m_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.368229][ T27] audit: type=1400 audit(1707831598.580:80): avc: denied { siginh } for pid=3012 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.785433][ T27] audit: type=1400 audit(1707831599.010:81): avc: denied { read } for pid=2759 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 20.597688][ T3030] sftp-server (3030) used greatest stack depth: 11616 bytes left [ 20.608532][ T3013] sshd (3013) used greatest stack depth: 11528 bytes left Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. 2024/02/13 13:40:05 fuzzer started 2024/02/13 13:40:05 dialing manager at 10.128.0.163:30015 [ 26.660953][ T27] audit: type=1400 audit(1707831605.880:82): avc: denied { node_bind } for pid=3069 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.681606][ T27] audit: type=1400 audit(1707831605.880:83): avc: denied { name_bind } for pid=3069 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.548233][ T27] audit: type=1400 audit(1707831606.770:84): avc: denied { mounton } for pid=3077 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.549386][ T3077] cgroup: Unknown subsys name 'net' [ 27.570947][ T27] audit: type=1400 audit(1707831606.770:85): avc: denied { mount } for pid=3077 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.598330][ T27] audit: type=1400 audit(1707831606.800:86): avc: denied { unmount } for pid=3077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.736805][ T3077] cgroup: Unknown subsys name 'rlimit' [ 27.856857][ T27] audit: type=1400 audit(1707831607.080:87): avc: denied { mounton } for pid=3077 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.883745][ T27] audit: type=1400 audit(1707831607.080:88): avc: denied { mount } for pid=3077 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.897792][ T3079] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.907061][ T27] audit: type=1400 audit(1707831607.080:89): avc: denied { create } for pid=3077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2024/02/13 13:40:07 syscalls: 2890 2024/02/13 13:40:07 code coverage: enabled 2024/02/13 13:40:07 comparison tracing: enabled 2024/02/13 13:40:07 extra coverage: enabled 2024/02/13 13:40:07 delay kcov mmap: enabled 2024/02/13 13:40:07 setuid sandbox: enabled 2024/02/13 13:40:07 namespace sandbox: enabled 2024/02/13 13:40:07 Android sandbox: enabled 2024/02/13 13:40:07 fault injection: enabled 2024/02/13 13:40:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/02/13 13:40:07 net packet injection: enabled 2024/02/13 13:40:07 net device setup: enabled 2024/02/13 13:40:07 concurrency sanitizer: enabled 2024/02/13 13:40:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/02/13 13:40:07 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/02/13 13:40:07 USB emulation: /dev/raw-gadget does not exist 2024/02/13 13:40:07 hci packet injection: /dev/vhci does not exist 2024/02/13 13:40:07 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2024/02/13 13:40:07 802.15.4 emulation: enabled 2024/02/13 13:40:07 swap file: enabled 2024/02/13 13:40:07 suppressing KCSAN reports in functions: '__mod_memcg_lruvec_state' '__xa_clear_mark' 'ext4_da_write_end' 'ext4_free_inodes_count' 'do_sys_poll' '__filemap_add_folio' 'dont_mount' 'generic_fillattr' 'exit_mm' '__mod_memcg_state' 2024/02/13 13:40:07 fetching corpus: 0, signal 0/2000 (executing program) [ 27.937679][ T27] audit: type=1400 audit(1707831607.080:90): avc: denied { write } for pid=3077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.952125][ T3077] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.958070][ T27] audit: type=1400 audit(1707831607.080:91): avc: denied { read } for pid=3077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2024/02/13 13:40:07 fetching corpus: 49, signal 19198/22784 (executing program) 2024/02/13 13:40:07 fetching corpus: 98, signal 27011/32117 (executing program) 2024/02/13 13:40:07 fetching corpus: 148, signal 31254/37874 (executing program) 2024/02/13 13:40:07 fetching corpus: 198, signal 35843/43892 (executing program) 2024/02/13 13:40:07 fetching corpus: 247, signal 39870/49273 (executing program) 2024/02/13 13:40:07 fetching corpus: 296, signal 42677/53487 (executing program) 2024/02/13 13:40:07 fetching corpus: 346, signal 46203/58303 (executing program) 2024/02/13 13:40:07 fetching corpus: 396, signal 49365/62695 (executing program) 2024/02/13 13:40:07 fetching corpus: 445, signal 53072/67503 (executing program) 2024/02/13 13:40:07 fetching corpus: 495, signal 55541/71148 (executing program) 2024/02/13 13:40:07 fetching corpus: 545, signal 57621/74405 (executing program) 2024/02/13 13:40:07 fetching corpus: 595, signal 59525/77468 (executing program) 2024/02/13 13:40:07 fetching corpus: 645, signal 61175/80234 (executing program) 2024/02/13 13:40:07 fetching corpus: 695, signal 63479/83547 (executing program) 2024/02/13 13:40:07 fetching corpus: 745, signal 64908/86106 (executing program) 2024/02/13 13:40:07 fetching corpus: 795, signal 66590/88794 (executing program) 2024/02/13 13:40:07 fetching corpus: 845, signal 68410/91572 (executing program) 2024/02/13 13:40:07 fetching corpus: 894, signal 71577/95330 (executing program) 2024/02/13 13:40:07 fetching corpus: 944, signal 73100/97820 (executing program) 2024/02/13 13:40:08 fetching corpus: 994, signal 74563/100219 (executing program) 2024/02/13 13:40:08 fetching corpus: 1042, signal 75880/102452 (executing program) 2024/02/13 13:40:08 fetching corpus: 1092, signal 77142/104592 (executing program) 2024/02/13 13:40:08 fetching corpus: 1141, signal 79316/107471 (executing program) 2024/02/13 13:40:08 fetching corpus: 1191, signal 80401/109470 (executing program) 2024/02/13 13:40:08 fetching corpus: 1241, signal 81752/111663 (executing program) 2024/02/13 13:40:08 fetching corpus: 1291, signal 83023/113697 (executing program) 2024/02/13 13:40:08 fetching corpus: 1341, signal 84983/116198 (executing program) 2024/02/13 13:40:08 fetching corpus: 1391, signal 86781/118556 (executing program) 2024/02/13 13:40:08 fetching corpus: 1441, signal 87505/120121 (executing program) 2024/02/13 13:40:08 fetching corpus: 1491, signal 88479/121846 (executing program) 2024/02/13 13:40:08 fetching corpus: 1540, signal 89613/123719 (executing program) 2024/02/13 13:40:08 fetching corpus: 1590, signal 90606/125425 (executing program) 2024/02/13 13:40:08 fetching corpus: 1640, signal 91814/127261 (executing program) 2024/02/13 13:40:08 fetching corpus: 1690, signal 92988/129037 (executing program) 2024/02/13 13:40:08 fetching corpus: 1740, signal 93782/130527 (executing program) 2024/02/13 13:40:08 fetching corpus: 1790, signal 95421/132584 (executing program) 2024/02/13 13:40:08 fetching corpus: 1840, signal 96684/134320 (executing program) 2024/02/13 13:40:08 fetching corpus: 1890, signal 97606/135881 (executing program) 2024/02/13 13:40:08 fetching corpus: 1940, signal 98679/137460 (executing program) 2024/02/13 13:40:08 fetching corpus: 1990, signal 100072/139226 (executing program) 2024/02/13 13:40:08 fetching corpus: 2040, signal 100966/140658 (executing program) 2024/02/13 13:40:08 fetching corpus: 2090, signal 102018/142214 (executing program) 2024/02/13 13:40:08 fetching corpus: 2140, signal 102806/143590 (executing program) 2024/02/13 13:40:08 fetching corpus: 2190, signal 103892/145080 (executing program) 2024/02/13 13:40:08 fetching corpus: 2240, signal 104494/146305 (executing program) 2024/02/13 13:40:08 fetching corpus: 2290, signal 105255/147649 (executing program) 2024/02/13 13:40:09 fetching corpus: 2340, signal 106928/149385 (executing program) 2024/02/13 13:40:09 fetching corpus: 2390, signal 107809/150690 (executing program) 2024/02/13 13:40:09 fetching corpus: 2439, signal 108447/151898 (executing program) 2024/02/13 13:40:09 fetching corpus: 2489, signal 109519/153230 (executing program) 2024/02/13 13:40:09 fetching corpus: 2539, signal 110333/154459 (executing program) 2024/02/13 13:40:09 fetching corpus: 2589, signal 111084/155678 (executing program) 2024/02/13 13:40:09 fetching corpus: 2639, signal 111863/156842 (executing program) 2024/02/13 13:40:09 fetching corpus: 2689, signal 112652/158000 (executing program) 2024/02/13 13:40:09 fetching corpus: 2739, signal 113865/159302 (executing program) 2024/02/13 13:40:09 fetching corpus: 2789, signal 114686/160435 (executing program) 2024/02/13 13:40:09 fetching corpus: 2839, signal 116191/161838 (executing program) 2024/02/13 13:40:09 fetching corpus: 2889, signal 116865/162908 (executing program) 2024/02/13 13:40:09 fetching corpus: 2939, signal 118542/164335 (executing program) 2024/02/13 13:40:09 fetching corpus: 2989, signal 119281/165388 (executing program) 2024/02/13 13:40:09 fetching corpus: 3039, signal 119831/166337 (executing program) 2024/02/13 13:40:09 fetching corpus: 3089, signal 120756/167390 (executing program) 2024/02/13 13:40:09 fetching corpus: 3139, signal 121628/168449 (executing program) 2024/02/13 13:40:09 fetching corpus: 3189, signal 122297/169386 (executing program) 2024/02/13 13:40:09 fetching corpus: 3239, signal 122731/170259 (executing program) 2024/02/13 13:40:09 fetching corpus: 3289, signal 123702/171286 (executing program) 2024/02/13 13:40:09 fetching corpus: 3339, signal 124402/172209 (executing program) 2024/02/13 13:40:09 fetching corpus: 3389, signal 125427/173193 (executing program) 2024/02/13 13:40:09 fetching corpus: 3439, signal 126255/174112 (executing program) 2024/02/13 13:40:09 fetching corpus: 3488, signal 127017/174991 (executing program) 2024/02/13 13:40:09 fetching corpus: 3536, signal 127786/175892 (executing program) 2024/02/13 13:40:10 fetching corpus: 3586, signal 128570/176768 (executing program) 2024/02/13 13:40:10 fetching corpus: 3636, signal 129621/177685 (executing program) 2024/02/13 13:40:10 fetching corpus: 3686, signal 130125/178409 (executing program) 2024/02/13 13:40:10 fetching corpus: 3736, signal 130707/179160 (executing program) 2024/02/13 13:40:10 fetching corpus: 3786, signal 131084/179889 (executing program) 2024/02/13 13:40:10 fetching corpus: 3836, signal 131552/180614 (executing program) 2024/02/13 13:40:10 fetching corpus: 3886, signal 132496/181400 (executing program) 2024/02/13 13:40:10 fetching corpus: 3935, signal 133047/182118 (executing program) 2024/02/13 13:40:10 fetching corpus: 3983, signal 133646/182819 (executing program) 2024/02/13 13:40:10 fetching corpus: 4033, signal 134173/183479 (executing program) 2024/02/13 13:40:10 fetching corpus: 4083, signal 134577/184103 (executing program) 2024/02/13 13:40:10 fetching corpus: 4133, signal 135135/184774 (executing program) 2024/02/13 13:40:10 fetching corpus: 4183, signal 135844/185457 (executing program) 2024/02/13 13:40:10 fetching corpus: 4233, signal 136409/186110 (executing program) 2024/02/13 13:40:10 fetching corpus: 4283, signal 136916/186716 (executing program) 2024/02/13 13:40:10 fetching corpus: 4333, signal 137737/187357 (executing program) 2024/02/13 13:40:10 fetching corpus: 4383, signal 138396/187986 (executing program) 2024/02/13 13:40:10 fetching corpus: 4433, signal 139103/188594 (executing program) 2024/02/13 13:40:10 fetching corpus: 4482, signal 140001/189199 (executing program) 2024/02/13 13:40:10 fetching corpus: 4532, signal 140342/189748 (executing program) 2024/02/13 13:40:10 fetching corpus: 4582, signal 140945/190313 (executing program) 2024/02/13 13:40:10 fetching corpus: 4632, signal 141342/190859 (executing program) 2024/02/13 13:40:10 fetching corpus: 4682, signal 141726/191391 (executing program) 2024/02/13 13:40:10 fetching corpus: 4732, signal 142190/191883 (executing program) 2024/02/13 13:40:10 fetching corpus: 4782, signal 142551/191883 (executing program) 2024/02/13 13:40:10 fetching corpus: 4832, signal 143057/191883 (executing program) 2024/02/13 13:40:10 fetching corpus: 4882, signal 143643/191883 (executing program) 2024/02/13 13:40:11 fetching corpus: 4932, signal 144272/191889 (executing program) 2024/02/13 13:40:11 fetching corpus: 4982, signal 145230/191889 (executing program) 2024/02/13 13:40:11 fetching corpus: 5032, signal 145698/191907 (executing program) 2024/02/13 13:40:11 fetching corpus: 5082, signal 146213/191907 (executing program) 2024/02/13 13:40:11 fetching corpus: 5132, signal 146646/191908 (executing program) 2024/02/13 13:40:11 fetching corpus: 5182, signal 147077/191908 (executing program) 2024/02/13 13:40:11 fetching corpus: 5232, signal 147705/191908 (executing program) 2024/02/13 13:40:11 fetching corpus: 5282, signal 148227/191918 (executing program) 2024/02/13 13:40:11 fetching corpus: 5332, signal 148678/191918 (executing program) 2024/02/13 13:40:11 fetching corpus: 5382, signal 149105/191951 (executing program) 2024/02/13 13:40:11 fetching corpus: 5431, signal 149520/191956 (executing program) 2024/02/13 13:40:11 fetching corpus: 5481, signal 149839/191956 (executing program) 2024/02/13 13:40:11 fetching corpus: 5530, signal 150388/191963 (executing program) 2024/02/13 13:40:11 fetching corpus: 5580, signal 151705/191963 (executing program) 2024/02/13 13:40:11 fetching corpus: 5630, signal 152415/191963 (executing program) 2024/02/13 13:40:11 fetching corpus: 5679, signal 152848/191965 (executing program) 2024/02/13 13:40:11 fetching corpus: 5729, signal 153437/191965 (executing program) 2024/02/13 13:40:11 fetching corpus: 5779, signal 153787/191965 (executing program) 2024/02/13 13:40:11 fetching corpus: 5829, signal 154272/191976 (executing program) 2024/02/13 13:40:11 fetching corpus: 5878, signal 154708/191977 (executing program) 2024/02/13 13:40:11 fetching corpus: 5927, signal 155094/191982 (executing program) 2024/02/13 13:40:11 fetching corpus: 5976, signal 155481/191993 (executing program) 2024/02/13 13:40:11 fetching corpus: 6026, signal 155881/192007 (executing program) 2024/02/13 13:40:11 fetching corpus: 6074, signal 156300/192015 (executing program) 2024/02/13 13:40:11 fetching corpus: 6124, signal 156797/192015 (executing program) 2024/02/13 13:40:11 fetching corpus: 6174, signal 157161/192016 (executing program) 2024/02/13 13:40:11 fetching corpus: 6224, signal 157554/192016 (executing program) 2024/02/13 13:40:11 fetching corpus: 6274, signal 158147/192016 (executing program) 2024/02/13 13:40:12 fetching corpus: 6323, signal 158575/192019 (executing program) 2024/02/13 13:40:12 fetching corpus: 6373, signal 159105/192019 (executing program) 2024/02/13 13:40:12 fetching corpus: 6423, signal 159434/192019 (executing program) 2024/02/13 13:40:12 fetching corpus: 6473, signal 159804/192020 (executing program) 2024/02/13 13:40:12 fetching corpus: 6523, signal 160174/192020 (executing program) 2024/02/13 13:40:12 fetching corpus: 6573, signal 160789/192020 (executing program) 2024/02/13 13:40:12 fetching corpus: 6623, signal 161218/192022 (executing program) 2024/02/13 13:40:12 fetching corpus: 6673, signal 161581/192044 (executing program) 2024/02/13 13:40:12 fetching corpus: 6723, signal 162202/192044 (executing program) 2024/02/13 13:40:12 fetching corpus: 6773, signal 162651/192044 (executing program) 2024/02/13 13:40:12 fetching corpus: 6823, signal 163044/192044 (executing program) 2024/02/13 13:40:12 fetching corpus: 6873, signal 163339/192044 (executing program) 2024/02/13 13:40:12 fetching corpus: 6923, signal 163656/192044 (executing program) 2024/02/13 13:40:12 fetching corpus: 6972, signal 164581/192062 (executing program) 2024/02/13 13:40:12 fetching corpus: 7022, signal 165066/192080 (executing program) 2024/02/13 13:40:12 fetching corpus: 7072, signal 165711/192080 (executing program) 2024/02/13 13:40:12 fetching corpus: 7121, signal 166003/192080 (executing program) 2024/02/13 13:40:12 fetching corpus: 7171, signal 166359/192092 (executing program) 2024/02/13 13:40:12 fetching corpus: 7221, signal 166775/192092 (executing program) 2024/02/13 13:40:12 fetching corpus: 7271, signal 167182/192104 (executing program) 2024/02/13 13:40:12 fetching corpus: 7321, signal 167516/192118 (executing program) 2024/02/13 13:40:12 fetching corpus: 7371, signal 167872/192120 (executing program) 2024/02/13 13:40:12 fetching corpus: 7421, signal 168235/192122 (executing program) 2024/02/13 13:40:12 fetching corpus: 7470, signal 168649/192126 (executing program) 2024/02/13 13:40:12 fetching corpus: 7520, signal 168956/192136 (executing program) 2024/02/13 13:40:12 fetching corpus: 7569, signal 169273/192142 (executing program) 2024/02/13 13:40:12 fetching corpus: 7619, signal 169615/192143 (executing program) 2024/02/13 13:40:12 fetching corpus: 7669, signal 169944/192143 (executing program) 2024/02/13 13:40:13 fetching corpus: 7719, signal 170251/192143 (executing program) 2024/02/13 13:40:13 fetching corpus: 7769, signal 170674/192143 (executing program) 2024/02/13 13:40:13 fetching corpus: 7818, signal 171224/192168 (executing program) 2024/02/13 13:40:13 fetching corpus: 7868, signal 171600/192168 (executing program) 2024/02/13 13:40:13 fetching corpus: 7917, signal 171859/192168 (executing program) 2024/02/13 13:40:13 fetching corpus: 7967, signal 172399/192168 (executing program) 2024/02/13 13:40:13 fetching corpus: 8017, signal 172749/192176 (executing program) 2024/02/13 13:40:13 fetching corpus: 8066, signal 173228/192177 (executing program) 2024/02/13 13:40:13 fetching corpus: 8114, signal 173652/192210 (executing program) 2024/02/13 13:40:13 fetching corpus: 8164, signal 174116/192210 (executing program) 2024/02/13 13:40:13 fetching corpus: 8214, signal 174485/192210 (executing program) 2024/02/13 13:40:13 fetching corpus: 8264, signal 174855/192221 (executing program) 2024/02/13 13:40:13 fetching corpus: 8314, signal 175469/192222 (executing program) 2024/02/13 13:40:13 fetching corpus: 8364, signal 175706/192222 (executing program) 2024/02/13 13:40:13 fetching corpus: 8414, signal 176059/192222 (executing program) 2024/02/13 13:40:13 fetching corpus: 8464, signal 176248/192222 (executing program) 2024/02/13 13:40:13 fetching corpus: 8514, signal 176671/192256 (executing program) 2024/02/13 13:40:13 fetching corpus: 8564, signal 177023/192256 (executing program) 2024/02/13 13:40:13 fetching corpus: 8614, signal 177400/192265 (executing program) 2024/02/13 13:40:13 fetching corpus: 8664, signal 177837/192265 (executing program) 2024/02/13 13:40:13 fetching corpus: 8714, signal 178185/192265 (executing program) 2024/02/13 13:40:13 fetching corpus: 8764, signal 178628/192266 (executing program) 2024/02/13 13:40:13 fetching corpus: 8814, signal 178960/192272 (executing program) 2024/02/13 13:40:13 fetching corpus: 8864, signal 179349/192272 (executing program) 2024/02/13 13:40:13 fetching corpus: 8914, signal 179760/192280 (executing program) 2024/02/13 13:40:13 fetching corpus: 8964, signal 179996/192280 (executing program) 2024/02/13 13:40:13 fetching corpus: 9014, signal 180391/192280 (executing program) 2024/02/13 13:40:13 fetching corpus: 9064, signal 180712/192287 (executing program) 2024/02/13 13:40:13 fetching corpus: 9114, signal 181305/192288 (executing program) 2024/02/13 13:40:13 fetching corpus: 9164, signal 181671/192291 (executing program) 2024/02/13 13:40:14 fetching corpus: 9214, signal 181969/192298 (executing program) 2024/02/13 13:40:14 fetching corpus: 9264, signal 182338/192298 (executing program) 2024/02/13 13:40:14 fetching corpus: 9314, signal 182626/192306 (executing program) 2024/02/13 13:40:14 fetching corpus: 9364, signal 183001/192308 (executing program) 2024/02/13 13:40:14 fetching corpus: 9414, signal 183275/192308 (executing program) 2024/02/13 13:40:14 fetching corpus: 9464, signal 183490/192310 (executing program) 2024/02/13 13:40:14 fetching corpus: 9514, signal 183826/192310 (executing program) 2024/02/13 13:40:14 fetching corpus: 9564, signal 184108/192314 (executing program) 2024/02/13 13:40:14 fetching corpus: 9614, signal 184473/192326 (executing program) 2024/02/13 13:40:14 fetching corpus: 9664, signal 184961/192326 (executing program) 2024/02/13 13:40:14 fetching corpus: 9714, signal 185285/192326 (executing program) 2024/02/13 13:40:14 fetching corpus: 9763, signal 185581/192333 (executing program) 2024/02/13 13:40:14 fetching corpus: 9813, signal 185919/192333 (executing program) 2024/02/13 13:40:14 fetching corpus: 9863, signal 186266/192333 (executing program) 2024/02/13 13:40:14 fetching corpus: 9912, signal 186553/192340 (executing program) 2024/02/13 13:40:14 fetching corpus: 9962, signal 186920/192340 (executing program) 2024/02/13 13:40:14 fetching corpus: 10010, signal 187198/192363 (executing program) 2024/02/13 13:40:14 fetching corpus: 10060, signal 187403/192363 (executing program) 2024/02/13 13:40:14 fetching corpus: 10110, signal 187594/192371 (executing program) 2024/02/13 13:40:14 fetching corpus: 10160, signal 187905/192385 (executing program) 2024/02/13 13:40:14 fetching corpus: 10209, signal 188151/192406 (executing program) 2024/02/13 13:40:14 fetching corpus: 10259, signal 188424/192437 (executing program) 2024/02/13 13:40:14 fetching corpus: 10308, signal 188703/192438 (executing program) 2024/02/13 13:40:14 fetching corpus: 10356, signal 189055/192448 (executing program) 2024/02/13 13:40:14 fetching corpus: 10406, signal 189448/192448 (executing program) 2024/02/13 13:40:14 fetching corpus: 10432, signal 189728/192462 (executing program) 2024/02/13 13:40:14 fetching corpus: 10433, signal 189730/192467 (executing program) 2024/02/13 13:40:14 fetching corpus: 10433, signal 189730/192467 (executing program) 2024/02/13 13:40:16 starting 5 fuzzer processes [ 37.594407][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 37.594422][ T27] audit: type=1400 audit(1707831616.810:96): avc: denied { execmem } for pid=3085 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.718441][ T27] audit: type=1400 audit(1707831616.900:97): avc: denied { append } for pid=2759 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.740659][ T27] audit: type=1400 audit(1707831616.900:98): avc: denied { open } for pid=2759 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.763040][ T27] audit: type=1400 audit(1707831616.900:99): avc: denied { getattr } for pid=2759 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.786417][ T27] audit: type=1400 audit(1707831616.900:100): avc: denied { read } for pid=3092 comm="syz-executor.1" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.807824][ T27] audit: type=1400 audit(1707831616.900:101): avc: denied { open } for pid=3092 comm="syz-executor.1" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.831387][ T27] audit: type=1400 audit(1707831616.910:102): avc: denied { mounton } for pid=3092 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.853036][ T27] audit: type=1400 audit(1707831616.910:103): avc: denied { module_request } for pid=3092 comm="syz-executor.1" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.875023][ T27] audit: type=1400 audit(1707831616.920:104): avc: denied { sys_module } for pid=3092 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.964792][ T3092] chnl_net:caif_netlink_parms(): no params data found [ 38.045502][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.052791][ T3092] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.060304][ T3092] bridge_slave_0: entered allmulticast mode [ 38.066765][ T3092] bridge_slave_0: entered promiscuous mode [ 38.073495][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.080600][ T3092] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.088698][ T3092] bridge_slave_1: entered allmulticast mode [ 38.095454][ T3092] bridge_slave_1: entered promiscuous mode [ 38.110136][ T3094] chnl_net:caif_netlink_parms(): no params data found [ 38.133390][ T3092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.156948][ T3092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.202453][ T3092] team0: Port device team_slave_0 added [ 38.220024][ T3092] team0: Port device team_slave_1 added [ 38.257147][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.264197][ T3094] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.271475][ T3094] bridge_slave_0: entered allmulticast mode [ 38.277959][ T3094] bridge_slave_0: entered promiscuous mode [ 38.294622][ T3092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.301587][ T3092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.327549][ T3092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.338410][ T3094] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.345550][ T3094] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.352835][ T3094] bridge_slave_1: entered allmulticast mode [ 38.359180][ T3094] bridge_slave_1: entered promiscuous mode [ 38.388358][ T3092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.395319][ T3092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.421329][ T3092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.443468][ T3094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.455366][ T3094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.491675][ T3092] hsr_slave_0: entered promiscuous mode [ 38.497703][ T3092] hsr_slave_1: entered promiscuous mode [ 38.511495][ T3094] team0: Port device team_slave_0 added [ 38.522665][ T3094] team0: Port device team_slave_1 added [ 38.528672][ T3109] chnl_net:caif_netlink_parms(): no params data found [ 38.585107][ T3094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.592173][ T3094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.618096][ T3094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.629121][ T3094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.636171][ T3094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.662131][ T3094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.677758][ T3110] chnl_net:caif_netlink_parms(): no params data found [ 38.727160][ T3094] hsr_slave_0: entered promiscuous mode [ 38.733090][ T3094] hsr_slave_1: entered promiscuous mode [ 38.739093][ T3094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.746702][ T3094] Cannot create hsr debugfs directory [ 38.759476][ T3118] chnl_net:caif_netlink_parms(): no params data found [ 38.777820][ T3109] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.784937][ T3109] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.792120][ T3109] bridge_slave_0: entered allmulticast mode [ 38.798698][ T3109] bridge_slave_0: entered promiscuous mode [ 38.817304][ T3109] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.824395][ T3109] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.831703][ T3109] bridge_slave_1: entered allmulticast mode [ 38.838000][ T3109] bridge_slave_1: entered promiscuous mode [ 38.871189][ T3109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.901319][ T3109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.923742][ T3118] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.930834][ T3118] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.938101][ T3118] bridge_slave_0: entered allmulticast mode [ 38.944415][ T3118] bridge_slave_0: entered promiscuous mode [ 38.951021][ T3118] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.958088][ T3118] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.965409][ T3118] bridge_slave_1: entered allmulticast mode [ 38.971794][ T3118] bridge_slave_1: entered promiscuous mode [ 38.978064][ T3110] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.985260][ T3110] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.992347][ T3110] bridge_slave_0: entered allmulticast mode [ 38.998911][ T3110] bridge_slave_0: entered promiscuous mode [ 39.011727][ T3109] team0: Port device team_slave_0 added [ 39.019257][ T3109] team0: Port device team_slave_1 added [ 39.044693][ T3118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.053811][ T3110] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.060927][ T3110] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.068052][ T3110] bridge_slave_1: entered allmulticast mode [ 39.074395][ T3110] bridge_slave_1: entered promiscuous mode [ 39.099106][ T3118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.120898][ T3109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.127936][ T3109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.153910][ T3109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.176253][ T3110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.185725][ T3109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.192670][ T3109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.218735][ T3109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.234691][ T3118] team0: Port device team_slave_0 added [ 39.242825][ T3110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.263462][ T3118] team0: Port device team_slave_1 added [ 39.296128][ T3118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.303077][ T3118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.329004][ T3118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.341458][ T3110] team0: Port device team_slave_0 added [ 39.350367][ T3110] team0: Port device team_slave_1 added [ 39.357778][ T3109] hsr_slave_0: entered promiscuous mode [ 39.363759][ T3109] hsr_slave_1: entered promiscuous mode [ 39.369620][ T3109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.377184][ T3109] Cannot create hsr debugfs directory [ 39.383095][ T3118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.390136][ T3118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.416125][ T3118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.434947][ T27] audit: type=1400 audit(1707831618.650:105): avc: denied { create } for pid=3092 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.461752][ T3092] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.480097][ T3110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.487053][ T3110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.513001][ T3110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.526211][ T3092] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.534814][ T3092] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.548208][ T3110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.555224][ T3110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.581121][ T3110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.602318][ T3092] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.612488][ T3118] hsr_slave_0: entered promiscuous mode [ 39.618903][ T3118] hsr_slave_1: entered promiscuous mode [ 39.624891][ T3118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.632436][ T3118] Cannot create hsr debugfs directory [ 39.640186][ T3094] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.649075][ T3094] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.658679][ T3094] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.667587][ T3094] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.721705][ T3110] hsr_slave_0: entered promiscuous mode [ 39.727663][ T3110] hsr_slave_1: entered promiscuous mode [ 39.733434][ T3110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.741209][ T3110] Cannot create hsr debugfs directory [ 39.804432][ T3094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.830237][ T3109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.839292][ T3109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.848145][ T3109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.866331][ T3109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.886554][ T3092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.902919][ T3118] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.915428][ T3092] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.929973][ T3094] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.938469][ T3118] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.947474][ T3118] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.956344][ T3118] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.970987][ T3149] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.978141][ T3149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.001896][ T3149] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.009028][ T3149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.024249][ T3149] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.031334][ T3149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.053646][ T3149] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.060724][ T3149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.071943][ T3094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.097306][ T3110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.106953][ T3110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.117979][ T3110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.151937][ T3092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.162414][ T3092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.177429][ T3110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.199285][ T3109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.213380][ T3094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.242418][ T3109] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.257642][ T3173] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.264786][ T3173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.283773][ T3092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.303278][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.310478][ T3172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.342132][ T3109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.352648][ T3109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.384708][ T3118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.397748][ T3110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.411033][ T3118] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.426009][ T3110] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.438764][ T3094] veth0_vlan: entered promiscuous mode [ 40.449580][ T3094] veth1_vlan: entered promiscuous mode [ 40.471311][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.478503][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.488377][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.495460][ T3172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.504356][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.511523][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.529083][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.536695][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.562322][ T3109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.595739][ T3118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.615927][ T3092] veth0_vlan: entered promiscuous mode [ 40.636623][ T3092] veth1_vlan: entered promiscuous mode [ 40.657141][ T3094] veth0_macvtap: entered promiscuous mode [ 40.677297][ T3094] veth1_macvtap: entered promiscuous mode [ 40.693757][ T3118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.710589][ T3094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.719078][ T3092] veth0_macvtap: entered promiscuous mode [ 40.740742][ T3094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.749392][ T3092] veth1_macvtap: entered promiscuous mode [ 40.762352][ T3109] veth0_vlan: entered promiscuous mode [ 40.777030][ T3094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.785795][ T3094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.794477][ T3094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.803242][ T3094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.814088][ T3092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.824675][ T3092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.835639][ T3092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.847204][ T3092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.857838][ T3092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.869169][ T3092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.888614][ T3092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.897394][ T3092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.906114][ T3092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.914972][ T3092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.926128][ T3109] veth1_vlan: entered promiscuous mode [ 40.944145][ T3109] veth0_macvtap: entered promiscuous mode [ 40.955027][ T3174] ================================================================== [ 40.963203][ T3174] BUG: KCSAN: data-race in __queue_work / wq_worker_running [ 40.970500][ T3174] [ 40.972808][ T3174] read-write to 0xffff888237c2d164 of 4 bytes by task 9 on cpu 0: [ 40.980594][ T3174] wq_worker_running+0x98/0x120 [ 40.985447][ T3174] schedule_timeout+0xcc/0x230 [ 40.990212][ T3174] msleep+0x52/0x70 [ 40.994007][ T3174] nsim_fib_event_work+0x1574/0x2250 [ 40.999279][ T3174] process_scheduled_works+0x5b8/0xa40 [ 41.004730][ T3174] worker_thread+0x525/0x730 [ 41.009318][ T3174] kthread+0x1d7/0x210 [ 41.013381][ T3174] ret_from_fork+0x48/0x60 [ 41.019010][ T3174] ret_from_fork_asm+0x11/0x20 [ 41.023779][ T3174] [ 41.026090][ T3174] read to 0xffff888237c2d164 of 4 bytes by task 3174 on cpu 1: [ 41.033616][ T3174] __queue_work+0x7ce/0xbb0 [ 41.038114][ T3174] queue_work_on+0x95/0xf0 [ 41.042526][ T3174] wg_queue_enqueue_per_peer_tx+0x127/0x270 [ 41.048438][ T3174] wg_packet_encrypt_worker+0x885/0xa30 [ 41.054003][ T3174] process_scheduled_works+0x5b8/0xa40 [ 41.059499][ T3174] worker_thread+0x525/0x730 [ 41.064087][ T3174] kthread+0x1d7/0x210 [ 41.068158][ T3174] ret_from_fork+0x48/0x60 [ 41.072572][ T3174] ret_from_fork_asm+0x11/0x20 [ 41.077335][ T3174] [ 41.079647][ T3174] value changed: 0x00000000 -> 0x00000001 [ 41.085352][ T3174] [ 41.087664][ T3174] Reported by Kernel Concurrency Sanitizer on: [ 41.093801][ T3174] CPU: 1 PID: 3174 Comm: kworker/1:6 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 41.103859][ T3174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 41.113920][ T3174] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 41.120432][ T3174] ================================================================== 13:40:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x84, 0x77, 0x0, 0x0) [ 41.144072][ T3110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.165844][ T3109] veth1_macvtap: entered promiscuous mode [ 41.181923][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 13:40:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) [ 41.192569][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.202539][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.213051][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.239048][ T3109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.250602][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.261141][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.270989][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.281487][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 13:40:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 13:40:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004d83102500000000000000", @ANYRES32=r4, @ANYBLOB="01000000010051001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e0000000000000000ffe40000", @ANYRES32=r4, @ANYBLOB="00002000ffffffff000000000a0001006e6574656d000000280002000000000002008812df00003274100000fdffe1ff"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="080350031603480301020200c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 13:40:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) [ 41.294564][ T3109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.307062][ T3109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.315878][ T3109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.324690][ T3109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.333433][ T3109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 13:40:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 13:40:20 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 41.401484][ T3118] veth0_vlan: entered promiscuous mode [ 41.423457][ T3243] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:40:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000140)={'tunl0\x00', 0x0}) 13:40:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004d83102500000000000000", @ANYRES32=r4, @ANYBLOB="01000000010051001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e0000000000000000ffe40000", @ANYRES32=r4, @ANYBLOB="00002000ffffffff000000000a0001006e6574656d000000280002000000000002008812df00003274100000fdffe1ff"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="080350031603480301020200c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 13:40:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000140)={'tunl0\x00', 0x0}) [ 41.444633][ T3243] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.461690][ T3110] veth0_vlan: entered promiscuous mode 13:40:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000140)={'tunl0\x00', 0x0}) [ 41.497279][ T3118] veth1_vlan: entered promiscuous mode [ 41.513024][ T3254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.528816][ T3118] veth0_macvtap: entered promiscuous mode [ 41.537394][ T3110] veth1_vlan: entered promiscuous mode 13:40:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004d83102500000000000000", @ANYRES32=r4, @ANYBLOB="01000000010051001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e0000000000000000ffe40000", @ANYRES32=r4, @ANYBLOB="00002000ffffffff000000000a0001006e6574656d000000280002000000000002008812df00003274100000fdffe1ff"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="080350031603480301020200c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 13:40:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000140)={'tunl0\x00', 0x0}) [ 41.548500][ T3254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.574790][ T3118] veth1_macvtap: entered promiscuous mode [ 41.593327][ T3110] veth0_macvtap: entered promiscuous mode 13:40:20 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 13:40:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 41.610040][ T3260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.624437][ T3110] veth1_macvtap: entered promiscuous mode [ 41.642468][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.653083][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.663058][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.673559][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.683422][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.693900][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 13:40:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004d83102500000000000000", @ANYRES32=r4, @ANYBLOB="01000000010051001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e0000000000000000ffe40000", @ANYRES32=r4, @ANYBLOB="00002000ffffffff000000000a0001006e6574656d000000280002000000000002008812df00003274100000fdffe1ff"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="080350031603480301020200c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) [ 41.705364][ T3118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.712895][ T3260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.740905][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.751396][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.761241][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.771864][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.781781][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.792221][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.803700][ T3118] batman_adv: batadv0: Interface activated: batadv_slave_1 13:40:21 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 41.825946][ T3269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.839781][ T3269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.857882][ T3118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.866691][ T3118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 13:40:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004d83102500000000000000", @ANYRES32=r4, @ANYBLOB="01000000010051001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e0000000000000000ffe40000", @ANYRES32=r4, @ANYBLOB="00002000ffffffff000000000a0001006e6574656d000000280002000000000002008812df00003274100000fdffe1ff"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="080350031603480301020200c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 13:40:21 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 41.875436][ T3118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.884243][ T3118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.923442][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.934024][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.943955][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.954403][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.964227][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.974652][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.984470][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.994904][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.006187][ T3110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.014047][ T3273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:40:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004d83102500000000000000", @ANYRES32=r4, @ANYBLOB="01000000010051001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e0000000000000000ffe40000", @ANYRES32=r4, @ANYBLOB="00002000ffffffff000000000a0001006e6574656d000000280002000000000002008812df00003274100000fdffe1ff"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="080350031603480301020200c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) [ 42.034918][ T3276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 42.046865][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.057559][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.067523][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.078020][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.087958][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.098394][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.108217][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.118649][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 13:40:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004d83102500000000000000", @ANYRES32=r4, @ANYBLOB="01000000010051001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e0000000000000000ffe40000", @ANYRES32=r4, @ANYBLOB="00002000ffffffff000000000a0001006e6574656d000000280002000000000002008812df00003274100000fdffe1ff"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="080350031603480301020200c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) [ 42.130037][ T3110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.139988][ T3110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.148760][ T3110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.157544][ T3110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.166383][ T3110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 13:40:21 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 13:40:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) 13:40:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x4, 0x0, 0x0) 13:40:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 13:40:21 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 13:40:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x4, 0x0, 0x0) 13:40:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) 13:40:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 13:40:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) 13:40:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x4, 0x0, 0x0) 13:40:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) 13:40:21 executing program 2: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$eJzs3U1oXNUXAPDzXjr/5N9GE0Gh6qai0kLppBlB6K6uXEglUPdtmExjyEsmzUzaJgRMcdOloKAiiII7V25diLiQ7tyqS5eCaLDUbiTy5iP9yEySapKBzO8Hb3Lue5Oce2cy98DcYW4AfetEfpNGPBsRE0nESOt8EhGFRnQk4nzzfnfXV8v5kcTGxsXfk8Z97qyvluOB38kdi4i1iDgeEd8VIk6nW/PWlldmJ7Ossthqj9XnFsZqyytnZuYmpyvTlfnSudKr46VS6Vxpz8Z67+vv3yy+f+Hqu1fnB7759Mu3kzgfw61rD45jLzUfk0L+ED7k9f1I1kNJrzvAv5K/NAear/J4JkZioBEBAIfZxmDEBgDQZxL1HwD6TPt9gDvrq+X2cZDvP/z2WkQMNfO31xebV4601syGGuuQR/9MHlqZSCJi9CA7yqG0djMiLo+e2Pr/n2xZs31cZ/eig+yrb/P553yn+S/dnH+iw/wz1P7sxH/Unv/ubpn/7ucf6DL/Tewyx8e33jjVNf/NiOeOdMqfbOZPuuS/vMv811++/UO3axufR5yMzvkfzLXN50PGrsxklbPN2445yj+feWu78R/tkn9th/Ev7HL8E1/dPr62Tf5TL27//HfKn9fE93aZ/9bzL/zU7Vqef6rL+Hd6/j/bZf5f/n7ni13eFQAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FNCKGI0mLm3GaFovNPbyfjqNpVq3VT1+pLs1PRWOv7NEopO1vWh5ptpO8Pd76Pv52u/RI+5WIeCoiPhj8f6NdLFezqV4PHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABajj2y//+dweb+/wDAITfU6w4AAAdO/QeA/qP+A0D/Uf8BoP+o/wDQf9R/AOg/6j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2ziwoX82PhrfbWct6euLS/NVq+dmarUZotzS+Viubq4UJyuVqezSrFcndvp72XV6kIp5pdujNUrtfpYbXnl0lx1ab5+aWZucrpyqVI4kFEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMZbhxJWoyItBGnabEY8UREjEYhuTKTVc5GxJMR8eNgYTBvj/e60wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwx2rLK7OTWVZZFAgEgs2g1zMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHLz7m373uicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Evpr0lE5MfJkZeGH736v+TeYONnRFz/5OKHNybr9cXx/Pwfm+frH7XOl3rRfwBgJ+063a7jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBJbXlldjLLKov7GPR6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7J1/AgAA//+5gdRV") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be3937dc23c5a78b0c2b1aed4d6a1c48da6b8bed7cb07aad655c1a1ab5571abf4b48cd969131f125ecbfb7da93e95fe4f8c0cca5263c263360fc13ae9c60fa93d2c181340dde27894baf25a2dbadf35f246cb41f91dc72f2161f8e1acd18803bc14b41aab9989b4e52e0173c3578963757ad0677e0e3228a40430dddf3b057f16541873d933802649d050b6ff22223855cd30fe2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000007c0)={r10, 0x2, r8, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r10) r11 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000f40)={0x0, 0x0, r11, 0x6, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r10, 0x3, r12, 0x5}) r13 = open(&(0x7f0000000040)='.\x00', 0x478601, 0x0) ioctl$EXT4_IOC_SETFSUUID(r13, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x700}}) 13:40:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 13:40:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x4, 0x0, 0x0) 13:40:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x28011, r3, 0x0) fdatasync(r3) fadvise64(r3, 0x0, 0x0, 0x4) 13:40:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) llistxattr(0x0, 0x0, 0x0) 13:40:21 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500200000002020207b0af8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000e8840000002300000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70306000000000000000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xaf000000, '\x00', r1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=']*+-}{&*\x00') write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) 13:40:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 13:40:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) llistxattr(0x0, 0x0, 0x0) 13:40:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) llistxattr(0x0, 0x0, 0x0) 13:40:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) 13:40:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) llistxattr(0x0, 0x0, 0x0) 13:40:21 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500200000002020207b0af8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000e8840000002300000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70306000000000000000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xaf000000, '\x00', r1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=']*+-}{&*\x00') write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) 13:40:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) [ 42.512910][ T3316] loop2: detected capacity change from 0 to 2048 13:40:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) [ 42.587149][ T3316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.605011][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 42.605025][ T27] audit: type=1400 audit(1707831621.830:143): avc: denied { mount } for pid=3314 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 13:40:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) 13:40:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) 13:40:21 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500200000002020207b0af8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000e8840000002300000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70306000000000000000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xaf000000, '\x00', r1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=']*+-}{&*\x00') write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) [ 42.605088][ T3316] ext4 filesystem being mounted at /root/syzkaller-testdir706329960/syzkaller.tH2z46/4/file0 supports timestamps until 2038-01-19 (0x7fffffff) 13:40:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) 13:40:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) [ 42.710935][ T27] audit: type=1400 audit(1707831621.930:144): avc: denied { write } for pid=3314 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 13:40:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) 13:40:22 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500200000002020207b0af8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000e8840000002300000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70306000000000000000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xaf000000, '\x00', r1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=']*+-}{&*\x00') write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) [ 42.710977][ T27] audit: type=1400 audit(1707831621.930:145): avc: denied { append open } for pid=3314 comm="syz-executor.2" path=2F726F6F742F73797A6B616C6C65722D746573746469723730363332393936302F73797A6B616C6C65722E7448327A34362F342F66696C65302F233138202864656C6574656429 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 13:40:22 executing program 2: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$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") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be3937dc23c5a78b0c2b1aed4d6a1c48da6b8bed7cb07aad655c1a1ab5571abf4b48cd969131f125ecbfb7da93e95fe4f8c0cca5263c263360fc13ae9c60fa93d2c181340dde27894baf25a2dbadf35f246cb41f91dc72f2161f8e1acd18803bc14b41aab9989b4e52e0173c3578963757ad0677e0e3228a40430dddf3b057f16541873d933802649d050b6ff22223855cd30fe2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000007c0)={r10, 0x2, r8, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r10) r11 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000f40)={0x0, 0x0, r11, 0x6, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r10, 0x3, r12, 0x5}) r13 = open(&(0x7f0000000040)='.\x00', 0x478601, 0x0) ioctl$EXT4_IOC_SETFSUUID(r13, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x700}}) [ 42.711008][ T27] audit: type=1400 audit(1707831621.930:146): avc: denied { ioctl } for pid=3314 comm="syz-executor.2" path=2F726F6F742F73797A6B616C6C65722D746573746469723730363332393936302F73797A6B616C6C65722E7448327A34362F342F66696C65302F233138202864656C6574656429 dev="loop2" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.790907][ C0] hrtimer: interrupt took 27748 ns [ 42.842941][ T3355] syz-executor.4 (3355) used greatest stack depth: 11448 bytes left 13:40:22 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500200000002020207b0af8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000e8840000002300000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70306000000000000000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xaf000000, '\x00', r1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=']*+-}{&*\x00') write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) 13:40:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) [ 42.856770][ T3109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:40:22 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500200000002020207b0af8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000e8840000002300000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70306000000000000000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xaf000000, '\x00', r1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=']*+-}{&*\x00') write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) 13:40:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.'], &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) 13:40:22 executing program 0: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$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") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be3937dc23c5a78b0c2b1aed4d6a1c48da6b8bed7cb07aad655c1a1ab5571abf4b48cd969131f125ecbfb7da93e95fe4f8c0cca5263c263360fc13ae9c60fa93d2c181340dde27894baf25a2dbadf35f246cb41f91dc72f2161f8e1acd18803bc14b41aab9989b4e52e0173c3578963757ad0677e0e3228a40430dddf3b057f16541873d933802649d050b6ff22223855cd30fe2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000007c0)={r10, 0x2, r8, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r10) r11 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000f40)={0x0, 0x0, r11, 0x6, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r10, 0x3, r12, 0x5}) r13 = open(&(0x7f0000000040)='.\x00', 0x478601, 0x0) ioctl$EXT4_IOC_SETFSUUID(r13, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x700}}) 13:40:22 executing program 4: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$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") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be3937dc23c5a78b0c2b1aed4d6a1c48da6b8bed7cb07aad655c1a1ab5571abf4b48cd969131f125ecbfb7da93e95fe4f8c0cca5263c263360fc13ae9c60fa93d2c181340dde27894baf25a2dbadf35f246cb41f91dc72f2161f8e1acd18803bc14b41aab9989b4e52e0173c3578963757ad0677e0e3228a40430dddf3b057f16541873d933802649d050b6ff22223855cd30fe2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000007c0)={r10, 0x2, r8, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r10) r11 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000f40)={0x0, 0x0, r11, 0x6, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r10, 0x3, r12, 0x5}) r13 = open(&(0x7f0000000040)='.\x00', 0x478601, 0x0) ioctl$EXT4_IOC_SETFSUUID(r13, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x700}}) 13:40:22 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500200000002020207b0af8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000e8840000002300000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70306000000000000000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xaf000000, '\x00', r1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x0, 0x4f63}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=']*+-}{&*\x00') write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) [ 43.022840][ T3374] loop2: detected capacity change from 0 to 2048 [ 43.047533][ T3374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:40:22 executing program 3: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$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") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be3937dc23c5a78b0c2b1aed4d6a1c48da6b8bed7cb07aad655c1a1ab5571abf4b48cd969131f125ecbfb7da93e95fe4f8c0cca5263c263360fc13ae9c60fa93d2c181340dde27894baf25a2dbadf35f246cb41f91dc72f2161f8e1acd18803bc14b41aab9989b4e52e0173c3578963757ad0677e0e3228a40430dddf3b057f16541873d933802649d050b6ff22223855cd30fe2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000007c0)={r10, 0x2, r8, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r10) r11 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000f40)={0x0, 0x0, r11, 0x6, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r10, 0x3, r12, 0x5}) r13 = open(&(0x7f0000000040)='.\x00', 0x478601, 0x0) ioctl$EXT4_IOC_SETFSUUID(r13, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x700}}) [ 43.061395][ T3374] ext4 filesystem being mounted at /root/syzkaller-testdir706329960/syzkaller.tH2z46/5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.075308][ T3387] loop4: detected capacity change from 0 to 2048 [ 43.092807][ T3380] loop0: detected capacity change from 0 to 2048 [ 43.122343][ T3387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.149730][ T3380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 13:40:22 executing program 2: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$eJzs3U1oXNUXAPDzXjr/5N9GE0Gh6qai0kLppBlB6K6uXEglUPdtmExjyEsmzUzaJgRMcdOloKAiiII7V25diLiQ7tyqS5eCaLDUbiTy5iP9yEySapKBzO8Hb3Lue5Oce2cy98DcYW4AfetEfpNGPBsRE0nESOt8EhGFRnQk4nzzfnfXV8v5kcTGxsXfk8Z97qyvluOB38kdi4i1iDgeEd8VIk6nW/PWlldmJ7Ossthqj9XnFsZqyytnZuYmpyvTlfnSudKr46VS6Vxpz8Z67+vv3yy+f+Hqu1fnB7759Mu3kzgfw61rD45jLzUfk0L+ED7k9f1I1kNJrzvAv5K/NAear/J4JkZioBEBAIfZxmDEBgDQZxL1HwD6TPt9gDvrq+X2cZDvP/z2WkQMNfO31xebV4601syGGuuQR/9MHlqZSCJi9CA7yqG0djMiLo+e2Pr/n2xZs31cZ/eig+yrb/P553yn+S/dnH+iw/wz1P7sxH/Unv/ubpn/7ucf6DL/Tewyx8e33jjVNf/NiOeOdMqfbOZPuuS/vMv811++/UO3axufR5yMzvkfzLXN50PGrsxklbPN2445yj+feWu78R/tkn9th/Ev7HL8E1/dPr62Tf5TL27//HfKn9fE93aZ/9bzL/zU7Vqef6rL+Hd6/j/bZf5f/n7ni13eFQAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FNCKGI0mLm3GaFovNPbyfjqNpVq3VT1+pLs1PRWOv7NEopO1vWh5ptpO8Pd76Pv52u/RI+5WIeCoiPhj8f6NdLFezqV4PHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABajj2y//+dweb+/wDAITfU6w4AAAdO/QeA/qP+A0D/Uf8BoP+o/wDQf9R/AOg/6j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2ziwoX82PhrfbWct6euLS/NVq+dmarUZotzS+Viubq4UJyuVqezSrFcndvp72XV6kIp5pdujNUrtfpYbXnl0lx1ab5+aWZucrpyqVI4kFEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMZbhxJWoyItBGnabEY8UREjEYhuTKTVc5GxJMR8eNgYTBvj/e60wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwx2rLK7OTWVZZFAgEgs2g1zMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHLz7m373uicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Evpr0lE5MfJkZeGH736v+TeYONnRFz/5OKHNybr9cXx/Pwfm+frH7XOl3rRfwBgJ+063a7jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBJbXlldjLLKov7GPR6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7J1/AgAA//+5gdRV") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be3937dc23c5a78b0c2b1aed4d6a1c48da6b8bed7cb07aad655c1a1ab5571abf4b48cd969131f125ecbfb7da93e95fe4f8c0cca5263c263360fc13ae9c60fa93d2c181340dde27894baf25a2dbadf35f246cb41f91dc72f2161f8e1acd18803bc14b41aab9989b4e52e0173c3578963757ad0677e0e3228a40430dddf3b057f16541873d933802649d050b6ff22223855cd30fe2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000007c0)={r10, 0x2, r8, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r10) r11 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000f40)={0x0, 0x0, r11, 0x6, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r10, 0x3, r12, 0x5}) r13 = open(&(0x7f0000000040)='.\x00', 0x478601, 0x0) ioctl$EXT4_IOC_SETFSUUID(r13, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x700}}) [ 43.181040][ T3387] ext4 filesystem being mounted at /root/syzkaller-testdir2999963077/syzkaller.fMMGGu/8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.195223][ T3398] loop3: detected capacity change from 0 to 2048 [ 43.197092][ T3380] ext4 filesystem being mounted at /root/syzkaller-testdir1520986155/syzkaller.K3gQwe/22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.221122][ T3109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:40:22 executing program 4: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$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") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be3937dc23c5a78b0c2b1aed4d6a1c48da6b8bed7cb07aad655c1a1ab5571abf4b48cd969131f125ecbfb7da93e95fe4f8c0cca5263c263360fc13ae9c60fa93d2c181340dde27894baf25a2dbadf35f246cb41f91dc72f2161f8e1acd18803bc14b41aab9989b4e52e0173c3578963757ad0677e0e3228a40430dddf3b057f16541873d933802649d050b6ff22223855cd30fe2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000007c0)={r10, 0x2, r8, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r10) r11 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000f40)={0x0, 0x0, r11, 0x6, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r10, 0x3, r12, 0x5}) r13 = open(&(0x7f0000000040)='.\x00', 0x478601, 0x0) ioctl$EXT4_IOC_SETFSUUID(r13, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x700}}) 13:40:22 executing program 0: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$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") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be3937dc23c5a78b0c2b1aed4d6a1c48da6b8bed7cb07aad655c1a1ab5571abf4b48cd969131f125ecbfb7da93e95fe4f8c0cca5263c263360fc13ae9c60fa93d2c181340dde27894baf25a2dbadf35f246cb41f91dc72f2161f8e1acd18803bc14b41aab9989b4e52e0173c3578963757ad0677e0e3228a40430dddf3b057f16541873d933802649d050b6ff22223855cd30fe2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000007c0)={r10, 0x2, r8, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r10) r11 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000f40)={0x0, 0x0, r11, 0x6, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r10, 0x3, r12, 0x5}) r13 = open(&(0x7f0000000040)='.\x00', 0x478601, 0x0) ioctl$EXT4_IOC_SETFSUUID(r13, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x700}}) [ 43.236190][ T3398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.253727][ T3398] ext4 filesystem being mounted at /root/syzkaller-testdir1154646061/syzkaller.FnND0m/11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.271198][ T3118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 13:40:22 executing program 3: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$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") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be3937dc23c5a78b0c2b1aed4d6a1c48da6b8bed7cb07aad655c1a1ab5571abf4b48cd969131f125ecbfb7da93e95fe4f8c0cca5263c263360fc13ae9c60fa93d2c181340dde27894baf25a2dbadf35f246cb41f91dc72f2161f8e1acd18803bc14b41aab9989b4e52e0173c3578963757ad0677e0e3228a40430dddf3b057f16541873d933802649d050b6ff22223855cd30fe2"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000007c0)={r10, 0x2, r8, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)=r10) r11 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000f40)={0x0, 0x0, r11, 0x6, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r10, 0x3, r12, 0x5}) r13 = open(&(0x7f0000000040)='.\x00', 0x478601, 0x0) ioctl$EXT4_IOC_SETFSUUID(r13, 0x6611, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x700}}) 13:40:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x28011, r3, 0x0) fdatasync(r3) fadvise64(r3, 0x0, 0x0, 0x4) [ 43.307390][ T3094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.325210][ T3110] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.355182][ T3403] loop2: detected capacity change from 0 to 2048 [ 43.390085][ T3403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.435385][ T3403] ext4 filesystem being mounted at /root/syzkaller-testdir706329960/syzkaller.tH2z46/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.441142][ T3421] loop4: detected capacity change from 0 to 2048 [ 43.463609][ T3414] loop0: detected capacity change from 0 to 2048 [ 43.491229][ T3414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.504714][ T3414] ext4 filesystem being mounted at /root/syzkaller-testdir1520986155/syzkaller.K3gQwe/23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.521993][ T3425] loop3: detected capacity change from 0 to 2048 13:40:22 executing program 0: r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x72f, &(0x7f0000000800)="$eJzs3U1oXNUXAPDzXjr/5N9GE0Gh6qai0kLppBlB6K6uXEglUPdtmExjyEsmzUzaJgRMcdOloKAiiII7V25diLiQ7tyqS5eCaLDUbiTy5iP9yEySapKBzO8Hb3Lue5Oce2cy98DcYW4AfetEfpNGPBsRE0nESOt8EhGFRnQk4nzzfnfXV8v5kcTGxsXfk8Z97qyvluOB38kdi4i1iDgeEd8VIk6nW/PWlldmJ7Ossthqj9XnFsZqyytnZuYmpyvTlfnSudKr46VS6Vxpz8Z67+vv3yy+f+Hqu1fnB7759Mu3kzgfw61rD45jLzUfk0L+ED7k9f1I1kNJrzvAv5K/NAear/J4JkZioBEBAIfZxmDEBgDQZxL1HwD6TPt9gDvrq+X2cZDvP/z2WkQMNfO31xebV4601syGGuuQR/9MHlqZSCJi9CA7yqG0djMiLo+e2Pr/n2xZs31cZ/eig+yrb/P553yn+S/dnH+iw/wz1P7sxH/Unv/ubpn/7ucf6DL/Tewyx8e33jjVNf/NiOeOdMqfbOZPuuS/vMv811++/UO3axufR5yMzvkfzLXN50PGrsxklbPN2445yj+feWu78R/tkn9th/Ev7HL8E1/dPr62Tf5TL27//HfKn9fE93aZ/9bzL/zU7Vqef6rL+Hd6/j/bZf5f/n7ni13eFQAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FNCKGI0mLm3GaFovNPbyfjqNpVq3VT1+pLs1PRWOv7NEopO1vWh5ptpO8Pd76Pv52u/RI+5WIeCoiPhj8f6NdLFezqV4PHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABajj2y//+dweb+/wDAITfU6w4AAAdO/QeA/qP+A0D/Uf8BoP+o/wDQf9R/AOg/6j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2ziwoX82PhrfbWct6euLS/NVq+dmarUZotzS+Viubq4UJyuVqezSrFcndvp72XV6kIp5pdujNUrtfpYbXnl0lx1ab5+aWZucrpyqVI4kFEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMZbhxJWoyItBGnabEY8UREjEYhuTKTVc5GxJMR8eNgYTBvj/e60wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwx2rLK7OTWVZZFAgEgs2g1zMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHLz7m373uicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Evpr0lE5MfJkZeGH736v+TeYONnRFz/5OKHNybr9cXx/Pwfm+frH7XOl3rRfwBgJ+063a7jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBJbXlldjLLKov7GPR6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7J1/AgAA//+5gdRV") r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = epoll_create1(0x0) mq_timedsend(r4, 0x0, 0x0, 0x4e, 0x0) mq_timedsend(r4, &(0x7f0000000100)="81759ca44c2963f17c2dd886328c7c6e9c0ec5e6d0484af0fb8e1374eda6457be87cf8ae90546bd3483710e93af48ecabc9665197e52363a65595765788ce9adbb44d40978ea3b683b7d5d65c34b0f2b76c6bcb9bbc2d447c729bc979deb69dcda1099619eab9a3192e9cf978da8101de3c90cda2524b2f471eafdaa4e27b17613b49d04f86b4d08bc01f6b66054491708bd33e5a64eb04869015d02b5bb93eb59f0b6748335abbb6f6d8dbbae0b59165a96b8162d2d5b1b4fa300b5f226", 0xbe, 0x8001, &(0x7f00000001c0)) mq_notify(r4, &(0x7f0000000400)={0x0, 0x35, 0x4, @thr={&(0x7f0000000300)="007aeca0672a1a933f977316b436391262cc1f9d42cdb2d9c785720cc92cf3b945b15e45f83c35fd81e86977a8cca90bec791e96167b41ca66a1cf0659a6558652170b2f8ebd404a6e87c18d690aa925ec5aeef4534205c62f8778853e7644", &(0x7f0000000380)="27f8a6deb45d518fc79fcb5f047cfcef43cdb880f48f3b24c6cd5cf83bae66327b0d852b0159f66703b62f02b26d9ee9ab95e1d666705bc662e11b9b341a28e3e089790e6e"}}) mq_timedsend(r4, &(0x7f0000000800)="108fc0b53740b67d9bf402aab3ddaf5700944d70a260f2372e15a432d2f33e3134285877f9b8a022318727a1dabf9d3b0c363c54317fbc2fbafb0da28c19f8a4719cf94988ceb7f058e00e6aed471ece1fa4d7a22745df187230d40c632daac868f7d62d39743575a2e3ad58b1573e1916754f8380d6691cfa0339a5083c8f47f50400000000000000000000000000e7c21c549d72993e0dab19db750e363a31459486ae0a9daae54030abed3a710551b04a7575167a10f6154b604eeaab5cc104cecc23f77116e35c88b996df3254ecdc579ead71b8", 0xd6, 0x2, &(0x7f0000000200)={0x77359400}) sync_file_range(r5, 0x7f, 0x7be6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) mq_notify(r4, &(0x7f0000000000)) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000640)="0b438b4c0787d8c02b179c13959e838fe9ac740785a50d21f9cd9b6c514552b8650aa997135029ff4bd9580eb2edea22b230ac76c9ffa079baeb98953937a01da8ad1e57a8f7b05438bc2684d18f8efca929b5f4f56f61a73cb7130d23b2f9bb167900329bfe3d260daf3d477edd27f3b052db938d975c282bb74b1dafd1cce84adf42504144a8436d226dbbf134a82bcbbf2ab8a396c0b92880157580004a6dae6d7e37164b2e6736f11c8f2cc05a30cb2270cfd172ab18c18ca95555ea3bc73613cd28f18f3c2a3a6216a859026edd2f58cfe6c51b2470ceef654eed97fc8ae4303cfc846f03ec906b19ed90ca935ce56c48a6b1b0a2961f", 0xf9, 0x4, &(0x7f0000000280)={r6, r7+60000000}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000f9002e2d11355443912f0473f859eda22e22047bb291be