last executing test programs: 30.101945948s ago: executing program 3 (id=1250): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x5, 0x10022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0x8c84, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 30.047084134s ago: executing program 3 (id=1252): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000004c0)={[{@barrier}, {@nodioread_nolock}, {@discard}, {@barrier}, {@block_validity}, {@resuid}, {@lazytime}, {@block_validity}, {@errors_continue}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000140), 0xfffffe9a) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 29.698720282s ago: executing program 3 (id=1255): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440), 0x10}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) getsockname$unix(r0, &(0x7f0000019080)=@abs, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0xf}, 0x80, 0x1224, 0xffffffff, 0x8, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x24, 0x1, {{0x1d, 0x0, 0x4, 0x7fff, 0x800, 0x6795}, {0xa, 0x2, 0x7ff, 0x8, 0x40, 0xffffff81}, 0x3, 0xd6d2, 0xd11}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)) 27.934744327s ago: executing program 3 (id=1265): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32=r2, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r3, &(0x7f0000000040)="31fb2d", 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 27.241823522s ago: executing program 3 (id=1269): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003462000bfa30000000000001702000000feffff7a0af0ff14ffffff61a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f008500000088000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81e48439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b51949b7d4b67300580d854c280206bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccffff0000360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb933d81967c4d0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794c3133bdfa17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc69a0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cb3475be3376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a4552d4550a717339bdcae1d5c2e78d0a2f550a865811c0162d6dd0b5f834b6295f2a2b0045d8b0033a878daae3db955f2689e3e13842a6219da4e38dc4a14e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440), 0x10}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockname$unix(r0, &(0x7f0000019080)=@abs, &(0x7f0000019100)=0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xb5, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0xf}, 0x80, 0x1224, 0xffffffff, 0x8, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x24, 0x1, {{0x1d, 0x0, 0x4, 0x7fff, 0x800, 0x6795}, {0xa, 0x2, 0x7ff, 0x8, 0x40, 0xffffff81}, 0x3, 0xd6d2, 0xd11}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x4000, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0CFOxEAUx+F/l+0AhhVcCIFbB5a7gEFyARJuwYkQOBIkZvPIdDYNFwDM94lJ2/f6ExP+1baSOmmpqkoOrc6Pg7vTfo63jymVzLsxqWQ7J5vH3Y9Onc2ZxuNVL06HWrwtmYelf/+StB6devcym6TdXN/uM2f67Guv45/nizX7fmw+rV/acu6/xmr94tUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/5DgAA//9Qiy9Q") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010020000000"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) 26.985113044s ago: executing program 3 (id=1276): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32=r2, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$eJzs3M1vG0UbAPBnHSdp+vEmbykfLYUWCqKASJq0QIU4UAQSB5CQuJRjSEIJTRuUpohWFQQO5Ygqca84IvEXcIILAk5IvZY7qlShXlqKkIzW3nWcxE4c105o/ftJsWfWa8883hl7ZifeALrW/vQmidgeEVcjYrCSXbrD/srdrRsXJv66cWEiiVLpnT+T8n43b1yYyHfNn7ctzyws3V7rzLnzJ8dnZqbmsvzI/KmPRs6cO//c9KnxE1Mnpk6PHT165PDoiy+MPd+48r1rx1dbp5t7Pp3du/uNdy+9NXH80nu/fJfk8S+J4+O1X7Q5++ts68kTT7arlP+IHeXbgfJtUsy3FjavQjQlbZDFrCtdjcHoierBi8F4/YtNrRzQUat/hQ5FRGlRkt3XbgPuYknTvblXv4d7SvZFn0QsTKRz4Nr5fDe4fqwyAUrjvpX9VR4pVmevvdX5bfsVI/pj4fbl4wu3L8fieYi+DhUHABA/HKvc52O/xfFfoVi73yvZ2tBQRPw/InZGxH0RsSsi7o+IByLiwYh4qOY59dZ9llu+SLJy/Fm41lJgTbr+bMTL2drW0vFfde1iqCfL7SjH35u8Pz0zdSgi/hcRB6O3P82PrlLGj69d+SpLrhjXpfEfz8Z/6V9afj4WzOpxrdi/9DmT4/Pjdxp37vrnEXuK9eJPqisB6XHcHRF79rVWxvQz3+5t9Nja8ddRXHZ/B0rfRDxVOf4LsSz+XLL6+uTIlpiZOjSSt4qVfv3t4tuNym8p/jZKj//Wuu2/Gv9QUrtee2b9ZVz8/cuGc8om2/+SfpO2/75kaVf6ZHx+fm40oi95s5zvK39ipdtj5X5ji/un8R88UL//74zFd+LhiEgb8SMR8WhE7Mvq/lhEPB4RB1aJ/+dXn/iw9fg7K41/cu3j/8HT1ePfMJGvba94qOfkT9+XH8kP2dAq8SdR5/gfKacOZlua+fxbtaZzd9KaAQAA4O5TiIjtkRSGq+lCYXi48v/yu2JrYWb2pZGI2bOnJyu/ERiK3kJ+pmuwej40FkazaX1+fnRsWf5wdt74656Bcn54YnZmcrODhy63rUH/T/3Rs9m1AzquDetowF2q1f5fKpU+a3NVgA3m+x+6l/4P3atO/x9Ylu/fqLoAG6um/xfyTM3E/p/F3wkD95pG4/8rG1wPYOOZ/0P30v+he+n/0JWyX8IXo6lfy7eQiOLa+6SfPw336YmIjlSs9aeXSltWXuWgkpg+24GqVhN9bXzB7cuvkjC4vteJwjoLTWrb2JZ1XKNhRSI69PZ2KvF3drHNDSgr7UpzA417U/OJzf5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//+DutIv") r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 26.984898404s ago: executing program 32 (id=1276): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32=r2, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$eJzs3M1vG0UbAPBnHSdp+vEmbykfLYUWCqKASJq0QIU4UAQSB5CQuJRjSEIJTRuUpohWFQQO5Ygqca84IvEXcIILAk5IvZY7qlShXlqKkIzW3nWcxE4c105o/ftJsWfWa8883hl7ZifeALrW/vQmidgeEVcjYrCSXbrD/srdrRsXJv66cWEiiVLpnT+T8n43b1yYyHfNn7ctzyws3V7rzLnzJ8dnZqbmsvzI/KmPRs6cO//c9KnxE1Mnpk6PHT165PDoiy+MPd+48r1rx1dbp5t7Pp3du/uNdy+9NXH80nu/fJfk8S+J4+O1X7Q5++ts68kTT7arlP+IHeXbgfJtUsy3FjavQjQlbZDFrCtdjcHoierBi8F4/YtNrRzQUat/hQ5FRGlRkt3XbgPuYknTvblXv4d7SvZFn0QsTKRz4Nr5fDe4fqwyAUrjvpX9VR4pVmevvdX5bfsVI/pj4fbl4wu3L8fieYi+DhUHABA/HKvc52O/xfFfoVi73yvZ2tBQRPw/InZGxH0RsSsi7o+IByLiwYh4qOY59dZ9llu+SLJy/Fm41lJgTbr+bMTL2drW0vFfde1iqCfL7SjH35u8Pz0zdSgi/hcRB6O3P82PrlLGj69d+SpLrhjXpfEfz8Z/6V9afj4WzOpxrdi/9DmT4/Pjdxp37vrnEXuK9eJPqisB6XHcHRF79rVWxvQz3+5t9Nja8ddRXHZ/B0rfRDxVOf4LsSz+XLL6+uTIlpiZOjSSt4qVfv3t4tuNym8p/jZKj//Wuu2/Gv9QUrtee2b9ZVz8/cuGc8om2/+SfpO2/75kaVf6ZHx+fm40oi95s5zvK39ipdtj5X5ji/un8R88UL//74zFd+LhiEgb8SMR8WhE7Mvq/lhEPB4RB1aJ/+dXn/iw9fg7K41/cu3j/8HT1ePfMJGvba94qOfkT9+XH8kP2dAq8SdR5/gfKacOZlua+fxbtaZzd9KaAQAA4O5TiIjtkRSGq+lCYXi48v/yu2JrYWb2pZGI2bOnJyu/ERiK3kJ+pmuwej40FkazaX1+fnRsWf5wdt74656Bcn54YnZmcrODhy63rUH/T/3Rs9m1AzquDetowF2q1f5fKpU+a3NVgA3m+x+6l/4P3atO/x9Ylu/fqLoAG6um/xfyTM3E/p/F3wkD95pG4/8rG1wPYOOZ/0P30v+he+n/0JWyX8IXo6lfy7eQiOLa+6SfPw336YmIjlSs9aeXSltWXuWgkpg+24GqVhN9bXzB7cuvkjC4vteJwjoLTWrb2JZ1XKNhRSI69PZ2KvF3drHNDSgr7UpzA417U/OJzf5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//+DutIv") r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 12.989517859s ago: executing program 4 (id=1413): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) 11.649076956s ago: executing program 4 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 11.607474688s ago: executing program 4 (id=1418): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32=r2, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) personality(0xfe47fef9f5ff7379) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r3, &(0x7f0000000040)="31fb2d", 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 11.13624329s ago: executing program 4 (id=1426): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r2, &(0x7f0000000040)="31fb2d", 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 9.450926724s ago: executing program 4 (id=1432): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x5, 0x10022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0x8c84, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 9.240409443s ago: executing program 4 (id=1437): socket$inet(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10221, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x8000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x0, 0x20) open(&(0x7f0000000280)='.\x00', 0x90800, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) syz_open_procfs$namespace(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.219594249s ago: executing program 33 (id=1437): socket$inet(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10221, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x8000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x0, 0x20) open(&(0x7f0000000280)='.\x00', 0x90800, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) syz_open_procfs$namespace(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.684625254s ago: executing program 0 (id=1475): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) 3.318598498s ago: executing program 6 (id=1484): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0xd, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e0000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180200000020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 3.27483816s ago: executing program 5 (id=1485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) setns(0xc9, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) 3.27417301s ago: executing program 6 (id=1486): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x5, 0x10022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0x8c84, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 3.265434213s ago: executing program 0 (id=1487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffc, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x1, 0x119d, 0x20000005}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) (rerun: 64) sync_file_range(r2, 0x2202, 0x80000001, 0x459d40a2f537aae9) (async, rerun: 32) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/41, 0x29}], 0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f00000003c0), 0x100000000000022d) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x1fc}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) (async, rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@local, @multicast2, 0x1, "4eb18a4303250df80788fa1d6808ba2c542663adfaaff0577308fae04e57ec34", 0x8, 0x9, 0x6, 0xe}, 0x3c) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 3.171097449s ago: executing program 6 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0xc12a, 0x6, 0xc, 0x6, 0x7, 0x400004, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f0000000440)=0x634, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x17, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="200026bd7000fedbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="500051804c0000800500020005000000090001004f23b93436063020ef000000130004008f9c97606876743f0107cf50fb217c0009000100ab40c43d1c000000090001002a886fa317000000040006000400060019003400cde6a37c987aac6a3ead48604d971afe9a0cca0dd100000004000101bdc1090f443e726bdc806f101b64b31d4e1876cffc6c6362c426e9df0d2c643ddc652df8cae8022fc7698272d938556d99bad95327fdca49e6e4e3dc0f61f0"], 0x8c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x59) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) recvmsg$inet_nvme(r10, &(0x7f0000002300)={&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/60, 0x3c}, {&(0x7f0000000840)=""/1, 0x1}, {&(0x7f0000000b40)=""/164, 0xa4}, {&(0x7f0000000940)=""/110, 0x6e}, {0xfffffffffffffffd}, {&(0x7f00000009c0)=""/36, 0x24}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000c80)=""/223, 0xdf}, {&(0x7f0000000d80)=""/219, 0xdb}], 0xa, &(0x7f0000001300)=""/4096, 0x1000}, 0x40000002) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xb) r11 = socket$inet(0x2, 0x1, 0x6) bind$inet(r11, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r11, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) 2.932911346s ago: executing program 0 (id=1490): close(0xffffffffffffffff) unshare(0x20000400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44800) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xa, 0x1}, 0x0, 0x0, 0x6, 0x2, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34040017}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mount(0x0, 0x0, 0x0, 0x200, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2.932405656s ago: executing program 5 (id=1491): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x2000, 0x7ff, 0x0) lstat(0x0, &(0x7f0000000680)) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010002000000000002000600", @ANYRES32=0x0, @ANYBLOB="02149eef", @ANYRES32=0x0, @ANYBLOB="040001000000000008000000", @ANYRES32=r3, @ANYBLOB="10000200000000002000000000000000"], 0x3c, 0x1) accept(r1, 0x0, &(0x7f0000000940)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000980)) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000100)=0x5) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/98, 0x62}], 0x1, 0x0, 0x0) 2.910120923s ago: executing program 6 (id=1493): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32=r2, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r3, &(0x7f0000000040)="31fb2d", 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 2.823741737s ago: executing program 5 (id=1494): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem', 0x3) 2.790926606s ago: executing program 0 (id=1495): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000138), 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001000000000000000000000000000000000000000000000000000000746573745f6d00") 2.762711264s ago: executing program 2 (id=1496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}], 0x1, 0x40000002, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x841, 0x30900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x0, 0x2, 0x1, 0x0, 0x4e23}, @IFLA_MACSEC_INC_SCI={0x0, 0x9, 0x6}, @IFLA_MACSEC_SCB={0x0, 0xb, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 1.788795288s ago: executing program 0 (id=1498): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) 1.758252766s ago: executing program 5 (id=1499): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x16, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) prctl$PR_MCE_KILL(0x23, 0x4, 0x7fffffffeffe) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd2, 0x1}, 0x10ecc8, 0x1220, 0x0, 0x6bb0157145f3a761, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x2}) r4 = syz_io_uring_setup(0x3d12, &(0x7f00000000c0)={0x0, 0x26ac, 0x20, 0x1, 0x42}, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0x5, 0x4, 0x4010, r4, 0x3051f3d5) kexec_load(0x3, 0x0, &(0x7f0000000140), 0x30000) 1.736602983s ago: executing program 2 (id=1500): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x5, 0x10022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0x8c84, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 1.735955663s ago: executing program 1 (id=1501): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x28, 0x110, 0xc, "db"}], 0x18, 0x500}}], 0x1, 0x40058) 1.681731828s ago: executing program 1 (id=1502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) 1.681132638s ago: executing program 2 (id=1503): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0xc12a, 0x6, 0xc, 0x6, 0x7, 0x400004, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f0000000440)=0x634, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x17, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="200026bd7000fedbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="500051804c0000800500020005000000090001004f23b93436063020ef000000130004008f9c97606876743f0107cf50fb217c0009000100ab40c43d1c000000090001002a886fa317000000040006000400060019003400cde6a37c987aac6a3ead48604d971afe9a0cca0dd100000004000101bdc1090f443e726bdc806f101b64b31d4e1876cffc6c6362c426e9df0d2c643ddc652df8cae8022fc7698272d938556d99bad95327fdca49e6e4e3dc0f61f0"], 0x8c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x59) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) recvmsg$inet_nvme(r10, &(0x7f0000002300)={&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/60, 0x3c}, {&(0x7f0000000840)=""/1, 0x1}, {&(0x7f0000000b40)=""/164, 0xa4}, {&(0x7f0000000940)=""/110, 0x6e}, {0xfffffffffffffffd}, {&(0x7f00000009c0)=""/36, 0x24}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000c80)=""/223, 0xdf}, {&(0x7f0000000d80)=""/219, 0xdb}], 0xa, &(0x7f0000001300)=""/4096, 0x1000}, 0x40000002) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xb) r11 = socket$inet(0x2, 0x1, 0x6) bind$inet(r11, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r11, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) 1.554005714s ago: executing program 5 (id=1504): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x103992, 0x1, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) close_range(r4, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) close_range(r0, 0xffffffffffffffff, 0x0) 1.552130214s ago: executing program 6 (id=1505): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x2000, 0x7ff, 0x0) lstat(0x0, &(0x7f0000000680)) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010002000000000002000600", @ANYRES32=0x0, @ANYBLOB="02149eef", @ANYRES32=0x0, @ANYBLOB="040001000000000008000000", @ANYRES32=r3, @ANYBLOB="10000200000000002000000000000000"], 0x3c, 0x1) accept(r1, 0x0, &(0x7f0000000940)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000980)) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000100)=0x5) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/98, 0x62}], 0x1, 0x0, 0x0) 1.546312556s ago: executing program 2 (id=1506): mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000280)="65486d36a05f8c", 0x7) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000) write(0xffffffffffffffff, &(0x7f0000000280)='0fc5:1227:am', 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x1, 0x387, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000840) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0xfd, 0x0, 0x0, 0xa, 0x142, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x3}, 0x100226, 0x4, 0x43a1bd76, 0x8, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r2 = socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB="04410000089b000008000300", @ANYRES32=r8, @ANYBLOB="d2243c679360120ccc98347e5bd7e13528cb"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000ffff27bd3000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d4705006ffd0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB="0a00a100aaaaaaaaaaaa00001f384d40669ec7dd610f9ba138289cf330d9e80bf7ecaef99d0f97914f770516d12f7ef36b40e5fd35aa0e10b4589ead659b4d4050314a7e6895685a"], 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.414350173s ago: executing program 1 (id=1507): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000180001801400020076657468305f6d61637674617000000008000280ab"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x9, 0x800, {{0x6, 0x4, 0x2, 0x24, 0x18, 0x67, 0x1, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@end, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private2}, &(0x7f0000000140)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000180)}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07002bbd7000fcdbdf250a00000008000400040000001400028008000400080000000800090004000000380003"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 1.413547843s ago: executing program 1 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x4c}}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0xc12a, 0x6, 0xc, 0x6, 0x7, 0x400004, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f0000000440)=0x634, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x17, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="200026bd7000fedbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="500051804c0000800500020005000000090001004f23b93436063020ef000000130004008f9c97606876743f0107cf50fb217c0009000100ab40c43d1c000000090001002a886fa317000000040006000400060019003400cde6a37c987aac6a3ead48604d971afe9a0cca0dd100000004000101bdc1090f443e726bdc806f101b64b31d4e1876cffc6c6362c426e9df0d2c643ddc652df8cae8022fc7698272d938556d99bad95327fdca49e6e4e3dc0f61f0a58d377479c38bdc9517633f83a9a83ae064e8a89deb8fde8c"], 0x8c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x59) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) recvmsg$inet_nvme(r10, &(0x7f0000002300)={&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/60, 0x3c}, {&(0x7f0000000840)=""/1, 0x1}, {&(0x7f0000000b40)=""/164, 0xa4}, {&(0x7f0000000940)=""/110, 0x6e}, {0xfffffffffffffffd}, {&(0x7f00000009c0)=""/36, 0x24}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000c80)=""/223, 0xdf}, {&(0x7f0000000d80)=""/219, 0xdb}], 0xa, &(0x7f0000001300)=""/4096, 0x1000}, 0x40000002) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xb) r11 = socket$inet(0x2, 0x1, 0x6) bind$inet(r11, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r11, 0x5) 1.370053526s ago: executing program 6 (id=1509): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000138), 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001000000000000000000000000000000000000000000000000000000746573745f6d00") 1.35411875s ago: executing program 2 (id=1510): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem', 0x3) 1.347561142s ago: executing program 34 (id=1509): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000138), 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001000000000000000000000000000000000000000000000000000000746573745f6d00") 122.326666ms ago: executing program 1 (id=1512): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0xd, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e0000001800", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180200000020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 71.177801ms ago: executing program 5 (id=1513): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x103992, 0x1, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) close_range(r4, 0xffffffffffffffff, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) close_range(r0, 0xffffffffffffffff, 0x0) 33.168151ms ago: executing program 2 (id=1514): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x26040680) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x4, r0}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x23}}, {0x2, 0x4, {0x0, 0x200}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x4, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x3, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x80, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x0, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x7}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {}, {0x4, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$eJzs3c9vI1cdAPDveGPHyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPSFx5ILgxqUckPgRgRokDkYzHqdO1t5NyQ+n8ecjzc5787z+vrfZeS/+JvYLYGzdioj9iChFxNsRMZtfT/Ij3uge6eM+Oni4cnjwcCWJTuetfyRZe3ot+v5O6mb+nOWI+N63In6YPBq3tbu3sVyv17bz+ny7sTXf2t27u95YXqut1Tar1aXFpYXX7r1aPbexvtAo5aUvfvj7/a/9OO3WTH6lfxznqTv04lGc1EREfOcigo3AjXw8pVF3hP9LISKejYgXs/t/Nm5kX00A4DrrdGajM9tfP5IcrwIA10Uhy4ElhUqeC5iJQqFS6ebwnovpQr3Zat950NzZXO3myuaiWHiwXq8t5LnCuSgmaX0xK39cr56o34uIZyLiZ5NTWb2y0qyvjvIbHwAYYzdPrP//nuyu/wDANVcedQcAgEtn/QeA8WP9B4DxY/0HgPHTXf+nRt0NAOASef0PAOPH+g8AY+W7b76ZHp3D/POvV9/Z3dlovnN3tdbaqDR2Viorze2tylqzuZZ9Zk/jSc9Xbza3Fl+JnXfnvr7Vas+3dvfuN5o7m+372ed6368Vs0ftX8LIAIBhnnnhgz8l6Yr8+lR2RN9eDsWR9gy4aIVRdwAYmRuj7gAwMnb7gvF1htf4xYifShHAp9rvsj8HbNF7THnQG4Q6nU7noroFXLjbn5P/h3HVl//3W8AwZuT/YXzJ/8P46nSS027yH6d9IABwtcnxA0N+/v9sfv51/sOBH6yefMT7F9krAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNp6+/9W8r3AZ6JQqFQinoqIuSgmD9brtYWIeDoi/jhZnEzriyPuMwBwVoW/Jvn+X7dnX5451vT8zaNiKSJ+9Iu3fv7ucru9/YeIUvLPyd719vv59eonClw6rxEAAI/XW6ezc98L+Y8OHq70jsvsz9++GRHlbvzDg1IcHsWfiInsXI5iREz/K8nrXUlf7uIs9t+LiM8OGn8SM1kOpLvz6cn4aeynLjV+4Vj8QtbWPaf/Fp85h77AuPkgnX/eGHT/FeJWdh58/5ezGers8vkvfaqVw2wO/Dh+b/67MWT+u3XaGK/89tvd0tSjbe9FfH4iohf7sG/+6cVPhsR/+ZTx//yF518c1tb5ZcTtGBy/P9Z8u7E139rdu7veWF6rrdU2q9WlxaWF1+69Wp3PctTzw1eDv79+5+lhben4p4fELz9h/F8+5fh/9d+3v/+lx8T/6kuD4hfiucfET9fEr5wy/vL0b8rD2tL4q0PG/6Sv/51Txv/wL3uPbBsOAIxOa3dvY7ler20rKFz9Qvpf9gp0Y2DhG5cVqxSDm37yUveePtHU+97/E8YaNmOcR9YNuAqObvqI+M+oOwMAAAAAAAAAAAAAAAx0Ge9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL7+FwAA//87osfs") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4.91271ms ago: executing program 0 (id=1515): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x103992, 0x1, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) close_range(r4, 0xffffffffffffffff, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1516): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$ttyS3(0xffffff9c, 0x0, 0x6001, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem', 0x3) kernel console output (not intermixed with test programs): sses completed (elapsed 0.135 seconds) [ 162.872454][ T6798] OOM killer disabled. [ 162.872465][ T6798] Freezing remaining freezable tasks [ 162.874605][ T6798] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 162.874793][ T6798] printk: Suspending console(s) (use no_console_suspend to debug) [ 162.944438][ T6798] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 162.944558][ T6798] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 162.944689][ T6798] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 162.944787][ T6798] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 162.944858][ T6798] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 162.944979][ T6798] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 162.945109][ T6798] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 162.945168][ T6798] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 162.945238][ T6798] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 162.945345][ T6798] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 162.945397][ T6798] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 162.945538][ T6798] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 162.945755][ T6798] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 162.945825][ T6798] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 162.945934][ T6798] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 162.945986][ T6798] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 162.981918][ T3706] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 163.546642][ T6798] ACPI: PM: Preparing to enter system sleep state S3 [ 163.547199][ T6798] ACPI: PM: Saving platform NVS memory [ 163.547319][ T6798] Disabling non-boot CPUs ... [ 163.551449][ T6798] smpboot: CPU 1 is now offline [ 163.559310][ T6798] ACPI: PM: Low-level resume complete [ 163.559356][ T6798] ACPI: PM: Restoring platform NVS memory [ 163.572639][ T6798] Enabling non-boot CPUs ... [ 163.573089][ T6798] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 163.579896][ T6798] CPU1 is up [ 163.580174][ T6798] ACPI: PM: Waking up from system sleep state S3 [ 163.648654][ T3753] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 163.808515][ T6798] OOM killer enabled. [ 163.808537][ T6798] Restarting tasks: Starting [ 163.841922][ T6798] Restarting tasks: Done [ 163.841993][ T6798] random: crng reseeded on system resumption [ 163.986572][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 164.041967][ T6822] loop3: detected capacity change from 0 to 8192 [ 164.059083][ T6798] PM: suspend exit [ 164.073518][ T6821] syzkaller1: entered promiscuous mode [ 164.073593][ T6821] syzkaller1: entered allmulticast mode [ 164.926090][ T29] audit: type=1400 audit(1790777614.667:392): avc: denied { create } for pid=6826 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.108884][ T6844] loop4: detected capacity change from 0 to 512 [ 165.111471][ T6844] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 165.119404][ T6844] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1067: bg 0: block 4: invalid block bitmap [ 165.119472][ T6844] loop4: lost filesystem error report for type 5 error -117 [ 165.120184][ T6844] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 165.120237][ T6844] loop4: lost filesystem error report for type 5 error -117 [ 165.122292][ T6844] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1067: invalid indirect mapped block 1 (level 1) [ 165.122321][ T6844] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 165.124399][ T6844] EXT4-fs (loop4): 1 truncate cleaned up [ 165.127411][ T6844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.141767][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 165.370295][ T29] audit: type=1400 audit(1790777615.097:393): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 165.490784][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.502479][ T6865] 9p: Bad value for 'wfdno' [ 165.556833][ T6868] loop4: detected capacity change from 0 to 512 [ 165.562107][ T6868] EXT4-fs: Ignoring removed bh option [ 165.620091][ T6872] device-mapper: table: 252:0: mirror: Too few mirror arguments (-EINVAL) [ 165.620156][ T6872] device-mapper: ioctl: error adding target to table [ 165.653930][ T6868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.654382][ T6868] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.657408][ T6870] syzkaller1: entered promiscuous mode [ 165.657499][ T6870] syzkaller1: entered allmulticast mode [ 165.689029][ T29] audit: type=1400 audit(1790777615.427:394): avc: denied { write } for pid=6867 comm="syz.4.1075" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.689135][ T29] audit: type=1400 audit(1790777615.427:395): avc: denied { add_name } for pid=6867 comm="syz.4.1075" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.728037][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.789617][ T6885] loop3: detected capacity change from 0 to 512 [ 165.792265][ T6885] EXT4-fs: Ignoring removed bh option [ 165.804561][ T6885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.805039][ T6885] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.815030][ T29] audit: type=1400 audit(1790777615.547:396): avc: denied { write } for pid=6884 comm="syz.3.1081" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.827918][ T6891] loop4: detected capacity change from 0 to 164 [ 165.882774][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 166.700867][ T6892] loop2: detected capacity change from 0 to 8192 [ 166.769641][ T6891] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 166.770582][ T29] audit: type=1400 audit(1790777616.517:397): avc: denied { mount } for pid=6890 comm="syz.4.1082" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 166.781873][ T29] audit: type=1400 audit(1790777616.527:398): avc: denied { write } for pid=6884 comm="syz.3.1081" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.798213][ T29] audit: type=1400 audit(1790777616.537:399): avc: denied { ioctl } for pid=6890 comm="syz.4.1082" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.828080][ T29] audit: type=1400 audit(1790777616.557:400): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 166.931357][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.544434][ T6912] loop4: detected capacity change from 0 to 512 [ 167.575791][ T6912] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 167.577950][ T6912] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1086: bg 0: block 4: invalid block bitmap [ 167.578024][ T6912] loop4: lost filesystem error report for type 5 error -117 [ 167.578224][ T6912] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 167.578242][ T6912] loop4: lost filesystem error report for type 5 error -117 [ 167.578555][ T6912] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1086: invalid indirect mapped block 1 (level 1) [ 167.578584][ T6912] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.578824][ T6912] EXT4-fs (loop4): 1 truncate cleaned up [ 167.579322][ T6912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.920298][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.938412][ T6927] loop4: detected capacity change from 0 to 512 [ 167.943025][ T6925] loop3: detected capacity change from 0 to 164 [ 167.949327][ T6927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.949415][ T6927] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.088151][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 168.088168][ T29] audit: type=1400 audit(1790777617.827:402): avc: denied { write } for pid=6926 comm="syz.4.1092" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.091437][ T29] audit: type=1400 audit(1790777617.837:403): avc: denied { create } for pid=6926 comm="syz.4.1092" name=03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.094587][ T6937] loop3: detected capacity change from 0 to 512 [ 168.108719][ T6937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.110780][ T6937] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1095: bad orphan inode 131083 [ 168.110808][ T6937] loop3: lost filesystem error report for type 5 error -117 [ 168.111315][ T6937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.152017][ T6933] syzkaller1: entered promiscuous mode [ 168.152039][ T6933] syzkaller1: entered allmulticast mode [ 168.245992][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.253275][ T6936] loop2: detected capacity change from 0 to 512 [ 168.271680][ T6936] EXT4-fs: Ignoring removed bh option [ 168.321217][ T6936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.321638][ T6936] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.325158][ T29] audit: type=1400 audit(1790777618.067:404): avc: denied { write } for pid=6935 comm="syz.2.1096" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.340392][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.441562][ T29] audit: type=1400 audit(1790777618.187:405): avc: denied { write } for pid=6935 comm="syz.2.1096" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.512119][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.582072][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'. [ 169.284006][ T6952] loop4: detected capacity change from 0 to 8192 [ 169.499467][ T6956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65309 sclass=netlink_route_socket pid=6956 comm=syz.2.1101 [ 169.524415][ T6957] PM: suspend entry (deep) [ 169.584183][ T3724] Filesystems sync: 0.059 seconds [ 169.791623][ T6957] Freezing user space processes [ 170.152678][ T6957] Freezing user space processes completed (elapsed 0.360 seconds) [ 170.152708][ T6957] OOM killer disabled. [ 170.152736][ T6957] Freezing remaining freezable tasks [ 170.154872][ T6957] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 170.155191][ T6957] printk: Suspending console(s) (use no_console_suspend to debug) [ 170.228210][ T6957] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 170.228687][ T6957] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 170.228818][ T6957] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 170.228952][ T6957] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 170.229079][ T6957] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 170.229139][ T6957] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 170.229219][ T6957] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 170.229689][ T6957] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 170.229781][ T6957] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 170.229900][ T6957] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 170.230030][ T6957] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 170.230102][ T6957] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 170.230161][ T6957] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 170.230252][ T6957] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 170.230381][ T6957] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 170.230459][ T6957] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 170.277094][ T3789] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 170.831921][ T6957] ACPI: PM: Preparing to enter system sleep state S3 [ 170.832421][ T6957] ACPI: PM: Saving platform NVS memory [ 170.832577][ T6957] Disabling non-boot CPUs ... [ 170.837157][ T6957] smpboot: CPU 1 is now offline [ 170.847448][ T6957] ACPI: PM: Low-level resume complete [ 170.847494][ T6957] ACPI: PM: Restoring platform NVS memory [ 170.859672][ T6957] Enabling non-boot CPUs ... [ 170.860044][ T6957] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 170.864560][ T6957] CPU1 is up [ 170.864771][ T6957] ACPI: PM: Waking up from system sleep state S3 [ 170.921259][ T6561] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 171.102599][ T6957] OOM killer enabled. [ 171.102618][ T6957] Restarting tasks: Starting [ 171.146607][ T6965] PM: suspend entry (deep) [ 171.146707][ T6965] PM: suspend exit [ 171.156979][ T6957] Restarting tasks: Done [ 171.157029][ T6957] random: crng reseeded on system resumption [ 171.157046][ T6957] hwrng_fill thread creation failed [ 171.157061][ T6957] PM: suspend exit [ 171.191200][ T29] audit: type=1400 audit(1790777620.944:406): avc: denied { connect } for pid=6966 comm="syz.2.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.243353][ T29] audit: type=1400 audit(1790777620.984:407): avc: denied { read } for pid=6977 comm="syz.1.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.282772][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1109'. [ 171.305535][ T6980] loop4: detected capacity change from 0 to 512 [ 171.309726][ T6980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.315310][ T6980] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1110: bad orphan inode 131083 [ 171.315336][ T6980] loop4: lost filesystem error report for type 5 error -117 [ 171.315967][ T6980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.331887][ T6976] syzkaller1: entered promiscuous mode [ 171.331905][ T6976] syzkaller1: entered allmulticast mode [ 171.340379][ T29] audit: type=1400 audit(1790777621.084:408): avc: denied { connect } for pid=6981 comm="syz.1.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 171.366857][ T6987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65309 sclass=netlink_route_socket pid=6987 comm=syz.3.1114 [ 171.390595][ T6992] device-mapper: ioctl: Invalid ioctl structure: name o, dev 3000000000 [ 171.509293][ T6997] loop2: detected capacity change from 0 to 512 [ 171.523032][ T6997] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 171.551712][ T6997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1117: bg 0: block 4: invalid block bitmap [ 171.551825][ T6997] loop2: lost filesystem error report for type 5 error -117 [ 171.552908][ T6997] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 171.552963][ T6997] loop2: lost filesystem error report for type 5 error -117 [ 171.554866][ T6997] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1117: invalid indirect mapped block 1 (level 1) [ 171.554996][ T6997] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 171.555205][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.557990][ T6997] EXT4-fs (loop2): 1 truncate cleaned up [ 171.562639][ T6997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.575058][ T6999] PM: suspend entry (deep) [ 171.707249][ T6591] Filesystems sync: 0.130 seconds [ 171.870537][ T7013] loop4: detected capacity change from 0 to 256 [ 171.872630][ T7013] vfat: Unknown parameter 'ioKharset' [ 171.873497][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.874148][ T6999] Freezing user space processes [ 171.897185][ T6999] Freezing user space processes completed (elapsed 0.023 seconds) [ 171.897246][ T6999] OOM killer disabled. [ 171.897256][ T6999] Freezing remaining freezable tasks [ 171.899605][ T6999] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 171.899754][ T6999] printk: Suspending console(s) (use no_console_suspend to debug) [ 171.963657][ T6999] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 171.963729][ T6999] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 171.963857][ T6999] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 171.963969][ T6999] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 171.964059][ T6999] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 171.964129][ T6999] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 171.964219][ T6999] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 171.964317][ T6999] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 171.964419][ T6999] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 171.964507][ T6999] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 171.964639][ T6999] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 171.964709][ T6999] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 171.964807][ T6999] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 171.964860][ T6999] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 171.965028][ T6999] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 171.965128][ T6999] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 172.010861][ T3739] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 172.556079][ T6999] ACPI: PM: Preparing to enter system sleep state S3 [ 172.556648][ T6999] ACPI: PM: Saving platform NVS memory [ 172.556837][ T6999] Disabling non-boot CPUs ... [ 172.560969][ T6999] smpboot: CPU 1 is now offline [ 172.566904][ T6999] ACPI: PM: Low-level resume complete [ 172.566950][ T6999] ACPI: PM: Restoring platform NVS memory [ 172.580098][ T6999] Enabling non-boot CPUs ... [ 172.580407][ T6999] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 172.584373][ T6999] CPU1 is up [ 172.584728][ T6999] ACPI: PM: Waking up from system sleep state S3 [ 172.648980][ T3719] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 172.807146][ T6999] OOM killer enabled. [ 172.807163][ T6999] Restarting tasks: Starting [ 172.813249][ T6999] Restarting tasks: Done [ 172.814079][ T6999] random: crng reseeded on system resumption [ 172.814697][ T6999] PM: suspend exit [ 172.827571][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1124'. [ 172.860373][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 172.909224][ T7014] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 172.944051][ T7023] device-mapper: ioctl: Invalid ioctl structure: name o, dev 3000000000 [ 173.295053][ T7032] syzkaller1: entered promiscuous mode [ 173.295108][ T7032] syzkaller1: entered allmulticast mode [ 173.305634][ T7041] loop3: detected capacity change from 0 to 512 [ 173.315183][ T7041] ======================================================= [ 173.315183][ T7041] WARNING: The mand mount option has been deprecated and [ 173.315183][ T7041] and is ignored by this kernel. Remove the mand [ 173.315183][ T7041] option from the mount to silence this warning. [ 173.315183][ T7041] ======================================================= [ 173.353146][ T7041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.353318][ T7041] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.554653][ T7049] loop4: detected capacity change from 0 to 512 [ 173.558913][ T7049] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 173.568094][ T7049] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1135: bg 0: block 4: invalid block bitmap [ 173.568175][ T7049] loop4: lost filesystem error report for type 5 error -117 [ 173.568348][ T7049] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 173.568412][ T7049] loop4: lost filesystem error report for type 5 error -117 [ 173.570047][ T7049] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1135: invalid indirect mapped block 1 (level 1) [ 173.570210][ T7049] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 173.570538][ T7049] EXT4-fs (loop4): 1 truncate cleaned up [ 173.574468][ T7049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.595393][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.691026][ T29] audit: type=1400 audit(1790777623.435:409): avc: denied { setopt } for pid=7057 comm="syz.1.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.701535][ T7060] PM: suspend entry (deep) [ 173.721575][ T7062] FAULT_INJECTION: forcing a failure. [ 173.721575][ T7062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.721642][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.3.1141 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.721670][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.721684][ T7062] Call Trace: [ 173.721691][ T7062] [ 173.721700][ T7062] __dump_stack+0x1d/0x30 [ 173.721730][ T7062] dump_stack_lvl+0x95/0xd0 [ 173.721762][ T7062] dump_stack+0x15/0x1b [ 173.721785][ T7062] should_fail_ex+0x262/0x280 [ 173.721816][ T7062] should_fail+0xb/0x20 [ 173.721844][ T7062] should_fail_usercopy+0x1a/0x20 [ 173.721955][ T7062] _copy_to_iter+0x248/0xea0 [ 173.721988][ T7062] ? can_rcvlist_sff_proc_show+0x4fa/0x540 [ 173.722022][ T7062] ? seq_read_iter+0x141/0x8f0 [ 173.722079][ T7062] seq_read_iter+0x728/0x8f0 [ 173.722117][ T7062] seq_read+0x279/0x2c0 [ 173.722154][ T7062] ? __pfx_seq_read+0x10/0x10 [ 173.722252][ T7062] proc_reg_read+0x128/0x1c0 [ 173.722280][ T7062] ? __pfx_proc_reg_read+0x10/0x10 [ 173.722311][ T7062] vfs_read+0x18e/0x7c0 [ 173.722409][ T7062] ? __rcu_read_unlock+0x4e/0x70 [ 173.722447][ T7062] ? __fget_files+0x184/0x1c0 [ 173.722472][ T7062] ? mutex_lock+0x57/0x90 [ 173.722554][ T7062] ksys_read+0xdc/0x1a0 [ 173.722588][ T7062] __x64_sys_read+0x40/0x50 [ 173.722620][ T7062] x64_sys_call+0x2135/0x2550 [ 173.722650][ T7062] do_syscall_64+0x112/0x360 [ 173.722678][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.722705][ T7062] RIP: 0033:0x7f6bad54e159 [ 173.722723][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.722745][ T7062] RSP: 002b:00007f6babfa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.722867][ T7062] RAX: ffffffffffffffda RBX: 00007f6bad7d5fa0 RCX: 00007f6bad54e159 [ 173.722881][ T7062] RDX: 0000000000001000 RSI: 0000200000000400 RDI: 0000000000000003 [ 173.722895][ T7062] RBP: 00007f6babfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.722911][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.722927][ T7062] R13: 00007f6bad7d6038 R14: 00007f6bad7d5fa0 R15: 00007ffe14eff768 [ 173.722949][ T7062] [ 173.786349][ T6593] Filesystems sync: 0.083 seconds [ 173.798738][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.847909][ T7060] Freezing user space processes [ 173.914491][ T7060] Freezing user space processes completed (elapsed 0.066 seconds) [ 173.914508][ T7060] OOM killer disabled. [ 173.914512][ T7060] Freezing remaining freezable tasks [ 173.916181][ T7060] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 173.916318][ T7060] printk: Suspending console(s) (use no_console_suspend to debug) [ 173.977573][ T7060] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 173.977617][ T7060] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 173.977654][ T7060] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 173.978524][ T7060] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 173.978549][ T7060] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 173.978616][ T7060] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 173.978668][ T7060] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 173.978694][ T7060] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 173.978789][ T7060] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 173.978816][ T7060] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 173.978837][ T7060] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 173.978937][ T7060] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 173.978983][ T7060] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 173.979004][ T7060] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 173.979026][ T7060] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 173.979112][ T7060] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 174.015993][ T6587] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 174.547569][ T7060] ACPI: PM: Preparing to enter system sleep state S3 [ 174.547772][ T7060] ACPI: PM: Saving platform NVS memory [ 174.547853][ T7060] Disabling non-boot CPUs ... [ 174.551583][ T7060] smpboot: CPU 1 is now offline [ 174.558777][ T7060] ACPI: PM: Low-level resume complete [ 174.558855][ T7060] ACPI: PM: Restoring platform NVS memory [ 174.572302][ T7060] Enabling non-boot CPUs ... [ 174.572453][ T7060] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 174.576017][ T7060] CPU1 is up [ 174.576208][ T7060] ACPI: PM: Waking up from system sleep state S3 [ 174.611154][ T3721] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 174.792144][ T7060] OOM killer enabled. [ 174.792154][ T7060] Restarting tasks: Starting [ 174.809903][ T7060] Restarting tasks: Done [ 174.809988][ T7060] random: crng reseeded on system resumption [ 174.813012][ T7060] PM: suspend exit [ 174.920684][ T7091] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.014433][ T7091] loop2: detected capacity change from 0 to 512 [ 175.017144][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 175.044360][ T7091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.123382][ T7091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.125708][ T7091] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.197220][ T29] audit: type=1400 audit(1790777624.947:410): avc: denied { write } for pid=7089 comm="syz.2.1148" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.200545][ T7091] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1148: bg 0: block 217: padding at end of block bitmap is not set [ 175.201804][ T7091] EXT4-fs (loop2): Remounting filesystem read-only [ 175.216400][ T7114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.219328][ T7114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.405720][ T7116] loop4: detected capacity change from 0 to 512 [ 175.410817][ T7116] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 175.474944][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 176.336625][ T7116] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1155: bg 0: block 4: invalid block bitmap [ 176.336661][ T7116] loop4: lost filesystem error report for type 5 error -117 [ 176.336822][ T7116] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 176.336839][ T7116] loop4: lost filesystem error report for type 5 error -117 [ 176.337103][ T7116] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1155: invalid indirect mapped block 1 (level 1) [ 176.337129][ T7116] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 176.337345][ T7116] EXT4-fs (loop4): 1 truncate cleaned up [ 176.337652][ T7116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.690296][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.749727][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 176.760032][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 176.793637][ T6561] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.793870][ T3767] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.794031][ T3767] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.794068][ T3767] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.204584][ T3772] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 177.204611][ T3772] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 177.305826][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 177.316250][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.363486][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 177.408059][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 177.420635][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1170'. [ 177.461277][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1171'. [ 177.518623][ T29] audit: type=1400 audit(1790777627.267:411): avc: denied { write } for pid=7157 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.520532][ T7159] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1173'. [ 177.537900][ T7159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.540765][ T7159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.542418][ T7159] bond0 (unregistering): Released all slaves [ 177.585645][ T29] audit: type=1400 audit(1790777627.327:412): avc: denied { append } for pid=7157 comm="syz.2.1173" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 177.771160][ T7171] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.818180][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 178.733903][ T7171] loop2: detected capacity change from 0 to 512 [ 178.767378][ T7171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.834650][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.837958][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.875208][ T7171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.875620][ T7171] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.898565][ T29] audit: type=1400 audit(1790777628.647:413): avc: denied { write } for pid=7170 comm="syz.2.1176" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.905773][ T7171] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1176: bg 0: block 217: padding at end of block bitmap is not set [ 178.906324][ T7171] EXT4-fs (loop2): Remounting filesystem read-only [ 178.922509][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.922637][ T3737] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 178.922724][ T3737] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 179.220185][ T7189] loop2: detected capacity change from 0 to 512 [ 179.224982][ T7189] EXT4-fs: Ignoring removed bh option [ 179.249162][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.249545][ T7189] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.294667][ T29] audit: type=1400 audit(1790777629.007:414): avc: denied { write } for pid=7187 comm="syz.2.1181" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.294748][ T29] audit: type=1400 audit(1790777629.017:415): avc: denied { write } for pid=7187 comm="syz.2.1181" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.295775][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.394967][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 179.761320][ T7222] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 179.769140][ T7222] loop4: detected capacity change from 0 to 512 [ 179.787119][ T7222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.796250][ T7222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.796472][ T7222] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.799593][ T29] audit: type=1400 audit(1790777629.547:416): avc: denied { write } for pid=7219 comm="syz.4.1192" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.799853][ T7222] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1192: bg 0: block 217: padding at end of block bitmap is not set [ 179.800098][ T7222] EXT4-fs (loop4): Remounting filesystem read-only [ 180.713895][ T7225] loop2: detected capacity change from 0 to 8192 [ 180.859449][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.860373][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.886314][ T7229] loop3: detected capacity change from 0 to 512 [ 180.890008][ T7229] EXT4-fs: Ignoring removed bh option [ 180.979472][ T7229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.979883][ T7229] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.011922][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.013659][ T3720] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 181.013681][ T3720] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 181.061547][ T29] audit: type=1400 audit(1790777630.787:417): avc: denied { write } for pid=7228 comm="syz.3.1193" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.061581][ T29] audit: type=1400 audit(1790777630.797:418): avc: denied { write } for pid=7228 comm="syz.3.1193" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.063414][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.791423][ T7241] __nla_validate_parse: 5 callbacks suppressed [ 181.791480][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1195'. [ 183.513910][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 183.597566][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 183.607534][ T7256] loop2: detected capacity change from 0 to 512 [ 183.613587][ T7256] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 183.694469][ T7256] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1199: bg 0: block 4: invalid block bitmap [ 183.694503][ T7256] loop2: lost filesystem error report for type 5 error -117 [ 183.694735][ T7256] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 183.694756][ T7256] loop2: lost filesystem error report for type 5 error -117 [ 183.694856][ T7256] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1199: invalid indirect mapped block 1 (level 1) [ 183.694952][ T7256] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.695126][ T7256] EXT4-fs (loop2): 1 truncate cleaned up [ 183.695493][ T7256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.746894][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'. [ 184.234258][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.258149][ T7277] PM: suspend entry (deep) [ 184.344974][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.345780][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.354077][ T3772] Filesystems sync: 0.095 seconds [ 184.393255][ T7277] Freezing user space processes [ 184.401165][ T7277] Freezing user space processes completed (elapsed 0.007 seconds) [ 184.401259][ T7277] OOM killer disabled. [ 184.401263][ T7277] Freezing remaining freezable tasks [ 184.402551][ T7277] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 184.402675][ T7277] printk: Suspending console(s) (use no_console_suspend to debug) [ 184.463847][ T7277] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 184.464897][ T7277] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 184.464930][ T7277] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 184.465018][ T7277] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 184.465040][ T7277] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 184.465175][ T7277] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 184.465258][ T7277] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 184.465279][ T7277] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 184.465329][ T7277] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 184.465408][ T7277] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 184.465484][ T7277] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 184.465575][ T7277] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 184.465596][ T7277] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 184.465668][ T7277] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 184.465729][ T7277] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 184.465780][ T7277] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 184.503030][ T3716] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 185.011761][ T7277] ACPI: PM: Preparing to enter system sleep state S3 [ 185.011991][ T7277] ACPI: PM: Saving platform NVS memory [ 185.012040][ T7277] Disabling non-boot CPUs ... [ 185.015960][ T7277] smpboot: CPU 1 is now offline [ 185.021140][ T7277] ACPI: PM: Low-level resume complete [ 185.021234][ T7277] ACPI: PM: Restoring platform NVS memory [ 185.034601][ T7277] Enabling non-boot CPUs ... [ 185.034725][ T7277] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 185.038603][ T7277] CPU1 is up [ 185.038783][ T7277] ACPI: PM: Waking up from system sleep state S3 [ 185.072359][ T6596] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 185.227219][ T7277] OOM killer enabled. [ 185.227231][ T7277] Restarting tasks: Starting [ 185.235433][ T7277] Restarting tasks: Done [ 185.235477][ T7277] random: crng reseeded on system resumption [ 185.240982][ T7277] PM: suspend exit [ 185.271091][ T7290] FAULT_INJECTION: forcing a failure. [ 185.271091][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 185.271123][ T7290] CPU: 0 UID: 0 PID: 7290 Comm: syz.3.1213 Not tainted syzkaller #0 PREEMPT(lazy) [ 185.271147][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 185.271161][ T7290] Call Trace: [ 185.271168][ T7290] [ 185.271175][ T7290] __dump_stack+0x1d/0x30 [ 185.271201][ T7290] dump_stack_lvl+0x95/0xd0 [ 185.271221][ T7290] dump_stack+0x15/0x1b [ 185.271239][ T7290] should_fail_ex+0x262/0x280 [ 185.271262][ T7290] ? mas_alloc_nodes+0x1a2/0x210 [ 185.271287][ T7290] should_failslab+0x8c/0xb0 [ 185.271321][ T7290] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 185.271349][ T7290] ? mas_alloc_nodes+0x1a2/0x210 [ 185.271369][ T7290] mas_alloc_nodes+0x1a2/0x210 [ 185.271389][ T7290] mas_preallocate+0x2ca/0x500 [ 185.271417][ T7290] __split_vma+0x299/0x720 [ 185.271451][ T7290] vms_gather_munmap_vmas+0x265/0x7f0 [ 185.271480][ T7290] mmap_region+0x811/0x2310 [ 185.271505][ T7290] ? __d_rehash+0x124/0x1d0 [ 185.271533][ T7290] ? _raw_spin_unlock+0x9/0x30 [ 185.271556][ T7290] ? __d_add+0x3ac/0x490 [ 185.271586][ T7290] ? __rcu_read_unlock+0x4e/0x70 [ 185.271621][ T7290] ? avc_has_perm_noaudit+0xac/0x160 [ 185.271668][ T7290] do_mmap+0xa20/0xc70 [ 185.271687][ T7290] vm_mmap_pgoff+0x183/0x2d0 [ 185.271713][ T7290] ksys_mmap_pgoff+0xc1/0x310 [ 185.271731][ T7290] ? __x64_sys_mmap+0x49/0x70 [ 185.271765][ T7290] x64_sys_call+0x23b3/0x2550 [ 185.271793][ T7290] do_syscall_64+0x112/0x360 [ 185.271815][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.271835][ T7290] RIP: 0033:0x7f6bad54e159 [ 185.271849][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.271867][ T7290] RSP: 002b:00007f6babfa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 185.271889][ T7290] RAX: ffffffffffffffda RBX: 00007f6bad7d5fa0 RCX: 00007f6bad54e159 [ 185.271905][ T7290] RDX: 0000000001000007 RSI: 0000000000b36000 RDI: 0000200000000000 [ 185.271920][ T7290] RBP: 00007f6babfa7090 R08: ffffffffffffffff R09: 0000000000000000 [ 185.271934][ T7290] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 185.271946][ T7290] R13: 00007f6bad7d6038 R14: 00007f6bad7d5fa0 R15: 00007ffe14eff768 [ 185.271963][ T7290] [ 185.354199][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1216'. [ 185.503248][ T7304] 9p: Bad value for 'wfdno' [ 185.549704][ T7300] loop3: detected capacity change from 0 to 512 [ 185.569881][ T7300] EXT4-fs: Ignoring removed bh option [ 185.760589][ T7318] loop2: detected capacity change from 0 to 512 [ 185.789843][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 185.947508][ T7318] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 185.985449][ T7300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.018986][ T7300] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.058559][ T7318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1220: bg 0: block 4: invalid block bitmap [ 186.058765][ T7318] loop2: lost filesystem error report for type 5 error -117 [ 186.059421][ T7318] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 186.059438][ T7318] loop2: lost filesystem error report for type 5 error -117 [ 186.062814][ T7318] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1220: invalid indirect mapped block 1 (level 1) [ 186.062880][ T7318] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 186.065602][ T7318] EXT4-fs (loop2): 1 truncate cleaned up [ 186.107947][ T7318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.336634][ T29] audit: type=1400 audit(1790777635.991:419): avc: denied { write } for pid=7299 comm="syz.3.1217" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.336686][ T29] audit: type=1400 audit(1790777636.071:420): avc: denied { write } for pid=7299 comm="syz.3.1217" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.432877][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.668754][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.668940][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.669171][ T7327] bridge0: entered allmulticast mode [ 186.671319][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.731091][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 186.774202][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'. [ 186.842452][ T29] audit: type=1326 audit(1790777636.591:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.3.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad54e159 code=0x7ffc0000 [ 186.842693][ T29] audit: type=1326 audit(1790777636.591:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.3.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad54e159 code=0x7ffc0000 [ 186.842725][ T29] audit: type=1326 audit(1790777636.591:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.3.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad54e159 code=0x7ffc0000 [ 186.842880][ T29] audit: type=1326 audit(1790777636.591:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.3.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f6bad54e159 code=0x7ffc0000 [ 186.843120][ T29] audit: type=1326 audit(1790777636.591:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.3.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad54e159 code=0x7ffc0000 [ 186.843321][ T29] audit: type=1326 audit(1790777636.591:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.3.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad54e159 code=0x7ffc0000 [ 186.843347][ T29] audit: type=1326 audit(1790777636.591:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.3.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad54e159 code=0x7ffc0000 [ 186.844704][ T29] audit: type=1326 audit(1790777636.591:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.3.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bad54e159 code=0x7ffc0000 [ 187.370039][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1231'. [ 187.414074][ T7354] netlink: 'syz.4.1233': attribute type 4 has an invalid length. [ 187.430616][ T7354] netlink: 'syz.4.1233': attribute type 4 has an invalid length. [ 187.458387][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 187.648131][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.648544][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.649233][ T7366] bridge0: entered allmulticast mode [ 187.669461][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 187.850415][ T7371] PM: suspend entry (deep) [ 187.973713][ T3777] Filesystems sync: 0.123 seconds [ 187.997962][ T7371] Freezing user space processes [ 188.026698][ T7371] Freezing user space processes completed (elapsed 0.028 seconds) [ 188.026714][ T7371] OOM killer disabled. [ 188.026718][ T7371] Freezing remaining freezable tasks [ 188.027919][ T7371] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 188.028049][ T7371] printk: Suspending console(s) (use no_console_suspend to debug) [ 188.108799][ T7371] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 188.108845][ T7371] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 188.108912][ T7371] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 188.108948][ T7371] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 188.109026][ T7371] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 188.109047][ T7371] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 188.109111][ T7371] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 188.109149][ T7371] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 188.109241][ T7371] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 188.109310][ T7371] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 188.109403][ T7371] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 188.109519][ T7371] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 188.117632][ T7371] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 188.117664][ T7371] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 188.117685][ T7371] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 188.117776][ T7371] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 188.166714][ T3732] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 188.685447][ T7371] ACPI: PM: Preparing to enter system sleep state S3 [ 188.685791][ T7371] ACPI: PM: Saving platform NVS memory [ 188.685874][ T7371] Disabling non-boot CPUs ... [ 188.690085][ T7371] smpboot: CPU 1 is now offline [ 188.700312][ T7371] ACPI: PM: Low-level resume complete [ 188.700459][ T7371] ACPI: PM: Restoring platform NVS memory [ 188.715619][ T7371] Enabling non-boot CPUs ... [ 188.715746][ T7371] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 188.719427][ T7371] CPU1 is up [ 188.719672][ T7371] ACPI: PM: Waking up from system sleep state S3 [ 188.752473][ T6584] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 188.944310][ T7371] OOM killer enabled. [ 188.944325][ T7371] Restarting tasks: Starting [ 188.957144][ T7371] Restarting tasks: Done [ 188.957200][ T7371] random: crng reseeded on system resumption [ 189.012587][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 189.816443][ T7371] PM: suspend exit [ 189.892538][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'. [ 190.070456][ T7402] loop3: detected capacity change from 0 to 1024 [ 190.083275][ T7402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 190.083402][ T7402] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.091482][ T7402] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.1252: lblock 0 mapped to illegal pblock 0 (length 1) [ 190.091700][ T7402] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 190.091727][ T7402] EXT4-fs (loop3): This should not happen!! Data will be lost [ 190.091727][ T7402] [ 190.092057][ T7402] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 1: comm syz.3.1252: lblock 1 mapped to illegal pblock 1 (length 3) [ 190.092317][ T7402] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 190.092345][ T7402] EXT4-fs (loop3): This should not happen!! Data will be lost [ 190.092345][ T7402] [ 190.368396][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.376464][ T7413] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 190.379454][ T7413] loop4: detected capacity change from 0 to 512 [ 190.380985][ T7413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.404779][ T7413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.404843][ T7413] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.408026][ T7413] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1253: bg 0: block 217: padding at end of block bitmap is not set [ 190.408199][ T7413] EXT4-fs (loop4): Remounting filesystem read-only [ 190.563098][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 191.518283][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.685290][ T3739] __quota_error: 62 callbacks suppressed [ 191.685309][ T3739] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 191.685331][ T3739] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 191.933817][ T29] audit: type=1400 audit(1790777641.652:491): avc: denied { read } for pid=3021 comm="dhcpcd" name="n26" dev="tmpfs" ino=3667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.933852][ T29] audit: type=1400 audit(1790777641.652:492): avc: denied { open } for pid=3021 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=3667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.933876][ T29] audit: type=1400 audit(1790777641.652:493): avc: denied { getattr } for pid=3021 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=3667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.933903][ T29] audit: type=1400 audit(1790777641.672:494): avc: denied { bind } for pid=7428 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 191.993153][ T29] audit: type=1400 audit(1790777641.732:495): avc: denied { read } for pid=7434 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.993215][ T29] audit: type=1400 audit(1790777641.732:496): avc: denied { read open } for pid=7434 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.993290][ T29] audit: type=1400 audit(1790777641.732:497): avc: denied { getattr } for pid=7434 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.218523][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 192.256001][ T29] audit: type=1400 audit(1790777642.002:498): avc: denied { write } for pid=7433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.373280][ T7459] device-mapper: table: 252:0: mirror: Too few mirror arguments (-EINVAL) [ 192.373484][ T7459] device-mapper: ioctl: error adding target to table [ 192.383931][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 192.642464][ T7453] loop3: detected capacity change from 0 to 512 [ 192.652927][ T7453] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 192.672699][ T7453] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1265: bg 0: block 4: invalid block bitmap [ 192.676218][ T7453] loop3: lost filesystem error report for type 5 error -117 [ 192.679404][ T7453] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 192.679462][ T7453] loop3: lost filesystem error report for type 5 error -117 [ 192.681302][ T7453] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1265: invalid indirect mapped block 1 (level 1) [ 192.681330][ T7453] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 192.683683][ C1] EXT4-fs (loop3): error count since last fsck: 3 [ 192.683716][ C1] EXT4-fs (loop3): initial error at time 1790777642: ext4_validate_block_bitmap:436 [ 192.683738][ C1] EXT4-fs (loop3): last error at time 1790777642: ext4_free_branches:1023: inode 11 [ 192.700121][ T7453] EXT4-fs (loop3): 1 truncate cleaned up [ 192.715933][ T7453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.909557][ T5027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.024322][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.024437][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.024613][ T7522] bridge0: entered allmulticast mode [ 193.071839][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'. [ 193.195601][ T7533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.199688][ T7533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.325548][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.325570][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.325610][ T7534] bridge_slave_0: entered allmulticast mode [ 193.325881][ T7534] bridge_slave_0: entered promiscuous mode [ 193.326585][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.326616][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.326802][ T7534] bridge_slave_1: entered allmulticast mode [ 193.327220][ T7534] bridge_slave_1: entered promiscuous mode [ 193.338624][ T7534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.339548][ T7534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.351579][ T7534] team0: Port device team_slave_0 added [ 193.352508][ T7534] team0: Port device team_slave_1 added [ 193.364122][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.364137][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.364242][ T7534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.364757][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.364770][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.364801][ T7534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.394511][ T7534] hsr_slave_0: entered promiscuous mode [ 193.394818][ T7534] hsr_slave_1: entered promiscuous mode [ 193.394998][ T7534] debugfs: 'hsr0' already exists in 'hsr' [ 193.395012][ T7534] Cannot create hsr debugfs directory [ 193.461966][ T7534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.465283][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.465856][ T7534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.467875][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.468645][ T7534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.470390][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.470999][ T7534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.472588][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.483265][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.483292][ T7534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.483362][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.483434][ T7534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.512385][ T7534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.519944][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.520639][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.528489][ T7534] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.532373][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.532406][ T3717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.540853][ T3717] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.540890][ T3717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.659418][ T7534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.666276][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 193.762991][ T7584] loop2: detected capacity change from 0 to 8192 [ 193.808376][ T7534] veth0_vlan: entered promiscuous mode [ 193.810891][ T7534] veth1_vlan: entered promiscuous mode [ 193.823002][ T7534] veth0_macvtap: entered promiscuous mode [ 193.825086][ T7534] veth1_macvtap: entered promiscuous mode [ 193.831037][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.835762][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.853835][ T3769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.874455][ T3717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.875502][ T3769] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.875536][ T3769] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.898129][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 194.085462][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 194.415050][ T7625] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1296'. [ 194.422580][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1298'. [ 194.538840][ T7636] mmap: syz.5.1301 (7636) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.877158][ T7651] FAULT_INJECTION: forcing a failure. [ 194.877158][ T7651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.877295][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz.1.1307 Not tainted syzkaller #0 PREEMPT(lazy) [ 194.877323][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 194.877337][ T7651] Call Trace: [ 194.877402][ T7651] [ 194.877410][ T7651] __dump_stack+0x1d/0x30 [ 194.877453][ T7651] dump_stack_lvl+0x95/0xd0 [ 194.877479][ T7651] dump_stack+0x15/0x1b [ 194.877503][ T7651] should_fail_ex+0x262/0x280 [ 194.877554][ T7651] should_fail+0xb/0x20 [ 194.877643][ T7651] should_fail_usercopy+0x1a/0x20 [ 194.877684][ T7651] _copy_from_user+0x1c/0xb0 [ 194.877751][ T7651] kstrtouint_from_user+0x69/0xf0 [ 194.877778][ T7651] ? 0xffffffff81000000 [ 194.877794][ T7651] ? avc_policy_seqno+0x15/0x30 [ 194.877896][ T7651] proc_fail_nth_write+0x50/0x160 [ 194.877923][ T7651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.877949][ T7651] vfs_write+0x254/0x9a0 [ 194.877983][ T7651] ? __fget_files+0x184/0x1c0 [ 194.878055][ T7651] ? mutex_lock+0x57/0x90 [ 194.878090][ T7651] ksys_write+0xdc/0x1a0 [ 194.878125][ T7651] __x64_sys_write+0x40/0x50 [ 194.878235][ T7651] x64_sys_call+0x154e/0x2550 [ 194.878312][ T7651] do_syscall_64+0x112/0x360 [ 194.878338][ T7651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.878413][ T7651] RIP: 0033:0x7f99a43ee98e [ 194.878480][ T7651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.878501][ T7651] RSP: 002b:00007f99a2e65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.878524][ T7651] RAX: ffffffffffffffda RBX: 00007f99a2e666c0 RCX: 00007f99a43ee98e [ 194.878596][ T7651] RDX: 0000000000000001 RSI: 00007f99a2e660a0 RDI: 0000000000000004 [ 194.878611][ T7651] RBP: 00007f99a2e66090 R08: 0000000000000000 R09: 0000000000000000 [ 194.878626][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.878723][ T7651] R13: 00007f99a46b6128 R14: 00007f99a46b6090 R15: 00007ffdb679e558 [ 194.878795][ T7651] [ 194.957265][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'. [ 195.053684][ T7657] loop2: detected capacity change from 0 to 8192 [ 195.165589][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1312'. [ 195.167234][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1312'. [ 195.600553][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1314'. [ 195.633361][ T7668] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 195.781469][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.781643][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.781765][ T7677] bridge0: entered allmulticast mode [ 195.928955][ T7681] syzkaller1: entered promiscuous mode [ 195.929055][ T7681] syzkaller1: entered allmulticast mode [ 195.930690][ T7690] syzkaller0: entered promiscuous mode [ 195.930708][ T7690] syzkaller0: entered allmulticast mode [ 196.091329][ T7698] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 196.094668][ T7698] loop4: detected capacity change from 0 to 512 [ 196.096354][ T7698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.106589][ T7698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.106649][ T7698] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.111392][ T7698] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1324: bg 0: block 217: padding at end of block bitmap is not set [ 196.111598][ T7698] EXT4-fs (loop4): Remounting filesystem read-only [ 197.217494][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.218087][ T3767] __quota_error: 26 callbacks suppressed [ 197.218100][ T3767] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 197.218170][ T3767] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 197.546982][ T7712] loop4: detected capacity change from 0 to 512 [ 197.585335][ T7712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.585395][ T7712] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.586627][ T29] audit: type=1400 audit(1790777647.332:525): avc: denied { write } for pid=7711 comm="syz.4.1327" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.587570][ T29] audit: type=1400 audit(1790777647.332:526): avc: denied { write } for pid=7711 comm="syz.4.1327" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.588247][ T29] audit: type=1400 audit(1790777647.332:527): avc: denied { read append open } for pid=7711 comm="syz.4.1327" path="/239/file0/blkio.bfq.io_queued" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 198.220412][ T7715] syz.4.1327 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 198.641213][ T7708] loop2: detected capacity change from 0 to 8192 [ 198.772644][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.436169][ T7723] __nla_validate_parse: 6 callbacks suppressed [ 199.436188][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 199.735355][ T7734] loop2: detected capacity change from 0 to 512 [ 199.739449][ T7734] EXT4-fs: Ignoring removed bh option [ 199.790816][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 199.828104][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 199.838114][ T7734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.838543][ T7734] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.850798][ T29] audit: type=1400 audit(1790777649.582:528): avc: denied { write } for pid=7733 comm="syz.2.1333" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.859273][ T29] audit: type=1400 audit(1790777649.602:529): avc: denied { write } for pid=7733 comm="syz.2.1333" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.967324][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.814741][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 200.815227][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1335'. [ 200.922046][ T7750] loop4: detected capacity change from 0 to 512 [ 200.933805][ T7750] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.937598][ T7750] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1336: bad orphan inode 131083 [ 200.937626][ T7750] loop4: lost filesystem error report for type 5 error -117 [ 200.938110][ T7750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.938538][ T7749] loop2: detected capacity change from 0 to 512 [ 200.965366][ T7749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.969614][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 200.970706][ T7745] syzkaller1: entered promiscuous mode [ 200.970723][ T7745] syzkaller1: entered allmulticast mode [ 200.990043][ T29] audit: type=1400 audit(1790777650.732:530): avc: denied { write } for pid=7748 comm="syz.2.1338" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.004836][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.089591][ T29] audit: type=1400 audit(1790777650.832:531): avc: denied { write } for pid=7756 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.090014][ T7764] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 201.100935][ T29] audit: type=1400 audit(1790777650.842:532): avc: denied { mount } for pid=7762 comm="syz.2.1342" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 201.121424][ T7767] loop2: detected capacity change from 0 to 512 [ 201.124640][ T7767] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 201.131484][ T7767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1342: bg 0: block 4: invalid block bitmap [ 201.131567][ T7767] loop2: lost filesystem error report for type 5 error -117 [ 201.133095][ T7767] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 201.133171][ T7767] loop2: lost filesystem error report for type 5 error -117 [ 201.133473][ T7767] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1342: invalid indirect mapped block 1 (level 1) [ 201.133538][ T7767] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 201.133681][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 201.133699][ C1] EXT4-fs (loop2): initial error at time 1790777650: ext4_validate_block_bitmap:436 [ 201.133737][ C1] EXT4-fs (loop2): last error at time 1790777650: ext4_mb_clear_bb:6680 [ 201.151310][ T7767] EXT4-fs (loop2): 1 truncate cleaned up [ 201.161523][ T7767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.216636][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.219063][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.234182][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.331689][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 201.430770][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.508755][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 201.516866][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 201.557861][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 201.599844][ T7787] PM: suspend entry (deep) [ 201.764380][ T3739] Filesystems sync: 0.152 seconds [ 201.936280][ T7787] Freezing user space processes [ 201.974332][ T7787] Freezing user space processes completed (elapsed 0.037 seconds) [ 201.974362][ T7787] OOM killer disabled. [ 201.974372][ T7787] Freezing remaining freezable tasks [ 201.976641][ T7787] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 201.976832][ T7787] printk: Suspending console(s) (use no_console_suspend to debug) [ 202.054658][ T7787] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 202.054858][ T7787] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 202.055026][ T7787] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 202.055097][ T7787] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 202.055169][ T7787] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 202.055249][ T7787] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 202.055308][ T7787] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 202.055431][ T7787] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 202.055488][ T7787] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 202.055599][ T7787] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 202.055716][ T7787] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 202.055849][ T7787] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 202.055926][ T7787] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 202.055977][ T7787] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 202.056097][ T7787] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 202.056148][ T7787] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 202.103820][ T3783] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 202.663891][ T7787] ACPI: PM: Preparing to enter system sleep state S3 [ 202.664879][ T7787] ACPI: PM: Saving platform NVS memory [ 202.664999][ T7787] Disabling non-boot CPUs ... [ 202.669124][ T7787] smpboot: CPU 1 is now offline [ 202.676330][ T7787] ACPI: PM: Low-level resume complete [ 202.676377][ T7787] ACPI: PM: Restoring platform NVS memory [ 202.690223][ T7787] Enabling non-boot CPUs ... [ 202.690694][ T7787] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 202.695123][ T7787] CPU1 is up [ 202.695445][ T7787] ACPI: PM: Waking up from system sleep state S3 [ 202.768017][ T3716] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 202.941130][ T7787] OOM killer enabled. [ 202.941150][ T7787] Restarting tasks: Starting [ 202.961396][ T7787] Restarting tasks: Done [ 202.961936][ T7787] random: crng reseeded on system resumption [ 202.963989][ T7787] PM: suspend exit [ 202.994397][ T7797] syzkaller1: entered promiscuous mode [ 202.994458][ T7797] syzkaller1: entered allmulticast mode [ 203.112417][ T7813] loop2: detected capacity change from 0 to 512 [ 203.128666][ T7813] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 203.159719][ T7813] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1357: bg 0: block 4: invalid block bitmap [ 203.159748][ T7813] loop2: lost filesystem error report for type 5 error -117 [ 203.159909][ T7813] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 203.159931][ T7813] loop2: lost filesystem error report for type 5 error -117 [ 203.160101][ T7813] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1357: invalid indirect mapped block 1 (level 1) [ 203.160133][ T7813] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.160372][ T7813] EXT4-fs (loop2): 1 truncate cleaned up [ 203.160736][ T7813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.973136][ T7819] loop5: detected capacity change from 0 to 8192 [ 204.020965][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 204.020979][ T29] audit: type=1326 audit(1790777653.738:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.4.1359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8360dfe159 code=0x7fc00000 [ 204.184854][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.185007][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.185240][ T7824] bridge0: entered allmulticast mode [ 204.283747][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.292087][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.320827][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.485788][ T7840] __nla_validate_parse: 7 callbacks suppressed [ 204.485864][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1369'. [ 205.058365][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1375'. [ 205.080730][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'. [ 205.081334][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'. [ 205.102871][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 205.103480][ T7861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1377'. [ 205.136595][ T29] audit: type=1400 audit(1790777654.878:536): avc: denied { read } for pid=7866 comm="syz.2.1379" path="socket:[18422]" dev="sockfs" ino=18422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.235634][ T7869] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 205.235661][ T29] audit: type=1400 audit(1790777654.978:537): avc: denied { setopt } for pid=7868 comm="syz.0.1381" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.241300][ T29] audit: type=1400 audit(1790777654.988:538): avc: denied { write } for pid=7866 comm="syz.2.1379" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.296025][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.297909][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.298673][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1383'. [ 205.302020][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1383'. [ 205.377239][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 205.512363][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.513949][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.586210][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'. [ 206.174650][ T7919] 9p: Bad value for 'wfdno' [ 206.567886][ T7906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 206.628228][ T29] audit: type=1400 audit(1790777656.368:539): avc: denied { connect } for pid=7924 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.628270][ T29] audit: type=1400 audit(1790777656.368:540): avc: denied { shutdown } for pid=7924 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.728013][ T7906] loop5: detected capacity change from 0 to 512 [ 206.743144][ T7906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.782641][ T7906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.788780][ T7906] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.856626][ T29] audit: type=1400 audit(1790777656.598:541): avc: denied { write } for pid=7905 comm="syz.5.1393" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.888779][ T7906] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.1393: bg 0: block 217: padding at end of block bitmap is not set [ 206.905734][ T7906] EXT4-fs (loop5): Remounting filesystem read-only [ 206.961596][ T7534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.961734][ T3723] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 206.961755][ T3723] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 207.043374][ T7957] PM: suspend entry (deep) [ 207.044626][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.047679][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.143090][ T3723] Filesystems sync: 0.094 seconds [ 207.293471][ T7959] loop5: detected capacity change from 0 to 512 [ 207.302480][ T7959] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 207.304179][ T7959] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.1411: bg 0: block 4: invalid block bitmap [ 207.304267][ T7959] loop5: lost filesystem error report for type 5 error -117 [ 207.304380][ T7959] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 207.304400][ T7959] loop5: lost filesystem error report for type 5 error -117 [ 207.304583][ T7959] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1411: invalid indirect mapped block 1 (level 1) [ 207.304617][ T7959] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 207.304901][ T7959] EXT4-fs (loop5): 1 truncate cleaned up [ 207.305377][ T7959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.400983][ T7957] Freezing user space processes [ 207.471284][ T7957] Freezing user space processes completed (elapsed 0.070 seconds) [ 207.471332][ T7957] OOM killer disabled. [ 207.471344][ T7957] Freezing remaining freezable tasks [ 207.473305][ T7957] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 207.473373][ T7957] printk: Suspending console(s) (use no_console_suspend to debug) [ 207.561553][ T7957] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 207.561685][ T7957] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 207.561745][ T7957] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 207.561852][ T7957] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 207.561993][ T7957] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 207.562094][ T7957] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 207.562202][ T7957] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 207.562332][ T7957] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 207.562464][ T7957] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 207.562642][ T7957] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 207.562762][ T7957] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 207.562813][ T7957] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 207.570445][ T7957] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 207.570563][ T7957] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 207.570646][ T7957] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 207.570782][ T7957] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 207.609607][ T313] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 208.152181][ T7957] ACPI: PM: Preparing to enter system sleep state S3 [ 208.152420][ T7957] ACPI: PM: Saving platform NVS memory [ 208.152513][ T7957] Disabling non-boot CPUs ... [ 208.156361][ T7957] smpboot: CPU 1 is now offline [ 208.165028][ T7957] ACPI: PM: Low-level resume complete [ 208.165075][ T7957] ACPI: PM: Restoring platform NVS memory [ 208.176264][ T7957] Enabling non-boot CPUs ... [ 208.176676][ T7957] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 208.181187][ T7957] CPU1 is up [ 208.181446][ T7957] ACPI: PM: Waking up from system sleep state S3 [ 208.232994][ T3715] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 208.423667][ T7957] OOM killer enabled. [ 208.423688][ T7957] Restarting tasks: Starting [ 208.431208][ T7957] Restarting tasks: Done [ 208.431718][ T7957] random: crng reseeded on system resumption [ 208.440642][ T7957] PM: suspend exit [ 208.448730][ T7534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.519594][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.519730][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.520265][ T7979] bridge0: entered allmulticast mode [ 208.670488][ T7980] loop4: detected capacity change from 0 to 512 [ 208.697057][ T7980] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 208.700432][ T7980] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1418: bg 0: block 4: invalid block bitmap [ 208.700459][ T7980] loop4: lost filesystem error report for type 5 error -117 [ 208.701044][ T7980] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 208.701085][ T7980] loop4: lost filesystem error report for type 5 error -117 [ 208.701897][ T7980] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1418: invalid indirect mapped block 1 (level 1) [ 208.702049][ T7980] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 208.702358][ C1] EXT4-fs (loop4): error count since last fsck: 3 [ 208.702379][ C1] EXT4-fs (loop4): initial error at time 1790777658: ext4_validate_block_bitmap:436 [ 208.702419][ C1] EXT4-fs (loop4): last error at time 1790777658: ext4_free_branches:1023: inode 11 [ 208.704721][ T7980] EXT4-fs (loop4): 1 truncate cleaned up [ 208.708997][ T7980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.804371][ T7985] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.968627][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.001515][ T7997] loop2: detected capacity change from 0 to 8192 [ 209.079666][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.079779][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.084215][ T8002] loop5: detected capacity change from 0 to 1024 [ 209.084536][ T8002] ext4: Unknown parameter 'smackfsdef' [ 209.088511][ T7997] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 209.140308][ T29] audit: type=1400 audit(1790777658.885:542): avc: denied { create } for pid=7983 comm="syz.5.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 209.444737][ T8008] loop4: detected capacity change from 0 to 512 [ 209.456760][ T8008] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 209.484554][ T8008] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1426: bg 0: block 4: invalid block bitmap [ 209.498196][ T8008] loop4: lost filesystem error report for type 5 error -117 [ 209.501413][ T8008] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 209.501577][ T8008] loop4: lost filesystem error report for type 5 error -117 [ 209.512345][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 209.512370][ C1] EXT4-fs (loop4): initial error at time 1790777659: ext4_validate_block_bitmap:436 [ 209.512394][ C1] EXT4-fs (loop4): last error at time 1790777659: ext4_mb_clear_bb:6680 [ 209.514120][ T8008] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1426: invalid indirect mapped block 1 (level 1) [ 209.515061][ T8008] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 209.516292][ T8008] EXT4-fs (loop4): 1 truncate cleaned up [ 209.520071][ T8008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.613126][ T8014] PM: suspend entry (deep) [ 209.669177][ T6624] Filesystems sync: 0.055 seconds [ 209.722166][ T8014] Freezing user space processes [ 209.733241][ T8014] Freezing user space processes completed (elapsed 0.011 seconds) [ 209.733345][ T8014] OOM killer disabled. [ 209.733363][ T8014] Freezing remaining freezable tasks [ 209.735843][ T8014] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 209.735923][ T8014] printk: Suspending console(s) (use no_console_suspend to debug) [ 209.793156][ T8014] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 209.793716][ T8014] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 209.794166][ T8014] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 209.794374][ T8014] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 209.794447][ T8014] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 209.794577][ T8014] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 209.794696][ T8014] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 209.794826][ T8014] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 209.803110][ T8014] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 209.803579][ T8014] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 209.803906][ T8014] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 209.804495][ T8014] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 209.804646][ T8014] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 209.804705][ T8014] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 209.804867][ T8014] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 209.804917][ T8014] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 209.853911][ T6592] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 210.386855][ T8014] ACPI: PM: Preparing to enter system sleep state S3 [ 210.387134][ T8014] ACPI: PM: Saving platform NVS memory [ 210.387245][ T8014] Disabling non-boot CPUs ... [ 210.391262][ T8014] smpboot: CPU 1 is now offline [ 210.397451][ T8014] ACPI: PM: Low-level resume complete [ 210.397497][ T8014] ACPI: PM: Restoring platform NVS memory [ 210.408498][ T8014] Enabling non-boot CPUs ... [ 210.408809][ T8014] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 210.413368][ T8014] CPU1 is up [ 210.413563][ T8014] ACPI: PM: Waking up from system sleep state S3 [ 210.472136][ T6625] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 210.637110][ T8014] OOM killer enabled. [ 210.637148][ T8014] Restarting tasks: Starting [ 210.664696][ T8014] Restarting tasks: Done [ 210.666075][ T8014] random: crng reseeded on system resumption [ 210.666538][ T8014] PM: suspend exit [ 210.673340][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.711329][ T8032] __nla_validate_parse: 10 callbacks suppressed [ 210.711346][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 210.711950][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 210.733672][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 210.899718][ T8040] 9p: Bad value for 'wfdno' [ 211.159186][ T29] audit: type=1400 audit(1790777660.907:543): avc: denied { mounton } for pid=8059 comm="syz.1.1442" path="/proc/827/task" dev="proc" ino=19808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 211.203813][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.203850][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.203950][ T8043] bridge_slave_0: entered allmulticast mode [ 211.204460][ T8043] bridge_slave_0: entered promiscuous mode [ 211.218922][ T29] audit: type=1400 audit(1790777660.967:544): avc: denied { execute } for pid=8059 comm="syz.1.1442" path=2F6D656D66643A0241BBCC960E6F1FE240CCB15967202864656C6574656429 dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 211.226621][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.226657][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.226821][ T8043] bridge_slave_1: entered allmulticast mode [ 211.227255][ T8043] bridge_slave_1: entered promiscuous mode [ 211.249166][ T8043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.250936][ T8043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.266981][ T8043] team0: Port device team_slave_0 added [ 211.268513][ T8043] team0: Port device team_slave_1 added [ 211.285063][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.285101][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.288640][ T8043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.289108][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.289118][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.289144][ T8043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.314324][ T8043] hsr_slave_0: entered promiscuous mode [ 211.314787][ T8043] hsr_slave_1: entered promiscuous mode [ 211.315730][ T8043] debugfs: 'hsr0' already exists in 'hsr' [ 211.315743][ T8043] Cannot create hsr debugfs directory [ 211.454805][ T8043] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.459633][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.460956][ T8043] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.465077][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.470370][ T8043] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.473848][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.477707][ T8043] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.480887][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.508394][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.508455][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.508630][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.508752][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.586889][ T8043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.594203][ T3773] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.595531][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.604469][ T8043] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.616151][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.616214][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.617789][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.617843][ T3748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.657537][ T8043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.810095][ T8043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.838943][ T8095] PM: suspend entry (deep) [ 211.918495][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'. [ 211.920746][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'. [ 211.921170][ T8021] Filesystems sync: 0.081 seconds [ 212.017961][ T8043] veth0_vlan: entered promiscuous mode [ 212.024121][ T8043] veth1_vlan: entered promiscuous mode [ 212.031463][ T8095] Freezing user space processes [ 212.071993][ T8095] Freezing user space processes completed (elapsed 0.040 seconds) [ 212.072092][ T8095] OOM killer disabled. [ 212.072103][ T8095] Freezing remaining freezable tasks [ 212.074212][ T8095] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 212.074302][ T8095] printk: Suspending console(s) (use no_console_suspend to debug) [ 212.128025][ T8095] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 212.128254][ T8095] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 212.128413][ T8095] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 212.128485][ T8095] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 212.128602][ T8095] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 212.128665][ T8095] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 212.128895][ T8095] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 212.128954][ T8095] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 212.129082][ T8095] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 212.129174][ T8095] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 212.129447][ T8095] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 212.129526][ T8095] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 212.129699][ T8095] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 212.129837][ T8095] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 212.129918][ T8095] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 212.130039][ T8095] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 212.185244][ T3747] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 212.704116][ T8095] ACPI: PM: Preparing to enter system sleep state S3 [ 212.704466][ T8095] ACPI: PM: Saving platform NVS memory [ 212.704571][ T8095] Disabling non-boot CPUs ... [ 212.709384][ T8095] smpboot: CPU 1 is now offline [ 212.716617][ T8095] ACPI: PM: Low-level resume complete [ 212.716662][ T8095] ACPI: PM: Restoring platform NVS memory [ 212.727205][ T8095] Enabling non-boot CPUs ... [ 212.727604][ T8095] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 212.731934][ T8095] CPU1 is up [ 212.732175][ T8095] ACPI: PM: Waking up from system sleep state S3 [ 212.789514][ T6623] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 212.968386][ T8095] OOM killer enabled. [ 212.968401][ T8095] Restarting tasks: Starting [ 212.981635][ T8095] Restarting tasks: Done [ 212.981673][ T8095] random: crng reseeded on system resumption [ 212.981687][ T8095] hwrng_fill thread creation failed [ 212.981703][ T8095] PM: suspend exit [ 212.995126][ T8043] veth0_macvtap: entered promiscuous mode [ 212.998753][ T8043] veth1_macvtap: entered promiscuous mode [ 212.998863][ T8111] FAULT_INJECTION: forcing a failure. [ 212.998863][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 212.998888][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.5.1450 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.998921][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 212.998943][ T8111] Call Trace: [ 212.998949][ T8111] [ 212.998956][ T8111] __dump_stack+0x1d/0x30 [ 212.999043][ T8111] dump_stack_lvl+0x95/0xd0 [ 212.999067][ T8111] dump_stack+0x15/0x1b [ 212.999090][ T8111] should_fail_ex+0x262/0x280 [ 212.999117][ T8111] should_failslab+0x8c/0xb0 [ 212.999177][ T8111] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 212.999239][ T8111] ? __d_alloc+0x34/0x320 [ 212.999266][ T8111] ? __d_alloc+0x34/0x320 [ 212.999299][ T8111] __d_alloc+0x34/0x320 [ 212.999323][ T8111] ? d_alloc_pseudo+0x13/0x80 [ 212.999420][ T8111] d_alloc_pseudo+0x1e/0x80 [ 212.999450][ T8111] alloc_path_pseudo+0xa4/0x140 [ 212.999527][ T8111] alloc_file_pseudo+0x55/0x120 [ 212.999552][ T8111] sock_alloc_file+0x9c/0x1e0 [ 212.999616][ T8111] __sys_socket+0x118/0x180 [ 212.999650][ T8111] __x64_sys_socket+0x3f/0x50 [ 212.999747][ T8111] x64_sys_call+0x246e/0x2550 [ 212.999776][ T8111] do_syscall_64+0x112/0x360 [ 212.999826][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.999892][ T8111] RIP: 0033:0x7f28b2a5e159 [ 212.999911][ T8111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.999942][ T8111] RSP: 002b:00007f28b14b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 212.999974][ T8111] RAX: ffffffffffffffda RBX: 00007f28b2ce5fa0 RCX: 00007f28b2a5e159 [ 212.999988][ T8111] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 213.000000][ T8111] RBP: 00007f28b2af506b R08: 0000000000000000 R09: 0000000000000000 [ 213.000013][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.000047][ T8111] R13: 00007f28b2ce6038 R14: 00007f28b2ce5fa0 R15: 00007ffcae0092b8 [ 213.000069][ T8111] [ 213.015698][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.021204][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.057836][ T3709] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.058108][ T3709] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.058145][ T3709] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.058178][ T3709] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.074719][ T29] audit: type=1400 audit(1790777662.826:545): avc: denied { mounton } for pid=8043 comm="syz-executor" path="/root/syzkaller.XutIVK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 213.093543][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 213.177072][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'. [ 213.435582][ T8131] loop6: detected capacity change from 0 to 512 [ 213.449679][ T8131] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 213.473379][ T8131] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1438: bg 0: block 4: invalid block bitmap [ 213.473616][ T8131] loop6: lost filesystem error report for type 5 error -117 [ 213.475724][ T8131] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 213.475780][ T8131] loop6: lost filesystem error report for type 5 error -117 [ 213.477181][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 213.477200][ C1] EXT4-fs (loop6): initial error at time 1790777663: ext4_validate_block_bitmap:436 [ 213.477246][ C1] EXT4-fs (loop6): last error at time 1790777663: ext4_mb_clear_bb:6680 [ 213.488670][ T8131] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1438: invalid indirect mapped block 1 (level 1) [ 213.488722][ T8131] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 213.496588][ T8131] EXT4-fs (loop6): 1 truncate cleaned up [ 213.503420][ T8131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.569741][ T8138] device-mapper: table: 252:0: zero-length target [ 213.569758][ T8138] device-mapper: ioctl: error adding target to table [ 213.624755][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 213.624972][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 213.687317][ T8151] PM: suspend entry (deep) [ 213.794542][ T3740] Filesystems sync: 0.106 seconds [ 213.794565][ T8152] loop2: detected capacity change from 0 to 512 [ 213.795061][ T8043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.813016][ T8152] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 213.823336][ T8152] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1460: bg 0: block 4: invalid block bitmap [ 213.823586][ T8152] loop2: lost filesystem error report for type 5 error -117 [ 213.824355][ T8152] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 213.824426][ T8152] loop2: lost filesystem error report for type 5 error -117 [ 213.825034][ T8152] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1460: invalid indirect mapped block 1 (level 1) [ 213.825116][ T8152] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 213.827186][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 213.827213][ C1] EXT4-fs (loop2): initial error at time 1790777663: ext4_validate_block_bitmap:436 [ 213.827296][ C1] EXT4-fs (loop2): last error at time 1790777663: ext4_free_branches:1023: inode 11 [ 213.848207][ T8152] EXT4-fs (loop2): 1 truncate cleaned up [ 213.854123][ T8152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.978476][ T8151] Freezing user space processes [ 214.047837][ T8151] Freezing user space processes completed (elapsed 0.069 seconds) [ 214.047918][ T8151] OOM killer disabled. [ 214.047955][ T8151] Freezing remaining freezable tasks [ 214.050784][ T8151] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 214.050882][ T8151] printk: Suspending console(s) (use no_console_suspend to debug) [ 214.120145][ T8151] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 214.120275][ T8151] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 214.120395][ T8151] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 214.120448][ T8151] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 214.120576][ T8151] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 214.120776][ T8151] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 214.120867][ T8151] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 214.120925][ T8151] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 214.121098][ T8151] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 214.121217][ T8151] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 214.121307][ T8151] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 214.121376][ T8151] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 214.121496][ T8151] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 214.121597][ T8151] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 214.121648][ T8151] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 214.121706][ T8151] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 214.167307][ T6625] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 214.703677][ T8151] ACPI: PM: Preparing to enter system sleep state S3 [ 214.703929][ T8151] ACPI: PM: Saving platform NVS memory [ 214.704033][ T8151] Disabling non-boot CPUs ... [ 214.708843][ T8151] smpboot: CPU 1 is now offline [ 214.713957][ T8151] ACPI: PM: Low-level resume complete [ 214.714024][ T8151] ACPI: PM: Restoring platform NVS memory [ 214.725729][ T8151] Enabling non-boot CPUs ... [ 214.726198][ T8151] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 214.730803][ T8151] CPU1 is up [ 214.731114][ T8151] ACPI: PM: Waking up from system sleep state S3 [ 214.788066][ T3741] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 214.942228][ T8151] OOM killer enabled. [ 214.942245][ T8151] Restarting tasks: Starting [ 214.975951][ T29] audit: type=1400 audit(1790777664.724:546): avc: denied { ioctl } for pid=8154 comm="syz.6.1463" path="socket:[20335]" dev="sockfs" ino=20335 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.985281][ T8151] Restarting tasks: Done [ 214.985354][ T8151] random: crng reseeded on system resumption [ 214.985370][ T8151] hwrng_fill thread creation failed [ 214.985386][ T8151] PM: suspend exit [ 214.993455][ T8159] loop5: detected capacity change from 0 to 512 [ 215.006413][ T8159] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 215.006454][ T8159] loop5: lost filesystem error report for type 5 error -12 [ 215.008054][ T8159] EXT4-fs (loop5): 2 truncates cleaned up [ 215.008436][ T8159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.121111][ T29] audit: type=1326 audit(1790777664.864:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.1.1465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a442e159 code=0x7ffc0000 [ 215.121194][ T29] audit: type=1326 audit(1790777664.864:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.1.1465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a442e159 code=0x7ffc0000 [ 215.121301][ T29] audit: type=1326 audit(1790777664.864:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.1.1465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a442e159 code=0x7ffc0000 [ 215.121326][ T29] audit: type=1326 audit(1790777664.864:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.1.1465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a442e159 code=0x7ffc0000 [ 215.121352][ T29] audit: type=1326 audit(1790777664.864:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.1.1465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a442e159 code=0x7ffc0000 [ 215.121428][ T29] audit: type=1326 audit(1790777664.864:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.1.1465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f99a442e159 code=0x7ffc0000 [ 215.162898][ T29] audit: type=1326 audit(1790777664.914:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.1.1465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a442e159 code=0x7ffc0000 [ 215.166379][ T29] audit: type=1326 audit(1790777664.914:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.1.1465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a442e159 code=0x7ffc0000 [ 215.167384][ T29] audit: type=1326 audit(1790777664.914:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.1.1465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a442e159 code=0x7ffc0000 [ 215.183632][ T8167] syzkaller1: entered promiscuous mode [ 215.183653][ T8167] syzkaller1: entered allmulticast mode [ 215.238939][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.254030][ T7534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.351014][ T8182] device-mapper: table: 252:0: zero-length target [ 215.351036][ T8182] device-mapper: ioctl: error adding target to table [ 215.367522][ T8174] loop6: detected capacity change from 0 to 512 [ 215.382089][ T8174] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 215.404608][ T8174] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1468: bg 0: block 4: invalid block bitmap [ 215.405216][ T8174] loop6: lost filesystem error report for type 5 error -117 [ 215.405570][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1474'. [ 215.407668][ T8174] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 215.408212][ T8174] loop6: lost filesystem error report for type 5 error -117 [ 215.409321][ T8174] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1468: invalid indirect mapped block 1 (level 1) [ 215.409579][ T8174] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 215.410283][ C1] EXT4-fs (loop6): error count since last fsck: 3 [ 215.410302][ C1] EXT4-fs (loop6): initial error at time 1790777665: ext4_validate_block_bitmap:436 [ 215.410346][ C1] EXT4-fs (loop6): last error at time 1790777665: ext4_free_branches:1023: inode 11 [ 215.437576][ T8174] EXT4-fs (loop6): 1 truncate cleaned up [ 215.442719][ T8174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.606651][ T8196] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 215.709782][ T8200] PM: suspend entry (deep) [ 215.756549][ T8043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.766741][ T8022] Filesystems sync: 0.056 seconds [ 215.787355][ T8208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=88 sclass=netlink_xfrm_socket pid=8208 comm=syz.6.1481 [ 215.792380][ T8200] Freezing user space processes [ 215.921953][ T8200] Freezing user space processes completed (elapsed 0.129 seconds) [ 215.921990][ T8200] OOM killer disabled. [ 215.921994][ T8200] Freezing remaining freezable tasks [ 215.923494][ T8200] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 215.923526][ T8200] printk: Suspending console(s) (use no_console_suspend to debug) [ 215.971862][ T8200] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 215.972252][ T8200] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 215.972316][ T8200] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 215.972352][ T8200] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 215.972461][ T8200] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 215.972634][ T8200] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 215.981813][ T8200] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 215.981918][ T8200] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 215.981955][ T8200] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 215.981983][ T8200] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 215.982061][ T8200] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 215.982082][ T8200] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 215.982182][ T8200] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 215.982275][ T8200] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 215.982307][ T8200] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 215.982325][ T8200] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 216.020513][ T3753] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 216.527240][ T8200] ACPI: PM: Preparing to enter system sleep state S3 [ 216.527458][ T8200] ACPI: PM: Saving platform NVS memory [ 216.527503][ T8200] Disabling non-boot CPUs ... [ 216.531563][ T8200] smpboot: CPU 1 is now offline [ 216.538134][ T8200] ACPI: PM: Low-level resume complete [ 216.538181][ T8200] ACPI: PM: Restoring platform NVS memory [ 216.549543][ T8200] Enabling non-boot CPUs ... [ 216.549633][ T8200] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 216.553568][ T8200] CPU1 is up [ 216.553800][ T8200] ACPI: PM: Waking up from system sleep state S3 [ 216.587670][ T3765] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 216.734094][ T8200] OOM killer enabled. [ 216.734104][ T8200] Restarting tasks: Starting [ 216.750648][ T8200] Restarting tasks: Done [ 216.750692][ T8200] random: crng reseeded on system resumption [ 216.750706][ T8200] hwrng_fill thread creation failed [ 216.750722][ T8200] PM: suspend exit [ 216.756457][ T8205] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 216.772874][ T8214] device-mapper: table: 252:0: zero-length target [ 216.772888][ T8214] device-mapper: ioctl: error adding target to table [ 216.801818][ T8215] loop5: detected capacity change from 0 to 8192 [ 216.819292][ T7534] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 216.819314][ T7534] FAT-fs (loop5): Filesystem has been set read-only [ 216.850586][ T8222] __nla_validate_parse: 4 callbacks suppressed [ 216.850649][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.850663][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.850697][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.850738][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.850755][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.850829][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.850990][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.851004][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.851171][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.851293][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 216.945161][ T8220] loop5: detected capacity change from 0 to 512 [ 216.949531][ T8220] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.954015][ T8220] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1485: bad orphan inode 131083 [ 216.954067][ T8220] loop5: lost filesystem error report for type 5 error -117 [ 216.955797][ T8220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.965667][ T8220] syzkaller1: entered promiscuous mode [ 216.965698][ T8220] syzkaller1: entered allmulticast mode [ 216.983678][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.983698][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.985690][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.985752][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.108507][ T8249] 9p: Bad value for 'wfdno' [ 217.140975][ T7534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.269339][ T8260] PM: suspend entry (deep) [ 217.337713][ T7084] Filesystems sync: 0.068 seconds [ 217.355063][ T8264] device-mapper: table: 252:0: zero-length target [ 217.355091][ T8264] device-mapper: ioctl: error adding target to table [ 217.374497][ T8260] Freezing user space processes [ 217.478466][ T8260] Freezing user space processes completed (elapsed 0.103 seconds) [ 217.478483][ T8260] OOM killer disabled. [ 217.478546][ T8260] Freezing remaining freezable tasks [ 217.480221][ T8260] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 217.480251][ T8260] printk: Suspending console(s) (use no_console_suspend to debug) [ 217.524263][ T8260] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 217.524307][ T8260] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 217.524641][ T8260] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 217.524677][ T8260] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 217.524841][ T8260] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 217.524876][ T8260] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 217.524911][ T8260] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 217.524980][ T8260] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 217.534714][ T8260] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 217.534905][ T8260] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 217.534977][ T8260] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 217.535028][ T8260] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 217.535128][ T8260] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 217.535507][ T8260] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 217.535596][ T8260] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 217.535615][ T8260] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 217.583676][ T3772] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 218.089437][ T8260] ACPI: PM: Preparing to enter system sleep state S3 [ 218.089547][ T8260] ACPI: PM: Saving platform NVS memory [ 218.089656][ T8260] Disabling non-boot CPUs ... [ 218.093524][ T8260] smpboot: CPU 1 is now offline [ 218.098116][ T8260] ACPI: PM: Low-level resume complete [ 218.098163][ T8260] ACPI: PM: Restoring platform NVS memory [ 218.109286][ T8260] Enabling non-boot CPUs ... [ 218.109400][ T8260] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 218.113138][ T8260] CPU1 is up [ 218.113330][ T8260] ACPI: PM: Waking up from system sleep state S3 [ 218.146960][ T6596] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 218.308094][ T8260] OOM killer enabled. [ 218.308104][ T8260] Restarting tasks: Starting [ 218.327939][ T8260] Restarting tasks: Done [ 218.327981][ T8260] random: crng reseeded on system resumption [ 218.327997][ T8260] hwrng_fill thread creation failed [ 218.328020][ T8260] PM: suspend exit [ 218.376978][ T8257] loop6: detected capacity change from 0 to 512 [ 218.380284][ T8257] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 218.384879][ T8257] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1493: bg 0: block 4: invalid block bitmap [ 218.384905][ T8257] loop6: lost filesystem error report for type 5 error -117 [ 218.386383][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 218.386400][ C1] EXT4-fs (loop6): initial error at time 1790777668: ext4_validate_block_bitmap:436 [ 218.386421][ C1] EXT4-fs (loop6): last error at time 1790777668: ext4_validate_block_bitmap:436 [ 218.386508][ T8257] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 218.386527][ T8257] loop6: lost filesystem error report for type 5 error -117 [ 218.387866][ T8257] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1493: invalid indirect mapped block 1 (level 1) [ 218.387897][ T8257] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 218.388270][ T8257] EXT4-fs (loop6): 1 truncate cleaned up [ 218.388550][ T8257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.523299][ T8287] syzkaller1: entered promiscuous mode [ 218.523334][ T8287] syzkaller1: entered allmulticast mode [ 218.566339][ T8288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.626148][ T8295] loop5: detected capacity change from 0 to 512 [ 218.635821][ T8295] EXT4-fs: Ignoring removed bh option [ 218.662972][ T8295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.664153][ T8295] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.733302][ T3766] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.759335][ T8309] PM: suspend entry (deep) [ 218.783062][ T3766] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.822880][ T3748] Filesystems sync: 0.063 seconds [ 218.857902][ T8309] Freezing user space processes [ 218.861197][ T3766] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.921017][ T3766] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.982095][ T3766] bridge_slave_1: left allmulticast mode [ 218.982163][ T3766] bridge_slave_1: left promiscuous mode [ 218.982463][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.983938][ T3766] bridge_slave_0: left allmulticast mode [ 218.984009][ T3766] bridge_slave_0: left promiscuous mode [ 218.984183][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.043036][ T8309] Freezing user space processes completed (elapsed 0.185 seconds) [ 219.043127][ T8309] OOM killer disabled. [ 219.043132][ T8309] Freezing remaining freezable tasks [ 219.044486][ T8309] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 219.044523][ T8309] printk: Suspending console(s) (use no_console_suspend to debug) [ 219.045682][ T3766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.052891][ T3766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.053757][ T3766] bond0 (unregistering): Released all slaves [ 219.089857][ T3766] hsr_slave_0: left promiscuous mode [ 219.090136][ T3766] hsr_slave_1: left promiscuous mode [ 219.090616][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.090625][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.090915][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.090928][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.092975][ T3766] veth1_macvtap: left promiscuous mode [ 219.093032][ T3766] veth0_macvtap: left promiscuous mode [ 219.093055][ T3766] veth1_vlan: left promiscuous mode [ 219.093122][ T3766] veth0_vlan: left promiscuous mode [ 219.099681][ T8309] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 219.099780][ T8309] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 219.099875][ T8309] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 219.099908][ T8309] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 219.099950][ T8309] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 219.099987][ T8309] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 219.100018][ T8309] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 219.100122][ T8309] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 219.100159][ T8309] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 219.100189][ T8309] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 219.100293][ T8309] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 219.100324][ T8309] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 219.100425][ T8309] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 219.100509][ T8309] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 219.100591][ T8309] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 219.100621][ T8309] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 219.141774][ T3766] team0 (unregistering): Port device team_slave_1 removed [ 219.144213][ T3766] team0 (unregistering): Port device team_slave_0 removed [ 219.183330][ T3793] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 219.717969][ T8309] ACPI: PM: Preparing to enter system sleep state S3 [ 219.718182][ T8309] ACPI: PM: Saving platform NVS memory [ 219.718228][ T8309] Disabling non-boot CPUs ... [ 219.721875][ T8309] smpboot: CPU 1 is now offline [ 219.731183][ T8309] ACPI: PM: Low-level resume complete [ 219.731231][ T8309] ACPI: PM: Restoring platform NVS memory [ 219.743770][ T8309] Enabling non-boot CPUs ... [ 219.743882][ T8309] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 219.747832][ T8309] CPU1 is up [ 219.748120][ T8309] ACPI: PM: Waking up from system sleep state S3 [ 219.784018][ T3766] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 219.971607][ T8309] OOM killer enabled. [ 219.971618][ T8309] Restarting tasks: Starting [ 220.033490][ T7534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.034535][ T8309] Restarting tasks: Done [ 220.040257][ T8309] random: crng reseeded on system resumption [ 220.040277][ T8309] hwrng_fill thread creation failed [ 220.040295][ T8309] PM: suspend exit [ 220.090614][ T8329] loop5: detected capacity change from 0 to 512 [ 220.106177][ T37] ================================================================== [ 220.106216][ T37] BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt [ 220.106257][ T37] [ 220.106261][ T37] write to 0xffff88811c362248 of 8 bytes by interrupt on cpu 0: [ 220.106280][ T37] ps2_interrupt+0x50d/0x550 [ 220.106318][ T37] serio_interrupt+0x66/0xf0 [ 220.106339][ T37] i8042_handle_data+0x388/0x680 [ 220.106368][ T37] i8042_interrupt+0x15/0x90 [ 220.106395][ T37] __handle_irq_event_percpu+0x8b/0x480 [ 220.106432][ T37] handle_irq_event+0x64/0xf0 [ 220.106450][ T37] handle_edge_irq+0x155/0x440 [ 220.106483][ T37] __common_interrupt+0x60/0xb0 [ 220.106515][ T37] common_interrupt+0x7e/0x90 [ 220.106543][ T37] asm_common_interrupt+0x26/0x40 [ 220.106566][ T37] memcg1_commit_charge+0x4/0x1c0 [ 220.106592][ T37] charge_memcg+0x1a5/0x220 [ 220.106621][ T37] __mem_cgroup_charge+0x28/0xb0 [ 220.106648][ T37] filemap_add_folio+0x109/0x380 [ 220.106669][ T37] page_cache_ra_unbounded+0x1a4/0x3a0 [ 220.106695][ T37] force_page_cache_ra+0x190/0x1d0 [ 220.106719][ T37] page_cache_sync_ra+0x11d/0x560 [ 220.106744][ T37] filemap_get_pages+0x2f2/0x1360 [ 220.106771][ T37] filemap_read+0x221/0xad0 [ 220.106795][ T37] blkdev_read_iter+0x21e/0x2d0 [ 220.106819][ T37] vfs_read+0x699/0x7c0 [ 220.106850][ T37] ksys_read+0xdc/0x1a0 [ 220.106880][ T37] __x64_sys_read+0x40/0x50 [ 220.106911][ T37] x64_sys_call+0x2135/0x2550 [ 220.106940][ T37] do_syscall_64+0x112/0x360 [ 220.106963][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.106986][ T37] [ 220.106993][ T37] read to 0xffff88811c362248 of 8 bytes by task 37 on cpu 1: [ 220.107014][ T37] ps2_do_sendbyte+0x10b/0x320 [ 220.107046][ T37] __ps2_command+0x3b7/0xaa0 [ 220.107078][ T37] ps2_command+0x52/0x90 [ 220.107109][ T37] alps_rpt_cmd+0x42/0x150 [ 220.107135][ T37] alps_identify+0x151/0x5e0 [ 220.107160][ T37] alps_detect+0x31/0x250 [ 220.107184][ T37] psmouse_extensions+0x5e6/0x960 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.107220][ T37] __psmouse_reconnect+0x3dd/0x880 [ 220.107240][ T37] psmouse_reconnect+0x23/0x40 [ 220.107273][ T37] serio_handle_event+0x1c7/0xac0 [ 220.107299][ T37] process_scheduled_works+0x56a/0xa50 [ 220.107326][ T37] worker_thread+0x569/0x750 [ 220.107355][ T37] kthread+0x223/0x270 [ 220.107377][ T37] ret_from_fork+0x146/0x330 [ 220.107409][ T37] ret_from_fork_asm+0x1a/0x30 [ 220.107435][ T37] [ 220.107439][ T37] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 220.107451][ T37] [ 220.107455][ T37] Reported by Kernel Concurrency Sanitizer on: [ 220.107467][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(lazy) [ 220.107496][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.107511][ T37] Workqueue: events_long serio_handle_event [ 220.107539][ T37] ================================================================== [ 220.155002][ T8329] EXT4-fs: Ignoring removed bh option [ 220.236915][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 220.236932][ T29] audit: type=1400 audit(1790777669.983:596): avc: denied { write } for pid=8325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.277508][ T29] audit: type=1400 audit(1790777670.023:597): avc: denied { write } for pid=8349 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.295378][ T8329] EXT4-fs: error -4 creating inode table initialization thread [ 220.300301][ T8329] EXT4-fs (loop5): mount failed [ 220.324455][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 220.419698][ T29] audit: type=1400 audit(1790777670.163:598): avc: denied { write } for pid=8355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.435526][ T29] audit: type=1400 audit(1790777670.183:599): avc: denied { write } for pid=8366 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.448691][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.503256][ T29] audit: type=1400 audit(1790777670.253:600): avc: denied { write } for pid=8369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.517394][ T29] audit: type=1400 audit(1790777670.263:601): avc: denied { write } for pid=8380 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.528027][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 220.572120][ T3778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.572174][ T3778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.603963][ T29] audit: type=1400 audit(1790777670.353:602): avc: denied { write } for pid=8383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.625914][ T29] audit: type=1400 audit(1790777670.373:603): avc: denied { write } for pid=8394 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.626665][ T3778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.626783][ T3778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.647177][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 220.684059][ T3778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.684157][ T3778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.744102][ T3778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.744157][ T3778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.812151][ T3778] bridge_slave_1: left allmulticast mode [ 220.812166][ T3778] bridge_slave_1: left promiscuous mode [ 220.812234][ T3778] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.812876][ T3778] bridge_slave_0: left allmulticast mode [ 220.812888][ T3778] bridge_slave_0: left promiscuous mode [ 220.813017][ T3778] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.814752][ T3778] pimreg: left allmulticast mode [ 220.852753][ T3778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.853840][ T3778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.854665][ T3778] bond0 (unregistering): Released all slaves [ 220.856103][ T3778] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 220.856124][ T3778] veth0_to_bond: left allmulticast mode [ 220.856767][ T3778] bond1 (unregistering): Released all slaves [ 220.896573][ T3778] hsr_slave_0: left promiscuous mode [ 220.896917][ T3778] hsr_slave_1: left promiscuous mode [ 220.899515][ T3778] veth1_macvtap: left promiscuous mode [ 220.899541][ T3778] veth0_macvtap: left promiscuous mode [ 220.899651][ T3778] veth1_vlan: left promiscuous mode [ 220.899684][ T3778] veth0_vlan: left promiscuous mode [ 220.919660][ T29] audit: type=1400 audit(1790777670.663:604): avc: denied { write } for pid=8401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.937146][ T29] audit: type=1400 audit(1790777670.683:605): avc: denied { write } for pid=8412 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.965638][ T3778] team0 (unregistering): Port device team_slave_1 removed [ 220.967892][ T3778] team0 (unregistering): Port device team_slave_0 removed [ 220.987924][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 221.069641][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 221.147707][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 221.153728][ T3778] IPVS: stop unused estimator thread 0... [ 221.231808][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8