last executing test programs: 27.200107953s ago: executing program 0 (id=47): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) fcntl$setsig(r0, 0xa, 0x2e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="58000000540001002bbdae00020000000700", @ANYRES32=0x0, @ANYBLOB="01010200200100000000000000000000000000024b6e0000200001", @ANYRES32=0x0, @ANYBLOB="01010300e000000200000000000000000000000086dd0000"], 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) 27.044782723s ago: executing program 0 (id=50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@acl}, {@noauto_da_alloc}, {@delalloc}]}, 0x2, 0x561, &(0x7f0000002180)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x205024d, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@delalloc}, {@usrjquota}, {@orlov}, {@norecovery}, {@nobh}, {@norecovery}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='.\x00', 0x80a5, &(0x7f00000008c0)=ANY=[], 0x10, 0x0, &(0x7f0000000000)) 24.303098673s ago: executing program 0 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 24.19178669s ago: executing program 0 (id=61): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@nodelalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='ro'}]}, 0xfd, 0x573, &(0x7f0000000640)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") 23.536452068s ago: executing program 0 (id=70): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@multicast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "011100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 23.136198602s ago: executing program 0 (id=74): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) close(r0) 23.043245117s ago: executing program 32 (id=74): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) close(r0) 2.621997936s ago: executing program 4 (id=370): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e1d, 0x8, @local, 0x1}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x68, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0xb7, 0x9}, &(0x7f0000000380)=0x9c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @private=0xa010102, @loopback}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8002}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x20000000, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fcntl$dupfd(r4, 0x0, r3) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000100)={@broadcast, @loopback, 0xfffe, "a1336fde59a130a56beb2cbec15f27517ab2e541043f566722deb3a297aa2de2", 0x3, 0x2, 0x593f4dc1, 0x7}, 0x3c) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x20801000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf52e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5) r8 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') setsockopt$inet_buf(r9, 0x0, 0x26, &(0x7f00000002c0)="527d6eef084ec8797108364c0787cdcbb5950ae1fcb57ec313e6e3e78d410794b05de4bdc564eaf72682da492dd5155adce0abca06e511e4c2e033d6ccc6a21891cda31023a561f908c5e08406a2f59ecf47e92122fd14607d951299085d3d8536b977bb41c1b04b0606bb8b76cd328d3367", 0x72) setreuid(0x0, 0xee00) request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0x23d982, 0x90) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) ioprio_get$pid(0x1, r6) 2.468438765s ago: executing program 3 (id=375): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.38042578s ago: executing program 3 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$rtc(&(0x7f00000000c0), 0x8, 0x800) ioctl$RTC_PIE_OFF(r3, 0x7006) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @func_proto, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x3e, 0xffa, 0xa, 0x7}, 0x28) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) finit_module(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0xb356841f36698ca6}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 2.060411209s ago: executing program 3 (id=379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000"], 0xa4}}, 0x0) 1.947041685s ago: executing program 3 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.827382372s ago: executing program 3 (id=381): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.584213707s ago: executing program 2 (id=384): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x20000000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0xa4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) r2 = signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x80000) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000200)="ea9e1988e7eeab4c186ff96ae168e4ff06fb7bbbfd84fff417b8bdb436a681bbd447cb39885266ffbde71f7ee3609651a7d93dd693dfa1c2555b070b51a278f5b08702978e357f6a30f3a9b3a59fb1fa89f24fac666738e1c3b2dd10521f24dac00e7e01", 0x64}, {&(0x7f0000000280)="15aec046bb4863ba833ef9a47c35b1a54f6ad1a77191b88141fc9f13c803a06f76da2dce0fb86c7fb6da0ecedb458da4c9f43501e94189e237454ab3701d7b9f2e186b9d5b4fbfbc1d7c055ab386ffc100b91e4a2f1fd098d73fdbe6ac3907c7069699131463435c8e5d732002d77dcc00c7544916325a0b9bae9ad5fd336b10784f445130bea581c1951871a5c63c518c06fcab5529917381baf45df2ca20f5d5e2be4dbdf3fd42eba8", 0xaa}, {&(0x7f0000000080)="75d0f193cbe629c7", 0x8}, {&(0x7f0000000140)="85cb7f1c7d12f29e9c0bb7a435e00a0053092212029410100aafb92504030b3832682a354c3121077e8b06714cd8bc5b", 0x30}, {&(0x7f0000000340)="261f3b9dd0f63aa77d22d50b9e1becae41e38ac3f1e9e788", 0x18}], 0x6, &(0x7f00000019c0)=[{0x68, 0x10e, 0x3, "9ffd9c91c7137f6b3fd519842259cfa8edae0d9d89571d39118cf5a051f358e8f8dc1ffa14f7e44254dee8141b5919f705b607c4c0533f9aa6028306ec351a801af631f7e7339c2a05f9309a2d1fb59efc3808214e"}, {0x10, 0x110, 0x1421d303}, {0xc8, 0x0, 0x7, "1ba5d5323862fa4ad06552fa514c1d1484826bdb5bb26700847d8a9116cedb638dcec33dcbbcda5a4c85d005eb7537145dd93733ad5b4f7abfd48f8e4065ed6a71bea42b5e13f16d6770fcc3f5d842c6ace59081132589297e2e913bacbde7ccc99f4da428f6f5104c1e964196c9dd2d19308371d3aa8cbd66ffafc32045215ea10e0de6eae96633115e8ab90ba417676a3f6789b709a2a53da15c052552112388b4d8c60012871d1b7427aad1131812f01801fa91fd"}, {0xc8, 0x19d, 0x16, "a9decb472d947b8391fbbab7941717df781a5ab5818504bcdf302edb3dec404bee1f68fe9eaccfdec50508cddf79b207e2d004badfc4b11c3db9446b711095b95ba06aeb2492613379fb2d97fb3312ef35319697d184a2fe0a0a741e055cd43d46af93d3361714ce843d85db258a6b5569dd2b511ec197e1ff3944f5628e2317eb1d9dd80e6c493c712b25683b839aca075fa47318c3e051a0fa6269db593cd312fd41d559718fdb9e312ff3a06576af0ac350"}, {0xf0, 0x116, 0x8, "7a5afdf2afc912596716deff79b5cf8ffb3dbdbb3fd62334e47c310626c3c147da1dac5d582f7423261cc4e8d1afccac211e805fdd393e4e5e213a08791d04ba01f1aa86525802c0aec7cc576afdc069a8a9ab51c5cb7a89101f3f757be342234a9c815d4273aae007e605127f2ecb6c0400c0b62df58283c0069f86b3b3166a69d1cf41f45cf95a30b709053596646585087afcb07e53ff40eb7b2a7fb2345bbc875289db341a9dbdbabd7f2501a516ed8f70674ca8c36d6337c96d80758dfc74ebfa5d84a826ff998ed94b3ddc45d2af6a0da8c87454f4b4"}, {0x68, 0x103, 0x401, "7cb8f89a2fbcad536162ee59e3cdeae0d8a5632834cca75a0b8a3f25367c9b80fa651b145717fed3963029ae0ae93d579d3383180b423d136b2337fff700b394819dd01a74fd452bb0ec3f756c58581a40fb3dc3"}, {0x78, 0x117, 0x6212ee5f, "577fe2930eb305db6bbab1b4cbcc73b7a3cebcadb640d031d2c83363b7f6dd32e4c878a9f67f1e887fc4a7a1a6b053973294e0ac0525064be6e12cab91c94608729cc2003183fc682e5994a0e32b8deb8689b72bcc1e221c380539b158c7f8abe77bc47d76e436"}, {0x10, 0x112, 0x6}], 0x3e8}}], 0x1, 0x8040) 1.583467907s ago: executing program 4 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 1.551568058s ago: executing program 2 (id=386): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x1c, 0x4}, {}, {0xffe0, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xeb}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xab76, 0x0, 0xbd}, "eb"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0) 1.550917408s ago: executing program 4 (id=387): r0 = socket(0x10, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x6, 0x2) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d010900500011"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.418161936s ago: executing program 4 (id=389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000002200000101ac1414bb00000000000a0000006400000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd0000000000000048000200636263286165732900"/211], 0x1a0}}, 0x0) 1.417618806s ago: executing program 2 (id=390): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4008881, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.392291898s ago: executing program 4 (id=392): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.35396157s ago: executing program 3 (id=393): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1022002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfd, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fcntl$notify(0xffffffffffffffff, 0x402, 0x18) mknod$loop(0x0, 0x6000, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1.338188201s ago: executing program 2 (id=394): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mlockall(0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x10}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000027c0)="7f822b82a3b65d5de06ce1dccb71fb8d02378c872ec688e36ef5be53e93cb61db185127c114f633d9c052ca69379057dca6550ab6c7aea0d9dff7bea348e8bac1f3ec74384c0ef64", 0x48}], 0x1}}], 0x1, 0x4098) socket$netlink(0x10, 0x3, 0x4) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r5, 0x0) r6 = socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x1b7f, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12a00, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x1004, 0x40000, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r7, @ANYBLOB="010027bd7000ffdbdf2502"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000068000100550c7ae2000000000a00000000000000080006000000000004000b00"], 0x24}}, 0x0) symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='mnt\x00', &(0x7f0000000140)={0x104c0, 0x100, 0x10}, 0x18) 1.064243547s ago: executing program 5 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xa4}}, 0x0) 1.033099099s ago: executing program 5 (id=398): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 748.341065ms ago: executing program 1 (id=399): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 680.13911ms ago: executing program 5 (id=400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8}, {@in=@dev, 0x0, 0x6c}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x80}}, 0x0, 0x7fff}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}]}, 0x100}}, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x74, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080) 645.851202ms ago: executing program 2 (id=401): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) close_range(r0, 0xffffffffffffffff, 0x0) 644.664732ms ago: executing program 4 (id=402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xa, 0x2}, {0x10, 0x5}, {0x5}, {0x0, 0x2}, {0xf, 0x2}, {0xc, 0x1}, {0x7, 0x2}, {0x8, 0x2}, {0x8, 0x2}, {0x4, 0x4002}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x1}, @volatile={0x0, 0x0, 0x0, 0xa, 0x82003}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0xa6}, 0x28) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r5, 0x6, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x5, 0x4, 0x4, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, r4, 0x4, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r6, 0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3c00000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="01480000195301001c00128009000100626f6e64000000000c00028005000e0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 614.838683ms ago: executing program 1 (id=403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000002200000101ac1414bb00000000000a0000006400000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000"], 0x1a0}}, 0x0) 400.309556ms ago: executing program 5 (id=404): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4008881, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 240.691775ms ago: executing program 1 (id=405): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x3, 0x7) getsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000000c0)=""/169, &(0x7f0000000000)=0xa9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c756e00e0ffff0b000280cd3233150000000008000500", @ANYRES32=r1, @ANYBLOB="0a000200bbbbbbbbbbbb0000"], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 207.304358ms ago: executing program 5 (id=406): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x5, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x6, 0xfffffffffffffff7}, 0x3804, 0x32, 0x43a1bd76, 0x7, 0x3, 0x2d73, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x7, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x7, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 112.188763ms ago: executing program 1 (id=407): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x4200) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000001c0)=""/131) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 102.243934ms ago: executing program 1 (id=408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xa4}}, 0x0) 56.092896ms ago: executing program 1 (id=409): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x1000000000000006}, 0x6025, 0x4005, 0xb, 0x0, 0x7, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x130, 0xa, 0xd0e0000, 0x40000, 0x100, 0x230, 0x1d8, 0x1d8, 0x230, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffffff, 0xff, 'batadv0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x7, {0xb}}}, @common=@icmp={{0x28}, {0x8, "1cdf", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7008, 0x4, [0x22, 0x38, 0x16, 0x35, 0x14, 0x8, 0x3, 0x8, 0x1f, 0x6, 0x2b, 0x1, 0xa, 0x22, 0x15, 0x23], 0x2, 0xb, 0x40000007}}}, {{@uncond, 0x3202, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x7, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 7.136689ms ago: executing program 5 (id=410): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x66020000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0xc000) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000202000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) 0s ago: executing program 2 (id=411): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0xab11, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x50) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b0020000100050005000000000000"], 0x58) write$binfmt_elf32(r4, 0x0, 0x0) close(r4) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'dvmrp1\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2e880, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): iscuous mode [ 39.043379][ T3330] hsr_slave_1: entered promiscuous mode [ 39.049573][ T3330] debugfs: 'hsr0' already exists in 'hsr' [ 39.055405][ T3330] Cannot create hsr debugfs directory [ 39.081204][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.088207][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.114387][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.126394][ T3323] team0: Port device team_slave_0 added [ 39.140986][ T3323] team0: Port device team_slave_1 added [ 39.147006][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.154046][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.180064][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.218745][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.225887][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.251988][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.263749][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.270842][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.297064][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.318667][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.325654][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.351828][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.389427][ T3325] hsr_slave_0: entered promiscuous mode [ 39.395396][ T3325] hsr_slave_1: entered promiscuous mode [ 39.401313][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 39.407220][ T3325] Cannot create hsr debugfs directory [ 39.449277][ T3320] hsr_slave_0: entered promiscuous mode [ 39.455458][ T3320] hsr_slave_1: entered promiscuous mode [ 39.461297][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 39.467091][ T3320] Cannot create hsr debugfs directory [ 39.489007][ T3323] hsr_slave_0: entered promiscuous mode [ 39.495314][ T3323] hsr_slave_1: entered promiscuous mode [ 39.501202][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 39.507028][ T3323] Cannot create hsr debugfs directory [ 39.652079][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.666701][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.683119][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.697936][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.719022][ T3330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.731454][ T3330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.744758][ T3330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.756403][ T3330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.778867][ T3325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.790010][ T3325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.802800][ T3325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.812242][ T3325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.851507][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.860464][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.870532][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.880792][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.938579][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.948167][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.957763][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.966922][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.988214][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.022416][ T3330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.032139][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.048225][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.055438][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.067475][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.077779][ T3330] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.088625][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.095737][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.110471][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.117561][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.135512][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.142601][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.158142][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.169862][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.185152][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.192250][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.213522][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.220725][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.242662][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.263985][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.272161][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.279272][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.298721][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.309218][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.329767][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.337001][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.356893][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.377731][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.384932][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.418623][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.425771][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.457656][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.490785][ T3330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.516352][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.526835][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.560893][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.598323][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.650309][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.728783][ T3319] veth0_vlan: entered promiscuous mode [ 40.760143][ T3319] veth1_vlan: entered promiscuous mode [ 40.799229][ T3325] veth0_vlan: entered promiscuous mode [ 40.816075][ T3325] veth1_vlan: entered promiscuous mode [ 40.827519][ T3320] veth0_vlan: entered promiscuous mode [ 40.840302][ T3319] veth0_macvtap: entered promiscuous mode [ 40.857590][ T3320] veth1_vlan: entered promiscuous mode [ 40.869442][ T3319] veth1_macvtap: entered promiscuous mode [ 40.885538][ T3323] veth0_vlan: entered promiscuous mode [ 40.897294][ T3330] veth0_vlan: entered promiscuous mode [ 40.904979][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.912684][ T3325] veth0_macvtap: entered promiscuous mode [ 40.926509][ T3323] veth1_vlan: entered promiscuous mode [ 40.934750][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.942778][ T3330] veth1_vlan: entered promiscuous mode [ 40.949933][ T3325] veth1_macvtap: entered promiscuous mode [ 40.963950][ T343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.978742][ T343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.988708][ T3320] veth0_macvtap: entered promiscuous mode [ 40.996214][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.005397][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.015883][ T3320] veth1_macvtap: entered promiscuous mode [ 41.026282][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.042206][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.050369][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.067580][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.075102][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.091144][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.107668][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.117721][ T3330] veth0_macvtap: entered promiscuous mode [ 41.125712][ T3323] veth0_macvtap: entered promiscuous mode [ 41.141742][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.156498][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.169656][ T3330] veth1_macvtap: entered promiscuous mode [ 41.184988][ T3323] veth1_macvtap: entered promiscuous mode [ 41.196240][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.210054][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.220241][ T3491] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'. [ 41.230055][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.242215][ T3491] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 41.244609][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.270361][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.281115][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.291814][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.302526][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.324461][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.347911][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 41.347931][ T29] audit: type=1400 audit(1769109776.870:105): avc: denied { tracepoint } for pid=3496 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.377371][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.387043][ T3497] FAULT_INJECTION: forcing a failure. [ 41.387043][ T3497] name failslab, interval 1, probability 0, space 0, times 1 [ 41.399879][ T3497] CPU: 1 UID: 0 PID: 3497 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.399911][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.399925][ T3497] Call Trace: [ 41.399936][ T3497] [ 41.399943][ T3497] __dump_stack+0x1d/0x30 [ 41.400023][ T3497] dump_stack_lvl+0x95/0xd0 [ 41.400110][ T3497] dump_stack+0x15/0x1b [ 41.400133][ T3497] should_fail_ex+0x263/0x280 [ 41.400233][ T3497] should_failslab+0x8c/0xb0 [ 41.400256][ T3497] kmem_cache_alloc_noprof+0x68/0x490 [ 41.400278][ T3497] ? skb_clone+0x151/0x1f0 [ 41.400371][ T3497] skb_clone+0x151/0x1f0 [ 41.400397][ T3497] netlink_trim+0x101/0x1c0 [ 41.400422][ T3497] netlink_broadcast_filtered+0x5c/0xd10 [ 41.400452][ T3497] ? tcf_action_dump+0x156/0x1d0 [ 41.400543][ T3497] nlmsg_notify+0xcf/0x170 [ 41.400573][ T3497] rtnetlink_send+0x48/0x60 [ 41.400597][ T3497] tc_ctl_action+0x735/0x830 [ 41.400651][ T3497] ? __mutex_lock_slowpath+0xa/0x10 [ 41.400713][ T3497] ? __pfx_tc_ctl_action+0x10/0x10 [ 41.400784][ T3497] rtnetlink_rcv_msg+0x6a7/0x720 [ 41.400819][ T3497] netlink_rcv_skb+0x123/0x220 [ 41.400881][ T3497] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 41.400918][ T3497] rtnetlink_rcv+0x1c/0x30 [ 41.401025][ T3497] netlink_unicast+0x5c0/0x690 [ 41.401064][ T3497] netlink_sendmsg+0x5c8/0x6f0 [ 41.401095][ T3497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.401125][ T3497] __sock_sendmsg+0x145/0x170 [ 41.401225][ T3497] ____sys_sendmsg+0x31e/0x4a0 [ 41.401253][ T3497] ___sys_sendmsg+0x195/0x1e0 [ 41.401290][ T3497] __x64_sys_sendmsg+0xd4/0x160 [ 41.401325][ T3497] x64_sys_call+0x17ba/0x3000 [ 41.401359][ T3497] do_syscall_64+0xc0/0x2a0 [ 41.401390][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.401482][ T3497] RIP: 0033:0x7f8a4fe0acb9 [ 41.401507][ T3497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.401527][ T3497] RSP: 002b:00007f8a4e867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.401550][ T3497] RAX: ffffffffffffffda RBX: 00007f8a50085fa0 RCX: 00007f8a4fe0acb9 [ 41.401565][ T3497] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 41.401579][ T3497] RBP: 00007f8a4e867090 R08: 0000000000000000 R09: 0000000000000000 [ 41.401627][ T3497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.401641][ T3497] R13: 00007f8a50086038 R14: 00007f8a50085fa0 R15: 00007ffcdb8efa58 [ 41.401661][ T3497] [ 41.401707][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.535241][ T3499] loop3: detected capacity change from 0 to 1024 [ 41.667338][ T3499] EXT4-fs: Ignoring removed orlov option [ 41.673107][ T3499] EXT4-fs: inline encryption not supported [ 41.696525][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.724277][ T3499] EXT4-fs: Mount option(s) incompatible with ext2 [ 41.732434][ T29] audit: type=1400 audit(1769109777.240:106): avc: denied { create } for pid=3500 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.742592][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.802053][ T3501] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.826117][ T3499] loop3: detected capacity change from 0 to 512 [ 41.833336][ T3499] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.844155][ T29] audit: type=1400 audit(1769109777.280:107): avc: denied { create } for pid=3500 comm="syz.0.7" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.864314][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.864871][ T29] audit: type=1400 audit(1769109777.290:108): avc: denied { write } for pid=3500 comm="syz.0.7" name="file0" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.886132][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.895557][ T29] audit: type=1400 audit(1769109777.290:109): avc: denied { open } for pid=3500 comm="syz.0.7" path="/2/file0" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.926374][ T29] audit: type=1400 audit(1769109777.290:110): avc: denied { create } for pid=3500 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 41.947089][ T29] audit: type=1400 audit(1769109777.300:111): avc: denied { prog_load } for pid=3498 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.959694][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.965948][ T29] audit: type=1400 audit(1769109777.300:112): avc: denied { bpf } for pid=3498 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.994787][ T29] audit: type=1400 audit(1769109777.310:113): avc: denied { map_create } for pid=3498 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.013624][ T29] audit: type=1400 audit(1769109777.310:114): avc: denied { allowed } for pid=3503 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.077270][ T3515] FAULT_INJECTION: forcing a failure. [ 42.077270][ T3515] name failslab, interval 1, probability 0, space 0, times 0 [ 42.090064][ T3515] CPU: 0 UID: 0 PID: 3515 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.090169][ T3515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.090186][ T3515] Call Trace: [ 42.090194][ T3515] [ 42.090203][ T3515] __dump_stack+0x1d/0x30 [ 42.090233][ T3515] dump_stack_lvl+0x95/0xd0 [ 42.090309][ T3515] dump_stack+0x15/0x1b [ 42.090329][ T3515] should_fail_ex+0x263/0x280 [ 42.090351][ T3515] should_failslab+0x8c/0xb0 [ 42.090408][ T3515] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 42.090434][ T3515] ? security_set_bools+0x85/0x340 [ 42.090467][ T3515] kmemdup_noprof+0x2b/0x70 [ 42.090659][ T3515] security_set_bools+0x85/0x340 [ 42.090778][ T3515] sel_commit_bools_write+0x1e9/0x270 [ 42.090801][ T3515] vfs_writev+0x42b/0x900 [ 42.090828][ T3515] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 42.090939][ T3515] do_writev+0xe9/0x210 [ 42.090965][ T3515] __x64_sys_writev+0x45/0x50 [ 42.090985][ T3515] x64_sys_call+0x1ba5/0x3000 [ 42.091052][ T3515] do_syscall_64+0xc0/0x2a0 [ 42.091081][ T3515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.091108][ T3515] RIP: 0033:0x7f3aa72dacb9 [ 42.091129][ T3515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.091159][ T3515] RSP: 002b:00007f3aa5d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 42.091181][ T3515] RAX: ffffffffffffffda RBX: 00007f3aa7555fa0 RCX: 00007f3aa72dacb9 [ 42.091198][ T3515] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000004 [ 42.091268][ T3515] RBP: 00007f3aa5d37090 R08: 0000000000000000 R09: 0000000000000000 [ 42.091284][ T3515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.091297][ T3515] R13: 00007f3aa7556038 R14: 00007f3aa7555fa0 R15: 00007fffc3a54a78 [ 42.091320][ T3515] [ 42.104168][ T3499] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 42.297291][ T3499] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.4: inode #15: comm syz.3.4: iget: illegal inode # [ 42.322779][ T3499] EXT4-fs (loop3): Remounting filesystem read-only [ 42.339069][ T3524] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 42.356213][ T3499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.404246][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 42.413049][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 42.443702][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 42.502802][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.541140][ T3538] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 42.552720][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 42.600589][ T3544] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3544 comm=syz.4.19 [ 42.603430][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.630225][ T3540] loop2: detected capacity change from 0 to 2048 [ 42.642714][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.676926][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.767965][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 42.786357][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.831933][ T3568] netlink: 324 bytes leftover after parsing attributes in process `syz.0.27'. [ 42.841389][ T3571] loop2: detected capacity change from 0 to 1024 [ 42.852107][ T3571] ======================================================= [ 42.852107][ T3571] WARNING: The mand mount option has been deprecated and [ 42.852107][ T3571] and is ignored by this kernel. Remove the mand [ 42.852107][ T3571] option from the mount to silence this warning. [ 42.852107][ T3571] ======================================================= [ 42.935313][ T3571] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 42.960121][ T3575] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.979916][ T3578] loop4: detected capacity change from 0 to 512 [ 42.996081][ T3571] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.26: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.031643][ T3578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 43.047359][ T3571] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.26: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.061587][ T3578] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.072233][ T3571] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.26: Failed to acquire dquot type 0 [ 43.077980][ T3578] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.30: Failed to acquire dquot type 0 [ 43.087705][ T3571] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 43.114914][ T3571] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.26: mark_inode_dirty error [ 43.130045][ T3571] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 43.152371][ T3571] EXT4-fs (loop2): 1 orphan inode deleted [ 43.159023][ T31] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.161318][ T3571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.197476][ T31] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 43.221874][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 43.232576][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.243880][ T31] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.259712][ T31] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 43.269006][ T3593] netlink: 64 bytes leftover after parsing attributes in process `syz.1.34'. [ 43.280947][ T3320] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 43.316584][ T3320] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 43.343447][ T3320] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 43.357521][ T3599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 43.386631][ T3599] xt_hashlimit: size too large, truncated to 1048576 [ 43.430743][ T3609] netlink: 324 bytes leftover after parsing attributes in process `syz.4.39'. [ 43.768072][ T3622] netlink: 'syz.2.44': attribute type 14 has an invalid length. [ 43.830172][ T3624] Zero length message leads to an empty skb [ 43.865888][ T3622] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 43.992380][ T3626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.089537][ T3626] bond0: (slave bond1): Enslaving as an active interface with an up link [ 44.375918][ T3643] loop0: detected capacity change from 0 to 512 [ 45.093231][ T3631] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 45.105887][ T3631] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 45.133283][ T3643] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.139865][ T3643] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 45.154472][ T3643] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 45.161091][ T3643] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.50: bad orphan inode 768 [ 45.349137][ T3631] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 45.375972][ T3646] atomic_op ffff88811bba1528 conn xmit_atomic 0000000000000000 [ 45.418584][ T3643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.458433][ T3643] EXT4-fs: Ignoring removed orlov option [ 45.464234][ T3643] EXT4-fs: Ignoring removed nobh option [ 45.469858][ T3643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.184189][ T3646] xt_CT: No such helper "pptp" [ 46.294589][ T3643] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 46.435019][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 46.435037][ T29] audit: type=1326 audit(1769109781.960:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.478352][ T29] audit: type=1326 audit(1769109781.960:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.501619][ T29] audit: type=1326 audit(1769109781.960:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.525339][ T29] audit: type=1326 audit(1769109781.960:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.549216][ T29] audit: type=1326 audit(1769109781.960:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.572416][ T29] audit: type=1326 audit(1769109781.960:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.596473][ T29] audit: type=1326 audit(1769109781.960:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.620359][ T29] audit: type=1326 audit(1769109781.960:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.644268][ T29] audit: type=1326 audit(1769109781.960:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.667644][ T29] audit: type=1326 audit(1769109781.960:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403775acb9 code=0x7ffc0000 [ 46.728600][ T3664] loop3: detected capacity change from 0 to 8192 [ 46.755497][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.778074][ T3666] __nla_validate_parse: 3 callbacks suppressed [ 46.778092][ T3666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 46.814363][ T3666] netlink: 236 bytes leftover after parsing attributes in process `syz.4.56'. [ 46.852089][ T3666] loop4: detected capacity change from 0 to 2048 [ 46.903944][ T3678] loop0: detected capacity change from 0 to 512 [ 46.910769][ T3678] EXT4-fs: Ignoring removed nobh option [ 46.922243][ T3679] loop2: detected capacity change from 0 to 1024 [ 46.929942][ T3666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.955422][ T3679] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.966442][ T3679] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.985597][ T3678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.014100][ T3678] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.024568][ T3685] loop1: detected capacity change from 0 to 1024 [ 47.031483][ T3679] JBD2: no valid journal superblock found [ 47.037298][ T3679] EXT4-fs (loop2): Could not load journal inode [ 47.059871][ T3685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.074656][ T3685] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.113647][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.152667][ T3685] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.63: bg 0: block 112: padding at end of block bitmap is not set [ 47.178742][ T3689] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.61: corrupted inode contents [ 47.214210][ T3685] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 47.224688][ T3689] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #18: comm syz.0.61: mark_inode_dirty error [ 47.226943][ T3685] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.226943][ T3685] [ 47.258142][ T3685] syz.1.63 (3685) used greatest stack depth: 9992 bytes left [ 47.260970][ T3689] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.61: corrupted inode contents [ 47.281250][ T3689] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #18: comm syz.0.61: mark_inode_dirty error [ 47.295776][ T3689] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #18: comm syz.0.61: mark inode dirty (error -117) [ 47.309270][ T3689] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 47.320290][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.435392][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 47.444174][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 47.500919][ T3319] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /12/bus: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 47.601603][ T3319] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 47.641803][ T3319] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 47.845552][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.859026][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.909849][ T3715] loop3: detected capacity change from 0 to 512 [ 47.916778][ T3715] EXT4-fs: Ignoring removed oldalloc option [ 47.924580][ T3715] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.75: corrupted in-inode xattr: e_value size too large [ 47.941012][ T3715] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.75: couldn't read orphan inode 15 (err -117) [ 47.964416][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.983128][ T3715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.069017][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.085480][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.149901][ T3722] netlink: 324 bytes leftover after parsing attributes in process `syz.3.78'. [ 48.172372][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.246302][ T3729] netlink: 64 bytes leftover after parsing attributes in process `syz.3.79'. [ 48.292646][ T31] bridge_slave_1: left allmulticast mode [ 48.298440][ T31] bridge_slave_1: left promiscuous mode [ 48.304288][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.317433][ T31] bridge_slave_0: left allmulticast mode [ 48.323182][ T31] bridge_slave_0: left promiscuous mode [ 48.328913][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.374202][ T3733] loop3: detected capacity change from 0 to 512 [ 48.417570][ T3733] loop3: detected capacity change from 0 to 1024 [ 48.421849][ T3735] loop2: detected capacity change from 0 to 1024 [ 48.450252][ T3735] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 48.451325][ T3733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.498902][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.509132][ T3733] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.520155][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.530529][ T31] bond0 (unregistering): Released all slaves [ 48.534507][ T3735] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.81: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.591549][ T3733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.80: bg 0: block 112: padding at end of block bitmap is not set [ 48.617142][ T31] hsr_slave_0: left promiscuous mode [ 48.623145][ T31] hsr_slave_1: left promiscuous mode [ 48.634080][ T3735] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.81: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.639725][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.655688][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.663120][ T3735] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.81: Failed to acquire dquot type 0 [ 48.674933][ T3733] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 48.687529][ T3733] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.687529][ T3733] [ 48.697917][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.697949][ T3735] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 48.705424][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.725369][ T3735] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.81: mark_inode_dirty error [ 48.751878][ T3735] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 48.768273][ T31] veth1_macvtap: left promiscuous mode [ 48.773860][ T31] veth0_macvtap: left promiscuous mode [ 48.783688][ T31] veth1_vlan: left promiscuous mode [ 48.791162][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.800577][ T31] veth0_vlan: left promiscuous mode [ 48.810742][ T3735] EXT4-fs (loop2): 1 orphan inode deleted [ 48.820900][ T343] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.837230][ T3735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.859493][ T343] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 49.028829][ T31] team0 (unregistering): Port device team_slave_1 removed [ 49.030602][ T3764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.85'. [ 49.052361][ T31] team0 (unregistering): Port device team_slave_0 removed [ 49.117917][ T3766] loop3: detected capacity change from 0 to 1024 [ 49.166221][ T3766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.194384][ T3766] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.260609][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.260996][ T3311] loop1: p1 p2 p3 [ 49.274915][ T3445] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.322039][ T3771] loop1: p1 p2 p3 [ 49.340893][ T3720] chnl_net:caif_netlink_parms(): no params data found [ 49.350033][ T3445] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 49.424138][ T3320] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 49.449783][ T3320] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 49.478287][ T3320] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 49.503332][ T3787] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.532313][ T3787] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.688985][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.700649][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 49.710779][ T3445] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 4) [ 49.717327][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 49.749932][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.757160][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.768240][ T3445] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 49.780679][ T3445] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.780679][ T3445] [ 49.802790][ T3720] bridge_slave_0: entered allmulticast mode [ 49.815663][ T3695] syz.4.66 (3695) used greatest stack depth: 6352 bytes left [ 49.826265][ T3720] bridge_slave_0: entered promiscuous mode [ 49.842071][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.849328][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.887002][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.902295][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 49.910704][ T3720] bridge_slave_1: entered allmulticast mode [ 49.922382][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 49.943253][ T3720] bridge_slave_1: entered promiscuous mode [ 49.950944][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.970756][ T3807] netlink: 128 bytes leftover after parsing attributes in process `syz.4.91'. [ 50.035904][ T3720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.054610][ T3493] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.082010][ T3493] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.099922][ T3720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.153038][ T3820] fido_id[3820]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.207419][ T3720] team0: Port device team_slave_0 added [ 50.242134][ T3720] team0: Port device team_slave_1 added [ 50.346003][ T3720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.353045][ T3720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.379131][ T3720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.436827][ T3837] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.443248][ T3837] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 50.458344][ T3837] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 50.465029][ T3837] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.92: bad orphan inode 768 [ 50.536842][ T3720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.543999][ T3720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.570247][ T3720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.604901][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 50.614078][ T3837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.626829][ T3847] netlink: 64 bytes leftover after parsing attributes in process `syz.2.97'. [ 50.650990][ T3507] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.659169][ T3507] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.676553][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.722449][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.765148][ T3720] hsr_slave_0: entered promiscuous mode [ 50.786709][ T3720] hsr_slave_1: entered promiscuous mode [ 50.794009][ T3831] EXT4-fs: Ignoring removed orlov option [ 50.797555][ T3853] fido_id[3853]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.799771][ T3831] EXT4-fs: Ignoring removed nobh option [ 50.818881][ T3831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.828586][ T3831] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 50.856725][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.013140][ T3866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.062365][ T3720] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.095749][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.136686][ T3720] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.149176][ T3882] atomic_op ffff88811c24a128 conn xmit_atomic 0000000000000000 [ 51.164678][ T3720] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.193798][ T3720] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.217303][ T3882] xt_CT: No such helper "pptp" [ 51.343309][ T3720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.361425][ T3873] loop4: p1 p2 p3 [ 51.396565][ T3720] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.416221][ T1679] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.423345][ T1679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.504969][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.512231][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.525332][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.565714][ T3905] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 51.583184][ T23] IPVS: starting estimator thread 0... [ 51.602123][ T3720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.657715][ T3912] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.664208][ T3912] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 51.679318][ T3912] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 51.684226][ T3909] IPVS: using max 2256 ests per chain, 112800 per kthread [ 51.686050][ T3912] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.110: bad orphan inode 768 [ 51.703849][ T3912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.721427][ T3912] EXT4-fs: Ignoring removed orlov option [ 51.727248][ T3912] EXT4-fs: Ignoring removed nobh option [ 51.732853][ T3912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.741509][ T3912] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 51.761023][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.784648][ T3917] __nla_validate_parse: 4 callbacks suppressed [ 51.784668][ T3917] netlink: 236 bytes leftover after parsing attributes in process `syz.4.109'. [ 51.845196][ T3922] set_capacity_and_notify: 7 callbacks suppressed [ 51.845251][ T3922] loop1: detected capacity change from 0 to 1024 [ 51.846175][ T2970] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 51.877654][ T3917] loop4: detected capacity change from 0 to 2048 [ 51.893357][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 51.893383][ T29] audit: type=1400 audit(1769109787.410:334): avc: denied { open } for pid=3926 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.915578][ T3922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.931035][ T3922] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.943035][ T3720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.954750][ T29] audit: type=1400 audit(1769109787.410:335): avc: denied { perfmon } for pid=3926 comm="syz.2.113" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.975543][ T29] audit: type=1400 audit(1769109787.410:336): avc: denied { kernel } for pid=3926 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.988966][ T2970] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.994937][ T29] audit: type=1400 audit(1769109787.450:337): avc: denied { mount } for pid=3919 comm="syz.1.112" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.025997][ T29] audit: type=1400 audit(1769109787.460:338): avc: denied { read write } for pid=3919 comm="syz.1.112" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.050225][ T29] audit: type=1400 audit(1769109787.460:339): avc: denied { open } for pid=3919 comm="syz.1.112" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.074047][ T29] audit: type=1400 audit(1769109787.460:340): avc: denied { add_name } for pid=3919 comm="syz.1.112" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.094798][ T29] audit: type=1400 audit(1769109787.460:341): avc: denied { create } for pid=3919 comm="syz.1.112" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.115206][ T29] audit: type=1400 audit(1769109787.460:342): avc: denied { mounton } for pid=3914 comm="syz.4.109" path="/18/file1" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.137603][ T29] audit: type=1400 audit(1769109787.470:343): avc: denied { read write } for pid=3919 comm="syz.1.112" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.248903][ T3938] loop2: detected capacity change from 0 to 1024 [ 52.284610][ T3938] EXT4-fs: Ignoring removed bh option [ 52.295447][ T3917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.344453][ T3938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.399512][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.409753][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 52.419286][ T2520] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:11: lblock 0 mapped to illegal pblock 0 (length 4) [ 52.453451][ T2520] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 52.464306][ T3938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 52.466029][ T2520] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.466029][ T2520] [ 52.537355][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.625435][ T3720] veth0_vlan: entered promiscuous mode [ 52.657659][ T3966] loop4: detected capacity change from 0 to 128 [ 52.665294][ T3720] veth1_vlan: entered promiscuous mode [ 52.674916][ T3938] EXT4-fs (loop2): shut down requested (0) [ 52.692490][ T3720] veth0_macvtap: entered promiscuous mode [ 52.696668][ T3963] loop1: detected capacity change from 0 to 2048 [ 52.707831][ T3966] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.723268][ T3966] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.730793][ T3720] veth1_macvtap: entered promiscuous mode [ 52.859397][ T3720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.882585][ T3313] loop1: p1 p2 p3 [ 52.888177][ T3720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.901817][ T3445] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.947334][ T3445] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.960301][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.987058][ T3972] loop5: detected capacity change from 0 to 512 [ 52.994429][ T3972] EXT4-fs: Ignoring removed nobh option [ 53.001869][ T3445] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.008194][ T3963] loop1: p1 p2 p3 [ 53.014572][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.067061][ T3972] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.080216][ T3972] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.117579][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 53.120999][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 53.141915][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 53.168692][ T3972] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.244485][ T3972] EXT4-fs (loop5): 1 truncate cleaned up [ 53.254875][ T3972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.306495][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 53.341002][ T3980] loop1: detected capacity change from 0 to 512 [ 53.437773][ T3720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.447046][ T3980] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.453539][ T3980] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 53.468158][ T3980] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 53.474963][ T3980] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.121: bad orphan inode 768 [ 53.503768][ T3980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.520762][ T3980] EXT4-fs: Ignoring removed orlov option [ 53.526588][ T3980] EXT4-fs: Ignoring removed nobh option [ 53.532281][ T3980] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.541020][ T3980] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 53.581264][ T3988] loop3: detected capacity change from 0 to 1024 [ 53.602047][ T3986] netlink: 3 bytes leftover after parsing attributes in process `syz.2.123'. [ 53.629140][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.632537][ T3986] 0ªX¹¦À: renamed from caif0 [ 53.645127][ T3988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.676242][ T3986] 0ªX¹¦À: entered allmulticast mode [ 53.681511][ T3986] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 53.707385][ T3994] netlink: 88 bytes leftover after parsing attributes in process `syz.1.126'. [ 53.722640][ T3988] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.828307][ T3996] loop5: detected capacity change from 0 to 512 [ 53.838056][ T3996] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.912557][ T3996] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 53.927363][ T3996] EXT4-fs (loop5): 1 truncate cleaned up [ 53.934653][ T3996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.007426][ T3720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.063676][ T1636] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 4) [ 54.124963][ T1636] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 54.137419][ T1636] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.137419][ T1636] [ 54.201494][ T4017] loop5: detected capacity change from 0 to 2048 [ 54.216999][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.290388][ T3311] Alternate GPT is invalid, using primary GPT. [ 54.296820][ T3311] loop5: p2 p3 p7 [ 54.321506][ T4017] Alternate GPT is invalid, using primary GPT. [ 54.328247][ T4017] loop5: p2 p3 p7 [ 54.333048][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 54.614791][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 54.624307][ T4034] netlink: 64 bytes leftover after parsing attributes in process `syz.5.141'. [ 54.626173][ T3330] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.664225][ T4038] random: crng reseeded on system resumption [ 54.802893][ T4049] netlink: 88 bytes leftover after parsing attributes in process `syz.5.148'. [ 54.815776][ T4045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.847719][ T4045] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.931293][ T4041] EXT4-fs: Ignoring removed bh option [ 54.944209][ T1636] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 4) [ 54.964727][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 54.979822][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 54.991160][ T1636] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 54.995031][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.003800][ T1636] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.003800][ T1636] [ 55.035564][ T4041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.077021][ T4041] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.087225][ T4061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.115999][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.231666][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.309038][ T4087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.372928][ T4087] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.435551][ T4100] macvlan1: entered promiscuous mode [ 55.454419][ T4100] macvlan1: left promiscuous mode [ 55.484365][ T4092] dns_resolver: Unsupported content type (231) [ 55.523496][ T4105] netlink: 'syz.4.169': attribute type 46 has an invalid length. [ 55.531357][ T4105] netlink: 'syz.4.169': attribute type 19 has an invalid length. [ 55.584411][ T3984] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:13: lblock 0 mapped to illegal pblock 0 (length 4) [ 55.619497][ T4110] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 55.636777][ T3984] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 55.649201][ T3984] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.649201][ T3984] [ 55.726546][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.801953][ T3507] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 55.819182][ T3507] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.857541][ T4132] dvmrp1: entered allmulticast mode [ 55.879038][ T4128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.936736][ T4144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 55.951227][ T4144] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.965149][ T4144] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.181: Failed to acquire dquot type 0 [ 55.984418][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.024787][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 56.094739][ T4163] EXT4-fs: Ignoring removed bh option [ 56.124759][ T4163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.142542][ T4167] EXT4-fs: Ignoring removed oldalloc option [ 56.195412][ T4160] loop5: p1 p2 p3 [ 56.215114][ T4180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.227544][ T4176] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.192: corrupted inode contents [ 56.248648][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.304231][ T4176] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.192: mark_inode_dirty error [ 56.316338][ T4176] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.192: corrupted inode contents [ 56.328706][ T4176] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.192: mark_inode_dirty error [ 56.331882][ T4180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.340694][ T4176] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.192: corrupted inode contents [ 56.364660][ T4167] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 56.384901][ T4176] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 56.393755][ T4176] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.192: corrupted inode contents [ 56.406887][ T4167] batman_adv: batadv0: Adding interface: veth1_vlan [ 56.413546][ T4167] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.421901][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 56.450886][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 56.462874][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 56.481131][ T4167] batman_adv: batadv0: Interface activated: veth1_vlan [ 56.488565][ T4176] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.192: mark_inode_dirty error [ 56.516017][ T4176] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 56.530945][ T4192] bond1: (slave bond_slave_1): Device is not our slave [ 56.535742][ T4176] EXT4-fs (loop4): 1 truncate cleaned up [ 56.537942][ T4192] bond1: option active_slave: invalid value (bond_slave_1) [ 56.544966][ T4176] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.561579][ T1636] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 56.563293][ T4192] bond1 (unregistering): Released all slaves [ 56.587482][ T4180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.657758][ T4180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.680664][ T4195] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.695212][ T4201] usb usb7: usbfs: process 4201 (syz.5.199) did not claim interface 0 before use [ 56.735855][ T4203] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.757341][ T4203] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.200: corrupted inode contents [ 56.775689][ T4203] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.200: mark_inode_dirty error [ 56.786520][ T4205] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.802525][ T343] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.803190][ T4209] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.197: bg 0: block 112: padding at end of block bitmap is not set [ 56.825075][ T343] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.826553][ T4203] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.200: corrupted inode contents [ 56.847388][ T343] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.856181][ T4209] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 68 with error 117 [ 56.856231][ T4203] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.200: mark_inode_dirty error [ 56.868702][ T4209] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.868702][ T4209] [ 56.869191][ T343] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.885345][ T4205] FAULT_INJECTION: forcing a failure. [ 56.885345][ T4205] name failslab, interval 1, probability 0, space 0, times 0 [ 56.910539][ T4205] CPU: 1 UID: 0 PID: 4205 Comm: syz.3.201 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.910568][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.910642][ T4205] Call Trace: [ 56.910652][ T4205] [ 56.910663][ T4205] __dump_stack+0x1d/0x30 [ 56.910691][ T4205] dump_stack_lvl+0x95/0xd0 [ 56.910719][ T4205] dump_stack+0x15/0x1b [ 56.910745][ T4205] should_fail_ex+0x263/0x280 [ 56.910774][ T4205] should_failslab+0x8c/0xb0 [ 56.910872][ T4205] kmem_cache_alloc_noprof+0x68/0x490 [ 56.910899][ T4205] ? getname_flags+0x7f/0x3b0 [ 56.910931][ T4205] getname_flags+0x7f/0x3b0 [ 56.911081][ T4205] __x64_sys_symlink+0x40/0x60 [ 56.911107][ T4205] x64_sys_call+0x24a9/0x3000 [ 56.911132][ T4205] do_syscall_64+0xc0/0x2a0 [ 56.911231][ T4205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.911253][ T4205] RIP: 0033:0x7f40ee27acb9 [ 56.911271][ T4205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.911295][ T4205] RSP: 002b:00007f40eccd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 56.911365][ T4205] RAX: ffffffffffffffda RBX: 00007f40ee4f5fa0 RCX: 00007f40ee27acb9 [ 56.911459][ T4205] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000200000000340 [ 56.911477][ T4205] RBP: 00007f40eccd7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.911518][ T4205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.911530][ T4205] R13: 00007f40ee4f6038 R14: 00007f40ee4f5fa0 R15: 00007fffb7c2e208 [ 56.911550][ T4205] [ 57.112996][ T4212] set_capacity_and_notify: 14 callbacks suppressed [ 57.113018][ T4212] loop5: detected capacity change from 0 to 512 [ 57.127254][ T1636] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 4) [ 57.141102][ T1636] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 57.153839][ T1636] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.153839][ T1636] [ 57.165319][ T1679] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 57.180090][ T1679] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 57.192463][ T1679] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.192463][ T1679] [ 57.210283][ T4212] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.222340][ T4218] __nla_validate_parse: 9 callbacks suppressed [ 57.222362][ T4218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.203'. [ 57.260050][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 57.269471][ T4222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 57.297767][ T4212] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.202: corrupted inode contents [ 57.311064][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 57.311079][ T29] audit: type=1400 audit(1769109792.830:473): avc: denied { create } for pid=4223 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.324773][ T4212] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.202: mark_inode_dirty error [ 57.385032][ T29] audit: type=1400 audit(1769109792.870:474): avc: denied { connect } for pid=4223 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.405382][ T29] audit: type=1400 audit(1769109792.930:475): avc: denied { bind } for pid=4223 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.425335][ T4212] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.202: corrupted inode contents [ 57.440206][ T4212] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.202: mark_inode_dirty error [ 57.451422][ T29] audit: type=1400 audit(1769109792.930:476): avc: denied { write } for pid=4223 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.512316][ T4238] netlink: 64 bytes leftover after parsing attributes in process `syz.2.211'. [ 57.530653][ T4235] loop1: detected capacity change from 0 to 2048 [ 57.573796][ T4240] loop4: detected capacity change from 0 to 8192 [ 57.580898][ T29] audit: type=1326 audit(1769109793.100:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a9bfacb9 code=0x7ffc0000 [ 57.617066][ T29] audit: type=1326 audit(1769109793.100:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a9bfacb9 code=0x7ffc0000 [ 57.621654][ T3313] loop1: p1 p2 p3 [ 57.640813][ T29] audit: type=1400 audit(1769109793.130:479): avc: denied { connect } for pid=4247 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.663631][ T29] audit: type=1400 audit(1769109793.130:480): avc: denied { write } for pid=4247 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.702412][ T4250] FAULT_INJECTION: forcing a failure. [ 57.702412][ T4250] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.704608][ T4246] loop5: detected capacity change from 0 to 512 [ 57.715551][ T4250] CPU: 1 UID: 0 PID: 4250 Comm: syz.3.215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.715584][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.715644][ T4250] Call Trace: [ 57.715678][ T4250] [ 57.715686][ T4250] __dump_stack+0x1d/0x30 [ 57.715710][ T4250] dump_stack_lvl+0x95/0xd0 [ 57.715766][ T4250] dump_stack+0x15/0x1b [ 57.715911][ T4250] should_fail_ex+0x263/0x280 [ 57.715988][ T4250] should_fail+0xb/0x20 [ 57.716041][ T4250] should_fail_usercopy+0x1a/0x20 [ 57.716114][ T4250] _copy_to_user+0x20/0xa0 [ 57.716190][ T4250] pagemap_read+0x3b4/0x610 [ 57.716316][ T4250] ? __pfx_pagemap_read+0x10/0x10 [ 57.716450][ T4250] vfs_read+0x1ab/0x7f0 [ 57.716551][ T4250] ? __rcu_read_unlock+0x4e/0x70 [ 57.716667][ T4250] ? __fget_files+0x184/0x1c0 [ 57.716809][ T4250] ? mutex_unlock+0x4e/0x90 [ 57.716881][ T4250] __x64_sys_pread64+0xfd/0x150 [ 57.716981][ T4250] x64_sys_call+0x281b/0x3000 [ 57.717138][ T4250] do_syscall_64+0xc0/0x2a0 [ 57.717248][ T4250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.717323][ T4250] RIP: 0033:0x7f40ee27acb9 [ 57.717376][ T4250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.717473][ T4250] RSP: 002b:00007f40eccd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 57.717538][ T4250] RAX: ffffffffffffffda RBX: 00007f40ee4f5fa0 RCX: 00007f40ee27acb9 [ 57.717582][ T4250] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000004 [ 57.717624][ T4250] RBP: 00007f40eccd7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.717670][ T4250] R10: 0000000ffffffff8 R11: 0000000000000246 R12: 0000000000000002 [ 57.717712][ T4250] R13: 00007f40ee4f6038 R14: 00007f40ee4f5fa0 R15: 00007fffb7c2e208 [ 57.717822][ T4250] [ 57.784189][ T29] audit: type=1326 audit(1769109793.190:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f19a9bfacb9 code=0x7ffc0000 [ 57.927349][ T29] audit: type=1326 audit(1769109793.190:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4245 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19a9bfaa22 code=0x7ffc0000 [ 57.979085][ T4246] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.005663][ T4235] loop1: p1 p2 p3 [ 58.015330][ T4260] veth1_to_bond: entered allmulticast mode [ 58.072765][ T4267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 58.084576][ T4266] loop5: detected capacity change from 0 to 1024 [ 58.144428][ T4266] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.156225][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 58.165095][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 58.175480][ T4258] veth1_to_bond: left allmulticast mode [ 58.191360][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 58.199490][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.219400][ T4267] loop3: detected capacity change from 0 to 2048 [ 58.223587][ T4266] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.217: bg 0: block 112: padding at end of block bitmap is not set [ 58.290354][ T4280] loop2: detected capacity change from 0 to 1024 [ 58.297716][ T4280] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 58.327137][ T4266] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.217: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.329682][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 58.346302][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 58.351953][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 58.406459][ T4266] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.217: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 58.433090][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 58.445537][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 58.455778][ T4280] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.221: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.470733][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 58.483207][ T4266] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.217: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.496852][ T4266] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.217: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.526041][ T4280] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.221: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.545331][ T4280] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.221: Failed to acquire dquot type 0 [ 58.560332][ T4280] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 58.570695][ T4280] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.221: mark_inode_dirty error [ 58.608157][ T4280] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 58.631742][ T4280] EXT4-fs (loop2): 1 orphan inode deleted [ 58.644111][ T1679] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.659859][ T4298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.226'. [ 58.659898][ T4295] netlink: 64 bytes leftover after parsing attributes in process `syz.3.227'. [ 58.680821][ T4296] loop1: detected capacity change from 0 to 512 [ 58.691580][ T1679] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 58.717304][ T4296] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.762964][ T4303] EXT4-fs (loop4): unable to read superblock [ 58.902934][ T4320] loop3: detected capacity change from 0 to 2048 [ 58.970146][ T4318] loop1: detected capacity change from 0 to 8192 [ 58.978624][ T4270] loop3: p1 p2 p3 [ 58.996239][ T4320] loop3: p1 p2 p3 [ 59.034910][ T4323] program syz.5.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.044630][ T4323] futex_wake_op: syz.5.237 tries to shift op by -1; fix this program [ 59.106383][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.139324][ T1679] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.168139][ T4330] netlink: 64 bytes leftover after parsing attributes in process `syz.5.240'. [ 59.177302][ T1679] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 59.194630][ T3320] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 59.227305][ T3320] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 59.256538][ T4332] EXT4-fs: Ignoring removed bh option [ 59.273413][ T3320] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 59.447626][ T1037] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 59.455777][ T1037] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.555100][ T4350] fido_id[4350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.593224][ T4353] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.699901][ T4361] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 59.765165][ T3311] loop3: p1 p2 p3 [ 59.769186][ T4361] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.250: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.815321][ T4359] loop3: p1 p2 p3 [ 59.821969][ T4361] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.250: lblock 0 mapped to illegal pblock 48 (length 1) [ 59.840974][ T4368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.849518][ T4368] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.872072][ T4361] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.250: Failed to acquire dquot type 0 [ 59.888429][ T4361] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 59.897573][ T4368] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 0 [ 59.909396][ T4361] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.250: mark_inode_dirty error [ 59.921093][ T4361] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 59.937630][ T4361] EXT4-fs (loop4): 1 orphan inode deleted [ 59.954659][ T12] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.004333][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 60.082972][ T4381] EXT4-fs: Ignoring removed bh option [ 60.255237][ T4396] process 'syz.2.256' launched '/dev/fd/8' with NULL argv: empty string added [ 60.338679][ T4399] ext4: Unknown parameter 'n' [ 60.449396][ T4400] 9p: Bad value for 'rfdno' [ 60.495763][ T4405] EXT4-fs: inline encryption not supported [ 60.502672][ T4405] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 60.526539][ T12] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.541540][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 60.548590][ T3311] loop2: p1 p2 p3 [ 60.555764][ T3330] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 60.570394][ T3330] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 60.580304][ T3330] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 60.595162][ T4403] loop2: p1 p2 p3 [ 60.603187][ T4405] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 60.616063][ T4405] batman_adv: batadv0: Adding interface: ip6gretap1 [ 60.622719][ T4405] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.651202][ T4405] batman_adv: batadv0: Interface activated: ip6gretap1 [ 61.114292][ T4429] EXT4-fs (loop5): orphan cleanup on readonly fs [ 61.123667][ T4429] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 61.138460][ T4429] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 61.145312][ T4429] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.271: bad orphan inode 768 [ 61.285823][ T4436] tipc: Invalid UDP bearer configuration [ 61.285842][ T4436] tipc: Enabling of bearer rejected, failed to enable media [ 61.322105][ T4435] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 61.347870][ T4428] EXT4-fs: Ignoring removed orlov option [ 61.353628][ T4428] EXT4-fs: Ignoring removed nobh option [ 61.359378][ T4428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.367994][ T4428] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 61.384984][ T4435] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.275: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.454768][ T4435] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.275: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.521515][ T4435] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.275: Failed to acquire dquot type 0 [ 61.570741][ T4435] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 61.603311][ T4435] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.275: mark_inode_dirty error [ 61.644074][ T4435] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 61.687262][ C1] hrtimer: interrupt took 25436 ns [ 61.697701][ T4435] EXT4-fs (loop3): 1 orphan inode deleted [ 61.714335][ T1679] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.735376][ T1679] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 61.794466][ T1679] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.816970][ T1679] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 61.845114][ T3325] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 61.871942][ T4459] hub 6-0:1.0: USB hub found [ 61.883179][ T3325] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 61.892849][ T4459] hub 6-0:1.0: 8 ports detected [ 61.918932][ T3325] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 62.011368][ T4476] FAULT_INJECTION: forcing a failure. [ 62.011368][ T4476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.024561][ T4476] CPU: 0 UID: 0 PID: 4476 Comm: syz.5.283 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.024595][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.024667][ T4476] Call Trace: [ 62.024675][ T4476] [ 62.024683][ T4476] __dump_stack+0x1d/0x30 [ 62.024710][ T4476] dump_stack_lvl+0x95/0xd0 [ 62.024733][ T4476] dump_stack+0x15/0x1b [ 62.024815][ T4476] should_fail_ex+0x263/0x280 [ 62.024874][ T4476] should_fail+0xb/0x20 [ 62.024892][ T4476] should_fail_usercopy+0x1a/0x20 [ 62.024942][ T4476] _copy_from_user+0x1c/0xb0 [ 62.024970][ T4476] generic_map_update_batch+0x36e/0x540 [ 62.025007][ T4476] ? __pfx_generic_map_update_batch+0x10/0x10 [ 62.025069][ T4476] bpf_map_do_batch+0x25c/0x380 [ 62.025132][ T4476] __sys_bpf+0x5f8/0x7b0 [ 62.025159][ T4476] __x64_sys_bpf+0x41/0x50 [ 62.025192][ T4476] x64_sys_call+0x28e1/0x3000 [ 62.025219][ T4476] do_syscall_64+0xc0/0x2a0 [ 62.025293][ T4476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.025316][ T4476] RIP: 0033:0x7f19a9bfacb9 [ 62.025333][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.025361][ T4476] RSP: 002b:00007f19a8657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.025448][ T4476] RAX: ffffffffffffffda RBX: 00007f19a9e75fa0 RCX: 00007f19a9bfacb9 [ 62.025463][ T4476] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001a [ 62.025476][ T4476] RBP: 00007f19a8657090 R08: 0000000000000000 R09: 0000000000000000 [ 62.025490][ T4476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.025502][ T4476] R13: 00007f19a9e76038 R14: 00007f19a9e75fa0 R15: 00007fffe2c1edd8 [ 62.025524][ T4476] [ 62.251152][ T4469] __nla_validate_parse: 12 callbacks suppressed [ 62.251200][ T4469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.278'. [ 62.292743][ T4478] set_capacity_and_notify: 15 callbacks suppressed [ 62.292804][ T4478] loop1: detected capacity change from 0 to 1024 [ 62.329983][ T4478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.371476][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 62.371495][ T29] audit: type=1400 audit(1769109797.890:552): avc: denied { mount } for pid=4477 comm="syz.1.284" name="/" dev="hugetlbfs" ino=9221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 62.405982][ T4478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 62.423304][ T4478] vlan3: entered promiscuous mode [ 62.428445][ T4478] veth0: entered promiscuous mode [ 62.584369][ T4501] loop3: detected capacity change from 0 to 1024 [ 62.607848][ T4501] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 62.640021][ T4501] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.288: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.685863][ T4501] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 62.714027][ T4501] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.288: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.735527][ T4501] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 62.744398][ T4501] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.288: Failed to acquire dquot type 0 [ 62.795179][ T4501] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 62.805728][ T4501] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.288: mark_inode_dirty error [ 62.817468][ T4501] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 62.827885][ T4501] EXT4-fs (loop3): 1 orphan inode deleted [ 62.838339][ T29] audit: type=1400 audit(1769109798.360:553): avc: denied { ioctl } for pid=4500 comm="syz.3.288" path="socket:[8375]" dev="sockfs" ino=8375 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.863164][ T29] audit: type=1400 audit(1769109798.360:554): avc: denied { write } for pid=4500 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 62.896205][ T55] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.920319][ T55] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 62.923087][ T4414] syz.2.267 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 62.928937][ T55] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 62.937225][ T3325] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 62.943126][ T4414] CPU: 1 UID: 0 PID: 4414 Comm: syz.2.267 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.943235][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.943278][ T4414] Call Trace: [ 62.943301][ T4414] [ 62.943332][ T4414] __dump_stack+0x1d/0x30 [ 62.943423][ T4414] dump_stack_lvl+0x95/0xd0 [ 62.943502][ T4414] dump_stack+0x15/0x1b [ 62.943568][ T4414] dump_header+0x80/0x240 [ 62.943643][ T4414] oom_kill_process+0x295/0x350 [ 62.943780][ T4414] out_of_memory+0x97d/0xb80 [ 62.943833][ T4414] try_charge_memcg+0x62e/0xa10 [ 62.943979][ T4414] obj_cgroup_charge_pages+0xa6/0x150 [ 62.944083][ T4414] __memcg_kmem_charge_page+0x9e/0x170 [ 62.944233][ T4414] __alloc_frozen_pages_noprof+0x18a/0x350 [ 62.944403][ T4414] alloc_pages_mpol+0xb3/0x260 [ 62.944504][ T4414] alloc_pages_noprof+0x8f/0x130 [ 62.944690][ T4414] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 62.944825][ T4414] __kvmalloc_node_noprof+0x471/0x680 [ 62.944908][ T4414] ? ip_set_alloc+0x24/0x30 [ 62.945050][ T4414] ? ip_set_alloc+0x24/0x30 [ 62.945137][ T4414] ip_set_alloc+0x24/0x30 [ 62.945221][ T4414] hash_netiface_create+0x282/0x740 [ 62.945356][ T4414] ? __pfx_hash_netiface_create+0x10/0x10 [ 62.945484][ T4414] ip_set_create+0x3cf/0x970 [ 62.945607][ T4414] ? __nla_parse+0x40/0x60 [ 62.945691][ T4414] nfnetlink_rcv_msg+0x509/0x5d0 [ 62.945840][ T4414] netlink_rcv_skb+0x123/0x220 [ 62.946015][ T4414] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.946108][ T4414] nfnetlink_rcv+0x167/0x1720 [ 62.946174][ T4414] ? __kfree_skb+0x109/0x150 [ 62.946203][ T4414] ? nlmon_xmit+0x4f/0x60 [ 62.946229][ T4414] ? consume_skb+0x49/0x140 [ 62.946249][ T4414] ? nlmon_xmit+0x4f/0x60 [ 62.946312][ T4414] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 62.946399][ T4414] ? __dev_queue_xmit+0x139a/0x1f20 [ 62.946563][ T4414] ? __dev_queue_xmit+0x148/0x1f20 [ 62.946700][ T4414] ? ref_tracker_free+0x37d/0x3e0 [ 62.946836][ T4414] ? __netlink_deliver_tap+0x4dc/0x500 [ 62.946935][ T4414] netlink_unicast+0x5c0/0x690 [ 62.947029][ T4414] netlink_sendmsg+0x5c8/0x6f0 [ 62.947171][ T4414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.947278][ T4414] __sock_sendmsg+0x145/0x170 [ 62.947406][ T4414] ____sys_sendmsg+0x31e/0x4a0 [ 62.947527][ T4414] ___sys_sendmsg+0x195/0x1e0 [ 62.947690][ T4414] __x64_sys_sendmsg+0xd4/0x160 [ 62.947787][ T4414] x64_sys_call+0x17ba/0x3000 [ 62.947872][ T4414] do_syscall_64+0xc0/0x2a0 [ 62.947965][ T4414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.948048][ T4414] RIP: 0033:0x7f9f911dacb9 [ 62.948102][ T4414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.948177][ T4414] RSP: 002b:00007f9f8fc37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.948238][ T4414] RAX: ffffffffffffffda RBX: 00007f9f91455fa0 RCX: 00007f9f911dacb9 [ 62.948327][ T4414] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000005 [ 62.948388][ T4414] RBP: 00007f9f91248bf7 R08: 0000000000000000 R09: 0000000000000000 [ 62.948428][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.948466][ T4414] R13: 00007f9f91456038 R14: 00007f9f91455fa0 R15: 00007ffff14ce4b8 [ 62.948526][ T4414] [ 62.948641][ T4414] memory: usage 307200kB, limit 307200kB, failcnt 657 [ 62.954774][ T3325] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 62.967376][ T4414] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 62.977458][ T3325] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 62.987021][ T4414] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 63.086515][ T4507] loop3: detected capacity change from 0 to 512 [ 63.087916][ T4414] Memory cgroup stats for [ 63.094628][ T4507] EXT4-fs: Ignoring removed nobh option [ 63.096994][ T4414] /syz2 [ 63.109852][ T4507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.112192][ T4414] : [ 63.152903][ T4507] EXT4-fs (loop3): 1 truncate cleaned up [ 63.156598][ T4414] cache 0 [ 63.369757][ T4414] rss 0 [ 63.372538][ T4414] shmem 0 [ 63.375600][ T4414] mapped_file 0 [ 63.379223][ T4414] dirty 0 [ 63.382182][ T4414] writeback 0 [ 63.385516][ T4414] workingset_refault_anon 58 [ 63.390123][ T4414] workingset_refault_file 126 [ 63.394866][ T4414] swap 204800 [ 63.398175][ T4414] swapcached 0 [ 63.401632][ T4414] pgpgin 20756 [ 63.405053][ T4414] pgpgout 20756 [ 63.408591][ T4414] pgfault 22030 [ 63.412114][ T4414] pgmajfault 99 [ 63.415629][ T4414] inactive_anon 0 [ 63.419301][ T4414] active_anon 0 [ 63.422766][ T4414] inactive_file 0 [ 63.426524][ T4414] active_file 0 [ 63.429998][ T4414] unevictable 0 [ 63.433456][ T4414] hierarchical_memory_limit 314572800 [ 63.438906][ T4414] hierarchical_memsw_limit 9223372036854771712 [ 63.445178][ T4414] total_cache 0 [ 63.448652][ T4414] total_rss 0 [ 63.451945][ T4414] total_shmem 0 [ 63.455473][ T4414] total_mapped_file 0 [ 63.459470][ T4414] total_dirty 0 [ 63.462945][ T4414] total_writeback 0 [ 63.466808][ T4414] total_workingset_refault_anon 58 [ 63.471955][ T4414] total_workingset_refault_file 126 [ 63.477290][ T4414] total_swap 204800 [ 63.481175][ T4414] total_swapcached 0 [ 63.485108][ T4414] total_pgpgin 20756 [ 63.489018][ T4414] total_pgpgout 20756 [ 63.492996][ T4414] total_pgfault 22030 [ 63.497054][ T4414] total_pgmajfault 99 [ 63.501081][ T4414] total_inactive_anon 0 [ 63.505271][ T4414] total_active_anon 0 [ 63.509417][ T4414] total_inactive_file 0 [ 63.513620][ T4414] total_active_file 0 [ 63.517646][ T4414] total_unevictable 0 [ 63.521690][ T4414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.267,pid=4413,uid=0 [ 63.536321][ T4414] Memory cgroup out of memory: Killed process 4413 (syz.2.267) total-vm:96312kB, anon-rss:1320kB, file-rss:22472kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 63.573327][ T4510] netlink: 160 bytes leftover after parsing attributes in process `syz.3.290'. [ 63.585233][ T4498] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 63.701486][ T4517] loop1: detected capacity change from 0 to 512 [ 63.726073][ T4514] netlink: 64 bytes leftover after parsing attributes in process `syz.3.291'. [ 63.742498][ T4517] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 63.794865][ T4517] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.804094][ T4517] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.293: Block bitmap for bg 0 marked uninitialized [ 63.820895][ T4524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.295'. [ 63.833146][ T4524] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 63.855171][ T4517] EXT4-fs (loop1): Remounting filesystem read-only [ 63.861852][ T4517] EXT4-fs (loop1): 1 orphan inode deleted [ 63.880536][ T4517] netlink: 204 bytes leftover after parsing attributes in process `syz.1.293'. [ 63.892815][ T4527] loop5: detected capacity change from 0 to 8192 [ 64.020417][ T4543] loop3: detected capacity change from 0 to 1024 [ 64.039180][ T4547] loop1: detected capacity change from 0 to 512 [ 64.046003][ T4543] EXT4-fs: Ignoring removed bh option [ 64.080214][ T29] audit: type=1400 audit(1769109799.600:555): avc: denied { map } for pid=4544 comm="syz.2.301" path="socket:[8423]" dev="sockfs" ino=8423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 64.097853][ T4548] loop2: detected capacity change from 0 to 1024 [ 64.110748][ T4547] EXT4-fs: Ignoring removed nobh option [ 64.139987][ T4548] EXT4-fs: inline encryption not supported [ 64.165422][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 64.175291][ T4548] EXT4-fs: Ignoring removed nobh option [ 64.180880][ T4548] EXT4-fs: Ignoring removed bh option [ 64.190576][ T4543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.299'. [ 64.244371][ T4547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.285347][ T29] audit: type=1400 audit(1769109799.810:556): avc: denied { create } for pid=4544 comm="syz.2.301" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.328722][ T4547] EXT4-fs (loop1): 1 truncate cleaned up [ 64.351301][ T29] audit: type=1400 audit(1769109799.830:557): avc: denied { add_name } for pid=4544 comm="syz.2.301" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.393801][ T29] audit: type=1400 audit(1769109799.840:558): avc: denied { write open } for pid=4544 comm="syz.2.301" path="/64/file1/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.520128][ T4573] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 64.560357][ T4580] netlink: 324 bytes leftover after parsing attributes in process `syz.2.307'. [ 64.640017][ T4586] loop5: detected capacity change from 0 to 1024 [ 64.655181][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 64.664693][ T4586] EXT4-fs: Ignoring removed bh option [ 64.677352][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.716987][ T4593] loop3: detected capacity change from 0 to 512 [ 64.729232][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.782308][ T4594] fido_id[4594]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.805055][ T4593] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.861636][ T4603] FAULT_INJECTION: forcing a failure. [ 64.861636][ T4603] name failslab, interval 1, probability 0, space 0, times 0 [ 64.874475][ T4603] CPU: 1 UID: 0 PID: 4603 Comm: syz.5.315 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.874542][ T4603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.874622][ T4603] Call Trace: [ 64.874629][ T4603] [ 64.874639][ T4603] __dump_stack+0x1d/0x30 [ 64.874667][ T4603] dump_stack_lvl+0x95/0xd0 [ 64.874689][ T4603] dump_stack+0x15/0x1b [ 64.874709][ T4603] should_fail_ex+0x263/0x280 [ 64.874785][ T4603] should_failslab+0x8c/0xb0 [ 64.874853][ T4603] kmem_cache_alloc_noprof+0x68/0x490 [ 64.874878][ T4603] ? dst_alloc+0xbd/0x100 [ 64.874971][ T4603] dst_alloc+0xbd/0x100 [ 64.875002][ T4603] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 64.875044][ T4603] ip_route_output_flow+0x65/0x110 [ 64.875066][ T4603] raw_sendmsg+0xc4a/0x1110 [ 64.875108][ T4603] ? __pfx_raw_sendmsg+0x10/0x10 [ 64.875215][ T4603] inet_sendmsg+0xc5/0xd0 [ 64.875326][ T4603] __sock_sendmsg+0x102/0x170 [ 64.875360][ T4603] ____sys_sendmsg+0x31e/0x4a0 [ 64.875386][ T4603] ___sys_sendmsg+0x195/0x1e0 [ 64.875500][ T4603] __x64_sys_sendmsg+0xd4/0x160 [ 64.875533][ T4603] x64_sys_call+0x17ba/0x3000 [ 64.875567][ T4603] do_syscall_64+0xc0/0x2a0 [ 64.875609][ T4603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.875673][ T4603] RIP: 0033:0x7f19a9bfacb9 [ 64.875694][ T4603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.875734][ T4603] RSP: 002b:00007f19a8657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.875754][ T4603] RAX: ffffffffffffffda RBX: 00007f19a9e75fa0 RCX: 00007f19a9bfacb9 [ 64.875768][ T4603] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000004 [ 64.875812][ T4603] RBP: 00007f19a8657090 R08: 0000000000000000 R09: 0000000000000000 [ 64.875829][ T4603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.875845][ T4603] R13: 00007f19a9e76038 R14: 00007f19a9e75fa0 R15: 00007fffe2c1edd8 [ 64.875869][ T4603] [ 65.112995][ T4583] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.124186][ T4613] capability: warning: `syz.3.313' uses deprecated v2 capabilities in a way that may be insecure [ 65.150989][ T4583] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.309: corrupted xattr block 33: invalid header [ 65.164597][ T4583] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 65.173613][ T4583] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.309: corrupted xattr block 33: invalid header [ 65.187538][ T4583] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 65.196914][ T4583] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.309: corrupted xattr block 33: invalid header [ 65.210937][ T4583] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 65.380934][ T4635] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 65.388720][ T4635] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 65.432235][ T2970] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 65.440242][ T2970] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.488783][ T4645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4645 comm=syz.3.328 [ 65.700557][ T4660] EXT4-fs: inline encryption not supported [ 65.722946][ T4660] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 65.830556][ T4660] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 65.856221][ T4660] batman_adv: batadv0: Adding interface: ip6gretap1 [ 65.862920][ T4660] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.899957][ T4660] batman_adv: batadv0: Interface activated: ip6gretap1 [ 66.133750][ T4679] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.337: error while reading EA inode 32 err=-116 [ 66.153816][ T4679] EXT4-fs (loop2): Remounting filesystem read-only [ 66.166670][ T4679] EXT4-fs (loop2): 1 orphan inode deleted [ 66.341334][ T4684] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.339: Allocating blocks 385-513 which overlap fs metadata [ 66.372331][ T4684] EXT4-fs (loop3): pa ffff8881006007e0: logic 16, phys. 129, len 24 [ 66.381212][ T4684] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 66.443111][ T2970] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 66.454405][ T2970] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.538293][ T4699] netlink: 'syz.4.343': attribute type 13 has an invalid length. [ 66.553430][ T4699] syz_tun: refused to change device tx_queue_len [ 66.559977][ T4699] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 66.967674][ T4717] EXT4-fs: inline encryption not supported [ 66.974684][ T4717] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 66.999645][ T4717] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 67.015308][ T4717] batman_adv: batadv0: Adding interface: ip6gretap1 [ 67.021969][ T4717] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.051258][ T4717] batman_adv: batadv0: Interface activated: ip6gretap1 [ 67.081150][ T4721] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 67.096691][ T4721] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 67.105783][ T4721] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 67.231847][ T4729] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.347265][ T4736] __nla_validate_parse: 14 callbacks suppressed [ 67.347285][ T4736] netlink: 19 bytes leftover after parsing attributes in process `syz.5.347'. [ 67.365197][ T3487] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 67.390269][ T4737] set_capacity_and_notify: 11 callbacks suppressed [ 67.390291][ T4737] loop4: detected capacity change from 0 to 2048 [ 67.404900][ T3487] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.565474][ T4749] loop4: detected capacity change from 0 to 512 [ 67.572488][ T4749] EXT4-fs: Ignoring removed nobh option [ 67.633531][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 67.633588][ T29] audit: type=1400 audit(1769109803.150:590): avc: denied { read } for pid=4752 comm="syz.1.360" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.663063][ T29] audit: type=1400 audit(1769109803.150:591): avc: denied { open } for pid=4752 comm="syz.1.360" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.688039][ T4754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.360'. [ 67.697984][ T4755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.360'. [ 67.784526][ T4749] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.809053][ T4761] loop2: detected capacity change from 0 to 1024 [ 67.818557][ T4757] loop1: detected capacity change from 0 to 128 [ 67.831361][ T4761] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 67.849545][ T4757] EXT4-fs: inline encryption not supported [ 67.865262][ T4749] netlink: 64 bytes leftover after parsing attributes in process `syz.4.358'. [ 67.874795][ T29] audit: type=1400 audit(1769109803.380:592): avc: denied { bind } for pid=4748 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.894834][ T29] audit: type=1400 audit(1769109803.390:593): avc: denied { getopt } for pid=4748 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.916804][ T4757] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 67.960634][ T4757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'. [ 67.997805][ T4761] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.362: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.025165][ T4761] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 68.038152][ T29] audit: type=1400 audit(1769109803.540:594): avc: denied { ioctl } for pid=4748 comm="syz.4.358" path="/63/bus/file1" dev="loop4" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.110977][ T4761] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.362: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.134333][ T4757] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 68.164256][ T4761] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 68.173148][ T4761] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.362: Failed to acquire dquot type 0 [ 68.197878][ T4757] batman_adv: batadv0: Adding interface: ip6gretap1 [ 68.205217][ T4757] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.213572][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 68.248299][ T4761] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 68.265823][ T4757] batman_adv: batadv0: Interface activated: ip6gretap1 [ 68.276058][ T4761] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.362: mark_inode_dirty error [ 68.297293][ T4777] loop3: detected capacity change from 0 to 1024 [ 68.304788][ T4777] EXT4-fs: Ignoring removed bh option [ 68.311022][ T4761] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 68.344505][ T4761] EXT4-fs (loop2): 1 orphan inode deleted [ 68.358073][ T4781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.366'. [ 68.367770][ T55] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.384342][ T55] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 68.392885][ T55] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 68.498575][ T4797] loop1: detected capacity change from 0 to 128 [ 68.513755][ T4797] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.550433][ T4793] 9pnet: p9_errstr2errno: server reported unknown error [ 68.677715][ T55] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.692797][ T55] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 68.701371][ T55] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 68.707357][ T29] audit: type=1400 audit(1769109804.230:595): avc: denied { relabelfrom } for pid=4808 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 68.746382][ T4812] loop5: detected capacity change from 0 to 1024 [ 68.755744][ T4810] program syz.4.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.765520][ T4810] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 68.830780][ T3320] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 68.844416][ T3320] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 68.854768][ T3320] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 68.880332][ T4809] Invalid ELF header magic: != ELF [ 68.892248][ T4812] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.038826][ T4818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.379'. [ 69.070362][ T4816] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.378: bg 0: block 112: padding at end of block bitmap is not set [ 69.152844][ T4820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 69.182565][ T4816] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 69.195226][ T4816] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.195226][ T4816] [ 69.249479][ T4822] loop3: detected capacity change from 0 to 1024 [ 69.277509][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 69.278419][ T4822] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.303858][ T55] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 4) [ 69.318783][ T55] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 69.332455][ T55] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.332455][ T55] [ 69.397131][ T3984] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 69.446858][ T3984] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 69.459322][ T3984] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.459322][ T3984] [ 69.533979][ T4822] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.381: bg 0: block 112: padding at end of block bitmap is not set [ 69.553155][ T4842] loop5: detected capacity change from 0 to 1024 [ 69.574308][ T4822] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 69.586898][ T4822] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.586898][ T4822] [ 69.597580][ T4842] EXT4-fs: Ignoring removed bh option [ 69.679718][ T4858] loop4: detected capacity change from 0 to 1024 [ 69.703665][ T55] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 4) [ 69.741456][ T4860] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 69.752071][ T55] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 69.764567][ T55] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.764567][ T55] [ 69.776391][ T4860] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.394: lblock 2 mapped to illegal pblock 2 (length 1) [ 69.790300][ T55] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 69.805876][ T4858] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.816483][ T4860] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.394: lblock 0 mapped to illegal pblock 48 (length 1) [ 69.841614][ T55] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 69.854020][ T55] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.854020][ T55] [ 69.874365][ T4860] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.394: Failed to acquire dquot type 0 [ 69.895419][ T4867] FAULT_INJECTION: forcing a failure. [ 69.895419][ T4867] name failslab, interval 1, probability 0, space 0, times 0 [ 69.895507][ T4867] CPU: 1 UID: 0 PID: 4867 Comm: syz.5.396 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.895536][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.895553][ T4867] Call Trace: [ 69.895561][ T4867] [ 69.895570][ T4867] __dump_stack+0x1d/0x30 [ 69.895601][ T4867] dump_stack_lvl+0x95/0xd0 [ 69.895680][ T4867] dump_stack+0x15/0x1b [ 69.895707][ T4867] should_fail_ex+0x263/0x280 [ 69.895733][ T4867] should_failslab+0x8c/0xb0 [ 69.895754][ T4867] __kmalloc_noprof+0xb8/0x580 [ 69.895775][ T4867] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 69.895905][ T4867] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 69.896022][ T4867] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 69.896101][ T4867] ? selinux_capable+0x31/0x40 [ 69.896150][ T4867] ? security_capable+0x7b/0x90 [ 69.896184][ T4867] ? ns_capable+0x7c/0xb0 [ 69.896221][ T4867] genl_rcv_msg+0x432/0x470 [ 69.896262][ T4867] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 69.896324][ T4867] ? __pfx_nl802154_new_interface+0x10/0x10 [ 69.896350][ T4867] ? __pfx_nl802154_post_doit+0x10/0x10 [ 69.896444][ T4867] netlink_rcv_skb+0x123/0x220 [ 69.896470][ T4867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.896510][ T4867] genl_rcv+0x28/0x40 [ 69.896542][ T4867] netlink_unicast+0x5c0/0x690 [ 69.896649][ T4867] netlink_sendmsg+0x5c8/0x6f0 [ 69.896710][ T4867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.896767][ T4867] __sock_sendmsg+0x145/0x170 [ 69.896803][ T4867] ____sys_sendmsg+0x31e/0x4a0 [ 69.896831][ T4867] ___sys_sendmsg+0x195/0x1e0 [ 69.896910][ T4867] __x64_sys_sendmsg+0xd4/0x160 [ 69.897012][ T4867] x64_sys_call+0x17ba/0x3000 [ 69.897039][ T4867] do_syscall_64+0xc0/0x2a0 [ 69.897107][ T4867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.897151][ T4867] RIP: 0033:0x7f19a9bfacb9 [ 69.897167][ T4867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.897187][ T4867] RSP: 002b:00007f19a8657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.897213][ T4867] RAX: ffffffffffffffda RBX: 00007f19a9e75fa0 RCX: 00007f19a9bfacb9 [ 69.897228][ T4867] RDX: 0000000004004004 RSI: 0000200000000440 RDI: 0000000000000004 [ 69.897260][ T4867] RBP: 00007f19a8657090 R08: 0000000000000000 R09: 0000000000000000 [ 69.897274][ T4867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.897287][ T4867] R13: 00007f19a9e76038 R14: 00007f19a9e75fa0 R15: 00007fffe2c1edd8 [ 69.897307][ T4867] [ 69.912489][ T4868] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.392: bg 0: block 112: padding at end of block bitmap is not set [ 70.085546][ T4860] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 70.109716][ T4868] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 70.182886][ T4860] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.394: mark_inode_dirty error [ 70.187077][ T4868] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.187077][ T4868] [ 70.223141][ T4860] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 70.234321][ T4860] EXT4-fs (loop2): 1 orphan inode deleted [ 70.254095][ T1636] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.268929][ T1636] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 70.310803][ T4877] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.411282][ T3445] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 4) [ 70.457257][ T12] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.479570][ T3445] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 70.491995][ T3445] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.491995][ T3445] [ 70.503670][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 70.516080][ T1636] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 70.530967][ T3320] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 70.544380][ T1636] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 70.556767][ T1636] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.556767][ T1636] [ 70.644548][ T3320] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 70.739120][ T3320] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 71.069976][ T3311] ================================================================== [ 71.078143][ T3311] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 71.085342][ T3311] [ 71.087666][ T3311] write to 0xffff888104e0f544 of 4 bytes by task 3313 on cpu 1: [ 71.095304][ T3311] simple_unlink+0x54/0x80 [ 71.099860][ T3311] shmem_unlink+0x12d/0x140 [ 71.104418][ T3311] shmem_rename2+0x18e/0x310 [ 71.109066][ T3311] vfs_rename+0x97f/0xad0 [ 71.113436][ T3311] do_renameat2+0x39a/0x850 [ 71.117971][ T3311] __x64_sys_rename+0x58/0x70 [ 71.122678][ T3311] x64_sys_call+0x24e/0x3000 [ 71.127308][ T3311] do_syscall_64+0xc0/0x2a0 [ 71.131852][ T3311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.137776][ T3311] [ 71.140130][ T3311] read to 0xffff888104e0f544 of 4 bytes by task 3311 on cpu 0: [ 71.147696][ T3311] fill_mg_cmtime+0x5b/0x260 [ 71.152311][ T3311] generic_fillattr+0x24a/0x340 [ 71.157485][ T3311] shmem_getattr+0x181/0x200 [ 71.162318][ T3311] vfs_getattr_nosec+0x146/0x1e0 [ 71.167316][ T3311] vfs_statx+0x113/0x3b0 [ 71.171585][ T3311] vfs_fstatat+0x115/0x170 [ 71.176027][ T3311] __se_sys_newfstatat+0x55/0x3e0 [ 71.181118][ T3311] __x64_sys_newfstatat+0x55/0x70 [ 71.186166][ T3311] x64_sys_call+0x111f/0x3000 [ 71.190883][ T3311] do_syscall_64+0xc0/0x2a0 [ 71.195408][ T3311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.201326][ T3311] [ 71.203661][ T3311] value changed: 0x23b8c896 -> 0x23bda609 [ 71.209390][ T3311] [ 71.211739][ T3311] Reported by Kernel Concurrency Sanitizer on: [ 71.217906][ T3311] CPU: 0 UID: 0 PID: 3311 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.227206][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.237278][ T3311] ================================================================== [ 71.322116][ T4918] bond1: option xmit_hash_policy: invalid value (8) [ 71.330062][ T4918] bond1 (unregistering): Released all slaves