last executing test programs: 57.262505502s ago: executing program 0 (id=2217): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0x83, 0x101000) r1 = syz_io_uring_setup(0x1cf0, &(0x7f0000000780)={0x0, 0x4f5f, 0x10100, 0x3, 0x184}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 56.887606096s ago: executing program 0 (id=2219): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.780970786s ago: executing program 0 (id=2222): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0xfffffffffffffffe, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") close(0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', &(0x7f0000000400), 0x4010, &(0x7f0000000c40)={'trans=xen,', {[{@nodevmap}], [{@pcr={'pcr', 0x3d, 0x25}}, {@euid_lt}, {@hash}, {@fowner_gt={'fowner>', 0xee01}}, {@audit}]}}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 56.246685523s ago: executing program 0 (id=2227): syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 56.201847447s ago: executing program 0 (id=2228): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) poll(&(0x7f00000000c0)=[{r0, 0x88}], 0x1, 0xfffffff7) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 55.330255804s ago: executing program 0 (id=2236): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4028, 0x0, 0x10004, 0x6, 0x6, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000180)="26000000220055e0cfeb909eb84701050000070000000000000020002b1f000a4a51f1ee839c", 0xffffffffffffff2b) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x74477699738de862, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r4 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) socket(0xa, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES16=0x0], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x80c5) waitid(0x1, r4, 0x0, 0x4, 0x0) 38.882750329s ago: executing program 32 (id=2236): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4028, 0x0, 0x10004, 0x6, 0x6, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000180)="26000000220055e0cfeb909eb84701050000070000000000000020002b1f000a4a51f1ee839c", 0xffffffffffffff2b) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x74477699738de862, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r4 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) socket(0xa, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES16=0x0], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x80c5) waitid(0x1, r4, 0x0, 0x4, 0x0) 2.645345965s ago: executing program 5 (id=2516): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x844, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) getuid() syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x2a8f, 0x80, 0x0, 0x61}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x1000000000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40185}, 0x4048014) accept$unix(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f00002c5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x13) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x2a, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000080000000000000019da04006b118b0000000000950000882497140e2177bb18d35a1057bbad000000002de7339384de07db4a96d13fb7ffe1b12b97ad09edf02fe824eb6cb2fbe39496904137ce0d0a90"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.216147093s ago: executing program 5 (id=2519): socket(0x2, 0x80805, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0201, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)}], 0x2}, 0x44000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$kcm(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.203813314s ago: executing program 4 (id=2520): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0xfffffffffffffffe, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") close(0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', &(0x7f0000000400), 0x4010, &(0x7f0000000c40)={'trans=xen,', {[{@nodevmap}], [{@pcr={'pcr', 0x3d, 0x25}}, {@euid_lt}, {@hash}, {@fowner_gt={'fowner>', 0xee01}}, {@audit}]}}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 2.107106683s ago: executing program 5 (id=2523): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0xfffffffffffffffe, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") close(0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', &(0x7f0000000400), 0x4010, &(0x7f0000000c40)={'trans=xen,', {[{@nodevmap}], [{@pcr={'pcr', 0x3d, 0x25}}, {@euid_lt}, {@hash}, {@fowner_gt={'fowner>', 0xee01}}, {@audit}]}}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 1.732628206s ago: executing program 2 (id=2529): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x9, 0x3) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x2000a804) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010000467d3b6b81cf0"], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.311663294s ago: executing program 4 (id=2531): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x5, 0xfffffffc, 0x5, 0x2000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x3000, 0x116094000, 0x41000000}], 0x0) 1.294205625s ago: executing program 5 (id=2532): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.224285681s ago: executing program 3 (id=2533): socket(0x2, 0x80805, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0201, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)}], 0x2}, 0x44000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000040000000000000000000018"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$kcm(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.210560242s ago: executing program 5 (id=2534): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) poll(&(0x7f00000000c0)=[{r0, 0x88}], 0x1, 0xfffffff7) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 1.202160373s ago: executing program 4 (id=2535): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x7, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = io_uring_setup(0x263a, &(0x7f0000000540)={0x0, 0x733c, 0x80, 0x3, 0x265}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000dc0)={0x5, 0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001380)={0x4, 0x0, &(0x7f0000001300)=[{&(0x7f00000012c0)=""/59, 0x3b}], &(0x7f0000001340)=[0x7], 0x1}, 0x20) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500340012800e0001006970366772657461700000001a4102800600"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r9, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r8}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0xfffffffd, 0x83, 0xd44, 0x20, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1ff}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="33a473570000", @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r9}, &(0x7f0000000400), &(0x7f0000000680)=r7}, 0x20) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r11, r5, 0x1a, 0x0, 0x0, @void, @value=r12, @void, @void, r8}, 0x20) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r3, 0x2, 0x0, @val=@perf_event={0x9ba}}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@fallback=r3, 0xffffffffffffffff, 0x13, 0x2000, 0x0, @value=r13, @void, @void, @void, r8}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x3, 0x1, 0x28, @mcast1, @loopback, 0x7800, 0x7, 0x7e00, 0x4}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex=r14, r1, 0x35, 0x14, 0x0, @void, @value=r1, @void, @void, r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800001801"], 0x50) 1.134317989s ago: executing program 3 (id=2536): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000010) 1.133815309s ago: executing program 3 (id=2537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002d0001040003836f0468590459daf886e1760000", @ANYRES32=0x0, @ANYBLOB="010b0200000000000a0001"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x24000090) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r4, 0xf, &(0x7f0000000080)={0x4, 0x7fffffff}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2c) lseek(r5, 0xfffffffffffffffc, 0x2) getdents(r5, 0x0, 0x54) 1.133046839s ago: executing program 2 (id=2538): r0 = fsopen(&(0x7f00000002c0)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x11, 0x2, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x11beb0, 0x1002, 0x20d6, 0x0, 0xa, 0x20002, 0xb, 0x0, 0x80, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.027997928s ago: executing program 2 (id=2540): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000100)=""/208) r1 = socket$inet(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) 916.632538ms ago: executing program 4 (id=2542): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x1, 0x3, 0xe, "0060000000000000000001030040000000f600"}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) add_key(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 848.115745ms ago: executing program 3 (id=2543): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) r3 = dup3(r2, r0, 0x80000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) timer_create(0x4, &(0x7f0000000140)={0x0, 0x3d, 0x1, @thr={&(0x7f0000000100)="300db8cd632d0d0f44", &(0x7f0000000e00)="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"}}, &(0x7f0000000180)) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000000)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) read(r0, &(0x7f00000005c0)=""/228, 0xe4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000200)={0x3, 0x20800006, 0xa, 0xfbffffca, 0x23, "4bbe2100", 0x1, 0x8}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000007400)=ANY=[@ANYBLOB="400000001000370400000040ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8345059f0000009cbb61920000000010002280040013010500090089000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 847.454675ms ago: executing program 2 (id=2544): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24111, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x106200, 0xfff, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'}) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000280)) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf250000000008000700", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="080004000a010101060006000200000008000100", @ANYRES32=0x0, @ANYBLOB="1743ce0eaed2b00c8e2880d8eff96ee54369f9eadc5dbf22535e45726984a51948964223881496a084dbf4a0c351058b3e7d4df57db0d879cf489ff96dd329bdd3bd3053898e95385fcc40d3d1cdeee783d5311f13d118e8"], 0x3c}}, 0x20000000) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) 542.282292ms ago: executing program 2 (id=2546): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/15, 0xf}, {&(0x7f00000002c0)=""/74, 0x4a}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000740)=""/75, 0x4b}], 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup(0xffffffffffffffff, &(0x7f00000007c0)='syz1\x00', 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001b00)={0x1a, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000000c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@max_batch_time}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e3}, 0xffffffffffffff10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000b00)={&(0x7f0000000840), 0x10, &(0x7f0000000a00)={&(0x7f0000000980)={0x2, 0x0, 0xe2c, {r7, r8/1000+60000}, {}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x7, 0x5, 0x0, 0x0, "52b218ed55bda09b"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x40805) r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316330b00010068656c70657200000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) sendto$inet(r1, &(0x7f0000000000)="89", 0x1, 0x1, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000ffff25bd7000f7d9de2500000000", @ANYRES32=0x0, @ANYBLOB="13280000212c000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="240012800c0003006d618eec6c616e001400028008000100080000000600020001000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x3c, @loopback, 0x4e22, 0x2, 'dh\x00', 0x0, 0x101, 0x79}, 0x2c) 541.751422ms ago: executing program 4 (id=2547): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x6, 0xab9}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7e, 0xc) 456.439299ms ago: executing program 1 (id=2548): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000010) 453.02848ms ago: executing program 1 (id=2549): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = io_uring_setup(0x263a, &(0x7f0000000540)={0x0, 0x733c, 0x80, 0x3, 0x265}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000dc0)={0x5, 0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001380)={0x4, 0x0, &(0x7f0000001300)=[{&(0x7f00000012c0)=""/59, 0x3b}], &(0x7f0000001340)=[0x7], 0x1}, 0x20) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000000000000000000000200"], 0x40}, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) 323.938051ms ago: executing program 5 (id=2550): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000633a77fbac141416e000030a83040211fe8000ff811e0000845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x15, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 323.429751ms ago: executing program 4 (id=2551): r0 = socket(0x26, 0x5, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) 296.133424ms ago: executing program 3 (id=2552): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x7, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = io_uring_setup(0x263a, &(0x7f0000000540)={0x0, 0x733c, 0x80, 0x3, 0x265}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000dc0)={0x5, 0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001380)={0x4, 0x0, &(0x7f0000001300)=[{&(0x7f00000012c0)=""/59, 0x3b}], &(0x7f0000001340)=[0x7], 0x1}, 0x20) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500340012800e0001006970366772657461700000001a4102800600"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r9, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r8}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0xfffffffd, 0x83, 0xd44, 0x20, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1ff}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="33a473570000", @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r9}, &(0x7f0000000400), &(0x7f0000000680)=r7}, 0x20) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r11, r5, 0x1a, 0x0, 0x0, @void, @value=r12, @void, @void, r8}, 0x20) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r3, 0x2, 0x0, @val=@perf_event={0x9ba}}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@fallback=r3, 0xffffffffffffffff, 0x13, 0x2000, 0x0, @value=r13, @void, @void, @void, r8}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x3, 0x1, 0x28, @mcast1, @loopback, 0x7800, 0x7, 0x7e00, 0x4}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex=r14, r1, 0x35, 0x14, 0x0, @void, @value=r1, @void, @void, r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800001801"], 0x50) 140.399767ms ago: executing program 1 (id=2553): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, &(0x7f0000001600), 0x0}, 0x20) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000280)=0x10) 120.286989ms ago: executing program 1 (id=2554): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x404, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f00000001c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) 117.39183ms ago: executing program 2 (id=2555): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0xfffffffffffffffe, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$eJzs3E1rK1UYwPEnk5cmKW2yEEVBetCNboY2uhaDtCAGLG0jtoIwbScaMiYlE1oixbYrt+LeleCidNldQf0C3bjTjRt33Qgu7ELvXOatnby1aW5K7m3/Pyhzcs55kjNzTsozQ2YuPv3uq1rF1itGS7S0kpiIyKVIXjQJxYKt5pVTEnUoiaD0UbFUWlxRaqm49k5BKTU79/PefiZoPJuS8/znF38X/jp/+fzViydrX1ZtVbVVvdFShtps/NkyNi1TbVftmq7UsmUatqmqddts+u0Nv71iNXZ22sqob89kd5qmbSuj3lY1s61aDdVqtpXxhVGtK13X1UxWcJvy8cqKURwxeGvMg8E9aTaLRlxEMj0t5eOJDAgAAExUd/6vuSn9nfL/t6f/+f311fUNmfXyf7ezn/8nZW//5I1fW9OfnM4G+f9Zql/+/+4f/nt15P9pERkl//9B7pD/92ZEj0v5ODnpIeBZzaV6qmIdr9z8Pxt8fz1Hn53MewXyfwAAAAAAAAAAAAAAAAAAAAAAXgSXjpNzHCcXbsO/61sIgtd4kAbN/5SIpN3Zd5j/h2x1fUPS3o177hxb3+6Wd8v+1m393/GJKfOSk/+89RDWieOEdx4pV15+sQ6C+IPdctxrKVakKpaYsiA5yXfHO87Sh6XFBeUL4q9uU8pG4wuSk5f6xxc644PPT8lbb0bidcnJb1vSEEu2vXV9Hf/NglIffFzqis94/QAAAAAAeAh0daXv+buuD2r3nzJSrHiXiQZcH/DPr+f7np8ncq8lJr33AAAAAAA8Dnb765phWWbzhkJGbu8zeiExXOdUV03yps7xyB4OO56UdyFDZFCfeJ8jpkm0j9taM34c8qh2FMIfUnQ0pYPK0Q5vuP9jm6/DaI0mQ0Qlugc/51aoO376UbAjVzXhZaPUgOMsy73vo3WshM6jmhzben7l+5/+Hd8X5L3TcAXc3vkoUpMces1blpnuXnVe4YbHQmtj+K8DAAAAYBKuk/6w5v1oc2wigwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JG5l0f6dRUmvY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8+JpAAAA///vv/C6") close(0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', &(0x7f0000000400), 0x4010, &(0x7f0000000c40)={'trans=xen,', {[{@nodevmap}], [{@pcr={'pcr', 0x3d, 0x25}}, {@euid_lt}, {@hash}, {@fowner_gt={'fowner>', 0xee01}}, {@audit}]}}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 66.643964ms ago: executing program 1 (id=2556): r0 = syz_io_uring_setup(0xb15b, &(0x7f0000000080)={0x0, 0xcfca, 0x5201, 0x1000003}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000380), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], {0x4f19, 0x4e20, 0x9, 0x0, @opaque="88"}}}}}}}, 0x43) 4.12545ms ago: executing program 3 (id=2557): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0001", 0x23}], 0x1}, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[], 0xfe37, 0x0) 0s ago: executing program 1 (id=2558): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x1, 0x3, 0xe, "0060000000000000000001030040000000f600"}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) add_key(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) kernel console output (not intermixed with test programs): 6][ T9325] do_syscall_64+0x12c/0x370 [ 247.650925][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.651020][ T9325] RIP: 0033:0x7fa2bc07c629 [ 247.651035][ T9325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.651118][ T9325] RSP: 002b:00007fa2baacf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.651138][ T9325] RAX: ffffffffffffffda RBX: 00007fa2bc2f5fa0 RCX: 00007fa2bc07c629 [ 247.651154][ T9325] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 247.651179][ T9325] RBP: 00007fa2baacf090 R08: 0000000000000000 R09: 0000000000000000 [ 247.651192][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.651203][ T9325] R13: 00007fa2bc2f6038 R14: 00007fa2bc2f5fa0 R15: 00007ffffa8e6098 [ 247.651272][ T9325] [ 247.791569][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.018252][ T9332] loop3: detected capacity change from 0 to 512 [ 248.038032][ T9332] EXT4-fs: Ignoring removed oldalloc option [ 248.086632][ T9332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1904: Parent and EA inode have the same ino 15 [ 248.151922][ T9340] netlink: 'syz.2.1906': attribute type 16 has an invalid length. [ 248.162042][ T9332] loop3: lost filesystem error report for type 5 error -117 [ 248.165214][ T9332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1904: Parent and EA inode have the same ino 15 [ 248.172750][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 248.172768][ C0] EXT4-fs (loop3): initial error at time 2000000387: ext4_xattr_inode_iget:437 [ 248.172794][ C0] EXT4-fs (loop3): last error at time 2000000387: ext4_xattr_inode_iget:437 [ 248.223078][ T9340] netlink: 'syz.2.1906': attribute type 17 has an invalid length. [ 248.244941][ T9332] loop3: lost filesystem error report for type 5 error -117 [ 248.245214][ T9332] EXT4-fs (loop3): 1 orphan inode deleted [ 248.260537][ T9340] gretap0: left promiscuous mode [ 248.289489][ T9332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.335260][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.393997][ T9340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.452400][ T9340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.444109][ T9360] x_tables: duplicate entry at hook 1 [ 249.704416][ T9364] __nla_validate_parse: 1 callbacks suppressed [ 249.704434][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'. [ 249.724221][ T9364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1914'. [ 249.916792][ T9368] siw: device registration error -23 [ 249.953222][ T9370] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1916'. [ 251.621577][ T9397] loop2: detected capacity change from 0 to 128 [ 251.689814][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 251.702444][ T9402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.741683][ T9402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.972922][ T9414] netlink: 'syz.2.1925': attribute type 10 has an invalid length. [ 251.992042][ T9414] bond0: (slave dummy0): Releasing backup interface [ 252.011424][ T9397] 9p: Could not find request transport: xen [ 252.020562][ T9416] netlink: 'syz.2.1925': attribute type 10 has an invalid length. [ 252.061769][ T9416] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 252.073187][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 252.135811][ T9410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1930'. [ 252.158540][ T9418] loop4: detected capacity change from 0 to 512 [ 252.173469][ T9415] siw: device registration error -23 [ 252.190279][ T9418] EXT4-fs: Ignoring removed bh option [ 252.244787][ T9418] EXT4-fs: inline encryption not supported [ 252.252898][ T9418] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 252.275080][ T9425] loop2: detected capacity change from 0 to 128 [ 252.399557][ T9413] loop0: detected capacity change from 0 to 512 [ 252.440409][ T9413] EXT4-fs: inline encryption not supported [ 252.460815][ T9418] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 252.503425][ T9418] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1933: bg 0: block 248: padding at end of block bitmap is not set [ 252.518243][ T9418] loop4: lost filesystem error report for type 5 error -117 [ 252.522577][ T9418] Quota error (device loop4): write_blk: dquota write failed [ 252.533059][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 252.544557][ C0] EXT4-fs (loop4): last error at time 2000000391: ext4_validate_block_bitmap:441 [ 252.559026][ T9413] EXT4-fs (loop0): orphan cleanup on readonly fs [ 252.571149][ T9413] Quota error (device loop0): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 252.575720][ T9418] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 252.583012][ T9425] netlink: 'syz.2.1934': attribute type 10 has an invalid length. [ 252.601330][ T9418] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.1933: Failed to acquire dquot type 1 [ 252.613165][ T9418] loop4: lost filesystem error report for type 5 error -117 [ 252.613656][ T9418] EXT4-fs (loop4): 1 truncate cleaned up [ 252.622329][ T9413] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.627164][ T9418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 252.638405][ T9433] netlink: 'syz.2.1934': attribute type 10 has an invalid length. [ 252.673873][ T9422] 9p: Could not find request transport: xen [ 252.682227][ T9425] bond0: (slave dummy0): Releasing backup interface [ 252.694525][ T9413] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 252.728946][ T9433] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 252.794950][ T9413] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1931: bad orphan inode 14 [ 252.849410][ T9413] loop0: lost filesystem error report for type 5 error -117 [ 252.852692][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 252.866495][ C0] EXT4-fs (loop0): last error at time 2000000392: ext4_orphan_get:1417 [ 252.883723][ T9413] ext4_test_bit(bit=13, block=18) = 1 [ 252.891939][ T9413] is_bad_inode(inode)=0 [ 252.897784][ T9413] NEXT_ORPHAN(inode)=0 [ 252.907043][ T9413] max_ino=32 [ 252.910613][ T9413] i_nlink=1 [ 252.924957][ T9413] EXT4-fs (loop0): 1 truncate cleaned up [ 252.925509][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 252.935517][ T9413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.954086][ T354] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 252.963817][ T354] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:6: Failed to release dquot type 1 [ 252.992839][ T354] loop4: lost filesystem error report for type 5 error -117 [ 255.546887][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.636034][ T9489] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1944'. [ 255.646032][ T28] audit: type=1400 audit(2000000395.018:945): avc: denied { nlmsg_read } for pid=9488 comm="syz.0.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 255.673682][ T9492] netlink: 'syz.3.1942': attribute type 16 has an invalid length. [ 255.692677][ T9492] netlink: 'syz.3.1942': attribute type 17 has an invalid length. [ 255.711823][ T9489] bridge_slave_1: left allmulticast mode [ 255.717690][ T9489] bridge_slave_1: left promiscuous mode [ 255.728671][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.751725][ T9489] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 255.790987][ T9492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.871724][ T9498] loop0: detected capacity change from 0 to 512 [ 255.993167][ T28] audit: type=1400 audit(2000000395.358:946): avc: denied { open } for pid=9503 comm="syz.3.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 256.042588][ T28] audit: type=1400 audit(2000000395.358:947): avc: denied { kernel } for pid=9503 comm="syz.3.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 256.142769][ T28] audit: type=1400 audit(2000000395.368:948): avc: denied { write } for pid=9503 comm="syz.3.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 256.215777][ T9508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1947'. [ 256.226464][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 256.270147][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1947'. [ 256.279866][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 256.306573][ T9504] loop3: detected capacity change from 0 to 128 [ 256.340824][ T9510] loop0: detected capacity change from 0 to 128 [ 256.928228][ T9512] loop2: detected capacity change from 0 to 1024 [ 257.013918][ T9507] 9p: Could not find request transport: xen [ 257.035952][ T9512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.054266][ T9514] netlink: 'syz.0.1950': attribute type 10 has an invalid length. [ 257.113956][ T9518] netlink: 'syz.0.1950': attribute type 10 has an invalid length. [ 257.116394][ T28] audit: type=1400 audit(2000000395.968:949): avc: denied { tracepoint } for pid=9511 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 257.141610][ T28] audit: type=1400 audit(2000000396.488:950): avc: denied { setattr } for pid=9511 comm="syz.2.1951" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.200908][ T9520] netlink: 'syz.3.1949': attribute type 10 has an invalid length. [ 257.243625][ T9512] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.1951: inode #3204449282: comm syz.2.1951: iget: illegal inode # [ 257.274355][ T9520] bond0: (slave dummy0): Releasing backup interface [ 257.294860][ T9521] netlink: 'syz.3.1949': attribute type 10 has an invalid length. [ 257.310201][ T9512] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1951: error while reading EA inode 3204449282 err=-117 [ 257.336033][ T9514] bond0: (slave dummy0): Releasing backup interface [ 257.353868][ T9504] 9p: Could not find request transport: xen [ 257.376465][ T9518] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 257.429374][ T9521] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 257.907773][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.509081][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'. [ 258.528493][ T9546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1960'. [ 258.549722][ T9546] siw: device registration error -23 [ 259.266233][ T9559] loop3: detected capacity change from 0 to 128 [ 259.338437][ T9558] 9p: Could not find request transport: xen [ 259.356634][ T9558] netlink: 'syz.3.1965': attribute type 10 has an invalid length. [ 259.415010][ T9559] netlink: 'syz.3.1965': attribute type 10 has an invalid length. [ 259.490958][ T9558] bond0: (slave dummy0): Releasing backup interface [ 259.541630][ T9559] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 259.679505][ T9564] loop3: detected capacity change from 0 to 1024 [ 259.715303][ T9564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.923697][ T9574] bond0: (slave dummy0): Releasing backup interface [ 259.932264][ T9574] bridge_slave_0: left allmulticast mode [ 259.938359][ T9574] bridge_slave_0: left promiscuous mode [ 259.963017][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.969886][ T9564] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.1967: Allocating blocks 497-513 which overlap fs metadata [ 259.987216][ T9574] bridge_slave_1: left allmulticast mode [ 260.013863][ T9574] bridge_slave_1: left promiscuous mode [ 260.029833][ T28] audit: type=1400 audit(2000000399.398:951): avc: denied { sys_module } for pid=9573 comm="syz.4.1971" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 260.074927][ T9581] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1971'. [ 260.140255][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.150250][ T9582] netlink: 'syz.2.1972': attribute type 10 has an invalid length. [ 260.163911][ T28] audit: type=1400 audit(2000000399.548:952): avc: denied { override_creds } for pid=9573 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 260.246031][ T28] audit: type=1400 audit(2000000399.628:953): avc: denied { setopt } for pid=9573 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 260.292038][ T9574] bond0: (slave bond_slave_0): Releasing backup interface [ 260.320252][ T9578] netlink: 'syz.2.1972': attribute type 10 has an invalid length. [ 260.370276][ T9574] bond0: (slave bond_slave_1): Releasing backup interface [ 260.380729][ T9572] netlink: 'syz.1.1970': attribute type 10 has an invalid length. [ 260.401725][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.422909][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.432185][ T9580] netlink: 'syz.1.1970': attribute type 10 has an invalid length. [ 260.459178][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.470267][ T28] audit: type=1400 audit(2000000399.848:954): avc: denied { read } for pid=9588 comm="syz.3.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.522920][ T9574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.588289][ T9582] bond0: (slave dummy0): Releasing backup interface [ 260.665998][ T9578] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 260.718503][ T9572] bond0: (slave dummy0): Releasing backup interface [ 260.729807][ T9580] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 260.753953][ T9592] bond0: (slave dummy0): Releasing backup interface [ 260.777784][ T9595] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 260.811291][ T28] audit: type=1400 audit(2000000400.188:955): avc: denied { read } for pid=9600 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 260.906714][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1985'. [ 260.925884][ T9616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1985'. [ 260.949375][ T9616] siw: device registration error -23 [ 261.031111][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 261.118168][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 261.167984][ T9625] bond0: (slave dummy0): Releasing backup interface [ 261.172026][ T9625] bridge_slave_0: left allmulticast mode [ 261.180965][ T9625] bridge_slave_0: left promiscuous mode [ 261.189857][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.224578][ T9630] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1988'. [ 261.251386][ T9625] bridge_slave_1: left allmulticast mode [ 261.273917][ T9625] bridge_slave_1: left promiscuous mode [ 261.289275][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.321178][ T9625] bond0: (slave bond_slave_0): Releasing backup interface [ 261.322567][ T9625] bond0: (slave bond_slave_1): Releasing backup interface [ 261.360045][ T9625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.419629][ T9625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.420963][ T9625] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 261.508588][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.523373][ T9637] loop2: detected capacity change from 0 to 128 [ 261.531310][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.658177][ T9637] 9p: Could not find request transport: xen [ 261.662111][ T9637] bond0: (slave dummy0): Releasing backup interface [ 261.750699][ T9636] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 261.868252][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 261.868273][ T9654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1998'. [ 261.869014][ T9654] siw: device registration error -23 [ 261.885239][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1999'. [ 261.946758][ T9660] x_tables: duplicate entry at hook 1 [ 263.478363][ T9681] loop0: detected capacity change from 0 to 512 [ 263.613691][ T9681] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2007: corrupted inode contents [ 263.662762][ T9681] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 263.662919][ T9681] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 263.680834][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 263.680858][ C0] EXT4-fs (loop0): initial error at time 2000000403: ext4_do_update_inode:5569: inode 15 [ 263.680886][ C0] EXT4-fs (loop0): last error at time 2000000403: ext4_do_update_inode:5569: inode 15 [ 263.840104][ T9681] loop0: lost filesystem error report for type 5 error -117 [ 263.840261][ T9681] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2007: corrupted inode contents [ 263.922358][ T9681] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 263.922648][ T9681] EXT4-fs error (device loop0): ext4_evict_inode:303: inode #15: comm syz.0.2007: mark_inode_dirty error [ 264.002805][ T9681] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.003024][ T9681] EXT4-fs (loop0): 1 orphan inode deleted [ 264.050195][ T9685] lo speed is unknown, defaulting to 1000 [ 264.076754][ T9681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.227352][ T9680] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 264.295174][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.381246][ T9700] lo speed is unknown, defaulting to 1000 [ 264.420363][ T354] Bluetooth: hci0: Frame reassembly failed (-84) [ 264.437388][ T9697] loop0: detected capacity change from 0 to 1764 [ 264.487305][ T28] audit: type=1400 audit(2000000403.858:956): avc: denied { mount } for pid=9696 comm="syz.0.2011" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 264.517328][ T9658] loop3: detected capacity change from 0 to 1024 [ 264.634426][ T28] audit: type=1400 audit(2000000404.018:957): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 264.709634][ T9712] loop3: detected capacity change from 0 to 1024 [ 264.736802][ T9712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.783694][ T9718] loop0: detected capacity change from 0 to 1024 [ 264.806000][ T9718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.842312][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.855685][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.939128][ T9730] FAULT_INJECTION: forcing a failure. [ 264.939128][ T9730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.939180][ T9730] CPU: 1 UID: 0 PID: 9730 Comm: syz.0.2020 Tainted: G W syzkaller #0 PREEMPT(full) [ 264.939210][ T9730] Tainted: [W]=WARN [ 264.939217][ T9730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.939354][ T9730] Call Trace: [ 264.939383][ T9730] [ 264.939410][ T9730] __dump_stack+0x1d/0x30 [ 264.939540][ T9730] dump_stack_lvl+0x95/0xd0 [ 264.939606][ T9730] dump_stack+0x15/0x1b [ 264.939715][ T9730] should_fail_ex+0x263/0x280 [ 264.939815][ T9730] should_fail+0xb/0x20 [ 264.939908][ T9730] should_fail_usercopy+0x1a/0x20 [ 264.939996][ T9730] _copy_from_user+0x1c/0xb0 [ 264.940138][ T9730] ___sys_sendmsg+0xc1/0x1e0 [ 264.940316][ T9730] ? path_openat+0x1b01/0x2050 [ 264.940357][ T9730] __sys_sendmmsg+0x185/0x320 [ 264.940443][ T9730] __x64_sys_sendmmsg+0x57/0x70 [ 264.940560][ T9730] x64_sys_call+0x27aa/0x3020 [ 264.940649][ T9730] do_syscall_64+0x12c/0x370 [ 264.940802][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.940900][ T9730] RIP: 0033:0x7fa2bc07c629 [ 264.940944][ T9730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.940997][ T9730] RSP: 002b:00007fa2baacf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 264.941136][ T9730] RAX: ffffffffffffffda RBX: 00007fa2bc2f5fa0 RCX: 00007fa2bc07c629 [ 264.941187][ T9730] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000005 [ 264.941229][ T9730] RBP: 00007fa2baacf090 R08: 0000000000000000 R09: 0000000000000000 [ 264.941332][ T9730] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.941372][ T9730] R13: 00007fa2bc2f6038 R14: 00007fa2bc2f5fa0 R15: 00007ffffa8e6098 [ 264.941447][ T9730] [ 264.977380][ T9728] loop3: detected capacity change from 0 to 128 [ 264.996286][ T9734] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2023'. [ 265.018387][ T9732] loop2: detected capacity change from 0 to 512 [ 265.058377][ T9732] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2021: corrupted inode contents [ 265.058459][ T9732] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.063380][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 265.063399][ C0] EXT4-fs (loop2): initial error at time 2000000404: ext4_do_update_inode:5569: inode 15 [ 265.063427][ C0] EXT4-fs (loop2): last error at time 2000000404: ext4_do_update_inode:5569: inode 15 [ 265.064206][ T9732] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 265.064246][ T9732] loop2: lost filesystem error report for type 5 error -117 [ 265.064412][ T9732] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2021: corrupted inode contents [ 265.064490][ T9732] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.064601][ T9732] EXT4-fs error (device loop2): ext4_evict_inode:303: inode #15: comm syz.2.2021: mark_inode_dirty error [ 265.064629][ T9732] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.064848][ T9732] EXT4-fs (loop2): 1 orphan inode deleted [ 265.065244][ T9732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.242054][ T9732] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 265.379895][ T9752] validate_nla: 4 callbacks suppressed [ 265.379953][ T9752] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 265.399982][ T28] audit: type=1400 audit(2000000404.788:958): avc: denied { bind } for pid=9754 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.427726][ T9728] 9p: Could not find request transport: xen [ 265.443494][ T28] audit: type=1400 audit(2000000404.828:959): avc: denied { listen } for pid=9754 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.466089][ T28] audit: type=1400 audit(2000000404.828:960): avc: denied { connect } for pid=9754 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.476690][ T9758] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 265.494269][ T28] audit: type=1400 audit(2000000404.848:961): avc: denied { setopt } for pid=9754 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.494421][ T28] audit: type=1400 audit(2000000404.848:962): avc: denied { write } for pid=9754 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.494448][ T28] audit: type=1400 audit(2000000404.848:963): avc: denied { accept } for pid=9754 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.494474][ T28] audit: type=1400 audit(2000000404.848:964): avc: denied { read } for pid=9754 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.579553][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.610578][ T9752] bond0: (slave dummy0): Releasing backup interface [ 265.641228][ T9758] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 265.767285][ T9769] loop3: detected capacity change from 0 to 1024 [ 265.780841][ T9755] loop0: detected capacity change from 0 to 512 [ 265.789885][ T9769] EXT4-fs: Ignoring removed bh option [ 265.910739][ T9769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.916868][ T9767] 9p: Bad value for 'wfdno' [ 265.944058][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.950963][ T9755] EXT4-fs (loop0): 1 truncate cleaned up [ 265.973955][ T9755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.000774][ T9781] loop3: detected capacity change from 0 to 512 [ 266.021363][ T9783] EXT4-fs: Ignoring removed bh option [ 266.027650][ T9783] EXT4-fs: inline encryption not supported [ 266.057199][ T9783] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 266.072195][ T28] audit: type=1400 audit(2000000405.428:965): avc: denied { rename } for pid=9754 comm="syz.0.2029" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.099870][ T28] audit: type=1400 audit(2000000405.438:966): avc: denied { unlink } for pid=9754 comm="syz.0.2029" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.124667][ T28] audit: type=1400 audit(2000000405.478:967): avc: denied { map } for pid=9754 comm="syz.0.2029" path=2F3339302F66696C65312F66696C6531202864656C6574656429 dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.167231][ T9783] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 266.183001][ T9783] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2039: bg 0: block 248: padding at end of block bitmap is not set [ 266.193809][ T9781] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 266.200444][ T9783] loop2: lost filesystem error report for type 5 error -117 [ 266.212680][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 266.226490][ C1] EXT4-fs (loop2): last error at time 2000000405: ext4_validate_block_bitmap:441 [ 266.237269][ T9783] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.2039: Failed to acquire dquot type 1 [ 266.240676][ T9781] EXT4-fs (loop3): mount failed [ 266.255242][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.264386][ T9783] loop2: lost filesystem error report for type 5 error -117 [ 266.264936][ T9783] EXT4-fs (loop2): 1 truncate cleaned up [ 266.265455][ T9783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 266.421388][ T9804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2044'. [ 266.430680][ T9783] syz.2.2039 (9783) used greatest stack depth: 8912 bytes left [ 266.440647][ T9799] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2041: corrupted inode contents [ 266.462995][ T9799] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.465501][ T9799] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 266.474753][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 266.474801][ C1] EXT4-fs (loop0): initial error at time 2000000405: ext4_do_update_inode:5569: inode 15 [ 266.474850][ C1] EXT4-fs (loop0): last error at time 2000000405: ext4_do_update_inode:5569: inode 15 [ 266.481141][ T9810] lo speed is unknown, defaulting to 1000 [ 266.485445][ T9799] loop0: lost filesystem error report for type 5 error -117 [ 266.492389][ T3517] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 266.518566][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 266.540338][ T36] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 1 [ 266.540378][ T36] loop2: lost filesystem error report for type 5 error -117 [ 266.555037][ T9799] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2041: corrupted inode contents [ 266.583742][ T9799] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.584161][ T9799] EXT4-fs error (device loop0): ext4_evict_inode:303: inode #15: comm syz.0.2041: mark_inode_dirty error [ 266.627065][ T9799] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.627277][ T9799] EXT4-fs (loop0): 1 orphan inode deleted [ 266.656441][ T9799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.784448][ T9832] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 266.883445][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.995249][ T9850] lo speed is unknown, defaulting to 1000 [ 267.081390][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2056'. [ 267.172891][ T9864] EXT4-fs: Ignoring removed bh option [ 267.182852][ T9864] EXT4-fs: inline encryption not supported [ 267.193265][ T9864] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 267.234344][ T9864] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 267.291544][ T9864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2057: bg 0: block 248: padding at end of block bitmap is not set [ 267.344190][ T9864] loop4: lost filesystem error report for type 5 error -117 [ 267.350960][ T9864] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.2057: Failed to acquire dquot type 1 [ 267.358333][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 267.358352][ C0] EXT4-fs (loop4): last error at time 2000000406: ext4_validate_block_bitmap:441 [ 267.387434][ T9864] loop4: lost filesystem error report for type 5 error -117 [ 267.388033][ T9864] EXT4-fs (loop4): 1 truncate cleaned up [ 267.401728][ T9864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 267.555794][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 267.572917][ T70] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:4: Failed to release dquot type 1 [ 267.596483][ T70] loop4: lost filesystem error report for type 5 error -117 [ 267.725890][ T9886] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2062: corrupted inode contents [ 267.749854][ T9894] EXT4-fs: Ignoring removed bh option [ 267.755524][ T9889] 9p: Could not find request transport: xen [ 267.761720][ T9886] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.761809][ T9894] EXT4-fs: inline encryption not supported [ 267.771076][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 267.771097][ C1] EXT4-fs (loop3): initial error at time 2000000407: ext4_do_update_inode:5569: inode 15 [ 267.771128][ C1] EXT4-fs (loop3): last error at time 2000000407: ext4_do_update_inode:5569: inode 15 [ 267.776509][ T9856] netlink: 'syz.0.2054': attribute type 10 has an invalid length. [ 267.780063][ T9886] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 267.829430][ T9894] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 267.838871][ T9889] netlink: 'syz.0.2054': attribute type 10 has an invalid length. [ 267.846922][ T9886] loop3: lost filesystem error report for type 5 error -117 [ 267.847118][ T9886] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2062: corrupted inode contents [ 267.884279][ T9886] EXT4-fs error (device loop3): ext4_evict_inode:303: inode #15: comm syz.3.2062: mark_inode_dirty error [ 267.902772][ T9894] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 267.917127][ T9886] EXT4-fs (loop3): 1 orphan inode deleted [ 267.917976][ T9886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.942087][ T9856] bond0: (slave dummy0): Releasing backup interface [ 267.955302][ T9894] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2063: bg 0: block 248: padding at end of block bitmap is not set [ 267.980551][ T9894] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.2063: Failed to acquire dquot type 1 [ 267.991879][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 267.991897][ C1] EXT4-fs (loop2): last error at time 2000000407: ext4_validate_block_bitmap:441 [ 268.000103][ T9889] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.023163][ T9894] EXT4-fs (loop2): 1 truncate cleaned up [ 268.032220][ T9894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 268.071284][ T9880] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 268.104534][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 268.113853][ T8777] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:9: Failed to release dquot type 1 [ 268.146191][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.238235][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2070'. [ 268.238253][ T9924] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 268.238973][ T9924] siw: device registration error -23 [ 268.434830][ T9938] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 268.472952][ T9938] EXT4-fs (loop2): mount failed [ 268.664357][ T9952] lo speed is unknown, defaulting to 1000 [ 268.700310][ T9952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2076'. [ 268.712928][ T9952] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2076'. [ 268.794279][ T9954] set_capacity_and_notify: 9 callbacks suppressed [ 268.794295][ T9954] loop2: detected capacity change from 0 to 512 [ 268.795790][ T9954] EXT4-fs: Ignoring removed bh option [ 268.795811][ T9954] EXT4-fs: inline encryption not supported [ 268.797460][ T9954] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 268.810413][ T9954] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 268.810614][ T9954] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2077: bg 0: block 248: padding at end of block bitmap is not set [ 268.810850][ T9954] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.2077: Failed to acquire dquot type 1 [ 268.811364][ T9954] EXT4-fs (loop2): 1 truncate cleaned up [ 268.811828][ T9954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 268.814427][ T9956] sock: sock_timestamping_bind_phc: sock not bind to device [ 268.849022][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 268.849262][ T36] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 1 [ 268.849288][ T36] fserror_report: 5 callbacks suppressed [ 268.849299][ T36] loop2: lost filesystem error report for type 5 error -117 [ 268.909247][ T9958] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 268.912047][ T9965] loop4: detected capacity change from 0 to 1024 [ 268.993665][ T9965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.177733][ T9965] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4224: comm syz.4.2081: Allocating blocks 497-513 which overlap fs metadata [ 269.390328][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.731420][ T9987] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 269.735229][ T9977] loop2: detected capacity change from 0 to 1024 [ 269.791455][ T9987] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2088'. [ 269.797763][ T9987] bond0 (unregistering): Released all slaves [ 269.841874][ T9991] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.005834][ T9988] loop3: detected capacity change from 0 to 1024 [ 270.051996][ T9996] loop2: detected capacity change from 0 to 512 [ 270.073268][ T9996] EXT4-fs: Ignoring removed oldalloc option [ 270.121845][ T9996] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.2090: Parent and EA inode have the same ino 15 [ 270.134411][ T9996] loop2: lost filesystem error report for type 5 error -117 [ 270.142284][ T9996] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.2090: Parent and EA inode have the same ino 15 [ 270.149683][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 270.149702][ C0] EXT4-fs (loop2): initial error at time 2000000409: ext4_xattr_inode_iget:437 [ 270.149729][ C0] EXT4-fs (loop2): last error at time 2000000409: ext4_xattr_inode_iget:437 [ 270.186729][ T9996] loop2: lost filesystem error report for type 5 error -117 [ 270.187486][ T9996] EXT4-fs (loop2): 1 orphan inode deleted [ 270.239687][ T9996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.312622][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.439162][T10007] loop3: detected capacity change from 0 to 512 [ 270.451630][T10009] loop2: detected capacity change from 0 to 1024 [ 270.496282][T10007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.517015][T10007] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.576794][T10009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.618374][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.825530][T10029] loop4: detected capacity change from 0 to 128 [ 270.860580][T10029] 9p: Could not find request transport: xen [ 270.867825][T10021] netlink: 'syz.4.2101': attribute type 10 has an invalid length. [ 270.884437][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.936094][T10021] netlink: 'syz.4.2101': attribute type 10 has an invalid length. [ 271.044762][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 271.044779][ T28] audit: type=1400 audit(2000000410.428:969): avc: denied { ioctl } for pid=10044 comm="syz.4.2109" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 271.187210][T10049] lo speed is unknown, defaulting to 1000 [ 272.160854][T10070] loop3: detected capacity change from 0 to 1024 [ 272.188040][T10070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.327438][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.340222][T10073] netlink: 'syz.2.2120': attribute type 16 has an invalid length. [ 272.409475][T10073] netlink: 'syz.2.2120': attribute type 17 has an invalid length. [ 272.442065][T10073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.464730][T10087] loop0: detected capacity change from 0 to 1024 [ 272.541197][T10091] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.565754][T10087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.633835][T10091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.954022][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.987833][ T28] audit: type=1400 audit(2000000412.368:970): avc: denied { mounton } for pid=10090 comm="syz.2.2126" path="/422/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.021378][T10099] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 273.031616][T10099] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 273.048803][T10099] EXT4-fs (loop4): mount failed [ 274.226980][T10112] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 274.661428][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2131'. [ 274.707575][T10122] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2131'. [ 274.746005][T10122] siw: device registration error -23 [ 274.917184][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.072902][ T28] audit: type=1326 audit(2000000414.448:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.0.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc07c629 code=0x7ffc0000 [ 275.137614][ T28] audit: type=1326 audit(2000000414.448:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.0.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa2bc07c629 code=0x7ffc0000 [ 275.192687][ T28] audit: type=1326 audit(2000000414.448:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.0.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc07c629 code=0x7ffc0000 [ 275.247326][ T28] audit: type=1326 audit(2000000414.448:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.0.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fa2bc07c629 code=0x7ffc0000 [ 275.318878][ T28] audit: type=1326 audit(2000000414.448:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.0.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc07c629 code=0x7ffc0000 [ 275.384894][ T28] audit: type=1326 audit(2000000414.448:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.0.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2bc07c629 code=0x7ffc0000 [ 275.462697][ T28] audit: type=1326 audit(2000000414.448:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.0.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bc07c629 code=0x7ffc0000 [ 275.622625][T10139] set_capacity_and_notify: 2 callbacks suppressed [ 275.622641][T10139] loop2: detected capacity change from 0 to 1024 [ 275.814942][T10139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.990745][T10139] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.2137: Allocating blocks 497-513 which overlap fs metadata [ 276.094544][T10105] loop3: detected capacity change from 0 to 1024 [ 276.159619][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.366156][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2141'. [ 276.477252][T10166] loop4: detected capacity change from 0 to 512 [ 276.484011][T10166] EXT4-fs: Ignoring removed bh option [ 276.489447][T10166] EXT4-fs: inline encryption not supported [ 276.530418][T10166] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.562032][T10166] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 276.583577][T10166] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2145: bg 0: block 248: padding at end of block bitmap is not set [ 276.599072][T10166] loop4: lost filesystem error report for type 5 error -117 [ 276.599244][T10166] __quota_error: 7 callbacks suppressed [ 276.599316][T10166] Quota error (device loop4): write_blk: dquota write failed [ 276.606650][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 276.606676][ C1] EXT4-fs (loop4): last error at time 2000000415: ext4_validate_block_bitmap:441 [ 276.638551][T10166] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 276.649270][T10166] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.2145: Failed to acquire dquot type 1 [ 276.661175][T10166] loop4: lost filesystem error report for type 5 error -117 [ 276.663843][T10166] EXT4-fs (loop4): 1 truncate cleaned up [ 276.683146][T10166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 276.751883][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 276.769152][ T70] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 276.784198][ T70] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:4: Failed to release dquot type 1 [ 276.800798][T10174] ip6erspan0: entered promiscuous mode [ 276.819442][ T70] loop4: lost filesystem error report for type 5 error -117 [ 276.831522][T10177] loop0: detected capacity change from 0 to 1024 [ 276.901575][T10177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.941603][T10183] loop4: detected capacity change from 0 to 128 [ 277.001897][T10185] loop3: detected capacity change from 0 to 128 [ 277.079204][T10183] 9p: Could not find request transport: xen [ 277.087175][T10177] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.2151: Allocating blocks 497-513 which overlap fs metadata [ 277.099803][T10180] netlink: 'syz.4.2149': attribute type 10 has an invalid length. [ 277.115810][T10185] 9p: Could not find request transport: xen [ 277.134014][T10180] netlink: 'syz.4.2149': attribute type 10 has an invalid length. [ 277.152543][T10196] netlink: 'syz.3.2152': attribute type 10 has an invalid length. [ 277.175782][T10196] bond0: (slave dummy0): Releasing backup interface [ 277.183910][T10185] netlink: 'syz.3.2152': attribute type 10 has an invalid length. [ 277.246059][T10185] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 277.297501][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.407486][T10209] loop3: detected capacity change from 0 to 128 [ 277.813713][T10209] 9p: Could not find request transport: xen [ 277.829100][T10209] netlink: 'syz.3.2162': attribute type 10 has an invalid length. [ 278.019595][T10218] netlink: 'syz.3.2162': attribute type 10 has an invalid length. [ 278.049968][T10209] bond0: (slave dummy0): Releasing backup interface [ 278.110367][T10218] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 278.240412][T10223] loop0: detected capacity change from 0 to 512 [ 278.263754][T10223] EXT4-fs: Ignoring removed oldalloc option [ 278.326974][T10223] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.2164: Parent and EA inode have the same ino 15 [ 278.374067][T10223] loop0: lost filesystem error report for type 5 error -117 [ 278.377774][T10223] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.2164: Parent and EA inode have the same ino 15 [ 278.385172][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 278.385192][ C1] EXT4-fs (loop0): initial error at time 2000000417: ext4_xattr_inode_iget:437 [ 278.385216][ C1] EXT4-fs (loop0): last error at time 2000000417: ext4_xattr_inode_iget:437 [ 278.482762][T10223] loop0: lost filesystem error report for type 5 error -117 [ 278.483173][T10223] EXT4-fs (loop0): 1 orphan inode deleted [ 278.533196][T10223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.666270][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.471104][T10236] loop2: detected capacity change from 0 to 1024 [ 279.536261][T10262] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 279.662702][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2181'. [ 279.672008][T10274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2181'. [ 279.702121][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 280.337030][T10318] loop2: detected capacity change from 0 to 512 [ 280.339111][T10318] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2194: corrupted inode contents [ 280.339136][T10318] fserror_report: 2 callbacks suppressed [ 280.339146][T10318] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 280.339354][T10318] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 280.339371][T10318] loop2: lost filesystem error report for type 5 error -117 [ 280.339494][T10318] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2194: corrupted inode contents [ 280.339515][T10318] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 280.339603][T10318] EXT4-fs error (device loop2): ext4_evict_inode:303: inode #15: comm syz.2.2194: mark_inode_dirty error [ 280.339625][T10318] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 280.339844][T10318] EXT4-fs (loop2): 1 orphan inode deleted [ 280.340240][T10318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.583516][T10323] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 280.787274][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.921198][T10336] loop2: detected capacity change from 0 to 128 [ 281.059698][T10302] loop3: detected capacity change from 0 to 1024 [ 281.149824][T10339] loop4: detected capacity change from 0 to 512 [ 281.256423][T10339] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 281.266606][T10339] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 281.284204][T10339] EXT4-fs (loop4): mount failed [ 281.354270][T10340] netlink: 'syz.2.2199': attribute type 10 has an invalid length. [ 281.443254][T10336] 9p: Could not find request transport: xen [ 281.510778][T10340] bond0: (slave dummy0): Releasing backup interface [ 281.572552][T10344] netlink: 'syz.2.2199': attribute type 10 has an invalid length. [ 281.735406][T10344] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 283.025856][T10353] ip6erspan0: entered promiscuous mode [ 283.334995][T10367] loop0: detected capacity change from 0 to 512 [ 283.555295][T10367] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 283.566093][T10367] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 283.583879][T10367] EXT4-fs (loop0): mount failed [ 283.708308][T10384] netlink: 'syz.3.2209': attribute type 16 has an invalid length. [ 283.810249][T10387] loop4: detected capacity change from 0 to 512 [ 283.878472][T10387] EXT4-fs: Ignoring removed oldalloc option [ 283.907458][T10384] netlink: 'syz.3.2209': attribute type 17 has an invalid length. [ 283.955800][T10387] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.2211: Parent and EA inode have the same ino 15 [ 284.022216][T10384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.074649][T10387] loop4: lost filesystem error report for type 5 error -117 [ 284.082692][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 284.096490][ C1] EXT4-fs (loop4): initial error at time 2000000423: ext4_xattr_inode_iget:437 [ 284.105472][ C1] EXT4-fs (loop4): last error at time 2000000423: ext4_xattr_inode_iget:437 [ 284.119881][T10387] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.2211: Parent and EA inode have the same ino 15 [ 284.178893][T10387] loop4: lost filesystem error report for type 5 error -117 [ 284.179944][T10387] EXT4-fs (loop4): 1 orphan inode deleted [ 284.313750][T10387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.304950][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.963535][T10401] loop2: detected capacity change from 0 to 128 [ 286.533915][T10416] 9p: Could not find request transport: xen [ 286.544114][T10416] netlink: 'syz.2.2215': attribute type 10 has an invalid length. [ 286.592187][T10420] loop0: detected capacity change from 0 to 128 [ 286.673608][T10416] bond0: (slave dummy0): Releasing backup interface [ 286.686161][T10420] 9p: Could not find request transport: xen [ 286.690376][T10401] netlink: 'syz.2.2215': attribute type 10 has an invalid length. [ 286.700132][T10420] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 286.750071][T10427] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 286.855606][T10420] bond0: (slave dummy0): Releasing backup interface [ 286.889497][T10427] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 286.905703][T10401] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 287.011818][T10430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2226'. [ 288.127704][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 288.141120][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2235'. [ 288.152561][T10457] siw: device registration error -23 [ 289.916583][T10485] loop2: detected capacity change from 0 to 512 [ 290.651408][T10485] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 290.703545][T10485] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 291.654511][T10485] EXT4-fs (loop2): mount failed [ 292.774695][T10496] loop4: detected capacity change from 0 to 1024 [ 292.835448][T10496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.898722][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.982784][T10507] loop2: detected capacity change from 0 to 1024 [ 293.005536][T10507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.059478][T10507] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.2250: Allocating blocks 497-513 which overlap fs metadata [ 293.294242][T10518] loop4: detected capacity change from 0 to 512 [ 293.379480][T10518] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 293.389954][T10518] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 293.407638][T10518] EXT4-fs (loop4): mount failed [ 293.436850][T10517] loop3: detected capacity change from 0 to 1024 [ 293.451413][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.509374][T10517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.627267][T10517] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.2253: inode #3204449282: comm syz.3.2253: iget: illegal inode # [ 293.714215][T10517] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2253: error while reading EA inode 3204449282 err=-117 [ 293.923591][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.976311][T10562] loop4: detected capacity change from 0 to 512 [ 299.617570][T10562] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 299.706377][T10566] loop2: detected capacity change from 0 to 512 [ 299.734258][T10566] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2265: corrupted inode contents [ 299.734286][T10566] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 299.735244][T10566] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 299.735266][T10566] loop2: lost filesystem error report for type 5 error -117 [ 299.735451][T10566] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2265: corrupted inode contents [ 299.735542][T10566] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 299.735682][T10566] EXT4-fs error (device loop2): ext4_evict_inode:303: inode #15: comm syz.2.2265: mark_inode_dirty error [ 299.735702][T10566] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 299.735891][T10566] EXT4-fs (loop2): 1 orphan inode deleted [ 299.737556][T10566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.979039][T10565] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 300.064451][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.130747][T10575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2266'. [ 300.204297][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'. [ 300.475939][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2273'. [ 300.581072][T10597] loop3: detected capacity change from 0 to 128 [ 300.622753][T10603] siw: device registration error -23 [ 300.631379][T10597] 9p: Could not find request transport: xen [ 300.644884][T10597] netlink: 'syz.3.2275': attribute type 10 has an invalid length. [ 300.653864][T10593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2273'. [ 300.698535][T10599] netlink: 'syz.3.2275': attribute type 10 has an invalid length. [ 300.733960][T10597] bond0: (slave dummy0): Releasing backup interface [ 300.881003][T10605] loop2: detected capacity change from 0 to 512 [ 300.900955][T10599] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 300.922053][T10605] EXT4-fs: Ignoring removed bh option [ 300.960499][T10605] EXT4-fs: inline encryption not supported [ 301.189537][T10599] syz.3.2275 (10599) used greatest stack depth: 8904 bytes left [ 301.221077][T10605] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 301.456500][T10605] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 301.712378][T10605] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2276: bg 0: block 248: padding at end of block bitmap is not set [ 302.319217][T10605] loop2: lost filesystem error report for type 5 error -117 [ 302.322668][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 302.336440][ C0] EXT4-fs (loop2): last error at time 2000000441: ext4_validate_block_bitmap:441 [ 302.345701][T10605] Quota error (device loop2): write_blk: dquota write failed [ 302.740165][T10605] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 303.046304][T10616] loop4: detected capacity change from 0 to 512 [ 303.309930][T10605] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.2276: Failed to acquire dquot type 1 [ 303.375616][T10617] loop3: detected capacity change from 0 to 512 [ 303.733942][T10605] loop2: lost filesystem error report for type 5 error -117 [ 303.759690][T10605] EXT4-fs (loop2): 1 truncate cleaned up [ 304.311406][T10605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 305.228792][T10617] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 305.266647][T10616] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 305.334773][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 305.558634][T10633] x_tables: duplicate entry at hook 1 [ 305.597575][ T2200] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.654624][ T2200] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.667590][T10630] netlink: 'syz.2.2282': attribute type 16 has an invalid length. [ 305.684899][T10630] netlink: 'syz.2.2282': attribute type 17 has an invalid length. [ 305.721173][T10630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.774101][T10651] netlink: 'syz.1.2288': attribute type 10 has an invalid length. [ 305.783772][T10651] netlink: 'syz.1.2288': attribute type 10 has an invalid length. [ 305.789087][T10627] lo speed is unknown, defaulting to 1000 [ 305.882062][T10651] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 305.906100][ T2200] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.038698][ T2200] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.060165][T10627] chnl_net:caif_netlink_parms(): no params data found [ 306.096389][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 306.143852][T10668] loop4: detected capacity change from 0 to 512 [ 306.215036][T10668] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 306.225248][T10668] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 306.240761][T10668] EXT4-fs (loop4): mount failed [ 306.432251][T10675] loop3: detected capacity change from 0 to 1024 [ 306.474482][T10675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.538865][ T2200] bridge_slave_0: left allmulticast mode [ 306.572706][ T2200] bridge_slave_0: left promiscuous mode [ 306.613371][ T2200] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.757192][T10675] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.2293: Allocating blocks 497-513 which overlap fs metadata [ 307.128046][T10668] loop4: detected capacity change from 0 to 8192 [ 307.163000][ T8789] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 307.215483][ T8789] loop4: partition table partially beyond EOD, truncated [ 307.287922][ T8789] loop4: p1 start 100663296 is beyond EOD, truncated [ 307.358648][ T8789] loop4: p2 size 134217732 extends beyond EOD, truncated [ 307.576105][ T8789] loop4: p4 size 14876672 extends beyond EOD, truncated [ 307.585253][ T8789] loop4: p5 size 134217732 extends beyond EOD, truncated [ 307.593147][ T8789] loop4: p6 size 14876672 extends beyond EOD, truncated [ 307.603487][T10668] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 307.608764][T10668] loop4: partition table partially beyond EOD, truncated [ 307.616195][T10668] loop4: p1 start 100663296 is beyond EOD, truncated [ 307.622954][T10668] loop4: p2 size 134217732 extends beyond EOD, truncated [ 307.634971][T10704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2297'. [ 307.644748][ T2200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.654101][T10668] loop4: p4 size 14876672 extends beyond EOD, truncated [ 307.661788][T10668] loop4: p5 size 134217732 extends beyond EOD, truncated [ 307.669428][T10668] loop4: p6 size 14876672 extends beyond EOD, truncated [ 307.711354][ T2200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.728041][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.755160][ T2200] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 307.783122][ T2200] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 307.802399][ T2200] bond0 (unregistering): Released all slaves [ 307.888650][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.939808][ T28] audit: type=1400 audit(2000000447.318:985): avc: denied { ioctl } for pid=10705 comm="syz.1.2299" path="socket:[29882]" dev="sockfs" ino=29882 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.968978][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.018336][T10627] bridge_slave_0: entered allmulticast mode [ 308.040021][T10627] bridge_slave_0: entered promiscuous mode [ 308.065710][ T2200] hsr_slave_0: left promiscuous mode [ 308.127614][ T2200] hsr_slave_1: left promiscuous mode [ 308.264479][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 308.276418][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 308.303162][ T28] audit: type=1400 audit(2000000447.678:986): avc: denied { shutdown } for pid=10714 comm="syz.2.2301" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 308.341093][ T8789] udevd[8789]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 308.414681][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.421867][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.426535][T10719] netlink: 'syz.4.2302': attribute type 16 has an invalid length. [ 308.429637][T10627] bridge_slave_1: entered allmulticast mode [ 308.491067][T10719] netlink: 'syz.4.2302': attribute type 17 has an invalid length. [ 308.641947][T10727] loop3: detected capacity change from 0 to 8192 [ 308.724037][ T8789] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 308.729323][ T8789] loop3: partition table partially beyond EOD, truncated [ 308.784729][ T8789] loop3: p1 start 100663296 is beyond EOD, truncated [ 308.832624][ T8789] loop3: p2 size 134217732 extends beyond EOD, truncated [ 308.895298][ T8789] loop3: p4 size 14876672 extends beyond EOD, truncated [ 308.938573][ T8789] loop3: p5 size 134217732 extends beyond EOD, truncated [ 309.148332][ T8789] loop3: p6 size 14876672 extends beyond EOD, truncated [ 309.396684][T10627] bridge_slave_1: entered promiscuous mode [ 309.402820][T10727] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 309.408044][T10727] loop3: partition table partially beyond EOD, truncated [ 309.415824][T10727] loop3: p1 start 100663296 is beyond EOD, truncated [ 309.422583][T10727] loop3: p2 size 134217732 extends beyond EOD, truncated [ 309.431567][T10727] loop3: p4 size 14876672 extends beyond EOD, truncated [ 309.432349][T10627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.439766][T10727] loop3: p5 size 134217732 extends beyond EOD, truncated [ 309.457814][T10727] loop3: p6 size 14876672 extends beyond EOD, truncated [ 309.613633][T10719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.807305][T10627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.096074][T10627] team0: Port device team_slave_0 added [ 310.162511][T10627] team0: Port device team_slave_1 added [ 310.240462][T10627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.278621][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.436187][T10627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.472789][T10627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.489672][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.518813][T10627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.590200][T10627] hsr_slave_0: entered promiscuous mode [ 310.602152][T10627] hsr_slave_1: entered promiscuous mode [ 310.608428][T10627] debugfs: 'hsr0' already exists in 'hsr' [ 310.614373][T10627] Cannot create hsr debugfs directory [ 310.636257][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2313'. [ 310.649984][T10780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2313'. [ 310.685335][T10780] siw: device registration error -23 [ 310.760448][T10627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 310.854750][T10627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 310.883460][T10627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 310.902524][T10627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 311.027760][T10627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.088669][T10627] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.092112][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.092239][ T2200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.107194][T10522] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.107229][T10522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.124465][ T28] audit: type=1400 audit(2000000450.508:987): avc: denied { egress } for pid=3415 comm="kworker/1:5" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 311.189242][T10627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.189369][T10627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.245888][T10811] loop2: detected capacity change from 0 to 512 [ 311.329951][T10811] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 311.330178][T10811] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 311.335343][T10811] EXT4-fs (loop2): mount failed [ 311.692099][T10627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.866159][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'. [ 312.128842][ T28] audit: type=1400 audit(2000000450.508:988): avc: denied { sendto } for pid=3415 comm="kworker/1:5" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 312.662377][T10627] veth0_vlan: entered promiscuous mode [ 312.695623][T10627] veth1_vlan: entered promiscuous mode [ 312.732662][T10627] veth0_macvtap: entered promiscuous mode [ 312.734860][T10627] veth1_macvtap: entered promiscuous mode [ 312.751544][T10627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.774955][T10627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.779418][ T28] audit: type=1400 audit(2000000452.088:989): avc: denied { ioctl } for pid=10848 comm="syz.1.2320" path="socket:[30255]" dev="sockfs" ino=30255 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.779456][ T28] audit: type=1400 audit(2000000452.098:990): avc: denied { getopt } for pid=10848 comm="syz.1.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 312.794541][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.794589][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.794689][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.794719][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.829493][ T28] audit: type=1400 audit(2000000452.208:991): avc: denied { mounton } for pid=10627 comm="syz-executor" path="/root/syzkaller.eNN1cP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 312.835503][ T28] audit: type=1400 audit(2000000452.218:992): avc: denied { mounton } for pid=10627 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 312.835527][ T28] audit: type=1400 audit(2000000452.218:993): avc: denied { mount } for pid=10627 comm="syz-executor" name="/" dev="gadgetfs" ino=3795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 312.971185][T10862] loop5: detected capacity change from 0 to 1024 [ 312.974198][T10862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.046655][T10858] netlink: 'syz.1.2321': attribute type 16 has an invalid length. [ 313.046673][T10858] netlink: 'syz.1.2321': attribute type 17 has an invalid length. [ 313.063900][T10627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.074656][T10858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.354205][T10876] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 313.521019][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2327'. [ 313.593762][T10885] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2328'. [ 313.783861][ T28] audit: type=1400 audit(2000000453.168:994): avc: denied { create } for pid=10897 comm="syz.1.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 313.879811][T10892] 9p: Bad value for 'wfdno' [ 314.126717][T10916] netlink: 'syz.2.2334': attribute type 16 has an invalid length. [ 314.141912][T10916] netlink: 'syz.2.2334': attribute type 17 has an invalid length. [ 314.206546][T10916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.275224][ T28] audit: type=1400 audit(2000000453.658:995): avc: denied { setopt } for pid=10920 comm="syz.5.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.297325][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2340'. [ 314.307447][T10923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2340'. [ 314.348555][T10923] siw: device registration error -23 [ 314.398780][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2343'. [ 314.422766][T10931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2343'. [ 314.443945][T10931] siw: device registration error -23 [ 315.074015][T10945] loop5: detected capacity change from 0 to 1024 [ 315.105378][T10945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.243990][T10945] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4224: comm syz.5.2347: Allocating blocks 497-513 which overlap fs metadata [ 315.343917][T10954] netlink: 'syz.4.2350': attribute type 16 has an invalid length. [ 315.362972][T10954] netlink: 'syz.4.2350': attribute type 17 has an invalid length. [ 315.388641][T10954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.413215][T10937] loop2: detected capacity change from 0 to 1024 [ 315.432158][T10958] netlink: 'syz.1.2351': attribute type 10 has an invalid length. [ 315.483619][T10962] netlink: 'syz.1.2351': attribute type 10 has an invalid length. [ 315.542501][T10627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.600742][T10969] loop3: detected capacity change from 0 to 1024 [ 315.657290][T10958] bond0: (slave dummy0): Releasing backup interface [ 315.695405][T10969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.808113][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.106205][T10987] loop4: detected capacity change from 0 to 512 [ 316.207975][T10987] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 316.218167][T10987] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 316.236159][T10987] EXT4-fs (loop4): mount failed [ 316.371063][ T28] audit: type=1400 audit(2000000455.748:996): avc: denied { read } for pid=10993 comm="syz.3.2362" name="file0" dev="tmpfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.670522][ T28] audit: type=1400 audit(2000000455.788:997): avc: denied { open } for pid=10993 comm="syz.3.2362" path="/481/file0" dev="tmpfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.846786][T11002] loop3: detected capacity change from 0 to 1024 [ 316.951521][ T28] audit: type=1400 audit(2000000456.038:998): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 317.056183][T10987] loop4: detected capacity change from 0 to 8192 [ 317.066902][T11002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.163775][ T8789] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 317.163796][ T8789] loop4: partition table partially beyond EOD, truncated [ 317.164049][ T8789] loop4: p1 start 100663296 is beyond EOD, truncated [ 317.164064][ T8789] loop4: p2 size 134217732 extends beyond EOD, truncated [ 317.213322][ T8789] loop4: p4 size 14876672 extends beyond EOD, truncated [ 317.214257][ T8789] loop4: p5 size 134217732 extends beyond EOD, truncated [ 317.215297][ T8789] loop4: p6 size 14876672 extends beyond EOD, truncated [ 317.912634][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.989198][T10987] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 317.989211][T10987] loop4: partition table partially beyond EOD, truncated [ 317.989268][T10987] loop4: p1 start 100663296 is beyond EOD, truncated [ 317.989285][T10987] loop4: p2 size 134217732 extends beyond EOD, truncated [ 317.990239][T10987] loop4: p4 size 14876672 extends beyond EOD, truncated [ 318.018483][T10987] loop4: p5 size 134217732 extends beyond EOD, truncated [ 318.034868][T10987] loop4: p6 size 14876672 extends beyond EOD, truncated [ 318.176851][T11021] loop3: detected capacity change from 0 to 128 [ 318.240859][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2370'. [ 318.240880][T11025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2370'. [ 318.244885][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 318.245802][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 318.246637][ T8789] udevd[8789]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 318.248530][ T6439] udevd[6439]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 318.248756][T11025] siw: device registration error -23 [ 318.250339][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 318.274184][ T6439] udevd[6439]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 318.274540][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 318.276061][ T8789] udevd[8789]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 318.278428][T11021] 9p: Could not find request transport: xen [ 318.279288][T11021] netlink: 'syz.3.2368': attribute type 10 has an invalid length. [ 318.279399][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 318.280954][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 318.324646][T11021] bond0: (slave dummy0): Releasing backup interface [ 318.331078][T11029] netlink: 'syz.3.2368': attribute type 10 has an invalid length. [ 318.333277][T11029] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 318.628111][T11036] loop3: detected capacity change from 0 to 512 [ 318.654320][T11036] EXT4-fs: Ignoring removed oldalloc option [ 318.676165][T11036] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2373: Parent and EA inode have the same ino 15 [ 318.692681][T11036] loop3: lost filesystem error report for type 5 error -117 [ 318.695317][T11036] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2373: Parent and EA inode have the same ino 15 [ 318.702697][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 318.702750][ C0] EXT4-fs (loop3): initial error at time 2000000458: ext4_xattr_inode_iget:437 [ 318.702772][ C0] EXT4-fs (loop3): last error at time 2000000458: ext4_xattr_inode_iget:437 [ 318.739407][T11036] loop3: lost filesystem error report for type 5 error -117 [ 318.739745][T11036] EXT4-fs (loop3): 1 orphan inode deleted [ 318.753377][T11036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.814341][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.867540][T11032] 9p: Bad value for 'wfdno' [ 318.981379][T11041] netlink: 'syz.1.2375': attribute type 10 has an invalid length. [ 318.993748][T11041] netlink: 'syz.1.2375': attribute type 10 has an invalid length. [ 319.064013][T11041] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 319.162294][T11049] siw: device registration error -23 [ 319.184963][T11051] siw: device registration error -23 [ 319.442361][T11067] loop4: detected capacity change from 0 to 512 [ 319.525207][T11067] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2384: corrupted inode contents [ 319.525254][T11067] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.525790][T11067] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 319.525902][T11067] loop4: lost filesystem error report for type 5 error -117 [ 319.526173][T11067] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2384: corrupted inode contents [ 319.526214][T11067] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.526526][T11067] EXT4-fs error (device loop4): ext4_evict_inode:303: inode #15: comm syz.4.2384: mark_inode_dirty error [ 319.526813][T11067] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.527167][T11067] EXT4-fs (loop4): 1 orphan inode deleted [ 319.529029][T11067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.620290][T11072] loop2: detected capacity change from 0 to 512 [ 319.716406][T11072] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 319.716597][T11072] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.717492][T11072] EXT4-fs (loop2): mount failed [ 319.835955][T11078] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 320.079395][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2387'. [ 320.298995][T11089] netlink: 'syz.1.2388': attribute type 7 has an invalid length. [ 320.299013][T11089] netlink: 'syz.1.2388': attribute type 8 has an invalid length. [ 320.465016][T11088] x_tables: duplicate underflow at hook 3 [ 320.611732][T11072] loop2: detected capacity change from 0 to 8192 [ 320.655243][ T3001] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 320.655255][ T3001] loop2: partition table partially beyond EOD, truncated [ 320.655314][ T3001] loop2: p1 start 100663296 is beyond EOD, truncated [ 320.655351][ T3001] loop2: p2 size 134217732 extends beyond EOD, truncated [ 320.658637][ T3001] loop2: p4 size 14876672 extends beyond EOD, truncated [ 320.659394][ T3001] loop2: p5 size 134217732 extends beyond EOD, truncated [ 320.660140][ T3001] loop2: p6 size 14876672 extends beyond EOD, truncated [ 320.665454][ T3001] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 320.665498][ T3001] loop2: partition table partially beyond EOD, truncated [ 320.665610][ T3001] loop2: p1 start 100663296 is beyond EOD, truncated [ 320.665708][ T3001] loop2: p2 size 134217732 extends beyond EOD, truncated [ 320.667351][ T3001] loop2: p4 size 14876672 extends beyond EOD, truncated [ 320.672286][ T3001] loop2: p5 size 134217732 extends beyond EOD, truncated [ 320.675450][ T3001] loop2: p6 size 14876672 extends beyond EOD, truncated [ 320.688107][T11072] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 320.688117][T11072] loop2: partition table partially beyond EOD, truncated [ 320.688358][T11072] loop2: p1 start 100663296 is beyond EOD, truncated [ 320.688419][T11072] loop2: p2 size 134217732 extends beyond EOD, truncated [ 320.691445][T11072] loop2: p4 size 14876672 extends beyond EOD, truncated [ 320.692487][T11072] loop2: p5 size 134217732 extends beyond EOD, truncated [ 320.693355][T11072] loop2: p6 size 14876672 extends beyond EOD, truncated [ 320.987008][ T3001] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 320.987116][ T3001] loop2: partition table partially beyond EOD, truncated [ 320.987260][ T3001] loop2: p1 start 100663296 is beyond EOD, truncated [ 320.987278][ T3001] loop2: p2 size 134217732 extends beyond EOD, truncated [ 320.988851][ T3001] loop2: p4 size 14876672 extends beyond EOD, truncated [ 320.989615][ T3001] loop2: p5 size 134217732 extends beyond EOD, truncated [ 320.996873][ T3001] loop2: p6 size 14876672 extends beyond EOD, truncated [ 321.542729][T11096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2390'. [ 322.114854][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2395'. [ 322.114878][T11109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2395'. [ 322.115710][T11109] siw: device registration error -23 [ 322.289885][T11111] siw: device registration error -23 [ 322.480244][T11125] sch_tbf: peakrate 10252169328102481685 is lower than or equals to rate 16245104245283455944 ! [ 322.501518][T11127] lo speed is unknown, defaulting to 1000 [ 322.710606][T11132] loop5: detected capacity change from 0 to 1024 [ 322.761946][T11132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.866107][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.882311][T11132] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4224: comm syz.5.2398: Allocating blocks 497-513 which overlap fs metadata [ 322.915857][T11151] loop3: detected capacity change from 0 to 128 [ 323.035928][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2404'. [ 323.047144][T11140] 9p: Could not find request transport: xen [ 323.061025][T11162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2404'. [ 323.071266][T11151] netlink: 'syz.3.2401': attribute type 10 has an invalid length. [ 323.075777][T10627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.088823][T11162] siw: device registration error -23 [ 323.094622][T11151] bond0: (slave dummy0): Releasing backup interface [ 323.106104][T11140] netlink: 'syz.3.2401': attribute type 10 has an invalid length. [ 323.132375][ T28] audit: type=1400 audit(2000000462.508:999): avc: denied { bind } for pid=11158 comm="syz.4.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 323.196149][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2405'. [ 323.196743][T11140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 323.218720][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.229373][T11170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.263731][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.272464][T11170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.478620][ T28] audit: type=1400 audit(2000000462.858:1000): avc: denied { setopt } for pid=11182 comm="syz.3.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.500776][ T28] audit: type=1400 audit(2000000462.858:1001): avc: denied { bind } for pid=11182 comm="syz.3.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 323.589304][T11184] loop4: detected capacity change from 0 to 512 [ 323.689958][T11184] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 323.700264][T11184] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.717029][T11184] EXT4-fs (loop4): mount failed [ 323.864355][T11184] loop4: detected capacity change from 0 to 8192 [ 323.893475][ T3001] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 323.898774][ T3001] loop4: partition table partially beyond EOD, truncated [ 323.972269][ T3001] loop4: p1 start 100663296 is beyond EOD, truncated [ 323.974321][ T3001] loop4: p2 size 134217732 extends beyond EOD, truncated [ 323.982838][ T3001] loop4: p4 size 14876672 extends beyond EOD, truncated [ 323.994999][ T3001] loop4: p5 size 134217732 extends beyond EOD, truncated [ 324.000246][ T3001] loop4: p6 size 14876672 extends beyond EOD, truncated [ 324.013955][T11184] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 324.014145][T11184] loop4: partition table partially beyond EOD, truncated [ 324.014479][T11184] loop4: p1 start 100663296 is beyond EOD, truncated [ 324.014541][T11184] loop4: p2 size 134217732 extends beyond EOD, truncated [ 324.016913][T11184] loop4: p4 size 14876672 extends beyond EOD, truncated [ 324.018764][T11184] loop4: p5 size 134217732 extends beyond EOD, truncated [ 324.020258][T11184] loop4: p6 size 14876672 extends beyond EOD, truncated [ 324.311556][T11191] loop3: detected capacity change from 0 to 512 [ 324.505727][ T28] audit: type=1326 audit(2000000463.878:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.5.2414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55790fc629 code=0x0 [ 324.556688][T11209] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11209 comm=syz.5.2414 [ 324.857173][T11191] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2411: corrupted inode contents [ 324.857199][T11191] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 324.864278][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 324.864294][ C0] EXT4-fs (loop3): initial error at time 2000000464: ext4_do_update_inode:5569: inode 15 [ 324.864326][ C0] EXT4-fs (loop3): last error at time 2000000464: ext4_do_update_inode:5569: inode 15 [ 324.927247][T11191] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 324.927273][T11191] loop3: lost filesystem error report for type 5 error -117 [ 324.982703][T11191] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2411: corrupted inode contents [ 324.982786][T11191] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 325.066956][T11191] EXT4-fs error (device loop3): ext4_evict_inode:303: inode #15: comm syz.3.2411: mark_inode_dirty error [ 325.067065][T11191] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 325.067297][T11191] EXT4-fs (loop3): 1 orphan inode deleted [ 325.067672][T11191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.247107][T11191] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 325.267259][ T28] audit: type=1326 audit(2000000464.648:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2415" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966eddc629 code=0x0 [ 325.341240][T11235] lo speed is unknown, defaulting to 1000 [ 325.419928][T11237] loop5: detected capacity change from 0 to 1024 [ 325.547142][T11237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.568499][T11240] loop4: detected capacity change from 0 to 128 [ 325.625669][T11237] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4224: comm syz.5.2416: Allocating blocks 497-513 which overlap fs metadata [ 325.656776][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.752578][T11240] 9p: Could not find request transport: xen [ 325.761697][T11240] netlink: 'syz.4.2417': attribute type 10 has an invalid length. [ 325.809578][T11244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2418'. [ 325.823147][T11246] netlink: 'syz.4.2417': attribute type 10 has an invalid length. [ 325.846767][T10627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.095920][T11250] loop5: detected capacity change from 0 to 128 [ 326.283764][T11250] 9p: Could not find request transport: xen [ 326.299415][T11250] netlink: 'syz.5.2420': attribute type 10 has an invalid length. [ 326.374554][T11263] netlink: 'syz.5.2420': attribute type 10 has an invalid length. [ 326.388160][T11261] loop4: detected capacity change from 0 to 512 [ 326.412237][T11260] loop2: detected capacity change from 0 to 512 [ 326.615275][T11261] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 326.625968][T11261] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.641710][T11261] EXT4-fs (loop4): mount failed [ 327.257411][T11250] team0: Port device dummy0 added [ 327.272361][T11260] EXT4-fs: Ignoring removed oldalloc option [ 327.280784][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2425'. [ 327.392523][T11268] loop3: detected capacity change from 0 to 512 [ 327.443185][T11270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2425'. [ 327.494394][T11272] siw: device registration error -23 [ 328.246192][T11260] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.2423: Parent and EA inode have the same ino 15 [ 328.265652][T11260] loop2: lost filesystem error report for type 5 error -117 [ 328.268462][T11260] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.2423: Parent and EA inode have the same ino 15 [ 328.275901][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 328.275950][ C0] EXT4-fs (loop2): initial error at time 2000000467: ext4_xattr_inode_iget:437 [ 328.275980][ C0] EXT4-fs (loop2): last error at time 2000000467: ext4_xattr_inode_iget:437 [ 329.257247][ T28] audit: type=1400 audit(2000000467.898:1004): avc: denied { recv } for pid=11251 comm="syz.4.2421" saddr=10.128.0.163 src=33328 daddr=10.128.1.205 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 329.324926][T11260] loop2: lost filesystem error report for type 5 error -117 [ 329.325365][T11260] EXT4-fs (loop2): 1 orphan inode deleted [ 329.338989][T11263] team0: Port device dummy0 removed [ 329.374903][T11260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.392098][T11263] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 329.448526][T11268] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 329.549759][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2426'. [ 329.561453][T11281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2426'. [ 329.572350][T11281] siw: device registration error -23 [ 329.761459][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.936348][T11292] loop3: detected capacity change from 0 to 128 [ 330.031881][T11287] loop2: detected capacity change from 0 to 512 [ 330.101439][T11292] 9p: Could not find request transport: xen [ 330.110500][T11287] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 330.120546][T11287] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 330.137509][T11287] EXT4-fs (loop2): mount failed [ 330.164796][T11303] netlink: 'syz.3.2431': attribute type 10 has an invalid length. [ 330.192042][T11303] bond0: (slave dummy0): Releasing backup interface [ 330.203634][T11292] netlink: 'syz.3.2431': attribute type 10 has an invalid length. [ 330.272017][T11292] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 330.317656][T11304] loop4: detected capacity change from 0 to 512 [ 330.395226][T11304] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 330.405954][T11304] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 330.426477][T11304] EXT4-fs (loop4): mount failed [ 330.555823][T11304] loop4: detected capacity change from 0 to 8192 [ 330.593811][ T8789] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 330.605306][ T8789] loop4: partition table partially beyond EOD, truncated [ 330.707900][ T8789] loop4: p1 start 100663296 is beyond EOD, truncated [ 330.790824][ T8789] loop4: p2 size 134217732 extends beyond EOD, truncated [ 331.125302][ T8789] loop4: p4 size 14876672 extends beyond EOD, truncated [ 331.199412][ T8789] loop4: p5 size 134217732 extends beyond EOD, truncated [ 331.225822][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2437'. [ 331.258098][ T8789] loop4: p6 size 14876672 extends beyond EOD, truncated [ 331.273300][T11318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2437'. [ 331.321466][T11318] siw: device registration error -23 [ 331.884720][T11304] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 331.889987][T11304] loop4: partition table partially beyond EOD, truncated [ 331.897230][T11304] loop4: p1 start 100663296 is beyond EOD, truncated [ 331.904593][T11304] loop4: p2 size 134217732 extends beyond EOD, truncated [ 331.923097][T11304] loop4: p4 size 14876672 extends beyond EOD, truncated [ 331.930568][T11304] loop4: p5 size 134217732 extends beyond EOD, truncated [ 331.939031][T11304] loop4: p6 size 14876672 extends beyond EOD, truncated [ 332.074842][ T8789] udevd[8789]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 332.086113][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 332.098039][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 332.106124][ T6439] udevd[6439]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 332.110856][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 332.142562][T11327] loop4: detected capacity change from 0 to 1024 [ 332.188726][ T6439] udevd[6439]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 332.188737][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 332.192375][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 332.219856][ T8789] udevd[8789]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 332.231649][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 332.943967][T11333] loop5: detected capacity change from 0 to 512 [ 333.153472][T11333] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 333.164320][T11333] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 333.181492][T11333] EXT4-fs (loop5): mount failed [ 334.411322][T11353] siw: device registration error -23 [ 334.676754][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2446'. [ 334.959936][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2449'. [ 334.959959][T11363] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2449'. [ 334.960498][T11363] siw: device registration error -23 [ 335.137838][ T28] audit: type=1400 audit(2000000474.508:1005): avc: denied { create } for pid=11366 comm="syz.1.2451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 335.251276][T11373] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.2453'. [ 335.251859][ T28] audit: type=1400 audit(2000000474.628:1006): avc: denied { watch watch_reads } for pid=11372 comm="syz.5.2453" path="/29" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 335.276407][ T28] audit: type=1326 audit(2000000474.658:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.5.2453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55790fc629 code=0x0 [ 335.299037][ T28] audit: type=1400 audit(2000000474.678:1008): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0" dev="tmpfs" ino=2880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 335.593884][T11385] siw: device registration error -23 [ 335.615349][T11380] loop4: detected capacity change from 0 to 128 [ 335.679511][T11387] loop5: detected capacity change from 0 to 512 [ 335.730721][T11387] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2456: corrupted inode contents [ 335.730799][T11387] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 335.730981][T11387] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 335.731057][T11387] loop5: lost filesystem error report for type 5 error -117 [ 335.731549][T11387] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2456: corrupted inode contents [ 335.731612][T11387] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 335.734258][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 335.734346][ C0] EXT4-fs (loop5): initial error at time 2000000475: ext4_do_update_inode:5569: inode 15 [ 335.734528][ C0] EXT4-fs (loop5): last error at time 2000000475: ext4_do_update_inode:5569: inode 15 [ 335.843641][T11387] EXT4-fs error (device loop5): ext4_evict_inode:303: inode #15: comm syz.5.2456: mark_inode_dirty error [ 335.843803][T11387] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 335.856813][T11393] netlink: 'syz.4.2455': attribute type 10 has an invalid length. [ 335.856989][T11393] netlink: 'syz.4.2455': attribute type 10 has an invalid length. [ 335.908075][T11380] 9p: Could not find request transport: xen [ 335.928810][T11387] EXT4-fs (loop5): 1 orphan inode deleted [ 335.929285][T11387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.086113][T11397] loop4: detected capacity change from 0 to 128 [ 336.225974][ T28] audit: type=1400 audit(2000000475.608:1009): avc: denied { write } for pid=11401 comm="syz.3.2461" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 336.274604][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 336.341410][T11405] netlink: 'syz.4.2460': attribute type 10 has an invalid length. [ 336.379482][T11405] netlink: 'syz.4.2460': attribute type 10 has an invalid length. [ 336.381898][T11406] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 336.680973][T10627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.752451][T11414] netlink: 'syz.3.2463': attribute type 16 has an invalid length. [ 336.760866][T11397] 9p: Could not find request transport: xen [ 336.782819][T11414] netlink: 'syz.3.2463': attribute type 17 has an invalid length. [ 336.859995][T11414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.011566][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'. [ 337.082181][ T28] audit: type=1400 audit(2000000476.458:1010): avc: denied { append } for pid=11422 comm="syz.3.2466" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 337.107667][T11428] netlink: 'syz.5.2464': attribute type 16 has an invalid length. [ 337.143755][T11428] netlink: 'syz.5.2464': attribute type 17 has an invalid length. [ 337.192210][T11421] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.251234][T11421] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.605066][T11428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.663415][ T28] audit: type=1400 audit(2000000477.038:1011): avc: denied { create } for pid=11439 comm="syz.3.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 337.720104][T11440] loop3: detected capacity change from 0 to 4096 [ 337.763536][T11440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.845945][T11445] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 337.857862][T11349] loop2: detected capacity change from 0 to 1024 [ 337.865618][T11440] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=1, b_state=0x00000019, b_size=4096, device loop3 blocksize: 4096 [ 337.884295][T11440] grow_buffers: requested out-of-range block 144115188075855873 for device loop3 [ 337.907531][T11440] EXT4-fs warning (device loop3): ext4_resize_fs:2019: can't read last block, resize aborted [ 338.015841][ T28] audit: type=1400 audit(2000000477.338:1012): avc: denied { write } for pid=11439 comm="syz.3.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 338.434897][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.619926][T11480] netlink: 'syz.2.2477': attribute type 16 has an invalid length. [ 338.647376][T11480] netlink: 'syz.2.2477': attribute type 17 has an invalid length. [ 338.681425][T11480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.904590][ T28] audit: type=1400 audit(2000000478.268:1013): avc: denied { mount } for pid=11508 comm="syz.4.2485" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 338.948742][ T28] audit: type=1400 audit(2000000478.268:1014): avc: denied { remount } for pid=11508 comm="syz.4.2485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 339.009368][T11514] siw: device registration error -23 [ 339.059263][ T28] audit: type=1400 audit(2000000478.318:1015): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 339.099773][T11527] loop4: detected capacity change from 0 to 512 [ 339.169075][T11511] bond1: Removing last arp target with arp_interval on [ 339.180395][T11527] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2488: corrupted inode contents [ 339.196218][T11511] bond1: entered promiscuous mode [ 339.201700][T11511] bond1: entered allmulticast mode [ 339.211083][T11511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.217873][T11527] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 339.220178][T11527] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 339.229355][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 339.229376][ C1] EXT4-fs (loop4): initial error at time 2000000478: ext4_do_update_inode:5569: inode 15 [ 339.229419][ C1] EXT4-fs (loop4): last error at time 2000000478: ext4_do_update_inode:5569: inode 15 [ 339.294974][T11527] loop4: lost filesystem error report for type 5 error -117 [ 339.309337][T11527] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2488: corrupted inode contents [ 339.322309][T11527] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 339.322463][T11527] EXT4-fs error (device loop4): ext4_evict_inode:303: inode #15: comm syz.4.2488: mark_inode_dirty error [ 339.343200][T11527] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 339.343760][T11527] EXT4-fs (loop4): 1 orphan inode deleted [ 339.382183][T11527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.410381][T11536] loop2: detected capacity change from 0 to 128 [ 339.413238][T11518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.552338][T11516] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 339.566028][T11536] 9p: Could not find request transport: xen [ 339.572233][T11539] loop5: detected capacity change from 0 to 128 [ 339.613713][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.648605][T11553] FAULT_INJECTION: forcing a failure. [ 339.648605][T11553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.674750][T11553] CPU: 1 UID: 0 PID: 11553 Comm: syz.4.2496 Tainted: G W syzkaller #0 PREEMPT(full) [ 339.674785][T11553] Tainted: [W]=WARN [ 339.674793][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.674873][T11553] Call Trace: [ 339.674878][T11553] [ 339.674884][T11553] __dump_stack+0x1d/0x30 [ 339.674987][T11553] dump_stack_lvl+0x95/0xd0 [ 339.675014][T11553] dump_stack+0x15/0x1b [ 339.675119][T11553] should_fail_ex+0x263/0x280 [ 339.675186][T11553] should_fail+0xb/0x20 [ 339.675207][T11553] should_fail_usercopy+0x1a/0x20 [ 339.675289][T11553] _copy_to_user+0x20/0xa0 [ 339.675320][T11553] simple_read_from_buffer+0xb5/0x130 [ 339.675358][T11553] proc_fail_nth_read+0x10e/0x150 [ 339.675389][T11553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.675483][T11553] vfs_read+0x1ab/0x7f0 [ 339.675516][T11553] ? __rcu_read_unlock+0x4e/0x70 [ 339.675539][T11553] ? __fget_files+0x184/0x1c0 [ 339.675570][T11553] ? mutex_lock+0x57/0x90 [ 339.675599][T11553] ksys_read+0xdc/0x1a0 [ 339.675651][T11553] __x64_sys_read+0x40/0x50 [ 339.675677][T11553] x64_sys_call+0x2886/0x3020 [ 339.675787][T11553] do_syscall_64+0x12c/0x370 [ 339.675864][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.675949][T11553] RIP: 0033:0x7fc4e02bcece [ 339.675968][T11553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 339.675990][T11553] RSP: 002b:00007fc4ded4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.676009][T11553] RAX: ffffffffffffffda RBX: 00007fc4ded4f6c0 RCX: 00007fc4e02bcece [ 339.676107][T11553] RDX: 000000000000000f RSI: 00007fc4ded4f0a0 RDI: 0000000000000006 [ 339.676146][T11553] RBP: 00007fc4ded4f090 R08: 0000000000000000 R09: 0000000000000000 [ 339.676158][T11553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.676172][T11553] R13: 00007fc4e0576038 R14: 00007fc4e0575fa0 R15: 00007ffede7cdb88 [ 339.676198][T11553] [ 339.709266][T11539] 9p: Could not find request transport: xen [ 339.727053][T11536] bond0: (slave dummy0): Releasing backup interface [ 339.777804][T11560] siw: device registration error -23 [ 340.033838][T11565] loop4: detected capacity change from 0 to 2048 [ 340.056348][T11565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.121679][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.142719][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2503'. [ 340.151434][T11551] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 340.151842][T11571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2503'. [ 340.190353][T11558] bond0: (slave dummy0): Releasing backup interface [ 340.207031][T11558] team0: Port device dummy0 added [ 340.220812][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2504'. [ 340.248203][T11576] loop4: detected capacity change from 0 to 1024 [ 340.262416][T11539] team0: Port device dummy0 removed [ 340.275108][T11539] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 340.294915][T11576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.355293][T11578] lo speed is unknown, defaulting to 1000 [ 340.399300][ T3415] IPVS: starting estimator thread 0... [ 340.500691][T11576] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4224: comm syz.4.2504: Allocating blocks 497-513 which overlap fs metadata [ 340.516075][T11593] IPVS: using max 2400 ests per chain, 120000 per kthread [ 340.667989][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.753988][T11602] mmap: syz.2.2514 (11602) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 340.917104][T11602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2514'. [ 340.942631][T11602] netdevsim0: renamed from ip_vti0 (while UP) [ 340.975389][T11602] netdevsim0: entered promiscuous mode [ 341.034790][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2521'. [ 341.043968][T11620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2521'. [ 341.054280][T11620] siw: device registration error -23 [ 341.183522][T11619] loop4: detected capacity change from 0 to 128 [ 341.234545][T11622] loop5: detected capacity change from 0 to 128 [ 341.338685][T11630] siw: device registration error -23 [ 341.356527][T11622] 9p: Could not find request transport: xen [ 341.373845][T11622] validate_nla: 6 callbacks suppressed [ 341.373863][T11622] netlink: 'syz.5.2523': attribute type 10 has an invalid length. [ 341.405835][T11619] 9p: Could not find request transport: xen [ 341.429852][T11619] netlink: 'syz.4.2520': attribute type 10 has an invalid length. [ 341.437980][T11634] netlink: 'syz.5.2523': attribute type 10 has an invalid length. [ 341.486195][T11636] netlink: 'syz.4.2520': attribute type 10 has an invalid length. [ 341.511975][T11622] bond0: (slave dummy0): Releasing backup interface [ 341.549996][T11640] siw: device registration error -23 [ 341.605028][T11645] loop3: detected capacity change from 0 to 8192 [ 341.630820][T11622] team0: Port device dummy0 added [ 341.662233][T11648] netlink: 'syz.2.2529': attribute type 16 has an invalid length. [ 341.670099][T11648] netlink: 'syz.2.2529': attribute type 17 has an invalid length. [ 341.682424][T11644] bio_check_eod: 4 callbacks suppressed [ 341.682438][T11644] syz.3.2530: attempt to access beyond end of device [ 341.682438][T11644] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 341.688140][ T28] audit: type=1326 audit(2000000481.069:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63945ec629 code=0x7ffc0000 [ 341.723668][T11644] Buffer I/O error on dev loop3, logical block 57847, async page read [ 341.733964][ T28] audit: type=1326 audit(2000000481.069:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63945ec629 code=0x7ffc0000 [ 341.750486][T11644] syz.3.2530: attempt to access beyond end of device [ 341.750486][T11644] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 341.760699][ T28] audit: type=1326 audit(2000000481.069:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63945ec629 code=0x7ffc0000 [ 341.782323][T11644] Buffer I/O error on dev loop3, logical block 57847, async page read [ 341.803141][ T28] audit: type=1326 audit(2000000481.069:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63945ec629 code=0x7ffc0000 [ 341.804672][T11634] team0: Port device dummy0 removed [ 341.830775][ T28] audit: type=1326 audit(2000000481.069:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63945ec629 code=0x7ffc0000 [ 341.855874][T11634] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 341.865811][T11644] syz.3.2530: attempt to access beyond end of device [ 341.865811][T11644] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 341.883548][T11644] Buffer I/O error on dev loop3, logical block 57847, async page read [ 341.896994][T11622] syz.5.2523 (11622) used greatest stack depth: 8840 bytes left [ 341.936898][T11648] netdevsim0: left promiscuous mode [ 341.975913][T11648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.070562][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2535'. [ 342.093398][T11664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2535'. [ 342.093813][ T28] audit: type=1326 audit(2000000481.479:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af4ec629 code=0x7ffc0000 [ 342.122577][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2537'. [ 342.155980][T11677] x_tables: duplicate entry at hook 1 [ 342.165011][ T5290] kernel write not supported for file /1355/comm (pid: 5290 comm: kworker/0:14) [ 342.169048][ T28] audit: type=1326 audit(2000000481.519:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f61af4ec629 code=0x7ffc0000 [ 342.199516][ T28] audit: type=1326 audit(2000000481.519:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af4ec629 code=0x7ffc0000 [ 342.224989][T11673] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 342.241060][T11673] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 342.261853][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 342.264373][T11673] EXT4-fs (loop3): 1 truncate cleaned up [ 342.268344][ C0] EXT4-fs (loop3): initial error at time 2000000481: ext4_mb_generate_buddy:1315 [ 342.268371][ C0] EXT4-fs (loop3): last error at time 2000000481: ext4_mb_generate_buddy:1315 [ 342.303543][T11673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.319604][T11673] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.3.2537: path /516/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 342.344342][T11685] netlink: 'syz.1.2541': attribute type 10 has an invalid length. [ 342.392240][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.426984][ T28] audit: type=1400 audit(2000000481.809:1024): avc: denied { create } for pid=11686 comm="syz.2.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.449113][T11682] netlink: 'syz.1.2541': attribute type 10 has an invalid length. [ 342.468115][T11685] bond0: (slave dummy0): Releasing backup interface [ 342.476072][ T28] audit: type=1400 audit(2000000481.809:1025): avc: denied { getopt } for pid=11686 comm="syz.2.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.509992][T11687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2544'. [ 342.589694][T11682] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 342.662600][T11692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2543'. [ 342.727073][T11703] set_capacity_and_notify: 1 callbacks suppressed [ 342.727091][T11703] loop2: detected capacity change from 0 to 512 [ 342.785681][T11703] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2546: corrupted inode contents [ 342.785758][T11703] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.785906][T11703] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 342.785928][T11703] loop2: lost filesystem error report for type 5 error -117 [ 342.786049][T11703] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2546: corrupted inode contents [ 342.786072][T11703] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.786255][T11703] EXT4-fs error (device loop2): ext4_evict_inode:303: inode #15: comm syz.2.2546: mark_inode_dirty error [ 342.786283][T11703] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.786400][T11703] EXT4-fs (loop2): 1 orphan inode deleted [ 342.786799][T11703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.046547][T11711] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 343.054532][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2552'. [ 343.064517][T11720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2552'. [ 343.105074][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.183992][T11736] loop3: detected capacity change from 0 to 1024 [ 343.211079][ T3415] ================================================================== [ 343.219226][ T3415] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 343.227197][ T3415] [ 343.229556][ T3415] read-write to 0xffff88810048b138 of 8 bytes by task 11736 on cpu 0: [ 343.237747][ T3415] __filemap_add_folio+0x671/0x8b0 [ 343.242901][ T3415] filemap_add_folio+0x1d3/0x350 [ 343.247871][ T3415] __filemap_get_folio_mpol+0x326/0x680 [ 343.253469][ T3415] bdev_getblk+0x173/0x3f0 [ 343.257909][ T3415] __ext4_sb_bread_gfp+0x44/0x170 [ 343.262970][ T3415] ext4_fill_super+0x491/0x37c0 [ 343.267884][ T3415] get_tree_bdev_flags+0x291/0x300 [ 343.273037][ T3415] get_tree_bdev+0x1f/0x30 [ 343.277510][ T3415] ext4_get_tree+0x1c/0x30 [ 343.281982][ T3415] vfs_get_tree+0x57/0x1d0 [ 343.286453][ T3415] do_new_mount+0x288/0x8d0 [ 343.290989][ T3415] path_mount+0x4d0/0xbc0 [ 343.295345][ T3415] __se_sys_mount+0x28c/0x2e0 [ 343.300036][ T3415] __x64_sys_mount+0x67/0x80 [ 343.304699][ T3415] x64_sys_call+0x2d61/0x3020 [ 343.309414][ T3415] do_syscall_64+0x12c/0x370 [ 343.314045][ T3415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.319981][ T3415] [ 343.322325][ T3415] read to 0xffff88810048b138 of 8 bytes by task 3415 on cpu 1: [ 343.329880][ T3415] nr_blockdev_pages+0x7e/0xd0 [ 343.334674][ T3415] si_meminfo+0x87/0xd0 [ 343.338852][ T3415] update_defense_level+0x47/0x5d0 [ 343.343993][ T3415] defense_work_handler+0x1f/0x80 [ 343.349063][ T3415] process_scheduled_works+0x4de/0x9e0 [ 343.354592][ T3415] worker_thread+0x581/0x770 [ 343.359225][ T3415] kthread+0x22a/0x280 [ 343.363317][ T3415] ret_from_fork+0x150/0x360 [ 343.367948][ T3415] ret_from_fork_asm+0x1a/0x30 [ 343.372749][ T3415] [ 343.375092][ T3415] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 343.382207][ T3415] [ 343.384537][ T3415] Reported by Kernel Concurrency Sanitizer on: [ 343.390703][ T3415] CPU: 1 UID: 0 PID: 3415 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 343.401673][ T3415] Tainted: [W]=WARN [ 343.405484][ T3415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.415557][ T3415] Workqueue: events_long defense_work_handler [ 343.421764][ T3415] ================================================================== [ 343.435585][T11730] loop2: detected capacity change from 0 to 128 [ 343.479165][T11730] 9p: Could not find request transport: xen [ 343.500529][T11730] netlink: 'syz.2.2555': attribute type 10 has an invalid length. [ 343.521834][T11736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.585373][T11730] bond0: (slave dummy0): Releasing backup interface [ 343.597748][T11742] netlink: 'syz.2.2555': attribute type 10 has an invalid length. [ 343.619609][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.653571][T11742] bond0: (slave dummy0): Enslaving as an active interface with an up link