack_lvl+0xe8/0x140 [ 85.046287][ T5398] dump_stack+0x15/0x1b [ 85.046301][ T5398] should_fail_ex+0x265/0x280 [ 85.046328][ T5398] should_failslab+0x8c/0xb0 [ 85.046460][ T5398] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 85.046532][ T5398] ? sidtab_sid2str_get+0xa0/0x130 [ 85.046617][ T5398] kmemdup_noprof+0x2b/0x70 [ 85.046835][ T5398] sidtab_sid2str_get+0xa0/0x130 [ 85.046978][ T5398] security_sid_to_context_core+0x1eb/0x2e0 [ 85.047003][ T5398] security_sid_to_context+0x27/0x40 [ 85.047082][ T5398] selinux_lsmprop_to_secctx+0x67/0xf0 [ 85.047111][ T5398] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 85.047134][ T5398] audit_log_subj_ctx+0xa4/0x3e0 [ 85.047209][ T5398] ? skb_put+0xa9/0xf0 [ 85.047291][ T5398] audit_log_task_context+0x48/0x70 [ 85.047313][ T5398] audit_log_task+0xf4/0x250 [ 85.047342][ T5398] ? kstrtouint+0x76/0xc0 [ 85.047371][ T5398] audit_seccomp+0x61/0x100 [ 85.047402][ T5398] ? __seccomp_filter+0x82d/0x1250 [ 85.047428][ T5398] __seccomp_filter+0x83e/0x1250 [ 85.047472][ T5398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.047518][ T5398] ? vfs_write+0x7e8/0x960 [ 85.047542][ T5398] ? __rcu_read_unlock+0x4f/0x70 [ 85.047568][ T5398] ? __fget_files+0x184/0x1c0 [ 85.047599][ T5398] __secure_computing+0x82/0x150 [ 85.047638][ T5398] syscall_trace_enter+0xcf/0x1e0 [ 85.047667][ T5398] do_syscall_64+0xac/0x200 [ 85.047787][ T5398] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.047814][ T5398] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.047846][ T5398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.047923][ T5398] RIP: 0033:0x7fcad7f6f6c9 [ 85.047940][ T5398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.047958][ T5398] RSP: 002b:00007fcad69d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 85.048048][ T5398] RAX: ffffffffffffffda RBX: 00007fcad81c5fa0 RCX: 00007fcad7f6f6c9 [ 85.048095][ T5398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 85.048109][ T5398] RBP: 00007fcad69d7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.048202][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.048214][ T5398] R13: 00007fcad81c6038 R14: 00007fcad81c5fa0 R15: 00007ffc1119aba8 [ 85.048233][ T5398] [ 85.307272][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 85.307287][ T29] audit: type=1400 audit(1763496842.385:5858): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 85.333395][ T29] audit: type=1326 audit(1763496842.365:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5397 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 85.354290][ T29] audit: type=1326 audit(1763496842.385:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcad7f6e0dc code=0x7ffc0000 [ 85.377535][ T29] audit: type=1326 audit(1763496842.385:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcad7f6e17f code=0x7ffc0000 [ 85.400851][ T29] audit: type=1326 audit(1763496842.385:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcad7f6e32a code=0x7ffc0000 [ 85.424330][ T29] audit: type=1326 audit(1763496842.385:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 85.448454][ T29] audit: type=1326 audit(1763496842.385:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 85.497902][ T29] audit: type=1400 audit(1763496842.665:5864): avc: denied { execmem } for pid=5399 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 85.517189][ T29] audit: type=1400 audit(1763496842.775:5865): avc: denied { bind } for pid=5400 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.536453][ T29] audit: type=1400 audit(1763496842.775:5866): avc: denied { setopt } for pid=5400 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.233850][ T5426] loop3: detected capacity change from 0 to 1024 [ 86.268838][ T5426] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.280047][ T5426] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.381457][ T5426] JBD2: no valid journal superblock found [ 86.387346][ T5426] EXT4-fs (loop3): Could not load journal inode [ 86.909962][ T5435] loop4: detected capacity change from 0 to 512 [ 86.917151][ T5435] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 87.126377][ T5439] loop3: detected capacity change from 0 to 1024 [ 87.133417][ T5439] EXT4-fs: Ignoring removed orlov option [ 87.140500][ T5439] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 87.152477][ T5447] loop2: detected capacity change from 0 to 128 [ 87.174455][ T5447] FAT-fs (loop2): Directory bread(block 32) failed [ 87.183213][ T5447] FAT-fs (loop2): Directory bread(block 33) failed [ 87.191351][ T5451] FAULT_INJECTION: forcing a failure. [ 87.191351][ T5451] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.204568][ T5451] CPU: 1 UID: 0 PID: 5451 Comm: syz.1.561 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.204594][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.204675][ T5451] Call Trace: [ 87.204682][ T5451] [ 87.204690][ T5451] __dump_stack+0x1d/0x30 [ 87.204710][ T5451] dump_stack_lvl+0xe8/0x140 [ 87.204793][ T5451] dump_stack+0x15/0x1b [ 87.204808][ T5451] should_fail_ex+0x265/0x280 [ 87.204839][ T5451] should_fail+0xb/0x20 [ 87.204935][ T5451] should_fail_usercopy+0x1a/0x20 [ 87.204953][ T5451] strncpy_from_user+0x25/0x230 [ 87.204976][ T5451] strncpy_from_bpfptr+0x43/0x50 [ 87.205001][ T5451] bpf_prog_load+0x883/0x1100 [ 87.205040][ T5451] ? security_bpf+0x2b/0x90 [ 87.205068][ T5451] __sys_bpf+0x469/0x7c0 [ 87.205093][ T5451] __x64_sys_bpf+0x41/0x50 [ 87.205129][ T5451] x64_sys_call+0x2aee/0x3000 [ 87.205235][ T5451] do_syscall_64+0xd2/0x200 [ 87.205326][ T5451] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.205354][ T5451] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.205385][ T5451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.205412][ T5451] RIP: 0033:0x7f179a80f6c9 [ 87.205432][ T5451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.205449][ T5451] RSP: 002b:00007f179926f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.205468][ T5451] RAX: ffffffffffffffda RBX: 00007f179aa65fa0 RCX: 00007f179a80f6c9 [ 87.205478][ T5451] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 87.205490][ T5451] RBP: 00007f179926f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.205502][ T5451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.205518][ T5451] R13: 00007f179aa66038 R14: 00007f179aa65fa0 R15: 00007ffc3de1e4a8 [ 87.205536][ T5451] [ 87.208512][ T5447] FAT-fs (loop2): Directory bread(block 34) failed [ 87.418508][ T5439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.430911][ T5447] FAT-fs (loop2): Directory bread(block 35) failed [ 87.438215][ T5447] FAT-fs (loop2): Directory bread(block 36) failed [ 87.444869][ T5447] FAT-fs (loop2): Directory bread(block 37) failed [ 87.458054][ T5447] FAT-fs (loop2): Directory bread(block 38) failed [ 87.464876][ T5447] FAT-fs (loop2): Directory bread(block 39) failed [ 87.471409][ T5447] FAT-fs (loop2): Directory bread(block 40) failed [ 87.478935][ T5447] FAT-fs (loop2): Directory bread(block 41) failed [ 87.514996][ T5453] cgroup: none used incorrectly [ 87.523149][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.680825][ T5463] loop4: detected capacity change from 0 to 512 [ 87.687919][ T5463] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 88.121400][ T5481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 88.295772][ T5495] serio: Serial port ptm0 [ 88.358998][ T5503] loop4: detected capacity change from 0 to 512 [ 88.411745][ T5507] macvtap2: entered promiscuous mode [ 88.417073][ T5507] macvtap2: entered allmulticast mode [ 88.433508][ T5511] loop3: detected capacity change from 0 to 1024 [ 88.440560][ T5503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.446824][ T5511] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.461698][ T5503] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.464104][ T5511] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.478124][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 88.500701][ T5511] JBD2: no valid journal superblock found [ 88.506509][ T5511] EXT4-fs (loop3): Could not load journal inode [ 88.596935][ T5519] loop3: detected capacity change from 0 to 1024 [ 88.611518][ T5519] EXT4-fs: Ignoring removed orlov option [ 88.644481][ T5519] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 88.688212][ T5519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.720110][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.749874][ T5502] syz.4.578 (5502) used greatest stack depth: 10424 bytes left [ 88.767862][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.906015][ T5535] loop4: detected capacity change from 0 to 128 [ 88.999731][ T5535] FAT-fs (loop4): Directory bread(block 32) failed [ 89.043682][ T5535] FAT-fs (loop4): Directory bread(block 33) failed [ 89.078178][ T5535] FAT-fs (loop4): Directory bread(block 34) failed [ 89.102589][ T5535] FAT-fs (loop4): Directory bread(block 35) failed [ 89.137204][ T5535] FAT-fs (loop4): Directory bread(block 36) failed [ 89.175192][ T5535] FAT-fs (loop4): Directory bread(block 37) failed [ 89.200843][ T5535] FAT-fs (loop4): Directory bread(block 38) failed [ 89.240480][ T5535] FAT-fs (loop4): Directory bread(block 39) failed [ 89.280605][ T5535] FAT-fs (loop4): Directory bread(block 40) failed [ 89.319945][ T5535] FAT-fs (loop4): Directory bread(block 41) failed [ 89.662549][ T5551] serio: Serial port ptm0 [ 89.736038][ T5554] macvtap2: entered promiscuous mode [ 89.741402][ T5554] macvtap2: entered allmulticast mode [ 89.978227][ T5561] loop3: detected capacity change from 0 to 1024 [ 90.012688][ T5561] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.023651][ T5561] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.109756][ T5561] JBD2: no valid journal superblock found [ 90.115554][ T5561] EXT4-fs (loop3): Could not load journal inode [ 90.143906][ T5541] cgroup: none used incorrectly [ 90.218245][ T5565] loop3: detected capacity change from 0 to 1024 [ 90.227322][ T5565] EXT4-fs: Ignoring removed orlov option [ 90.264002][ T5565] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.302262][ T5565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.323313][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 90.323331][ T29] audit: type=1326 audit(1763496847.655:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 90.359044][ T29] audit: type=1326 audit(1763496847.685:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 90.360839][ T5572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.596'. [ 90.382470][ T29] audit: type=1326 audit(1763496847.685:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 90.414550][ T29] audit: type=1326 audit(1763496847.685:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 90.437942][ T29] audit: type=1326 audit(1763496847.685:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 90.461396][ T29] audit: type=1326 audit(1763496847.685:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 90.484726][ T29] audit: type=1326 audit(1763496847.685:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 90.508193][ T29] audit: type=1326 audit(1763496847.685:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 90.531449][ T29] audit: type=1400 audit(1763496847.685:6313): avc: denied { getopt } for pid=5569 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.551177][ T29] audit: type=1326 audit(1763496847.685:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 90.551622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.604854][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.747992][ T5591] serio: Serial port ptm1 [ 90.814752][ T5599] macvtap2: entered promiscuous mode [ 90.820086][ T5599] macvtap2: entered allmulticast mode [ 90.847154][ T5601] loop1: detected capacity change from 0 to 128 [ 90.870252][ T5601] FAT-fs (loop1): Directory bread(block 32) failed [ 90.877374][ T5601] FAT-fs (loop1): Directory bread(block 33) failed [ 90.884084][ T5601] FAT-fs (loop1): Directory bread(block 34) failed [ 90.890601][ T5601] FAT-fs (loop1): Directory bread(block 35) failed [ 90.898097][ T5601] FAT-fs (loop1): Directory bread(block 36) failed [ 90.905277][ T5601] FAT-fs (loop1): Directory bread(block 37) failed [ 90.911845][ T5601] FAT-fs (loop1): Directory bread(block 38) failed [ 90.920051][ T5601] FAT-fs (loop1): Directory bread(block 39) failed [ 90.936019][ T5604] loop3: detected capacity change from 0 to 1024 [ 90.942503][ T5601] FAT-fs (loop1): Directory bread(block 40) failed [ 90.950326][ T5601] FAT-fs (loop1): Directory bread(block 41) failed [ 90.961487][ T5604] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.972480][ T5604] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.982937][ T5604] JBD2: no valid journal superblock found [ 90.988660][ T5604] EXT4-fs (loop3): Could not load journal inode [ 91.070438][ T5608] loop3: detected capacity change from 0 to 1024 [ 91.107987][ T5608] EXT4-fs: Ignoring removed orlov option [ 91.125059][ T5608] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 91.181664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.190467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.367342][ T5608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.473946][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.578657][ T5618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.611'. [ 91.956008][ T5631] serio: Serial port ptm0 [ 92.117490][ T5633] macvtap2: entered promiscuous mode [ 92.122873][ T5633] macvtap2: entered allmulticast mode [ 92.249698][ T5644] loop0: detected capacity change from 0 to 1024 [ 92.291706][ T5644] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 92.302643][ T5644] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 92.384453][ T5644] JBD2: no valid journal superblock found [ 92.390211][ T5644] EXT4-fs (loop0): Could not load journal inode [ 92.549637][ T5648] loop0: detected capacity change from 0 to 1024 [ 92.616244][ T5648] EXT4-fs: Ignoring removed orlov option [ 92.653209][ T5648] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 92.712536][ T5648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.748385][ T5665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.626'. [ 92.787206][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.818422][ T5643] cgroup: none used incorrectly [ 92.863032][ T5673] loop4: detected capacity change from 0 to 128 [ 92.879425][ T5673] FAT-fs (loop4): Directory bread(block 32) failed [ 92.886377][ T5673] FAT-fs (loop4): Directory bread(block 33) failed [ 92.893297][ T5673] FAT-fs (loop4): Directory bread(block 34) failed [ 92.899962][ T5673] FAT-fs (loop4): Directory bread(block 35) failed [ 92.907972][ T5673] FAT-fs (loop4): Directory bread(block 36) failed [ 92.920568][ T5673] FAT-fs (loop4): Directory bread(block 37) failed [ 92.929144][ T5673] FAT-fs (loop4): Directory bread(block 38) failed [ 92.936059][ T5673] FAT-fs (loop4): Directory bread(block 39) failed [ 92.943276][ T5673] FAT-fs (loop4): Directory bread(block 40) failed [ 92.950199][ T5673] FAT-fs (loop4): Directory bread(block 41) failed [ 92.990404][ T5683] serio: Serial port ptm1 [ 93.045473][ T5686] macvtap2: entered promiscuous mode [ 93.050803][ T5686] macvtap2: entered allmulticast mode [ 93.842852][ T5708] loop3: detected capacity change from 0 to 1024 [ 93.925187][ T5708] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.936189][ T5708] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 94.087382][ T5716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.643'. [ 94.120647][ T5708] JBD2: no valid journal superblock found [ 94.126452][ T5708] EXT4-fs (loop3): Could not load journal inode [ 94.430242][ T5725] serio: Serial port ptm0 [ 94.474716][ T5724] loop3: detected capacity change from 0 to 1024 [ 94.517259][ T5732] macvtap2: entered promiscuous mode [ 94.522624][ T5732] macvtap2: entered allmulticast mode [ 94.540735][ T5724] EXT4-fs: Ignoring removed orlov option [ 94.609587][ T5724] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 94.694904][ T5724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.752184][ T5710] cgroup: none used incorrectly [ 94.793948][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.928482][ T5758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.654'. [ 94.939245][ T5759] loop4: detected capacity change from 0 to 128 [ 94.951098][ T5759] FAT-fs (loop4): Directory bread(block 32) failed [ 94.973423][ T5759] FAT-fs (loop4): Directory bread(block 33) failed [ 94.980031][ T5759] FAT-fs (loop4): Directory bread(block 34) failed [ 94.986714][ T5759] FAT-fs (loop4): Directory bread(block 35) failed [ 94.993318][ T5759] FAT-fs (loop4): Directory bread(block 36) failed [ 94.999901][ T5759] FAT-fs (loop4): Directory bread(block 37) failed [ 95.006612][ T5759] FAT-fs (loop4): Directory bread(block 38) failed [ 95.013322][ T5759] FAT-fs (loop4): Directory bread(block 39) failed [ 95.020250][ T5759] FAT-fs (loop4): Directory bread(block 40) failed [ 95.028050][ T5759] FAT-fs (loop4): Directory bread(block 41) failed [ 95.111375][ T5768] serio: Serial port ptm1 [ 95.185603][ T5773] macvtap2: entered promiscuous mode [ 95.191020][ T5773] macvtap2: entered allmulticast mode [ 95.326936][ T5781] loop1: detected capacity change from 0 to 1024 [ 95.336693][ T5781] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.347814][ T5781] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 95.360780][ T5781] JBD2: no valid journal superblock found [ 95.366545][ T5781] EXT4-fs (loop1): Could not load journal inode [ 95.884884][ T5785] loop1: detected capacity change from 0 to 1024 [ 95.968348][ T5785] EXT4-fs: Ignoring removed orlov option [ 96.044494][ T5785] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.104541][ T5796] loop3: detected capacity change from 0 to 4096 [ 96.154184][ T5802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.666'. [ 96.170587][ T5796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.197395][ T5785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.270239][ T5796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.302050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.361099][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 96.361114][ T29] audit: type=1400 audit(1763496853.675:6662): avc: denied { add_name } for pid=5795 comm="syz.3.663" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.387948][ T29] audit: type=1400 audit(1763496853.675:6663): avc: denied { create } for pid=5795 comm="syz.3.663" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.408128][ T29] audit: type=1400 audit(1763496853.675:6664): avc: denied { append } for pid=5795 comm="syz.3.663" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.470070][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.882538][ T5809] cgroup: none used incorrectly [ 96.894393][ T29] audit: type=1400 audit(1763496853.825:6665): avc: denied { write open } for pid=5795 comm="syz.3.663" path="/146/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.918127][ T29] audit: type=1326 audit(1763496854.165:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 96.941501][ T29] audit: type=1326 audit(1763496854.165:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 96.956592][ T5823] serio: Serial port ptm0 [ 96.965056][ T29] audit: type=1326 audit(1763496854.185:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 96.992696][ T29] audit: type=1326 audit(1763496854.195:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 97.016076][ T29] audit: type=1326 audit(1763496854.195:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 97.039372][ T29] audit: type=1326 audit(1763496854.195:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 97.064744][ T5826] macvtap2: entered promiscuous mode [ 97.070125][ T5826] macvtap2: entered allmulticast mode [ 97.356817][ T5846] loop1: detected capacity change from 0 to 1024 [ 97.368354][ T5846] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.368518][ T5848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.678'. [ 97.379416][ T5846] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 97.401953][ T5846] JBD2: no valid journal superblock found [ 97.407843][ T5846] EXT4-fs (loop1): Could not load journal inode [ 97.407877][ T5849] loop4: detected capacity change from 0 to 128 [ 97.432713][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.443709][ T5849] FAT-fs (loop4): Directory bread(block 32) failed [ 97.452663][ T5849] FAT-fs (loop4): Directory bread(block 33) failed [ 97.491712][ T5849] FAT-fs (loop4): Directory bread(block 34) failed [ 97.501932][ T5849] FAT-fs (loop4): Directory bread(block 35) failed [ 97.518812][ T5849] FAT-fs (loop4): Directory bread(block 36) failed [ 97.528954][ T5849] FAT-fs (loop4): Directory bread(block 37) failed [ 97.546030][ T5849] FAT-fs (loop4): Directory bread(block 38) failed [ 97.561791][ T5849] FAT-fs (loop4): Directory bread(block 39) failed [ 97.571838][ T5854] loop1: detected capacity change from 0 to 1024 [ 97.573644][ T5849] FAT-fs (loop4): Directory bread(block 40) failed [ 97.617484][ T5849] FAT-fs (loop4): Directory bread(block 41) failed [ 97.638960][ T5854] EXT4-fs: Ignoring removed orlov option [ 97.670207][ T5854] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 97.719034][ T5854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.787352][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.112423][ T5874] serio: Serial port ptm0 [ 98.185331][ T5877] macvtap2: entered promiscuous mode [ 98.190700][ T5877] macvtap2: entered allmulticast mode [ 98.637731][ T5895] loop1: detected capacity change from 0 to 4096 [ 98.669641][ T5895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.773116][ T5895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.858727][ T5905] loop4: detected capacity change from 0 to 1024 [ 98.874373][ T5905] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.885334][ T5905] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.991880][ T5905] JBD2: no valid journal superblock found [ 98.997622][ T5905] EXT4-fs (loop4): Could not load journal inode [ 99.444308][ T5918] loop0: detected capacity change from 0 to 512 [ 99.451263][ T5918] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 99.501754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.684278][ T5922] loop4: detected capacity change from 0 to 1024 [ 99.720623][ T5892] cgroup: none used incorrectly [ 99.729281][ T5922] EXT4-fs: Ignoring removed orlov option [ 99.735796][ T5922] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 99.765555][ T5922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.840315][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.938080][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.948961][ T5933] loop4: detected capacity change from 0 to 128 [ 99.971955][ T5933] FAT-fs (loop4): Directory bread(block 32) failed [ 99.979787][ T5933] FAT-fs (loop4): Directory bread(block 33) failed [ 99.986814][ T5933] FAT-fs (loop4): Directory bread(block 34) failed [ 99.993583][ T5933] FAT-fs (loop4): Directory bread(block 35) failed [ 100.000245][ T5933] FAT-fs (loop4): Directory bread(block 36) failed [ 100.038726][ T5933] FAT-fs (loop4): Directory bread(block 37) failed [ 100.052076][ T5937] serio: Serial port ptm0 [ 100.062882][ T5933] FAT-fs (loop4): Directory bread(block 38) failed [ 100.080367][ T5933] FAT-fs (loop4): Directory bread(block 39) failed [ 100.088691][ T5933] FAT-fs (loop4): Directory bread(block 40) failed [ 100.095390][ T5933] FAT-fs (loop4): Directory bread(block 41) failed [ 100.115520][ T5947] macvtap2: entered promiscuous mode [ 100.120842][ T5947] macvtap2: entered allmulticast mode [ 100.922213][ T5969] loop3: detected capacity change from 0 to 4096 [ 100.930926][ T5971] loop2: detected capacity change from 0 to 1024 [ 100.992892][ T5969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.010164][ T5971] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 101.021102][ T5971] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 101.132444][ T5969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.175390][ T5971] JBD2: no valid journal superblock found [ 101.181234][ T5971] EXT4-fs (loop2): Could not load journal inode [ 101.208722][ T5959] cgroup: none used incorrectly [ 101.456407][ T5984] loop2: detected capacity change from 0 to 1024 [ 101.499153][ T5984] EXT4-fs: Ignoring removed orlov option [ 101.546401][ T5984] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 101.630766][ T5984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.775767][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.937421][ T5996] loop0: detected capacity change from 0 to 512 [ 101.944356][ T5996] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 101.963871][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.209515][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 102.209533][ T29] audit: type=1326 audit(1763496859.535:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.240881][ T29] audit: type=1326 audit(1763496859.535:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.264502][ T29] audit: type=1326 audit(1763496859.535:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.287856][ T29] audit: type=1326 audit(1763496859.535:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.311367][ T29] audit: type=1326 audit(1763496859.535:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.334813][ T29] audit: type=1326 audit(1763496859.535:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.358169][ T29] audit: type=1326 audit(1763496859.535:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.381654][ T29] audit: type=1326 audit(1763496859.535:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.405127][ T29] audit: type=1326 audit(1763496859.545:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.428429][ T29] audit: type=1326 audit(1763496859.545:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad7f6f6c9 code=0x7ffc0000 [ 102.556276][ T6011] macvtap2: entered promiscuous mode [ 102.561686][ T6011] macvtap2: entered allmulticast mode [ 102.634796][ T6021] loop4: detected capacity change from 0 to 128 [ 102.648957][ T6021] FAT-fs (loop4): Directory bread(block 32) failed [ 102.664478][ T6021] FAT-fs (loop4): Directory bread(block 33) failed [ 102.683895][ T6021] FAT-fs (loop4): Directory bread(block 34) failed [ 102.691807][ T6021] FAT-fs (loop4): Directory bread(block 35) failed [ 102.698676][ T6021] FAT-fs (loop4): Directory bread(block 36) failed [ 102.741658][ T6021] FAT-fs (loop4): Directory bread(block 37) failed [ 102.748406][ T6021] FAT-fs (loop4): Directory bread(block 38) failed [ 102.777054][ T6027] loop0: detected capacity change from 0 to 4096 [ 102.783468][ T6021] FAT-fs (loop4): Directory bread(block 39) failed [ 102.790003][ T6021] FAT-fs (loop4): Directory bread(block 40) failed [ 102.804827][ T6030] loop3: detected capacity change from 0 to 1024 [ 102.821930][ T6027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.836053][ T6030] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.846976][ T6021] FAT-fs (loop4): Directory bread(block 41) failed [ 102.846981][ T6030] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.856403][ T6030] JBD2: no valid journal superblock found [ 102.868890][ T6030] EXT4-fs (loop3): Could not load journal inode [ 102.912406][ T6027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.000553][ T6034] loop3: detected capacity change from 0 to 1024 [ 103.237208][ T6034] EXT4-fs: Ignoring removed orlov option [ 103.474094][ T6034] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 103.748122][ T6034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.842215][ T6029] cgroup: none used incorrectly [ 103.889280][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.123034][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.468288][ T6069] loop0: detected capacity change from 0 to 512 [ 104.475435][ T6069] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 104.563662][ T6074] macvtap2: entered promiscuous mode [ 104.569005][ T6074] macvtap2: entered allmulticast mode [ 104.954573][ T6087] loop1: detected capacity change from 0 to 1024 [ 104.974578][ T6087] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.985588][ T6087] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.005766][ T6087] JBD2: no valid journal superblock found [ 105.011731][ T6087] EXT4-fs (loop1): Could not load journal inode [ 105.082709][ T6090] loop2: detected capacity change from 0 to 128 [ 105.092872][ T6090] FAT-fs (loop2): Directory bread(block 32) failed [ 105.099396][ T6090] FAT-fs (loop2): Directory bread(block 33) failed [ 105.123396][ T6090] FAT-fs (loop2): Directory bread(block 34) failed [ 105.185732][ T6092] loop1: detected capacity change from 0 to 1024 [ 105.197188][ T6090] FAT-fs (loop2): Directory bread(block 35) failed [ 105.221943][ T6090] FAT-fs (loop2): Directory bread(block 36) failed [ 105.251214][ T6092] EXT4-fs: Ignoring removed orlov option [ 105.265112][ T6092] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 105.283192][ T6090] FAT-fs (loop2): Directory bread(block 37) failed [ 105.309069][ T6090] FAT-fs (loop2): Directory bread(block 38) failed [ 105.322361][ T6090] FAT-fs (loop2): Directory bread(block 39) failed [ 105.329279][ T6090] FAT-fs (loop2): Directory bread(block 40) failed [ 105.336292][ T6090] FAT-fs (loop2): Directory bread(block 41) failed [ 105.422276][ T6092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.446273][ T6110] loop4: detected capacity change from 0 to 4096 [ 105.472494][ T6110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.489745][ T6110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.685491][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.955483][ T6097] cgroup: none used incorrectly [ 106.535286][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.667831][ T6137] macvtap2: entered promiscuous mode [ 106.673228][ T6137] macvtap2: entered allmulticast mode [ 107.057801][ T6150] loop4: detected capacity change from 0 to 512 [ 107.064767][ T6150] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 107.493728][ T6164] loop0: detected capacity change from 0 to 128 [ 107.516804][ T6164] FAT-fs (loop0): Directory bread(block 32) failed [ 107.523400][ T6164] FAT-fs (loop0): Directory bread(block 33) failed [ 107.530131][ T6164] FAT-fs (loop0): Directory bread(block 34) failed [ 107.537308][ T6164] FAT-fs (loop0): Directory bread(block 35) failed [ 107.543897][ T6164] FAT-fs (loop0): Directory bread(block 36) failed [ 107.550461][ T6164] FAT-fs (loop0): Directory bread(block 37) failed [ 107.557275][ T6164] FAT-fs (loop0): Directory bread(block 38) failed [ 107.563890][ T6164] FAT-fs (loop0): Directory bread(block 39) failed [ 107.570476][ T6164] FAT-fs (loop0): Directory bread(block 40) failed [ 107.585775][ T6166] loop2: detected capacity change from 0 to 1024 [ 107.592224][ T6164] FAT-fs (loop0): Directory bread(block 41) failed [ 107.602488][ T6166] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.613458][ T6166] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 107.643879][ T6166] JBD2: no valid journal superblock found [ 107.649696][ T6166] EXT4-fs (loop2): Could not load journal inode [ 107.755320][ T6173] loop2: detected capacity change from 0 to 1024 [ 107.783427][ T6173] EXT4-fs: Ignoring removed orlov option [ 107.844801][ T6173] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.903615][ T6173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.955665][ T6185] loop3: detected capacity change from 0 to 4096 [ 107.965535][ T6185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.979807][ T6185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.997675][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.047469][ T6180] cgroup: none used incorrectly [ 108.056675][ T6188] macvtap2: entered promiscuous mode [ 108.062040][ T6188] macvtap2: entered allmulticast mode [ 108.212420][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 108.212435][ T29] audit: type=1326 audit(1763496865.545:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.4.768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcad7f6f6c9 code=0x0 [ 108.978260][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.116915][ T6220] loop4: detected capacity change from 0 to 512 [ 110.123891][ T6220] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 110.210173][ T6228] loop1: detected capacity change from 0 to 1024 [ 110.222069][ T6228] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.233074][ T6228] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 110.289770][ T6228] JBD2: no valid journal superblock found [ 110.295633][ T6228] EXT4-fs (loop1): Could not load journal inode [ 110.345137][ T6230] macvtap2: entered promiscuous mode [ 110.350507][ T6230] macvtap2: entered allmulticast mode [ 110.374245][ T29] audit: type=1326 audit(1763496867.705:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 110.397807][ T29] audit: type=1326 audit(1763496867.705:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 110.421351][ T29] audit: type=1326 audit(1763496867.705:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 110.444693][ T29] audit: type=1326 audit(1763496867.705:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 110.527226][ T6237] loop1: detected capacity change from 0 to 1024 [ 110.534615][ T29] audit: type=1326 audit(1763496867.705:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 110.558236][ T29] audit: type=1326 audit(1763496867.705:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 110.582121][ T29] audit: type=1326 audit(1763496867.805:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 110.605539][ T29] audit: type=1326 audit(1763496867.805:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 110.629094][ T29] audit: type=1326 audit(1763496867.815:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 110.656134][ T6237] EXT4-fs: Ignoring removed orlov option [ 110.681910][ T6237] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 110.752534][ T6252] loop4: detected capacity change from 0 to 128 [ 110.779792][ T6232] cgroup: none used incorrectly [ 110.784900][ T6252] FAT-fs (loop4): Directory bread(block 32) failed [ 110.791516][ T6252] FAT-fs (loop4): Directory bread(block 33) failed [ 110.798231][ T6252] FAT-fs (loop4): Directory bread(block 34) failed [ 110.807699][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.810050][ T6252] FAT-fs (loop4): Directory bread(block 35) failed [ 110.830958][ T6252] FAT-fs (loop4): Directory bread(block 36) failed [ 110.842714][ T6252] FAT-fs (loop4): Directory bread(block 37) failed [ 110.849385][ T6252] FAT-fs (loop4): Directory bread(block 38) failed [ 110.856169][ T6252] FAT-fs (loop4): Directory bread(block 39) failed [ 110.862899][ T6252] FAT-fs (loop4): Directory bread(block 40) failed [ 110.869940][ T6252] FAT-fs (loop4): Directory bread(block 41) failed [ 110.871020][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.930994][ T6262] loop1: detected capacity change from 0 to 4096 [ 110.939089][ T6262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.014437][ T6262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.905482][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.973002][ T6284] macvtap2: entered promiscuous mode [ 111.978344][ T6284] macvtap2: entered allmulticast mode [ 112.547315][ T6297] loop1: detected capacity change from 0 to 512 [ 112.554323][ T6297] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 112.936918][ T6310] loop2: detected capacity change from 0 to 1024 [ 112.951119][ T6310] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.962586][ T6310] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 112.973455][ T6310] JBD2: no valid journal superblock found [ 112.979228][ T6310] EXT4-fs (loop2): Could not load journal inode [ 113.007115][ T6316] loop3: detected capacity change from 0 to 128 [ 113.052462][ T6316] FAT-fs (loop3): Directory bread(block 32) failed [ 113.059008][ T6316] FAT-fs (loop3): Directory bread(block 33) failed [ 113.066045][ T6316] FAT-fs (loop3): Directory bread(block 34) failed [ 113.068290][ T6318] loop2: detected capacity change from 0 to 1024 [ 113.072683][ T6316] FAT-fs (loop3): Directory bread(block 35) failed [ 113.072718][ T6316] FAT-fs (loop3): Directory bread(block 36) failed [ 113.072759][ T6316] FAT-fs (loop3): Directory bread(block 37) failed [ 113.098743][ T6316] FAT-fs (loop3): Directory bread(block 38) failed [ 113.105290][ T6316] FAT-fs (loop3): Directory bread(block 39) failed [ 113.112021][ T6316] FAT-fs (loop3): Directory bread(block 40) failed [ 113.118580][ T6316] FAT-fs (loop3): Directory bread(block 41) failed [ 113.129363][ T6318] EXT4-fs: Ignoring removed orlov option [ 113.143422][ T6318] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 113.176173][ T6318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.225517][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.305766][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 113.305780][ T29] audit: type=1326 audit(1763496870.635:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 113.354277][ T6329] loop2: detected capacity change from 0 to 4096 [ 113.361070][ T6329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.371173][ T6317] cgroup: none used incorrectly [ 113.372327][ T29] audit: type=1326 audit(1763496870.635:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 113.399403][ T29] audit: type=1326 audit(1763496870.635:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 113.422629][ T29] audit: type=1326 audit(1763496870.635:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 113.445929][ T29] audit: type=1326 audit(1763496870.635:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 113.469402][ T29] audit: type=1326 audit(1763496870.635:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 113.492786][ T29] audit: type=1326 audit(1763496870.635:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 113.516229][ T29] audit: type=1326 audit(1763496870.635:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 113.539583][ T29] audit: type=1326 audit(1763496870.635:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f179a8115e7 code=0x7ffc0000 [ 113.541328][ T6329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.562910][ T29] audit: type=1326 audit(1763496870.635:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f179a81155c code=0x7ffc0000 [ 113.843181][ T6343] loop1: detected capacity change from 0 to 512 [ 113.849844][ T6343] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 114.114699][ T6347] netlink: 56 bytes leftover after parsing attributes in process `syz.4.805'. [ 114.294588][ T6362] loop3: detected capacity change from 0 to 1024 [ 114.427340][ T6364] loop4: detected capacity change from 0 to 512 [ 114.434363][ T6364] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 114.452081][ T6362] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.463272][ T6362] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.662693][ T6362] JBD2: no valid journal superblock found [ 114.668492][ T6362] EXT4-fs (loop3): Could not load journal inode [ 114.806883][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.853518][ T6368] loop3: detected capacity change from 0 to 1024 [ 114.860483][ T6368] EXT4-fs: Ignoring removed orlov option [ 114.883362][ T6368] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 114.944734][ T6368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.074977][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.188276][ T6366] cgroup: none used incorrectly [ 115.289706][ T6395] loop1: detected capacity change from 0 to 128 [ 115.299556][ T6395] FAT-fs (loop1): Directory bread(block 32) failed [ 115.315682][ T6395] FAT-fs (loop1): Directory bread(block 33) failed [ 115.322571][ T6395] FAT-fs (loop1): Directory bread(block 34) failed [ 115.329293][ T6395] FAT-fs (loop1): Directory bread(block 35) failed [ 115.336048][ T6395] FAT-fs (loop1): Directory bread(block 36) failed [ 115.344741][ T6395] FAT-fs (loop1): Directory bread(block 37) failed [ 115.351403][ T6395] FAT-fs (loop1): Directory bread(block 38) failed [ 115.358361][ T6395] FAT-fs (loop1): Directory bread(block 39) failed [ 115.365008][ T6395] FAT-fs (loop1): Directory bread(block 40) failed [ 115.372065][ T6395] FAT-fs (loop1): Directory bread(block 41) failed [ 115.595970][ T6408] loop3: detected capacity change from 0 to 512 [ 115.602959][ T6408] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 115.933699][ T6413] loop0: detected capacity change from 0 to 4096 [ 115.942084][ T6413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.958691][ T6413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.043335][ T6420] loop4: detected capacity change from 0 to 1024 [ 116.067876][ T6420] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.079168][ T6420] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.115644][ T6420] JBD2: no valid journal superblock found [ 116.121477][ T6420] EXT4-fs (loop4): Could not load journal inode [ 116.171958][ T6420] loop4: detected capacity change from 0 to 1024 [ 116.191136][ T6420] EXT4-fs: Ignoring removed orlov option [ 116.238678][ T6420] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 116.304990][ T6420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.373735][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.508224][ T6439] loop1: detected capacity change from 0 to 512 [ 116.515304][ T6439] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 116.844553][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.966085][ T6454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.998159][ T6454] SELinux: failed to load policy [ 117.051115][ T6458] FAULT_INJECTION: forcing a failure. [ 117.051115][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.064274][ T6458] CPU: 1 UID: 0 PID: 6458 Comm: syz.2.837 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.064299][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.064309][ T6458] Call Trace: [ 117.064317][ T6458] [ 117.064324][ T6458] __dump_stack+0x1d/0x30 [ 117.064352][ T6458] dump_stack_lvl+0xe8/0x140 [ 117.064446][ T6458] dump_stack+0x15/0x1b [ 117.064460][ T6458] should_fail_ex+0x265/0x280 [ 117.064488][ T6458] should_fail+0xb/0x20 [ 117.064501][ T6458] should_fail_usercopy+0x1a/0x20 [ 117.064538][ T6458] _copy_from_iter+0xd2/0xe80 [ 117.064557][ T6458] ? should_failslab+0x8c/0xb0 [ 117.064582][ T6458] ? __build_skb_around+0x1ab/0x200 [ 117.064664][ T6458] ? __build_skb+0x59/0x70 [ 117.064684][ T6458] ? is_vmalloc_addr+0x37/0x90 [ 117.064707][ T6458] netlink_sendmsg+0x471/0x6b0 [ 117.064790][ T6458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.064806][ T6458] __sock_sendmsg+0x145/0x180 [ 117.064847][ T6458] sock_write_iter+0x1a7/0x1f0 [ 117.064868][ T6458] ? __pfx_sock_write_iter+0x10/0x10 [ 117.064885][ T6458] vfs_write+0x52a/0x960 [ 117.064909][ T6458] ksys_write+0xda/0x1a0 [ 117.064988][ T6458] __x64_sys_write+0x40/0x50 [ 117.065097][ T6458] x64_sys_call+0x2802/0x3000 [ 117.065115][ T6458] do_syscall_64+0xd2/0x200 [ 117.065202][ T6458] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.065225][ T6458] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.065250][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.065303][ T6458] RIP: 0033:0x7f22e2b2f6c9 [ 117.065317][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.065332][ T6458] RSP: 002b:00007f22e158f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.065348][ T6458] RAX: ffffffffffffffda RBX: 00007f22e2d85fa0 RCX: 00007f22e2b2f6c9 [ 117.065368][ T6458] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 117.065378][ T6458] RBP: 00007f22e158f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.065388][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.065399][ T6458] R13: 00007f22e2d86038 R14: 00007f22e2d85fa0 R15: 00007ffd667d1ee8 [ 117.065414][ T6458] [ 117.334861][ T6430] cgroup: none used incorrectly [ 117.389957][ T6463] 9p: Unknown access argument : -22 [ 117.443257][ T6465] FAULT_INJECTION: forcing a failure. [ 117.443257][ T6465] name failslab, interval 1, probability 0, space 0, times 0 [ 117.456011][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: syz.2.840 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.456040][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.456053][ T6465] Call Trace: [ 117.456089][ T6465] [ 117.456097][ T6465] __dump_stack+0x1d/0x30 [ 117.456173][ T6465] dump_stack_lvl+0xe8/0x140 [ 117.456194][ T6465] dump_stack+0x15/0x1b [ 117.456212][ T6465] should_fail_ex+0x265/0x280 [ 117.456254][ T6465] ? __se_sys_mount+0xef/0x2e0 [ 117.456312][ T6465] should_failslab+0x8c/0xb0 [ 117.456340][ T6465] __kmalloc_cache_noprof+0x4c/0x4a0 [ 117.456366][ T6465] ? memdup_user+0x99/0xd0 [ 117.456470][ T6465] __se_sys_mount+0xef/0x2e0 [ 117.456494][ T6465] ? fput+0x8f/0xc0 [ 117.456512][ T6465] ? ksys_write+0x192/0x1a0 [ 117.456534][ T6465] __x64_sys_mount+0x67/0x80 [ 117.456566][ T6465] x64_sys_call+0x2b51/0x3000 [ 117.456623][ T6465] do_syscall_64+0xd2/0x200 [ 117.456649][ T6465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.456672][ T6465] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.456777][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.456800][ T6465] RIP: 0033:0x7f22e2b2f6c9 [ 117.456844][ T6465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.456941][ T6465] RSP: 002b:00007f22e158f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.456958][ T6465] RAX: ffffffffffffffda RBX: 00007f22e2d85fa0 RCX: 00007f22e2b2f6c9 [ 117.456969][ T6465] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 117.457028][ T6465] RBP: 00007f22e158f090 R08: 0000200000000440 R09: 0000000000000000 [ 117.457038][ T6465] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 117.457049][ T6465] R13: 00007f22e2d86038 R14: 00007f22e2d85fa0 R15: 00007ffd667d1ee8 [ 117.457115][ T6465] [ 117.647443][ T6468] loop4: detected capacity change from 0 to 512 [ 117.696962][ T6472] netlink: 'syz.3.842': attribute type 39 has an invalid length. [ 117.730228][ T6468] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.841: inode has both inline data and extents flags [ 117.753799][ T6468] EXT4-fs (loop4): get root inode failed [ 117.759479][ T6468] EXT4-fs (loop4): mount failed [ 117.849914][ T6481] loop4: detected capacity change from 0 to 1024 [ 117.863052][ T6481] ext4: Bad value for 'max_dir_size_kb' [ 117.935495][ T6487] loop0: detected capacity change from 0 to 128 [ 117.962765][ T6487] FAT-fs (loop0): Directory bread(block 32) failed [ 117.977033][ T6487] FAT-fs (loop0): Directory bread(block 33) failed [ 118.001909][ C0] hrtimer: interrupt took 38042 ns [ 118.007775][ T6487] FAT-fs (loop0): Directory bread(block 34) failed [ 118.023893][ T6487] FAT-fs (loop0): Directory bread(block 35) failed [ 118.041490][ T6487] FAT-fs (loop0): Directory bread(block 36) failed [ 118.062798][ T6487] FAT-fs (loop0): Directory bread(block 37) failed [ 118.088346][ T6487] FAT-fs (loop0): Directory bread(block 38) failed [ 118.111073][ T6487] FAT-fs (loop0): Directory bread(block 39) failed [ 118.121722][ T6487] FAT-fs (loop0): Directory bread(block 40) failed [ 118.133488][ T6487] FAT-fs (loop0): Directory bread(block 41) failed [ 118.353064][ T6500] SELinux: failed to load policy [ 118.394258][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 118.394272][ T29] audit: type=1326 audit(1763496875.725:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.451862][ T29] audit: type=1326 audit(1763496875.755:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.475435][ T29] audit: type=1326 audit(1763496875.765:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.499437][ T29] audit: type=1326 audit(1763496875.765:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.514270][ T6506] loop2: detected capacity change from 0 to 1024 [ 118.522888][ T29] audit: type=1326 audit(1763496875.765:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.552661][ T29] audit: type=1326 audit(1763496875.765:7624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.576093][ T29] audit: type=1326 audit(1763496875.765:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.599470][ T29] audit: type=1326 audit(1763496875.765:7626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.600217][ T6506] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 118.622817][ T29] audit: type=1326 audit(1763496875.765:7627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.633795][ T6506] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 118.657005][ T29] audit: type=1326 audit(1763496875.765:7628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 118.690574][ T6506] JBD2: no valid journal superblock found [ 118.696378][ T6506] EXT4-fs (loop2): Could not load journal inode [ 118.747425][ T6505] loop2: detected capacity change from 0 to 1024 [ 118.772296][ T6505] EXT4-fs: Ignoring removed orlov option [ 118.803020][ T6505] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 118.823441][ T6520] netlink: 'syz.0.857': attribute type 39 has an invalid length. [ 118.833254][ T6505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.884207][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.588407][ T6538] SELinux: failed to load policy [ 119.712406][ T6532] cgroup: none used incorrectly [ 119.792659][ T6545] 9p: Unknown access argument : -22 [ 119.901616][ T3495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.901706][ T6486] Bluetooth: hci0: command 0x1003 tx timeout [ 120.290904][ T6557] loop2: detected capacity change from 0 to 128 [ 120.319947][ T6557] FAT-fs (loop2): Directory bread(block 32) failed [ 120.342446][ T6557] FAT-fs (loop2): Directory bread(block 33) failed [ 120.356690][ T6557] FAT-fs (loop2): Directory bread(block 34) failed [ 120.373926][ T6557] FAT-fs (loop2): Directory bread(block 35) failed [ 120.385649][ T6557] FAT-fs (loop2): Directory bread(block 36) failed [ 120.392261][ T6557] FAT-fs (loop2): Directory bread(block 37) failed [ 120.398886][ T6557] FAT-fs (loop2): Directory bread(block 38) failed [ 120.407048][ T6557] FAT-fs (loop2): Directory bread(block 39) failed [ 120.413767][ T6557] FAT-fs (loop2): Directory bread(block 40) failed [ 120.420342][ T6557] FAT-fs (loop2): Directory bread(block 41) failed [ 120.428690][ T6559] loop3: detected capacity change from 0 to 1024 [ 120.451651][ T6559] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.462656][ T6559] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 120.501817][ T6559] JBD2: no valid journal superblock found [ 120.507580][ T6559] EXT4-fs (loop3): Could not load journal inode [ 120.583987][ T6559] loop3: detected capacity change from 0 to 1024 [ 120.590944][ T6559] EXT4-fs: Ignoring removed orlov option [ 120.612527][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'. [ 120.622617][ T6559] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 120.658543][ T6559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.729093][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.860780][ T6583] SELinux: failed to load policy [ 121.150117][ T6599] loop1: detected capacity change from 0 to 1024 [ 121.160881][ T6599] ext4: Bad value for 'max_dir_size_kb' [ 121.446189][ T6606] loop2: detected capacity change from 0 to 1024 [ 121.505423][ T6606] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 121.516428][ T6606] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 121.635643][ T6606] JBD2: no valid journal superblock found [ 121.641492][ T6606] EXT4-fs (loop2): Could not load journal inode [ 121.933467][ T6592] cgroup: none used incorrectly [ 121.942534][ T6612] loop2: detected capacity change from 0 to 1024 [ 121.975803][ T6612] EXT4-fs: Ignoring removed orlov option [ 122.021759][ T6612] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.063767][ T6612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.171292][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.318514][ T6630] SELinux: failed to load policy [ 122.446687][ T6639] 9p: Unknown access argument : -22 [ 122.669097][ T6641] loop2: detected capacity change from 0 to 512 [ 122.675862][ T6641] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 122.852843][ T6646] loop0: detected capacity change from 0 to 128 [ 122.886116][ T6646] FAT-fs (loop0): Directory bread(block 32) failed [ 122.933480][ T6646] FAT-fs (loop0): Directory bread(block 33) failed [ 122.963461][ T6646] FAT-fs (loop0): Directory bread(block 34) failed [ 122.987362][ T6646] FAT-fs (loop0): Directory bread(block 35) failed [ 123.011695][ T6646] FAT-fs (loop0): Directory bread(block 36) failed [ 123.018265][ T6646] FAT-fs (loop0): Directory bread(block 37) failed [ 123.031792][ T6646] FAT-fs (loop0): Directory bread(block 38) failed [ 123.038653][ T6646] FAT-fs (loop0): Directory bread(block 39) failed [ 123.047443][ T6646] FAT-fs (loop0): Directory bread(block 40) failed [ 123.054117][ T6646] FAT-fs (loop0): Directory bread(block 41) failed [ 123.204899][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.891'. [ 123.261604][ T3495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.267933][ T6486] Bluetooth: hci0: command 0x1003 tx timeout [ 123.285462][ T6652] loop4: detected capacity change from 0 to 4096 [ 123.300821][ T6652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.315806][ T6652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.428680][ T6660] loop2: detected capacity change from 0 to 1024 [ 123.449317][ T6660] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.460263][ T6660] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.497883][ T6660] JBD2: no valid journal superblock found [ 123.503784][ T6660] EXT4-fs (loop2): Could not load journal inode [ 123.589581][ T6668] loop2: detected capacity change from 0 to 1024 [ 123.596466][ T6668] EXT4-fs: Ignoring removed orlov option [ 123.602210][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 123.602224][ T29] audit: type=1400 audit(1763496880.915:7974): avc: denied { ioctl } for pid=6659 comm="syz.2.895" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.637091][ T29] audit: type=1326 audit(1763496880.965:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 123.660622][ T29] audit: type=1326 audit(1763496880.965:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 123.684087][ T29] audit: type=1326 audit(1763496880.965:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 123.707729][ T29] audit: type=1326 audit(1763496880.965:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 123.731178][ T29] audit: type=1326 audit(1763496880.965:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 123.754582][ T29] audit: type=1326 audit(1763496880.965:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 123.778287][ T29] audit: type=1326 audit(1763496880.965:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 123.802008][ T29] audit: type=1326 audit(1763496880.965:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 123.887282][ T6668] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 123.940524][ T29] audit: type=1326 audit(1763496880.965:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fa971ebf6c9 code=0x7ffc0000 [ 124.032039][ T6668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.151983][ T6683] loop1: detected capacity change from 0 to 512 [ 124.158977][ T6683] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 124.292363][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.315946][ T6685] netdevsim netdevsim0: Direct firmware load for $ failed with error -2 [ 124.513950][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.605108][ T6696] SELinux: failed to load policy [ 124.616406][ T6693] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 124.703276][ T6702] netlink: 'syz.2.909': attribute type 39 has an invalid length. [ 124.778459][ T6708] loop3: detected capacity change from 0 to 1024 [ 124.797966][ T6708] ext4: Bad value for 'max_dir_size_kb' [ 124.811764][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.911467][ T6716] loop2: detected capacity change from 0 to 1024 [ 124.928426][ T6716] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.939440][ T6716] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.951698][ T6716] JBD2: no valid journal superblock found [ 124.957575][ T6716] EXT4-fs (loop2): Could not load journal inode [ 125.016826][ T6698] cgroup: none used incorrectly [ 125.043968][ T6719] loop2: detected capacity change from 0 to 1024 [ 125.064162][ T6719] EXT4-fs: Ignoring removed orlov option [ 125.085676][ T6719] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 125.117897][ T6719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.161710][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.204705][ T6727] loop2: detected capacity change from 0 to 4096 [ 125.218076][ T6727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.241535][ T6727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.286120][ T6729] netdevsim netdevsim0: Direct firmware load for $ failed with error -2 [ 125.338161][ T6710] cgroup: none used incorrectly [ 125.703727][ T6752] loop4: detected capacity change from 0 to 512 [ 125.710740][ T6752] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 125.755276][ T6754] netlink: 'syz.0.924': attribute type 39 has an invalid length. [ 126.063669][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.112775][ T6486] Bluetooth: hci0: command 0x1003 tx timeout [ 127.121709][ T3495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.793707][ T6768] cgroup: none used incorrectly [ 127.968581][ T6775] loop4: detected capacity change from 0 to 512 [ 127.975286][ T6775] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 128.402665][ T6796] netlink: 'syz.4.937': attribute type 39 has an invalid length. [ 128.606171][ T6801] loop3: detected capacity change from 0 to 4096 [ 128.622762][ T6801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.660222][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.688152][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 128.688168][ T29] audit: type=1400 audit(1763496886.015:8236): avc: denied { block_suspend } for pid=6805 comm="syz.4.941" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.799232][ T29] audit: type=1400 audit(1763496886.055:8237): avc: denied { remount } for pid=6805 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.819138][ T29] audit: type=1400 audit(1763496886.055:8238): avc: denied { mount } for pid=6800 comm="syz.3.939" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 128.840911][ T29] audit: type=1400 audit(1763496886.055:8239): avc: denied { add_name } for pid=6800 comm="syz.3.939" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.861623][ T29] audit: type=1400 audit(1763496886.055:8240): avc: denied { create } for pid=6800 comm="syz.3.939" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.881820][ T29] audit: type=1400 audit(1763496886.065:8241): avc: denied { append } for pid=6800 comm="syz.3.939" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.904003][ T29] audit: type=1400 audit(1763496886.065:8242): avc: denied { open } for pid=6800 comm="syz.3.939" path="/199/file0/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.927317][ T29] audit: type=1400 audit(1763496886.075:8243): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.947479][ T29] audit: type=1326 audit(1763496886.115:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 128.970804][ T29] audit: type=1326 audit(1763496886.115:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.2.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 129.074587][ T6816] loop4: detected capacity change from 0 to 1024 [ 129.123832][ T6816] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 129.134832][ T6816] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 129.185112][ T6816] JBD2: no valid journal superblock found [ 129.190977][ T6816] EXT4-fs (loop4): Could not load journal inode [ 129.410050][ T6826] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 129.458967][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.492662][ T6816] loop4: detected capacity change from 0 to 1024 [ 129.502738][ T6816] EXT4-fs: Ignoring removed orlov option [ 129.509757][ T6816] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 129.546879][ T6816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.594743][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.751583][ T6843] loop3: detected capacity change from 0 to 512 [ 129.758537][ T6843] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 130.128705][ T6851] netlink: 'syz.4.952': attribute type 39 has an invalid length. [ 130.314138][ T6869] loop1: detected capacity change from 0 to 4096 [ 130.321078][ T6869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.331760][ T6869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.407800][ T6875] loop0: detected capacity change from 0 to 1024 [ 130.421459][ T6875] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.432425][ T6875] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 130.460954][ T6875] JBD2: no valid journal superblock found [ 130.466808][ T6875] EXT4-fs (loop0): Could not load journal inode [ 130.577288][ T6881] loop0: detected capacity change from 0 to 1024 [ 130.612739][ T6881] EXT4-fs: Ignoring removed orlov option [ 130.647170][ T6881] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 130.669413][ T6881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.737906][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.738880][ T6891] netlink: 'syz.3.964': attribute type 39 has an invalid length. [ 131.118950][ T6915] loop2: detected capacity change from 0 to 1024 [ 131.139563][ T6915] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 131.150580][ T6915] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 131.169672][ T6915] JBD2: no valid journal superblock found [ 131.175561][ T6915] EXT4-fs (loop2): Could not load journal inode [ 131.217737][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.227289][ T6919] netlink: 'syz.4.977': attribute type 39 has an invalid length. [ 131.305966][ T6923] loop2: detected capacity change from 0 to 1024 [ 131.329465][ T6923] EXT4-fs: Ignoring removed orlov option [ 131.414078][ T6923] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 131.486282][ T6923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.556767][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.710552][ T6931] cgroup: none used incorrectly [ 131.875674][ T6960] netlink: 'syz.1.989': attribute type 39 has an invalid length. [ 132.078713][ T6978] loop0: detected capacity change from 0 to 1024 [ 132.086329][ T6975] loop1: detected capacity change from 0 to 1024 [ 132.104934][ T6978] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.115936][ T6978] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.131787][ T6975] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.142863][ T6975] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.145219][ T6978] JBD2: no valid journal superblock found [ 132.158242][ T6978] EXT4-fs (loop0): Could not load journal inode [ 132.174924][ T6975] JBD2: no valid journal superblock found [ 132.180764][ T6975] EXT4-fs (loop1): Could not load journal inode [ 132.256379][ T6985] loop0: detected capacity change from 0 to 1024 [ 132.265588][ T6985] EXT4-fs: Ignoring removed orlov option [ 132.305426][ T6985] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 132.339592][ T6989] loop1: detected capacity change from 0 to 1024 [ 132.356653][ T6989] EXT4-fs: Ignoring removed orlov option [ 132.386839][ T6985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.399797][ T6989] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 132.436533][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.437413][ T6989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.534320][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.563049][ T7005] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 132.593942][ T7009] loop3: detected capacity change from 0 to 1024 [ 132.604090][ T7009] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.615091][ T7009] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.630776][ T7009] JBD2: no valid journal superblock found [ 132.636653][ T7009] EXT4-fs (loop3): Could not load journal inode [ 132.676294][ T6984] cgroup: none used incorrectly [ 132.736236][ T7013] loop3: detected capacity change from 0 to 1024 [ 132.743179][ T7013] EXT4-fs: Ignoring removed orlov option [ 132.749608][ T7013] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 132.780314][ T7013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.798226][ T7020] loop1: detected capacity change from 0 to 1024 [ 132.820265][ T7020] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.831275][ T7020] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.842268][ T7020] JBD2: no valid journal superblock found [ 132.848118][ T7020] EXT4-fs (loop1): Could not load journal inode [ 132.939740][ T7026] loop1: detected capacity change from 0 to 1024 [ 132.946809][ T7026] EXT4-fs: Ignoring removed orlov option [ 132.968328][ T7026] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 132.993917][ T7026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.021413][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.076468][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.297426][ T7049] loop1: detected capacity change from 0 to 1024 [ 133.366875][ T7049] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 133.377869][ T7049] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 133.382810][ T7052] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 133.426377][ T7049] JBD2: no valid journal superblock found [ 133.432212][ T7049] EXT4-fs (loop1): Could not load journal inode [ 133.633605][ T7061] loop1: detected capacity change from 0 to 1024 [ 133.644019][ T7061] EXT4-fs: Ignoring removed orlov option [ 133.729968][ T29] kauditd_printk_skb: 1127 callbacks suppressed [ 133.729984][ T29] audit: type=1400 audit(1763496891.055:9349): avc: denied { write } for pid=7057 comm="syz.0.1015" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 133.854108][ T7061] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 133.887903][ T7069] loop4: detected capacity change from 0 to 1024 [ 133.913120][ T7069] ext4: Bad value for 'max_dir_size_kb' [ 133.988078][ T7061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.671608][ T29] audit: type=1326 audit(1763496891.995:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 134.695089][ T29] audit: type=1326 audit(1763496891.995:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 134.718652][ T29] audit: type=1326 audit(1763496891.995:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 134.742057][ T29] audit: type=1326 audit(1763496891.995:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 134.765647][ T29] audit: type=1326 audit(1763496891.995:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 134.789189][ T29] audit: type=1326 audit(1763496891.995:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 134.812761][ T29] audit: type=1326 audit(1763496891.995:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 134.836208][ T29] audit: type=1326 audit(1763496891.995:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 134.859688][ T29] audit: type=1326 audit(1763496891.995:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7076 comm="syz.2.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f22e2b2f6c9 code=0x7ffc0000 [ 134.921983][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.973241][ T7078] loop3: detected capacity change from 0 to 512 [ 134.979836][ T7078] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 135.192008][ T7087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1022'. [ 135.201135][ T7087] tipc: Invalid UDP bearer configuration [ 135.201149][ T7087] tipc: Enabling of bearer rejected, failed to enable media [ 135.216854][ T7088] loop1: detected capacity change from 0 to 128 [ 135.229151][ T7088] FAT-fs (loop1): Directory bread(block 32) failed [ 135.241364][ T7088] FAT-fs (loop1): Directory bread(block 33) failed [ 135.255868][ T7088] FAT-fs (loop1): Directory bread(block 34) failed [ 135.269259][ T7088] FAT-fs (loop1): Directory bread(block 35) failed [ 135.288714][ T7088] FAT-fs (loop1): Directory bread(block 36) failed [ 135.302918][ T7088] FAT-fs (loop1): Directory bread(block 37) failed [ 135.323167][ T7088] FAT-fs (loop1): Directory bread(block 38) failed [ 135.330812][ T7088] FAT-fs (loop1): Directory bread(block 39) failed [ 135.339635][ T7088] FAT-fs (loop1): Directory bread(block 40) failed [ 135.347270][ T7088] FAT-fs (loop1): Directory bread(block 41) failed [ 135.403403][ T7093] loop0: detected capacity change from 0 to 1024 [ 135.410693][ T7093] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 135.421672][ T7093] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 135.431862][ T7093] JBD2: no valid journal superblock found [ 135.437664][ T7093] EXT4-fs (loop0): Could not load journal inode [ 135.546089][ T7095] loop0: detected capacity change from 0 to 1024 [ 135.554660][ T7095] EXT4-fs: Ignoring removed orlov option [ 135.570614][ T7100] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 135.577678][ T7095] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 135.606550][ T7095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.688103][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.709038][ T7113] netlink: 'syz.0.1029': attribute type 39 has an invalid length. [ 135.827148][ T7124] 9p: Unknown access argument : -22 [ 136.061871][ T3495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.193926][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 136.854841][ T7149] netlink: 'syz.4.1041': attribute type 39 has an invalid length. [ 136.920326][ T7151] loop2: detected capacity change from 0 to 512 [ 137.131530][ T7151] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.1042: inode has both inline data and extents flags [ 137.203174][ T7151] EXT4-fs (loop2): get root inode failed [ 137.208938][ T7151] EXT4-fs (loop2): mount failed [ 137.295978][ T7153] cgroup: none used incorrectly [ 137.538023][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1050'. [ 137.547029][ T7176] tipc: Invalid UDP bearer configuration [ 137.547040][ T7176] tipc: Enabling of bearer rejected, failed to enable media [ 137.666281][ T7180] loop2: detected capacity change from 0 to 1024 [ 137.684113][ T7178] loop1: detected capacity change from 0 to 4096 [ 137.696076][ T7180] ext4: Bad value for 'max_dir_size_kb' [ 137.710769][ T7178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.734616][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.759752][ T7178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.806355][ T7186] netlink: 'syz.3.1054': attribute type 39 has an invalid length. [ 138.074842][ T7205] loop3: detected capacity change from 0 to 1024 [ 138.084517][ T7205] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 138.095445][ T7205] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 138.108169][ T7205] JBD2: no valid journal superblock found [ 138.113949][ T7205] EXT4-fs (loop3): Could not load journal inode [ 138.512683][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.529508][ T7211] cgroup: none used incorrectly [ 138.647363][ T7223] netlink: 'syz.0.1066': attribute type 39 has an invalid length. [ 139.741640][ T3495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.785370][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 139.785390][ T29] audit: type=1326 audit(1763496896.365:9812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 139.815085][ T29] audit: type=1326 audit(1763496896.365:9813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 139.838571][ T29] audit: type=1326 audit(1763496896.365:9814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 139.862041][ T29] audit: type=1326 audit(1763496896.365:9815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 139.885638][ T29] audit: type=1326 audit(1763496896.365:9816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 139.909072][ T29] audit: type=1326 audit(1763496896.365:9817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 139.932630][ T29] audit: type=1326 audit(1763496896.365:9818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 139.956259][ T29] audit: type=1326 audit(1763496896.365:9819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 139.971933][ T7238] loop3: detected capacity change from 0 to 512 [ 139.979769][ T29] audit: type=1326 audit(1763496896.365:9820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 139.986343][ T7238] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 140.009330][ T29] audit: type=1326 audit(1763496896.365:9821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.1.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179a80f6c9 code=0x7ffc0000 [ 140.187341][ T7248] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 140.229366][ T7249] loop1: detected capacity change from 0 to 4096 [ 140.239543][ T7249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.374492][ T7249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.417884][ T7259] netlink: 'syz.0.1078': attribute type 39 has an invalid length. [ 140.594663][ T3395] ================================================================== [ 140.602764][ T3395] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 140.609767][ T3395] [ 140.612069][ T3395] read-write to 0xffff888237c29de4 of 4 bytes by task 9 on cpu 0: [ 140.619873][ T3395] wq_worker_running+0x95/0x120 [ 140.624700][ T3395] synchronize_rcu_expedited+0x611/0x790 [ 140.630306][ T3395] synchronize_rcu+0x45/0x320 [ 140.634957][ T3395] key_garbage_collector+0x753/0x8c0 [ 140.640217][ T3395] process_scheduled_works+0x4ce/0x9d0 [ 140.645653][ T3395] worker_thread+0x582/0x770 [ 140.650236][ T3395] kthread+0x489/0x510 [ 140.654281][ T3395] ret_from_fork+0x122/0x1b0 [ 140.658845][ T3395] ret_from_fork_asm+0x1a/0x30 [ 140.663592][ T3395] [ 140.665894][ T3395] read to 0xffff888237c29de4 of 4 bytes by task 3395 on cpu 1: [ 140.673405][ T3395] kick_pool+0x49/0x2d0 [ 140.677547][ T3395] __queue_work+0x8cb/0xb50 [ 140.682047][ T3395] queue_work_on+0xd1/0x160 [ 140.686537][ T3395] process_srcu+0x999/0xbc0 [ 140.691027][ T3395] process_scheduled_works+0x4ce/0x9d0 [ 140.696479][ T3395] worker_thread+0x582/0x770 [ 140.701058][ T3395] kthread+0x489/0x510 [ 140.705110][ T3395] ret_from_fork+0x122/0x1b0 [ 140.709684][ T3395] ret_from_fork_asm+0x1a/0x30 [ 140.714430][ T3395] [ 140.716729][ T3395] value changed: 0x00000000 -> 0x00000001 [ 140.722422][ T3395] [ 140.724728][ T3395] Reported by Kernel Concurrency Sanitizer on: [ 140.730866][ T3395] CPU: 1 UID: 0 PID: 3395 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.740645][ T3395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.750682][ T3395] Workqueue: rcu_gp process_srcu [ 140.755618][ T3395] ================================================================== [ 141.051210][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.