last executing test programs: 2.183219261s ago: executing program 4 (id=403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x1a0, 0x1a0, 0x0, 0xd0, 0x340, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x510}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x4e}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [0x0, 0x0, 0xffffff00], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x5e, 0x3, 0x2, 0xff, 0x9, 0x2050, 0x404}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) (fail_nth: 3) 2.077506897s ago: executing program 4 (id=405): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11e210, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000008000000d400000008f82527702f412c8254f382"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket$inet(0x2, 0x4, 0x5) setsockopt$sock_void(r5, 0x1, 0x48, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.61472794s ago: executing program 4 (id=409): syz_clone(0x8100000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8994, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ftruncate(r2, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000240)=[{0xfffffffffffffffe}, {0x0}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000912030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) 1.561321222s ago: executing program 3 (id=412): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80214, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') getdents(r5, &(0x7f0000001f80)=""/4096, 0x1000) mknodat(r5, &(0x7f0000000200)='./file0\x00', 0x80, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xff}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xffffff3f]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x5}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nouid32}, {@nodioread_nolock}]}, 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c9vVNUeAPDvvZ0WSt977SMvT3FhGg2BRGlpAYM/FrAnBH/s3FhpIcjwI7RGiyaWBDcmxo0LElcuxP9CiW5dmbhw4caVIUFj2GiMjrkzd4ahnWmnpcOtvZ9Pcjvn3HOn51zod86Ze8+ZCaC0xrMfacSeiLicRIy2lVUiLxxvHHf313dPZ1sStdrLvySR5Puaxyf540j+5D9HI779KondAyvrnV+8en6mWp27kucnFy5cnpxfvHrg3IWZs3Nn5y5OPzN99MjhI0enDj7Q+aVt6RPX33hr9IOTr372yR/J1Oc/nEziWPx8plHWfh6bZTzG47da7b3l+7N/16ObXVlBBlp/J/cky3ewZaX5NhQRj8RoDLT9b47G+y8W2jigr2pJRA0oqUT8Q0k1xwHN9/a9vQ9O+zwqAR6GO8ezn4Md4r/SuDYYYzEYEXuXPa/DJb0Nyer45uuT17Mt+nQdDuhs6dqOPLU8/pN6bI7Fznpu1930vuu82QjgVP6Y7X9pg/WPL8uLf3h4lq5FxKOdxv9rx/9rbfH/+gbrF/8AAAAAAACweW4dj4inO93/S/N7czvjifr9v6Rx/++7eysEj21C/Wvf/0tvb0I1QAd3jke80HH+b2uO79hAnvt3YzZgcuZcde5gRPwnIvbH4I4sP7VKHQc+3H2jW1n7/L9sy+pvzgXM23G7suP+58zOLMw8yDkDDXeuRTxW6T7/J+v/k/b+P5e9HlzusY7de2+e6la2dvwD/VL7NGJfx/4/aR2TrP75HJP18cBkc1Sw0uPvfPRFt/rFPxQn6/93rR7/Y0n75/XMr+/3D0XEocVKrVv5Rsf/Q8krA83fn3l7ZmHhylTEUHJi5f7p9bUZtqtmPDTjJYv//U+ufv2vNf5vi8PhiFjqsc7//zXyY7cy/T8UJ4v/2XX1/+tPTN8c+7Jb/b31/4frffr+fI/rf7C6XgO06HYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD9RGhH/iiSdaKXTdGIiYiQi/he70uql+YWnzlx68+JsVlb//v+0+U2/o4180vz+/7G2/PSy/KGI+G9EfDwwXM9PnL5UnS365AEAAAAAAAAAAAAAAAAAAGCLGOmy/j/z00DRrQP6rpI/incon0rRDQAKI/6hvMQ/lJf4h/IS/1BeG4x/twtgG9D/Q1kN9nbYzn63AyiC/h8AAAAAALaVW88/eyOJiKXnhutbZigva90YHC6qdUA/pUU3ACiMObxQXqb+QHn1OPkX2MaSVur3Wqfy7rP/k/40CAAAAAAAAAAAAABYYd+eW9+vuf4f2Jas/4fysv4fysv6fygv7/GBtVbxW/8PAAAAAAAAAAAAAMWbX7x6fqZanbsiIbHVEoMRsQWaUUBiqPjwLPiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPk7AAD//1obJPs=") 1.461983627s ago: executing program 1 (id=414): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x48}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) close(0x4) 1.270989347s ago: executing program 1 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0xf5ffffff) 1.239408628s ago: executing program 4 (id=419): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3d9rW20dAPDvSZvavm9n+6oXry/4vkUc29Al7eq24sU2QfRqoM77Wtu0lKZNadJtLUM6vBZBREVv9MobwT9AkP0JIgz0fogoQ7d54cU0cpKTrcakLSxpuvbzgWfnOc/58f0+GTnJc85pTgBn1lRE3IqIoYi4FBETWXsuK7HXLOl6z589WExLEvX6nb8nkWRtrX0l2fTdbLPRiPjm1yK+kyTNhn2qO7trC+VyaSubL9bWN4vVnd3Lq+sLK6WV0sbs7My1uetzV+eme9bXG1/5y49/8Kuv3vjdF+49mf/bxe+m+Y5ny/b3o5ear0m+8Vq0DEfEVj+CDcBQ1p/8UVZO+p8PAAAHS7/jfyIiPhsRL3426GwAAACAfqjfHI+XSUQdAAAAOLVyjXtgk1whuxdgPHK5QqF5D++n4maUK9Xa55cr2xtLzXtlJyOfW14tl6aze4UnI5+k8zON+uv5K23zsxHxXkT8aGKsMV9YrJSXBn3yAwAAAM6IdJw/nmvW08k/J5rjfwAAAOCUmRx0AgAAAEDfGf8DAADA6ff/4/+p5iQZPv5kAAAAgF77+u3baam3nn+9dHdne61y9/JSqbpWWN9eLCxWtjYLK5XKSuM3+9YP21+5Utn8Ymxs3y/WStVasbqzO79e2d6ozTee6z1fOtJzogEAAICeeu+jR39KImLvS2ONkhrJlhmrw+mW9HV14CQbGnQCwMC4wRfOLu9/4LCB/egx5QEAAPTPhU+/uv4/Fvuu/5974vo/nHa5QScADIzr/3B2tV3/+8WRNnpZ708ywLEyxgcOOw/Q9fr/73ufCwAA0B/jjZLkCtkYYDxyuUIh4lzjsQD5ZHm1XJqOiI9HxB8n8h9L52cGnTQAAAAAAAAAAAAAAAAAAAAAAAAAvGXq9STqAAAAwKkWkftrEhFJjEZMfG68/fzASPKvicY0Iu79/M5P7i/Ualszafs/XrXXfpq1XxnEGQwAAACgXWuc3hrHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvPX/2YLFV9jWf73fcp1+OiMlO8YdjtDEdjXxEvPMiieF92yURMdSD+HsPI+L9TvGTNK2YzLJoj5+LiLEBx3+3B/HhLHuUHn9udXr/5WKqMe38/hvOypt6OtXt+Jd7dfwb6nL8O3fIvkey6QePf1PsGv9hxAfDnY8/rfgjb3j8/fa3dne7Lav/MuJCx8+f5H9iFWvrm8Xqzu7l1fWFldJKaWN2duba3PW5q3PTxeXVcin7t2OMH37mt/85qP/vdIk/mfU/ae9/0sypXu+8z4/a5v/9+P6zT3ZaMYl4+v2s3uH///1u8bPX/nz2OZAuv9Cq7zXr+3346z98eFD/l7r0f/SA+GnbxW47bXPpG9/7c7OWP+IWAEA/VXd21xbK5dLW215JO3MC0uhhZepkpHHaK61R1EnJ56RUBntcAgAAeu/1l/5BZwIAAAAAAAAAAAAAAAAAAABnV+vv/1u/5dyPnxPbH2+0VUmSY+8rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBB/hsAAP//6o/QDg==") 1.116711135s ago: executing program 1 (id=420): munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1000000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000380)={0x34, &(0x7f0000000340)=[{0x1d, 0x1, 0xf3, 0x80}]}, 0x10) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) mlock2(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) 1.116453705s ago: executing program 0 (id=421): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1b}}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.115984545s ago: executing program 2 (id=422): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x1, &(0x7f00000007c0)=""/1, 0x40f00, 0xc}, 0x94) 1.077467527s ago: executing program 1 (id=423): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x8, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.026140589s ago: executing program 0 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) close(0x3) (async) r1 = mq_open(&(0x7f0000000040)='\xd8T\xd1\xb8-\xf7', 0x8c2, 0x30, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x9}) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r1, &(0x7f00000003c0)=""/169, 0xa9, 0x200000000a9b, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sync_file_range(r4, 0x5, 0x8001, 0x6) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (async) r5 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) (async) syz_mount_image$msdos(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x3010886, &(0x7f0000000200), 0x1, 0x27c, &(0x7f0000000680)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) (async) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x3, @private2}, 0x1c) (async) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f00000005c0)=ANY=[], 0x2, 0x21e, &(0x7f00000005c0)="$eJzs3E1rY1UYB/DTtDY2pSUrQTce6kY3Qbt2oUgFMaBYI76AcEtTDYlJyc0iERdZu/IzuBSZ2cxuoMwX6KeY2ZWB0s3Mau7Q3kzbTMu8MGkyTH+/TZ6Tf86955DLJTyBe/DpP380d9LKTtILheJcKHwWhg+yLCuHQnhiGD66+ePR35uLYUyMcfX9vV/++n/tTm/5h1urt4thv/zrweH6vf139t89ePT97400NtLY7vRiErc6nV6y1arH7UbarMT4bauepPXYaKf17li+0+rs7g5i0t5eKe1262kak/YgNuuD2OvEXncQk9+SRjtWKpW4Ugq8itp/D7MsHGZZlhWHIcuyWS+IKfP9X2+bP/389efV6sZ3Mb4dwv1hv9av5a95/uVX1Y2P44ny2ayjfr82f5p/kufx3GH7/dpboTTK1y/kx/MXw4cf5Plx9sU31afypbB95bsHAAAAAIA3UyWeutjfnxsNx/O7pZP+fj449/9A3r//d280fyG8tzDlzQAAAACXSgd/NpNWq959RjEfQnjeZyZeLITpnevKirmQN1EmeOSsGMLs9rUYRsXSS1w/r3+xfPpOKL/YrPlJL+PGJC+SSRRjt4nlsdHaFG9QAADAxJz96J/1SgAAAAAAAAAAAAAAAAAAAOD6msbjxPIzFWa9VQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASz0OAAD//x1rYqA=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) (async) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r8, 0x0, 0x0, 0x2002, 0x0, 0x0) (async) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wEdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 985.379851ms ago: executing program 0 (id=425): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r1, 0x234f, 0x2d59, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0xfeffffff]}}], 0x1001a) 963.926082ms ago: executing program 2 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a000000110003"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 963.445132ms ago: executing program 1 (id=427): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [], {0x95, 0x0, 0x0, 0x7b000000}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 889.360686ms ago: executing program 1 (id=428): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_io_uring_setup(0xc6d, 0x0, &(0x7f0000000340), 0x0) io_uring_enter(r6, 0x3516, 0xa00100, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r8, 0x0, 0x844) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 889.018416ms ago: executing program 0 (id=429): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140)=0x12, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x120, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) (async) shutdown(r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a000000fc00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) (async, rerun: 64) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) (rerun: 64) 888.395246ms ago: executing program 2 (id=430): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000018000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000080"], 0x48) 869.446277ms ago: executing program 2 (id=431): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x1c, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x2000000}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000004540)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 838.101368ms ago: executing program 4 (id=432): r0 = syz_usb_connect$cdc_ncm(0x4, 0x7f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x2a6c23ef8c025c19, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x0, 0x90, 0x7f, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ed9ff9e920"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x492, 0x1ff, 0x5c, 0xb2}, {0x6, 0x24, 0x1a, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x0, 0x6, 0x14, 0x1, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x6e, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x40, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x26, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x3, 0xff, 0x8, 0x20, 0x7}, 0x8f, &(0x7f00000000c0)={0x5, 0xf, 0x8f, 0x6, [@generic={0x3c, 0x10, 0x1, "8df479d9a66115f82e03ad61e23608cc34ce54acce55d017fbd218917d9e7d626e52a4d1378c6720d8a4fd3e5d17ea4db2620f3c4dc13a8110"}, @ssp_cap={0x10, 0x10, 0xa, 0xec, 0x1, 0x2, 0xf000, 0x2, [0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0xd65aa326863031b2, 0x9, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x8, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0xfff, 0x1e000, 0x7f, [0xf]}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7ffffff, 0x0, 0x800, [0xc00f, 0xff3f, 0x0, 0x60, 0x3fff]}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x0, 0x21, 0x7, {0x7, 0xd, "74c7a02f0a"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x4d, "e3c72833bcd9e0ae3660f1cc3e815fc5e7af6e0d4a383f783e2dab09e48007c66f42ab41c10b4b9cf5059280b0593d0950d6f5171634e4f1fa5c262e07c0995e7c16f229ef0d70612fbfda6189"}, 0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9c}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0xdd5, 0x50, 0x1, 0x8, 0x8, 0xbef, 0x1000, 0x7, 0x1, 0xa, 0x7fff, 0x5}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @private}, &(0x7f0000000580)=0x10, 0x80000) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e21, @empty}, 0x10) (async) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x28, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x33, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0xff, 0x3, 0x1, {0x22, 0xcdc}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x8, 0x5a}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x9, 0xa}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0x8, 0xa, 0x2e, 0x40, 0x3}, 0xf, &(0x7f0000000680)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x83, 0x6, 0xbcac}]}, 0x6, [{0x6d, &(0x7f00000006c0)=@string={0x6d, 0x3, "49e04fd66452e3263c6119a47107411dee9a6dfd03ed70281064dadc71b91a2888432e95198dca080aecdf7a7185715c21a3f166a755d5463eefebc4c5885118aeef182386b40effedb3f3a10cdc8ef5f2f2496b886a9bcea08b67230cd470170ac1839d72bcf506ac86c7"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x240a}}, {0xa9, &(0x7f00000007c0)=@string={0xa9, 0x3, "fc8b21008857abb2aebf73dc62ae8feb87ff7247ce8704144127302d3ac7c5f36885760cad5921000413411eae6f7b5dba1cd600be8d048098bb7004da5be6ee903708bbe8eb040dbbca8a797aac685882cf43926e62302ed24136f4ed7c83cd96c80998a9a25e755e5a6ba052a64e4c600673ee0916b7547da9e739636a4cb2177bb6daf0c5c337902103a9a6f5b6a5178110a032043526350cf10a9633af58553ed2a6f8f593"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_usb_connect$uac3(0x4, 0xa6, &(0x7f0000000980)={{0x12, 0x1, 0x730, 0x0, 0x0, 0x0, 0x10, 0x499, 0x102a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x80, 0x80, 0x5f, {0x8, 0xb, 0x1, 0x1, 0x1, 0x22, 0x30, 0x4e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x17, 0xa}, [@feature_unit={0xd, 0x24, 0x7, 0x1, 0x5, [0x8, 0x10]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x81, 0x7, 0x56}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x33, 0x2d, 0x9, {0xa, 0x25, 0x25, 0x80000001, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0xb, 0x0, 0xd9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x3, 0xb4, {0xa, 0x25, 0x25, 0x3c1, 0x5}}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x310, 0x6, 0xe, 0x0, 0x8}, 0x16e, &(0x7f0000000a80)={0x5, 0xf, 0x16e, 0x4, [@generic={0x69, 0x10, 0xb, "a248dd4a57842a88c985049c809ebd51689f052e56f03a31013048a8cc4fa52ea89e48a6a152871a6fffb38a4c346429878277438796a5a09ddbb3cd59864330b2dd4ba8eb0fb650692bce881ca6e5f87cfd19a095827126863abbcda1e704560b7dc0a2c5ee"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x6d, 0x3, 0x81, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x67, 0x9, 0x9}, @generic={0xeb, 0x10, 0xa, "105bd920ea4d1f26c914e0b1dd0e43c674c990168a77cabf845067d47ae221cbb0b9b4a07be903f917d33a1164c5f8b8e5ccc020edff850fcb0c94efcad6f0b677485cbdbc6855586c588065b81ab57e3130f3c78bc7f1a9c83cb6a0e115d44d13708c901c925fb9b4f4d5dd8ff86095993523405d9133dd8d1785e66f98bb683f3af1e0b59876151c3b805659ceba39c5bba8b2c0802ead6ef1e9cb422cad5d6a8090b2fff2ec06fb3e2cf196633d5606ec565b910a542b99b9b5681a5c848af99c15550362164b5bd33a1ff802f01d174b37c9f691e335d670a5084dc28c920e44a724576ccc62"}]}, 0x4, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x843}}, {0xf1, &(0x7f0000000c40)=@string={0xf1, 0x3, "0f9a29669aec009a8e99bbe4774989e81d4ded48af8440314a660dc9bd490f6e07d72683975c59ddf30ca5f7d2cfa7ec9cafa2f11ddadd80d2d0b10440fdf24a4e74e12a37acf8c921069bda3623c663491ae5d57e6af1735406e2cbf7ddc2a503874a7aa8e72dd3c1948a71537d30f2179ee3ea8ecd7307534a955f2f72b681a69826665dfd4f032ba580b7f75eb78273c50ef310766e6dcd0f59ae46530e1fd1a3b81c7e073dc01b123bb39c6b43c6fe7492c44c8dc35e6d8b0af8b5efab187c85f7888699fb7e5a35686cadf627885dc152fdf8e85fe310b8a42a2b4c242fc50315a1978f3764a67a7934a5adf1"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x42f}}, {0x94, &(0x7f0000000d80)=@string={0x94, 0x3, "0d357d1dfaf78e823a547e14a774e95c3f578b594ca7f34a55f60882f057a60c595eaa6658255396e5e2cba31c6ecf458e083530a3dc70a7eddc4a057ac0dbbd93e85d8ce9f92483835c04022fdbe19ead84fbf6725d0e36349e44dec89366dd0292bdb873022420b64683a825ab5478cef326d0fdadf323ad138f89980ae1055afe3ae394ba6ae25d683bf6a2eee9751645"}}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000fc0)={'gre0\x00', &(0x7f0000000f00)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x5, 0x2, {{0x27, 0x4, 0x2, 0x4, 0x9c, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0xb, 0x26, [@private=0xa010102, @private=0xa010102]}, @cipso={0x86, 0x23, 0x3, [{0x7, 0x11, "c8826750a22c04b14065f0e6f11f80"}, {0x0, 0xc, "7c6381f7379dce8b4578"}]}, @ssrr={0x89, 0x7, 0x3d, [@empty]}, @rr={0x7, 0x13, 0xfc, [@local, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x18, 0x6b, 0x0, 0x9, [0x2, 0x2, 0x2, 0x4, 0x100]}, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xb1, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @lsrr={0x83, 0x7, 0x86, [@remote]}, @generic={0x94, 0xe, "5852a94a2884af5582ec9dde"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001000)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x48014) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001280)={0x14, &(0x7f0000001100)={0x20, 0xf, 0x44, {0x44, 0xb, "44455f6cb3066d2000c6c9f3909dcdbf27fc40c3a0456506c6f458eb41f020ddab2456cb4d2ea6507c9c1f6385806ce0356cf42735f3340ae832a9b5a06a77bce112"}}, &(0x7f0000001180)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "4beaa8414aab6f59bab6dbf3b4ec69d77d71f358136c1f754db5683b98dbea18a7b2c6c70dbdf6bc4cfc4d3fe976ae51fc6a9d6c330e1ab18dac663c37ffe6302da4acb334e5647cc67eceec2dcbda15a2ca63f4f8054ebaeba3522dcff20e7e32b88028c58d5df77adffed4a21f028453bbbc305ca4a6710b473ec42479a5cd95a70fb3d233daf9e0dd03a24e42465ad06f0a4bd85a2aca80e728d229bd8e7f6d4619a11b3f41343072f084a23ee358eca7df1ec7e43bbadfcbf8b8be77cfe791b77d9dcb4329e655b3f59df3ec67a9e648f6c9327c0953db9021"}}}, &(0x7f0000001580)={0x44, &(0x7f00000012c0)={0x20, 0x12, 0xed, "029289d69e413cdf643b87504afad87a2c9c91f45f0977a93acdfca36a1846bde4b67b81048a3542e259b22ba99a4d9c5e6cf741e49ade8857ed00f5f0a8f17ef2b0375f7336a9755d2008f3e9d037d303ed8d9d5152dd7915d6daafce759b58e7ccb1eb56dd4455199430c43a3112325e95ae37f800461c2d183f228f725c91c51804f879a2bbf8b193e83b8cc420e64295a8be3b707247756b76fc57e661552b545b9096c51db06e67d69a191417c50d6228711529ee6ecfdaf1f9547a62baea430d88a46c59374ccde949988e01a18d831b3aac26ed39dbd845bdf4424c712d1bc97538160e090169b9210b"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001400)={0x0, 0x8, 0x1}, &(0x7f0000001440)={0x20, 0x81, 0x2, "ba71"}, &(0x7f0000001480)={0x20, 0x82, 0x1, "c9"}, &(0x7f00000014c0)={0x20, 0x83, 0x1, ';'}, &(0x7f0000001500)={0x20, 0x84, 0x3, "fec2a0"}, &(0x7f0000001540)={0x20, 0x85, 0x3, "e2af15"}}) (async, rerun: 64) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000001600)={0x0, @llc={0x1a, 0xf, 0x4, 0xac, 0x5, 0xf, @broadcast}, @ethernet={0x1, @random="2a170703ada1"}, @nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x8}) (async, rerun: 64) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000001680)={0x9, @remote}, &(0x7f00000016c0)=0x12, 0x81800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000001700)={0x3, 'gretap0\x00', {0x44}}) (async) sendmmsg$sock(r4, &(0x7f0000003840)=[{{&(0x7f0000001740)=@can={0x1d, r2}, 0x80, &(0x7f0000001940)=[{&(0x7f00000017c0)="43db4e553def3f903933cfe9fea2354d5e3c71dc7ab3ea8bf0ccf6afd7f5857c818b57bd59aeaa40f49708a1629ab457b86ce0edefdde3a4b1111d8b55e6da74b01e0d615ecfa789171b09b7d3025e3a58dcd4065e573ecbed7fdc89b74d472e3490f04767be3b9cbdce25fd2fe35a9c4392d4dd6861521300134203cfb646764df8c709d39bb4df9e39725622c59a439de5426708b70110f15419c589be15ca62b4eea645e981413679498b6651e469b4996441be4aeec1b55eeceba997f6d00db47b80e9928eb0e9f3ed8015bc46e939e07b6dfc02eb30b18d1761fa80", 0xde}, {&(0x7f00000018c0)="7f8dc7d37ed91783b36b43c62f56845a712e26e41263d8458cc1a71ea6c97fbcb37ce770d4d20fdf85df553c92b0ef74f1124756840b6da979565e5c5a34fa666335ea7f36ab9c1fd9078273f8dcc812294a932eccf620ac6b94", 0x5a}], 0x2, &(0x7f0000001980)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}, {{&(0x7f00000019c0)=@caif=@dgm={0x25, 0x2}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a40)="8a4c3e776309145d3236bc497e66647873b78f8a98d6c97417b9efd4b250ca9c6e54", 0x22}, {&(0x7f0000001a80)="028c19407c5488b80c080cf3776b537cb9354ee4628a61e05f1350568c44c49d7cb24aeadd374e457a860b25665d674b5fcc25d88880b53707ddc888f5ff70476cc4f22b23c97e86d389f6ab40928466edea794bca31f8fa239bb08ae2e7d0590d99aac77dc90a44e59b5c97fce73a7df7794e42c3", 0x75}, {&(0x7f0000001b00)="61833a69b079cb11c320e4ac03465ef53c26016b6bfac521c61d12e00afe02793812d9333f6513d1b6004e00c75f9929fd5437aa2e48998e1acbe50d44047c28ba00094f3a99561479cfff05f465bf59e7bc7f7df03ba83285149fd11fb3f1713da78cf2a958e36e26932bb4304aeec2252ece11cadd78aa32f213ff67841b85ef42df2b5d4380568e85a06a9d357060090e244b1995ecae7da3eeb4f4d30df498faf7ead71b1c649a458a34bfd73b80edc0711ffe155bdfa634854c49188f2a1a81e46363314ae627e983731fb7b545274e4587c491bc3f6c6af4d586c00d105ab0f257fd539298a9f0b93092407ef1c12d", 0xf2}, {&(0x7f0000001c00)="c18509cc63bc7061c067f0864ca414980cd98e96bd030c578db10ce007c824eaf1af445b4e8735916dfbf8597de44b5a2daf230db1c7a9d6db0cb6f5b9fc6b", 0x3f}], 0x4, &(0x7f0000001c80)=[@mark={{0x14, 0x1, 0x24, 0xae}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7ace}}], 0x60}}, {{&(0x7f0000001d00)=@x25, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d80)="79bf31870ea191e0c98135f42c33459a9e6fa5ee241761c4b838694e7ccfbd651fbee0d56d85521c3786f101914e6e3462ea7ebadac215d7fa62595d11f9984665489aaa9c3cf04139425842dd2bb3a4d37f22f10ead04782a27a4", 0x5b}], 0x1, &(0x7f0000001e40)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff35}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x12}}, @txtime={{0x18, 0x1, 0x3d, 0xf2cb}}], 0x78}}, {{&(0x7f0000001ec0)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000003080)=[{&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="6d6d5e6dea7ae228cd21aa1ea5bacf710bb61338", 0x14}, {&(0x7f0000002f80)="3b60b287860c362b095553c77dfec6727020c7b29d301b50d059a430517e2c74822bfb0064ae3a84df5f9c9ff6fec2a8afe8ce9f92875d3e65615991a45addc7211776dbe0", 0x45}, {&(0x7f0000003000)="2847a3c00981e25a35a9631e3904c7e5edadb7505895fcd47e1179cbeada96a07052084f00dcfb7818b2204b404d41c7327a086c4b3187fdb6bca6e4e321fe0c100042daaa6a455548b1b25e414ae92a708a35559715aca029126884d9b96faddeea033c9bfa0f", 0x67}], 0x4}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000030c0)="4b91b5a4994829be4c8e69617f2f2589d07fc2a2dec0641e702e8db7040b19b72c4971b777819846458968b3edbe2b009b380ab1e95d30a7a29addb6625c2d92997bac5836a5e757ec1947b583043676a9820747c45aee54c0e428558a10ccde6f75e7a65b43cfbe4d2cd1195a480e4053a26f9b9c846c69f2f5954a34bd93be5a3d8d74965b2436f8e4f7b49ecd55cdc3dda148b917851ca50b1bd153de2acf", 0xa0}, {&(0x7f0000003180)="9d17b31a1d24e55cde1817573b8cb23d4ec980a2931c7e8dae8e5e3bffd2d0404936079aa0430046ed62fe24cc206ad9e1861d48d56dc2aa2f098082521c62c45579aa7b0cb38acf0bb0b570d81530d632d50fc3a1760d35e4db73417c8123dce257ee8aaed56f70ade6fabcb40333c2fbc45c41f9630a618dd54403c5f8ca09efd7f5dec8852e99a22925f733", 0x8d}, {&(0x7f0000003240)="24b7bdb3d13d98dfaee249f6d9361a14d3077f4270f92236b0d3140b1f338473ba234a0cb4c587b068de34f0", 0x2c}, {&(0x7f0000003280)="5d62ed886ffd65752b2edf16d1910c0fa6b0be18a03af9c49f2ccd170b193476fc0e66f8914d6dbfe3c313ea75fd106eaafad204469e1920b1185fbc720f9d35e8575cf1850e62e06ccd58d9eb60fbbfb7e06494b2e09095062391b647728c5d0ce27e1bfece089ea989aff20c7683b12fdce82c065c48f2e8148df586810a86cb32732b78269c8ed9210ae9f4fa", 0x8e}], 0x4, &(0x7f0000003380)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x24000000}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x90}}, {{&(0x7f0000003440)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000003740)=[{&(0x7f00000034c0)="4cca8160241ecde04b006a6fe05eb8ae61794ed3607167ab4733bc02658614041810a27951526c716bc21cb557b0e8290c024c0858422fe8309804bec14fc5313c2351a6df2bf22d2f3af8cefdda7ec71d31575fe6c362788ceaf918a7513e28e56b979f34e74a764620417c0f78bcc6e1a0b95b32b860d5351d95331c91a47cadb24a4645f38a36f6de24b85ad6e26612243453000d61ae606b9ff79a14fbf8a866ea85f1c49ee8de4743b167b31125c6380c63fe4140a686e1e2c3495eabcf8449f9481d31b85f2cff", 0xca}, {&(0x7f00000035c0)="5c46e2c01c2f9f5044c3c64c4a802447eafb51a70e24c1c03e03a3ad0debc520a75c3babecccf70d866ddb848f1df26967551835e8b0e4fb8ca14acf88f40a8264965e43f6468e13aeeed890017143851134eb84703df04a6da64b87bb7438848962f75c069a514fc1c21a57667ed0b98b73e4ed6844466b62a4bcbd749bcab68b59b50832021a2b0ec5945754312c162206a27edbe5299c7fa3105ad6e1d24fc166122f65ae0899561efb", 0xab}, {&(0x7f0000003680)="60b094eb76ea2bac6d21ba68c8b4690d6536abef066a352248acbb1eb9160cafb5c4697c93252bc56e4cc5", 0x2b}, {&(0x7f00000036c0)="7876b92b10110a5fa1f837f2b0a761fcc8bd40c1d55e0cf8ca7eab7c1ff258054354f1607f47032c76cf07aafe9d85b706ea95b46a13264755ce0f30e54ae6580391f3b1a4f6decfc30df3ca5fe88d53a0196249d1d73924d8f22940ff6e82687a169ffdf032888b6160d7818965c255b97deec4c70dff73c521a4f5", 0x7c}], 0x4, &(0x7f0000003780)=[@txtime={{0x18, 0x1, 0x3d, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5c4c4218}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0xa8}}], 0x6, 0x4000894) (async, rerun: 32) r5 = syz_usb_connect(0x6, 0xc02, &(0x7f00000039c0)={{0x12, 0x1, 0x310, 0x20, 0xc9, 0x2b, 0xff, 0x19d2, 0x197, 0xd95c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf0, 0x3, 0x8, 0x0, 0x160, 0x5, "", [{{0x9, 0x4, 0x5c, 0xd8, 0x7, 0xff, 0xff, 0xff, 0x3, [@uac_as], [{{0x9, 0x5, 0xa, 0x3, 0x40, 0x4, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0xe3}, @generic={0xdb, 0xf, "fcf4b577bd15fa35359463dcbe446c97d1264b7ba9cf1d9194ab51f8fa2b08ad9d9e44ba48feb76847c6d4965181155bf79d71313cf16a80a6f5644b3d60fea9bfb7d284a97e0839e892c28a72284a0aaace1ba26572e9b8c22e6b839e0293fdd996d09172d63b6ae33a62e71329f3b2b1ab33f7abdea6e51867e3307118e3a1076e26fde0f19adfd0f83522815d01331d999bc518a5d526d17f1207054924beba55d958bdf9b3414fb2a6b74f5ed1bb5b2285bd232ec11d201ff03c36c90e837dab60be7e9f67550c600dfc83de5a0eb2e55e2cd507103933"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x40, 0x9, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xd8df}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x2, 0x0, 0x5, [@generic={0xbb, 0x21, "c8b1253c19b7fd403df23baf5fca438f92d612567367ef67f0dcb9105dd9ac39b83d9edf45aceb2da18c547ca6bea098ac2026935e31f224e9b29557349e1a31fc764fa78adba95add843c3523f736da7c495cfbcaebd5832621ebde156880e2f9d06e08162993d087d4617a00a125b1b21045250e32915ebd6a0da1b747d4f9cdb007d213802806ee56243840964b00af03a5d4d00386d555dd9b6ba470349d9fb882b848c2caa757cdbb2590023ad7e899209eb0b4316ff0"}, @generic={0x25, 0x7, "38c5c1a0ff007d24f0412b55c102aeeaa1a043a5f09f3a3b2359e04ac8f6d85931ae8f"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x10, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xdf33}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x3f, 0x7, 0x80}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x0, 0x86, 0x3, [@generic={0xad, 0x21, "db3ca57ceacccd2bfd5eb8f3675d06c0178c6c840bcccb1f59ce17c8cdfb177905dd9b639264af24db5b50cfdd4d33c32f53c663e5b35798d04304aba951b979c4918e1c7af93214d9f657867b377d80348481830c53650eb89b23c0b7e9c88849679bf588375c58459b53bb494ff788962834d27f5ccf09af5c837cf5d8593b1ea4827a0867bafe48725c9fc7755c5d69e4770169b8330f2240320ccafd2d3c3dc426a46f7202e697acc5"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x4, 0xe, 0xfc, [@generic={0x63, 0x31, "4fb14896fa1ecac033857a1d6cc1d50e0b3caf15d1485c4834ae41643a225487a078fddc350ed9a074e85ad68d57c44e9a45fd02b9c4516598b442695d56de8b9b6fc0795ea33e53d21fe3cf4de37928e94530448408bd3914c3b3fb9ca4cd8284"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x7}]}}]}}, {{0x9, 0x4, 0xb1, 0x7, 0xb, 0x2, 0x6, 0x0, 0x6, [], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x1, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfc, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x4, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x351b}, @generic={0xed, 0x9, "5428de465b9c06355c7a8d4fefb5040ee9b803ff6f40592e2fb8aa0c1c8b5b2e3db36718fe926fd76a1eab18a6744e3c3717a821f02bcd5aded0f338bcca926d1d6f4211ce23ff0642d4e4636a14565c42065b5758f5309e7ff7d7ceb2497469209edc85b69f81e0daa8e136eac7685661e9bc424fbd33ce478533855df022102d6d9378f3afc960144e2616e6522b5734bf7c8081025c09d23dfe2fcff1b6807467559142d84de4bcf700b9a60b7a5b769f531f8072da29c8289f62bf752bd897a5b5d00da70393897f476b01777a8527faa1ca5ec5c8ee3a86d4806b3cb65c9ac52ffe11fac4152e1955"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x215eb11d3cc4dea0, 0xfd, 0x80, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x27, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xd, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb5, 0x6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x1, 0x7, 0x7}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x20, 0x4d, 0x9}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x81, 0x80, 0x2, [@generic={0xa2, 0x4, "fe605e10859616cb3719b2c3bfc6ad48abf8ed45399e141dc8e93ad9cbe018573d7be40fcff9fedf2b25b19aa9338170fc880c67c4c43ec119dcdfccf97192f5831d859c2c85f675c5b387758ec6753cfebdf4438a1158655d8388d092d23801efc74e3ce362cad1741749a83e0be0e03e4dd7e86ebcbdb588e23e5318a10ce14e2057b3a79114f76f4e33deba63482b9dcf5e4170e6e3ac73a828c6c1eef4f4"}, @generic={0x30, 0x5, "efd33de1fe9c2b3ff071c3fc5e86e77c9b3d7ea445f4b4a3f21c0cfc43e46d1a35a2b160c322d0ce98d0bba77982"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0xfeff}, @generic={0xe8, 0x28, "2578dcf8ff88796870f68d0d327c3155dd6849cc82b140ddeaa32cf5667d5461363b262ebd5baca6b4f7b206bf6e2b57fd1d4438a516ab1eb819de2d89f63dc4901688fc96c8e534fa4fb78e9edc617d6a6e62a8fd1b2e9130d4265bb8495ac8c5b66889c4723e760f702d4667b5bfb8139ecb5782e486f338172dcf2637ac96e3f496047309686c2492b50507c241ec5e00eb3f78e80ebd394d768a33d2de14c17d02b7c0402a72de18588dd109754a49d9976750916f459e42239ed834f664472c218eb33656baf7658f9a0261a046cc013ec08ca08dfb834e2ddb0505686f5af991b1a87f"}]}}, {{0x9, 0x5, 0x48645be7116a75e1, 0x0, 0x200, 0x4, 0x2, 0x8}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x0, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3d, 0x1800}, @generic={0x8c, 0x2, "580e3b0256c8a434d4fab2ea3c6d0aaa0f2501b2f500772ce9544d49262d5434b07ba8f3c1fd003a96c9a7b608828070e756075d10ec7e99332d6a97bfb447b5e924d92042f29d42f0c1267dd8dc8c715ec453eda9a9235243bd49c368eb0cca2691ddfaeb08f104c5b685776f59519dfc71de500b867879fb211af82347d32bd88ad3b1eaf939cb1ee1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x6, [@generic={0x32, 0xf, "b6b2e4eb3434c954bd72422119202883ddb7dc71a17bbdb5e55585c6a9ce6a36721c5ad1ca986134bbace14d344ec437"}]}}]}}, {{0x9, 0x4, 0x42, 0xf8, 0xf, 0xb6, 0x1e, 0x85, 0x3, [@hid_hid={0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xfbf}}], [{{0x9, 0x5, 0x94, 0x10, 0x200, 0xff, 0x9, 0x24}}, {{0x9, 0x5, 0x80, 0x2, 0x1df, 0x3, 0xfc, 0x80}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x5, 0x6, 0x1, [@generic={0x1b, 0x2, "ce664221f3da18576ccb8da1b276673ec1d3c3e7d061ad0b45"}, @generic={0xce, 0xd, "8bd7f5fc835d1931762608da8c0e753c9a906f9ea3deb322666e8ec72960b67c7abe1ee3a2f25dd342f202a133fc76f3f834e901e06f9db2ccee9ccd3de256d01f18b3100983ab6239ddff76de4bba812ab30c6348f027b356464a349d27e6b79ae82b5717d350a02369746f35d2509b91388f80e1da9fb3f97f11fa493e771b6919cbc5716288bcb15e04e3a63daa48a71318d50fb385fd1bec9ae76088de32a0c1c454f50ac1ad1b889bd9fe629e0599e37582a5957d0a49b3f2224cc5526bda7a3175adb44dcbb29d922e"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x8, 0x7, 0x3}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x1, 0x1, 0x9, [@generic={0x90, 0x21, "6fdc367c7351afb154cdd910ce78f6c913b284af61b9f9e353d88aafa8dab4446879cf1b657b33ff358e3cf48f594421420d27ac757114122c0c49b39a763c9f9f87c777ae74b17dd1b9a75673de32fc3c3ec5e339b40dd4bfe6a461ee291d8bbba5e3575fb7777d9fde3c0207856a7726e6b157ec70c41516475c537b1b70ae64667f10e846869f8be720422c20"}, @generic={0x31, 0x4, "0ddf3b7a488bb3124feafa28cbb5827f91f59bd618f6a02f9d3d919223948b673a20349e7ad8ba1563ea76773ec1f4"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x8, 0x2, 0xa}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x5, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x800}]}}, {{0x9, 0x5, 0x0, 0x0, 0x438, 0x2, 0x9, 0x0, [@generic={0x20, 0x1, "62c457845597ac52e50699d4d975966042d099d64a776c195ae3284be4a5"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x10, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x80, 0x9}, @generic={0xe5, 0x2, "b2a96997c49812acc764742f1d9fcaa016781a8cb39575e4c0b6b6dd5d706df208c62b4588951c4c3fcb51728cc139abdccd1c0994495b8556de5e2ed627143d9981536797d0e614f631ba5fc7049fc1c38e7c86d6edf527ca3a0a5dca6937c892cde1c2fe621770adb9a36e8f02cc68a5e499ec7d0825e4a3238dd337cf13bbd13ed63ed4b0828e9ccca8b381d9b87e686a30d2242ed39873ae75d75c8790a269371c4a634834b119fa2c7915eba0735365e6397eb319ec5a78aef41ab79855fd126d313899002522016b1407d8ab259d365ff31b6cba7a410758995ff6d2ba5faa51"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x30, 0x1, 0x1, 0x2, [@generic={0x44, 0x8, "5e1e50e4f432b612fd69f335fd61f9dc64d09ffc63fdfc55134bf24c636fafce11333d4a7f6bfcb3f368812e597e4483500c61ddc0ccc2eb568f228305d46179388a"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x7, 0x3, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0xc752}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x63, 0x9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xd, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xed, 0x200}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x18, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x82}, @generic={0xf9, 0x23, "6b7f32963800840b1975c9b0113803a95dfc0b7900e3cec43f6aaf3008e8f9459bc488de7bfb496b228bfb676d551adc8669358aa249adc8f86f3b3e0ade9c253ab0a75b9dad91c0e0f0584a81cba8cb91a8daf699af811e63a78b87f29cdcd302787f467d187594c026e61b178129deacbadac165884eb65628fc275ea524241c698dd26bea0a62975f2eaef6b43b7269482912c910abb41bbbf13e08a0565ac1cd2f1a385e0c0ca2f251ee70249e836656c1cd7c82ba40fa6acd58cc5077835ac269cd1578fd7618238345e716092f7a701210deeb849bea9a97da54d58c1c04e57970c91dcc7569476b75e907a7e6c14b6d108bda33"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x0, 0x65, 0x10}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0xc, 0x8, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}]}}]}}]}}]}}, &(0x7f0000004700)={0xa, &(0x7f0000004600)={0xa, 0x6, 0x200, 0x0, 0x7f, 0xf3, 0x8, 0x9}, 0x48, &(0x7f0000004640)={0x5, 0xf, 0x48, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "2f91ae0d787786b8a98b255e213b09f4"}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x0, 0xff0f, 0x5, [0xf, 0xff0000, 0x3f00]}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x7fffffd, 0x0, 0x5b1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x5, 0x3a52, 0x7}]}, 0x1, [{0x4, &(0x7f00000046c0)=@lang_id={0x4, 0x3, 0x1004}}]}) (rerun: 32) syz_usb_control_io$uac2(r5, &(0x7f0000004900)={0x14, &(0x7f0000004740)={0x0, 0x8, 0xd9, {0xd9, 0x1, "88f717fdeffd0204c282e565c374a4bdf90779be49e8ea77f6d81c544b47a2e6e883282c446cc91685f1a8a896d63e96d7ee2505bcd15dfc6f9ec8ec0ded8d35511c7a2e0e9c1ef3693bd8f288864b810e3f2d2f315dd6d1282c0d08957839910b4ad8159783c3b741169579f5ed67b1641b5056253f7f28e5c9303cbd6044a56b746a396081de45ad2d4468069057178aab6144909c68bbc1d1070b5f60f3da3ae50b1452b874c215410fa779c809e31b4a56335470147f86b4b233e05ed26d408f2d4bd8137b784adff49f7cff9729f7ddca898b7a06"}}, &(0x7f0000004840)={0x0, 0x3, 0x91, @string={0x91, 0x3, "2f2afaf9a51142f8f05f0d4b8176429fbdbe19f5a257a5b0c27d5281e8bfa6340e7a45dc2b9671fa927e4dc7a0b8b5c304101956b699d603828be89c9b9dd7baf2df788a366ad0968bbf5132e26cc123fc3109ee54f90e02606968cdd26fa0415db93bbc68004d234954635c040d0890d02d6872ca6e532681f98e71e7e506d68504df9c98d1508310118e4773715d"}}}, &(0x7f0000004bc0)={0x44, &(0x7f0000004940)={0x20, 0xf, 0xa6, "5ea9397d101722877a9078adff7d59e7d907b0d05e737fc9e799fefb3edf21690c68b222568a931d43d60efadbf71564c0e16d39aa2ce25e38543323b57dfe24ea391c2087c1f79b9128c2cdb90d1aa0a4e4d5ed3dd522ec39cb5fee492d685e3be73db865eaaf4cf18ded488e9fb0500658a2dd4491e59a87a1ee66ac8c8e3243a7c62bfce6fea1e64c5d5f6f1807dfd5767ce0ea122d029d8d6422deaa9a7fc58bf943f1e4"}, &(0x7f0000004a00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000004a40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000004a80)={0x20, 0x81, 0x1, "f3"}, &(0x7f0000004ac0)={0x20, 0x82, 0x1, "d0"}, &(0x7f0000004b00)={0x20, 0x83, 0x1, "ef"}, &(0x7f0000004b40)={0x20, 0x84, 0x3, "fcd79b"}, &(0x7f0000004b80)={0x20, 0x85, 0x3, '\x00KZ'}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000004d00)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c80)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) syz_usb_connect$cdc_ncm(0x5, 0x1b5, &(0x7f0000004d40)={{0x12, 0x1, 0x111, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a3, 0x2, 0x1, 0x5, 0x40, 0xda, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\\'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xd5, 0x4, 0x4, 0xa8}, {0x6, 0x24, 0x1a, 0x6, 0x20}, [@mdlm_detail={0xcd, 0x24, 0x13, 0x8, "0e64013d376c208092b5401f204fa474534f40f406ca1aeb3c80b1d084988d9388aa5d3fbd7f6e92cad93d365a23e45fba2a7643880dd5c322b80516f4ab6de835a1a6d1ee18fa80d6c83e840f2f704f45fd47baf090b5eabc33c2c9adfa6e8e4eeb15127153a79a8be428d3a6b5118fe0740bf8490c878a41e6eecd0c2099eecb863ea9c2b3f74274a81c59be2c6cf1e0b3c2da8ca3cb0b7b88fa824d4400446c48ae898f0b15fac4c3df89e1b97ed58d32c4eb265e743f3888490726cfb970abbbe03f883ea473ad"}, @country_functional={0x12, 0x24, 0x7, 0x3, 0x1ff, [0xa, 0x2, 0x5, 0x1, 0x0, 0x3]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x6c, 0x3}, @mdlm_detail={0x5b, 0x24, 0x13, 0x4, "76e73261aab93af1b8236b9eb95ecb9c739061f3d5fe62b06a46a4c744b2c68a13e538b7889f9b6f3d74cb124273181671f92eb9927602471ca2dbd08cd0e50a2fd6274073f034ffadc3d36e267b9c892465f0d62f63b6"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x9, 0xf2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x74, 0xf9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x18, 0x68, 0x4}}}}}}}]}}, &(0x7f0000005040)={0xa, &(0x7f0000004f00)={0xa, 0x6, 0x110, 0x7, 0xda, 0xa, 0x151, 0x81}, 0x23, &(0x7f0000004f40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x0, 0xfaae}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c468acef0b5e3eb1284bdeb545df1be0"}]}, 0x1, [{0xb0, &(0x7f0000004f80)=@string={0xb0, 0x3, "342d4f3c003866c02b8c501da4d7083151b05c951ab6b6c667576500f8d47eb382f9ec26735d1f588f686e93a7ae06bb0d3ce41df6528535c70067eefeabf2866f08f4c953bfbd3b890b446775fab21e8fcf1db92fbae675c7c3987beda10a7681ce90906d77ab3ba36016e679ab2eafe3b8ecc3820c48c5a4e96fac8645a10a3c9a49b9ee9e668f0cfb1ec8bdf8a3565e1fa11f3c465ef97f36711a55d7f8b629ef18bcd3120f8be1eacce21cec"}}]}) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000005080)=0x3, 0x4) (async) r8 = accept4$unix(0xffffffffffffffff, &(0x7f00000050c0), &(0x7f0000005140)=0x6e, 0x1000) recvmsg$unix(r8, &(0x7f0000005380)={&(0x7f0000005180), 0x6e, &(0x7f0000005300)=[{&(0x7f0000005200)=""/147, 0x93}, {&(0x7f00000052c0)=""/22, 0x16}], 0x2, &(0x7f0000005340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x10102) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f00000053c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r10}}, './file0\x00'}) sendmsg$AUDIT_USER_AVC(r11, &(0x7f0000005580)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005540)={&(0x7f0000005440)={0xc8, 0x453, 0x20, 0x70bd28, 0x25dfdbff, "adbb0e0585484e6f43fbf01495225b049a2ffba2d2fce7c0f1520d64a4529323aa601c3d5cb66b7988575a69e02e5da68b5be9fda9d1e90ad946dbe9fba5e811419b8ef386cb0286581dfa05c034ef0820eab66c10dad60a945d3a1025047d0c6221d9c0ca5a8f5610d17640ebb3ca6c2de9a87a8ee2ab473981a0937c89e4f90679d634b14a5626c3bb346735f52e0c3c70fa6f435b7180ec31c2fca85f50ac84731f581f82380b62a2dc29eeb3ecda1ddcad3ab4", ["", "", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x4002004}, 0x44) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f00000055c0)=0x1) (async) bind$vsock_stream(r9, &(0x7f0000005600)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async) brk(0x3b84) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000005640)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x46e, 0x5577, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0xc, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0xfe, {0x9, 0x21, 0xb03, 0x1, 0x1, {0x22, 0x8e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000005a00)={0xa, &(0x7f0000005680)={0xa, 0x6, 0x310, 0x0, 0x9, 0x0, 0xff, 0x5}, 0x31, &(0x7f00000056c0)={0x5, 0xf, 0x31, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xd, 0x0, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a347db0f4c1e3e4e9494ed64f4e3c7b9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb, 0x4, 0x7, 0x9, 0x2}]}, 0x6, [{0xec, &(0x7f0000005700)=@string={0xec, 0x3, "bf52c3afb0827a738a269355d5b4bdaaf95658e46da0b7fbb2fdcf6dc864ee23718a88c97f69ceeb8e1040311fb62da44131740a7af9a378ac9d633d3db8d5e2045595cf8ec66462b9a94b91ef57991f12c59ad7cc92dbc833adbdd4ff7060205b99ea9ae0947d7f1942dee2adcf7f549f3cbef27799c9988ec193e6a3981aca7d6eb90df53b67e642fc96f35ed34e75f7121aac9fc22a3ca560d0a9c2e687cb65ca41e89d08c5449d91e886740dad9d35bae1e5c73340cd2640d5522dbf2fddb18a4117508873577dd664c07ab4a5ac41c3722ec8951ae0e5c644db5899311844c76bc89fae4b098b74"}}, {0x4, &(0x7f0000005800)=@lang_id={0x4, 0x3, 0x400a}}, {0xe9, &(0x7f0000005840)=@string={0xe9, 0x3, "c4ce79eddc9aeb5649fee9a513b83206a187d5d8584b6a1e7d6f3a379b00fe649c0295f140587628db8df3cdbb2c6ba77ba085043b1431cd1d7d34634f0c0bcf47f0d119349031304af37345a209cf1b9ee3607d7b345dcf157ba912b0156f92f04cf842006894511600359b98fdb60c0595406ef8364e234140a112098d5f5f91681c0c0115d72894a136ee5422705bb1ec155978e71ffecae499159b2cf6a3e15a41f47202f7184c3e903979bf8adf10947c357d529e192d9465a6fa258d17aede0b336ba995a9c411ba5f855f7ec79fd0af53a8401bd9d4923d7a8123c613bd43199306540a"}}, {0x4, &(0x7f0000005940)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000005980)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000059c0)=@lang_id={0x4, 0x3, 0x809}}]}) (async) recvmsg(r11, &(0x7f0000005d00)={&(0x7f0000005a80)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005b00)=""/214, 0xd6}, {&(0x7f0000005c00)=""/93, 0x5d}, {&(0x7f0000005c80)=""/21, 0x15}], 0x3}, 0x40010020) 776.266961ms ago: executing program 3 (id=433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x1a0, 0x1a0, 0x0, 0xd0, 0x340, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x510}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x4e}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [0x0, 0x0, 0xffffff00], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x5e, 0x3, 0x2, 0xff, 0x9, 0x2050, 0x404}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 775.771741ms ago: executing program 0 (id=434): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b703000000000008850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x1, &(0x7f00000007c0)=""/1, 0x40f00, 0xc}, 0x94) 775.396071ms ago: executing program 3 (id=435): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x200800, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, 0x0, 0x0) (async) fcntl$getflags(r0, 0x1) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r2, 0x4, 0x6c00) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) (async) write$binfmt_elf64(r4, &(0x7f0000000740)=ANY=[], 0x4a2) (async) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000480)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x20, r6, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xcb, 0x49}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x39}}}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4c800) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) (async) close(0x3) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 717.272314ms ago: executing program 4 (id=436): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="fa6d9401ee46ade44d5c066260ae286a40e9abd3c15ec45f465462436dc6beb7998ae73cd93811b5fa16400635baa3b1aca8e384a8503606d5772f3012ba7a3c572a31936283cc8a3b533a37f63fa27f973281dc2efe568550290b45a6e4ed5b003e0a341a420c4b768d8bc304997795743d63a7f2b86982cd5bc34fb9a42d487dcbd9889a05943ae7ce068c39581415b0a24228f11a5e2c5bf4624f020b7bd7dc327732d3b9daa69ab9f4140c335114c0672e6af6535c70017f2c2886e4464d8ce1a2b81fabb43c5fab21e98aaf"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000500)="24a00ed1f1ea0b6bf7142798ab69fb1d610ba6c415256c4f51737cba735ccaa37e8a720eebe6bca1c131bd6dfd1502b2c438f16bc0470f386e9ea04ee34a8aff3ae2a0c59238ce1353641fb3fca54607294521e12cafa5fbae68e5d66f3780c5a52ca9ba4a70d089f50d5f6c686138061e8d4f9aaf308f2efcfb0c6630450b630c52e08e72f566e8a1b9484244aaab13dcaa634d6d4e4086950678350f57686b09bdc7afe4cc0a27301b6ed7c36ebea0205c1b9ff16010d5c15899f59ac0e910c0755f77176f8bdce247a332ae4a4c983f70aaed0a8351d2e59bf523c1c27fb96a4240580be74d2a", &(0x7f00000001c0)=@tcp6=r3, 0x4}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x20010) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000420000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa8"], 0x57) openat$nvram(0xffffffffffffff9c, 0x0, 0x101000, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) write$P9_RVERSION(r4, &(0x7f0000000240)={0x15, 0x65, 0xffff, 0x10001, 0x8, '9P2000.u'}, 0x15) 713.490885ms ago: executing program 2 (id=437): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000310000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x1, &(0x7f00000007c0)=""/1, 0x40f00, 0xc}, 0x94) 706.292675ms ago: executing program 0 (id=438): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 597.69134ms ago: executing program 2 (id=439): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12d, 0x12d, 0xb, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x13}, @struct={0x1, 0x5, 0x0, 0x4, 0x0, 0xfff, [{0x1, 0x0, 0x5}, {0x6, 0x0, 0x8}, {0x0, 0x4, 0x8}, {0x0, 0x1, 0x3d86ced6}, {0x7, 0x5, 0xfffffff8}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @enum64={0xb, 0x5, 0x0, 0x13, 0x0, 0x0, [{0xe, 0x1, 0x8}, {0x3, 0x9, 0xfff}, {0x10, 0x9, 0xe}, {0x8, 0x5, 0x20080}, {0x9, 0x1, 0x9}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}, @datasec={0xd, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x1c0, 0x5}, {0x1, 0x9, 0x1}, {0x1, 0x9, 0x5}, {0x1, 0x6326, 0xffffffff}, {0x1, 0x200, 0x9}], '^'}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x2}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x14, 0x6}]}, {0x0, [0x5f, 0x2e, 0x0, 0x30, 0x0, 0x61, 0x61, 0x0, 0x61]}}, &(0x7f00000002c0)=""/18, 0x153, 0x12, 0x1, 0x800, 0x10000, @value=r4}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000580)={0x5ff0, 0x80, 0x9, 0x9}) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9feb4cbab48929e1af15100"/28, 0x1c}], 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000040000000100000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x8, &(0x7f0000000080)=""/8, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9528da7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001c0000009500002100000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 325.476904ms ago: executing program 3 (id=440): socket$inet6(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000b00), 0x91) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) chdir(&(0x7f00000003c0)='./bus\x00') r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000140)=@raw=[@generic={0x6, 0x5, 0x9, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @cb_func={0x18, 0xb}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 171.059591ms ago: executing program 3 (id=441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a000000110003"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 0s ago: executing program 3 (id=442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x1a0, 0x1a0, 0x0, 0xd0, 0x340, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x510}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x4e}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [0x0, 0x0, 0xffffff00], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x5e, 0x3, 0x2, 0xff, 0x9, 0x2050, 0x404}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) kernel console output (not intermixed with test programs): 1] team0: Port device team_slave_0 added [ 27.514613][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.521651][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.528750][ T3328] bridge_slave_1: entered allmulticast mode [ 27.535044][ T3328] bridge_slave_1: entered promiscuous mode [ 27.541200][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.548423][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.555536][ T3327] bridge_slave_1: entered allmulticast mode [ 27.561786][ T3327] bridge_slave_1: entered promiscuous mode [ 27.575926][ T3321] team0: Port device team_slave_1 added [ 27.594398][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.605005][ T3330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.619364][ T3330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.634324][ T3317] hsr_slave_0: entered promiscuous mode [ 27.640335][ T3317] hsr_slave_1: entered promiscuous mode [ 27.647528][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.669061][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.676058][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.702016][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.713817][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.724093][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.752915][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.759892][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.785894][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.797192][ T3328] team0: Port device team_slave_0 added [ 27.803789][ T3327] team0: Port device team_slave_0 added [ 27.810153][ T3330] team0: Port device team_slave_0 added [ 27.820414][ T3330] team0: Port device team_slave_1 added [ 27.829437][ T3328] team0: Port device team_slave_1 added [ 27.839752][ T3327] team0: Port device team_slave_1 added [ 27.870472][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.877706][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.903615][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.922364][ T3321] hsr_slave_0: entered promiscuous mode [ 27.928404][ T3321] hsr_slave_1: entered promiscuous mode [ 27.934208][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 27.939911][ T3321] Cannot create hsr debugfs directory [ 27.956612][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.963665][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.991691][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.005059][ T3330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.011990][ T3330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.037949][ T3330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.049235][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.056275][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.082600][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.098727][ T3330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.105749][ T3330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.131790][ T3330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.158926][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.166009][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.191956][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.226660][ T3328] hsr_slave_0: entered promiscuous mode [ 28.232673][ T3328] hsr_slave_1: entered promiscuous mode [ 28.238409][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 28.244163][ T3328] Cannot create hsr debugfs directory [ 28.255667][ T3327] hsr_slave_0: entered promiscuous mode [ 28.261559][ T3327] hsr_slave_1: entered promiscuous mode [ 28.267379][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 28.273151][ T3327] Cannot create hsr debugfs directory [ 28.284535][ T3330] hsr_slave_0: entered promiscuous mode [ 28.290417][ T3330] hsr_slave_1: entered promiscuous mode [ 28.296244][ T3330] debugfs: 'hsr0' already exists in 'hsr' [ 28.301952][ T3330] Cannot create hsr debugfs directory [ 28.456172][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.464762][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.484534][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.497109][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.512338][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.523555][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.532166][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.540671][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.565512][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.579757][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.589055][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.603817][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.638151][ T3328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.646477][ T3328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.675151][ T3328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.683953][ T3328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.692277][ T3330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.700585][ T3330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.717551][ T3330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.727245][ T3330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.740243][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.764761][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.782502][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.793163][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.824523][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.831635][ T2269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.841402][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.848516][ T2269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.864903][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.877663][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.884795][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.913901][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.921044][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.935138][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.945953][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.972964][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.980021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.990029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.997244][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.015480][ T3330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.027211][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.037336][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.062207][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.079002][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.086169][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.103463][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.110651][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.120328][ T3330] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.140644][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.147943][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.165395][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.172486][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.200441][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.230427][ T3317] veth0_vlan: entered promiscuous mode [ 29.259051][ T3328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.281860][ T3317] veth1_vlan: entered promiscuous mode [ 29.349073][ T3317] veth0_macvtap: entered promiscuous mode [ 29.356732][ T3317] veth1_macvtap: entered promiscuous mode [ 29.369736][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.383575][ T3327] veth0_vlan: entered promiscuous mode [ 29.389156][ T3321] veth0_vlan: entered promiscuous mode [ 29.397445][ T3330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.414218][ T3327] veth1_vlan: entered promiscuous mode [ 29.420829][ T3321] veth1_vlan: entered promiscuous mode [ 29.428103][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.453299][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.467720][ T3327] veth0_macvtap: entered promiscuous mode [ 29.479854][ T3321] veth0_macvtap: entered promiscuous mode [ 29.490992][ T3321] veth1_macvtap: entered promiscuous mode [ 29.498485][ T3327] veth1_macvtap: entered promiscuous mode [ 29.528800][ T3328] veth0_vlan: entered promiscuous mode [ 29.535312][ T170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.544475][ T170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.559093][ T170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.568103][ T170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.588849][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.597498][ T3328] veth1_vlan: entered promiscuous mode [ 29.608131][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 29.608144][ T28] audit: type=1400 audit(1774459734.997:90): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.XH152q/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.614469][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.646400][ T28] audit: type=1400 audit(1774459734.997:91): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.657974][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.675669][ T28] audit: type=1400 audit(1774459734.997:92): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.XH152q/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.702906][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.709000][ T28] audit: type=1400 audit(1774459734.997:93): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.739863][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.748523][ T28] audit: type=1400 audit(1774459734.997:94): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.XH152q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.775397][ T28] audit: type=1400 audit(1774459734.997:95): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.XH152q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.808762][ T3328] veth0_macvtap: entered promiscuous mode [ 29.819204][ T28] audit: type=1400 audit(1774459734.997:96): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.846355][ T28] audit: type=1400 audit(1774459735.037:97): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.871889][ T170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.891633][ T170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.905126][ T28] audit: type=1400 audit(1774459735.037:98): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=4077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.927557][ T28] audit: type=1400 audit(1774459735.257:99): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.990323][ T3328] veth1_macvtap: entered promiscuous mode [ 29.997847][ T170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.043624][ T3330] veth0_vlan: entered promiscuous mode [ 30.063765][ T3330] veth1_vlan: entered promiscuous mode [ 30.070298][ T170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.217387][ T3491] 9p: Bad value for 'source' [ 30.291697][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.031161][ T2353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.040046][ T2353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.049518][ T2353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.058643][ T2353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.283796][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.296650][ T170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.812540][ C0] hrtimer: interrupt took 36594 ns [ 31.860234][ T3494] loop3: detected capacity change from 0 to 1024 [ 31.870322][ T3494] ======================================================= [ 31.870322][ T3494] WARNING: The mand mount option has been deprecated and [ 31.870322][ T3494] and is ignored by this kernel. Remove the mand [ 31.870322][ T3494] option from the mount to silence this warning. [ 31.870322][ T3494] ======================================================= [ 31.916948][ T3494] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.982658][ T3494] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4: Invalid block bitmap block 0 in block_group 0 [ 31.996625][ T3494] loop3: lost filesystem error report for type 5 error -117 [ 31.999543][ T3494] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4: Failed to acquire dquot type 0 [ 32.007198][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 32.007314][ C1] EXT4-fs (loop3): initial error at time 1774459737: ext4_read_block_bitmap_nowait:483 [ 32.007476][ C1] EXT4-fs (loop3): last error at time 1774459737: ext4_read_block_bitmap_nowait:483 [ 32.046804][ T3494] loop3: lost filesystem error report for type 5 error -117 [ 32.054435][ T3494] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 32.077085][ T3494] loop3: lost filesystem error report for type 5 error -117 [ 32.080565][ T3494] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4: Invalid inode bitmap blk 0 in block_group 0 [ 32.101344][ T3494] loop3: lost filesystem error report for type 5 error -117 [ 32.123061][ T3494] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 32.139982][ T3494] loop3: lost filesystem error report for type 5 error -117 [ 32.144880][ T3494] EXT4-fs (loop3): 1 orphan inode deleted [ 32.164198][ T3494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.423367][ T3330] veth0_macvtap: entered promiscuous mode [ 32.434667][ T170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.451318][ T3330] veth1_macvtap: entered promiscuous mode [ 32.459305][ T170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.507735][ T3503] 9p: Bad value for 'source' [ 33.062880][ T2353] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 33.077351][ T170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.794641][ T3506] 9p: Bad value for 'source' [ 34.263676][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.115513][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.135316][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.442627][ T3494] syz.3.4 (3494) used greatest stack depth: 7688 bytes left [ 35.510352][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 35.510367][ T28] audit: type=1400 audit(1774459740.897:122): avc: denied { create } for pid=3516 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.870012][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.362178][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.372164][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.432416][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.465788][ T28] audit: type=1400 audit(1774459741.857:123): avc: denied { tracepoint } for pid=3543 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.700540][ T3549] loop3: detected capacity change from 0 to 1024 [ 36.772254][ T3549] EXT4-fs: inline encryption not supported [ 36.942993][ T3549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.281908][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.328648][ T3568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.386384][ T28] audit: type=1400 audit(1774459741.887:124): avc: denied { read } for pid=3543 comm="syz.2.8" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.410244][ T28] audit: type=1400 audit(1774459741.887:125): avc: denied { open } for pid=3543 comm="syz.2.8" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.433789][ T28] audit: type=1400 audit(1774459742.047:126): avc: denied { read } for pid=3543 comm="syz.2.8" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.435346][ T3568] wireguard0: entered promiscuous mode [ 37.456754][ T3572] loop3: detected capacity change from 0 to 128 [ 37.463561][ T3568] wireguard0: entered allmulticast mode [ 37.496185][ T3556] loop0: detected capacity change from 0 to 8192 [ 37.611605][ T28] audit: type=1400 audit(1774459742.047:127): avc: denied { open } for pid=3543 comm="syz.2.8" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.619228][ T3572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.652678][ T28] audit: type=1400 audit(1774459742.057:128): avc: denied { ioctl } for pid=3543 comm="syz.2.8" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.678210][ T3577] loop1: detected capacity change from 0 to 164 [ 37.692057][ T28] audit: type=1400 audit(1774459742.077:129): avc: denied { setopt } for pid=3543 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.697613][ T3550] loop0: p1 p2 p3 p4 [ 37.714060][ T28] audit: type=1400 audit(1774459742.097:130): avc: denied { bind } for pid=3543 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.747566][ T28] audit: type=1400 audit(1774459742.107:131): avc: denied { name_bind } for pid=3543 comm="syz.2.8" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 37.777784][ T3579] 9p: Bad value for 'source' [ 37.800889][ T3577] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 38.671460][ T3550] loop0: p1 start 17825536 is beyond EOD, truncated [ 38.678252][ T3550] loop0: p2 size 4294901964 extends beyond EOD, truncated [ 38.686401][ T3550] loop0: p3 start 458752 is beyond EOD, truncated [ 38.693065][ T3550] loop0: p4 size 8388352 extends beyond EOD, truncated [ 38.720978][ T3556] loop0: p1 p2 p3 p4 [ 38.748615][ T3556] loop0: p1 start 17825536 is beyond EOD, truncated [ 38.812779][ T3556] loop0: p2 size 4294901964 extends beyond EOD, truncated [ 38.865379][ T3556] loop0: p3 start 458752 is beyond EOD, truncated [ 38.923175][ T3556] loop0: p4 size 8388352 extends beyond EOD, truncated [ 39.099835][ T3599] loop3: detected capacity change from 0 to 512 [ 39.130776][ T3599] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.225407][ T3599] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.14: corrupted inode contents [ 39.237250][ T3599] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.237470][ T3599] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #3: comm syz.3.14: mark_inode_dirty error [ 39.246523][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 39.246544][ C1] EXT4-fs (loop3): initial error at time 1774459744: ext4_do_update_inode:5569: inode 3 [ 39.246572][ C1] EXT4-fs (loop3): last error at time 1774459744: ext4_do_update_inode:5569: inode 3 [ 39.310362][ T3599] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.394574][ T3599] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.14: corrupted inode contents [ 39.459020][ T3599] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.463000][ T3599] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.14: mark_inode_dirty error [ 39.495763][ T3599] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.505313][ T3599] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.14: Failed to acquire dquot type 0 [ 39.539554][ T3618] netlink: 144 bytes leftover after parsing attributes in process `syz.1.18'. [ 39.557125][ T3620] 9p: Bad value for 'source' [ 39.652880][ T3621] loop4: detected capacity change from 0 to 1024 [ 39.711271][ T3621] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 39.767297][ T3621] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.779067][ T3621] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 39.789175][ T3599] loop3: lost filesystem error report for type 5 error -117 [ 39.790049][ T3599] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.14: corrupted inode contents [ 39.832181][ T3621] JBD2: no valid journal superblock found [ 39.851859][ T3621] EXT4-fs (loop4): Could not load journal inode [ 39.876831][ T3599] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 39.877350][ T3599] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.14: mark_inode_dirty error [ 39.924041][ T3599] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 39.924499][ T3599] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.14: corrupted inode contents [ 39.947578][ T3599] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 39.948492][ T3599] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.14: mark_inode_dirty error [ 39.971360][ T3599] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 39.971848][ T3599] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.14: corrupted inode contents [ 39.993779][ T3599] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 39.994329][ T3599] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 40.013262][ T3599] loop3: lost filesystem error report for type 5 error -117 [ 40.013541][ T3599] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.14: corrupted inode contents [ 40.034030][ T3599] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.034519][ T3599] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.14: mark_inode_dirty error [ 40.057183][ T3599] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 40.066537][ T3599] loop3: lost filesystem error report for type 5 error -117 [ 40.067761][ T3599] EXT4-fs (loop3): 1 truncate cleaned up [ 40.082897][ T3599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.096263][ T3599] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.373160][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 40.391154][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 40.427206][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 40.438610][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 40.469651][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.561170][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 40.561185][ T28] audit: type=1400 audit(1774459745.947:182): avc: denied { setopt } for pid=3632 comm="syz.0.22" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.651134][ T28] audit: type=1400 audit(1774459745.987:183): avc: denied { connect } for pid=3632 comm="syz.0.22" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.722817][ T28] audit: type=1400 audit(1774459745.997:184): avc: denied { create } for pid=3643 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.773051][ T28] audit: type=1400 audit(1774459745.997:185): avc: denied { write } for pid=3643 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 41.120665][ T28] audit: type=1400 audit(1774459746.507:186): avc: denied { create } for pid=3678 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.121352][ T28] audit: type=1400 audit(1774459746.507:187): avc: denied { setopt } for pid=3678 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.160498][ T28] audit: type=1400 audit(1774459746.547:188): avc: denied { read } for pid=3678 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.244574][ T28] audit: type=1400 audit(1774459746.637:189): avc: denied { write } for pid=3678 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.288798][ T3687] loop3: detected capacity change from 0 to 1024 [ 41.290949][ T3687] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.290985][ T3687] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 41.292483][ T3687] EXT4-fs (loop3): invalid journal inode [ 41.292542][ T3687] EXT4-fs (loop3): can't get journal size [ 41.304040][ T3680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 41.326673][ T28] audit: type=1400 audit(1774459746.687:190): avc: denied { create } for pid=3678 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.326732][ T28] audit: type=1400 audit(1774459746.687:191): avc: denied { connect } for pid=3678 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.340706][ T3687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.350275][ T3687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25'. [ 42.064938][ T3687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25'. [ 42.240669][ T3687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25'. [ 42.323232][ T3739] loop4: detected capacity change from 0 to 256 [ 42.335868][ T3739] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.386030][ T3738] loop0: detected capacity change from 0 to 136 [ 42.386944][ T3738] ISOFS: Logical zone size(768) < hardware blocksize(1024) [ 42.408457][ T3743] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.458909][ T3744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 42.475255][ T3744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 42.490057][ T3744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 42.827464][ T3748] loop1: detected capacity change from 0 to 512 [ 42.856634][ T3748] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.31: inode has both inline data and extents flags [ 42.856714][ T3748] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.31: couldn't read orphan inode 15 (err -117) [ 42.856826][ T3748] loop1: lost filesystem error report for type 5 error -117 [ 42.857783][ T3748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.889555][ T3748] netlink: 'syz.1.31': attribute type 4 has an invalid length. [ 42.985254][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.002171][ T3752] loop1: detected capacity change from 0 to 512 [ 43.014869][ T3752] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 43.078167][ T3730] loop0: detected capacity change from 0 to 32768 [ 43.174833][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.417572][ T3760] lo speed is unknown, defaulting to 1000 [ 43.423760][ T3760] lo speed is unknown, defaulting to 1000 [ 43.430413][ T3760] lo speed is unknown, defaulting to 1000 [ 43.436789][ T3760] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.444675][ T3760] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 43.511893][ T3761] 9p: Bad value for 'source' [ 44.165694][ T3763] loop0: detected capacity change from 0 to 128 [ 45.183879][ T3763] FAT-fs (loop0): Directory bread(block 524322) failed [ 45.196731][ T3763] FAT-fs (loop0): Directory bread(block 524323) failed [ 45.204008][ T3763] FAT-fs (loop0): Directory bread(block 524324) failed [ 45.210927][ T3763] FAT-fs (loop0): Directory bread(block 524325) failed [ 45.401577][ T3765] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 45.446953][ T3765] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 45.465305][ T3763] FAT-fs (loop0): Directory bread(block 524326) failed [ 45.496524][ T3763] FAT-fs (loop0): Directory bread(block 524327) failed [ 45.512707][ T3763] FAT-fs (loop0): Directory bread(block 524328) failed [ 45.520602][ T3760] lo speed is unknown, defaulting to 1000 [ 45.526675][ T3760] lo speed is unknown, defaulting to 1000 [ 45.527697][ T3763] FAT-fs (loop0): Directory bread(block 524329) failed [ 45.532750][ T3760] lo speed is unknown, defaulting to 1000 [ 45.545304][ T3760] lo speed is unknown, defaulting to 1000 [ 45.551360][ T3760] lo speed is unknown, defaulting to 1000 [ 45.560830][ T3775] loop2: detected capacity change from 0 to 512 [ 45.577027][ T3756] batadv_slave_0: entered promiscuous mode [ 45.584425][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 45.585338][ T28] audit: type=1400 audit(1774459750.967:210): avc: denied { ioctl } for pid=3754 comm="syz.3.33" path="socket:[5376]" dev="sockfs" ino=5376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.632076][ T3775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.642648][ T3763] FAT-fs (loop0): FAT read failed (blocknr 128) [ 45.643082][ T3779] loop1: detected capacity change from 0 to 128 [ 45.655863][ T3780] FAT-fs (loop0): Directory bread(block 524322) failed [ 45.662960][ T3775] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 45.708604][ T3775] EXT4-fs error (device loop2): __ext4_fill_super:5563: inode #2: comm syz.2.38: iget: special inode unallocated [ 45.720820][ T3775] fserror_report: 2 callbacks suppressed [ 45.720831][ T3775] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 45.728256][ T3775] EXT4-fs (loop2): get root inode failed [ 45.732684][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 45.749386][ C0] EXT4-fs (loop2): last error at time 1774459751: __ext4_fill_super:5563: inode 2 [ 45.765382][ T3775] EXT4-fs (loop2): mount failed [ 45.797609][ T3754] batadv_slave_0: left promiscuous mode [ 45.813261][ T3794] netlink: 'syz.0.41': attribute type 2 has an invalid length. [ 45.820893][ T3794] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 45.828990][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 45.925498][ T3811] loop0: detected capacity change from 0 to 512 [ 45.947109][ T3811] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.43: inode has both inline data and extents flags [ 45.960689][ T3811] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.960797][ T3811] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.43: couldn't read orphan inode 15 (err -117) [ 45.970051][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 45.970080][ C0] EXT4-fs (loop0): initial error at time 1774459751: ext4_orphan_get:1391: inode 15 [ 45.970128][ C0] EXT4-fs (loop0): last error at time 1774459751: ext4_orphan_get:1391: inode 15 [ 46.010568][ T3818] Zero length message leads to an empty skb [ 46.031541][ T28] audit: type=1400 audit(1774459751.407:211): avc: denied { read write } for pid=3814 comm="syz.2.44" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.060611][ T28] audit: type=1400 audit(1774459751.407:212): avc: denied { open } for pid=3814 comm="syz.2.44" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.067444][ T3811] loop0: lost filesystem error report for type 5 error -117 [ 46.102666][ T3811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.198993][ T3832] loop3: detected capacity change from 0 to 1024 [ 46.214388][ T3832] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.253230][ T3832] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.42: Invalid block bitmap block 0 in block_group 0 [ 46.267139][ T3832] loop3: lost filesystem error report for type 5 error -117 [ 46.268646][ T28] audit: type=1400 audit(1774459751.517:213): avc: denied { write } for pid=3824 comm="syz.2.45" name="pfkey" dev="proc" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 46.275963][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 46.275980][ C1] EXT4-fs (loop3): initial error at time 1774459751: ext4_read_block_bitmap_nowait:483 [ 46.276014][ C1] EXT4-fs (loop3): last error at time 1774459751: ext4_read_block_bitmap_nowait:483 [ 46.331909][ T3832] Quota error (device loop3): write_blk: dquota write failed [ 46.340037][ T3832] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 46.350830][ T3832] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.42: Failed to acquire dquot type 0 [ 46.362190][ T3832] loop3: lost filesystem error report for type 5 error -117 [ 46.366746][ T3832] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.42: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.387931][ T3832] loop3: lost filesystem error report for type 5 error -117 [ 46.396322][ T3832] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.42: Invalid inode bitmap blk 0 in block_group 0 [ 46.416762][ T3832] loop3: lost filesystem error report for type 5 error -117 [ 46.645808][ T28] audit: type=1400 audit(1774459751.527:214): avc: denied { bpf } for pid=3805 comm="syz.3.42" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.686799][ T3856] loop2: detected capacity change from 0 to 1024 [ 46.834969][ T3856] EXT4-fs: inline encryption not supported [ 46.939562][ T3862] 9p: Bad value for 'source' [ 47.616680][ T3869] loop1: detected capacity change from 0 to 1024 [ 47.691388][ T28] audit: type=1400 audit(1774459751.527:215): avc: denied { perfmon } for pid=3805 comm="syz.3.42" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.714552][ T3869] EXT4-fs: inline encryption not supported [ 47.721975][ T55] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 47.722632][ T3832] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 47.740381][ T3832] loop3: lost filesystem error report for type 5 error -117 [ 48.593326][ T3856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.643024][ T3832] EXT4-fs (loop3): 1 orphan inode deleted [ 48.654940][ T3832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.688111][ T55] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 48.726394][ T3874] netlink: 'syz.0.43': attribute type 4 has an invalid length. [ 48.864846][ T3869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.908300][ T3869] FAULT_INJECTION: forcing a failure. [ 48.908300][ T3869] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.921498][ T3869] CPU: 1 UID: 0 PID: 3869 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT(full) [ 48.921520][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 48.921534][ T3869] Call Trace: [ 48.921540][ T3869] [ 48.921546][ T3869] __dump_stack+0x1d/0x30 [ 48.921624][ T3869] dump_stack_lvl+0x95/0xd0 [ 48.921641][ T3869] dump_stack+0x15/0x1b [ 48.921660][ T3869] should_fail_ex+0x263/0x280 [ 48.921752][ T3869] should_fail+0xb/0x20 [ 48.921772][ T3869] should_fail_usercopy+0x1a/0x20 [ 48.921798][ T3869] _copy_from_user+0x1c/0xb0 [ 48.921829][ T3869] ext4_ioctl+0x188b/0x31b0 [ 48.921932][ T3869] ? ioctl_has_perm+0x27e/0x2d0 [ 48.921953][ T3869] ? do_vfs_ioctl+0x84f/0xe70 [ 48.921970][ T3869] ? selinux_file_ioctl+0x5f7/0xcb0 [ 48.922020][ T3869] ? kmem_cache_free+0xc8/0x380 [ 48.922070][ T3869] ? __pfx_ext4_ioctl+0x10/0x10 [ 48.922166][ T3869] __se_sys_ioctl+0xce/0x140 [ 48.922184][ T3869] __x64_sys_ioctl+0x43/0x50 [ 48.922197][ T3869] x64_sys_call+0x1563/0x3020 [ 48.922216][ T3869] do_syscall_64+0x12c/0x370 [ 48.922309][ T3869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.922326][ T3869] RIP: 0033:0x7fdf477ac799 [ 48.922344][ T3869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.922358][ T3869] RSP: 002b:00007fdf46207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.922377][ T3869] RAX: ffffffffffffffda RBX: 00007fdf47a25fa0 RCX: 00007fdf477ac799 [ 48.922390][ T3869] RDX: 0000000000000000 RSI: 00000000c0185879 RDI: 0000000000000005 [ 48.922455][ T3869] RBP: 00007fdf46207090 R08: 0000000000000000 R09: 0000000000000000 [ 48.922465][ T3869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.922474][ T3869] R13: 00007fdf47a26038 R14: 00007fdf47a25fa0 R15: 00007ffec9306308 [ 48.922542][ T3869] [ 49.184225][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.218214][ T3879] loop4: detected capacity change from 0 to 1024 [ 49.241438][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.271116][ T3879] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 49.323253][ T3879] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.336353][ T3879] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 49.336644][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.346063][ T3879] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.50: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 49.383962][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.386263][ T3879] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 49.402532][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 49.418040][ C0] EXT4-fs (loop4): initial error at time 1774459754: ext4_ext_check_inode:521: inode 2 [ 49.427737][ C0] EXT4-fs (loop4): last error at time 1774459754: ext4_ext_check_inode:521: inode 2 [ 49.438133][ T3893] tipc: Started in network mode [ 49.438183][ T3879] EXT4-fs (loop4): no journal found [ 49.477424][ T3897] loop1: detected capacity change from 0 to 256 [ 49.480648][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 49.494902][ T3897] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.496482][ T3893] tipc: Node identity 5696573094a3, cluster identity 4711 [ 49.516318][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 49.525307][ T3893] tipc: Enabled bearer , priority 0 [ 49.537600][ T3899] loop3: detected capacity change from 0 to 1024 [ 49.548449][ T3893] syzkaller0: entered promiscuous mode [ 49.561564][ T3899] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.577160][ T3893] syzkaller0: entered allmulticast mode [ 49.585351][ T3902] Cannot find set identified by id 0 to match [ 49.589520][ T3899] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 49.610009][ T3899] EXT4-fs (loop3): invalid journal inode [ 49.615824][ T3899] EXT4-fs (loop3): can't get journal size [ 49.623201][ T3899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.646364][ T3893] tipc: Resetting bearer [ 49.683852][ T3892] tipc: Resetting bearer [ 49.693500][ T3892] tipc: Disabling bearer [ 49.704398][ T3899] netlink: 80 bytes leftover after parsing attributes in process `syz.3.54'. [ 49.715074][ T3899] netlink: 80 bytes leftover after parsing attributes in process `syz.3.54'. [ 49.776929][ T3900] siw: device registration error -23 [ 49.826850][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.842024][ T3909] batadv_slave_0: entered promiscuous mode [ 49.875325][ T3910] loop4: detected capacity change from 0 to 512 [ 49.908415][ T3910] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.929287][ T3914] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 49.993688][ T3910] Quota error (device loop4): v2_read_file_info: Block with free entry 5 out of range (1, 5). [ 50.029421][ T3910] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.107732][ T3924] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 50.123300][ T3910] EXT4-fs (loop4): mount failed [ 50.253884][ T3885] batadv_slave_0: left promiscuous mode [ 50.344868][ T3932] netlink: 'syz.0.66': attribute type 8 has an invalid length. [ 50.385048][ T3935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 50.476338][ T3939] netlink: 80 bytes leftover after parsing attributes in process `syz.1.69'. [ 50.523337][ T3939] netlink: 80 bytes leftover after parsing attributes in process `syz.1.69'. [ 50.532927][ T3944] loop3: detected capacity change from 0 to 512 [ 50.976538][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 50.976554][ T28] audit: type=1400 audit(1774459756.367:220): avc: denied { create } for pid=3947 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.048110][ T28] audit: type=1400 audit(1774459756.397:221): avc: denied { bind } for pid=3947 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.097052][ T28] audit: type=1400 audit(1774459756.397:222): avc: denied { getopt } for pid=3947 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.138101][ T28] audit: type=1400 audit(1774459756.477:223): avc: denied { create } for pid=3952 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.180815][ T28] audit: type=1400 audit(1774459756.477:224): avc: denied { connect } for pid=3952 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.204988][ T3944] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.244704][ T3958] loop1: detected capacity change from 0 to 128 [ 51.256701][ T28] audit: type=1400 audit(1774459756.477:225): avc: denied { read } for pid=3952 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.277637][ T3944] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 51.298904][ T3963] loop0: detected capacity change from 0 to 1024 [ 51.305765][ T3963] EXT4-fs: test_dummy_encryption option not supported [ 51.321338][ T3944] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.71: inode #15: comm syz.3.71: iget: illegal inode # [ 51.334027][ T3944] loop3: lost filesystem error report for type 5 error -117 [ 51.334841][ T3944] EXT4-fs (loop3): Remounting filesystem read-only [ 51.348886][ T28] audit: type=1400 audit(1774459756.527:226): avc: denied { write } for pid=3952 comm="syz.2.74" path="socket:[5510]" dev="sockfs" ino=5510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.348892][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 51.348911][ C1] EXT4-fs (loop3): initial error at time 1774459756: ext4_orphan_get:1391 [ 51.348922][ T28] audit: type=1400 audit(1774459756.607:227): avc: denied { ioctl } for pid=3952 comm="syz.2.74" path="socket:[5525]" dev="sockfs" ino=5525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.348940][ C1] [ 51.348942][ T28] audit: type=1400 audit(1774459756.607:228): avc: denied { bind } for pid=3952 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.348947][ C1] EXT4-fs (loop3): last error at time 1774459756: ext4_orphan_get:1391 [ 51.419651][ T28] audit: type=1400 audit(1774459756.807:229): avc: denied { create } for pid=3962 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.433234][ T3944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.491364][ T3958] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.496794][ T3963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 51.504678][ T3958] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.553971][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.779097][ T3958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'. [ 51.843439][ T3974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 51.922287][ T3976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.81'. [ 51.976716][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.259311][ T3981] lo speed is unknown, defaulting to 1000 [ 52.755584][ T3990] loop2: detected capacity change from 0 to 764 [ 52.813064][ T3990] rock: directory entry would overflow storage [ 52.834990][ T3986] lo speed is unknown, defaulting to 1000 [ 52.840905][ T3990] rock: sig=0x4654, size=5, remaining=4 [ 53.446351][ T4019] 9p: Bad value for 'source' [ 54.623834][ T4021] 9p: Bad value for 'source' [ 54.804467][ T4021] debugfs: 'ttyS3' already exists in 'caif_serial' [ 56.315303][ T4022] loop1: detected capacity change from 0 to 512 [ 56.323790][ T4025] loop4: detected capacity change from 0 to 8192 [ 56.537808][ T3302] loop4: p1 p2 p3 p4 [ 56.541853][ T3302] loop4: p1 start 17825536 is beyond EOD, truncated [ 56.557467][ T4022] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 56.571451][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 56.583550][ T4030] bond_slave_0: entered promiscuous mode [ 56.589235][ T4030] bond_slave_1: entered promiscuous mode [ 56.595218][ T3302] loop4: p2 size 4294901964 extends beyond EOD, truncated [ 56.610903][ T3302] loop4: p3 start 458752 is beyond EOD, truncated [ 56.625397][ T3302] loop4: p4 size 8388352 extends beyond EOD, truncated [ 56.632897][ T4030] vlan2: entered promiscuous mode [ 56.641825][ T4025] loop4: p1 p2 p3 p4 [ 56.650074][ T4025] loop4: p1 start 17825536 is beyond EOD, truncated [ 56.660154][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 56.660167][ T28] audit: type=1400 audit(2000000004.759:249): avc: denied { name_bind } for pid=4037 comm="syz.2.99" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.672553][ T4030] bond0: entered promiscuous mode [ 56.692870][ T4025] loop4: p2 size 4294901964 extends beyond EOD, truncated [ 56.705408][ T4025] loop4: p3 start 458752 is beyond EOD, truncated [ 56.710383][ T28] audit: type=1400 audit(2000000004.809:250): avc: denied { create } for pid=4035 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.720239][ T4025] loop4: p4 size 8388352 extends beyond EOD, truncated [ 56.766970][ T28] audit: type=1400 audit(2000000004.869:251): avc: denied { relabelfrom } for pid=4039 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 56.794273][ T4036] syzkaller0: entered promiscuous mode [ 56.799967][ T4036] syzkaller0: entered allmulticast mode [ 56.835240][ T28] audit: type=1400 audit(2000000004.869:252): avc: denied { relabelto } for pid=4039 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 56.874798][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 56.889622][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 56.891442][ T4059] netlink: 'syz.3.104': attribute type 2 has an invalid length. [ 56.908925][ T28] audit: type=1400 audit(2000000004.989:253): avc: denied { shutdown } for pid=4058 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.941793][ T4059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'. [ 56.953019][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 56.971595][ T28] audit: type=1400 audit(2000000004.989:254): avc: denied { create } for pid=4058 comm="syz.3.104" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.974319][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 57.006338][ T4053] loop1: detected capacity change from 0 to 1024 [ 57.033086][ T4067] bridge1: entered promiscuous mode [ 57.034619][ T4053] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 57.038293][ T4067] bridge1: entered allmulticast mode [ 57.052067][ T4064] loop4: detected capacity change from 0 to 4096 [ 57.086496][ T28] audit: type=1400 audit(2000000004.989:255): avc: denied { read } for pid=4058 comm="syz.3.104" name="file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.120012][ T4064] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.162540][ T28] audit: type=1400 audit(2000000004.989:256): avc: denied { watch } for pid=4058 comm="syz.3.104" path="/17/file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.194969][ T28] audit: type=1400 audit(2000000005.039:257): avc: denied { setattr } for pid=4058 comm="syz.3.104" name="file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.221168][ T4085] xt_TCPMSS: Only works on TCP SYN packets [ 57.228567][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.243152][ T28] audit: type=1400 audit(2000000005.059:258): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.273298][ T4086] 9p: Bad value for 'source' [ 57.383199][ T4053] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.442352][ T4085] loop3: detected capacity change from 0 to 512 [ 57.485096][ T4053] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 57.556378][ T4092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 57.587668][ T4085] loop3: detected capacity change from 0 to 1024 [ 57.667082][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop3 [ 57.681386][ T4053] JBD2: no valid journal superblock found [ 57.689856][ T4092] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.762291][ T4053] EXT4-fs (loop1): Could not load journal inode [ 57.817253][ T4092] bridge_slave_1 (unregistering): left allmulticast mode [ 57.932665][ T4092] bridge_slave_1 (unregistering): left promiscuous mode [ 57.972582][ T4092] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.993475][ T4104] loop3: detected capacity change from 0 to 512 [ 58.000129][ T4104] EXT4-fs: Ignoring removed bh option [ 58.033522][ T4104] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 58.055367][ T4104] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.067800][ T4104] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.093342][ T4104] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 58.142581][ T4104] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 58.169675][ T4104] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.115: Invalid block bitmap block 0 in block_group 0 [ 58.247072][ T4104] loop3: lost filesystem error report for type 5 error -117 [ 58.247253][ T4104] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 58.254620][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 58.254634][ C1] EXT4-fs (loop3): last error at time 2000000006: ext4_read_block_bitmap_nowait:483 [ 58.294952][ T4114] loop0: detected capacity change from 0 to 1024 [ 58.313279][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.356527][ T4114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.378805][ T4114] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.390311][ T4104] loop3: lost filesystem error report for type 5 error -117 [ 58.390569][ T4104] EXT4-fs (loop3): 1 orphan inode deleted [ 58.424611][ T4104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.468348][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.669984][ T4122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'. [ 58.680593][ T4122] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.704676][ T4122] bridge_slave_0: left allmulticast mode [ 58.710459][ T4122] bridge_slave_0: left promiscuous mode [ 58.716552][ T4122] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.732155][ T4121] loop3: detected capacity change from 0 to 1024 [ 58.741808][ T4122] bridge_slave_1: left allmulticast mode [ 58.763254][ T4121] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 58.776783][ T4121] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.788959][ T4121] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 58.792639][ T4122] bridge_slave_1: left promiscuous mode [ 58.804307][ T4121] JBD2: no valid journal superblock found [ 58.824720][ T4121] EXT4-fs (loop3): Could not load journal inode [ 58.834728][ T4122] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.844774][ T4122] bond0: (slave bond_slave_0): Releasing backup interface [ 58.850169][ T4129] netlink: 196 bytes leftover after parsing attributes in process `syz.2.121'. [ 58.912821][ T4122] bond0: (slave bond_slave_1): Releasing backup interface [ 58.940529][ T4122] team0: Port device team_slave_0 removed [ 58.958605][ T4122] team0: Port device team_slave_1 removed [ 58.971539][ T4122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.980041][ T4122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.992293][ T4142] loop4: detected capacity change from 0 to 128 [ 59.007620][ T4122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.020812][ T4122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.031147][ T4122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.064018][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.087604][ T4140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.096609][ T4140] bond1: entered promiscuous mode [ 59.104001][ T4140] bond0: (slave bond1): Enslaving as an active interface with an up link [ 59.140217][ T4148] veth0: entered promiscuous mode [ 59.147432][ T4159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.156880][ T4148] vlan2: entered promiscuous mode [ 59.196625][ T4159] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.304389][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 59.323566][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 59.358435][ T4170] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.395407][ T4175] tipc: Started in network mode [ 59.401742][ T4170] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 59.404714][ T4175] tipc: Node identity da6f63bb9639, cluster identity 4711 [ 59.434641][ T4170] EXT4-fs (loop1): invalid journal inode [ 59.436845][ T4175] tipc: Enabled bearer , priority 0 [ 59.445558][ T4170] EXT4-fs (loop1): can't get journal size [ 59.454723][ T4178] syzkaller0: entered promiscuous mode [ 59.461091][ T4178] syzkaller0: entered allmulticast mode [ 59.470073][ T4170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.480296][ T4177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.136'. [ 59.515647][ T4170] netlink: 80 bytes leftover after parsing attributes in process `syz.1.133'. [ 59.527142][ T4170] netlink: 80 bytes leftover after parsing attributes in process `syz.1.133'. [ 59.546527][ T4175] tipc: Resetting bearer [ 59.567496][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.582751][ T4171] tipc: Resetting bearer [ 59.614693][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.638403][ T4171] tipc: Disabling bearer [ 59.801421][ T4192] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.138: corrupted inode contents [ 59.951737][ T4192] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.952520][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 59.968007][ C1] EXT4-fs (loop1): initial error at time 2000000008: ext4_do_update_inode:5569: inode 3 [ 59.977763][ C1] EXT4-fs (loop1): last error at time 2000000008: ext4_do_update_inode:5569: inode 3 [ 59.987391][ T4192] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #3: comm syz.1.138: mark_inode_dirty error [ 60.004181][ T4192] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.004555][ T4192] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #3: comm syz.1.138: corrupted inode contents [ 60.028649][ T4192] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.028991][ T4192] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.138: mark_inode_dirty error [ 60.063923][ T4192] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.074226][ T4192] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.138: Failed to acquire dquot type 0 [ 60.113295][ T4192] loop1: lost filesystem error report for type 5 error -117 [ 60.113908][ T4192] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.138: corrupted inode contents [ 60.138211][ T4192] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.142476][ T4192] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.138: mark_inode_dirty error [ 60.149487][ T4215] netlink: 'syz.4.149': attribute type 8 has an invalid length. [ 60.179943][ T4192] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.180199][ T4192] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.138: corrupted inode contents [ 60.206043][ T4192] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.206224][ T4219] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.239550][ T4219] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 60.259769][ T4219] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.151: inode #15: comm syz.2.151: iget: illegal inode # [ 60.272303][ T4219] loop2: lost filesystem error report for type 5 error -117 [ 60.272489][ T4219] EXT4-fs (loop2): Remounting filesystem read-only [ 60.272518][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 60.292712][ C0] EXT4-fs (loop2): initial error at time 2000000008: ext4_orphan_get:1391 [ 60.301213][ C0] EXT4-fs (loop2): last error at time 2000000008: ext4_orphan_get:1391 [ 60.310120][ T4219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.323047][ T4192] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.138: mark_inode_dirty error [ 60.362063][ T4192] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.362634][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.362639][ T4192] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.138: corrupted inode contents [ 60.392643][ T4192] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.399877][ T4192] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 60.434792][ T4192] loop1: lost filesystem error report for type 5 error -117 [ 60.435589][ T4192] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.138: corrupted inode contents [ 60.456424][ T4192] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 60.456623][ T4192] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.138: mark_inode_dirty error [ 60.477970][ T4192] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 60.487000][ T4192] loop1: lost filesystem error report for type 5 error -117 [ 60.487449][ T4192] EXT4-fs (loop1): 1 truncate cleaned up [ 60.507373][ T4192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.520053][ T4192] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.533453][ T4229] netlink: 'syz.2.155': attribute type 4 has an invalid length. [ 60.555290][ T4229] netlink: 'syz.2.155': attribute type 4 has an invalid length. [ 60.760753][ T4243] batadv0: entered promiscuous mode [ 60.766145][ T4243] macvtap1: entered promiscuous mode [ 60.771543][ T4243] macvtap1: entered allmulticast mode [ 60.777186][ T4243] batadv0: entered allmulticast mode [ 60.783591][ T4243] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 60.801068][ T4243] batadv0: left allmulticast mode [ 60.820677][ T4243] batadv0: left promiscuous mode [ 60.955098][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.960888][ T4261] EXT4-fs: Ignoring removed bh option [ 60.973364][ T4261] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 60.986594][ T4261] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 60.997324][ T4261] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.012447][ T4261] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.167: Failed to acquire dquot type 1 [ 61.027693][ T4266] capability: warning: `syz.1.169' uses 32-bit capabilities (legacy support in use) [ 61.038281][ T4261] loop4: lost filesystem error report for type 5 error -5 [ 61.042537][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 61.056117][ C0] EXT4-fs (loop4): last error at time 2000000009: ext4_acquire_dquot:7001 [ 61.066004][ T4261] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.167: Invalid block bitmap block 0 in block_group 0 [ 61.086825][ T4261] loop4: lost filesystem error report for type 5 error -117 [ 61.087361][ T4268] tipc: Started in network mode [ 61.100360][ T4261] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.167: Invalid block bitmap block 0 in block_group 0 [ 61.114140][ T4268] tipc: Node identity 7a6bb711176c, cluster identity 4711 [ 61.121473][ T4268] tipc: Enabled bearer , priority 0 [ 61.134151][ T4261] loop4: lost filesystem error report for type 5 error -117 [ 61.134637][ T4261] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.167: Invalid block bitmap block 0 in block_group 0 [ 61.155929][ T4271] syzkaller0: entered promiscuous mode [ 61.161426][ T4271] syzkaller0: entered allmulticast mode [ 61.167170][ T4261] loop4: lost filesystem error report for type 5 error -117 [ 61.167538][ T4261] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.167: Failed to acquire dquot type 1 [ 61.225572][ T4261] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.167: Failed to acquire dquot type 1 [ 61.238822][ T4268] tipc: Resetting bearer [ 61.245405][ T4267] tipc: Resetting bearer [ 61.252458][ T4261] EXT4-fs (loop4): 1 orphan inode deleted [ 61.252640][ T4267] tipc: Disabling bearer [ 61.263806][ T4261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.289644][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.402263][ T4285] netlink: 'syz.3.177': attribute type 21 has an invalid length. [ 61.481445][ T4297] ipip0: entered promiscuous mode [ 61.497159][ T4297] ipip0: entered allmulticast mode [ 61.681620][ T4302] netlink: 'syz.1.183': attribute type 21 has an invalid length. [ 61.777383][ T4307] FAULT_INJECTION: forcing a failure. [ 61.777383][ T4307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.863778][ T4307] CPU: 1 UID: 0 PID: 4307 Comm: syz.2.185 Not tainted syzkaller #0 PREEMPT(full) [ 61.863819][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.863828][ T4307] Call Trace: [ 61.863833][ T4307] [ 61.863840][ T4307] __dump_stack+0x1d/0x30 [ 61.863864][ T4307] dump_stack_lvl+0x95/0xd0 [ 61.863882][ T4307] dump_stack+0x15/0x1b [ 61.863899][ T4307] should_fail_ex+0x263/0x280 [ 61.863999][ T4307] should_fail+0xb/0x20 [ 61.864157][ T4307] should_fail_usercopy+0x1a/0x20 [ 61.864183][ T4307] _copy_to_user+0x20/0xa0 [ 61.864216][ T4307] simple_read_from_buffer+0xb5/0x130 [ 61.864304][ T4307] proc_fail_nth_read+0x10e/0x150 [ 61.864331][ T4307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.864351][ T4307] vfs_read+0x1ab/0x7f0 [ 61.864402][ T4307] ? __rcu_read_unlock+0x4e/0x70 [ 61.864423][ T4307] ? __fget_files+0x184/0x1c0 [ 61.864446][ T4307] ? mutex_lock+0x57/0x90 [ 61.864471][ T4307] ksys_read+0xdc/0x1a0 [ 61.864487][ T4307] __x64_sys_read+0x40/0x50 [ 61.864501][ T4307] x64_sys_call+0x2886/0x3020 [ 61.864562][ T4307] do_syscall_64+0x12c/0x370 [ 61.864598][ T4307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.864616][ T4307] RIP: 0033:0x7fe6b54ccfce [ 61.864632][ T4307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.864648][ T4307] RSP: 002b:00007fe6b3f66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.864736][ T4307] RAX: ffffffffffffffda RBX: 00007fe6b3f676c0 RCX: 00007fe6b54ccfce [ 61.864746][ T4307] RDX: 000000000000000f RSI: 00007fe6b3f670a0 RDI: 0000000000000005 [ 61.864756][ T4307] RBP: 00007fe6b3f67090 R08: 0000000000000000 R09: 0000000000000000 [ 61.864767][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.864778][ T4307] R13: 00007fe6b5786038 R14: 00007fe6b5785fa0 R15: 00007ffef7dd3838 [ 61.864795][ T4307] [ 62.163180][ T4311] set_capacity_and_notify: 5 callbacks suppressed [ 62.163218][ T4311] loop3: detected capacity change from 0 to 512 [ 62.255736][ T4316] tipc: Enabled bearer , priority 0 [ 62.262911][ T4316] syzkaller0: entered promiscuous mode [ 62.268412][ T4316] syzkaller0: entered allmulticast mode [ 62.275444][ T4311] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.187: inode has both inline data and extents flags [ 62.289131][ T4311] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.187: couldn't read orphan inode 15 (err -117) [ 62.301078][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 62.301093][ C1] EXT4-fs (loop3): initial error at time 2000000010: ext4_orphan_get:1391: inode 15 [ 62.301138][ C1] EXT4-fs (loop3): last error at time 2000000010: ext4_orphan_get:1391: inode 15 [ 62.332653][ T4316] tipc: Resetting bearer [ 62.339481][ T4315] tipc: Resetting bearer [ 62.346999][ T4315] tipc: Disabling bearer [ 62.354498][ T4311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.369806][ T4311] netlink: 'syz.3.187': attribute type 4 has an invalid length. [ 62.381148][ T23] lo speed is unknown, defaulting to 1000 [ 62.386940][ T23] syz0: Port: 1 Link DOWN [ 62.424549][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.528329][ T4331] __nla_validate_parse: 5 callbacks suppressed [ 62.528349][ T4331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 62.567946][ T4332] loop4: detected capacity change from 0 to 1024 [ 62.595074][ T4332] EXT4-fs: inline encryption not supported [ 62.634040][ T4332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.654158][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 62.694785][ T4334] bridge3: port 1(veth5) entered blocking state [ 62.701294][ T4334] bridge3: port 1(veth5) entered disabled state [ 62.714143][ T4334] veth5: entered allmulticast mode [ 62.714766][ T4334] veth5: entered promiscuous mode [ 62.724962][ T4334] bridge3: port 2(veth0_to_bond) entered blocking state [ 62.725004][ T4334] bridge3: port 2(veth0_to_bond) entered disabled state [ 62.725084][ T4334] veth0_to_bond: entered allmulticast mode [ 62.725630][ T4334] veth0_to_bond: entered promiscuous mode [ 62.744384][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.772221][ T4337] mmap: syz.2.189 (4337) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.851178][ T4343] loop3: detected capacity change from 0 to 128 [ 62.887588][ T50] kworker/u8:3: attempt to access beyond end of device [ 62.887588][ T50] loop3: rw=1, sector=145, nr_sectors = 6 limit=128 [ 62.901021][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 62.903796][ T4345] vlan2: entered promiscuous mode [ 62.922632][ T4346] unsupported nla_type 210 [ 62.937547][ T4346] syzkaller1: entered promiscuous mode [ 62.937618][ T4346] syzkaller1: entered allmulticast mode [ 63.006763][ T4350] loop3: detected capacity change from 0 to 512 [ 63.036564][ T4350] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.050698][ T4350] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 63.072153][ T4350] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.201: inode #15: comm syz.3.201: iget: illegal inode # [ 63.085110][ T4350] EXT4-fs (loop3): Remounting filesystem read-only [ 63.091944][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 63.091957][ T28] audit: type=1400 audit(2000000011.189:298): avc: denied { getopt } for pid=4351 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.092365][ T4350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.100331][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 63.140764][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 63.151965][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.176590][ T28] audit: type=1400 audit(2000000011.279:299): avc: denied { ioctl } for pid=4359 comm="syz.3.204" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.183358][ T4358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.209331][ T4353] bridge_slave_1: left allmulticast mode [ 63.215254][ T4353] bridge_slave_1: left promiscuous mode [ 63.221095][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.299587][ T4353] bridge_slave_0: left allmulticast mode [ 63.306181][ T4353] bridge_slave_0: left promiscuous mode [ 63.312039][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.348908][ T4380] loop2: detected capacity change from 0 to 512 [ 63.358668][ T4380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.384713][ T4380] EXT4-fs (loop2): 1 truncate cleaned up [ 63.391547][ T4380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.414574][ T4380] xt_cgroup: xt_cgroup: no path or classid specified [ 63.442405][ T28] audit: type=1400 audit(2000000011.539:300): avc: denied { add_name } for pid=4379 comm="syz.2.211" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.463496][ T28] audit: type=1400 audit(2000000011.539:301): avc: denied { map } for pid=4379 comm="syz.2.211" path="/45/file2/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.486806][ T28] audit: type=1400 audit(2000000011.539:302): avc: denied { execute } for pid=4379 comm="syz.2.211" path="/45/file2/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.517374][ T4388] loop0: detected capacity change from 0 to 512 [ 63.524334][ T4388] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.574603][ T28] audit: type=1326 audit(2000000011.679:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe8dec799 code=0x7ffc0000 [ 63.598929][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.599775][ T28] audit: type=1326 audit(2000000011.679:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe8dec799 code=0x7ffc0000 [ 63.631628][ T28] audit: type=1326 audit(2000000011.699:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe8dec799 code=0x7ffc0000 [ 63.656485][ T28] audit: type=1326 audit(2000000011.699:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe8dec799 code=0x7ffc0000 [ 63.679904][ T28] audit: type=1326 audit(2000000011.709:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7effe8dec799 code=0x7ffc0000 [ 63.700118][ T4393] loop3: detected capacity change from 0 to 512 [ 63.719826][ T4393] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.736766][ T4393] EXT4-fs (loop3): 1 truncate cleaned up [ 63.749942][ T4409] hsr0: entered promiscuous mode [ 63.755355][ T4409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 63.769456][ T4393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.782792][ T4409] hsr_slave_0: left promiscuous mode [ 63.792972][ T4409] hsr_slave_1: left promiscuous mode [ 63.809577][ T4409] hsr0 (unregistering): left promiscuous mode [ 63.883394][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.987953][ T4435] loop1: detected capacity change from 0 to 1024 [ 64.007851][ T4435] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.019274][ T4435] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 64.082325][ T4435] EXT4-fs (loop1): invalid journal inode [ 64.088137][ T4435] EXT4-fs (loop1): can't get journal size [ 64.121616][ T4435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.139808][ T4442] loop3: detected capacity change from 0 to 1024 [ 64.158764][ T4440] loop0: detected capacity change from 0 to 512 [ 64.183474][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.216584][ T4442] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 64.228698][ T4440] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.235: inode has both inline data and extents flags [ 64.269211][ T4442] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.291811][ T4440] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.235: couldn't read orphan inode 15 (err -117) [ 64.304071][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 64.304087][ C0] EXT4-fs (loop0): initial error at time 2000000012: ext4_orphan_get:1391: inode 15 [ 64.304109][ C0] EXT4-fs (loop0): last error at time 2000000012: ext4_orphan_get:1391: inode 15 [ 64.330835][ T4440] fserror_report: 4 callbacks suppressed [ 64.330856][ T4440] loop0: lost filesystem error report for type 5 error -117 [ 64.337533][ T4442] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 64.358431][ T4442] JBD2: no valid journal superblock found [ 64.364801][ T4442] EXT4-fs (loop3): Could not load journal inode [ 64.364913][ T4450] loop1: p3 < > p4 < > [ 64.376180][ T4450] loop1: partition table partially beyond EOD, truncated [ 64.383968][ T4450] loop1: p3 start 4284289 is beyond EOD, truncated [ 64.418119][ T4440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.482949][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 64.543127][ T4456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.240'. [ 64.561826][ T4458] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.241'. [ 64.604105][ T4458] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.241'. [ 64.614287][ T4458] netlink: 396 bytes leftover after parsing attributes in process `syz.3.241'. [ 64.691575][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.708581][ T4460] EXT4-fs: inline encryption not supported [ 64.744346][ T4460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.873146][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.927217][ T4466] veth2: entered allmulticast mode [ 65.033278][ T4475] netlink: 'syz.1.247': attribute type 3 has an invalid length. [ 65.074029][ T4484] EXT4-fs: inline encryption not supported [ 65.090837][ T4475] geneve2: entered promiscuous mode [ 65.104270][ T1900] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.121163][ T1900] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.141768][ T1900] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.153734][ T1900] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.164063][ T4484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.187160][ T4484] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.209977][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.244112][ T4491] FAT-fs (loop4): Directory bread(block 64) failed [ 65.244135][ T4491] FAT-fs (loop4): Directory bread(block 65) failed [ 65.244164][ T4491] FAT-fs (loop4): Directory bread(block 66) failed [ 65.244177][ T4491] FAT-fs (loop4): Directory bread(block 67) failed [ 65.244196][ T4491] FAT-fs (loop4): Directory bread(block 68) failed [ 65.244209][ T4491] FAT-fs (loop4): Directory bread(block 69) failed [ 65.244226][ T4491] FAT-fs (loop4): Directory bread(block 70) failed [ 65.244314][ T4491] FAT-fs (loop4): Directory bread(block 71) failed [ 65.244334][ T4491] FAT-fs (loop4): Directory bread(block 72) failed [ 65.244348][ T4491] FAT-fs (loop4): Directory bread(block 73) failed [ 65.299302][ T4502] EXT4-fs: inline encryption not supported [ 65.354425][ T4502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.372771][ T4507] tipc: Enabled bearer , priority 0 [ 65.379753][ T4507] syzkaller0: entered promiscuous mode [ 65.385557][ T4507] syzkaller0: entered allmulticast mode [ 65.392107][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.404564][ T4507] tipc: Resetting bearer [ 65.410965][ T4506] tipc: Resetting bearer [ 65.419299][ T4506] tipc: Disabling bearer [ 65.720617][ T4530] netlink: 'syz.1.267': attribute type 39 has an invalid length. [ 65.783125][ T4532] EXT4-fs: inline encryption not supported [ 65.794272][ T4532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.810486][ T4534] veth0: entered promiscuous mode [ 65.815597][ T4534] vlan2: entered promiscuous mode [ 65.865478][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.977607][ T4545] EXT4-fs: inline encryption not supported [ 66.029524][ T4548] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.040986][ T4548] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 66.139260][ T4548] EXT4-fs (loop1): invalid journal inode [ 66.145069][ T4548] EXT4-fs (loop1): can't get journal size [ 66.170865][ T4548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.198289][ T4555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.212040][ T4555] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.212366][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.290276][ T4559] 9p: Bad value for 'source' [ 66.380451][ T4545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.629838][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.076595][ T4571] Cannot find set identified by id 0 to match [ 67.357667][ T4585] set_capacity_and_notify: 10 callbacks suppressed [ 67.357683][ T4585] loop1: detected capacity change from 0 to 512 [ 67.385771][ T4585] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.439304][ T4585] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 67.458250][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.470089][ T4585] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.285: inode #15: comm syz.1.285: iget: illegal inode # [ 67.502725][ T4585] loop1: lost filesystem error report for type 5 error -117 [ 67.502880][ T4585] EXT4-fs (loop1): Remounting filesystem read-only [ 67.516775][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 67.516798][ C0] EXT4-fs (loop1): initial error at time 2000000015: ext4_orphan_get:1391 [ 67.516823][ C0] EXT4-fs (loop1): last error at time 2000000015: ext4_orphan_get:1391 [ 67.582274][ T4590] loop0: detected capacity change from 0 to 128 [ 67.662959][ T4585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.701032][ T4599] loop3: detected capacity change from 0 to 512 [ 67.728017][ T4602] __nla_validate_parse: 11 callbacks suppressed [ 67.728034][ T4602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 67.775590][ T4599] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.852856][ T4599] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 67.874856][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.889125][ T4599] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.291: inode #15: comm syz.3.291: iget: illegal inode # [ 67.946666][ T4608] 9p: Bad value for 'source' [ 68.043432][ T4599] loop3: lost filesystem error report for type 5 error -117 [ 68.043830][ T4599] EXT4-fs (loop3): Remounting filesystem read-only [ 68.057752][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 68.057767][ C0] EXT4-fs (loop3): initial error at time 2000000016: ext4_orphan_get:1391 [ 68.057784][ C0] EXT4-fs (loop3): last error at time 2000000016: ext4_orphan_get:1391 [ 68.114765][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 68.166375][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 68.186224][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 68.186238][ T28] audit: type=1400 audit(2000000016.289:376): avc: denied { checkpoint_restore } for pid=4611 comm="syz.4.296" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.250253][ T4599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.264486][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 68.464861][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.779453][ T28] audit: type=1400 audit(2000000016.879:377): avc: denied { block_suspend } for pid=4627 comm="syz.4.301" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.886112][ T4636] netlink: 'syz.3.299': attribute type 3 has an invalid length. [ 68.905222][ T28] audit: type=1400 audit(2000000016.909:378): avc: denied { listen } for pid=4627 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.970824][ T4636] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.299'. [ 69.016054][ T4642] loop0: detected capacity change from 0 to 512 [ 69.045581][ T28] audit: type=1400 audit(2000000016.989:379): avc: denied { read write } for pid=4635 comm="syz.3.299" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.077987][ T4642] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.102621][ T28] audit: type=1400 audit(2000000016.989:380): avc: denied { open } for pid=4635 comm="syz.3.299" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.135558][ T4642] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 69.147793][ T4642] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.305: inode #15: comm syz.0.305: iget: illegal inode # [ 69.160602][ T4642] loop0: lost filesystem error report for type 5 error -117 [ 69.160741][ T4642] EXT4-fs (loop0): Remounting filesystem read-only [ 69.168086][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 69.168100][ C0] EXT4-fs (loop0): initial error at time 2000000017: ext4_orphan_get:1391 [ 69.168132][ C0] EXT4-fs (loop0): last error at time 2000000017: ext4_orphan_get:1391 [ 69.199072][ T4642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.258358][ T4659] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.310'. [ 69.368956][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.398568][ T4673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.312'. [ 69.426289][ T4673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.312'. [ 69.557664][ T4678] netlink: 'syz.0.313': attribute type 28 has an invalid length. [ 69.565464][ T4678] netlink: 'syz.0.313': attribute type 3 has an invalid length. [ 69.573132][ T4678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.313'. [ 69.583567][ T4678] tipc: Failed to remove unknown binding: 66,1,1/0:2919730473/2919730475 [ 69.590301][ T28] audit: type=1400 audit(2000000017.689:381): avc: denied { bind } for pid=4677 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.592003][ T4678] tipc: Failed to remove unknown binding: 66,1,1/0:2919730473/2919730475 [ 69.660674][ T4681] loop4: detected capacity change from 0 to 1024 [ 69.671680][ T28] audit: type=1400 audit(2000000017.769:382): avc: denied { ioctl } for pid=4677 comm="syz.0.313" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.709521][ T4678] lo speed is unknown, defaulting to 1000 [ 69.726148][ T4681] EXT4-fs: dax option not supported [ 70.567941][ T4695] 9p: Bad value for 'source' [ 72.080825][ T4702] loop3: detected capacity change from 0 to 1024 [ 72.090443][ T4701] loop1: detected capacity change from 0 to 512 [ 72.122904][ T4701] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.321: inode has both inline data and extents flags [ 72.137904][ T4702] EXT4-fs: inline encryption not supported [ 72.157809][ T4701] fserror_report: 3 callbacks suppressed [ 72.157827][ T4701] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.189669][ T28] audit: type=1400 audit(2000000020.289:383): avc: denied { ioctl } for pid=4679 comm="syz.4.315" path="socket:[8241]" dev="sockfs" ino=8241 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.233224][ T4702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.245782][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 72.245826][ C0] EXT4-fs (loop1): initial error at time 2000000020: ext4_orphan_get:1391: inode 15 [ 72.245850][ C0] EXT4-fs (loop1): last error at time 2000000020: ext4_orphan_get:1391: inode 15 [ 72.272812][ T4701] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.321: couldn't read orphan inode 15 (err -117) [ 72.288332][ T4711] loop2: detected capacity change from 0 to 512 [ 72.309490][ T4701] loop1: lost filesystem error report for type 5 error -117 [ 72.310208][ T4701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.332916][ T4711] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.395856][ T4701] netlink: 'syz.1.321': attribute type 4 has an invalid length. [ 72.414769][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.442688][ T4711] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 72.464881][ T4711] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.324: inode #15: comm syz.2.324: iget: illegal inode # [ 72.470380][ T4720] ip6gretap0: entered promiscuous mode [ 72.477635][ T4711] loop2: lost filesystem error report for type 5 error -117 [ 72.483699][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.498917][ T4711] EXT4-fs (loop2): Remounting filesystem read-only [ 72.506481][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 72.506500][ C1] EXT4-fs (loop2): initial error at time 2000000020: ext4_orphan_get:1391 [ 72.506519][ C1] EXT4-fs (loop2): last error at time 2000000020: ext4_orphan_get:1391 [ 72.531114][ T4711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.557851][ T4726] 9p: Bad value for 'source' [ 73.535613][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.544711][ T4737] loop1: detected capacity change from 0 to 256 [ 74.755677][ T4731] lo speed is unknown, defaulting to 1000 [ 75.046634][ T4737] FAT-fs (loop1): Directory bread(block 64) failed [ 75.053421][ T4737] FAT-fs (loop1): Directory bread(block 65) failed [ 75.059946][ T4737] FAT-fs (loop1): Directory bread(block 66) failed [ 75.066538][ T4737] FAT-fs (loop1): Directory bread(block 67) failed [ 75.073081][ T4737] FAT-fs (loop1): Directory bread(block 68) failed [ 75.079662][ T4737] FAT-fs (loop1): Directory bread(block 69) failed [ 75.086269][ T4737] FAT-fs (loop1): Directory bread(block 70) failed [ 75.092946][ T4737] FAT-fs (loop1): Directory bread(block 71) failed [ 75.099612][ T4737] FAT-fs (loop1): Directory bread(block 72) failed [ 75.106211][ T4737] FAT-fs (loop1): Directory bread(block 73) failed [ 75.129451][ T4736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.138459][ T4736] netlink: 2 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.147546][ T4736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.156525][ T4736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.165439][ T4736] netlink: 2 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.174368][ T4736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.183274][ T4736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.192166][ T4736] netlink: 2 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.201156][ T4736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.210100][ T4736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 75.256865][ T28] audit: type=1400 audit(2000000023.319:384): avc: denied { mount } for pid=4732 comm="syz.1.329" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.029826][ T4748] loop4: detected capacity change from 0 to 1024 [ 76.056780][ T4749] loop0: detected capacity change from 0 to 512 [ 76.092885][ T4749] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.109197][ T4748] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.142948][ T4748] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.332: Invalid block bitmap block 0 in block_group 0 [ 76.156985][ T4748] loop4: lost filesystem error report for type 5 error -117 [ 76.159064][ T4748] Quota error (device loop4): write_blk: dquota write failed [ 76.166840][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 76.166901][ C0] EXT4-fs (loop4): initial error at time 2000000024: ext4_read_block_bitmap_nowait:483 [ 76.167038][ C0] EXT4-fs (loop4): last error at time 2000000024: ext4_read_block_bitmap_nowait:483 [ 76.201993][ T4748] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 76.213004][ T4748] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.332: Failed to acquire dquot type 0 [ 76.224899][ T4748] loop4: lost filesystem error report for type 5 error -117 [ 76.237669][ T4748] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.332: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.259009][ T4748] loop4: lost filesystem error report for type 5 error -117 [ 76.261964][ T4748] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.332: Invalid inode bitmap blk 0 in block_group 0 [ 76.283298][ T4748] loop4: lost filesystem error report for type 5 error -117 [ 76.285042][ T4748] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 76.301725][ T4748] loop4: lost filesystem error report for type 5 error -117 [ 76.303615][ T4748] EXT4-fs (loop4): 1 orphan inode deleted [ 76.323364][ T4748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.371523][ T3717] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 76.609830][ T4748] syz.4.332 (4748) used greatest stack depth: 7432 bytes left [ 76.661899][ T3717] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:18: Failed to release dquot type 0 [ 76.840789][ T4762] loop2: detected capacity change from 0 to 1024 [ 76.849556][ T4762] EXT4-fs: inline encryption not supported [ 76.883863][ T4762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.210317][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.223620][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.292114][ T4774] hsr0: entered promiscuous mode [ 77.304884][ T4774] hsr_slave_0: left promiscuous mode [ 77.346688][ T4774] hsr_slave_1: left promiscuous mode [ 77.369651][ T4774] hsr0 (unregistering): left promiscuous mode [ 77.578275][ T4787] 9p: Bad value for 'source' [ 78.723017][ T4789] 9p: Bad value for 'source' [ 78.923681][ T4789] debugfs: 'ttyS3' already exists in 'caif_serial' [ 80.130177][ T28] audit: type=1400 audit(2000000028.229:385): avc: denied { read } for pid=3045 comm="dhcpcd" name="n40" dev="tmpfs" ino=3132 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.214247][ T4801] loop1: detected capacity change from 0 to 512 [ 80.232561][ T28] audit: type=1400 audit(2000000028.229:386): avc: denied { open } for pid=3045 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=3132 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.260138][ T4801] EXT4-fs: inline encryption not supported [ 80.270173][ T28] audit: type=1400 audit(2000000028.229:387): avc: denied { getattr } for pid=3045 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=3132 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.306104][ T4801] ext2: Unknown parameter 'nouser_xattr2dont_measure' [ 80.381038][ T4810] loop0: detected capacity change from 0 to 512 [ 80.395735][ T4810] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.352: corrupted inode contents [ 80.440261][ T28] audit: type=1400 audit(2000000028.539:388): avc: denied { create } for pid=4798 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.482014][ T4795] __nla_validate_parse: 22 callbacks suppressed [ 80.482030][ T4795] netlink: 64 bytes leftover after parsing attributes in process `syz.4.349'. [ 80.482078][ T4810] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.530160][ T4826] netlink: 'syz.1.354': attribute type 39 has an invalid length. [ 80.557274][ T28] audit: type=1400 audit(2000000028.539:389): avc: denied { write } for pid=4798 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=3180 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.598274][ T4810] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #3: comm syz.0.352: mark_inode_dirty error [ 80.609430][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 80.609472][ C1] EXT4-fs (loop0): initial error at time 2000000028: ext4_do_update_inode:5569: inode 3 [ 80.609500][ C1] EXT4-fs (loop0): last error at time 2000000028: ext4_do_update_inode:5569: inode 3 [ 80.620873][ T28] audit: type=1400 audit(2000000028.539:390): avc: denied { append } for pid=4798 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=3180 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.669756][ T4810] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.753916][ T4846] vlan2: entered promiscuous mode [ 80.776828][ T4810] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.352: corrupted inode contents [ 80.793363][ T4810] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.793675][ T4810] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.352: mark_inode_dirty error [ 80.814041][ T4810] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.814394][ T4810] Quota error (device loop0): write_blk: dquota write failed [ 81.221870][ T4810] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 81.268062][ T4810] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.352: Failed to acquire dquot type 0 [ 81.289527][ T4810] loop0: lost filesystem error report for type 5 error -117 [ 81.290181][ T4810] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.352: corrupted inode contents [ 81.312981][ T28] audit: type=1400 audit(2000000028.629:391): avc: denied { unlink } for pid=4824 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=3180 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.319515][ T4810] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 81.338962][ T28] audit: type=1400 audit(2000000028.769:392): avc: denied { setopt } for pid=4835 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.369022][ T28] audit: type=1400 audit(2000000029.039:393): avc: denied { getopt } for pid=4835 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.389426][ T4810] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.352: mark_inode_dirty error [ 81.427997][ T4810] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 81.430704][ T4810] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.352: corrupted inode contents [ 81.471600][ T4857] loop4: detected capacity change from 0 to 8192 [ 81.479841][ T4810] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 81.480036][ T4810] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.352: mark_inode_dirty error [ 81.564272][ T4863] netlink: 'syz.2.361': attribute type 4 has an invalid length. [ 81.571982][ T4810] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 81.572214][ T4810] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.352: corrupted inode contents [ 81.604027][ T3550] loop4: p1 p2 p3 p4 [ 81.605845][ T4863] netlink: 'syz.2.361': attribute type 4 has an invalid length. [ 81.608175][ T3550] loop4: p1 start 17825536 is beyond EOD, truncated [ 81.623581][ T4810] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 81.623756][ T4810] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 81.629082][ T3550] loop4: p2 size 4294901964 extends beyond EOD, truncated [ 81.652768][ T4810] loop0: lost filesystem error report for type 5 error -117 [ 81.667565][ T3550] loop4: p3 start 458752 is beyond EOD, [ 81.676182][ T4810] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.352: corrupted inode contents [ 81.682575][ T3550] truncated [ 81.710719][ T4866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 81.727791][ T4810] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 81.727957][ T4810] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.352: mark_inode_dirty error [ 81.745872][ T3550] loop4: p4 size 8388352 extends beyond EOD, [ 81.768784][ T4810] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 81.801567][ T4810] loop0: lost filesystem error report for type 5 error -117 [ 81.801953][ T4810] EXT4-fs (loop0): 1 truncate cleaned up [ 81.809602][ T3550] truncated [ 81.880308][ T4868] lo speed is unknown, defaulting to 1000 [ 81.892884][ T4810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.013865][ T4857] loop4: p1 p2 p3 p4 [ 82.018424][ T4810] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.033983][ T4857] loop4: p1 start 17825536 is beyond EOD, truncated [ 82.063519][ T4857] loop4: p2 size 4294901964 extends beyond EOD, truncated [ 82.071777][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.090393][ T4857] loop4: p3 start 458752 is beyond EOD, truncated [ 82.118277][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.129098][ T4870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.364'. [ 82.139053][ T4857] loop4: p4 size 8388352 extends beyond EOD, truncated [ 82.313839][ T4888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.370'. [ 82.347651][ T4890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 82.366913][ T4890] vlan2: entered promiscuous mode [ 82.838462][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 82.945666][ T3006] loop4: p1 p2 p3 p4 [ 82.949743][ T3006] loop4: p1 start 17825536 is beyond EOD, truncated [ 82.956708][ T3006] loop4: p2 size 4294901964 extends beyond EOD, truncated [ 82.964383][ T3006] loop4: p3 start 458752 is beyond EOD, truncated [ 82.970962][ T3006] loop4: p4 size 8388352 extends beyond EOD, truncated [ 83.413602][ T28] audit: type=1400 audit(2000000031.519:394): avc: denied { read } for pid=4897 comm="syz.4.374" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.622832][ T4909] loop0: detected capacity change from 0 to 512 [ 83.652435][ T4907] netlink: 71 bytes leftover after parsing attributes in process `syz.1.376'. [ 83.745778][ T4909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.746512][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 83.769774][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 84.080037][ T4932] loop2: detected capacity change from 0 to 1024 [ 84.170199][ T4932] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.280944][ T4932] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 84.335993][ T4932] EXT4-fs (loop2): invalid journal inode [ 84.370125][ T4932] EXT4-fs (loop2): can't get journal size [ 84.410780][ T4932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.559735][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.798094][ T4947] loop2: detected capacity change from 0 to 1024 [ 84.816178][ T4947] EXT4-fs: inline encryption not supported [ 84.853858][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.896660][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.059738][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.116165][ T4959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.392'. [ 85.127149][ T4962] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.319580][ T4973] netlink: 'syz.3.395': attribute type 12 has an invalid length. [ 85.645544][ T4981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4981 comm=syz.3.395 [ 85.888075][ T4992] loop0: detected capacity change from 0 to 512 [ 85.922785][ T4992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 85.955398][ T4992] System zones: 1-12 [ 85.962153][ T4998] loop2: detected capacity change from 0 to 512 [ 85.985294][ T4992] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.400: corrupted in-inode xattr: e_value size too large [ 86.012552][ T4998] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.018825][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 86.034414][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 86.034426][ T28] audit: type=1400 audit(2000000034.119:403): avc: denied { getopt } for pid=5001 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.079014][ T5007] FAULT_INJECTION: forcing a failure. [ 86.079014][ T5007] name failslab, interval 1, probability 0, space 0, times 1 [ 86.090133][ T4998] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.097413][ T5007] CPU: 1 UID: 0 PID: 5007 Comm: syz.4.403 Not tainted syzkaller #0 PREEMPT(full) [ 86.097438][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.097449][ T5007] Call Trace: [ 86.097512][ T5007] [ 86.097520][ T5007] __dump_stack+0x1d/0x30 [ 86.097549][ T5007] dump_stack_lvl+0x95/0xd0 [ 86.097569][ T5007] dump_stack+0x15/0x1b [ 86.097668][ T5007] should_fail_ex+0x263/0x280 [ 86.097715][ T5007] should_failslab+0x8c/0xb0 [ 86.097762][ T5007] __kvmalloc_node_noprof+0x155/0x650 [ 86.097785][ T5007] ? xt_alloc_table_info+0x40/0x80 [ 86.097886][ T5007] xt_alloc_table_info+0x40/0x80 [ 86.097912][ T5007] do_ip6t_set_ctl+0x5e5/0x8f0 [ 86.097939][ T5007] ? kstrtoull+0x111/0x140 [ 86.097960][ T5007] ? __rcu_read_unlock+0x4e/0x70 [ 86.098004][ T5007] nf_setsockopt+0x199/0x1b0 [ 86.098026][ T5007] ipv6_setsockopt+0x11a/0x130 [ 86.098061][ T5007] tcp_setsockopt+0x98/0xb0 [ 86.098087][ T5007] sock_common_setsockopt+0x69/0x80 [ 86.098110][ T5007] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 86.098169][ T5007] __sys_setsockopt+0x184/0x200 [ 86.098277][ T5007] __x64_sys_setsockopt+0x64/0x80 [ 86.098302][ T5007] x64_sys_call+0x2327/0x3020 [ 86.098326][ T5007] do_syscall_64+0x12c/0x370 [ 86.098414][ T5007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.098432][ T5007] RIP: 0033:0x7f053157c799 [ 86.098447][ T5007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.098462][ T5007] RSP: 002b:00007f052ffcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.098489][ T5007] RAX: ffffffffffffffda RBX: 00007f05317f5fa0 RCX: 00007f053157c799 [ 86.098502][ T5007] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 86.098514][ T5007] RBP: 00007f052ffcf090 R08: 0000000000000570 R09: 0000000000000000 [ 86.098527][ T5007] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 86.098539][ T5007] R13: 00007f05317f6038 R14: 00007f05317f5fa0 R15: 00007ffed1fabcb8 [ 86.098557][ T5007] [ 86.106829][ T4992] fserror_report: 1 callbacks suppressed [ 86.106842][ T4992] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.266666][ T5002] vlan2: entered allmulticast mode [ 86.292506][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 86.327628][ T4998] EXT4-fs (loop2): 1 truncate cleaned up [ 86.328402][ C1] EXT4-fs (loop0): initial error at time 2000000034: ext4_iget_extra_inode:5025 [ 86.335290][ T4998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.340420][ C1] : inode 15 [ 86.340435][ C1] EXT4-fs (loop0): last error at time 2000000034: ext4_iget_extra_inode:5025 [ 86.359994][ T5016] x_tables: duplicate underflow at hook 1 [ 86.361953][ C1] : inode 15 [ 86.366902][ T28] audit: type=1400 audit(2000000034.469:404): avc: denied { setattr } for pid=5015 comm="syz.1.406" name="" dev="pipefs" ino=9335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 86.374979][ T4992] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.400: couldn't read orphan inode 15 (err -117) [ 86.375004][ T4992] loop0: lost filesystem error report for type 5 error -117 [ 86.432845][ T4992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.464718][ T28] audit: type=1400 audit(2000000034.519:405): avc: denied { write } for pid=5013 comm="syz.4.405" name="file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.488162][ T28] audit: type=1400 audit(2000000034.519:406): avc: denied { open } for pid=5013 comm="syz.4.405" path="/61/file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.510753][ T28] audit: type=1400 audit(2000000034.519:407): avc: denied { ioctl } for pid=5013 comm="syz.4.405" path="/61/file0" dev="tmpfs" ino=342 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.555822][ T28] audit: type=1400 audit(2000000034.529:408): avc: denied { read } for pid=5015 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.595082][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.616584][ T5038] netlink: 'syz.1.407': attribute type 39 has an invalid length. [ 86.707890][ T28] audit: type=1400 audit(2000000034.569:409): avc: denied { create } for pid=4990 comm="syz.0.400" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 86.771988][ T28] audit: type=1400 audit(2000000034.639:410): avc: denied { create } for pid=5013 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.809511][ T28] audit: type=1400 audit(2000000034.649:411): avc: denied { lock } for pid=4990 comm="syz.0.400" path="/81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuacct.usage_sys" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.869309][ T5063] loop2: detected capacity change from 0 to 512 [ 86.889750][ T5063] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.908850][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.940472][ T5063] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 86.963042][ T5063] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.416: inode #15: comm syz.2.416: iget: illegal inode # [ 86.963405][ T5074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'. [ 86.988476][ T5063] loop2: lost filesystem error report for type 5 error -117 [ 86.992509][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 87.006251][ C1] EXT4-fs (loop2): initial error at time 2000000035: ext4_orphan_get:1391 [ 87.014796][ C1] EXT4-fs (loop2): last error at time 2000000035: ext4_orphan_get:1391 [ 87.030115][ T5063] EXT4-fs (loop2): Remounting filesystem read-only [ 87.038928][ T5077] loop3: detected capacity change from 0 to 1024 [ 87.045792][ T5063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.063343][ T5079] loop4: detected capacity change from 0 to 512 [ 87.070473][ T5077] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 87.103776][ T5079] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 87.109255][ T5077] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.124483][ T5079] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.155535][ T5077] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 87.159456][ T5079] EXT4-fs (loop4): mount failed [ 87.171744][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.205109][ T5077] JBD2: no valid journal superblock found [ 87.232446][ T5098] vlan0: entered promiscuous mode [ 87.255554][ T5077] EXT4-fs (loop3): Could not load journal inode [ 87.519155][ T5150] netlink: 'syz.4.436': attribute type 4 has an invalid length. [ 87.534504][ T5150] netlink: 'syz.4.436': attribute type 4 has an invalid length. [ 87.559737][ T5151] 9p: Bad value for 'source' [ 87.640090][ T5155] netlink: 'syz.0.438': attribute type 8 has an invalid length. [ 88.348759][ C0] ================================================================== [ 88.356837][ C0] BUG: KCSAN: data-race in serial8250_tx_chars / stop_tty [ 88.363937][ C0] [ 88.366272][ C0] write to 0xffff8881060749bc of 1 bytes by task 2269 on cpu 1: [ 88.373878][ C0] stop_tty+0x4d/0xe0 [ 88.377842][ C0] n_tty_receive_buf_standard+0x691/0x3f60 [ 88.383626][ C0] n_tty_receive_buf_common+0x7f3/0xc10 [ 88.389156][ C0] n_tty_receive_buf2+0x33/0x40 [ 88.393977][ C0] tty_ldisc_receive_buf+0x66/0xf0 [ 88.399068][ C0] tty_port_default_receive_buf+0x59/0x90 [ 88.404765][ C0] flush_to_ldisc+0x148/0x340 [ 88.409417][ C0] process_scheduled_works+0x513/0xa10 [ 88.414864][ C0] worker_thread+0x58a/0x780 [ 88.419431][ C0] kthread+0x22a/0x280 [ 88.423473][ C0] ret_from_fork+0x150/0x360 [ 88.428042][ C0] ret_from_fork_asm+0x1a/0x30 [ 88.432786][ C0] [ 88.435084][ C0] read to 0xffff8881060749bc of 1 bytes by interrupt on cpu 0: [ 88.442600][ C0] serial8250_tx_chars+0x85/0x490 [ 88.447603][ C0] serial8250_handle_irq_locked+0x3c0/0x420 [ 88.453474][ C0] serial8250_handle_irq+0xad/0x280 [ 88.458657][ C0] serial8250_default_handle_irq+0x8e/0x170 [ 88.464539][ C0] serial8250_interrupt+0x63/0x130 [ 88.469628][ C0] __handle_irq_event_percpu+0x9c/0x4d0 [ 88.475153][ C0] handle_irq_event+0x64/0xf0 [ 88.479828][ C0] handle_edge_irq+0x154/0x470 [ 88.484599][ C0] __common_interrupt+0x60/0xb0 [ 88.489428][ C0] common_interrupt+0x7e/0x90 [ 88.494107][ C0] asm_common_interrupt+0x26/0x40 [ 88.499125][ C0] __sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 88.505109][ C0] do_recvmmsg+0x285/0x560 [ 88.509518][ C0] __x64_sys_recvmmsg+0xe5/0x170 [ 88.514438][ C0] x64_sys_call+0x80f/0x3020 [ 88.519017][ C0] do_syscall_64+0x12c/0x370 [ 88.523609][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.529505][ C0] [ 88.531896][ C0] value changed: 0x00 -> 0x01 [ 88.536551][ C0] [ 88.538857][ C0] Reported by Kernel Concurrency Sanitizer on: [ 88.544997][ C0] CPU: 0 UID: 0 PID: 5139 Comm: syz.1.428 Not tainted syzkaller #0 PREEMPT(full) [ 88.554177][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.564218][ C0] ================================================================== [ 88.640278][ T5188] hsr0: entered promiscuous mode [ 88.765595][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'.