last executing test programs: 4.755134217s ago: executing program 2 (id=4730): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000033c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1490, 0x1290, 0x5802, 0x294, 0x1290, 0x294, 0x13c0, 0x325, 0x378, 0x13c0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'pimreg0\x00', 'macsec0\x00'}, 0x0, 0x1228, 0x1290, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0xfd, 0x0, './cgroup.net/syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}}, @common=@frag={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14f0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4084) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x3, @local, 'dummy0\x00'}}, 0x1e) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000048000000060a010400000000000000000200000a0900"], 0xd0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'gretap0\x00', 0x3}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/123, 0x7b, 0x841) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f00000001c0)=""/8, 0x8, 0xc9110163, 0x0, 0x0) 4.555218807s ago: executing program 3 (id=4735): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0x62e8}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1}, 0x20040051) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pread64(r4, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3.964923984s ago: executing program 1 (id=4737): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, 0x0, 0x0) read(r3, 0x0, 0x0) fchdir(r0) poll(0x0, 0x0, 0x9) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r4, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000) 3.855939149s ago: executing program 2 (id=4738): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, 0x0, 0x0) read(r5, 0x0, 0x0) fchdir(r0) poll(&(0x7f0000000000)=[{r4, 0x80}, {r3, 0x8403}, {r4, 0x80}, {r3, 0x8}], 0x4, 0x9) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000) 3.85470227s ago: executing program 0 (id=4739): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, 0x0, 0x0) read(r5, 0x0, 0x0) fchdir(r0) poll(&(0x7f0000000000)=[{r4, 0x80}, {r3, 0x8403}, {r4, 0x80}, {r3, 0x8}], 0x4, 0x9) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000) 3.705869367s ago: executing program 4 (id=4740): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000001440)=[{&(0x7f0000001480)=""/125, 0x7d}], 0x1, 0x1, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000001000000010000002faf171f85aa57dd01e136c1e080e31bc59c70253656cc6f477f3979e82490e1512206b6e341e9b24c3fa01a9ea20077f3816bd06e3632d695a16e5a1b9dd9fa204aeb392f988084a026b9e4b98fd1373131c7bcfeecc81e5eea674c22f4a99baa4a498237f9fef78e5cb02d98027f06229e8acb2d578c83e48f9b231ce70ea57f7e56f99253560632ade5c0d625cee6817a5c295c995c9b964fe3b95366ded147fb8dd65c285341e419e074026448620fedeb3ed5cefa49747a5fa7b682cc6d6d9c145195de0586e33260d665bcc98c3aaf09e06ca198ce96906648f393431d", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40}}], 0x1, 0x804) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00004e", @ANYRES64=r4], 0x2a) write(r4, &(0x7f0000000000)="8016f8aade2c2048c0e3f84d428a1155e721eafed25f5043caeba714c1085844d148b210db689e77a218a97b5c47075a6ff5a074601cc2268fc6d5a585fa5a0b3486cefcc52c4e4737261710dc08962c577573b1011f338cb4f8d8b765", 0x5d) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x804818, &(0x7f0000000240)={[{@hide}, {@nocompress}, {@nocompress}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@map_off}, {@nojoliet}, {@session={'session', 0x3d, 0x3}}, {@map_acorn}, {@map_off}, {@map_off}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r5) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x24, 0x8, 0x98}) ptrace$setregs(0xd, r5, 0xfffffffffffffffc, &(0x7f00000003c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.63818053s ago: executing program 3 (id=4741): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, 0x0, 0x0) read(r5, 0x0, 0x0) fchdir(r0) poll(&(0x7f0000000000)=[{r4, 0x80}, {r3, 0x8403}, {r4, 0x80}, {r3, 0x8}], 0x4, 0x9) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000) 3.400566381s ago: executing program 1 (id=4742): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x22, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xc3}}}, 0xa0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') 3.356311392s ago: executing program 4 (id=4743): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xf, 0x1dfe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r0, 0xec, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x8000c059, 0xc401, 0x0, 0x20002f7}) bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setns(0xc9, 0x0) 3.321281085s ago: executing program 2 (id=4744): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x22, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xc3}}}, 0xa0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') 3.298839915s ago: executing program 0 (id=4745): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000001440)=[{&(0x7f0000001480)=""/125, 0x7d}], 0x1, 0x1, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000001000000010000002faf171f85aa57dd01e136c1e080e31bc59c70253656cc6f477f3979e82490e1512206b6e341e9b24c3fa01a9ea20077f3816bd06e3632d695a16e5a1b9dd9fa204aeb392f988084a026b9e4b98fd1373131c7bcfeecc81e5eea674c22f4a99baa4a498237f9fef78e5cb02d98027f06229e8acb2d578c83e48f9b231ce70ea57f7e56f99253560632ade5c0d625cee6817a5c295c995c9b964fe3b95366ded147fb8dd65c285341e419e074026448620fedeb3ed5cefa49747a5fa7b682cc6d6d9c145195de0586e33260d665bcc98c3aaf09e06ca198ce96906648f393431d", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40}}], 0x1, 0x804) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00004e", @ANYRES64=r4], 0x2a) write(r4, &(0x7f0000000000)="8016f8aade2c2048c0e3f84d428a1155e721eafed25f5043caeba714c1085844d148b210db689e77a218a97b5c47075a6ff5a074601cc2268fc6d5a585fa5a0b3486cefcc52c4e4737261710dc08962c577573b1011f338cb4f8d8b76567d805b42a2f", 0x63) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x804818, &(0x7f0000000240)={[{@hide}, {@nocompress}, {@nocompress}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@map_off}, {@nojoliet}, {@session={'session', 0x3d, 0x3}}, {@map_acorn}, {@map_off}, {@map_off}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r5) r6 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) process_vm_writev(r6, &(0x7f0000001700)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x24, 0x8, 0x98}) ptrace$setregs(0xd, r5, 0xfffffffffffffffc, &(0x7f00000003c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.199003611s ago: executing program 1 (id=4746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) getgid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x6c, 0x2) write(r1, &(0x7f0000000100)='foo:mod:no', 0xa) 3.174157431s ago: executing program 1 (id=4747): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xf, 0x1dfe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r0, 0xec, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x8000c059, 0xc401, 0x0, 0x20002f7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setns(0xc9, 0x0) 2.194101818s ago: executing program 3 (id=4748): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_rr_get_interval(r0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001040), 0x240000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000001080)={0x2, 0xffffffff, 0x1f1213c5, 0xeb4, 0x7, "18d2c94140191da9d815292fc6c6413e96afd4", 0x40, 0x9}) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x8000004, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x1, 0x1}, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, r2, 0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) mount(0x0, &(0x7f0000001200)='./proc/thread-self/fail-nth\x00', &(0x7f00000011c0)='proc\x00', 0x440, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2.158982429s ago: executing program 4 (id=4749): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, 0x0, 0x0) read(r5, 0x0, 0x0) fchdir(r0) poll(&(0x7f0000000000)=[{r4, 0x80}, {r3, 0x8403}, {r4, 0x80}, {r3, 0x8}], 0x4, 0x9) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000) 1.959804458s ago: executing program 1 (id=4750): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x2, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x3, @local, 'dummy0\x00'}}, 0x1e) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'gretap0\x00', 0x3}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/123, 0x7b, 0x841) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f00000001c0)=""/8, 0x8, 0xc9110163, 0x0, 0x0) 1.9259488s ago: executing program 3 (id=4751): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, 0x0, 0x0) read(r5, 0x0, 0x0) fchdir(r0) poll(&(0x7f0000000000)=[{r4, 0x80}, {r3, 0x8403}, {r4, 0x80}, {r3, 0x8}], 0x4, 0x9) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000) 1.889248132s ago: executing program 2 (id=4752): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, 0x0, 0x0) read(r5, 0x0, 0x0) fchdir(r0) poll(&(0x7f0000000000)=[{r4, 0x80}, {r3, 0x8403}, {r4, 0x80}, {r3, 0x8}], 0x4, 0x9) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000) 1.815383005s ago: executing program 0 (id=4753): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000001440)=[{&(0x7f0000001480)=""/125, 0x7d}], 0x1, 0x1, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000001000000010000002faf171f85aa57dd01e136c1e080e31bc59c70253656cc6f477f3979e82490e1512206b6e341e9b24c3fa01a9ea20077f3816bd06e3632d695a16e5a1b9dd9fa204aeb392f988084a026b9e4b98fd1373131c7bcfeecc81e5eea674c22f4a99baa4a498237f9fef78e5cb02d98027f06229e8acb2d578c83e48f9b231ce70ea57f7e56f99253560632ade5c0d625cee6817a5c295c995c9b964fe3b95366ded147fb8dd65c285341e419e074026448620fedeb3ed5cefa49747a5fa7b682cc6d6d9c145195de0586e33260d665bcc98c3aaf09e06ca198ce96906648f393431d", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40}}], 0x1, 0x804) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00004e", @ANYRES64=r4], 0x2a) write(r4, &(0x7f0000000000)="8016f8aade2c2048c0e3f84d428a1155e721eafed25f5043caeba714c1085844d148b210db689e77a218a97b5c47075a6ff5a074601cc2268fc6d5a585fa5a0b3486cefcc52c4e47372617", 0x4b) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x804818, &(0x7f0000000240)={[{@hide}, {@nocompress}, {@nocompress}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@map_off}, {@nojoliet}, {@session={'session', 0x3d, 0x3}}, {@map_acorn}, {@map_off}, {@map_off}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r5) r6 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) process_vm_writev(r6, &(0x7f0000001700)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x24, 0x8, 0x98}) ptrace$setregs(0xd, r5, 0xfffffffffffffffc, &(0x7f00000003c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.564477707s ago: executing program 0 (id=4754): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000001440)=[{&(0x7f0000001480)=""/125, 0x7d}], 0x1, 0x1, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000001000000010000002faf171f85aa57dd01e136c1e080e31bc59c70253656cc6f477f3979e82490e1512206b6e341e9b24c3fa01a9ea20077f3816bd06e3632d695a16e5a1b9dd9fa204aeb392f988084a026b9e4b98fd1373131c7bcfeecc81e5eea674c22f4a99baa4a498237f9fef78e5cb02d98027f06229e8acb2d578c83e48f9b231ce70ea57f7e56f99253560632ade5c0d625cee6817a5c295c995c9b964fe3b95366ded147fb8dd65c285341e419e074026448620fedeb3ed5cefa49747a5fa7b682cc6d6d9c145195de0586e33260d665bcc98c3aaf09e06ca198ce96906648f393431d", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40}}], 0x1, 0x804) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00004e", @ANYRES64=r4], 0x2a) write(r4, &(0x7f0000000000)="8016f8aade2c2048c0e3f84d428a1155e721eafed25f5043caeba714c1085844d148b210db689e77a218a97b5c47075a6ff5a074601cc2268fc6d5a585fa5a0b3486cefcc52c4e4737261710dc08962c577573b1011f338cb4f8d8b76567d805", 0x60) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x804818, &(0x7f0000000240)={[{@hide}, {@nocompress}, {@nocompress}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@map_off}, {@nojoliet}, {@session={'session', 0x3d, 0x3}}, {@map_acorn}, {@map_off}, {@map_off}]}, 0x2, 0x553, &(0x7f0000000b00)="$eJzs3dtuE0kawPGvQ7JYXim7WlYIRQGKsCsFKZi2DUYWV73tslNgd1vdbZRcoYg4KMKBFWGlTW7Y3LAz0sxDMJfzEPNGaB5hRn1wjj4AOU70/1lQ5e5y1deO1Z8qcVcLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63ZdtGSpvE6S2o4txb4rb2n2auPbJB7B4oR44pY8T/J5eRGuunG3/d2X4//m5PZ9Nms5OIiJ9t/vv7XJ9cmJ/qvHxHwV/npG3va3Np+vdLrdd+dVCAX0M2rw/c1tGdC37SchlYm9FW1UrEfLNZDVTdNHS6HkW4pN9BO5Adq3r2nitVqWenCst/xGjWnqfsbH98v2XZFPS20tROEvvfgaSF0F02zabxG0ibeHbd5HH8Qn5lIRdppKbW23uuWxx1A3Kj4JY1K4xqV7FKpWCyVipVH1UePbXvyyAb7EDnS4uQ+tPhjOsGzN3A8E1n+l6YY8aQjS6IGPlypSSC+tIbsz/Tz/z8f6JHj7s///Sx/Y2/3jCT5/1b67Naw/D8klrN7bMqWbMtrWZGe9KQr7849orN9NESLJ0ZC8cVIS5xki8q2KKlKRSpiywtZlPpU/EOsi5GmaAllWUKJRCefKFcC0eJIJL4EomReXLknSopSlaqURYmWgiyLLx3xpCE1cZJe1mQ9ed/LoqxhMe42Kg49jHz/c9eV0oijJf/j+E7y9A0cy2/9/A8AAAAAAC4tK/ntezz/n5KbSa1umto+77AAAAAAAMAJSv7yPxsXybezborF/B8AAAAAgMvGSq6xs0QkL7fT2ppYyeVS/BIAAAAAAIBLIvn7/624SNZAuS3W7nIpzP8BAAAAALgkvhu7xn7Yvmr98qsEwZS10176h7WRrM3rbFxJX3flcI9RfcaazjpJikpaTE66etbKpY12F8H8nBVr4+Kw9gJwdgP439cEcG1SfpA7aZs7q2m5mu35SzpKvm6auuD6zSdFcZzpiUgvRf95s/5fSQ7/e681beVkvdctvHzbW01i2Yl72dnIFlA8so7iiFjeJ+stJNdcDDziqeRCjGzcvCVr672u3V66mvXsbEyklYmDI36YHjHmR5lLW81lK97m+3vSMXPxmMXCsKPPoige88g/yt20zd35u2kxIIrSuChK+6MY/F4cP4ryuCjKx4wCAM7L2pgsZMmRvPsNZ7lvy+7yldn9o8ynbeZnkhPr5MyAM7o97oxuHzO7/XzkHkjDcmw87o+Hsuqn+AWfho4bNktW/BZeeb/xb7m+ubV9f31j5VX3VfdNqVSu2A9t+1FJppLDyApyDwBggP332LEG5v+xd+GxHmaz6p3Ds+os4/1t9ysFBXkpb6Unq7KQXG2QfONgYK/5fV9DWBgza80naTK9w8vCiFndn5KrHPr9lka2PRhD+Sx+FAAAnJm5MXn4S/L/wph598FcPnp2nN93tzYAAHA6dPDZykf/t4LAtF8Uq9WiEy1qFfjuMxWYWkMr40U6cBcdr6FVO/Aj3/WbceW5qelQhZ122w8iVfcD1fZDs5QsH6iyW7+HuuV4kXHDdlM7oVau70WOG6maCV3V7vyracJFHSQvDtvaNXXjOpHxPRX6ncDVBaVCrfc1NDXtRaZu4qqn2oFpOUFOPfebnZZWNR26gWlHftphfyzj1f2glXRbOO83GwCAC2Jza/v1Sq/XfXeKlYED5878UAEAQGZMlgYAAAAAAAAAAAAAAAAAAAAAABfAWVz/R+WSV/pLQV+UeKicQGXsqePDqZ+cAJyq3wMAAP//5sZO5Q==") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r5) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x24, 0x8, 0x98}) ptrace$setregs(0xd, r5, 0xfffffffffffffffc, &(0x7f00000003c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.416373974s ago: executing program 4 (id=4755): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) read(r5, 0x0, 0x0) fchdir(r0) poll(&(0x7f0000000000)=[{r4, 0x80}, {r3, 0x8403}, {r4, 0x80}, {r3, 0x8}], 0x4, 0x9) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000) 1.317604479s ago: executing program 0 (id=4756): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, 0x0, 0x0) read(r2, 0x0, 0x0) fchdir(0xffffffffffffffff) poll(&(0x7f0000000000)=[{r1, 0x80}, {0xffffffffffffffff, 0x8403}, {r1, 0x80}, {0xffffffffffffffff, 0x8}], 0x4, 0x9) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r3, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000) 1.298389899s ago: executing program 3 (id=4757): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) getgid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x6c, 0x2) write(r1, &(0x7f0000000100)='foo:mod:no', 0xa) 1.27634403s ago: executing program 3 (id=4758): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x22, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xc3}}}, 0xa0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') 1.250646372s ago: executing program 2 (id=4759): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x22, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xc3}}}, 0xa0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') 1.05786831s ago: executing program 1 (id=4760): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x22, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xc3}}}, 0xa0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 823.617622ms ago: executing program 4 (id=4761): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 767.716084ms ago: executing program 4 (id=4762): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xf, 0x1dfe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r0, 0xec, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x8000c059, 0xc401, 0x0, 0x20002f7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, 0x0, 0x0, 0xc2a) setns(0xc9, 0x0) 730.552016ms ago: executing program 0 (id=4763): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r6, r7, 0x0, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x22, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xc3}}}, 0xa0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') 0s ago: executing program 2 (id=4764): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000001440)=[{&(0x7f0000001480)=""/125, 0x7d}], 0x1, 0x1, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="140000000000000001000000010000002faf171f85aa57dd01e136c1e080e31bc59c70253656cc6f477f3979e82490e1512206b6e341e9b24c3fa01a9ea20077f3816bd06e3632d695a16e5a1b9dd9fa204aeb392f988084a026b9e4b98fd1373131c7bcfeecc81e5eea674c22f4a99baa4a498237f9fef78e5cb02d98027f06229e8acb2d578c83e48f9b231ce70ea57f7e56f99253560632ade5c0d625cee6817a5c295c995c9b964fe3b95366ded147fb8dd65c285341e419e074026448620fedeb3ed5cefa49747a5fa7b682cc6d6d9c145195de0586e33260d665bcc98c3aaf09e06ca198ce96906648f393431d", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40}}], 0x1, 0x804) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00004e", @ANYRES64=r4], 0x2a) write(r4, &(0x7f0000000000)="8016f8aade2c2048c0e3f84d428a1155e721eafed25f5043caeba714c1085844d148b210db689e77a218a97b5c47075a6ff5a074601cc2268fc6d5a585fa5a0b3486cefcc52c4e47372617", 0x4b) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x804818, &(0x7f0000000240)={[{@hide}, {@nocompress}, {@nocompress}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@map_off}, {@nojoliet}, {@session={'session', 0x3d, 0x3}}, {@map_acorn}, {@map_off}, {@map_off}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r5) r6 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) process_vm_writev(r6, &(0x7f0000001700)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000070000/0x2000)=nil, &(0x7f000079e000/0x2000)=nil, 0x1000000000000003, 0x0, 0x0, 0x0, 0x65, 0x24, 0x8, 0x98}) ptrace$setregs(0xd, r5, 0xfffffffffffffffc, &(0x7f00000003c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): ption option not supported [ 370.818815][T16009] loop0: detected capacity change from 0 to 128 [ 370.819178][T16009] EXT4-fs: test_dummy_encryption option not supported [ 370.989756][T16016] loop4: detected capacity change from 0 to 128 [ 370.990073][T16016] EXT4-fs: test_dummy_encryption option not supported [ 371.880805][T16023] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3971'. [ 371.880831][T16023] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3971'. [ 372.181396][T16020] loop2: detected capacity change from 0 to 512 [ 372.181647][T16020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.322509][T16019] loop0: detected capacity change from 0 to 512 [ 372.322815][T16019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.848497][T16027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.891068][T16027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.891128][T16027] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.893097][ T29] audit: type=1400 audit(1789873356.962:743): avc: denied { write } for pid=16015 comm="syz.4.3978" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.893157][T16027] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.3978: corrupted xattr block 33: invalid ea_ino [ 372.894699][T16027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 372.894727][T16027] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.3978: corrupted xattr block 33: invalid ea_ino [ 372.896310][T16027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 372.896335][T16027] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.3978: corrupted xattr block 33: invalid ea_ino [ 372.898594][T16027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 372.916531][T16019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.916668][T16019] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.269241][ T29] audit: type=1400 audit(1789873357.112:744): avc: denied { write } for pid=16008 comm="syz.0.3975" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.269312][T16030] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 373.273388][T16020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.273488][T16020] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.304064][T16017] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3975: corrupted xattr block 33: invalid ea_ino [ 373.308255][T16018] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3973: corrupted xattr block 33: invalid ea_ino [ 373.308350][T16017] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 373.308390][T16017] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3975: corrupted xattr block 33: invalid ea_ino [ 373.308543][T16018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 373.308572][T16018] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3973: corrupted xattr block 33: invalid ea_ino [ 373.308624][T16017] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 373.308749][T16017] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.3975: corrupted xattr block 33: invalid ea_ino [ 373.308905][T16018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 373.308980][T16018] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3973: corrupted xattr block 33: invalid ea_ino [ 373.309041][T16017] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 373.309405][T16018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 373.319087][ T29] audit: type=1400 audit(1789873357.372:745): avc: denied { write } for pid=16005 comm="syz.2.3973" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.364556][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.607527][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.670851][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.025650][T16058] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 374.027421][T16058] JBD2: no valid journal superblock found [ 374.027442][T16058] EXT4-fs (loop1): Could not load journal inode [ 374.059506][T16054] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3980'. [ 374.059805][T16054] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3980'. [ 374.106647][T16056] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3985'. [ 374.106684][T16056] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3985'. [ 374.308761][T16068] futex_wake_op: syz.3.3986 tries to shift op by 144; fix this program [ 374.308813][T16068] futex_wake_op: syz.3.3986 tries to shift op by 144; fix this program [ 374.597514][T16069] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3987'. [ 374.597613][T16069] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3987'. [ 374.837951][T16086] set_capacity_and_notify: 2 callbacks suppressed [ 374.837970][T16086] loop2: detected capacity change from 0 to 128 [ 374.840703][T16086] EXT4-fs: test_dummy_encryption option not supported [ 374.900622][T16089] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3990'. [ 374.900656][T16089] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3990'. [ 375.081743][T16091] loop2: detected capacity change from 0 to 512 [ 375.082614][T16091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.222392][T16091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.222493][T16091] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.252864][ T29] audit: type=1400 audit(1789873359.292:746): avc: denied { write } for pid=16085 comm="syz.2.3993" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.278073][T16091] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3993: corrupted xattr block 33: invalid ea_ino [ 375.278272][T16091] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 375.278313][T16091] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3993: corrupted xattr block 33: invalid ea_ino [ 375.278657][T16091] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 375.278733][T16091] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3993: corrupted xattr block 33: invalid ea_ino [ 375.305073][T16091] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 375.775928][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.932322][T16108] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 375.932322][T16108] program syz.2.3998 not setting count and/or reply_len properly [ 376.590591][T16124] loop4: detected capacity change from 0 to 128 [ 376.591668][T16124] EXT4-fs: test_dummy_encryption option not supported [ 376.613577][T16126] futex_wake_op: syz.1.4003 tries to shift op by 144; fix this program [ 376.613688][T16126] futex_wake_op: syz.1.4003 tries to shift op by 144; fix this program [ 376.650081][T16122] loop0: detected capacity change from 0 to 1024 [ 376.681169][T16122] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 376.684626][T16122] JBD2: no valid journal superblock found [ 376.684645][T16122] EXT4-fs (loop0): Could not load journal inode [ 377.209418][T16127] loop4: detected capacity change from 0 to 512 [ 377.209728][T16127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.372068][T16127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.372146][T16127] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.623631][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.696594][T16148] loop0: detected capacity change from 0 to 128 [ 377.707257][T16148] EXT4-fs: test_dummy_encryption option not supported [ 377.958794][T16151] loop0: detected capacity change from 0 to 512 [ 377.959705][T16151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.075545][T16151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.075825][T16151] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.081906][T16151] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4010: corrupted xattr block 33: invalid ea_ino [ 378.106176][T16151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 378.106300][T16151] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4010: corrupted xattr block 33: invalid ea_ino [ 378.122802][T16151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 378.122875][T16151] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4010: corrupted xattr block 33: invalid ea_ino [ 378.150383][ T29] audit: type=1400 audit(1789873362.152:747): avc: denied { write } for pid=16147 comm="syz.0.4010" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 378.159839][T16151] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 378.520034][T16162] loop1: detected capacity change from 0 to 128 [ 378.524736][T16162] EXT4-fs: test_dummy_encryption option not supported [ 378.716050][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.768661][T16168] loop1: detected capacity change from 0 to 512 [ 378.769373][T16168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.781766][T16168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.781917][T16168] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.786605][ T29] audit: type=1400 audit(1789873362.852:748): avc: denied { write } for pid=16160 comm="syz.1.4012" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 378.787200][T16168] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4012: corrupted xattr block 33: invalid ea_ino [ 378.787628][T16168] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 378.787653][T16168] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4012: corrupted xattr block 33: invalid ea_ino [ 378.787998][T16168] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 378.788063][T16168] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4012: corrupted xattr block 33: invalid ea_ino [ 378.788381][T16168] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 379.145361][T16129] __nla_validate_parse: 2 callbacks suppressed [ 379.145406][T16129] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4004'. [ 379.145436][T16129] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4004'. [ 379.180509][T16176] loop0: detected capacity change from 0 to 128 [ 379.193056][T16176] EXT4-fs: test_dummy_encryption option not supported [ 379.444636][T16178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.879533][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.917094][T16178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.917156][T16178] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.109524][T16182] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4016'. [ 380.109544][T16182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4016'. [ 380.177641][T16186] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4018'. [ 380.177712][T16186] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4018'. [ 380.221098][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.414261][T16202] set_capacity_and_notify: 1 callbacks suppressed [ 380.414280][T16202] loop4: detected capacity change from 0 to 128 [ 380.414633][T16202] EXT4-fs: test_dummy_encryption option not supported [ 380.656041][T16207] loop4: detected capacity change from 0 to 512 [ 380.656964][T16207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.673137][T16192] loop2: detected capacity change from 0 to 1024 [ 380.703993][T16207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.704083][T16207] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.030979][T16192] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 381.036886][T16192] JBD2: no valid journal superblock found [ 381.036995][T16192] EXT4-fs (loop2): Could not load journal inode [ 381.328715][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.593937][T16216] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4026'. [ 381.594118][T16216] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4026'. [ 382.079980][T16219] loop4: detected capacity change from 0 to 128 [ 382.080215][T16219] EXT4-fs: test_dummy_encryption option not supported [ 382.346471][T16228] loop4: detected capacity change from 0 to 512 [ 382.347059][T16228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 382.422308][T16228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.422432][T16228] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.974082][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.002482][T16245] futex_wake_op: syz.4.4034 tries to shift op by 144; fix this program [ 383.002527][T16245] futex_wake_op: syz.4.4034 tries to shift op by 144; fix this program [ 383.098606][T16248] loop4: detected capacity change from 0 to 128 [ 383.101555][T16248] EXT4-fs: test_dummy_encryption option not supported [ 383.333028][T16252] loop0: detected capacity change from 0 to 128 [ 383.335522][T16252] EXT4-fs: test_dummy_encryption option not supported [ 383.350393][T16253] loop4: detected capacity change from 0 to 512 [ 383.350915][T16253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 383.461863][T16253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.462146][T16253] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.802617][T16259] futex_wake_op: syz.1.4037 tries to shift op by 144; fix this program [ 383.802788][T16259] futex_wake_op: syz.1.4037 tries to shift op by 144; fix this program [ 383.873625][T16265] loop1: detected capacity change from 0 to 128 [ 383.877171][T16265] EXT4-fs: test_dummy_encryption option not supported [ 383.995570][T16266] loop0: detected capacity change from 0 to 512 [ 383.995868][T16266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 384.706943][T16256] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 384.861508][T16266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.861663][T16266] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.868234][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.943722][T16257] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4036: corrupted xattr block 33: invalid ea_ino [ 384.978138][T16261] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4038'. [ 384.978161][T16261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4038'. [ 385.026323][ T29] audit: type=1400 audit(1789873369.012:749): avc: denied { write } for pid=16251 comm="syz.0.4036" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.049569][T16257] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 385.049607][T16257] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4036: corrupted xattr block 33: invalid ea_ino [ 385.102624][T16257] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 385.102662][T16257] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4036: corrupted xattr block 33: invalid ea_ino [ 385.102895][T16257] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 385.123301][T16280] futex_wake_op: syz.4.4041 tries to shift op by 144; fix this program [ 385.123357][T16280] futex_wake_op: syz.4.4041 tries to shift op by 144; fix this program [ 385.338691][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.420873][T16291] set_capacity_and_notify: 1 callbacks suppressed [ 385.420952][T16291] loop0: detected capacity change from 0 to 128 [ 385.421256][T16291] EXT4-fs: test_dummy_encryption option not supported [ 385.430562][T16290] EXT4-fs: test_dummy_encryption option not supported [ 385.691007][T16296] loop0: detected capacity change from 0 to 512 [ 385.691820][T16296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.912109][T16296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.912251][T16296] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.103449][T16299] loop3: detected capacity change from 0 to 128 [ 386.115519][T16299] EXT4-fs: test_dummy_encryption option not supported [ 386.292536][T16302] loop4: detected capacity change from 0 to 512 [ 386.292794][T16302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.134183][T16302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.134299][T16302] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.277474][T16290] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4045: corrupted xattr block 33: invalid ea_ino [ 387.277562][ T29] audit: type=1400 audit(1789873371.342:750): avc: denied { write } for pid=16288 comm="syz.4.4045" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 387.277726][T16290] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 387.277756][T16290] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4045: corrupted xattr block 33: invalid ea_ino [ 387.277935][T16290] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 387.278014][T16290] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4045: corrupted xattr block 33: invalid ea_ino [ 387.278181][T16290] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 387.623405][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.862399][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.977174][T16316] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4050'. [ 387.977311][T16316] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4050'. [ 388.206698][T16308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4047'. [ 388.206762][T16308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4047'. [ 388.653235][T16329] loop3: detected capacity change from 0 to 128 [ 388.659288][T16329] EXT4-fs: test_dummy_encryption option not supported [ 388.884940][T16333] loop3: detected capacity change from 0 to 512 [ 388.885546][T16333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.936030][T16332] loop2: detected capacity change from 0 to 128 [ 388.954639][T16333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.954804][T16333] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.956888][T16333] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4053: corrupted xattr block 33: invalid ea_ino [ 388.957493][T16333] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 388.957667][T16333] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4053: corrupted xattr block 33: invalid ea_ino [ 388.972077][T16333] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 388.972351][T16333] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4053: corrupted xattr block 33: invalid ea_ino [ 388.972911][T16333] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 388.979145][ T29] audit: type=1400 audit(1789873373.022:751): avc: denied { write } for pid=16328 comm="syz.3.4053" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.293646][T16339] loop4: detected capacity change from 0 to 128 [ 389.297537][T16339] EXT4-fs: test_dummy_encryption option not supported [ 389.360292][T16332] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.360495][T16332] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.478526][T13337] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.574617][T16348] loop4: detected capacity change from 0 to 512 [ 389.575237][T16348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.592489][T11524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.603725][T16347] loop0: detected capacity change from 0 to 128 [ 389.605344][T16347] EXT4-fs: test_dummy_encryption option not supported [ 389.662843][T16348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.662935][T16348] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.668895][T16348] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4055: corrupted xattr block 33: invalid ea_ino [ 389.669392][ T29] audit: type=1400 audit(1789873373.732:752): avc: denied { write } for pid=16335 comm="syz.4.4055" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.769029][T16348] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 389.769136][T16348] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4055: corrupted xattr block 33: invalid ea_ino [ 389.769758][T16348] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 389.769859][T16348] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4055: corrupted xattr block 33: invalid ea_ino [ 389.770272][T16348] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 390.087863][T16356] futex_wake_op: syz.3.4058 tries to shift op by 144; fix this program [ 390.087947][T16356] futex_wake_op: syz.3.4058 tries to shift op by 144; fix this program [ 390.124347][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.156282][T16360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.272021][T16360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.272088][T16360] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.276966][T16360] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4057: corrupted xattr block 33: invalid ea_ino [ 390.277247][T16360] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 390.277293][T16360] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4057: corrupted xattr block 33: invalid ea_ino [ 390.277671][T16360] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 390.277693][T16360] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4057: corrupted xattr block 33: invalid ea_ino [ 390.278146][T16360] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 390.309258][ T29] audit: type=1400 audit(1789873374.342:753): avc: denied { write } for pid=16346 comm="syz.0.4057" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.488236][T16368] set_capacity_and_notify: 1 callbacks suppressed [ 390.488253][T16368] loop2: detected capacity change from 0 to 128 [ 390.488593][T16368] EXT4-fs: test_dummy_encryption option not supported [ 390.680779][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.768132][T16377] loop2: detected capacity change from 0 to 512 [ 390.768730][T16377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.800088][T16376] loop1: detected capacity change from 0 to 128 [ 390.803888][T16376] EXT4-fs: test_dummy_encryption option not supported [ 390.812162][T16377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.812470][T16377] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.819806][T16377] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4056: corrupted xattr block 33: invalid ea_ino [ 390.821269][T16377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 390.821382][T16377] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4056: corrupted xattr block 33: invalid ea_ino [ 390.821561][T16377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 390.821594][T16377] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4056: corrupted xattr block 33: invalid ea_ino [ 390.821773][T16377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 390.849049][ T29] audit: type=1400 audit(1789873374.882:754): avc: denied { write } for pid=16353 comm="syz.2.4056" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.721313][T16384] loop1: detected capacity change from 0 to 512 [ 391.721606][T16384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.831749][T16384] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.837047][ T29] audit: type=1400 audit(1789873375.902:755): avc: denied { write } for pid=16374 comm="syz.1.4061" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.837491][T16384] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4061: corrupted xattr block 33: invalid ea_ino [ 391.838605][T16384] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 391.838702][T16384] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4061: corrupted xattr block 33: invalid ea_ino [ 391.839754][T16384] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 391.839838][T16384] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4061: corrupted xattr block 33: invalid ea_ino [ 391.840237][T16384] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 392.230441][T12208] EXT4-fs unmount: 2 callbacks suppressed [ 392.230457][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.298473][T16401] loop2: detected capacity change from 0 to 128 [ 392.304531][T16401] EXT4-fs: test_dummy_encryption option not supported [ 392.318866][T16400] loop1: detected capacity change from 0 to 128 [ 392.325646][T16400] EXT4-fs: test_dummy_encryption option not supported [ 392.582742][T16403] loop2: detected capacity change from 0 to 512 [ 392.583066][T16403] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.286988][T16405] loop1: detected capacity change from 0 to 512 [ 393.288001][T16405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.380424][T16403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.380505][T16403] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.380555][T16405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.380599][T16405] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.414070][T16402] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4064: corrupted xattr block 33: invalid ea_ino [ 393.415113][T16404] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4065: corrupted xattr block 33: invalid ea_ino [ 393.431243][T16402] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 393.431284][T16402] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4064: corrupted xattr block 33: invalid ea_ino [ 393.431448][T16402] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 393.431624][T16402] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4064: corrupted xattr block 33: invalid ea_ino [ 393.431733][T16402] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 393.435723][ T29] audit: type=1400 audit(1789873377.482:756): avc: denied { write } for pid=16399 comm="syz.2.4064" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 393.435754][ T29] audit: type=1400 audit(1789873377.482:757): avc: denied { write } for pid=16398 comm="syz.1.4065" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 393.439804][T16404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 393.439849][T16404] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4065: corrupted xattr block 33: invalid ea_ino [ 393.440085][T16404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 393.440112][T16404] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4065: corrupted xattr block 33: invalid ea_ino [ 393.441363][T16404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 393.452827][T16415] loop3: detected capacity change from 0 to 128 [ 393.457324][T16415] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.462694][T16415] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.491707][T16337] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 393.831719][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.832311][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.845211][T11524] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.873368][T16423] loop1: detected capacity change from 0 to 128 [ 393.875051][T16423] EXT4-fs: test_dummy_encryption option not supported [ 394.081151][T16430] EXT4-fs: test_dummy_encryption option not supported [ 394.207106][T16431] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.046976][T16411] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4066'. [ 395.047009][T16411] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4066'. [ 395.072917][T16431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.072983][T16431] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.434905][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.510959][T16449] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4075'. [ 396.365317][T16459] set_capacity_and_notify: 2 callbacks suppressed [ 396.365360][T16459] loop4: detected capacity change from 0 to 128 [ 396.367056][T16459] EXT4-fs: test_dummy_encryption option not supported [ 396.495833][T16462] loop2: detected capacity change from 0 to 128 [ 396.497930][T16462] EXT4-fs: test_dummy_encryption option not supported [ 397.532231][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 397.532258][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 397.603021][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 397.603056][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 397.794803][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 397.794836][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 397.807473][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4079'. [ 397.843590][T16484] loop4: detected capacity change from 0 to 128 [ 397.847460][T16484] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.847661][T16484] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.937354][T11946] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.959629][T16492] loop4: detected capacity change from 0 to 128 [ 397.960003][T16492] EXT4-fs: test_dummy_encryption option not supported [ 398.196328][T16499] loop4: detected capacity change from 0 to 512 [ 398.196674][T16499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 398.241991][T16499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.242060][T16499] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.248709][T16499] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4083: corrupted xattr block 33: invalid ea_ino [ 398.249117][T16499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 398.249173][T16499] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4083: corrupted xattr block 33: invalid ea_ino [ 398.249381][T16499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 398.249454][T16499] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4083: corrupted xattr block 33: invalid ea_ino [ 398.249662][T16499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 398.535216][ T29] audit: type=1400 audit(1789873382.312:758): avc: denied { write } for pid=16491 comm="syz.4.4083" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 398.634274][T16512] loop2: detected capacity change from 0 to 128 [ 398.649872][T16512] EXT4-fs: test_dummy_encryption option not supported [ 398.907949][T16516] loop2: detected capacity change from 0 to 512 [ 398.908402][T16516] EXT4-fs: Ignoring removed nomblk_io_submit option [ 398.956251][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.003710][T16516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.003926][T16516] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.010364][T16516] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4087: corrupted xattr block 33: invalid ea_ino [ 399.047976][ T29] audit: type=1400 audit(1789873383.082:759): avc: denied { write } for pid=16511 comm="syz.2.4087" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 399.076272][T16516] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 399.076362][T16516] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4087: corrupted xattr block 33: invalid ea_ino [ 399.077009][T16516] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 399.077110][T16516] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4087: corrupted xattr block 33: invalid ea_ino [ 399.077901][T16516] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 399.541613][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.197923][T16546] loop1: detected capacity change from 0 to 128 [ 400.198300][T16546] EXT4-fs: test_dummy_encryption option not supported [ 400.342711][T16551] loop4: detected capacity change from 0 to 128 [ 400.344542][T16551] EXT4-fs: test_dummy_encryption option not supported [ 400.473229][T16552] loop1: detected capacity change from 0 to 512 [ 400.473492][T16552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.392475][T16563] loop2: detected capacity change from 0 to 128 [ 401.392907][T16563] EXT4-fs: test_dummy_encryption option not supported [ 401.524189][T16552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.524329][T16552] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.555181][T16548] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4095: corrupted xattr block 33: invalid ea_ino [ 401.557078][ T29] audit: type=1400 audit(1789873385.622:760): avc: denied { write } for pid=16545 comm="syz.1.4095" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.560296][T16548] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 401.560388][T16548] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4095: corrupted xattr block 33: invalid ea_ino [ 401.560560][T16548] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 401.560582][T16548] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4095: corrupted xattr block 33: invalid ea_ino [ 401.560731][T16548] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 401.806146][T16568] loop2: detected capacity change from 0 to 512 [ 401.806737][T16568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.822734][T16568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.822872][T16568] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.828329][ T29] audit: type=1400 audit(1789873385.892:761): avc: denied { write } for pid=16562 comm="syz.2.4098" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.828735][T16568] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4098: corrupted xattr block 33: invalid ea_ino [ 401.829734][T16568] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 401.829762][T16568] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4098: corrupted xattr block 33: invalid ea_ino [ 401.830101][T16568] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 401.830190][T16568] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4098: corrupted xattr block 33: invalid ea_ino [ 401.830339][T16568] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 402.144879][T16561] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 402.318059][T16561] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 402.343233][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.346168][T16573] loop0: detected capacity change from 0 to 128 [ 402.346536][T16573] EXT4-fs: test_dummy_encryption option not supported [ 402.480363][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.516498][T16579] __nla_validate_parse: 13 callbacks suppressed [ 402.516516][T16579] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4092'. [ 402.517126][T16579] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4092'. [ 402.597023][T16583] loop0: detected capacity change from 0 to 512 [ 402.597686][T16583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.612350][T16583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.612553][T16583] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.620161][ T29] audit: type=1400 audit(1789873386.692:762): avc: denied { write } for pid=16566 comm="syz.0.4099" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 402.620906][T16583] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4099: corrupted xattr block 33: invalid ea_ino [ 402.621396][T16583] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 402.621517][T16583] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4099: corrupted xattr block 33: invalid ea_ino [ 402.621739][T16583] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 402.621829][T16583] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4099: corrupted xattr block 33: invalid ea_ino [ 402.622104][T16583] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 403.015485][T16590] loop1: detected capacity change from 0 to 128 [ 403.015786][T16590] EXT4-fs: test_dummy_encryption option not supported [ 403.149130][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.250851][T16600] loop1: detected capacity change from 0 to 512 [ 403.251419][T16600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 403.261937][T16600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.262150][T16600] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.268460][ T29] audit: type=1400 audit(1789873387.332:763): avc: denied { write } for pid=16580 comm="syz.1.4101" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.268848][T16600] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4101: corrupted xattr block 33: invalid ea_ino [ 403.269420][T16600] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 403.269529][T16600] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4101: corrupted xattr block 33: invalid ea_ino [ 403.269813][T16600] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 403.269835][T16600] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4101: corrupted xattr block 33: invalid ea_ino [ 403.270088][T16600] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 403.695742][T16610] loop0: detected capacity change from 0 to 128 [ 403.696012][T16610] EXT4-fs: test_dummy_encryption option not supported [ 403.862668][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.945593][T16614] loop0: detected capacity change from 0 to 512 [ 403.946531][T16614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.014285][T16614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.014423][T16614] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.512457][T16618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4109'. [ 404.512594][T16618] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4109'. [ 404.616231][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.651493][T16626] loop0: detected capacity change from 0 to 128 [ 404.652029][T16626] EXT4-fs: test_dummy_encryption option not supported [ 404.811660][T16630] loop1: detected capacity change from 0 to 128 [ 404.816082][T16630] EXT4-fs: test_dummy_encryption option not supported [ 404.941172][T16631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.826634][T16631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.826713][T16631] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.006291][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4114'. [ 406.206262][T16645] EXT4-fs: test_dummy_encryption option not supported [ 406.219714][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.397542][T16649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4116'. [ 406.397565][T16649] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4116'. [ 406.411771][T16651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.411943][T16651] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.459028][T16657] set_capacity_and_notify: 3 callbacks suppressed [ 406.459055][T16657] loop2: detected capacity change from 0 to 512 [ 406.459876][T16657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.489130][T16657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.489284][T16657] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.495386][T16657] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4117: corrupted xattr block 33: invalid ea_ino [ 406.497066][T16657] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 406.497214][T16657] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4117: corrupted xattr block 33: invalid ea_ino [ 406.497772][T16657] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 406.497879][T16657] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4117: corrupted xattr block 33: invalid ea_ino [ 406.498291][T16657] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 406.519223][ T29] audit: type=1400 audit(1789873390.562:764): avc: denied { write } for pid=16644 comm="syz.2.4117" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.536159][T16651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.544023][T16651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.751301][ T29] audit: type=1400 audit(1789873390.822:765): avc: denied { write } for pid=16650 comm="syz.0.4118" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.985367][T16666] loop4: detected capacity change from 0 to 128 [ 406.986386][T16666] EXT4-fs: test_dummy_encryption option not supported [ 407.160356][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.240266][T16670] loop4: detected capacity change from 0 to 512 [ 407.241101][T16670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 407.268807][T16670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.269050][T16670] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.275426][T16670] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4121: corrupted xattr block 33: invalid ea_ino [ 407.275621][ T29] audit: type=1400 audit(1789873391.342:766): avc: denied { write } for pid=16665 comm="syz.4.4121" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.276102][T16670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 407.276129][T16670] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4121: corrupted xattr block 33: invalid ea_ino [ 407.276433][T16670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 407.276467][T16670] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4121: corrupted xattr block 33: invalid ea_ino [ 407.276816][T16670] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 407.642519][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.714408][T16669] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4122'. [ 407.714726][T16669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4122'. [ 407.816937][T16684] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4124'. [ 407.816973][T16684] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4124'. [ 407.918934][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.968961][T16687] loop4: detected capacity change from 0 to 128 [ 407.972613][T16687] EXT4-fs: test_dummy_encryption option not supported [ 408.225256][T16690] loop4: detected capacity change from 0 to 512 [ 408.225844][T16690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.341424][T16690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.341652][T16690] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.348693][T16690] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4126: corrupted xattr block 33: invalid ea_ino [ 408.373512][T16690] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 408.373654][T16690] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4126: corrupted xattr block 33: invalid ea_ino [ 408.374017][T16690] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 408.374218][T16690] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4126: corrupted xattr block 33: invalid ea_ino [ 408.374658][T16690] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 408.416326][ T29] audit: type=1400 audit(1789873392.412:767): avc: denied { write } for pid=16686 comm="syz.4.4126" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.725818][T16702] loop2: detected capacity change from 0 to 128 [ 408.727829][T16702] EXT4-fs: test_dummy_encryption option not supported [ 408.744740][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4127'. [ 408.983926][T16709] loop2: detected capacity change from 0 to 512 [ 408.984625][T16709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.045398][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.081748][T16709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.081875][T16709] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.302797][T16700] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4129'. [ 409.302965][T16700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4129'. [ 409.633086][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.051162][T16718] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4133'. [ 410.051292][T16718] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4133'. [ 410.097745][T16726] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4137'. [ 410.662806][T16740] loop2: detected capacity change from 0 to 128 [ 410.666888][T16740] EXT4-fs: test_dummy_encryption option not supported [ 410.836518][T16745] loop0: detected capacity change from 0 to 128 [ 410.905914][T16746] loop2: detected capacity change from 0 to 512 [ 410.907042][T16746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.265714][T16745] EXT4-fs: test_dummy_encryption option not supported [ 411.269129][T16746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.269199][T16746] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.594100][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.709274][T16759] loop1: detected capacity change from 0 to 128 [ 411.709658][T16759] EXT4-fs: test_dummy_encryption option not supported [ 411.862987][T16762] loop0: detected capacity change from 0 to 512 [ 411.863374][T16762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 412.584598][T16764] loop1: detected capacity change from 0 to 512 [ 412.585401][T16764] EXT4-fs: Ignoring removed nomblk_io_submit option [ 412.661450][T16764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.661527][T16764] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.661569][T16762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.661618][T16762] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.694440][T16760] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4144: corrupted xattr block 33: invalid ea_ino [ 412.694947][ T29] audit: type=1400 audit(1789873396.762:768): avc: denied { write } for pid=16744 comm="syz.0.4144" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.707712][T16760] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 412.707753][T16760] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4144: corrupted xattr block 33: invalid ea_ino [ 412.707890][T16763] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4147: corrupted xattr block 33: invalid ea_ino [ 412.707984][ T29] audit: type=1400 audit(1789873396.782:769): avc: denied { write } for pid=16758 comm="syz.1.4147" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.707930][T16760] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 412.708028][T16760] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4144: corrupted xattr block 33: invalid ea_ino [ 412.708209][T16763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 412.708218][T16760] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 412.708237][T16763] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4147: corrupted xattr block 33: invalid ea_ino [ 412.708628][T16763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 412.708765][T16763] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4147: corrupted xattr block 33: invalid ea_ino [ 412.709037][T16763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 413.069612][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.084738][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.149801][T16776] loop1: detected capacity change from 0 to 128 [ 413.150252][T16776] EXT4-fs: test_dummy_encryption option not supported [ 414.280890][T16782] loop1: detected capacity change from 0 to 512 [ 414.281262][T16782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.301610][T16782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.301674][T16782] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.303664][T16782] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4150: corrupted xattr block 33: invalid ea_ino [ 414.303825][T16782] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 414.303913][T16782] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4150: corrupted xattr block 33: invalid ea_ino [ 414.304102][T16782] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 414.304197][T16782] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4150: corrupted xattr block 33: invalid ea_ino [ 414.304348][T16782] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 414.305640][ T29] audit: type=1400 audit(1789873398.372:770): avc: denied { write } for pid=16775 comm="syz.1.4150" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.472782][T16794] __nla_validate_parse: 6 callbacks suppressed [ 414.472978][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4153'. [ 414.486981][T16789] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4152'. [ 414.487039][T16789] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4152'. [ 414.562930][T16801] loop3: detected capacity change from 0 to 128 [ 414.563339][T16801] EXT4-fs: test_dummy_encryption option not supported [ 414.650059][T16799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4154'. [ 414.711147][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.822582][T16811] loop3: detected capacity change from 0 to 512 [ 414.823287][T16811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.853001][T16811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.853059][T16811] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.477601][T11524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.734059][ T29] audit: type=1400 audit(1789873399.802:771): avc: denied { tracepoint } for pid=16818 comm="syz.3.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 415.982855][T16803] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4156'. [ 415.982955][T16803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4156'. [ 416.182467][T16829] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 416.182467][T16829] program syz.2.4163 not setting count and/or reply_len properly [ 416.280752][T16829] loop2: detected capacity change from 0 to 164 [ 416.302277][T16829] isofs_fill_super: root inode is not a directory. Corrupted media? [ 416.451549][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4167'. [ 416.533315][T16844] loop4: detected capacity change from 0 to 128 [ 416.545756][T16844] EXT4-fs: test_dummy_encryption option not supported [ 416.631161][T16846] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4165'. [ 416.631228][T16846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4165'. [ 416.805160][T16850] loop4: detected capacity change from 0 to 512 [ 416.806162][T16850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.177069][T16850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.177152][T16850] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.210960][T16847] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4169: corrupted xattr block 33: invalid ea_ino [ 417.211456][ T29] audit: type=1400 audit(1789873401.282:772): avc: denied { write } for pid=16843 comm="syz.4.4169" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.214789][T16847] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 417.214870][T16847] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4169: corrupted xattr block 33: invalid ea_ino [ 417.228916][T16847] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 417.228972][T16847] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4169: corrupted xattr block 33: invalid ea_ino [ 417.229150][T16847] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 417.233314][T16842] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4168'. [ 417.362961][T16861] loop0: detected capacity change from 0 to 128 [ 417.381959][T16861] EXT4-fs: test_dummy_encryption option not supported [ 417.552680][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.642480][T16866] loop0: detected capacity change from 0 to 512 [ 417.642900][T16866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.688674][T16865] loop3: detected capacity change from 0 to 128 [ 417.693210][T16865] EXT4-fs: test_dummy_encryption option not supported [ 418.100556][T16866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.100667][T16866] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.136239][ T29] audit: type=1400 audit(1789873402.202:773): avc: denied { write } for pid=16860 comm="syz.0.4172" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 418.148955][T16862] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4172: corrupted xattr block 33: invalid ea_ino [ 418.159574][T16862] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 418.159695][T16862] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4172: corrupted xattr block 33: invalid ea_ino [ 418.160026][T16862] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 418.160069][T16862] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.4172: corrupted xattr block 33: invalid ea_ino [ 418.160312][T16862] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 418.440370][T16875] loop3: detected capacity change from 0 to 512 [ 418.441150][T16875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.532981][T16875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.533158][T16875] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.542007][T16875] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4174: corrupted xattr block 33: invalid ea_ino [ 418.542244][T16875] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 418.542385][T16875] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4174: corrupted xattr block 33: invalid ea_ino [ 418.542610][T16875] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 418.542633][T16875] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4174: corrupted xattr block 33: invalid ea_ino [ 418.542914][T16875] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 418.623759][ T29] audit: type=1400 audit(1789873402.612:774): avc: denied { write } for pid=16864 comm="syz.3.4174" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 418.625450][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.847552][T16885] futex_wake_op: syz.0.4175 tries to shift op by 144; fix this program [ 418.847647][T16885] futex_wake_op: syz.0.4175 tries to shift op by 144; fix this program [ 418.937831][T11524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.191671][T16894] loop1: detected capacity change from 0 to 512 [ 419.220217][T16894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.220331][T16894] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.255188][T16894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.255693][T16894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.258896][ T29] audit: type=1400 audit(1789873403.322:775): avc: denied { write } for pid=16893 comm="syz.1.4179" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.374950][T16899] loop2: detected capacity change from 0 to 128 [ 419.375236][T16899] EXT4-fs: test_dummy_encryption option not supported [ 419.626894][T16906] loop2: detected capacity change from 0 to 512 [ 419.627421][T16906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 419.722049][T16906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.722125][T16906] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.041069][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.246288][T16914] loop3: detected capacity change from 0 to 128 [ 420.246546][T16914] EXT4-fs: test_dummy_encryption option not supported [ 420.273899][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.475382][T16918] loop3: detected capacity change from 0 to 512 [ 420.476097][T16918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.483909][T16918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.484081][T16918] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.814116][T16924] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.815372][T16924] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.859796][ T29] audit: type=1400 audit(1789873404.912:776): avc: denied { write } for pid=16923 comm="syz.1.4188" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.859832][ T29] audit: type=1400 audit(1789873404.912:777): avc: denied { write } for pid=16923 comm="syz.1.4188" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 420.972497][T12208] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.163361][T11524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.320910][T16945] EXT4-fs: test_dummy_encryption option not supported [ 422.027078][T16947] set_capacity_and_notify: 2 callbacks suppressed [ 422.027175][T16947] loop2: detected capacity change from 0 to 512 [ 422.028103][T16947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.052221][T16947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.052373][T16947] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.059042][ T29] audit: type=1400 audit(1789873406.122:778): avc: denied { write } for pid=16944 comm="syz.2.4197" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.071899][T16947] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4197: corrupted xattr block 33: invalid ea_ino [ 422.072621][T16947] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 422.072791][T16947] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4197: corrupted xattr block 33: invalid ea_ino [ 422.073076][T16947] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 422.073107][T16947] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4197: corrupted xattr block 33: invalid ea_ino [ 422.073400][T16947] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 422.913709][T16960] __nla_validate_parse: 4 callbacks suppressed [ 422.913775][T16960] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4198'. [ 422.913802][T16960] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4198'. [ 422.950763][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.060244][T16965] loop1: detected capacity change from 0 to 164 [ 423.083048][T16965] isofs_fill_super: root inode is not a directory. Corrupted media? [ 423.758720][T16982] futex_wake_op: syz.1.4205 tries to shift op by 144; fix this program [ 423.758772][T16982] futex_wake_op: syz.1.4205 tries to shift op by 144; fix this program [ 423.812564][T16986] loop1: detected capacity change from 0 to 128 [ 423.812924][T16986] EXT4-fs: test_dummy_encryption option not supported [ 424.062341][T16990] loop1: detected capacity change from 0 to 512 [ 424.062861][T16990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.087283][T16990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.087449][T16990] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.094685][T16990] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4207: corrupted xattr block 33: invalid ea_ino [ 424.095096][ T29] audit: type=1400 audit(1789873408.162:779): avc: denied { write } for pid=16985 comm="syz.1.4207" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.096830][T16990] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 424.096859][T16990] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4207: corrupted xattr block 33: invalid ea_ino [ 424.097390][T16990] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 424.097432][T16990] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4207: corrupted xattr block 33: invalid ea_ino [ 424.101320][T16990] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 424.482216][T16980] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4204'. [ 424.482363][T16980] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4204'. [ 424.714531][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.423560][T17016] loop3: detected capacity change from 0 to 164 [ 425.424587][T17016] isofs_fill_super: root inode is not a directory. Corrupted media? [ 425.760238][T17021] loop3: detected capacity change from 0 to 1024 [ 425.772025][T17021] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 425.775265][T17021] JBD2: no valid journal superblock found [ 425.775285][T17021] EXT4-fs (loop3): Could not load journal inode [ 426.683867][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 426.684067][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 426.715511][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 426.716115][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 426.760907][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 426.760968][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 426.828525][T17047] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 426.828525][T17047] program syz.4.4226 not setting count and/or reply_len properly [ 426.853663][T17047] loop4: detected capacity change from 0 to 164 [ 426.866508][T17047] isofs_fill_super: root inode is not a directory. Corrupted media? [ 427.284999][T17056] loop4: detected capacity change from 0 to 164 [ 427.535795][T17056] isofs_fill_super: root inode is not a directory. Corrupted media? [ 427.923505][T17071] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4233'. [ 427.923527][T17071] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4233'. [ 427.990769][T17075] loop2: detected capacity change from 0 to 128 [ 428.001319][T17075] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.001521][T17075] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.002927][ T29] audit: type=1400 audit(1789873412.072:780): avc: denied { write } for pid=17074 comm="syz.2.4235" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.003580][ T29] audit: type=1400 audit(1789873412.072:781): avc: denied { write } for pid=17074 comm="syz.2.4235" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 428.136019][T13337] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.054410][T17080] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4236'. [ 429.054483][T17080] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4236'. [ 429.758493][T17106] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4244'. [ 429.758604][T17106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4244'. [ 429.955087][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4245'. [ 430.097940][T17113] loop4: detected capacity change from 0 to 128 [ 430.106595][T17113] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.106778][T17113] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.107485][ T29] audit: type=1400 audit(1789873414.172:782): avc: denied { write } for pid=17112 comm="syz.4.4247" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 430.119770][ T29] audit: type=1400 audit(1789873414.182:783): avc: denied { write } for pid=17112 comm="syz.4.4247" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 430.366718][T11946] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.257634][T17126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4251'. [ 431.448684][T17132] loop1: detected capacity change from 0 to 128 [ 431.457015][T17132] EXT4-fs: test_dummy_encryption option not supported [ 431.685128][T17137] loop1: detected capacity change from 0 to 512 [ 431.685985][T17137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.900753][T17137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.900836][T17137] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.907693][T17137] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4254: corrupted xattr block 33: invalid ea_ino [ 431.907770][ T29] audit: type=1400 audit(1789873415.972:784): avc: denied { write } for pid=17131 comm="syz.1.4254" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 431.908525][T17137] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 431.908552][T17137] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4254: corrupted xattr block 33: invalid ea_ino [ 431.909021][T17137] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 431.909098][T17137] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4254: corrupted xattr block 33: invalid ea_ino [ 431.935729][T17137] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 432.329340][T17156] loop0: detected capacity change from 0 to 164 [ 432.332067][T17156] isofs_fill_super: root inode is not a directory. Corrupted media? [ 432.367958][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.417254][T17159] loop1: detected capacity change from 0 to 128 [ 432.417523][T17159] EXT4-fs: test_dummy_encryption option not supported [ 432.435901][T17159] loop1: detected capacity change from 0 to 512 [ 432.436234][T17159] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.456092][T17159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.456196][T17159] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.456852][T17159] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4261: corrupted xattr block 33: invalid ea_ino [ 432.456945][ T29] audit: type=1400 audit(1789873416.522:785): avc: denied { write } for pid=17158 comm="syz.1.4261" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 432.457049][T17159] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 432.457082][T17159] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4261: corrupted xattr block 33: invalid ea_ino [ 432.457399][T17159] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 432.457422][T17159] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.4261: corrupted xattr block 33: invalid ea_ino [ 432.457569][T17159] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 432.534995][T17140] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4256'. [ 432.535145][T17140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4256'. [ 432.715625][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.539865][T17172] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4264'. [ 433.539936][T17172] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4264'. [ 434.141527][T17193] loop4: detected capacity change from 0 to 128 [ 434.141840][T17193] EXT4-fs: test_dummy_encryption option not supported [ 434.180220][T17193] loop4: detected capacity change from 0 to 512 [ 434.180463][T17193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.205901][T17193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.205967][T17193] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.206840][T17193] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4272: corrupted xattr block 33: invalid ea_ino [ 434.207009][ T29] audit: type=1400 audit(1789873418.272:786): avc: denied { write } for pid=17192 comm="syz.4.4272" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.207594][T17193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 434.207634][T17193] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4272: corrupted xattr block 33: invalid ea_ino [ 434.208331][T17193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 434.208359][T17193] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4272: corrupted xattr block 33: invalid ea_ino [ 434.208530][T17193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 434.513054][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.721313][T17206] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 434.721313][T17206] program syz.0.4275 not setting count and/or reply_len properly [ 434.765871][T17206] loop0: detected capacity change from 0 to 164 [ 434.841527][T17206] isofs_fill_super: root inode is not a directory. Corrupted media? [ 435.814092][T17228] loop0: detected capacity change from 0 to 128 [ 435.816941][T17228] EXT4-fs: test_dummy_encryption option not supported [ 436.031528][T17230] loop0: detected capacity change from 0 to 512 [ 436.032134][T17230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.062182][T17230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.062303][T17230] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.067425][T17239] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4284'. [ 437.067556][T17239] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4284'. [ 437.121504][T10728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.424812][T17248] loop0: detected capacity change from 0 to 1024 [ 437.441114][T17248] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 437.447372][T17248] JBD2: no valid journal superblock found [ 437.447495][T17248] EXT4-fs (loop0): Could not load journal inode [ 437.516131][T17252] loop1: detected capacity change from 0 to 128 [ 437.542857][T17252] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.543057][T17252] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.543924][ T29] audit: type=1400 audit(1789873421.612:787): avc: denied { write } for pid=17251 comm="syz.1.4288" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.545073][ T29] audit: type=1400 audit(1789873421.612:788): avc: denied { write } for pid=17251 comm="syz.1.4288" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 437.794701][T12208] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.913008][T17291] loop4: detected capacity change from 0 to 128 [ 440.926101][T17291] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 440.927684][T17291] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.929618][ T29] audit: type=1400 audit(1789873425.002:789): avc: denied { write } for pid=17290 comm="syz.4.4301" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.441583][ T29] audit: type=1400 audit(1789873425.512:790): avc: denied { write } for pid=17290 comm="syz.4.4301" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 441.577491][T11946] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 441.786636][T17297] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4303'. [ 441.786661][T17297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4303'. [ 441.811980][T17305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4306'. [ 441.812000][T17305] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4306'. [ 442.742862][T17309] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4308'. [ 442.743151][T17309] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4308'. [ 444.162648][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4316'. [ 444.162918][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4316'. [ 444.213339][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4316'. [ 444.215104][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4316'. [ 446.503792][ T29] audit: type=1400 audit(1789873430.572:791): avc: denied { write } for pid=17376 comm="syz.1.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 446.543892][T17379] loop2: detected capacity change from 0 to 512 [ 446.585250][T17379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.585319][T17379] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.643970][T17381] loop1: detected capacity change from 0 to 164 [ 446.678139][T17379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.678335][T17379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.703973][T17381] isofs_fill_super: root inode is not a directory. Corrupted media? [ 446.707919][ T29] audit: type=1400 audit(1789873430.762:792): avc: denied { write } for pid=17378 comm="syz.2.4329" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.355835][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.505950][T17401] __nla_validate_parse: 2 callbacks suppressed [ 447.506012][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 447.506135][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 447.544709][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 447.545010][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 447.585092][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 447.585293][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 448.019953][T17409] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4337'. [ 448.020042][T17409] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4337'. [ 449.193560][T17430] loop4: detected capacity change from 0 to 512 [ 449.224928][T17430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.225218][T17430] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.263120][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.263820][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.283215][ T29] audit: type=1400 audit(1789873433.332:793): avc: denied { write } for pid=17429 comm="syz.4.4344" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 449.377798][T17436] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 449.377798][T17436] program syz.0.4345 not setting count and/or reply_len properly [ 449.378318][T17423] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4342'. [ 449.378516][T17423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4342'. [ 449.458268][T17436] loop0: detected capacity change from 0 to 164 [ 449.566186][T17436] isofs_fill_super: root inode is not a directory. Corrupted media? [ 449.915084][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.601709][T17487] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 451.601709][T17487] program syz.4.4361 not setting count and/or reply_len properly [ 451.628727][T17487] loop4: detected capacity change from 0 to 164 [ 451.653100][T17487] isofs_fill_super: root inode is not a directory. Corrupted media? [ 453.477834][T17532] __nla_validate_parse: 10 callbacks suppressed [ 453.477859][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 453.478170][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 453.487608][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 453.487908][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 453.506154][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 453.506308][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 455.328467][T17555] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4384'. [ 455.328648][T17555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4384'. [ 457.775509][T17614] loop1: detected capacity change from 0 to 512 [ 457.791364][T17614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.791476][T17614] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.793622][T17614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.793732][T17614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.794221][ T29] audit: type=1400 audit(1789873441.862:794): avc: denied { write } for pid=17613 comm="syz.1.4410" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.808305][T17619] loop2: detected capacity change from 0 to 128 [ 457.820789][T17619] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.821882][T17619] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.822740][ T29] audit: type=1400 audit(1789873441.892:795): avc: denied { write } for pid=17618 comm="syz.2.4411" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.825336][ T29] audit: type=1400 audit(1789873441.892:796): avc: denied { write } for pid=17618 comm="syz.2.4411" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 457.961557][T13337] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.355805][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.412254][T17636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4419'. [ 458.594425][T17640] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 458.594425][T17640] program syz.4.4421 not setting count and/or reply_len properly [ 458.665079][T17640] loop4: detected capacity change from 0 to 164 [ 458.680580][T17640] isofs_fill_super: root inode is not a directory. Corrupted media? [ 458.819387][T17648] loop0: detected capacity change from 0 to 128 [ 458.824251][T17648] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 458.824395][T17648] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.832882][ T29] audit: type=1400 audit(1789873442.892:797): avc: denied { write } for pid=17646 comm="syz.0.4423" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.832968][ T29] audit: type=1400 audit(1789873442.892:798): avc: denied { write } for pid=17646 comm="syz.0.4423" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 458.947754][T10728] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.419155][T17654] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4425'. [ 459.419224][T17654] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4425'. [ 459.710770][T17666] loop2: detected capacity change from 0 to 512 [ 459.741119][T17666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.741185][T17666] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.743203][T17666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.743274][T17666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.744151][ T29] audit: type=1400 audit(1789873443.812:799): avc: denied { write } for pid=17665 comm="syz.2.4429" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.270325][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.279692][T17680] loop2: detected capacity change from 0 to 128 [ 460.293674][T17680] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 460.293880][T17680] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.294728][ T29] audit: type=1400 audit(1789873444.362:800): avc: denied { write } for pid=17679 comm="syz.2.4435" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.307236][ T29] audit: type=1400 audit(1789873444.362:801): avc: denied { write } for pid=17679 comm="syz.2.4435" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 460.378558][T13337] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 460.507370][T17688] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 460.507370][T17688] program syz.0.4438 not setting count and/or reply_len properly [ 460.595707][T17688] loop0: detected capacity change from 0 to 164 [ 460.623279][T17688] isofs_fill_super: root inode is not a directory. Corrupted media? [ 461.125226][T17705] loop4: detected capacity change from 0 to 512 [ 461.136998][T17705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.137120][T17705] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.138598][T17705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.138677][T17705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.152128][ T29] audit: type=1400 audit(1789873445.212:802): avc: denied { write } for pid=17704 comm="syz.4.4445" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.670762][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.779635][T17745] loop2: detected capacity change from 0 to 128 [ 462.787590][T17745] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 462.788248][T17745] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.820604][ T29] audit: type=1400 audit(1789873446.892:803): avc: denied { write } for pid=17744 comm="syz.2.4462" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.823424][ T29] audit: type=1400 audit(1789873446.892:804): avc: denied { write } for pid=17744 comm="syz.2.4462" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 462.885339][T17746] loop1: detected capacity change from 0 to 1024 [ 462.964050][T17746] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 462.966084][T17746] JBD2: no valid journal superblock found [ 462.966097][T17746] EXT4-fs (loop1): Could not load journal inode [ 463.170361][T13337] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.636982][T17759] futex_wake_op: syz.3.4467 tries to shift op by 144; fix this program [ 463.637034][T17759] futex_wake_op: syz.3.4467 tries to shift op by 144; fix this program [ 463.692066][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 463.692115][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 463.702217][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 463.702488][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 463.728165][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 463.728424][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 464.222044][T17777] loop1: detected capacity change from 0 to 128 [ 464.268163][T17777] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 464.268402][T17777] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.270066][ T29] audit: type=1400 audit(1789873448.342:805): avc: denied { write } for pid=17776 comm="syz.1.4474" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.271568][ T29] audit: type=1400 audit(1789873448.342:806): avc: denied { write } for pid=17776 comm="syz.1.4474" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 464.591736][T12208] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 465.031284][T17797] futex_wake_op: syz.2.4480 tries to shift op by 144; fix this program [ 465.031354][T17797] futex_wake_op: syz.2.4480 tries to shift op by 144; fix this program [ 465.615757][T17809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4486'. [ 465.985799][T17821] futex_wake_op: syz.4.4491 tries to shift op by 144; fix this program [ 465.985842][T17821] futex_wake_op: syz.4.4491 tries to shift op by 144; fix this program [ 467.051739][T17849] futex_wake_op: syz.1.4502 tries to shift op by 144; fix this program [ 467.051954][T17849] futex_wake_op: syz.1.4502 tries to shift op by 144; fix this program [ 468.565096][T17876] futex_wake_op: syz.2.4513 tries to shift op by 144; fix this program [ 468.565152][T17876] futex_wake_op: syz.2.4513 tries to shift op by 144; fix this program [ 468.797905][T17882] loop2: detected capacity change from 0 to 128 [ 468.811131][T17882] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 468.812018][T17882] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.833184][ T29] audit: type=1400 audit(1789873452.902:807): avc: denied { write } for pid=17880 comm="syz.2.4515" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.879571][ T29] audit: type=1400 audit(1789873452.952:808): avc: denied { write } for pid=17880 comm="syz.2.4515" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.933986][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4516'. [ 468.934296][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4516'. [ 468.975431][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4516'. [ 468.975651][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4516'. [ 469.044180][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4516'. [ 469.044458][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4516'. [ 469.137840][T17894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4519'. [ 469.244230][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4521'. [ 469.261029][T13337] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 469.300925][T17907] loop2: detected capacity change from 0 to 128 [ 469.301207][T17907] EXT4-fs: test_dummy_encryption option not supported [ 469.484706][T17910] loop2: detected capacity change from 0 to 512 [ 469.484940][T17910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 469.501207][T17910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.501249][T17910] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.501797][ T29] audit: type=1400 audit(1789873453.572:809): avc: denied { write } for pid=17905 comm="syz.2.4525" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.501902][T17910] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4525: corrupted xattr block 33: invalid ea_ino [ 469.502122][T17910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 469.502141][T17910] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4525: corrupted xattr block 33: invalid ea_ino [ 469.502315][T17910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 469.502391][T17910] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.4525: corrupted xattr block 33: invalid ea_ino [ 469.502526][T17910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 469.646602][T17916] futex_wake_op: syz.3.4527 tries to shift op by 144; fix this program [ 469.646730][T17916] futex_wake_op: syz.3.4527 tries to shift op by 144; fix this program [ 469.810418][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4529'. [ 470.217194][T13337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.249626][T17933] loop2: detected capacity change from 0 to 128 [ 470.263864][T17933] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 470.264074][T17933] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.264866][ T29] audit: type=1400 audit(1789873454.332:810): avc: denied { write } for pid=17932 comm="syz.2.4533" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.265814][ T29] audit: type=1400 audit(1789873454.332:811): avc: denied { write } for pid=17932 comm="syz.2.4533" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 470.446894][T13337] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.844258][T17947] __nla_validate_parse: 5 callbacks suppressed [ 470.844276][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4539'. [ 471.407806][T17964] loop0: detected capacity change from 0 to 128 [ 471.416853][T17964] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 471.421673][T17964] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.441607][ T29] audit: type=1400 audit(1789873455.492:812): avc: denied { write } for pid=17963 comm="syz.0.4546" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 471.441639][ T29] audit: type=1400 audit(1789873455.492:813): avc: denied { write } for pid=17963 comm="syz.0.4546" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 471.585269][T10728] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.602019][T17971] futex_wake_op: syz.0.4548 tries to shift op by 144; fix this program [ 471.602078][T17971] futex_wake_op: syz.0.4548 tries to shift op by 144; fix this program [ 472.016453][T17981] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4552'. [ 472.563918][T17995] futex_wake_op: syz.1.4559 tries to shift op by 144; fix this program [ 472.564066][T17995] futex_wake_op: syz.1.4559 tries to shift op by 144; fix this program [ 472.598799][T17997] futex_wake_op: syz.1.4560 tries to shift op by 144; fix this program [ 472.598853][T17997] futex_wake_op: syz.1.4560 tries to shift op by 144; fix this program [ 472.759416][T18005] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4564'. [ 473.605814][T18023] futex_wake_op: syz.4.4571 tries to shift op by 144; fix this program [ 473.605941][T18023] futex_wake_op: syz.4.4571 tries to shift op by 144; fix this program [ 473.716573][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4573'. [ 473.821746][T18031] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4575'. [ 473.848801][T18033] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 473.848801][T18033] program syz.0.4576 not setting count and/or reply_len properly [ 473.932745][T18033] loop0: detected capacity change from 0 to 164 [ 473.947816][T18033] isofs_fill_super: root inode is not a directory. Corrupted media? [ 474.177562][T18043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4579'. [ 474.714150][T18059] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4586'. [ 474.754332][T18063] futex_atomic_op_inuser: 6 callbacks suppressed [ 474.754349][T18063] futex_wake_op: syz.2.4589 tries to shift op by 144; fix this program [ 474.754394][T18063] futex_wake_op: syz.2.4589 tries to shift op by 144; fix this program [ 474.996932][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4591'. [ 475.060678][T18073] futex_wake_op: syz.3.4593 tries to shift op by 144; fix this program [ 475.060717][T18073] futex_wake_op: syz.3.4593 tries to shift op by 144; fix this program [ 475.400016][T18085] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4599'. [ 475.466673][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4602'. [ 475.696288][T18099] futex_wake_op: syz.1.4606 tries to shift op by 144; fix this program [ 475.696422][T18099] futex_wake_op: syz.1.4606 tries to shift op by 144; fix this program [ 475.780352][T18100] loop3: detected capacity change from 0 to 512 [ 475.780680][T18100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.797358][T18100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.797466][T18100] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.798186][ T29] audit: type=1400 audit(1789873459.862:814): avc: denied { write } for pid=18096 comm="syz.3.4605" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.798213][T18100] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4605: corrupted xattr block 33: invalid ea_ino [ 475.798449][T18100] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 475.798485][T18100] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4605: corrupted xattr block 33: invalid ea_ino [ 475.798651][T18100] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 475.798710][T18100] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4605: corrupted xattr block 33: invalid ea_ino [ 475.798869][T18100] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 476.042421][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4609'. [ 476.042464][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4609'. [ 476.061392][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4609'. [ 476.061455][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4609'. [ 476.086258][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4609'. [ 476.086346][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4609'. [ 476.134652][T18116] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4611'. [ 476.209405][T18124] futex_wake_op: syz.0.4614 tries to shift op by 144; fix this program [ 476.209499][T18124] futex_wake_op: syz.0.4614 tries to shift op by 144; fix this program [ 476.253035][T18126] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 476.253035][T18126] program syz.0.4615 not setting count and/or reply_len properly [ 476.287210][T18126] loop0: detected capacity change from 0 to 164 [ 476.306413][T18126] isofs_fill_super: root inode is not a directory. Corrupted media? [ 476.357009][T18132] futex_wake_op: syz.1.4617 tries to shift op by 144; fix this program [ 476.357106][T18132] futex_wake_op: syz.1.4617 tries to shift op by 144; fix this program [ 476.520138][T11524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.568661][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 476.568860][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 476.597401][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 476.716310][T18154] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 476.716310][T18154] program syz.2.4625 not setting count and/or reply_len properly [ 476.787037][T18154] loop2: detected capacity change from 0 to 164 [ 476.798875][T18154] isofs_fill_super: root inode is not a directory. Corrupted media? [ 477.312575][T18168] sg_write: data in/out 1210068154/27 bytes for SCSI command 0xdb-- guessing data in; [ 477.312575][T18168] program syz.3.4629 not setting count and/or reply_len properly [ 477.359486][T18168] loop3: detected capacity change from 0 to 164 [ 477.379282][T18168] isofs_fill_super: root inode is not a directory. Corrupted media? [ 477.533362][T18177] loop4: detected capacity change from 0 to 128 [ 477.535475][T18177] EXT4-fs: test_dummy_encryption option not supported [ 477.684879][T18179] loop4: detected capacity change from 0 to 512 [ 477.685260][T18179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 477.704821][T18179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.704916][T18179] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.705638][T18179] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4632: corrupted xattr block 33: invalid ea_ino [ 477.705901][T18179] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 477.705930][T18179] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4632: corrupted xattr block 33: invalid ea_ino [ 477.706081][T18179] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 477.706159][T18179] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.4632: corrupted xattr block 33: invalid ea_ino [ 477.706323][T18179] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 477.706963][ T29] audit: type=1400 audit(1789873461.772:815): avc: denied { write } for pid=18176 comm="syz.4.4632" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 478.406789][T11946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.447159][T18204] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 478.447159][T18204] program syz.4.4641 not setting count and/or reply_len properly [ 478.472944][T18204] loop4: detected capacity change from 0 to 164 [ 478.485161][T18204] isofs_fill_super: root inode is not a directory. Corrupted media? [ 478.822595][T18216] loop2: detected capacity change from 0 to 128 [ 478.828706][T18216] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.828997][T18216] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.837091][ T29] audit: type=1400 audit(1789873462.902:816): avc: denied { write } for pid=18215 comm="syz.2.4645" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 478.984653][T13337] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.191221][T18231] loop3: detected capacity change from 0 to 128 [ 479.191495][T18231] EXT4-fs: test_dummy_encryption option not supported [ 479.345359][T18234] loop3: detected capacity change from 0 to 512 [ 479.345687][T18234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 479.360371][T18234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.360515][T18234] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.373680][T18234] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4651: corrupted xattr block 33: invalid ea_ino [ 479.373819][ T29] audit: type=1400 audit(1789873463.452:817): avc: denied { write } for pid=18230 comm="syz.3.4651" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.374015][T18234] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 479.374045][T18234] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4651: corrupted xattr block 33: invalid ea_ino [ 479.374202][T18234] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 479.374306][T18234] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.4651: corrupted xattr block 33: invalid ea_ino [ 479.374507][T18234] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 480.060325][T11524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.187512][T18258] futex_atomic_op_inuser: 6 callbacks suppressed [ 480.187529][T18258] futex_wake_op: syz.2.4662 tries to shift op by 144; fix this program [ 480.187619][T18258] futex_wake_op: syz.2.4662 tries to shift op by 144; fix this program [ 480.274259][T18263] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 480.274259][T18263] program syz.1.4665 not setting count and/or reply_len properly [ 480.316150][T18263] loop1: detected capacity change from 0 to 164 [ 480.343286][T18263] isofs_fill_super: root inode is not a directory. Corrupted media? [ 481.348278][T18286] sg_write: data in/out 1210068154/39 bytes for SCSI command 0xdb-- guessing data in; [ 481.348278][T18286] program syz.3.4672 not setting count and/or reply_len properly [ 481.373215][T18286] loop3: detected capacity change from 0 to 164 [ 481.384716][T18286] isofs_fill_super: root inode is not a directory. Corrupted media? [ 481.488165][T18293] futex_wake_op: syz.1.4674 tries to shift op by 144; fix this program [ 481.488217][T18293] futex_wake_op: syz.1.4674 tries to shift op by 144; fix this program [ 482.722904][T18322] futex_wake_op: syz.0.4685 tries to shift op by 144; fix this program [ 482.723024][T18322] futex_wake_op: syz.0.4685 tries to shift op by 144; fix this program [ 483.041084][T18330] sg_write: data in/out 1210068154/39 bytes for SCSI command 0xdb-- guessing data in; [ 483.041084][T18330] program syz.3.4689 not setting count and/or reply_len properly [ 483.126706][T18330] loop3: detected capacity change from 0 to 164 [ 483.144362][T18330] isofs_fill_super: root inode is not a directory. Corrupted media? [ 483.344210][T18339] __nla_validate_parse: 5 callbacks suppressed [ 483.344326][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4691'. [ 483.500492][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4692'. [ 483.500526][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4692'. [ 483.539418][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4692'. [ 483.539451][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4692'. [ 483.588236][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4692'. [ 483.588267][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4692'. [ 484.236038][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4703'. [ 484.297613][T18370] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 484.297613][T18370] program syz.3.4704 not setting count and/or reply_len properly [ 484.338338][T18374] sg_write: data in/out 1210068154/45 bytes for SCSI command 0xdb-- guessing data in; [ 484.338338][T18374] program syz.4.4706 not setting count and/or reply_len properly [ 484.377419][T18378] loop0: detected capacity change from 0 to 256 [ 484.391033][ T29] audit: type=1400 audit(1789873468.462:818): avc: denied { mount } for pid=18377 comm="syz.0.4708" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 484.408436][ T29] audit: type=1400 audit(1789873468.472:819): avc: denied { create } for pid=18377 comm="syz.0.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 484.410096][ T29] audit: type=1400 audit(1789873468.472:820): avc: denied { connect } for pid=18377 comm="syz.0.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 484.499621][T18379] loop4: detected capacity change from 0 to 164 [ 484.501907][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4707'. [ 484.502501][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4707'. [ 484.525643][T18379] isofs_fill_super: root inode is not a directory. Corrupted media? [ 484.556771][T18370] loop3: detected capacity change from 0 to 164 [ 484.578184][ T29] audit: type=1400 audit(1789873468.632:821): avc: denied { read write } for pid=18377 comm="syz.0.4708" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 484.605075][ T29] audit: type=1400 audit(1789873468.642:822): avc: denied { open } for pid=18377 comm="syz.0.4708" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 484.605092][T18370] isofs_fill_super: root inode is not a directory. Corrupted media? [ 484.772166][T18394] futex_wake_op: syz.1.4710 tries to shift op by 144; fix this program [ 484.772239][T18394] futex_wake_op: syz.1.4710 tries to shift op by 144; fix this program [ 485.244304][ T29] audit: type=1400 audit(1789873469.312:823): avc: denied { unmount } for pid=10728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 485.748212][T18419] futex_wake_op: syz.4.4721 tries to shift op by 144; fix this program [ 485.748455][T18419] futex_wake_op: syz.4.4721 tries to shift op by 144; fix this program [ 486.078489][T18428] sg_write: data in/out 1210068154/45 bytes for SCSI command 0xdb-- guessing data in; [ 486.078489][T18428] program syz.1.4725 not setting count and/or reply_len properly [ 486.103278][T18428] loop1: detected capacity change from 0 to 164 [ 486.115122][T18428] isofs_fill_super: root inode is not a directory. Corrupted media? [ 486.265946][T18436] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 486.265946][T18436] program syz.3.4727 not setting count and/or reply_len properly [ 486.271349][T18436] loop3: detected capacity change from 0 to 164 [ 486.275630][T18436] isofs_fill_super: root inode is not a directory. Corrupted media? [ 486.326313][T18440] loop4: detected capacity change from 0 to 256 [ 486.382356][T18443] loop1: detected capacity change from 0 to 256 [ 486.543389][T18449] futex_wake_op: syz.4.4732 tries to shift op by 144; fix this program [ 486.543446][T18449] futex_wake_op: syz.4.4732 tries to shift op by 144; fix this program [ 487.476840][T18468] sg_write: data in/out 1210068154/45 bytes for SCSI command 0xdb-- guessing data in; [ 487.476840][T18468] program syz.4.4740 not setting count and/or reply_len properly [ 487.511114][T18468] loop4: detected capacity change from 0 to 164 [ 487.536230][T18468] isofs_fill_super: root inode is not a directory. Corrupted media? [ 487.769083][T18476] loop1: detected capacity change from 0 to 256 [ 487.873712][T18482] sg_write: data in/out 1210068154/51 bytes for SCSI command 0xdb-- guessing data in; [ 487.873712][T18482] program syz.0.4745 not setting count and/or reply_len properly [ 487.878521][T18482] loop0: detected capacity change from 0 to 164 [ 487.886269][T18482] isofs_fill_super: root inode is not a directory. Corrupted media? [ 488.993140][T18497] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 488.993617][T18497] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.995131][ T29] audit: type=1400 audit(1789873473.062:824): avc: denied { write } for pid=18496 comm="syz.3.4748" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 488.995206][ T29] audit: type=1400 audit(1789873473.062:825): avc: denied { add_name } for pid=18496 comm="syz.3.4748" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.012585][ T29] audit: type=1400 audit(1789873473.082:826): avc: denied { write } for pid=18496 comm="syz.3.4748" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 489.237303][T11524] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.369648][T18511] sg_write: data in/out 1210068154/27 bytes for SCSI command 0xdb-- guessing data in; [ 489.369648][T18511] program syz.0.4753 not setting count and/or reply_len properly [ 489.401693][T18511] isofs_fill_super: root inode is not a directory. Corrupted media? [ 489.605931][T18517] sg_write: data in/out 1210068154/48 bytes for SCSI command 0xdb-- guessing data in; [ 489.605931][T18517] program syz.0.4754 not setting count and/or reply_len properly [ 489.632480][T18517] set_capacity_and_notify: 3 callbacks suppressed [ 489.632504][T18517] loop0: detected capacity change from 0 to 164 [ 489.644115][T18517] isofs_fill_super: root inode is not a directory. Corrupted media? [ 489.892670][T18529] loop3: detected capacity change from 0 to 256 [ 489.923474][T18531] loop2: detected capacity change from 0 to 256 [ 490.114485][T18536] loop1: detected capacity change from 0 to 256 [ 490.343298][T18539] loop4: detected capacity change from 0 to 256 [ 490.438046][T18543] loop0: detected capacity change from 0 to 256 [ 491.138415][T18532] ================================================================== [ 491.138453][T18532] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 491.138490][T18532] [ 491.138497][T18532] write to 0xffff88810dcf79a0 of 8 bytes by task 18529 on cpu 0: [ 491.138516][T18532] filemap_splice_read+0x52a/0x790 [ 491.138542][T18532] splice_direct_to_actor+0x261/0x680 [ 491.138564][T18532] do_splice_direct+0x119/0x1a0 [ 491.138584][T18532] do_sendfile+0x37d/0x640 [ 491.138606][T18532] __x64_sys_sendfile64+0x105/0x150 [ 491.138643][T18532] x64_sys_call+0x1015/0x2550 [ 491.138671][T18532] do_syscall_64+0x112/0x360 [ 491.138720][T18532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.138745][T18532] [ 491.138751][T18532] write to 0xffff88810dcf79a0 of 8 bytes by task 18532 on cpu 1: [ 491.138771][T18532] filemap_splice_read+0x52a/0x790 [ 491.138797][T18532] splice_direct_to_actor+0x261/0x680 [ 491.138839][T18532] do_splice_direct+0x119/0x1a0 [ 491.138860][T18532] do_sendfile+0x37d/0x640 [ 491.138878][T18532] __x64_sys_sendfile64+0x105/0x150 [ 491.138923][T18532] x64_sys_call+0x1015/0x2550 [ 491.138954][T18532] do_syscall_64+0x112/0x360 [ 491.138988][T18532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.139012][T18532] [ 491.139015][T18532] value changed: 0x000000000000025e -> 0x000000000000025f [ 491.139026][T18532] [ 491.139031][T18532] Reported by Kernel Concurrency Sanitizer on: [ 491.139062][T18532] CPU: 1 UID: 0 PID: 18532 Comm: syz.3.4758 Not tainted syzkaller #0 PREEMPT(lazy) [ 491.139090][T18532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.139105][T18532] ================================================================== [ 491.354734][T18553] sg_write: data in/out 1210068154/27 bytes for SCSI command 0xdb-- guessing data in; [ 491.354734][T18553] program syz.2.4764 not setting count and/or reply_len properly [ 491.580918][T18550] loop2: detected capacity change from 0 to 164 [ 491.733121][T18550] isofs_fill_super: root inode is not a directory. Corrupted media?