last executing test programs: 48.460239863s ago: executing program 4 (id=472): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00040004000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 48.35938855s ago: executing program 4 (id=473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="bc01000019000100fcffffff10000000ffffffff000000000000000000000000fc0000000000000000003c000000000100000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000009000000000000000800000000000000000000000000000000000000000000000000000000000000010000000000000009000000000000008000000000000000000000010000000000000000000000000101000300000000040105"], 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 48.294960581s ago: executing program 4 (id=474): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xfffffe7b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x41, 0x1000003}}], 0x10}}], 0x1, 0x20000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r3, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 48.223889753s ago: executing program 4 (id=477): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x9) ptrace$pokeuser(0x6, r0, 0x358, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 48.030371835s ago: executing program 4 (id=480): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'gre0\x00', 0x4}, 0x18) r1 = memfd_create(&(0x7f0000000040)=':\x00', 0x3) (async) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)={0x44, "23af8e70860966e65c1fd600ad9bd6dced88221b31e3e32c570b85af0440cfc9ec479c440dd1d7c4cf9f016af5c4d3e213b68d7ec3b8800c5816aad33867d235820aea1e9550240fc07f284f67a2f7460d6d3d497d25b0a6b77fe3528fa1e40a2b359d7f7548ff8a8ca5e7fbfe0da2eecec19b88e3893e14ee0cd5be9af07742"}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @sack_perm, @timestamp, @mss, @timestamp], 0x5) (async) close(r0) (async) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/24, 0x18}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000440)=""/8, 0x8}], 0x5, 0x0, 0x80, 0x1e) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000500)={{r1}, "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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001580)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001540)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) r3 = fcntl$getown(r1, 0x9) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000015c0)=r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001640), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001780)={'gre0\x00', &(0x7f00000016c0)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x80000000, 0x2, {{0x1b, 0x4, 0x2, 0x8, 0x6c, 0x66, 0x0, 0xb7, 0x4, 0x0, @private=0xa010102, @multicast2, {[@lsrr={0x83, 0x7, 0x2e, [@rand_addr=0x64010101]}, @cipso={0x86, 0x4e, 0x0, [{0x5, 0x9, "ae2cb5796320f7"}, {0x0, 0x9, "f173e8a9a43c85"}, {0x7, 0x11, "36e95e0297f24616a882c9ca96e4c6"}, {0x6, 0xf, "2ac50ce5345b60da165492fd91"}, {0x6, 0x11, "676c3fc56cc89c9bc5ab874e3a7c0f"}, {0x7, 0x5, "295a97"}]}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000017c0)={'vlan0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001880)={'syztnl2\x00', &(0x7f0000001800)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0x9, 0x8001, 0x2fd4d73f8e847c49, @remote, @loopback, 0x700, 0x1, 0x8, 0x3}}) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000018c0)={0x0, @private, @multicast2}, &(0x7f0000001900)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001940)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001a00)={'erspan0\x00', &(0x7f0000001980)={'gretap0\x00', 0x0, 0x783, 0x80, 0x4, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x65, 0x0, 0xa, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x13, 0xdd, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4}, @rr={0x7, 0x23, 0x63, [@rand_addr=0x64010102, @empty, @remote, @multicast2, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001ac0)={'ip6tnl0\x00', &(0x7f0000001a40)={'syztnl1\x00', 0x0, 0x2f, 0xf, 0x1, 0x6, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x10, 0xffff, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001bc0)={'syztnl1\x00', &(0x7f0000001b00)={'ip_vti0\x00', 0x0, 0x40, 0x700, 0x8, 0x3, {{0x1e, 0x4, 0x0, 0x3c, 0x78, 0x64, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_addr={0x44, 0xc, 0x2c, 0x1, 0x1, [{@local, 0x3}]}, @cipso={0x86, 0xa, 0x2, [{0x0, 0x4, "0bbf"}]}, @rr={0x7, 0xf, 0xc, [@empty, @broadcast, @rand_addr=0x64010100]}, @timestamp={0x44, 0x2c, 0x29, 0x0, 0x2, [0x0, 0x6, 0x2, 0xb, 0x4a, 0x96, 0x7, 0x1, 0x8, 0x7]}, @lsrr={0x83, 0xf, 0x9c, [@multicast2, @broadcast, @broadcast]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001c80)={'ip6tnl0\x00', &(0x7f0000001c00)={'syztnl2\x00', 0x0, 0x4, 0x9d, 0x7, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, 0x0, 0x80, 0xdaa1, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001cc0)={'vxcan1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001d00)={@mcast2, 0x0}, &(0x7f0000001d40)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001e00)={'syztnl0\x00', &(0x7f0000001d80)={'syztnl2\x00', 0x0, 0x29, 0xf1, 0xfd, 0x8, 0x8, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x8000, 0x10, 0x31e1800, 0x4}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000020c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002080)={&(0x7f0000001e40)={0x218, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa31d4edaeb655041}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008081) prlimit64(r3, 0x1, &(0x7f0000002100)={0x6, 0x400}, &(0x7f0000002140)) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000021c0)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @remote}, 0x180, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002180)='team0\x00', 0x2, 0x8, 0x4}) 45.718896362s ago: executing program 4 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000f080002"], 0x64}}, 0x0) 45.630085027s ago: executing program 32 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000f080002"], 0x64}}, 0x0) 5.533631565s ago: executing program 0 (id=958): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x40) socket(0x10, 0x3, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_delete(r1) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e1f, @empty}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000a80)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r8, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f000020e000/0x1000)=nil, 0x1000, 0x1000008, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.764589254s ago: executing program 0 (id=963): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') pread64(r2, &(0x7f00000002c0)=""/85, 0x55, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb110018000000220000000ce5ffff0b000002000000000500000000000009"], 0x0, 0x26, 0x0, 0x3}, 0x28) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x36}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0xffffe, 0x3, 0x3}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @broadcast, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="87f08e819077", @mac=@remote, @multicast2, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x6}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x0, 0x4) 4.591806542s ago: executing program 0 (id=969): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 3.693047292s ago: executing program 3 (id=975): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264"], 0x40}, 0x1, 0x0, 0x601}, 0x0) 3.622513884s ago: executing program 3 (id=976): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000fffffffe116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 3.562508514s ago: executing program 3 (id=979): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') pread64(r2, &(0x7f00000002c0)=""/85, 0x55, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb110018000000220000000ce5ffff0b000002000000000500000000000009"], 0x0, 0x26, 0x0, 0x3}, 0x28) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x36}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0xffffe, 0x3, 0x3}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @broadcast, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="87f08e819077", @mac=@remote, @multicast2, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x6}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x0, 0x4) 2.669157074s ago: executing program 3 (id=991): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef9}, 0x111efa, 0x1, 0x0, 0x0, 0x6, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000203000000004e2200000100ffff00"/56, @ANYRES32=0x0], 0x54}}, 0x20004010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r1, r2, 0x0, 0x0, &(0x7f0000000240), 0x0}, 0x30) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r6}, 0x4) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="4cf4b3ee155fcbd336aab06780b81560d692414fd09675d7722497cba3e3cda37f3ed709b051d02d071b07b42c6062", 0x2f}], 0x1}, 0xa) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000880)=""/163, 0xa3}, 0x20) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x2c, r9, 0xc01, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4044050) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, 0x0, 0x20000000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x4851) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x10, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x14c2}]}, 0x24}}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES8=r7, @ANYBLOB="ffc30000000000005000128009000100766c616e000000004000028006000100fe0f00000400048028000380d8fd010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32, @ANYRES8=r5, @ANYRES64=r11], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x44, 0x0, 0x0, 0x80000000}, {0x20}, {0x3, 0xfd, 0x0, 0xefff}, {0x20, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2.482428535s ago: executing program 3 (id=995): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) capset(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x14) r2 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0xa000000c, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000200)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 2.376836893s ago: executing program 1 (id=997): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) r2 = socket$inet(0x2, 0xa, 0x4) getsockname$inet(r2, 0x0, &(0x7f00000000c0)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) (async) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) (async) socket$inet(0x2, 0xa, 0x4) (async) getsockname$inet(r2, 0x0, &(0x7f00000000c0)) (async) 2.287023618s ago: executing program 1 (id=998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="bc01000019000100fcffffff10000000ffffffff000000000000000000000000fc000000000000000000003c0000000100000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000009000000000000000800000000000000000000000000000000000000000000000000000000000000010000000000000009000000000000008000000000000000000000010000000000000000000000000101000300000000040105"], 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.202417302s ago: executing program 1 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd8) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767320000000000000000000000000024000380ff00000000000000000000000000000000000000000000000000000000000000480108805400008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08080003000300000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bf000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222400020082a3fee8508b9dedc00d8ccb9cfa517d48a03e6112bfa9074c524b2a05708654a400098028000080060001000a00000014000200fe880000000000000000000000000101050003000300000040000080060001000a0000001400020000000000000000000000ffff7f00000105000300030000000600010002000000080002007f00000105000300010000000c000080060001"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 2.089052991s ago: executing program 1 (id=1001): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') pread64(r2, &(0x7f00000002c0)=""/85, 0x55, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb110018000000220000000ce5ffff0b000002000000000500000000000009"], 0x0, 0x26, 0x0, 0x3}, 0x28) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x36}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0xffffe, 0x3, 0x3}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @broadcast, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="87f08e819077", @mac=@remote, @multicast2, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x6}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x0, 0x4) 1.946168455s ago: executing program 2 (id=1005): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef9}, 0x111efa, 0x1, 0x0, 0x0, 0x6, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000203000000004e2200000100ffff00"/56, @ANYRES32=0x0], 0x54}}, 0x20004010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r1, r2, 0x0, 0x0, &(0x7f0000000240), 0x0}, 0x30) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r6}, 0x4) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="4cf4b3ee155fcbd336aab06780b81560d692414fd09675d7722497cba3e3cda37f3ed709b051d02d071b07b42c6062", 0x2f}], 0x1}, 0xa) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000880)=""/163, 0xa3}, 0x20) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x2c, r9, 0xc01, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4044050) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, 0x0, 0x20000000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x4851) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x10, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x14c2}]}, 0x24}}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES8=r7, @ANYBLOB="ffc30000000000005000128009000100766c616e000000004000028006000100fe0f00000400048028000380d8fd010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32, @ANYRES8=r5, @ANYRES64=r11], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x44, 0x0, 0x0, 0x80000000}, {0x20}, {0x3, 0xfd, 0x0, 0xefff}, {0x20, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.935531847s ago: executing program 5 (id=1006): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0xa6}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 1.842920352s ago: executing program 5 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}, 0x1, 0x0, 0x0, 0x24040040}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20225c}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0xe8, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xaaf2}]}, @NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x404, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x12c}, 0x1, 0x0, 0x0, 0xc000}, 0x84) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001840)={'\x00', 0x2, 0x0, 0x1, 0x1, 0x2, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000018c0)=0x0) getresgid(&(0x7f0000001900)=0x0, &(0x7f0000001940), &(0x7f0000001980)=0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000019c0), 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000001a80)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000480)="452cec8cbf60e7ebd1c138f93a03d58bfee3b95fc9ccbe082c406a4393a5af8ebd84204fae02426bbfc364eeabdf2ed8601251e4fbf6965be40e18d38ce8f65204e5e189770ea4fb4f7ddd3304121b259a9caae5cda8dc472770128e27832a5466", 0x61}, {&(0x7f0000000500)="5fed66274c6e3a7e074704bc35bb032816b822de65eb2c5be1b9d29789c3175632f7036160b63d9598aa4ff11ee958bb555c214ae4cb0f01", 0x38}, {&(0x7f0000000540)="cf8602cf8d06392366358f2a6e8b4b8d313535a1055a0370008fa448922f96c180e52e900a980ceda1d12f350f41fda240746014d82de0063778baef3ea0a6c0d3f134f3d5386eac0e483577e8774ab61b8af37008b4fefe23a98124e9b658813ddd283a460d3bd10578344f65204a0741d26ef395126db5493b1f66e1d438b4e3c138ac718343f5c4a98ca5a1198361eac98fec79d9137393b55d2bb182b653148f54b8e4c9c69a60a4bd3c2b4e88f3f9fba248dda59aa3c6817d81607b2aa67e5de132cb12353d51b2e7caecd255ac161482fc5cc8f2d96287ffeffc30b9d1d8c5fdb08f", 0xe5}, {&(0x7f0000000640)="47b3bf55df8626fd6750c9529af77c2c64d0e5e65b94b94f1c6109722742966261145cbe44ad9d8deed850752e3a8cd40933553be23a3894699bdc1201418875daae72e4a08d3977c0f549de611ef9aefc3f30fdd01d7f9a244fed57162f4e5af81e46bcb1a7d1699e4695018b16d9e0924214a4", 0x74}, {&(0x7f00000006c0)="3eb7fd14eafc582ffa85fd32c5c80aeadfc196dd3b28c17df7e1801f8b6dc6d40d02cb9f8c0eb5108a67a196e072df2a30ccafdfaac8b1fcfdbc00da1363a0c1e30d0f4e9d02d5d5212cd08909c07bcfe71a9dffeb0757489f207e0ef850313f", 0x60}, {&(0x7f0000000740)="e72f083e8d867588b977bc6351b6a5611740fb98d03d69911c2b5d9182e36a9a35d2ab5e0a5e", 0x26}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="4bc8d7ae9fe83019fb5f231abde609e1", 0x10}], 0x8, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r0, r6]}}, @rights={{0x1c, 0x1, 0x1, [r7, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}], 0x80, 0x80}, 0x4040000) r8 = syz_open_dev$hidraw(&(0x7f0000001ac0), 0x9, 0x149000) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000001b00)={0x3, 0x8001, 0x2, 0x6, 0x7, 0x0, [{0x9, 0xffae, 0x3ff, '\x00', 0x80}, {0x7, 0x7, 0x7, '\x00', 0x1000}, {0x4, 0x2, 0x0, '\x00', 0x80}, {0xb1f, 0x7, 0x5, '\x00', 0x100}, {0x4, 0x2, 0x2, '\x00', 0x100}, {0x5, 0x81, 0x8001, '\x00', 0x380}, {0xacca, 0xdac, 0x8f2, '\x00', 0x80}]}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001cc0), 0x111000, 0x0) ioctl$TUNSETGROUP(r9, 0x400454ce, r5) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4884}, 0xb9ca3dab3dc9cfc7) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000001e00)) recvfrom$unix(r1, &(0x7f0000001e40)=""/44, 0x2c, 0x40, &(0x7f0000001e80)=@file={0x0, './file0\x00'}, 0x6e) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001f00)={0x8, {"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", 0x1000}}, 0x1006) r10 = epoll_create(0x7) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000002f40)={0x1000, r1, 'id0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000002fc0)={0x2000}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000003040), r11) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000003180)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003140)={&(0x7f0000003080)={0x88, r12, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003200), r11) sendmsg$TIPC_NL_NET_GET(r11, &(0x7f0000003740)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003700)={&(0x7f0000003240)={0x49c, r13, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x2b8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "435416c85c0a093b5214c39caa9d4abac8231a17cb6b7a"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "ad3d310de94eb52f64acd95ff73a2296f1176848969c5c2b7f7af661aa21e888527da4da5b01421df1336ec7a90c6337166253a83e13d2b0341f7e935d6b1f882e06d6f99adf28408bc866b3b6a6386aaaebb38b6155123949c5aaa4826e1c67b1761f3e750c6aeca2bcedeb4901eb15bc00ed8bcf4b20cdb9c727f4c13bd34c085d22188f09cf2457107ad1ad61f16c32b2b56e6b766983bfe3a2b927e06576161eed5b366f567f2365f8017a4def8ce6095d320adc1abc237e4888dd8bf68cbe95c3492ef64ded7dffcc5acd550d795e23e034d776bbce00961e52da"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xdb, 0x3, "05360fdd371fee750a35bd94cc9d9b4fb4e9a517231e7dd6851ee4996e3b9e1d6a3f177340ca22873154b69f9e707b4129c94cd63b4df0844585e3710f78086b616bf56100d1cfca644fb80eddaf0152f39e291bd205b01a630540bfaa89cebcccc60cd88a5865b731a7a114d5142148a96201d1cf9600259a8cd425f529123e8d3a4aa17e9cd6099c33f19a1fbfa29fd7c2fa0e870c3b8178d69947886d3e841f7accec3dfd3d5ebd476bb60c70a2aae60fc926c021dcae20e2e32b80f1d5f21ba3cbf8bb559e7ff37ff0c0eda6b7fa4414b31c1308d7"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x99, 0x3, "625a68cad4355b516de70691f239d320387805a7ff1006a6b30550863d1078092995954e26ea8eb689bfaf7495baf44e5aadb735314cb130bb5167f04257184be7aea9081a4d94e701c85f7345efc3bc507e098226759aea90deb28d1239451ccacb60904bbf7733526b090c21df28eb62ac276aca750eb6f5864cb888ccebadbab070c1d8bd2b44e985c78973a0805dd17881ee80"}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf5e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @local, 0xdc8f6b7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x636}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private0, 0xd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @remote, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4}, 0x81) r14 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r14, &(0x7f0000003780)={0xa, 0x4e21, 0x81, @mcast1, 0x6}, 0x1c) r15 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000037c0), 0x1, 0x0) ioctl$PTP_PEROUT_REQUEST(r15, 0x40383d03, &(0x7f0000003800)={{0x7fff, 0xfff}, {0x6, 0x8}, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x0, &(0x7f0000003840)) 1.776517943s ago: executing program 3 (id=1008): syz_emit_ethernet(0x3e, &(0x7f0000001840)=ANY=[], 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001dc0)=ANY=[@ANYBLOB="b9fd1bf1b9e7835e5bc3c3d9ab54cc2d16ef0d42a7fb75eb3f1a9dd19067bdf499e02fd4457541d3311e", @ANYRESDEC, @ANYBLOB="0096d7bee69605fbbd656c7b6f1d42351e3c7d1ce6d6d95720566ec6565f64e99afdacb99666f2851764cc7d7cf72e975ff5bd40b7b97cd4709b78223a69764ad2242a3351a3095f5661d303b8038e92317c75b9ff537674f2c3d457f5fd0aac50398c45eea3a6ce78397f46ae3274b8d9f61c1e0a6adff0ac5ddfe1d93e759ec783a182cb43f642583023a2b47a23c049bfacd1bae4bb02d405476ebed12c58a058afe270779ffe991a17d407b1021d29c6c0c4af7248fa79563558f30070f33626f2ecc28747b0839f6fe13fef7e1fdff15da09c52f1ff330c6525811ab6aa5fd160eb13e3e0d5", @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x5536, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES8=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$sock(0xffffffffffffffff, 0x0, 0x1) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000c3b587191f1278100410088caa5f3e9f449b54d5e69b3c6b9b2697724"], &(0x7f0000000480)={0x0, 0x3, [0x7ee, 0xda, 0x365, 0x261]}) poll(&(0x7f0000000100)=[{r5, 0x84}], 0x1, 0x3ff) syz_emit_ethernet(0xae, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6012000800783afff58000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269008e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18030001fee9fffffff50000000000000101fe906d26efe3"], 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, 0x0) ioctl$sock_netdev_private(r6, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x65199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xf}, 0xa028, 0x72, 0xa, 0x7, 0x9, 0x86, 0x9, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r2, 0x8) sendto$inet(r5, &(0x7f0000000140)='^', 0x1, 0x2000, &(0x7f0000004ff0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) listen(r5, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) accept4(r5, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xc7) 1.775467953s ago: executing program 2 (id=1009): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@acl}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@errors_remount}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x7, 0x60a, &(0x7f0000000880)="$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") (async) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@acl}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@errors_remount}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x7, 0x60a, &(0x7f0000000880)="$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") socket(0xfffffffffffffffd, 0x5, 0xff) (async) r0 = socket(0xfffffffffffffffd, 0x5, 0xff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d13f230e3603631a855802b483c8db39af979736cb336356a7c1e9d69", 0x30}], 0x1}}], 0x1, 0x20000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x0, 0xd, 0x8000000000003, 0xfffffffffffffffe, 0x8, 0x3, 0x28af, 0x0, 0x4}) 1.714911174s ago: executing program 5 (id=1010): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000df83000400000000837000100000000000000020"], 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000f700100002000000000020"], 0x2c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) 1.714331114s ago: executing program 2 (id=1011): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x4, 0x0, "", [@nested={0x4, 0x1}]}, 0x14}], 0x1}, 0x8000) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r0, &(0x7f0000000140)=@reiserfs_4={0x10, 0x4, {0x81000000, 0x8, 0x3, 0x3}}, 0x220400) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) poll(0x0, 0x0, 0x9) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@sysvgroups}]}, 0x3, 0x466, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 1.574149407s ago: executing program 5 (id=1012): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 1.506572779s ago: executing program 5 (id=1013): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80042, 0x0) fchmod(r0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x401, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5707}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2404d808}, 0x24000000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') readv(r4, &(0x7f0000000740)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000725250000000c600e41b0000900ac00081e25000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x53}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0) move_pages(r7, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.404372046s ago: executing program 0 (id=1014): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x54b}], 0x2, 0x2000, 0x0) 1.31418684s ago: executing program 0 (id=1015): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioprio_get$pid(0x3, 0x0) 1.264281749s ago: executing program 0 (id=1016): getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) accept$unix(0xffffffffffffffff, &(0x7f0000000240), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x62}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) lsm_set_self_attr(0x69, 0x0, 0x20, 0x0) 1.13562116s ago: executing program 1 (id=1017): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000df83000400000000837000100000000000000020"], 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000f700100002000000000020"], 0x2c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) (fail_nth: 2) 405.303303ms ago: executing program 2 (id=1018): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d03d}) r0 = socket(0x1, 0x803, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100001042abd70000002000000000000", @ANYRES32=0x0, @ANYBLOB="91400300002c000020001280080001007369740014000280080002000a0101010800140003000000140003006e"], 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x8000, 0xffffffffffffffff, 0x5, 0x54}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x0) 315.074038ms ago: executing program 2 (id=1019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x11}, 0x0) 314.554498ms ago: executing program 2 (id=1020): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef9}, 0x111efa, 0x1, 0x0, 0x0, 0x6, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000203000000004e2200000100ffff00"/56, @ANYRES32=0x0], 0x54}}, 0x20004010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r1, r2, 0x0, 0x0, &(0x7f0000000240), 0x0}, 0x30) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r6}, 0x4) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="4cf4b3ee155fcbd336aab06780b81560d692414fd09675d7722497cba3e3cda37f3ed709b051d02d071b07b42c6062", 0x2f}], 0x1}, 0xa) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000880)=""/163, 0xa3}, 0x20) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x2c, r9, 0xc01, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4044050) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, 0x0, 0x20000000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x4851) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x10, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x14c2}]}, 0x24}}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES8=r7, @ANYBLOB="ffc30000000000005000128009000100766c616e000000004000028006000100fe0f00000400048028000380d8fd010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32, @ANYRES8=r5, @ANYRES64=r11], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x44, 0x0, 0x0, 0x80000000}, {0x20}, {0x3, 0xfd, 0x0, 0xefff}, {0x20, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 35.710265ms ago: executing program 5 (id=1021): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x1000, 0x9e, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @remote, @remote}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0x8b, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2004cfe9, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4000041, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="78010000", @ANYRES16=r3, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0xff81, 0x4084}, 0x20000010) unshare(0x4000400) 0s ago: executing program 1 (id=1022): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000080000000000b69658210190f118020122373d46b21e6b6e838ca1511974921a493fc5556d76ce687fb252ea8512e1926ca3c12d6ca6515a8a1a35ca39f09f611bc401156021748b145f728c00025e475311cfbfb5e0f2c4e607001b3168582272e1b735551e59eba71975220f5df42249b7f595b430c01822f9bcfefca8981eb8d11a45e713dacdbcccd165a796c56717dc96f64197de20822570ac45dea45ee012a1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000640)={{0x2, 0x4e23, @local}, {0x6, @local}, 0x6, {0x2, 0x4e24, @empty}, 'batadv0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000dc0)='auxv\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000002a80)=""/255, 0xff}, {0x0}], 0x2, 0xf4, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', r2, 0x4000, r1}, 0x18) r5 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x440, &(0x7f0000000000)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r7, 0x0}]) close_range(r5, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x5}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0xc0) r11 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280003, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x2600c000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x10, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) kernel console output (not intermixed with test programs): 58.307683][ T4847] xfrm1: left promiscuous mode [ 58.369119][ T4852] 8021q: adding VLAN 0 to HW filter on device .` [ 58.389042][ T4852] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.420536][ T4852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.469670][ T4733] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.478751][ T4733] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.494556][ T4873] vlan2: entered promiscuous mode [ 58.513169][ T4733] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.539268][ T4882] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.540240][ T4733] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.560326][ T4733] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.571421][ T4733] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.581500][ T4733] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.591496][ T4733] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.746211][ T4894] iso9660: Unknown parameter 'blouø†õx0000000000000400' [ 58.950446][ T39] tipc: Subscription rejected, illegal request [ 58.953605][ T4912] netlink: 108 bytes leftover after parsing attributes in process `syz.1.418'. [ 59.337300][ T4907] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.371963][ T4907] EXT4-fs error (device loop3): ext4_get_journal_inode:5890: comm syz.3.416: inode #1792: comm syz.3.416: iget: illegal inode # [ 59.387016][ T4907] loop3: lost filesystem error report for type 5 error -117 [ 59.388419][ T4907] EXT4-fs (loop3): Remounting filesystem read-only [ 59.388973][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 59.389085][ C1] EXT4-fs (loop3): initial error at time 2000000514: ext4_get_journal_inode:5890 [ 59.389253][ C1] EXT4-fs (loop3): last error at time 2000000514: ext4_get_journal_inode:5890 [ 59.558392][ T4907] EXT4-fs (loop3): no journal found [ 59.594606][ T4907] EXT4-fs (loop3): can't get journal size [ 59.618349][ T4933] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.636998][ T4907] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 59.664051][ T4907] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 59.724352][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 59.776508][ T30] tipc: Subscription rejected, illegal request [ 59.923106][ T4953] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 60.270353][ T4957] FAULT_INJECTION: forcing a failure. [ 60.270353][ T4957] name failslab, interval 1, probability 0, space 0, times 0 [ 60.283216][ T4957] CPU: 1 UID: 0 PID: 4957 Comm: syz.1.431 Not tainted syzkaller #0 PREEMPT(full) [ 60.283240][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 60.283251][ T4957] Call Trace: [ 60.283258][ T4957] [ 60.283265][ T4957] __dump_stack+0x1d/0x30 [ 60.283287][ T4957] dump_stack_lvl+0x95/0xd0 [ 60.283307][ T4957] dump_stack+0x15/0x1b [ 60.283374][ T4957] should_fail_ex+0x263/0x280 [ 60.283395][ T4957] should_failslab+0x8c/0xb0 [ 60.283566][ T4957] __kmalloc_cache_node_noprof+0x6b/0x470 [ 60.283648][ T4957] ? __get_vm_area_node+0x106/0x1d0 [ 60.283743][ T4957] ? page_counter_charge+0x207/0x230 [ 60.283762][ T4957] __get_vm_area_node+0x106/0x1d0 [ 60.283788][ T4957] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 60.283859][ T4957] ? bpf_check+0xdb/0x2c60 [ 60.283877][ T4957] ? css_rstat_updated+0xbb/0x280 [ 60.283898][ T4957] ? __rcu_read_unlock+0x4e/0x70 [ 60.283920][ T4957] ? bpf_check+0xdb/0x2c60 [ 60.283939][ T4957] vzalloc_noprof+0x82/0xb0 [ 60.284022][ T4957] ? bpf_check+0xdb/0x2c60 [ 60.284040][ T4957] bpf_check+0xdb/0x2c60 [ 60.284061][ T4957] ? avc_has_perm+0x101/0x190 [ 60.284084][ T4957] ? selinux_bpf_prog_load+0x197/0x1c0 [ 60.284142][ T4957] bpf_prog_load+0xf70/0x1140 [ 60.284169][ T4957] ? security_bpf+0x2b/0x90 [ 60.284186][ T4957] __sys_bpf+0x505/0x7e0 [ 60.284211][ T4957] __x64_sys_bpf+0x41/0x50 [ 60.284257][ T4957] x64_sys_call+0x10cb/0x3020 [ 60.284278][ T4957] do_syscall_64+0x12c/0x3b0 [ 60.284372][ T4957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.284414][ T4957] RIP: 0033:0x7f191139c819 [ 60.284433][ T4957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.284448][ T4957] RSP: 002b:00007f190fdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.284466][ T4957] RAX: ffffffffffffffda RBX: 00007f1911615fa0 RCX: 00007f191139c819 [ 60.284478][ T4957] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 60.284545][ T4957] RBP: 00007f190fdef090 R08: 0000000000000000 R09: 0000000000000000 [ 60.284556][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.284566][ T4957] R13: 00007f1911616038 R14: 00007f1911615fa0 R15: 00007ffdf2e406b8 [ 60.284583][ T4957] [ 60.284592][ T4957] warn_alloc: 2 callbacks suppressed [ 60.284600][ T4957] syz.1.431: vmalloc error: size 3808, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 60.543536][ T4957] CPU: 0 UID: 0 PID: 4957 Comm: syz.1.431 Not tainted syzkaller #0 PREEMPT(full) [ 60.543557][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 60.543567][ T4957] Call Trace: [ 60.543574][ T4957] [ 60.543580][ T4957] __dump_stack+0x1d/0x30 [ 60.543660][ T4957] dump_stack_lvl+0x95/0xd0 [ 60.543682][ T4957] dump_stack+0x15/0x1b [ 60.543701][ T4957] warn_alloc+0x145/0x1c0 [ 60.543732][ T4957] ? page_counter_charge+0x207/0x230 [ 60.543807][ T4957] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 60.543825][ T4957] ? css_rstat_updated+0xbb/0x280 [ 60.543850][ T4957] ? __rcu_read_unlock+0x4e/0x70 [ 60.543875][ T4957] ? bpf_check+0xdb/0x2c60 [ 60.543972][ T4957] vzalloc_noprof+0x82/0xb0 [ 60.543987][ T4957] ? bpf_check+0xdb/0x2c60 [ 60.544004][ T4957] bpf_check+0xdb/0x2c60 [ 60.544071][ T4957] ? avc_has_perm+0x101/0x190 [ 60.544134][ T4957] ? selinux_bpf_prog_load+0x197/0x1c0 [ 60.544200][ T4957] bpf_prog_load+0xf70/0x1140 [ 60.544229][ T4957] ? security_bpf+0x2b/0x90 [ 60.544245][ T4957] __sys_bpf+0x505/0x7e0 [ 60.544271][ T4957] __x64_sys_bpf+0x41/0x50 [ 60.544347][ T4957] x64_sys_call+0x10cb/0x3020 [ 60.544367][ T4957] do_syscall_64+0x12c/0x3b0 [ 60.544388][ T4957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.544406][ T4957] RIP: 0033:0x7f191139c819 [ 60.544422][ T4957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.544501][ T4957] RSP: 002b:00007f190fdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.544521][ T4957] RAX: ffffffffffffffda RBX: 00007f1911615fa0 RCX: 00007f191139c819 [ 60.544534][ T4957] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 60.544545][ T4957] RBP: 00007f190fdef090 R08: 0000000000000000 R09: 0000000000000000 [ 60.544555][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.544566][ T4957] R13: 00007f1911616038 R14: 00007f1911615fa0 R15: 00007ffdf2e406b8 [ 60.544618][ T4957] [ 60.544664][ T4957] Mem-Info: [ 60.701925][ T4962] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.710529][ T4957] active_anon:23620 inactive_anon:0 isolated_anon:0 [ 60.710529][ T4957] active_file:12432 inactive_file:12561 isolated_file:0 [ 60.710529][ T4957] unevictable:0 dirty:207 writeback:0 [ 60.710529][ T4957] slab_reclaimable:3196 slab_unreclaimable:16518 [ 60.710529][ T4957] mapped:29366 shmem:16721 pagetables:1264 [ 60.710529][ T4957] sec_pagetables:0 bounce:0 [ 60.710529][ T4957] kernel_misc_reclaimable:0 [ 60.710529][ T4957] free:1856320 free_pcp:13322 free_cma:0 [ 60.803884][ T4957] Node 0 active_anon:94596kB inactive_anon:0kB active_file:49728kB inactive_file:50244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117464kB dirty:828kB writeback:0kB shmem:66884kB kernel_stack:4544kB pagetables:5404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 60.843904][ T4957] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 60.877765][ T4957] lowmem_reserve[]: 0 2878 7857 7857 [ 60.883541][ T4957] Node 0 DMA32 free:2943856kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947484kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 60.917243][ T4957] lowmem_reserve[]: 0 0 4978 4978 [ 60.930845][ T4957] Node 0 Normal free:4470804kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94132kB inactive_anon:0kB active_file:49728kB inactive_file:50244kB unevictable:0kB writepending:828kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:49828kB local_pcp:22412kB free_cma:0kB [ 60.980368][ T4957] lowmem_reserve[]: 0 0 0 0 [ 60.985260][ T4957] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 60.998633][ T4957] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 1*32kB (M) 4*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2943856kB [ 61.018017][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 61.018043][ T28] audit: type=1326 audit(2000000772.281:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49e58c819 code=0x7ffc0000 [ 61.068174][ T30] tipc: Subscription rejected, illegal request [ 61.088819][ T4957] Node 0 Normal: 539*4kB (UM) 326*8kB (UME) 54*16kB (UME) 304*32kB (UM) 229*64kB (UM) 64*128kB (ME) 28*256kB (UM) 28*512kB (UME) 15*1024kB (UM) 6*2048kB (UME) 1070*4096kB (UM) = 4470076kB [ 61.108954][ T28] audit: type=1326 audit(2000000772.281:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49e58c819 code=0x7ffc0000 [ 61.134097][ T28] audit: type=1326 audit(2000000772.281:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49e58c819 code=0x7ffc0000 [ 61.139105][ T4957] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 61.158585][ T28] audit: type=1326 audit(2000000772.281:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49e58c819 code=0x7ffc0000 [ 61.192683][ T28] audit: type=1326 audit(2000000772.281:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb49e58c582 code=0x7ffc0000 [ 61.216673][ T28] audit: type=1326 audit(2000000772.281:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb49e58c617 code=0x7ffc0000 [ 61.220155][ T4957] 41668 total pagecache pages [ 61.249953][ T4975] set_capacity_and_notify: 4 callbacks suppressed [ 61.250117][ T4975] loop2: detected capacity change from 0 to 512 [ 61.265967][ T4957] 0 pages in swap cache [ 61.270336][ T28] audit: type=1326 audit(2000000772.281:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb49e549511 code=0x7ffc0000 [ 61.293694][ T4957] Free swap = 124996kB [ 61.296030][ T28] audit: type=1326 audit(2000000772.281:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb49e58d609 code=0x7ffc0000 [ 61.305205][ T4957] Total swap = 124996kB [ 61.323809][ T28] audit: type=1326 audit(2000000772.281:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb49e54957b code=0x7ffc0000 [ 61.338548][ T4957] 2097051 pages RAM [ 61.352921][ T28] audit: type=1326 audit(2000000772.281:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49e58c819 code=0x7ffc0000 [ 61.379049][ T4957] 0 pages HighMem/MovableOnly [ 61.383935][ T4994] loop3: detected capacity change from 0 to 512 [ 61.386911][ T4957] 81781 pages reserved [ 61.395694][ T4994] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.415946][ T4975] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 61.425912][ T4994] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.443: Allocating blocks 41-42 which overlap fs metadata [ 61.463193][ T4975] EXT4-fs (loop2): 1 truncate cleaned up [ 61.468691][ T4994] loop3: lost filesystem error report for type 5 error -117 [ 61.499855][ T4994] EXT4-fs (loop3): Remounting filesystem read-only [ 61.513732][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 61.513756][ C0] EXT4-fs (loop3): initial error at time 2000000772: ext4_mb_mark_diskspace_used:4222 [ 61.513784][ C0] EXT4-fs (loop3): last error at time 2000000772: ext4_mb_mark_diskspace_used:4222 [ 61.540387][ T4994] EXT4-fs (loop3): 1 truncate cleaned up [ 61.577594][ T5005] loop4: detected capacity change from 0 to 1024 [ 61.586999][ T5005] EXT4-fs: test_dummy_encryption option not supported [ 61.827791][ T5021] __nla_validate_parse: 5 callbacks suppressed [ 61.827829][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.448'. [ 61.859827][ T5021] bond1: entered promiscuous mode [ 61.865224][ T5021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.879153][ T5021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.448'. [ 61.985580][ T5021] loop4: detected capacity change from 0 to 512 [ 62.174336][ T5020] loop3: detected capacity change from 0 to 1024 [ 62.254201][ T5020] EXT4-fs: test_dummy_encryption option not supported [ 62.524131][ T5032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.459'. [ 62.830438][ T5038] syz.3.460 uses obsolete (PF_INET,SOCK_PACKET) [ 63.372669][ T5035] loop2: detected capacity change from 0 to 512 [ 63.458848][ T5035] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.457: missing EA_INODE flag [ 63.472554][ T5035] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 63.474488][ T5035] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.457: error while reading EA inode 12 err=-117 [ 63.484258][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 63.484326][ C1] EXT4-fs (loop2): initial error at time 2000001030: ext4_xattr_inode_iget:441: inode 12 [ 63.484658][ C1] EXT4-fs (loop2): last error at time 2000001030: ext4_xattr_inode_iget:441: inode 12 [ 63.598585][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 63.609947][ T5035] loop2: lost filesystem error report for type 5 error -117 [ 63.615622][ T5035] EXT4-fs (loop2): 1 orphan inode deleted [ 63.653563][ T5034] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 63.667071][ T5034] žÿ: renamed from team_slave_1 (while UP) [ 63.676617][ T5034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.457'. [ 63.690507][ T5050] loop3: detected capacity change from 0 to 128 [ 63.697821][ T5050] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.711333][ T5050] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.722615][ T5051] xt_policy: neither incoming nor outgoing policy selected [ 63.778539][ T5057] loop3: detected capacity change from 0 to 256 [ 63.820532][ T5057] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.837410][ T5063] loop1: detected capacity change from 0 to 512 [ 63.850610][ T5063] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.864167][ T5063] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.470: Invalid block bitmap block 0 in block_group 0 [ 63.897748][ T5063] loop1: lost filesystem error report for type 5 error -117 [ 63.898714][ T5063] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 63.906074][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 63.906093][ C0] EXT4-fs (loop1): initial error at time 2000001031: ext4_read_block_bitmap_nowait:483 [ 63.906113][ C0] EXT4-fs (loop1): last error at time 2000001031: ext4_read_block_bitmap_nowait:483 [ 63.940390][ T5063] loop1: lost filesystem error report for type 5 error -117 [ 63.954857][ T5063] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.470: attempt to clear invalid blocks 983261 len 1 [ 64.054679][ T5063] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.054953][ T5063] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.470: Invalid inode table block 0 in block_group 0 [ 64.069877][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'. [ 64.078443][ T5063] loop1: lost filesystem error report for type 5 error -117 [ 64.087610][ T5063] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 64.113500][ T5063] loop1: lost filesystem error report for type 5 error -117 [ 64.113690][ T5063] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 64.134528][ T5083] loop4: detected capacity change from 0 to 2048 [ 64.142712][ T5063] loop1: lost filesystem error report for type 5 error -117 [ 64.142912][ T5063] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.470: Invalid inode table block 0 in block_group 0 [ 64.164738][ T5063] loop1: lost filesystem error report for type 5 error -117 [ 64.166190][ T5063] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 64.183897][ T5063] loop1: lost filesystem error report for type 5 error -117 [ 64.184075][ T5063] EXT4-fs error (device loop1): ext4_truncate:4604: inode #11: comm syz.1.470: mark_inode_dirty error [ 64.206640][ T5063] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.206841][ T5063] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 64.226467][ T5063] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.470: Invalid inode table block 0 in block_group 0 [ 64.239733][ T5063] EXT4-fs (loop1): 1 truncate cleaned up [ 64.284429][ T5063] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.470: Invalid inode bitmap blk 0 in block_group 0 [ 64.284921][ T5090] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.392401][ T5094] FAULT_INJECTION: forcing a failure. [ 64.392401][ T5094] name failslab, interval 1, probability 0, space 0, times 0 [ 64.460407][ T5094] CPU: 1 UID: 0 PID: 5094 Comm: syz.2.479 Not tainted syzkaller #0 PREEMPT(full) [ 64.460512][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 64.460523][ T5094] Call Trace: [ 64.460529][ T5094] [ 64.460536][ T5094] __dump_stack+0x1d/0x30 [ 64.460561][ T5094] dump_stack_lvl+0x95/0xd0 [ 64.460651][ T5094] dump_stack+0x15/0x1b [ 64.460669][ T5094] should_fail_ex+0x263/0x280 [ 64.460766][ T5094] should_failslab+0x8c/0xb0 [ 64.460789][ T5094] __kmalloc_noprof+0xb8/0x4d0 [ 64.460877][ T5094] ? ext4_find_extent+0x17a/0x790 [ 64.460897][ T5094] ext4_find_extent+0x17a/0x790 [ 64.460916][ T5094] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 64.460939][ T5094] ? rb_insert_color+0x277/0x2b0 [ 64.461032][ T5094] ext4_ext_map_blocks+0x10d/0x2ea0 [ 64.461053][ T5094] ? _raw_write_unlock+0xd/0x30 [ 64.461074][ T5094] ? ext4_es_insert_extent+0x1b5c/0x1c60 [ 64.461100][ T5094] ? percpu_counter_add_batch+0xb6/0x130 [ 64.461171][ T5094] ? ext4_fc_track_inode+0x9f/0x5c0 [ 64.461189][ T5094] ext4_map_create_blocks+0xce/0x3a0 [ 64.461301][ T5094] ext4_map_blocks+0x594/0x970 [ 64.461363][ T5094] _ext4_get_block+0x117/0x370 [ 64.461446][ T5094] ext4_get_block_unwritten+0x2a/0xb0 [ 64.461470][ T5094] ext4_block_write_begin+0x650/0xcf0 [ 64.461540][ T5094] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 64.461563][ T5094] ? folio_mapping+0xb9/0xe0 [ 64.461587][ T5094] ext4_write_begin+0x623/0xe50 [ 64.461609][ T5094] ? ext4_xattr_security_get+0x32/0x40 [ 64.461689][ T5094] ext4_da_write_begin+0x1ef/0x680 [ 64.461745][ T5094] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 64.461769][ T5094] generic_perform_write+0x183/0x490 [ 64.461789][ T5094] ext4_buffered_write_iter+0x1ee/0x3c0 [ 64.461822][ T5094] ? ext4_file_write_iter+0x100/0xfa0 [ 64.461914][ T5094] ext4_file_write_iter+0x380/0xfa0 [ 64.461938][ T5094] ? handle_mm_fault+0x29f3/0x2e70 [ 64.461958][ T5094] ? avc_policy_seqno+0x15/0x30 [ 64.462025][ T5094] ? security_file_permission+0x22/0x70 [ 64.462140][ T5094] aio_write+0x2fe/0x430 [ 64.462165][ T5094] io_submit_one+0xbc1/0x1350 [ 64.462188][ T5094] __se_sys_io_submit+0xfb/0x280 [ 64.462238][ T5094] __x64_sys_io_submit+0x43/0x50 [ 64.462308][ T5094] x64_sys_call+0x19d5/0x3020 [ 64.462402][ T5094] do_syscall_64+0x12c/0x3b0 [ 64.462506][ T5094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.462552][ T5094] RIP: 0033:0x7f39ea0bc819 [ 64.462566][ T5094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.462581][ T5094] RSP: 002b:00007f39e8aee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 64.462598][ T5094] RAX: ffffffffffffffda RBX: 00007f39ea336090 RCX: 00007f39ea0bc819 [ 64.462611][ T5094] RDX: 0000200000002680 RSI: 0000000000000003 RDI: 00007f39e8a4a000 [ 64.462624][ T5094] RBP: 00007f39e8aee090 R08: 0000000000000000 R09: 0000000000000000 [ 64.462658][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.462669][ T5094] R13: 00007f39ea336128 R14: 00007f39ea336090 R15: 00007ffdff590d88 [ 64.462699][ T5094] [ 64.862184][ T5108] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.142861][ T5127] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 65.179749][ T5127] EXT4-fs error (device loop1): ext4_get_journal_inode:5890: comm syz.1.492: inode #1792: comm syz.1.492: iget: illegal inode # [ 65.209705][ T5127] fserror_report: 2 callbacks suppressed [ 65.209796][ T5127] loop1: lost filesystem error report for type 5 error -117 [ 65.230176][ T5127] EXT4-fs (loop1): Remounting filesystem read-only [ 65.244012][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 65.244032][ C1] EXT4-fs (loop1): initial error at time 2000001288: ext4_get_journal_inode:5890 [ 65.244056][ C1] EXT4-fs (loop1): last error at time 2000001288: ext4_get_journal_inode:5890 [ 65.278619][ T5126] vlan2: entered promiscuous mode [ 65.293998][ T5127] EXT4-fs (loop1): no journal found [ 65.300017][ T5127] EXT4-fs (loop1): can't get journal size [ 65.309093][ T5127] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 65.349228][ T5117] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.382227][ T5117] EXT4-fs error (device loop2): ext4_iget_extra_inode:5042: inode #15: comm syz.2.490: corrupted in-inode xattr: bad e_name length [ 65.405541][ T5127] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 65.424426][ T5117] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.424772][ T5117] EXT4-fs (loop2): get orphan inode failed [ 65.433984][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 65.434017][ C0] EXT4-fs (loop2): initial error at time 2000001288: ext4_iget_extra_inode:5042: inode 15 [ 65.434083][ C0] EXT4-fs (loop2): last error at time 2000001288: ext4_iget_extra_inode:5042: inode 15 [ 65.468531][ T5117] EXT4-fs (loop2): mount failed [ 65.789766][ T5142] EXT4-fs mount: 32 callbacks suppressed [ 65.789834][ T5142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.808273][ T5142] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.398001][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 66.398014][ T28] audit: type=1400 audit(2000001545.660:675): avc: denied { read } for pid=5151 comm="syz.2.499" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.427204][ T28] audit: type=1400 audit(2000001545.660:676): avc: denied { open } for pid=5151 comm="syz.2.499" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.507565][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.553102][ T5089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.565451][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.606832][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.666176][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 66.781873][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.799096][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 66.867500][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.907829][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 66.958196][ T28] audit: type=1326 audit(2000001546.218:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5162 comm="syz.0.505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb49e58c819 code=0x0 [ 67.020920][ T28] audit: type=1326 audit(2000001546.258:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 67.047670][ T28] audit: type=1326 audit(2000001546.258:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 67.072571][ T28] audit: type=1326 audit(2000001546.258:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 67.096625][ T28] audit: type=1326 audit(2000001546.258:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 67.126363][ T28] audit: type=1326 audit(2000001546.258:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 67.151578][ T28] audit: type=1326 audit(2000001546.258:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 67.175956][ T28] audit: type=1326 audit(2000001546.258:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 67.282271][ T39] tipc: Subscription rejected, illegal request [ 67.293769][ T5188] netlink: 108 bytes leftover after parsing attributes in process `syz.3.510'. [ 67.424537][ T5169] chnl_net:caif_netlink_parms(): no params data found [ 67.495982][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.504650][ T5169] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.512062][ T5169] bridge_slave_0: entered allmulticast mode [ 67.522152][ T5169] bridge_slave_0: entered promiscuous mode [ 67.530470][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.537645][ T5169] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.545351][ T5169] bridge_slave_1: entered allmulticast mode [ 67.556370][ T5169] bridge_slave_1: entered promiscuous mode [ 67.594646][ T5169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.609188][ T5169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.645212][ T5169] team0: Port device team_slave_0 added [ 67.656374][ T5169] team0: Port device team_slave_1 added [ 67.690240][ T5169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.697968][ T5169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.724447][ T5169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.739184][ T5169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.749986][ T5169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.808987][ T5169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.843937][ T5169] hsr_slave_0: entered promiscuous mode [ 67.850325][ T5169] hsr_slave_1: entered promiscuous mode [ 67.856231][ T5169] debugfs: 'hsr0' already exists in 'hsr' [ 67.862184][ T5169] Cannot create hsr debugfs directory [ 67.907826][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.920378][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 67.993783][ T5207] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 68.026704][ T5207] netlink: 128 bytes leftover after parsing attributes in process `syz.0.514'. [ 68.044479][ T30] bridge_slave_1: left allmulticast mode [ 68.050638][ T30] bridge_slave_1: left promiscuous mode [ 68.056437][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.066930][ T30] bridge_slave_0: left allmulticast mode [ 68.080094][ T30] bridge_slave_0: left promiscuous mode [ 68.087771][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.108079][ T5211] set_capacity_and_notify: 5 callbacks suppressed [ 68.108092][ T5211] loop2: detected capacity change from 0 to 1024 [ 68.114790][ T5213] loop3: detected capacity change from 0 to 512 [ 68.131707][ T5213] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 68.160011][ T5213] EXT4-fs error (device loop3): ext4_get_journal_inode:5890: comm syz.3.512: inode #1792: comm syz.3.512: iget: illegal inode # [ 68.194797][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 68.204244][ T5213] loop3: lost filesystem error report for type 5 error -117 [ 68.204463][ T5213] EXT4-fs (loop3): Remounting filesystem read-only [ 68.211883][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 68.211912][ C1] EXT4-fs (loop3): initial error at time 2000001547: ext4_get_journal_inode:5890 [ 68.211950][ C1] EXT4-fs (loop3): last error at time 2000001547: ext4_get_journal_inode:5890 [ 68.243606][ T5213] EXT4-fs (loop3): no journal found [ 68.250072][ T5213] EXT4-fs (loop3): can't get journal size [ 68.256136][ T5213] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 68.265869][ T5213] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 68.274644][ T5213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.287706][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.298027][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.307707][ T30] bond0 (unregistering): Released all slaves [ 68.316298][ T30] bond1 (unregistering): Released all slaves [ 68.716461][ T30] hsr_slave_0: left promiscuous mode [ 68.722327][ T30] hsr_slave_1: left promiscuous mode [ 68.727856][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.735314][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.750388][ T4734] tipc: Subscription rejected, illegal request [ 68.756777][ T30] veth1_macvtap: left promiscuous mode [ 68.763060][ T30] veth0_macvtap: left promiscuous mode [ 68.768568][ T30] veth1_vlan: left promiscuous mode [ 68.773884][ T30] veth0_vlan: left promiscuous mode [ 68.816159][ T5236] netlink: 108 bytes leftover after parsing attributes in process `syz.1.521'. [ 68.851377][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.861102][ T30] team0 (unregistering): Port device team_slave_1 removed [ 68.877647][ T30] team0 (unregistering): Port device team_slave_0 removed [ 68.925137][ T5239] loop3: detected capacity change from 0 to 512 [ 68.943356][ T5239] EXT4-fs: Ignoring removed nobh option [ 68.965251][ T5239] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.978421][ T5169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.003069][ T5169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.013158][ T5169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.030303][ T5169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.064430][ T5246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.524'. [ 69.078202][ T5169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.090034][ T39] tipc: Subscription rejected, illegal request [ 69.121822][ T5239] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.147796][ T5239] EXT4-fs (loop3): 1 truncate cleaned up [ 69.184056][ T5239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.211712][ T5266] netlink: 108 bytes leftover after parsing attributes in process `syz.0.532'. [ 69.930440][ T5169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.944888][ T3038] 8021q: adding VLAN 0 to HW filter on device eth1 [ 69.945673][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.989499][ T5169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.009501][ T5169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.187888][ T5312] loop1: detected capacity change from 0 to 512 [ 70.212415][ T5312] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 70.241240][ T5312] EXT4-fs error (device loop1): ext4_get_journal_inode:5890: comm syz.1.531: inode #1792: comm syz.1.531: iget: illegal inode # [ 70.267686][ T5312] loop1: lost filesystem error report for type 5 error -117 [ 70.268910][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 70.282866][ C0] EXT4-fs (loop1): initial error at time 2000001805: ext4_get_journal_inode:5890 [ 70.287305][ T5296] loop3: detected capacity change from 0 to 128 [ 70.292136][ C0] EXT4-fs (loop1): last error at time 2000001805: ext4_get_journal_inode:5890 [ 70.292799][ T5312] EXT4-fs (loop1): Remounting filesystem read-only [ 70.292882][ T5312] EXT4-fs (loop1): no journal found [ 70.292893][ T5312] EXT4-fs (loop1): can't get journal size [ 70.354773][ T5312] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 70.365945][ T3038] 8021q: adding VLAN 0 to HW filter on device eth2 [ 70.371135][ T5312] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 70.385804][ T5312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.418287][ T5296] ext2: Unknown parameter 'subj_role' [ 70.430814][ T5169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.479815][ T5169] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.514571][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.521954][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.536044][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.543340][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.597295][ T5333] loop2: detected capacity change from 0 to 4096 [ 70.617385][ T5333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.636703][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.653257][ T5333] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 70.676822][ T5333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.701800][ T5169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.720553][ T3038] 8021q: adding VLAN 0 to HW filter on device eth3 [ 70.734810][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.822875][ T104] tipc: Subscription rejected, illegal request [ 70.831467][ T5360] netlink: 108 bytes leftover after parsing attributes in process `syz.1.536'. [ 70.973878][ T5339] loop3: detected capacity change from 0 to 512 [ 70.977055][ T3038] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.997152][ T5169] veth0_vlan: entered promiscuous mode [ 71.017627][ T5169] veth1_vlan: entered promiscuous mode [ 71.030010][ T5339] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 71.037352][ T5169] veth0_macvtap: entered promiscuous mode [ 71.046720][ T5387] loop1: detected capacity change from 0 to 512 [ 71.048180][ T5169] veth1_macvtap: entered promiscuous mode [ 71.080119][ T5339] EXT4-fs (loop3): 1 truncate cleaned up [ 71.084911][ T5169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.086052][ T5387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.108851][ T5169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.116456][ T5339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.120488][ T5387] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.538: Invalid block bitmap block 0 in block_group 0 [ 71.144543][ T5339] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.156876][ T4740] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.166228][ T5387] loop1: lost filesystem error report for type 5 error -117 [ 71.166430][ T5387] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 71.166752][ T4740] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.173784][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 71.173803][ C0] EXT4-fs (loop1): initial error at time 2000002062: ext4_read_block_bitmap_nowait:483 [ 71.207363][ C0] EXT4-fs (loop1): last error at time 2000002062: ext4_read_block_bitmap_nowait:483 [ 71.221729][ T5387] loop1: lost filesystem error report for type 5 error -117 [ 71.227344][ T5387] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.538: attempt to clear invalid blocks 983261 len 1 [ 71.229534][ T4740] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.244993][ T5387] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.258341][ T5387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.538: Invalid inode table block 0 in block_group 0 [ 71.266465][ T4740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.287786][ T5387] loop1: lost filesystem error report for type 5 error -117 [ 71.291776][ T5387] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 71.312114][ T5387] loop1: lost filesystem error report for type 5 error -117 [ 71.313091][ T5387] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 71.330314][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 71.343797][ T5387] loop1: lost filesystem error report for type 5 error -117 [ 71.344121][ T5387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.538: Invalid inode table block 0 in block_group 0 [ 71.364648][ T5387] loop1: lost filesystem error report for type 5 error -117 [ 71.390500][ T5387] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 71.419333][ T5387] loop1: lost filesystem error report for type 5 error -117 [ 71.419517][ T5387] EXT4-fs error (device loop1): ext4_truncate:4604: inode #11: comm syz.1.538: mark_inode_dirty error [ 71.467323][ T5387] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.467781][ T5387] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 71.499311][ T5387] loop1: lost filesystem error report for type 5 error -117 [ 71.499511][ T5387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.538: Invalid inode table block 0 in block_group 0 [ 71.530756][ T5387] loop1: lost filesystem error report for type 5 error -117 [ 71.531216][ T5387] EXT4-fs (loop1): 1 truncate cleaned up [ 71.545822][ T5387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.573207][ T5387] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 71.573230][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 71.573241][ T28] audit: type=1400 audit(2000002062.837:712): avc: denied { mac_admin } for pid=5376 comm="syz.1.538" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.591200][ T5387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.538: Invalid inode table block 0 in block_group 0 [ 71.614311][ T28] audit: type=1400 audit(2000002062.867:713): avc: denied { relabelto } for pid=5376 comm="syz.1.538" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 71.666078][ T5387] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 71.722375][ T28] audit: type=1400 audit(2000002062.987:714): avc: denied { ioctl } for pid=5376 comm="syz.1.538" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.778641][ T5412] loop3: detected capacity change from 0 to 4096 [ 71.795473][ T5412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.812300][ T5412] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 71.824739][ T5412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.315949][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.316983][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 72.385347][ T5429] xt_policy: neither incoming nor outgoing policy selected [ 72.462767][ T5444] loop5: detected capacity change from 0 to 256 [ 72.482690][ T5444] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.552474][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.559221][ T5441] bridge_slave_1: left allmulticast mode [ 72.576779][ T5441] bridge_slave_1: left promiscuous mode [ 72.592980][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.619618][ T5441] bridge_slave_0: left allmulticast mode [ 72.629342][ T5441] bridge_slave_0: left promiscuous mode [ 72.648707][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.932994][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 72.950657][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 73.325819][ T28] audit: type=1326 audit(2000002320.592:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.5.565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faed766c819 code=0x0 [ 73.361374][ T5473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 73.499197][ T5473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 73.509214][ T5476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 73.518284][ T5476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 73.528080][ T5473] x_tables: duplicate underflow at hook 1 [ 74.014022][ T28] audit: type=1400 audit(2000002321.282:716): avc: denied { listen } for pid=5490 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.197821][ T28] audit: type=1400 audit(2000002321.462:717): avc: denied { mount } for pid=5490 comm="syz.3.573" name="/" dev="autofs" ino=10112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 74.241341][ T5508] loop2: detected capacity change from 0 to 4096 [ 74.271171][ T5508] EXT4-fs: Mount option(s) incompatible with ext2 [ 74.310405][ T28] audit: type=1400 audit(2000002321.492:718): avc: denied { allowed } for pid=5509 comm="syz.5.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.434491][ T28] audit: type=1400 audit(2000002321.522:719): avc: denied { read write } for pid=5504 comm="syz.1.578" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.521566][ T28] audit: type=1400 audit(2000002321.522:720): avc: denied { open } for pid=5504 comm="syz.1.578" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.554745][ T5528] loop2: detected capacity change from 0 to 1024 [ 74.570761][ T5528] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.590686][ T5528] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.584: Invalid block bitmap block 0 in block_group 0 [ 74.604279][ T5531] loop5: detected capacity change from 0 to 512 [ 74.618753][ T5528] Quota error (device loop2): write_blk: dquota write failed [ 74.626232][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 74.626254][ C0] EXT4-fs (loop2): initial error at time 2000002321: ext4_read_block_bitmap_nowait:483 [ 74.626281][ C0] EXT4-fs (loop2): last error at time 2000002321: ext4_read_block_bitmap_nowait:483 [ 74.652972][ T5528] EXT4-fs error (device loop2): ext4_acquire_dquot:7028: comm syz.2.584: Failed to acquire dquot type 0 [ 74.665959][ T5531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.679670][ T5528] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.584: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.679793][ T5531] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.704871][ T5528] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.584: Invalid inode bitmap blk 0 in block_group 0 [ 74.727157][ T5528] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 74.736684][ T5528] EXT4-fs (loop2): 1 orphan inode deleted [ 74.746409][ T5528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.749058][ T4740] EXT4-fs error (device loop2): ext4_release_dquot:7064: comm kworker/u8:22: Failed to release dquot type 0 [ 74.784072][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.850598][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'. [ 74.860407][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.586'. [ 74.883821][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.893563][ T5545] loop1: detected capacity change from 0 to 128 [ 74.908802][ T5545] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.935628][ T5545] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.131412][ T5564] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 75.144820][ T5566] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.596'. [ 75.675810][ T5578] loop3: detected capacity change from 0 to 512 [ 75.699847][ T5578] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 75.710167][ T5578] EXT4-fs error (device loop3): ext4_get_journal_inode:5890: comm syz.3.599: inode #1792: comm syz.3.599: iget: illegal inode # [ 75.740448][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.742169][ T5578] fserror_report: 5 callbacks suppressed [ 75.742245][ T5578] loop3: lost filesystem error report for type 5 error -117 [ 75.796769][ T5578] EXT4-fs (loop3): Remounting filesystem read-only [ 75.804120][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 75.804142][ C0] EXT4-fs (loop3): initial error at time 2000002323: ext4_get_journal_inode:5890 [ 75.804161][ C0] EXT4-fs (loop3): last error at time 2000002323: ext4_get_journal_inode:5890 [ 75.850143][ T5578] EXT4-fs (loop3): no journal found [ 75.855428][ T5578] EXT4-fs (loop3): can't get journal size [ 75.893827][ T5578] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 75.908769][ T5583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.933650][ T5578] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 75.947869][ T5578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.972419][ T5585] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 75.988256][ T5590] macvlan2: entered promiscuous mode [ 75.994455][ T5590] macvlan2: entered allmulticast mode [ 76.000464][ T5590] bond1: entered promiscuous mode [ 76.005744][ T5590] bridge1: entered promiscuous mode [ 76.024405][ T5590] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.033863][ T5590] bond1: left promiscuous mode [ 76.038782][ T5590] bridge1: left promiscuous mode [ 76.528164][ T5618] loop5: detected capacity change from 0 to 1024 [ 76.550611][ T5618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.575296][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.617827][ T5618] team0: Port device team_slave_1 removed [ 76.633039][ T5624] loop3: detected capacity change from 0 to 128 [ 76.660274][ T5624] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.660667][ T5624] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.699615][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.770993][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.894155][ T5636] serio: Serial port ttyS3 [ 76.921237][ T5633] loop5: detected capacity change from 0 to 4096 [ 76.944838][ T5633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.977923][ T5633] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 77.032254][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 77.032291][ T28] audit: type=1400 audit(2000002580.300:739): avc: denied { bind } for pid=5638 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.067509][ T5633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.084336][ T5639] team0 (unregistering): Port device team_slave_0 removed [ 77.100364][ T5639] team0 (unregistering): Port device team_slave_1 removed [ 77.166484][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.552096][ T5667] loop2: detected capacity change from 0 to 128 [ 77.573659][ T5667] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.612227][ T5667] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.637994][ T5673] __nla_validate_parse: 10 callbacks suppressed [ 77.638048][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 77.657402][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.739879][ T5668] loop1: detected capacity change from 0 to 512 [ 77.780198][ T5668] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 77.831327][ T5668] EXT4-fs error (device loop1): ext4_get_journal_inode:5890: comm syz.1.621: inode #1792: comm syz.1.621: iget: illegal inode # [ 77.851078][ T5684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 77.860782][ T5696] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 77.871648][ T5696] netlink: 128 bytes leftover after parsing attributes in process `syz.5.630'. [ 77.901703][ T5668] loop1: lost filesystem error report for type 5 error -117 [ 77.901845][ T5668] EXT4-fs (loop1): Remounting filesystem read-only [ 77.909233][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 77.909258][ C0] EXT4-fs (loop1): initial error at time 2000002581: ext4_get_journal_inode:5890 [ 77.909285][ C0] EXT4-fs (loop1): last error at time 2000002581: ext4_get_journal_inode:5890 [ 77.956598][ T5668] EXT4-fs (loop1): no journal found [ 77.963569][ T5668] EXT4-fs (loop1): can't get journal size [ 77.969894][ T5668] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 77.979960][ T5668] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 77.988191][ T5668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.085077][ T5701] xt_policy: neither incoming nor outgoing policy selected [ 78.250421][ T28] audit: type=1400 audit(2000002837.491:740): avc: denied { read } for pid=5714 comm="syz.3.634" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.274746][ T28] audit: type=1400 audit(2000002837.491:741): avc: denied { open } for pid=5714 comm="syz.3.634" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.316556][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.327926][ T5718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.350945][ T5718] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 78.388556][ T5718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.412952][ T5717] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.429194][ T5717] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.494795][ T5169] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.539473][ T5728] lo: Caught tx_queue_len zero misconfig [ 78.585934][ T28] audit: type=1400 audit(2000002837.851:742): avc: denied { execute } for pid=5730 comm="syz.0.642" name="file1" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.585983][ T5731] process 'syz.0.642' launched './file1' with NULL argv: empty string added [ 78.646037][ T5731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5731 comm=syz.0.642 [ 78.662029][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 78.671618][ T28] audit: type=1400 audit(2000002837.851:743): avc: denied { execute_no_trans } for pid=5730 comm="syz.0.642" path="/168/file1" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.698359][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 78.743630][ T5737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5737 comm=syz.2.643 [ 78.758380][ T5737] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 78.783046][ T5745] netlink: 44 bytes leftover after parsing attributes in process `syz.5.646'. [ 78.824996][ T5747] @ÿ: renamed from veth0_vlan [ 78.966199][ T5753] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.994881][ T5753] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.213895][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 79.256545][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.504651][ T5169] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.767162][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 79.808677][ T5799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 79.957209][ T4740] tipc: Subscription rejected, illegal request [ 79.981966][ T5826] netlink: 108 bytes leftover after parsing attributes in process `syz.5.663'. [ 80.086423][ T5834] vlan2: entered promiscuous mode [ 80.220626][ T5840] set_capacity_and_notify: 3 callbacks suppressed [ 80.220643][ T5840] loop5: detected capacity change from 0 to 1024 [ 80.254007][ T5840] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.289032][ T5840] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.668: Invalid block bitmap block 0 in block_group 0 [ 80.320378][ T5840] loop5: lost filesystem error report for type 5 error -117 [ 80.321151][ T5840] Quota error (device loop5): write_blk: dquota write failed [ 80.335873][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 80.335895][ C0] EXT4-fs (loop5): initial error at time 2000002839: ext4_read_block_bitmap_nowait:483 [ 80.335940][ C0] EXT4-fs (loop5): last error at time 2000002839: ext4_read_block_bitmap_nowait:483 [ 80.388511][ T5840] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 80.429802][ T5840] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.668: Failed to acquire dquot type 0 [ 80.453194][ T5840] loop5: lost filesystem error report for type 5 error -117 [ 80.453464][ T5840] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.668: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.497591][ T5840] loop5: lost filesystem error report for type 5 error -117 [ 80.497817][ T5840] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.668: Invalid inode bitmap blk 0 in block_group 0 [ 80.518578][ T4727] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7 [ 80.518670][ T28] audit: type=1400 audit(2000002839.761:744): avc: denied { read } for pid=5855 comm="syz.2.673" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.534416][ T4727] EXT4-fs error (device loop5): ext4_release_dquot:7064: comm kworker/u8:9: Failed to release dquot type 0 [ 80.555621][ T5840] loop5: lost filesystem error report for type 5 error -117 [ 80.563922][ T28] audit: type=1400 audit(2000002839.761:745): avc: denied { open } for pid=5855 comm="syz.2.673" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.596021][ T5840] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 80.604800][ T5840] loop5: lost filesystem error report for type 5 error -117 [ 80.604953][ T5840] EXT4-fs (loop5): 1 orphan inode deleted [ 80.621929][ T4727] loop5: lost filesystem error report for type 5 error -117 [ 80.625999][ T5840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.655452][ T104] tipc: Subscription rejected, illegal request [ 80.713774][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.883056][ T5877] loop3: detected capacity change from 0 to 128 [ 80.950728][ T5877] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.023238][ T5877] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.312853][ T5896] wg2: Caught tx_queue_len zero misconfig [ 81.828490][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.918077][ T5921] loop2: detected capacity change from 0 to 128 [ 82.381103][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 82.381120][ T28] audit: type=1400 audit(2000002841.231:769): avc: denied { setopt } for pid=5914 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.434453][ T28] audit: type=1400 audit(2000002841.701:770): avc: denied { write } for pid=5918 comm="syz.2.692" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.435026][ T4740] tipc: Subscription rejected, illegal request [ 82.611860][ T28] audit: type=1400 audit(2000002841.881:771): avc: denied { override_creds } for pid=5939 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.750509][ T5951] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 82.760569][ T28] audit: type=1400 audit(2000002842.021:772): avc: denied { setopt } for pid=5950 comm="syz.0.695" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.512172][ T5995] loop2: detected capacity change from 0 to 128 [ 83.532890][ T5995] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.648147][ T5995] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.685064][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.796964][ T104] tipc: Subscription rejected, illegal request [ 83.827724][ T6004] __nla_validate_parse: 5 callbacks suppressed [ 83.827815][ T6004] netlink: 108 bytes leftover after parsing attributes in process `syz.5.704'. [ 83.896644][ T6010] loop2: detected capacity change from 0 to 128 [ 83.980937][ T6010] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.053483][ T6010] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.228158][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.254632][ T6019] @ÿ: renamed from veth0_vlan (while UP) [ 84.446431][ T6027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6027 comm=syz.2.708 [ 84.513697][ T6029] netlink: 'syz.2.708': attribute type 29 has an invalid length. [ 85.124718][ T6043] loop5: detected capacity change from 0 to 128 [ 85.141814][ T6043] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.177137][ T6043] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.289792][ T5169] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.321189][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.717'. [ 85.336924][ T104] tipc: Subscription rejected, illegal request [ 85.353705][ T6052] netlink: 108 bytes leftover after parsing attributes in process `syz.0.718'. [ 85.663379][ T6066] loop3: detected capacity change from 0 to 128 [ 85.682242][ T6066] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.719356][ T6066] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.767223][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.847383][ T6062] gtp0: entered promiscuous mode [ 85.852859][ T6062] gtp0: entered allmulticast mode [ 85.860587][ T6063] gtp1: entered promiscuous mode [ 85.865727][ T6063] gtp1: entered allmulticast mode [ 86.002876][ T6079] @ÿ: renamed from veth0_vlan [ 86.088423][ T6077] loop1: detected capacity change from 0 to 512 [ 86.208522][ T6077] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 86.335392][ T6077] EXT4-fs error (device loop1): ext4_get_journal_inode:5890: comm syz.1.723: inode #1792: comm syz.1.723: iget: illegal inode # [ 86.403897][ T6077] loop1: lost filesystem error report for type 5 error -117 [ 86.405128][ T6077] EXT4-fs (loop1): Remounting filesystem read-only [ 86.412603][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 86.412641][ C1] EXT4-fs (loop1): initial error at time 2000003101: ext4_get_journal_inode:5890 [ 86.412668][ C1] EXT4-fs (loop1): last error at time 2000003101: ext4_get_journal_inode:5890 [ 86.473260][ T6077] EXT4-fs (loop1): no journal found [ 86.478574][ T6077] EXT4-fs (loop1): can't get journal size [ 86.508664][ T6077] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 86.529715][ T6077] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 86.542271][ T6077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.694020][ T6095] loop2: detected capacity change from 0 to 128 [ 86.705796][ T6095] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.724010][ T6095] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.772423][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.813536][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.850331][ T6101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6101 comm=syz.3.727 [ 86.899473][ T6101] netlink: 'syz.3.727': attribute type 29 has an invalid length. [ 87.264437][ T6107] loop2: detected capacity change from 0 to 1024 [ 87.294859][ T28] audit: type=1400 audit(2000003358.565:773): avc: denied { connect } for pid=6108 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.347420][ T6107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 87.365062][ T6107] System zones: 0-1, 3-36 [ 87.390854][ T28] audit: type=1400 audit(2000003358.665:774): avc: denied { accept } for pid=6108 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.422804][ T6107] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.732: bad orphan inode 134217728 [ 87.434909][ T6107] loop2: lost filesystem error report for type 5 error -117 [ 87.437598][ T4740] tipc: Subscription rejected, illegal request [ 87.441201][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.466282][ T6113] netlink: 108 bytes leftover after parsing attributes in process `syz.0.733'. [ 87.552594][ T6126] loop1: detected capacity change from 0 to 512 [ 87.589998][ T6126] EXT4-fs: Ignoring removed bh option [ 87.616443][ T6126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.636495][ T6133] loop5: detected capacity change from 0 to 128 [ 87.644493][ T6126] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 87.662419][ T6126] EXT4-fs (loop1): 1 truncate cleaned up [ 87.670225][ T6126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.699473][ T6126] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.736: invalid indirect mapped block 4294901760 (level 0) [ 87.733594][ T6133] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.771505][ T6126] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.773757][ T6126] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.736: invalid indirect mapped block 4294967295 (level 1) [ 87.805137][ T6133] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.859321][ T28] audit: type=1400 audit(2000003359.125:775): avc: denied { link } for pid=6125 comm="syz.1.736" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.884209][ T6126] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.887956][ T6126] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.736: invalid indirect mapped block 65535 (level 2) [ 87.928105][ T5169] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.944367][ T6126] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 87.977267][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.016781][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.095070][ T30] tipc: Subscription rejected, illegal request [ 88.104329][ T6158] netlink: 108 bytes leftover after parsing attributes in process `syz.0.746'. [ 88.108359][ T6162] loop1: detected capacity change from 0 to 512 [ 88.133532][ T6162] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.168502][ T6162] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.745: Allocating blocks 41-42 which overlap fs metadata [ 88.199200][ T6162] loop1: lost filesystem error report for type 5 error -117 [ 88.199610][ T6162] EXT4-fs (loop1): Remounting filesystem read-only [ 88.213616][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 88.213654][ C1] EXT4-fs (loop1): initial error at time 2000003615: ext4_mb_mark_diskspace_used:4222 [ 88.213682][ C1] EXT4-fs (loop1): last error at time 2000003615: ext4_mb_mark_diskspace_used:4222 [ 88.299148][ T6162] Quota error (device loop1): write_blk: dquota write failed [ 88.309668][ T6178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6178 comm=syz.5.748 [ 88.371414][ T6175] loop2: detected capacity change from 0 to 512 [ 88.380996][ T6175] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 88.501005][ T6162] Quota error (device loop1): write_blk: dquota write failed [ 88.650407][ T6162] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.670268][ T6175] EXT4-fs error (device loop2): ext4_get_journal_inode:5890: comm syz.2.758: inode #1792: comm syz.2.758: iget: illegal inode # [ 88.675095][ T6162] EXT4-fs (loop1): 1 truncate cleaned up [ 88.718944][ T6175] loop2: lost filesystem error report for type 5 error -117 [ 88.719599][ T6175] EXT4-fs (loop2): Remounting filesystem read-only [ 88.733544][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 88.733566][ C0] EXT4-fs (loop2): initial error at time 2000003615: ext4_get_journal_inode:5890 [ 88.733595][ C0] EXT4-fs (loop2): last error at time 2000003615: ext4_get_journal_inode:5890 [ 88.770872][ T6180] netlink: 'syz.5.748': attribute type 29 has an invalid length. [ 88.783580][ T6184] netlink: 340 bytes leftover after parsing attributes in process `syz.3.751'. [ 88.795805][ T6175] EXT4-fs (loop2): no journal found [ 88.800894][ T6184] loop3: detected capacity change from 0 to 512 [ 88.808966][ T6175] EXT4-fs (loop2): can't get journal size [ 88.840350][ T6184] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.751: inode has both inline data and extents flags [ 88.853615][ T6184] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.853879][ T6184] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.751: couldn't read orphan inode 15 (err -117) [ 88.863034][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 88.863060][ C1] EXT4-fs (loop3): initial error at time 2000003616: ext4_orphan_get:1397: inode 15 [ 88.863110][ C1] EXT4-fs (loop3): last error at time 2000003616: ext4_orphan_get:1397: inode 15 [ 88.892468][ T6175] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 88.911059][ T6175] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 88.911465][ T6184] loop3: lost filesystem error report for type 5 error -117 [ 88.936703][ T6184] syzkaller0: entered promiscuous mode [ 88.949814][ T6184] syzkaller0: entered allmulticast mode [ 88.964713][ T28] audit: type=1400 audit(2000003616.225:776): avc: denied { write } for pid=6183 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.014387][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 89.047059][ T6199] loop1: detected capacity change from 0 to 256 [ 89.072843][ T28] audit: type=1326 audit(2000003872.338:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 89.112074][ T28] audit: type=1326 audit(2000003872.338:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 89.137573][ T28] audit: type=1326 audit(2000003872.338:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 89.162716][ T28] audit: type=1326 audit(2000003872.338:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191139c819 code=0x7ffc0000 [ 89.238362][ T6208] xt_policy: neither incoming nor outgoing policy selected [ 89.253196][ T6210] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.276796][ T6205] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 89.325755][ T4740] tipc: Subscription rejected, illegal request [ 89.352120][ T6214] netlink: 108 bytes leftover after parsing attributes in process `syz.3.760'. [ 89.376812][ T6205] EXT4-fs error (device loop5): ext4_get_journal_inode:5890: comm syz.5.755: inode #1792: comm syz.5.755: iget: illegal inode # [ 89.395224][ T6222] xt_hashlimit: size too large, truncated to 1048576 [ 89.403101][ T6205] loop5: lost filesystem error report for type 5 error -117 [ 89.403304][ T6205] EXT4-fs (loop5): Remounting filesystem read-only [ 89.410747][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 89.410771][ C0] EXT4-fs (loop5): initial error at time 2000003872: ext4_get_journal_inode:5890 [ 89.410796][ C0] EXT4-fs (loop5): last error at time 2000003872: ext4_get_journal_inode:5890 [ 89.445143][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 89.454160][ T6205] EXT4-fs (loop5): no journal found [ 89.459641][ T6205] EXT4-fs (loop5): can't get journal size [ 89.468879][ T6205] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 89.485260][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 89.498021][ T6205] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 89.512735][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 89.588482][ T6225] netlink: 'syz.2.762': attribute type 30 has an invalid length. [ 89.600923][ T4740] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.650312][ T4740] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.765666][ T6246] capability: warning: `syz.1.770' uses deprecated v2 capabilities in a way that may be insecure [ 89.770926][ T6244] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 89.820781][ T4740] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.837906][ T4740] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.853510][ T6244] EXT4-fs error (device loop3): ext4_get_journal_inode:5890: comm syz.3.769: inode #1792: comm syz.3.769: iget: illegal inode # [ 89.868940][ T6244] loop3: lost filesystem error report for type 5 error -117 [ 89.869157][ T6244] EXT4-fs (loop3): Remounting filesystem read-only [ 89.883313][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 89.883335][ C1] EXT4-fs (loop3): initial error at time 2000004129: ext4_get_journal_inode:5890 [ 89.883355][ C1] EXT4-fs (loop3): last error at time 2000004129: ext4_get_journal_inode:5890 [ 89.915427][ T6244] EXT4-fs (loop3): no journal found [ 89.922415][ T6244] EXT4-fs (loop3): can't get journal size [ 89.936949][ T6244] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 89.949914][ T6244] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 89.980346][ T6251] EXT4-fs: Ignoring removed i_version option [ 89.986536][ T6251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.994666][ T6251] ext4: Unknown parameter 'dont_hash' [ 90.032833][ T6254] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.036394][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 90.117423][ T6260] netlink: 44 bytes leftover after parsing attributes in process `syz.0.774'. [ 90.234614][ T4740] tipc: Subscription rejected, illegal request [ 90.253057][ T6269] netlink: 108 bytes leftover after parsing attributes in process `syz.3.777'. [ 90.397908][ T6287] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.417380][ T6287] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.427595][ T6287] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.780: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 32(4), depth 0(0) [ 90.446094][ T6287] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 90.446344][ T6287] EXT4-fs (loop3): no journal found [ 90.455447][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 90.455466][ C1] EXT4-fs (loop3): initial error at time 2000004385: ext4_ext_check_inode:521: inode 2 [ 90.455539][ C1] EXT4-fs (loop3): last error at time 2000004385: ext4_ext_check_inode:521: inode 2 [ 90.629718][ T6294] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.148699][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.786'. [ 91.210769][ T6262] kexec: Could not allocate control_code_buffer [ 91.263728][ T6315] set_capacity_and_notify: 7 callbacks suppressed [ 91.263743][ T6315] loop5: detected capacity change from 0 to 512 [ 91.293764][ T6315] EXT4-fs: Ignoring removed i_version option [ 91.304069][ T6315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.315151][ T6315] ext4: Unknown parameter 'dont_hash' [ 91.325436][ T104] tipc: Subscription rejected, illegal request [ 91.351543][ T6316] netlink: 108 bytes leftover after parsing attributes in process `syz.0.789'. [ 91.443151][ T6318] loop2: detected capacity change from 0 to 512 [ 91.484974][ T6318] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 91.516183][ T6318] EXT4-fs error (device loop2): ext4_get_journal_inode:5890: comm syz.2.787: inode #1792: comm syz.2.787: iget: illegal inode # [ 91.546521][ T6318] loop2: lost filesystem error report for type 5 error -117 [ 91.547036][ T6318] EXT4-fs (loop2): Remounting filesystem read-only [ 91.554405][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 91.554431][ C1] EXT4-fs (loop2): initial error at time 2000004386: ext4_get_journal_inode:5890 [ 91.554460][ C1] EXT4-fs (loop2): last error at time 2000004386: ext4_get_journal_inode:5890 [ 91.644979][ T6318] EXT4-fs (loop2): no journal found [ 91.670002][ T6318] EXT4-fs (loop2): can't get journal size [ 91.730504][ T6318] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 91.809503][ T6333] loop3: detected capacity change from 0 to 128 [ 91.816684][ T6318] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 91.860102][ T6333] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.850918][ T6338] syz.5.795 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 92.867905][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.5.795 Not tainted syzkaller #0 PREEMPT(full) [ 92.867932][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 92.867971][ T6338] Call Trace: [ 92.867980][ T6338] [ 92.867988][ T6338] __dump_stack+0x1d/0x30 [ 92.868069][ T6338] dump_stack_lvl+0x95/0xd0 [ 92.868093][ T6338] dump_stack+0x15/0x1b [ 92.868115][ T6338] dump_header+0x80/0x240 [ 92.868209][ T6338] oom_kill_process+0x295/0x350 [ 92.868243][ T6338] out_of_memory+0x97d/0xb80 [ 92.868268][ T6338] try_charge_memcg+0x62f/0xa10 [ 92.868301][ T6338] __memcg_kmem_charge_page+0x139/0x2b0 [ 92.868358][ T6338] __alloc_frozen_pages_noprof+0x18a/0x350 [ 92.868456][ T6338] alloc_pages_mpol+0xb3/0x260 [ 92.868480][ T6338] alloc_pages_noprof+0x8f/0x140 [ 92.868518][ T6338] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 92.868594][ T6338] __kvmalloc_node_noprof+0x3d4/0x640 [ 92.868614][ T6338] ? futex_hash_allocate+0x190/0x9a0 [ 92.868643][ T6338] ? futex_hash_allocate+0x190/0x9a0 [ 92.868745][ T6338] futex_hash_allocate+0x190/0x9a0 [ 92.868777][ T6338] ? __se_sys_prctl+0x8e/0x1400 [ 92.868863][ T6338] futex_hash_prctl+0xd8/0xf0 [ 92.868892][ T6338] __se_sys_prctl+0x4f4/0x1400 [ 92.868972][ T6338] __x64_sys_prctl+0x67/0x80 [ 92.869030][ T6338] x64_sys_call+0x2533/0x3020 [ 92.869056][ T6338] do_syscall_64+0x12c/0x3b0 [ 92.869080][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.869103][ T6338] RIP: 0033:0x7faed766c819 [ 92.869184][ T6338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.869216][ T6338] RSP: 002b:00007faed6085028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 92.869299][ T6338] RAX: ffffffffffffffda RBX: 00007faed78e6180 RCX: 00007faed766c819 [ 92.869315][ T6338] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 92.869329][ T6338] RBP: 00007faed7702c91 R08: 0000000000000000 R09: 0000000000000000 [ 92.869343][ T6338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.869368][ T6338] R13: 00007faed78e6218 R14: 00007faed78e6180 R15: 00007ffd4f0ccbf8 [ 92.869385][ T6338] [ 93.089777][ T6338] memory: usage 307200kB, limit 307200kB, failcnt 183 [ 93.096702][ T6338] memory+swap: usage 307332kB, limit 9007199254740988kB, failcnt 0 [ 93.104884][ T6338] kmem: usage 307008kB, limit 9007199254740988kB, failcnt 0 [ 93.113290][ T6338] Memory cgroup stats for /syz5: [ 93.123419][ T6338] cache 0 [ 93.131814][ T6338] rss 4096 [ 93.135068][ T6338] shmem 0 [ 93.138145][ T6338] mapped_file 0 [ 93.142188][ T6338] dirty 0 [ 93.180838][ T6338] writeback 0 [ 93.193443][ T6338] workingset_refault_anon 52 [ 93.227241][ T6338] workingset_refault_file 0 [ 93.235570][ T6355] loop2: detected capacity change from 0 to 512 [ 93.245383][ T6338] swap 135168 [ 93.251944][ T6338] swapcached 430080 [ 93.294971][ T6338] pgpgin 28627 [ 93.308743][ T6338] pgpgout 28607 [ 93.325702][ T6355] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.340407][ T6338] pgfault 31633 [ 93.349094][ T6338] pgmajfault 73 [ 93.359201][ T6338] inactive_anon 81920 [ 93.369073][ T28] kauditd_printk_skb: 159 callbacks suppressed [ 93.369087][ T28] audit: type=1400 audit(2000004644.630:940): avc: denied { create } for pid=6354 comm="syz.2.801" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 93.435359][ T6338] active_anon 0 [ 93.443263][ T6338] inactive_file 0 [ 93.448958][ T6338] active_file 0 [ 93.452598][ T6338] unevictable 0 [ 93.456090][ T6338] hierarchical_memory_limit 314572800 [ 93.461547][ T6338] hierarchical_memsw_limit 9223372036854771712 [ 93.485322][ T6338] total_cache 0 [ 93.491711][ T6338] total_rss 4096 [ 93.544027][ T6338] total_shmem 0 [ 93.549163][ T6366] IPv6: Can't replace route, no match found [ 93.556877][ T6338] total_mapped_file 0 [ 93.561774][ T6338] total_dirty 0 [ 93.565785][ T6338] total_writeback 0 [ 93.573638][ T6338] total_workingset_refault_anon 52 [ 93.580998][ T6338] total_workingset_refault_file 0 [ 93.596553][ T6338] total_swap 135168 [ 93.602135][ T6338] total_swapcached 430080 [ 93.650298][ T6338] total_pgpgin 28627 [ 93.655898][ T6338] total_pgpgout 28607 [ 93.661542][ T6338] total_pgfault 31633 [ 93.665721][ T6338] total_pgmajfault 73 [ 93.671833][ T6338] total_inactive_anon 81920 [ 93.676613][ T6338] total_active_anon 0 [ 93.680639][ T6338] total_inactive_file 0 [ 93.684891][ T6338] total_active_file 0 [ 93.692026][ T6338] total_unevictable 0 [ 93.696092][ T6338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.795,pid=6335,uid=0 [ 93.718245][ T6338] Memory cgroup out of memory: Killed process 6335 (syz.5.795) total-vm:98532kB, anon-rss:1228kB, file-rss:26384kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 93.800621][ T30] tipc: Subscription rejected, illegal request [ 93.942472][ T28] audit: type=1400 audit(2000004645.210:941): avc: denied { write } for pid=6381 comm="syz.5.810" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.057906][ T6397] loop1: detected capacity change from 0 to 512 [ 94.071860][ T6400] loop2: detected capacity change from 0 to 128 [ 94.093448][ T6397] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 94.119525][ T6400] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.130854][ T6397] EXT4-fs error (device loop1): ext4_get_journal_inode:5890: comm syz.1.811: inode #1792: comm syz.1.811: iget: illegal inode # [ 94.155557][ T6397] loop1: lost filesystem error report for type 5 error -117 [ 94.158915][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 94.172849][ C0] EXT4-fs (loop1): initial error at time 2000004645: ext4_get_journal_inode:5890 [ 94.182105][ C0] EXT4-fs (loop1): last error at time 2000004645: ext4_get_journal_inode:5890 [ 94.193989][ T6397] EXT4-fs (loop1): Remounting filesystem read-only [ 94.195159][ T28] audit: type=1400 audit(2000004645.460:942): avc: denied { sqpoll } for pid=6402 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.202032][ T6397] EXT4-fs (loop1): no journal found [ 94.225323][ T6397] EXT4-fs (loop1): can't get journal size [ 94.231147][ T28] audit: type=1400 audit(2000004645.490:943): avc: denied { write } for pid=6402 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.266050][ T6397] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 94.280720][ T28] audit: type=1400 audit(2000004645.500:944): avc: denied { ioctl } for pid=6402 comm="syz.3.816" path="socket:[13537]" dev="sockfs" ino=13537 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.333658][ T6397] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 94.345838][ T6410] __nla_validate_parse: 4 callbacks suppressed [ 94.345902][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 94.373762][ T28] audit: type=1400 audit(2000004645.640:945): avc: denied { create } for pid=6412 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.470368][ T4729] tipc: Subscription rejected, illegal request [ 94.482421][ T6423] netlink: 108 bytes leftover after parsing attributes in process `syz.0.822'. [ 94.611859][ T6429] netlink: 'syz.2.823': attribute type 21 has an invalid length. [ 94.620149][ T6429] netlink: 128 bytes leftover after parsing attributes in process `syz.2.823'. [ 94.629574][ T6429] netlink: 'syz.2.823': attribute type 4 has an invalid length. [ 94.637548][ T6429] netlink: 'syz.2.823': attribute type 5 has an invalid length. [ 94.657510][ T6429] netlink: 3 bytes leftover after parsing attributes in process `syz.2.823'. [ 94.672548][ T6438] tunl0: Caught tx_queue_len zero misconfig [ 94.810748][ T6449] ip6tnl0: Caught tx_queue_len zero misconfig [ 94.891426][ T6456] loop1: detected capacity change from 0 to 256 [ 94.917687][ T6456] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.099723][ T30] tipc: Subscription rejected, illegal request [ 95.125021][ T6467] netlink: 108 bytes leftover after parsing attributes in process `syz.5.835'. [ 95.295653][ T6478] loop5: detected capacity change from 0 to 512 [ 95.314947][ T6478] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.363013][ T6478] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 95.374204][ T6478] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 95.383953][ T6478] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.837: Failed to acquire dquot type 1 [ 95.395737][ T6478] loop5: lost filesystem error report for type 5 error -5 [ 95.396546][ T6478] EXT4-fs (loop5): Remounting filesystem read-only [ 95.404146][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 95.404172][ C0] EXT4-fs (loop5): initial error at time 2000004902: ext4_acquire_dquot:7028 [ 95.404218][ C0] EXT4-fs (loop5): last error at time 2000004902: ext4_acquire_dquot:7028 [ 95.435463][ T6478] EXT4-fs (loop5): 1 truncate cleaned up [ 95.607442][ T6489] loop3: detected capacity change from 0 to 128 [ 95.736261][ T4730] tipc: Subscription rejected, illegal request [ 95.814589][ T6497] netlink: 108 bytes leftover after parsing attributes in process `syz.1.841'. [ 95.844168][ T6489] EXT4-fs mount: 28 callbacks suppressed [ 95.844183][ T6489] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.880700][ T6494] loop5: detected capacity change from 0 to 512 [ 95.895797][ T6489] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.930115][ T6494] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 95.959845][ T6494] EXT4-fs error (device loop5): ext4_get_journal_inode:5890: comm syz.5.839: inode #1792: comm syz.5.839: iget: illegal inode # [ 95.975243][ T6494] loop5: lost filesystem error report for type 5 error -117 [ 95.975534][ T6494] EXT4-fs (loop5): Remounting filesystem read-only [ 95.982869][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 95.982893][ C1] EXT4-fs (loop5): initial error at time 2000004903: ext4_get_journal_inode:5890 [ 95.982918][ C1] EXT4-fs (loop5): last error at time 2000004903: ext4_get_journal_inode:5890 [ 96.017046][ T6494] EXT4-fs (loop5): no journal found [ 96.051830][ T6494] EXT4-fs (loop5): can't get journal size [ 96.068708][ T6494] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 96.091198][ T6494] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 96.099660][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.130051][ T6494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.244627][ T28] audit: type=1400 audit(2000004903.510:946): avc: denied { getopt } for pid=6508 comm="syz.3.842" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.265862][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 96.278390][ T6509] netlink: 'syz.3.842': attribute type 27 has an invalid length. [ 96.408214][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.847'. [ 96.428259][ T6514] netlink: 39 bytes leftover after parsing attributes in process `syz.1.847'. [ 96.453885][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.580384][ T28] audit: type=1400 audit(2000005159.818:947): avc: denied { mounton } for pid=6502 comm="syz.0.844" path="/215/file0" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.613033][ T30] tipc: Subscription rejected, illegal request [ 96.627232][ T6525] xt_policy: neither incoming nor outgoing policy selected [ 96.645214][ T6520] netlink: 108 bytes leftover after parsing attributes in process `syz.5.848'. [ 96.766516][ T6527] loop1: detected capacity change from 0 to 4096 [ 96.801145][ T6527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.853416][ T6527] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 96.902418][ T6534] loop3: detected capacity change from 0 to 128 [ 96.960228][ T6527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.999298][ T6534] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.056085][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.096409][ T6534] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.163369][ T30] tipc: Subscription rejected, illegal request [ 97.274795][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.493497][ T6544] loop5: detected capacity change from 0 to 512 [ 97.636319][ T6544] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 97.727950][ T30] tipc: Subscription rejected, illegal request [ 97.779529][ T6544] EXT4-fs error (device loop5): ext4_get_journal_inode:5890: comm syz.5.858: inode #1792: comm syz.5.858: iget: illegal inode # [ 97.908624][ T6544] loop5: lost filesystem error report for type 5 error -117 [ 97.908760][ T6544] EXT4-fs (loop5): Remounting filesystem read-only [ 97.916407][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 97.916428][ C0] EXT4-fs (loop5): initial error at time 2000005161: ext4_get_journal_inode:5890 [ 97.916448][ C0] EXT4-fs (loop5): last error at time 2000005161: ext4_get_journal_inode:5890 [ 97.956019][ T6544] EXT4-fs (loop5): no journal found [ 97.961647][ T6544] EXT4-fs (loop5): can't get journal size [ 97.967902][ T6544] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 97.978099][ T6544] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 97.986508][ T6544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.232676][ T6581] loop1: detected capacity change from 0 to 128 [ 98.251752][ T6581] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.304745][ T6556] mmap: syz.3.860 (6556) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.415403][ T6581] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.484284][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 98.484299][ T28] audit: type=1400 audit(2000005417.753:950): avc: denied { getopt } for pid=6584 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.538296][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.727423][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.768567][ T30] tipc: Subscription rejected, illegal request [ 98.927635][ T6618] loop3: detected capacity change from 0 to 128 [ 98.963615][ T6618] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.001012][ T6618] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.027361][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.103998][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 99.128961][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 100.113023][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 100.832261][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 100.843607][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 100.869060][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 100.876623][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 100.899311][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 100.911517][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 100.960761][ T3353] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 100.973493][ T3353] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 101.033463][ T6637] loop1: detected capacity change from 0 to 512 [ 101.054331][ T6638] fido_id[6638]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.069767][ T6637] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 101.079765][ T6641] netlink: 'syz.3.887': attribute type 2 has an invalid length. [ 101.079780][ T6641] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 101.079827][ T6641] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 101.124952][ T30] tipc: Subscription rejected, illegal request [ 101.139882][ T6637] EXT4-fs error (device loop1): ext4_get_journal_inode:5890: comm syz.1.885: inode #1792: comm syz.1.885: iget: illegal inode # [ 101.139912][ T6637] loop1: lost filesystem error report for type 5 error -117 [ 101.140070][ T6637] EXT4-fs (loop1): Remounting filesystem read-only [ 101.140082][ T6637] EXT4-fs (loop1): no journal found [ 101.140094][ T6637] EXT4-fs (loop1): can't get journal size [ 101.148918][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 101.148957][ C1] EXT4-fs (loop1): initial error at time 2000005420: ext4_get_journal_inode:5890 [ 101.148985][ C1] EXT4-fs (loop1): last error at time 2000005420: ext4_get_journal_inode:5890 [ 101.150838][ T6637] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 101.151020][ T6637] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 101.151321][ T6637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.198495][ T6648] __nla_validate_parse: 3 callbacks suppressed [ 101.198510][ T6648] netlink: 108 bytes leftover after parsing attributes in process `syz.0.888'. [ 101.604986][ T6655] ip6tnl0: Caught tx_queue_len zero misconfig [ 101.680668][ T6660] loop5: detected capacity change from 0 to 128 [ 101.711862][ T6660] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.769368][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.786169][ T6660] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.856976][ T6665] loop1: detected capacity change from 0 to 512 [ 101.901622][ T6665] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.937242][ T6665] EXT4-fs (loop1): 1 truncate cleaned up [ 101.948062][ T5169] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.961357][ T6665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.065400][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.081682][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.5.895'. [ 102.280138][ T6684] netlink: 92 bytes leftover after parsing attributes in process `syz.1.902'. [ 102.300026][ T6684] netlink: 92 bytes leftover after parsing attributes in process `syz.1.902'. [ 102.353321][ T3353] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.470433][ T4727] tipc: Subscription rejected, illegal request [ 102.490827][ T6690] netlink: 108 bytes leftover after parsing attributes in process `syz.1.905'. [ 102.538770][ T6694] loop2: detected capacity change from 0 to 512 [ 102.573927][ T6694] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 102.594001][ T6694] EXT4-fs error (device loop2): ext4_get_journal_inode:5890: comm syz.2.904: inode #1792: comm syz.2.904: iget: illegal inode # [ 102.654266][ T6694] loop2: lost filesystem error report for type 5 error -117 [ 102.655786][ T6694] EXT4-fs (loop2): Remounting filesystem read-only [ 102.663280][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 102.663300][ C0] EXT4-fs (loop2): initial error at time 2000005677: ext4_get_journal_inode:5890 [ 102.663323][ C0] EXT4-fs (loop2): last error at time 2000005677: ext4_get_journal_inode:5890 [ 102.721996][ T6694] EXT4-fs (loop2): no journal found [ 102.727428][ T6694] EXT4-fs (loop2): can't get journal size [ 102.734264][ T6694] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 102.756733][ T6694] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 102.770644][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 102.816765][ T6708] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 102.848234][ T6708] SELinux: failed to load policy [ 102.856039][ T28] audit: type=1400 audit(2000005678.078:951): avc: denied { bind } for pid=6707 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.018024][ T6694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.307046][ T30] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.319887][ T30] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.352674][ T30] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.383935][ T30] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.416046][ T6722] loop5: detected capacity change from 0 to 164 [ 103.453302][ T6722] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 103.480922][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.827170][ T28] audit: type=1400 audit(2000005678.078:952): avc: denied { load_policy } for pid=6707 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 103.848065][ T28] audit: type=1400 audit(2000005934.723:953): avc: denied { mount } for pid=6716 comm="syz.5.912" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 104.072137][ T6730] loop3: detected capacity change from 0 to 512 [ 104.111344][ T6730] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.165401][ T28] audit: type=1400 audit(2000005935.393:954): avc: denied { unmount } for pid=5169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 104.270435][ T6730] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 104.298153][ T6739] xt_policy: neither incoming nor outgoing policy selected [ 104.314181][ T28] audit: type=1400 audit(2000005935.553:955): avc: denied { execute } for pid=6731 comm="syz.1.917" path="/memory.swap.current" dev="ramfs" ino=13976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 104.322564][ T6730] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 104.353468][ T6733] loop1: detected capacity change from 0 to 512 [ 104.369150][ T6730] EXT4-fs error (device loop3): ext4_acquire_dquot:7028: comm syz.3.915: Failed to acquire dquot type 1 [ 104.387754][ T6733] ext4: Unknown parameter 'obj_role' [ 104.401986][ T28] audit: type=1400 audit(2000005935.653:956): avc: denied { mounton } for pid=6731 comm="syz.1.917" path="/file0" dev="ramfs" ino=14751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 104.434192][ T6730] loop3: lost filesystem error report for type 5 error -5 [ 104.436436][ T6730] EXT4-fs (loop3): Remounting filesystem read-only [ 104.444211][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 104.444241][ C0] EXT4-fs (loop3): initial error at time 2000005935: ext4_acquire_dquot:7028 [ 104.444263][ C0] EXT4-fs (loop3): last error at time 2000005935: ext4_acquire_dquot:7028 [ 104.525629][ T6730] EXT4-fs (loop3): 1 truncate cleaned up [ 104.541841][ T6730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.578870][ T6730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.640868][ T4730] tipc: Subscription rejected, illegal request [ 104.693217][ T6759] loop5: detected capacity change from 0 to 512 [ 104.703068][ T6763] netlink: 108 bytes leftover after parsing attributes in process `syz.1.925'. [ 104.717437][ T6759] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 104.801784][ T6759] EXT4-fs error (device loop5): ext4_get_journal_inode:5890: comm syz.5.924: inode #1792: comm syz.5.924: iget: illegal inode # [ 104.846197][ T28] audit: type=1400 audit(2000005936.113:957): avc: denied { write } for pid=6771 comm="syz.2.931" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.879717][ T6759] loop5: lost filesystem error report for type 5 error -117 [ 104.879894][ T6759] EXT4-fs (loop5): Remounting filesystem read-only [ 104.893843][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 104.893860][ C1] EXT4-fs (loop5): initial error at time 2000005936: ext4_get_journal_inode:5890 [ 104.893890][ C1] EXT4-fs (loop5): last error at time 2000005936: ext4_get_journal_inode:5890 [ 104.923134][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 104.939682][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 104.953486][ T6759] EXT4-fs (loop5): no journal found [ 104.963168][ T6759] EXT4-fs (loop5): can't get journal size [ 104.974500][ T6759] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 104.991975][ T6759] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 105.002290][ T6759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.125989][ T6789] loop3: detected capacity change from 0 to 128 [ 105.194081][ T6789] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.222077][ T6789] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.273757][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.290341][ T6792] loop1: detected capacity change from 0 to 128 [ 105.302340][ T6777] syz.2.931 (6777) used obsolete PPPIOCDETACH ioctl [ 105.330850][ T6792] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.350004][ T6794] loop3: detected capacity change from 0 to 128 [ 105.382470][ T5169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.405133][ T6794] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.420188][ T6792] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.434248][ T6792] FAULT_INJECTION: forcing a failure. [ 105.434248][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 105.448242][ T6792] CPU: 1 UID: 0 PID: 6792 Comm: syz.1.937 Not tainted syzkaller #0 PREEMPT(full) [ 105.448277][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.448292][ T6792] Call Trace: [ 105.448299][ T6792] [ 105.448306][ T6792] __dump_stack+0x1d/0x30 [ 105.448328][ T6792] dump_stack_lvl+0x95/0xd0 [ 105.448420][ T6792] dump_stack+0x15/0x1b [ 105.448440][ T6792] should_fail_ex+0x263/0x280 [ 105.448483][ T6792] should_failslab+0x8c/0xb0 [ 105.448510][ T6792] kmem_cache_alloc_noprof+0x66/0x3f0 [ 105.448537][ T6792] ? do_getname+0x2e/0x1c0 [ 105.448584][ T6792] do_getname+0x2e/0x1c0 [ 105.448610][ T6792] getname_flags+0x1d/0x30 [ 105.448685][ T6792] do_sys_openat2+0x60/0x130 [ 105.448707][ T6792] __x64_sys_openat+0xf2/0x120 [ 105.448726][ T6792] x64_sys_call+0x1e39/0x3020 [ 105.448778][ T6792] do_syscall_64+0x12c/0x3b0 [ 105.448801][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.448834][ T6792] RIP: 0033:0x7f191139c819 [ 105.448849][ T6792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.448894][ T6792] RSP: 002b:00007f190fdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.448938][ T6792] RAX: ffffffffffffffda RBX: 00007f1911615fa0 RCX: 00007f191139c819 [ 105.448951][ T6792] RDX: 00000000001cb842 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 105.448964][ T6792] RBP: 00007f190fdef090 R08: 0000000000000000 R09: 0000000000000000 [ 105.448978][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.448991][ T6792] R13: 00007f1911616038 R14: 00007f1911615fa0 R15: 00007ffdf2e406b8 [ 105.449010][ T6792] [ 105.627440][ T6794] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.688878][ T28] audit: type=1400 audit(2000006192.953:958): avc: denied { ioctl } for pid=6793 comm="syz.3.938" path="/181/mnt/bus" dev="loop3" ino=12 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.714704][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.757562][ T28] audit: type=1400 audit(2000006193.023:959): avc: denied { ioctl } for pid=6807 comm="syz.3.943" path="socket:[14063]" dev="sockfs" ino=14063 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.788313][ T6806] ip6tnl0: Caught tx_queue_len zero misconfig [ 105.799903][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.046794][ T6831] loop2: detected capacity change from 0 to 128 [ 106.080698][ T6831] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.131744][ T6831] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.325632][ T6826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.360738][ T6826] EXT4-fs error (device loop1): ext4_iget_extra_inode:5042: inode #15: comm syz.1.949: corrupted in-inode xattr: bad e_name length [ 106.374573][ T6826] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.374874][ T6826] EXT4-fs (loop1): get orphan inode failed [ 106.384301][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 106.384339][ C1] EXT4-fs (loop1): initial error at time 2000006193: ext4_iget_extra_inode:5042: inode 15 [ 106.384431][ C1] EXT4-fs (loop1): last error at time 2000006193: ext4_iget_extra_inode:5042: inode 15 [ 106.431741][ T6826] EXT4-fs (loop1): mount failed [ 106.545979][ T6841] 9p: Bad value for 'rfdno' [ 106.561595][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.590718][ T6841] bond_slave_0: Caught tx_queue_len zero misconfig [ 106.692341][ T6848] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.877115][ T6860] set_capacity_and_notify: 2 callbacks suppressed [ 106.877131][ T6860] loop1: detected capacity change from 0 to 512 [ 106.892133][ T6860] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.986154][ T6860] EXT4-fs (loop1): 1 truncate cleaned up [ 106.993472][ T6860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.520676][ T6873] Driver unsupported XDP return value 0 on prog (id 179) dev N/A, expect packet loss! [ 107.631499][ T6874] loop5: detected capacity change from 0 to 164 [ 107.645176][ T6873] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 107.661933][ T6873] xt_hashlimit: size too large, truncated to 1048576 [ 107.662675][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.695563][ T6878] netlink: 'syz.1.964': attribute type 10 has an invalid length. [ 107.792192][ T6889] bond0: (slave bond_slave_0): Releasing backup interface [ 107.834967][ T6889] bond0: (slave bond_slave_1): Releasing backup interface [ 107.911457][ T6891] loop2: detected capacity change from 0 to 512 [ 107.931014][ T6889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.969653][ T6891] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.201152][ T6900] x_tables: duplicate underflow at hook 1 [ 108.262988][ T6891] EXT4-fs error (device loop2): __ext4_iget:5395: inode #11: block 1: comm syz.2.970: invalid block [ 108.291923][ T6891] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.292514][ T6891] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.970: couldn't read orphan inode 11 (err -117) [ 108.302222][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 108.302305][ C0] EXT4-fs (loop2): initial error at time 2000006195: __ext4_iget:5395: inode 11: block 1 [ 108.302515][ C0] EXT4-fs (loop2): last error at time 2000006195: __ext4_iget:5395: inode 11: block 1 [ 108.405152][ T6891] loop2: lost filesystem error report for type 5 error -117 [ 108.411289][ T6891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.633410][ T6908] loop1: detected capacity change from 0 to 1024 [ 108.635411][ T6889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.645689][ T6908] EXT4-fs: test_dummy_encryption option not supported [ 108.689580][ T4733] tipc: Subscription rejected, illegal request [ 108.718361][ T6910] netlink: 108 bytes leftover after parsing attributes in process `syz.5.971'. [ 108.841310][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 108.865777][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 108.884767][ T6929] xt_policy: neither incoming nor outgoing policy selected [ 108.909026][ T6896] xt_hashlimit: size too large, truncated to 1048576 [ 108.940686][ T6896] xt_hashlimit: max too large, truncated to 1048576 [ 108.985489][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 108.985504][ T28] audit: type=1400 audit(2000006196.253:990): avc: denied { mounton } for pid=6935 comm="syz.2.985" path="/178/file3" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 109.005420][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.983'. [ 109.016138][ T6936] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 109.125871][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.186851][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.517327][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.5.989'. [ 109.586090][ T6951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.990'. [ 109.720663][ T4740] tipc: Subscription rejected, illegal request [ 109.752258][ T6953] netlink: 108 bytes leftover after parsing attributes in process `syz.3.991'. [ 109.811168][ T6960] loop1: detected capacity change from 0 to 2048 [ 109.850441][ T6960] loop1: p3 p4 < > [ 109.855511][ T6960] loop1: p3 start 263168 is beyond EOD, truncated [ 109.991018][ T28] audit: type=1400 audit(2000006197.263:991): avc: denied { create } for pid=6968 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 110.009172][ T6969] loop3: detected capacity change from 0 to 512 [ 110.030560][ T28] audit: type=1400 audit(2000006197.263:992): avc: denied { getattr } for pid=6968 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 110.060685][ T6969] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.204523][ T6969] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.995: Allocating blocks 41-42 which overlap fs metadata [ 110.218469][ T6969] loop3: lost filesystem error report for type 5 error -117 [ 110.218934][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 110.232710][ C0] EXT4-fs (loop3): initial error at time 2000006197: ext4_mb_mark_diskspace_used:4222 [ 110.240340][ T6969] EXT4-fs (loop3): Remounting filesystem read-only [ 110.242384][ C0] EXT4-fs (loop3): last error at time 2000006197: ext4_mb_mark_diskspace_used:4222 [ 110.288002][ T6984] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 110.297179][ T6969] Quota error (device loop3): write_blk: dquota write failed [ 110.328581][ T6969] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 110.399882][ T6969] Quota error (device loop3): write_blk: dquota write failed [ 110.412907][ T6969] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 110.431657][ T6969] EXT4-fs (loop3): 1 truncate cleaned up [ 110.437891][ T6969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.458784][ T6969] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.476377][ T30] tipc: Subscription rejected, illegal request [ 110.492391][ T6996] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1005'. [ 110.525690][ T28] audit: type=1400 audit(2000006197.793:993): avc: denied { ioctl } for pid=6998 comm="syz.5.1007" path="socket:[15406]" dev="sockfs" ino=15406 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.599759][ T7007] loop5: detected capacity change from 0 to 128 [ 110.654643][ T7007] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.685865][ T7007] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.774679][ T5169] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.859296][ T28] audit: type=1400 audit(2000006198.133:994): avc: denied { setattr } for pid=7014 comm="syz.5.1013" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 110.897582][ T7015] ip6tnl1: entered promiscuous mode [ 110.909736][ T7015] ip6tnl1: entered allmulticast mode [ 110.943207][ T28] audit: type=1400 audit(2000006198.153:995): avc: denied { create } for pid=7014 comm="syz.5.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.241179][ T7027] loop1: detected capacity change from 0 to 128 [ 111.872340][ T7027] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.965819][ T7027] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.027938][ T7027] FAULT_INJECTION: forcing a failure. [ 112.027938][ T7027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.062171][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.1.1017 Not tainted syzkaller #0 PREEMPT(full) [ 112.062200][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 112.062213][ T7027] Call Trace: [ 112.062241][ T7027] [ 112.062249][ T7027] __dump_stack+0x1d/0x30 [ 112.062271][ T7027] dump_stack_lvl+0x95/0xd0 [ 112.062290][ T7027] dump_stack+0x15/0x1b [ 112.062308][ T7027] should_fail_ex+0x263/0x280 [ 112.062367][ T7027] should_fail+0xb/0x20 [ 112.062468][ T7027] should_fail_usercopy+0x1a/0x20 [ 112.062498][ T7027] strncpy_from_user+0x27/0x250 [ 112.062594][ T7027] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 112.062622][ T7027] do_getname+0x59/0x1c0 [ 112.062651][ T7027] getname_flags+0x1d/0x30 [ 112.062719][ T7027] do_sys_openat2+0x60/0x130 [ 112.062739][ T7027] __x64_sys_openat+0xf2/0x120 [ 112.062802][ T7027] x64_sys_call+0x1e39/0x3020 [ 112.062864][ T7027] do_syscall_64+0x12c/0x3b0 [ 112.062887][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.062909][ T7027] RIP: 0033:0x7f191139c819 [ 112.062926][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.062948][ T7027] RSP: 002b:00007f190fdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.063021][ T7027] RAX: ffffffffffffffda RBX: 00007f1911615fa0 RCX: 00007f191139c819 [ 112.063037][ T7027] RDX: 00000000001cb842 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 112.063071][ T7027] RBP: 00007f190fdef090 R08: 0000000000000000 R09: 0000000000000000 [ 112.063103][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.063180][ T7027] R13: 00007f1911616038 R14: 00007f1911615fa0 R15: 00007ffdf2e406b8 [ 112.063200][ T7027] [ 112.293423][ T4729] tipc: Subscription rejected, illegal request [ 112.302911][ T7039] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1020'. [ 112.336467][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.384632][ T3310] ================================================================== [ 112.392754][ T3310] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 112.400561][ T3310] [ 112.402889][ T3310] read-write to 0xffff888237d277a0 of 8 bytes by task 7043 on cpu 1: [ 112.411073][ T3310] find_get_block_common+0x459/0x870 [ 112.416394][ T3310] bdev_getblk+0x4d/0x3f0 [ 112.420725][ T3310] __ext4_get_inode_loc+0x303/0x930 [ 112.426053][ T3310] ext4_reserve_inode_write+0xd7/0x250 [ 112.431514][ T3310] __ext4_mark_inode_dirty+0x8c/0x3d0 [ 112.436880][ T3310] ext4_dirty_inode+0x92/0xc0 [ 112.441644][ T3310] __mark_inode_dirty+0x16f/0x710 [ 112.446757][ T3310] touch_atime+0x21d/0x330 [ 112.451391][ T3310] ext4_file_mmap_prepare+0x13a/0x1a0 [ 112.456856][ T3310] mmap_region+0xe9d/0x2110 [ 112.461350][ T3310] do_mmap+0x9b2/0xbd0 [ 112.465426][ T3310] vm_mmap_pgoff+0x183/0x2d0 [ 112.470010][ T3310] ksys_mmap_pgoff+0x267/0x310 [ 112.474892][ T3310] x64_sys_call+0x14df/0x3020 [ 112.479561][ T3310] do_syscall_64+0x12c/0x3b0 [ 112.484144][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.490083][ T3310] [ 112.492485][ T3310] read to 0xffff888237d277a0 of 8 bytes by task 3310 on cpu 0: [ 112.500013][ T3310] has_bh_in_lru+0x35/0x1f0 [ 112.504582][ T3310] smp_call_function_many_cond+0x2a7/0xb70 [ 112.510389][ T3310] on_each_cpu_cond_mask+0x3c/0x80 [ 112.515491][ T3310] invalidate_bh_lrus+0x2a/0x30 [ 112.520363][ T3310] blkdev_flush_mapping+0x94/0x1a0 [ 112.525661][ T3310] bdev_release+0x2bf/0x3d0 [ 112.530155][ T3310] blkdev_release+0x15/0x20 [ 112.534740][ T3310] __fput+0x29b/0x630 [ 112.538708][ T3310] ____fput+0x1c/0x30 [ 112.542707][ T3310] task_work_run+0x130/0x1a0 [ 112.547287][ T3310] exit_to_user_mode_loop+0x1f4/0x6f0 [ 112.552734][ T3310] do_syscall_64+0x232/0x3b0 [ 112.557403][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.563367][ T3310] [ 112.566040][ T3310] value changed: 0x0000000000000000 -> 0xffff888100416f08 [ 112.573214][ T3310] [ 112.575524][ T3310] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to send rpc fd=3 want=1336 sent=0 n=-1 (errno 32: Broken pipe) [ 112.581677][ T3310] CPU: 0 UID: 0 PID: 3310 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 112.591120][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 112.601161][ T3310] ================================================================== [ 112.921791][ T7037] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.997029][ T4740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.082206][ T4740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.150657][ T4740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.191420][ T4740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.268537][ T4740] bridge_slave_1: left allmulticast mode [ 113.275922][ T4740] bridge_slave_1: left promiscuous mode [ 113.281833][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.290860][ T4740] bridge_slave_0: left allmulticast mode [ 113.296741][ T4740] bridge_slave_0: left promiscuous mode [ 113.303692][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.362061][ T4740] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 113.411990][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.422949][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.432159][ T4740] bond0 (unregistering): Released all slaves [ 113.440478][ T4740] bond1 (unregistering): Released all slaves [ 113.454380][ T4740] hsr_slave_0: left promiscuous mode [ 113.461408][ T4740] hsr_slave_1: left promiscuous mode [ 113.467100][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.504564][ T4740] team0 (unregistering): Port device team_slave_1 removed [ 113.514599][ T4740] team0 (unregistering): Port device team_slave_0 removed [ 113.934342][ T4740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.946518][ T4740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.956969][ T4740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.013275][ T4740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.025313][ T4740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.035985][ T4740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.092952][ T4740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.103403][ T4740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.114184][ T4740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.144846][ T4740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.156646][ T4740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.166996][ T4740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.468286][ T4740] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.479305][ T4740] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.534255][ T4740] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.544695][ T4740] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.583071][ T4740] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.594322][ T4740] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.643308][ T4740] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.653713][ T4740] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.900473][ T4740] bridge_slave_1: left allmulticast mode [ 114.906268][ T4740] bridge_slave_1: left promiscuous mode [ 114.912105][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.920693][ T4740] bridge_slave_0: left allmulticast mode [ 114.926399][ T4740] bridge_slave_0: left promiscuous mode [ 114.932525][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.942137][ T4740] bridge_slave_1: left allmulticast mode [ 114.947843][ T4740] bridge_slave_1: left promiscuous mode [ 114.954682][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.962567][ T4740] bridge_slave_0: left allmulticast mode [ 114.968330][ T4740] bridge_slave_0: left promiscuous mode [ 114.974330][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.048600][ T4740] bond2 (unregistering): (slave geneve2): Releasing active interface [ 115.101670][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.112561][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.122075][ T4740] bond0 (unregistering): Released all slaves [ 115.130235][ T4740] bond1 (unregistering): Released all slaves [ 115.139030][ T4740] bond2 (unregistering): Released all slaves [ 115.161367][ T4740] bond0 (unregistering): Released all slaves [ 115.193914][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.204113][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.214719][ T4740] bond0 (unregistering): Released all slaves [ 115.329900][ T4740] .` (unregistering): Released all slaves [ 115.380439][ T4740] hsr_slave_0: left promiscuous mode [ 115.386322][ T4740] hsr_slave_1: left promiscuous mode [ 115.392641][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.400458][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.410818][ T4740] hsr_slave_0: left promiscuous mode [ 115.416675][ T4740] hsr_slave_1: left promiscuous mode [ 115.424418][ T4740] hsr_slave_0: left promiscuous mode [ 115.431128][ T4740] hsr_slave_1: left promiscuous mode [ 115.437076][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.444776][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.453861][ T4740] hsr_slave_0: left promiscuous mode [ 115.459994][ T4740] hsr_slave_1: left promiscuous mode [ 115.470561][ T4740] veth1_macvtap: left promiscuous mode [ 115.476040][ T4740] veth0_macvtap: left promiscuous mode [ 115.481738][ T4740] veth1_vlan: left promiscuous mode [ 115.486997][ T4740] veth0_vlan: left promiscuous mode [ 115.493002][ T4740] veth1_macvtap: left promiscuous mode [ 115.498463][ T4740] veth0_macvtap: left promiscuous mode [ 115.504037][ T4740] veth1_vlan: left promiscuous mode [ 115.509275][ T4740] @ÿ: left promiscuous mode [ 115.589848][ T4740] team0 (unregistering): Port device 72žÿ removed [ 115.605293][ T4740] team0 (unregistering): Port device team_slave_0 removed [ 115.704250][ T4740] team0 (unregistering): Port device team_slave_0 removed [ 116.745547][ T4740] IPVS: stop unused estimator thread 0...