last executing test programs: 4.323605165s ago: executing program 0 (id=387): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x2010410, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000540)='2', 0xfdef, 0xe7c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0xdc, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x1a0001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f00000008c0)=0xfff, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x3) syz_mount_image$ext4(&(0x7f0000000940)='ext3\x00', &(0x7f0000000980)='./file0\x00', 0x1048b, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000a40)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001000)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() getrandom(&(0x7f0000001100)=""/286, 0xffffff9a, 0x0) 4.225261987s ago: executing program 1 (id=388): socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x0, 0x7}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext, 0x10410, 0x8, 0x4, 0x5, 0x3fe, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x100000001, 0x3}, 0x10ecc8, 0x1223, 0x7, 0x0, 0x400000b, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.921212719s ago: executing program 1 (id=398): r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x4, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4) write(r1, &(0x7f0000000280)="b824", 0x2) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 2.754565253s ago: executing program 2 (id=399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002d"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 1) 2.752014703s ago: executing program 3 (id=400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) msgctl$IPC_SET(0x0, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000140), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 2.740222954s ago: executing program 0 (id=401): socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40010) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) r0 = memfd_secret(0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f02000000090000d7ffffff0003000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="b8", 0x1) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) 2.48665427s ago: executing program 2 (id=403): socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x0, 0x7}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext, 0x10410, 0x8, 0x4, 0x5, 0x3fe, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x200000000000003f, &(0x7f0000000040)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x100000001, 0x3}, 0x10ecc8, 0x1223, 0x7, 0x0, 0x400000b, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.233758626s ago: executing program 3 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0xc841}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000400)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x4c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) socket(0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000740), 0x40000000000009f, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x54}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2014) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002d"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.144808438s ago: executing program 4 (id=407): r0 = socket$inet(0x2, 0x4000000000000001, 0xd5e2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'veth0\x00', 0x800}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000280)=[{0x7, 0x3, 0x0, 0x7fff}, {0xb, 0x8, 0x81, 0x5}, {0x8, 0x6, 0x2, 0x7ff}, {0x6, 0x5, 0x4, 0x80000001}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0xc4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fffffff, 0x9}, 0x122, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) fcntl$getflags(r2, 0xb) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f00000005c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000600)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0xf00, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x200, 0x28020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2c, 0x0, 0x100010, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000700)=@gcm_256={{0x303}, "44682d1658abeaef", "6e44b85987bc955b2505f787cc2c89e5a1f37f01b65a3c77fa9fc92425e107ff", "096de778", "2a6948e8685a03b9"}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) 2.029604631s ago: executing program 3 (id=408): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x7, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) timer_gettime(0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x8, 0x3}, {0x1d, 0x0, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x44000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) iopl(0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f00000002c0)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000400), 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 1.972076903s ago: executing program 4 (id=409): socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext, 0x10410, 0x8, 0x4, 0x5, 0x3fe, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x100000001, 0x3}, 0x10ecc8, 0x1223, 0x7, 0x0, 0x400000b, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.874175905s ago: executing program 3 (id=410): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x4, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES32], 0x4) write(r0, &(0x7f0000000280)="b824", 0x2) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x29, 0x4, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) 1.866047195s ago: executing program 2 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='((~v_)', 0x6) r2 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x3000404, &(0x7f0000000080)=ANY=[@ANYBLOB='cruft,sessix0000000000000011,map=off,\x00'], 0x3, 0xab6, &(0x7f0000000240)="$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") mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250b"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) setregid(0x0, 0x0) getresgid(&(0x7f00000019c0)=0x0, &(0x7f0000001a00)=0x0, &(0x7f0000001a40)) getgroups(0x1, &(0x7f0000001a80)=[0xee00]) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, &(0x7f0000001b00)=0xc) setregid(0xffffffffffffffff, r10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) lstat(&(0x7f0000000fc0)='./proc_mnt/irq/12/smp_affinity\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000001c40)='ext4\x00', &(0x7f0000001c80)='./file0\x00', 0x8, &(0x7f0000001cc0)={[{@inode_readahead_blks}, {@norecovery}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, r11}}], [{@euid_eq={'euid', 0x3d, r12}}, {@dont_measure}]}, 0x5, 0x4f3, &(0x7f0000001d80)="$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") getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000002280)='./proc_mnt\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lsetxattr$system_posix_acl(&(0x7f0000000d80)='./proc_mnt/irq/12/smp_affinity\x00', &(0x7f0000000dc0)='system.posix_acl_default\x00', &(0x7f0000000e00)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r5, @ANYBLOB="020000008d0116e6633c01740213f4f320b1c5bb0200000099d5948af318649bdd48238b345395b691a1fd49bd4c967c73c3b1e7b9c23cc6b237bc8b948a974fb41d88a760e92b5a3905d182845ca5e34366657bf78a487a6ec5d70b78f147b48a3b934e4eb8d74977ad3c6e27b618d373b30baea1e4e41e1ca9fd465b4b44c9a3bf0285e8048914e806da5566e4beeb7419c274dae84a79e1a26d80692d36c9dad745c6d9fae63ccae2415d4e2b4b622be485f54ee9e3a529d9e09ddc9740d0c61be50b30c52285278cc6d58ba8337a8de5e7df83f16ff1f881a85ac6a77ca9299bea", @ANYRES32=0x0, @ANYBLOB="040002000000000008000700", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYRES32=r7, @ANYRES64=0x0, @ANYBLOB="08000500", @ANYRES32=r13, @ANYRES32=r2], 0x74, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000280)=ANY=[], 0x8) sendto$unix(r1, &(0x7f0000000180)="ea9c4a0091dd3bab5af9bffdca7e1b482c01000d5d3f6809c6c22ceea3af444c7c0ac9d8795ca03c6313e1dc63090b3fc11f087ea48bf09db70daf54728ec6047eb0e64b4cdff1b189e92b45ae429af644a4534c19e0becd24966d48b8041e1ea4aa83944f2b592c", 0x68, 0x20040800, &(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 1.789704217s ago: executing program 0 (id=412): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x2010410, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000540)='2', 0xfdef, 0xe7c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0xf8, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xa4, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x1a0001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f00000008c0)=0xfff, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x3) syz_mount_image$ext4(&(0x7f0000000940)='ext3\x00', &(0x7f0000000980)='./file0\x00', 0x1048b, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000a40)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001000)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() getrandom(&(0x7f0000001100)=""/286, 0xffffff9a, 0x0) 1.700753179s ago: executing program 1 (id=413): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x9}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000500)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000009c0)={0x86, 0x5, 0x4, 0x1, 0x10, 0x7, 0x0, 0xb, 0x0, 0x8, 0x3}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[], 0x20) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x80, 0x8, 0xe}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) recvfrom$inet(r0, 0x0, 0x0, 0x122, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf2523000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x4044004) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f00000002c0)=0x5) setuid(0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write(r3, &(0x7f0000000180)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010003000000", 0x38) write(r3, &(0x7f0000000200)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24) write(r3, &(0x7f0000000240)="240000002a0001030300000000000000000000000100"/36, 0x24) syz_open_dev$hidraw(&(0x7f00000001c0), 0x0, 0xbb42) 1.431461665s ago: executing program 4 (id=414): socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x0, 0x7}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.270853649s ago: executing program 4 (id=415): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5421, &(0x7f0000000440)={0x6, 0x798, 0x0, 0x0, 0x2}) 1.270540409s ago: executing program 4 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) msgctl$IPC_SET(0x0, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000140), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 1.220739541s ago: executing program 1 (id=417): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x85, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYRES8=r3], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000003c0)=0x6, 0x4) connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) sendmsg$inet(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r6, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) write$cgroup_subtree(r2, 0x0, 0xfe33) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000", 0x24) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) write(r0, &(0x7f0000000300)="3d80f73e31ee6b0212d29ec4e4c010cf69484f676ba2827e932dd9ba77adab69f1454927b593add4556c3ad7801c77a709cd512608091ed787fde8af52bbd3c35480f3321fb4897a4ec211b2b4774220f7a982ec350f7cf13c5e5b3fd2307f974e2055a28a611949b6de948603135ee0cf47dc4acc32c598ed5685b7dbc579", 0x7f) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0, 0xfffffffffffffea2}, {0x0}, {0x0}, {0x0, 0xfffffe73}], 0x5, &(0x7f0000000040), 0xffffffffffffff63, 0x4040}, 0x40) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 892.054298ms ago: executing program 2 (id=418): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d01"], 0x0, 0x26}, 0x28) (fail_nth: 4) 814.71148ms ago: executing program 2 (id=419): r0 = socket$inet(0x2, 0x4000000000000001, 0xd5e2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'veth0\x00', 0x800}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000280)=[{0x7, 0x3, 0x0, 0x7fff}, {0xb, 0x8, 0x81, 0x5}, {0x8, 0x6, 0x2, 0x7ff}, {0x6, 0x5, 0x4, 0x80000001}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0xc4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fffffff, 0x9}, 0x122, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) fcntl$getflags(r2, 0xb) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f00000005c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000600)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0xf00, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x200, 0x28020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2c, 0x0, 0x100010, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000700)=@gcm_256={{0x303}, "44682d1658abeaef", "6e44b85987bc955b2505f787cc2c89e5a1f37f01b65a3c77fa9fc92425e107ff", "096de778", "2a6948e8685a03b9"}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) 708.182343ms ago: executing program 4 (id=420): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x4, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES32], 0x4) write(r0, &(0x7f0000000280)="b824", 0x2) 638.284615ms ago: executing program 3 (id=421): socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x0, 0x7}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext, 0x10410, 0x8, 0x4, 0x5, 0x3fe, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x200000000000003f, &(0x7f0000000040)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x100000001, 0x3}, 0x10ecc8, 0x1223, 0x7, 0x0, 0x400000b, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 620.274765ms ago: executing program 2 (id=422): socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40010) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) r0 = memfd_secret(0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f02000000090000d7ffffff0003000000005f00006161"], 0x0, 0x37, 0x0, 0x9}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="b8", 0x1) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) 461.488059ms ago: executing program 0 (id=423): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10e2ffff03000000040000000c", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x3bf) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000100)={0x0, 0x23, 0x800000000004, @tid=r0}, &(0x7f0000000140)=0x0) fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0xc) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000bc0)) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000a80)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f0000000b00)='./file0\x00', 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x149cc2, 0x1c0) fsetxattr(r2, &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f0000000300)='\xbc\x1aO\x06Pc\xd5\xc7\x99\xbb\x9e\xc5\xe8?\x89s\x81\xde\fU\xe2\xb2\xc9\b\xec^t\xfa\x16\x94\x14Q`w\xea\x18\x9d\x15&\f\xf2\x98m\n\xa4\xf9\xa1\f\xd7%\xd3Z\xca\xf3\xae\xc7@L\x14\x1a0\xf5N\xef\xb5r\x91\rL\xb21X\x8b\x0f)\xd9\x92i\x01\x86\x15j\xcf\x02\xc9\x92\x01%\xd8\x91\x10\xd9f\xcb\xed\xee\x7fYjw\xf5\xd4L\xdd\x8d\x98\xbb\xe38\xf4\xc7\xdd\x1b\xb1\xe1\vb\x16V:\xb1v\xd3i\x0f\xfd\t\x00\xd4K\x15J\x97GD)\xadF.\xb9\xfa\x84\xa2DI(\xcd\x8d\x12\xbe\\\xee\xdc\x96\x9c\x17\xd9\x10\x9f\xc4\x9aX\xcb\x00\x00', 0xa5, 0x0) rt_sigtimedwait(&(0x7f00000001c0)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000580)=0x9, 0x4) sendto$unix(r3, &(0x7f0000000880)="0434", 0x2, 0xd1, 0x0, 0x0) 391.756761ms ago: executing program 3 (id=424): r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x4, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4) write(r1, &(0x7f0000000280)="b824", 0x2) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x0, 0x0}, 0x10) 380.598611ms ago: executing program 0 (id=425): socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext, 0x10410, 0x8, 0x4, 0x5, 0x3fe, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x100000001, 0x3}, 0x10ecc8, 0x1223, 0x7, 0x0, 0x400000b, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 294.575953ms ago: executing program 1 (id=426): socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x0, 0x7}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 255.181934ms ago: executing program 1 (id=427): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000240)="278ca568de16719bd16a70089ff4d88404e0bc494e2e850343db4533edc4ffdff00d83c7ccf60b62a3766956a85857e3f5d3dabfe9f404ae168daad5bae1db5023470e3a21152bc03df1", 0x0}, 0x20) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x5}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x8000040f, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket(0x1a, 0x6, 0x3) sendmmsg$inet_sctp(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400ff7f000000000000000000000000000001ffffff0000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) setrlimit(0x7, &(0x7f0000000340)={0x1, 0x800000004}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x2f, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "17ea5b", 0x4, 0x5e, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], "a8000000"}}}}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080)="fb", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000400)=0x8) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000900)=@newtaction={0x68, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0xb, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004885}, 0x0) 0s ago: executing program 0 (id=428): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x9}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000500)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000009c0)={0x86, 0x5, 0x4, 0x1, 0x10, 0x7, 0x0, 0xb, 0x0, 0x8, 0x3}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[], 0x20) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x80, 0x8, 0xe}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) recvfrom$inet(r0, 0x0, 0x0, 0x122, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf2523000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x4044004) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r6, 0x5421, 0x0) setuid(0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write(r3, &(0x7f0000000180)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010003000000", 0x38) write(r3, &(0x7f0000000200)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24) write(r3, &(0x7f0000000240)="240000002a0001030300000000000000000000000100"/36, 0x24) syz_open_dev$hidraw(&(0x7f00000001c0), 0x0, 0xbb42) kernel console output (not intermixed with test programs): 532 would solve the problem. [ 34.052284][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.110076][ T3301] hsr_slave_0: entered promiscuous mode [ 34.111929][ T3301] hsr_slave_1: entered promiscuous mode [ 34.112611][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.112659][ T3301] Cannot create hsr debugfs directory [ 34.134829][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.142693][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.166400][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.166441][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.166547][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.224393][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.226870][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.241521][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.241580][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.245294][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.246999][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.257059][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.264794][ T3306] hsr_slave_0: entered promiscuous mode [ 34.265911][ T3306] hsr_slave_1: entered promiscuous mode [ 34.266570][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.266609][ T3306] Cannot create hsr debugfs directory [ 34.289669][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.301224][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.367817][ T3309] hsr_slave_0: entered promiscuous mode [ 34.368178][ T3309] hsr_slave_1: entered promiscuous mode [ 34.368449][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 34.368466][ T3309] Cannot create hsr debugfs directory [ 34.419317][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.422191][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.444238][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.446058][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.446582][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.448673][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.474284][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.483924][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.569992][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.572819][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.574439][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.580785][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.596020][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.606738][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.619147][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.621383][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.646007][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.647833][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.648442][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.650859][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.681270][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.693620][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.694069][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.696061][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.696574][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.698373][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.715876][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.750973][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.751002][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.754638][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.754730][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.786087][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.787827][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.808911][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.811290][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.812738][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.824356][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.836629][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.848546][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.850426][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.881778][ T1795] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.881861][ T1795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.889488][ T1795] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.889554][ T1795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.949857][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.977641][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.982884][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.002940][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.002974][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.036431][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.036468][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.040591][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.074331][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.074413][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.076164][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.076204][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.094204][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.094278][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.140165][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.176199][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.198925][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.198987][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.218976][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.219016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.300145][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.372821][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.437595][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.536032][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.561717][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.566880][ T3308] veth0_vlan: entered promiscuous mode [ 35.579526][ T3309] veth0_vlan: entered promiscuous mode [ 35.595956][ T3309] veth1_vlan: entered promiscuous mode [ 35.607799][ T3308] veth1_vlan: entered promiscuous mode [ 35.609039][ T3302] veth0_vlan: entered promiscuous mode [ 35.622393][ T3302] veth1_vlan: entered promiscuous mode [ 35.653836][ T3309] veth0_macvtap: entered promiscuous mode [ 35.655729][ T3308] veth0_macvtap: entered promiscuous mode [ 35.657824][ T3309] veth1_macvtap: entered promiscuous mode [ 35.673009][ T3308] veth1_macvtap: entered promiscuous mode [ 35.680606][ T3302] veth0_macvtap: entered promiscuous mode [ 35.695718][ T3302] veth1_macvtap: entered promiscuous mode [ 35.709909][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.719627][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.730067][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.739128][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.754298][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.757842][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.782306][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.801780][ T1769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.825614][ T3306] veth0_vlan: entered promiscuous mode [ 35.860336][ T3306] veth1_vlan: entered promiscuous mode [ 35.871828][ T378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.871961][ T378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.872095][ T378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.872249][ T378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.892597][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.892716][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.892823][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.893056][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.893160][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.893307][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.987186][ T3306] veth0_macvtap: entered promiscuous mode [ 35.998821][ T3302] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.000258][ T3306] veth1_macvtap: entered promiscuous mode [ 36.035540][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.039762][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.126443][ T3301] veth0_vlan: entered promiscuous mode [ 36.250161][ T3301] veth1_vlan: entered promiscuous mode [ 36.265049][ T3301] veth0_macvtap: entered promiscuous mode [ 36.268314][ T3301] veth1_macvtap: entered promiscuous mode [ 36.287707][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.290580][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.304419][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.304578][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.304682][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.304795][ T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.502676][ T3530] Zero length message leads to an empty skb [ 36.503703][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 36.503726][ T30] audit: type=1400 audit(1791584925.502:176): avc: denied { create } for pid=3512 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 36.503750][ T30] audit: type=1400 audit(1791584925.512:177): avc: denied { setopt } for pid=3512 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.503830][ T30] audit: type=1400 audit(1791584925.512:178): avc: denied { bind } for pid=3512 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.503957][ T30] audit: type=1400 audit(1791584925.522:179): avc: denied { name_bind } for pid=3512 comm="syz.2.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 36.504059][ T30] audit: type=1400 audit(1791584925.522:180): avc: denied { node_bind } for pid=3512 comm="syz.2.3" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 36.504112][ T30] audit: type=1400 audit(1791584925.542:181): avc: denied { write } for pid=3512 comm="syz.2.3" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.504208][ T30] audit: type=1400 audit(1791584925.542:182): avc: denied { connect } for pid=3512 comm="syz.2.3" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.504231][ T30] audit: type=1400 audit(1791584925.542:183): avc: denied { name_connect } for pid=3512 comm="syz.2.3" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 36.506190][ T378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.508393][ T378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.508426][ T378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.508504][ T378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.526421][ T30] audit: type=1400 audit(1791584925.602:184): avc: denied { create } for pid=3513 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.587993][ T30] audit: type=1400 audit(1791584925.672:186): avc: denied { prog_load } for pid=3513 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.775509][ T3520] syz.1.6 (3520) used greatest stack depth: 11144 bytes left [ 37.142606][ T3539] loop4: detected capacity change from 0 to 512 [ 37.142887][ T3539] ======================================================= [ 37.142887][ T3539] WARNING: The mand mount option has been deprecated and [ 37.142887][ T3539] and is ignored by this kernel. Remove the mand [ 37.142887][ T3539] option from the mount to silence this warning. [ 37.142887][ T3539] ======================================================= [ 37.148774][ T3539] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.205415][ T3530] syz.2.3 (3530) used greatest stack depth: 10184 bytes left [ 37.220582][ T3539] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.5: Failed to acquire dquot type 1 [ 37.220628][ T3539] loop4: lost filesystem error report for type 5 error -117 [ 37.220892][ T3539] EXT4-fs (loop4): Remounting filesystem read-only [ 37.220930][ T3539] EXT4-fs (loop4): 1 truncate cleaned up [ 37.255337][ T3539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.276161][ T3536] loop0: detected capacity change from 0 to 128 [ 37.276816][ T3536] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.282450][ T3536] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.463302][ T405] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.470631][ T1795] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.516293][ T3306] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000) [ 37.516393][ T3306] FAT-fs (loop0): Filesystem has been set read-only [ 37.538548][ T3549] loop3: detected capacity change from 0 to 512 [ 37.540596][ T3551] loop2: detected capacity change from 0 to 164 [ 37.567890][ T3549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.567974][ T3549] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.570190][ T3539] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 37.570359][ T3539] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5'. [ 37.604405][ T3556] loop0: detected capacity change from 0 to 128 [ 37.846829][ T3556] syz.0.10: attempt to access beyond end of device [ 37.846829][ T3556] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 37.873506][ T3556] syz.0.10: attempt to access beyond end of device [ 37.873506][ T3556] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 37.929197][ T3556] syz.0.10: attempt to access beyond end of device [ 37.929197][ T3556] loop0: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 37.929778][ T3556] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 37.955158][ T3556] syz.0.10: attempt to access beyond end of device [ 37.955158][ T3556] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 37.955394][ T3556] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 38.100232][ T3547] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5'. [ 38.134786][ T3556] syz.0.10: attempt to access beyond end of device [ 38.134786][ T3556] loop0: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 38.364065][ T3544] syz.1.7 (3544) used greatest stack depth: 9992 bytes left [ 38.421379][ T3568] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 38.746209][ T3582] loop2: detected capacity change from 0 to 512 [ 38.758796][ T3582] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.767486][ T3582] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.17: Failed to acquire dquot type 1 [ 38.767575][ T3582] loop2: lost filesystem error report for type 5 error -117 [ 38.768015][ T3582] EXT4-fs (loop2): Remounting filesystem read-only [ 38.768177][ T3582] EXT4-fs (loop2): 1 truncate cleaned up [ 38.769356][ T3582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.851543][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.971458][ T3591] loop4: detected capacity change from 0 to 128 [ 38.998646][ T3592] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 38.998670][ T3592] netlink: 220 bytes leftover after parsing attributes in process `syz.2.17'. [ 39.006324][ T3592] netlink: 10 bytes leftover after parsing attributes in process `syz.2.17'. [ 39.436909][ T3589] syz.4.19: attempt to access beyond end of device [ 39.436909][ T3589] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 39.512260][ T3550] Bluetooth: hci0: command 0x1003 tx timeout [ 39.513165][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.572136][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.627639][ T1795] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.654920][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.689642][ T3597] loop0: detected capacity change from 0 to 512 [ 39.717409][ T3597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.717560][ T3597] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.929951][ T3595] loop3: detected capacity change from 0 to 164 [ 40.011978][ T405] Bluetooth: hci1: Frame reassembly failed (-84) [ 40.015026][ T3608] loop4: detected capacity change from 0 to 512 [ 40.038912][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.039047][ T3608] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.120081][ T3614] syz.3.25: attempt to access beyond end of device [ 40.120081][ T3614] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 40.120316][ T3614] syz.3.25: attempt to access beyond end of device [ 40.120316][ T3614] loop3: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 40.121111][ T3614] syz.3.25: attempt to access beyond end of device [ 40.121111][ T3614] loop3: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 40.121144][ T3614] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 40.121167][ T3614] syz.3.25: attempt to access beyond end of device [ 40.121167][ T3614] loop3: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 40.121269][ T3614] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 40.129537][ T3599] bonding: no command found in bonding_masters - use +ifname or -ifname [ 40.151310][ T3599] EXT4-fs: Ignoring removed nobh option [ 40.171385][ T3599] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.173012][ T3599] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.22: bg 0: block 7: invalid block bitmap [ 40.173038][ T3599] loop2: lost filesystem error report for type 5 error -117 [ 40.173978][ T3599] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 40.174042][ T3599] loop2: lost filesystem error report for type 5 error -117 [ 40.175870][ T3599] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #11: comm syz.2.22: corrupted xattr block 95: invalid header [ 40.176486][ T3599] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.177060][ T3599] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117) [ 40.177191][ T3599] EXT4-fs (loop2): 1 orphan inode deleted [ 40.181700][ T3599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.186306][ T3599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.312955][ T3614] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 40.312987][ T3614] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 40.316423][ T3614] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 40.316454][ T3614] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 40.317225][ T3614] Buffer I/O error on dev loop3, logical block 87, lost async page write [ 40.317252][ T3614] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 40.498555][ T3622] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.517534][ T3622] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.26: Failed to acquire dquot type 1 [ 40.517569][ T3622] loop1: lost filesystem error report for type 5 error -117 [ 40.517711][ T3622] EXT4-fs (loop1): Remounting filesystem read-only [ 40.517745][ T3622] EXT4-fs (loop1): 1 truncate cleaned up [ 40.518190][ T3622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.618261][ T3622] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 40.618351][ T3622] netlink: 220 bytes leftover after parsing attributes in process `syz.1.26'. [ 40.639922][ T3622] netlink: 10 bytes leftover after parsing attributes in process `syz.1.26'. [ 41.183904][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.661749][ T3609] Bluetooth: hci0: command 0x1003 tx timeout [ 41.663143][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.699895][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.062273][ T3550] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 42.088715][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.342160][ T3638] syzkaller0: entered promiscuous mode [ 42.342186][ T3638] syzkaller0: entered allmulticast mode [ 42.343609][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 42.343628][ T30] audit: type=1400 audit(1791584931.432:235): avc: denied { ioctl } for pid=3637 comm="syz.0.31" path="socket:[5690]" dev="sockfs" ino=5690 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.550311][ T3653] set_capacity_and_notify: 5 callbacks suppressed [ 42.550333][ T3653] loop2: detected capacity change from 0 to 512 [ 42.577174][ T3653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.577323][ T3653] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.583942][ T30] audit: type=1400 audit(1791584931.672:236): avc: denied { write } for pid=3652 comm="syz.2.37" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.794184][ T3641] syzkaller0: entered promiscuous mode [ 42.794210][ T3641] syzkaller0: entered allmulticast mode [ 42.814112][ T3646] bonding: no command found in bonding_masters - use +ifname or -ifname [ 42.909382][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.987029][ T3662] loop2: detected capacity change from 0 to 512 [ 43.005652][ T3662] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.025658][ T3662] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 43.025722][ T3662] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 43.025743][ T3662] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.39: Failed to acquire dquot type 1 [ 43.025825][ T3662] loop2: lost filesystem error report for type 5 error -117 [ 43.026093][ T3662] EXT4-fs (loop2): Remounting filesystem read-only [ 43.026131][ T3662] EXT4-fs (loop2): 1 truncate cleaned up [ 43.026729][ T3662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.073585][ T30] audit: type=1400 audit(1791584932.152:237): avc: denied { create } for pid=3663 comm="syz.4.40" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.086706][ T30] audit: type=1400 audit(1791584932.172:238): avc: denied { map } for pid=3663 comm="syz.4.40" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=5757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.086837][ T30] audit: type=1400 audit(1791584932.172:239): avc: denied { read } for pid=3663 comm="syz.4.40" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=5757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.097802][ T30] audit: type=1400 audit(1791584932.182:240): avc: denied { write } for pid=3663 comm="syz.4.40" name="secretmem" dev="secretmem" ino=5757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.123000][ T3646] loop3: detected capacity change from 0 to 512 [ 43.126934][ T3646] EXT4-fs: Ignoring removed nobh option [ 43.145548][ T3646] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.147333][ T3646] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.35: bg 0: block 7: invalid block bitmap [ 43.151268][ T3646] loop3: lost filesystem error report for type 5 error -117 [ 43.151967][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 43.152022][ C1] EXT4-fs (loop3): initial error at time 1791584932: ext4_validate_block_bitmap:436 [ 43.152106][ C1] EXT4-fs (loop3): last error at time 1791584932: ext4_validate_block_bitmap:436 [ 43.166860][ T3646] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 43.167007][ T3646] loop3: lost filesystem error report for type 5 error -117 [ 43.172118][ T3646] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.35: corrupted xattr block 95: invalid header [ 43.172253][ T3646] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.177323][ T3646] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 43.177429][ T3646] EXT4-fs (loop3): 1 orphan inode deleted [ 43.191739][ T3646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.206312][ T3646] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.300880][ T3669] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 43.300897][ T3669] netlink: 220 bytes leftover after parsing attributes in process `syz.2.39'. [ 43.310287][ T3669] netlink: 10 bytes leftover after parsing attributes in process `syz.2.39'. [ 43.507031][ T30] audit: type=1400 audit(1791584932.592:241): avc: denied { bind } for pid=3673 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.507336][ T30] audit: type=1400 audit(1791584932.592:242): avc: denied { write } for pid=3673 comm="syz.1.41" path="socket:[5774]" dev="sockfs" ino=5774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.621372][ T3678] loop0: detected capacity change from 0 to 128 [ 43.634148][ T3678] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.642032][ T3678] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.701231][ T405] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.001353][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.050407][ T3689] loop4: detected capacity change from 0 to 512 [ 44.065868][ T3689] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.081177][ T3689] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.46: Failed to acquire dquot type 1 [ 44.081211][ T3689] loop4: lost filesystem error report for type 5 error -117 [ 44.081422][ T3689] EXT4-fs (loop4): Remounting filesystem read-only [ 44.081462][ T3689] EXT4-fs (loop4): 1 truncate cleaned up [ 44.081944][ T3689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.366221][ T3693] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 44.366244][ T3693] netlink: 220 bytes leftover after parsing attributes in process `syz.4.46'. [ 44.369606][ T3693] netlink: 10 bytes leftover after parsing attributes in process `syz.4.46'. [ 44.866920][ T1687] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.886721][ T3700] loop0: detected capacity change from 0 to 512 [ 44.928973][ T3700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.929097][ T3700] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.107532][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.398954][ T3716] loop1: detected capacity change from 0 to 128 [ 45.783650][ T3716] bio_check_eod: 76 callbacks suppressed [ 45.783684][ T3716] syz.1.54: attempt to access beyond end of device [ 45.783684][ T3716] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 45.794993][ T3716] syz.1.54: attempt to access beyond end of device [ 45.794993][ T3716] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 45.799430][ T3716] syz.1.54: attempt to access beyond end of device [ 45.799430][ T3716] loop1: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 45.799505][ T3716] buffer_io_error: 44 callbacks suppressed [ 45.799538][ T3716] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 45.800011][ T3716] syz.1.54: attempt to access beyond end of device [ 45.800011][ T3716] loop1: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 45.800119][ T3716] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 45.801554][ T3716] syz.1.54: attempt to access beyond end of device [ 45.801554][ T3716] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 45.807253][ T3716] syz.1.54: attempt to access beyond end of device [ 45.807253][ T3716] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 45.807435][ T3716] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 45.808283][ T3716] syz.1.54: attempt to access beyond end of device [ 45.808283][ T3716] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 45.808359][ T3716] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 45.813002][ T3716] syz.1.54: attempt to access beyond end of device [ 45.813002][ T3716] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 45.823058][ T3716] syz.1.54: attempt to access beyond end of device [ 45.823058][ T3716] loop1: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 45.823154][ T3716] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 45.823455][ T3716] syz.1.54: attempt to access beyond end of device [ 45.823455][ T3716] loop1: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 45.823532][ T3716] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 45.826644][ T3716] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 45.826717][ T3716] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 45.838543][ T3716] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 45.839201][ T3716] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 46.043279][ T1687] Bluetooth: hci1: Frame reassembly failed (-84) [ 46.066378][ T3727] loop3: detected capacity change from 0 to 512 [ 46.083257][ T3727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.083399][ T3727] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.410652][ T3734] loop2: detected capacity change from 0 to 164 [ 46.943582][ T3550] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.979569][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.994764][ T405] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.000595][ T3746] loop1: detected capacity change from 0 to 512 [ 47.034761][ T3746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.034834][ T3746] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.283052][ T405] Bluetooth: hci2: Frame reassembly failed (-84) [ 47.365042][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 47.365061][ T30] audit: type=1400 audit(1791584936.442:249): avc: denied { create } for pid=3751 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.402025][ T3748] bonding: no command found in bonding_masters - use +ifname or -ifname [ 47.574899][ T3748] loop0: detected capacity change from 0 to 512 [ 47.609173][ T3748] EXT4-fs: Ignoring removed nobh option [ 47.644164][ T3748] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.662664][ T3748] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.64: bg 0: block 7: invalid block bitmap [ 47.663064][ T3748] loop0: lost filesystem error report for type 5 error -117 [ 47.666668][ T3748] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 47.666700][ T3748] loop0: lost filesystem error report for type 5 error -117 [ 47.671256][ T3748] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #11: comm syz.0.64: corrupted xattr block 95: invalid header [ 47.671427][ T3748] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.671666][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 47.671689][ C0] EXT4-fs (loop0): initial error at time 1791584936: ext4_validate_block_bitmap:436 [ 47.671946][ C0] EXT4-fs (loop0): last error at time 1791584936: ext4_mb_clear_bb:6680 [ 47.712323][ T3748] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 47.712447][ T3748] EXT4-fs (loop0): 1 orphan inode deleted [ 47.721206][ T3748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.728520][ T3748] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.815089][ T3743] syz.2.62 (3743) used greatest stack depth: 9800 bytes left [ 48.061808][ T3523] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 48.081224][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.321028][ T3760] loop3: detected capacity change from 0 to 164 [ 48.453280][ T30] audit: type=1400 audit(1791584937.542:250): avc: denied { map_create } for pid=3759 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.613062][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 48.613080][ T3770] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.653661][ T3762] bonding: no command found in bonding_masters - use +ifname or -ifname [ 48.659109][ T1687] Bluetooth: hci1: Frame reassembly failed (-84) [ 48.686335][ T3772] loop3: detected capacity change from 0 to 512 [ 48.697642][ T3772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.697737][ T3772] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.750784][ T3762] loop2: detected capacity change from 0 to 512 [ 48.768099][ T3762] EXT4-fs: Ignoring removed nobh option [ 48.803332][ T3762] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.810806][ T3762] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.68: bg 0: block 7: invalid block bitmap [ 48.810845][ T3762] loop2: lost filesystem error report for type 5 error -117 [ 48.813313][ T3762] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 48.813438][ T3762] loop2: lost filesystem error report for type 5 error -117 [ 48.814911][ T3762] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #11: comm syz.2.68: corrupted xattr block 95: invalid header [ 48.815133][ T3762] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.816760][ T3762] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117) [ 48.816907][ T3762] EXT4-fs (loop2): 1 orphan inode deleted [ 48.819604][ T3762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.825162][ T3762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.031734][ T3753] Bluetooth: hci0: command 0x1003 tx timeout [ 49.031734][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.056833][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.160987][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.343769][ T3753] Bluetooth: hci2: command 0x1003 tx timeout [ 49.352118][ T3550] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 49.439361][ T3783] loop1: detected capacity change from 0 to 164 [ 49.556516][ T30] audit: type=1400 audit(1791584938.642:251): avc: denied { read } for pid=3793 comm="syz.2.78" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.556547][ T30] audit: type=1400 audit(1791584938.642:252): avc: denied { open } for pid=3793 comm="syz.2.78" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.564173][ T30] audit: type=1400 audit(1791584938.652:253): avc: denied { connect } for pid=3793 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.568108][ T30] audit: type=1400 audit(1791584938.652:254): avc: denied { ioctl } for pid=3793 comm="syz.2.78" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.581784][ T3796] loop2: detected capacity change from 0 to 512 [ 49.615431][ T3796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.615887][ T3796] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.688456][ T30] audit: type=1400 audit(1791584938.772:255): avc: denied { write } for pid=3793 comm="syz.2.78" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.691041][ T3785] bonding: no command found in bonding_masters - use +ifname or -ifname [ 49.691565][ T30] audit: type=1400 audit(1791584938.772:256): avc: denied { write } for pid=3793 comm="syz.2.78" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.724730][ T3785] loop4: detected capacity change from 0 to 512 [ 49.730209][ T3785] EXT4-fs: Ignoring removed nobh option [ 49.740265][ T3785] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.740858][ T3785] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.76: bg 0: block 7: invalid block bitmap [ 49.740963][ T3785] loop4: lost filesystem error report for type 5 error -117 [ 49.741737][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 49.741799][ C1] EXT4-fs (loop4): initial error at time 1791584938: ext4_validate_block_bitmap:436 [ 49.741874][ C1] EXT4-fs (loop4): last error at time 1791584938: ext4_validate_block_bitmap:436 [ 49.754127][ T3785] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 49.754201][ T3785] loop4: lost filesystem error report for type 5 error -117 [ 49.755118][ T3785] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.76: corrupted xattr block 95: invalid header [ 49.755312][ T3785] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.755726][ T3785] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 49.755860][ T3785] EXT4-fs (loop4): 1 orphan inode deleted [ 49.758364][ T3785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.764259][ T3785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.847370][ T30] audit: type=1400 audit(1791584938.932:257): avc: denied { name_bind } for pid=3793 comm="syz.2.78" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.847496][ T30] audit: type=1400 audit(1791584938.932:258): avc: denied { node_bind } for pid=3793 comm="syz.2.78" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.977215][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.146378][ T3808] loop1: detected capacity change from 0 to 512 [ 50.149075][ T3808] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.165823][ T3808] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.81: Failed to acquire dquot type 1 [ 50.165918][ T3808] loop1: lost filesystem error report for type 5 error -117 [ 50.166236][ T3808] EXT4-fs (loop1): Remounting filesystem read-only [ 50.166265][ T3808] EXT4-fs (loop1): 1 truncate cleaned up [ 50.167327][ T3808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.315406][ T3812] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 50.315936][ T3812] netlink: 220 bytes leftover after parsing attributes in process `syz.1.81'. [ 50.318238][ T3812] netlink: 10 bytes leftover after parsing attributes in process `syz.1.81'. [ 50.692946][ T1795] Bluetooth: hci2: Frame reassembly failed (-84) [ 50.701756][ T3753] Bluetooth: hci1: command 0x1003 tx timeout [ 50.704979][ T3523] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 50.734473][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.964821][ T3824] loop2: detected capacity change from 0 to 164 [ 51.231731][ T3523] Bluetooth: hci0: command 0x1003 tx timeout [ 51.231809][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.259710][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.505028][ T3828] loop0: detected capacity change from 0 to 164 [ 51.505558][ T3828] iso9660: Unknown parameter 'ÿÿÿÿÿÿ .ÃNÛBþO' [ 51.671710][ T1795] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.785843][ T3840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.785914][ T3840] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.702746][ T3523] Bluetooth: hci2: command 0x1003 tx timeout [ 52.702781][ T3550] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 52.839944][ T3880] set_capacity_and_notify: 3 callbacks suppressed [ 52.840408][ T3880] loop1: detected capacity change from 0 to 128 [ 53.251085][ T3883] bonding: no command found in bonding_masters - use +ifname or -ifname [ 53.274741][ T3883] loop4: detected capacity change from 0 to 512 [ 53.304840][ T3883] EXT4-fs: Ignoring removed nobh option [ 53.311581][ T3883] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.311832][ T3883] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.100: bg 0: block 7: invalid block bitmap [ 53.311866][ T3883] loop4: lost filesystem error report for type 5 error -117 [ 53.312038][ T3883] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 53.312061][ T3883] loop4: lost filesystem error report for type 5 error -117 [ 53.312394][ T3883] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.100: corrupted xattr block 95: invalid header [ 53.312539][ T3883] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.312715][ T3883] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 53.312749][ T3883] EXT4-fs (loop4): 1 orphan inode deleted [ 53.313184][ T3883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.313681][ T3883] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.743392][ T3550] Bluetooth: hci0: command 0x1003 tx timeout [ 53.743420][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.795957][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.905935][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 53.905954][ T30] audit: type=1400 audit(1791584942.992:265): avc: denied { create } for pid=3902 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.950208][ T30] audit: type=1400 audit(1791584943.032:266): avc: denied { write } for pid=3902 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.499036][ T3911] syzkaller0: entered promiscuous mode [ 54.499062][ T3911] syzkaller0: entered allmulticast mode [ 55.392083][ T3941] binfmt_misc: register: failed to install interpreter ./file0 [ 55.565875][ T405] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.612274][ T3955] loop4: detected capacity change from 0 to 512 [ 55.630605][ T3955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.630736][ T3955] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.645675][ T30] audit: type=1400 audit(1791584944.732:267): avc: denied { write } for pid=3954 comm="syz.4.122" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.661969][ T405] Bluetooth: hci1: Frame reassembly failed (-84) [ 56.713758][ T3965] syz.3.126 (3965) used greatest stack depth: 9736 bytes left [ 56.816648][ T3977] bonding: no command found in bonding_masters - use +ifname or -ifname [ 56.836849][ T3977] loop0: detected capacity change from 0 to 512 [ 56.837147][ T3977] EXT4-fs: Ignoring removed nobh option [ 56.838365][ T3977] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.838615][ T3977] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.129: bg 0: block 7: invalid block bitmap [ 56.838692][ T3977] loop0: lost filesystem error report for type 5 error -117 [ 56.838839][ T3977] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 56.838861][ T3977] loop0: lost filesystem error report for type 5 error -117 [ 56.839060][ T3977] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #11: comm syz.0.129: corrupted xattr block 95: invalid header [ 56.839125][ T3977] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.839252][ T3977] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 56.839282][ T3977] EXT4-fs (loop0): 1 orphan inode deleted [ 56.839883][ T3977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.840337][ T3977] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.862703][ T3973] bonding: no command found in bonding_masters - use +ifname or -ifname [ 56.899887][ T3973] loop1: detected capacity change from 0 to 512 [ 56.904577][ T3973] EXT4-fs: Ignoring removed nobh option [ 56.938343][ T3973] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.944633][ T3973] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.128: bg 0: block 7: invalid block bitmap [ 56.944905][ T3973] loop1: lost filesystem error report for type 5 error -117 [ 56.946983][ T3973] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 56.947050][ T3973] loop1: lost filesystem error report for type 5 error -117 [ 56.951714][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 56.951769][ C1] EXT4-fs (loop1): initial error at time 1791584946: ext4_validate_block_bitmap:436 [ 56.951847][ C1] EXT4-fs (loop1): last error at time 1791584946: ext4_mb_clear_bb:6680 [ 56.954229][ T3973] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #11: comm syz.1.128: corrupted xattr block 95: invalid header [ 56.954373][ T3973] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.958505][ T3973] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 56.958613][ T3973] EXT4-fs (loop1): 1 orphan inode deleted [ 57.081612][ T3973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 57.109362][ T3973] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.581725][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.724700][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.930707][ T3994] loop3: detected capacity change from 0 to 128 [ 57.976512][ T3994] bio_check_eod: 19 callbacks suppressed [ 57.976539][ T3994] syz.3.135: attempt to access beyond end of device [ 57.976539][ T3994] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 57.979500][ T3994] syz.3.135: attempt to access beyond end of device [ 57.979500][ T3994] loop3: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 57.986009][ T3994] syz.3.135: attempt to access beyond end of device [ 57.986009][ T3994] loop3: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 57.986163][ T3994] buffer_io_error: 8 callbacks suppressed [ 57.986198][ T3994] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 57.986479][ T3994] syz.3.135: attempt to access beyond end of device [ 57.986479][ T3994] loop3: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 57.986606][ T3994] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 57.988511][ T3994] syz.3.135: attempt to access beyond end of device [ 57.988511][ T3994] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 57.992945][ T3994] syz.3.135: attempt to access beyond end of device [ 57.992945][ T3994] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 57.993524][ T3994] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 57.993587][ T3994] syz.3.135: attempt to access beyond end of device [ 57.993587][ T3994] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 57.993844][ T3994] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 57.998694][ T3994] syz.3.135: attempt to access beyond end of device [ 57.998694][ T3994] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 58.004965][ T3994] syz.3.135: attempt to access beyond end of device [ 58.004965][ T3994] loop3: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 58.005296][ T3994] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 58.005841][ T3994] syz.3.135: attempt to access beyond end of device [ 58.005841][ T3994] loop3: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 58.006014][ T3994] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 58.017415][ T3988] bonding: no command found in bonding_masters - use +ifname or -ifname [ 58.018351][ T3994] Buffer I/O error on dev loop3, logical block 87, lost async page write [ 58.018511][ T3994] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 58.048855][ T3994] Buffer I/O error on dev loop3, logical block 91, lost async page write [ 58.049130][ T3994] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 58.068091][ T3988] loop0: detected capacity change from 0 to 512 [ 58.107001][ T3988] EXT4-fs: Ignoring removed nobh option [ 58.138000][ T3988] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.140894][ T3988] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.132: bg 0: block 7: invalid block bitmap [ 58.141044][ T3988] loop0: lost filesystem error report for type 5 error -117 [ 58.146854][ T3988] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 58.147075][ T3988] loop0: lost filesystem error report for type 5 error -117 [ 58.152815][ T3988] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #11: comm syz.0.132: corrupted xattr block 95: invalid header [ 58.152913][ T3988] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.157006][ T3988] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 58.157200][ T3988] EXT4-fs (loop0): 1 orphan inode deleted [ 58.198659][ T3988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.199658][ T3990] bonding: no command found in bonding_masters - use +ifname or -ifname [ 58.226829][ T3988] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.453479][ T3990] loop4: detected capacity change from 0 to 512 [ 58.478667][ T3990] EXT4-fs: Ignoring removed nobh option [ 58.547128][ T3990] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.578474][ T3990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.133: bg 0: block 7: invalid block bitmap [ 58.579743][ T3990] loop4: lost filesystem error report for type 5 error -117 [ 58.601930][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 58.602000][ C0] EXT4-fs (loop4): initial error at time 1791584947: ext4_validate_block_bitmap:436 [ 58.602860][ C0] EXT4-fs (loop4): last error at time 1791584947: ext4_validate_block_bitmap:436 [ 58.645187][ T3990] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 58.645335][ T3990] loop4: lost filesystem error report for type 5 error -117 [ 58.648979][ T3990] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.133: corrupted xattr block 95: invalid header [ 58.649271][ T3990] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.651153][ T3990] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 58.702330][ T3523] Bluetooth: hci1: command 0x1003 tx timeout [ 58.702436][ T3550] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 58.703070][ T3990] EXT4-fs (loop4): 1 orphan inode deleted [ 58.722623][ T3990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.776445][ T1769] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.785094][ T3990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.785412][ T4004] loop2: detected capacity change from 0 to 512 [ 58.831957][ T4004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.832071][ T4004] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.863697][ T30] audit: type=1400 audit(1791584947.952:268): avc: denied { write } for pid=4003 comm="syz.2.137" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.263650][ T1769] Bluetooth: hci1: Frame reassembly failed (-84) [ 59.271237][ T4021] loop1: detected capacity change from 0 to 512 [ 59.303093][ T4021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.303276][ T4021] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.306979][ T30] audit: type=1400 audit(1791584948.392:269): avc: denied { write } for pid=4020 comm="syz.1.141" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.441526][ T4012] bonding: no command found in bonding_masters - use +ifname or -ifname [ 59.725819][ T4012] loop3: detected capacity change from 0 to 512 [ 59.815030][ T4012] EXT4-fs: Ignoring removed nobh option [ 59.847101][ T4012] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.855891][ T4012] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.139: bg 0: block 7: invalid block bitmap [ 59.856211][ T4012] loop3: lost filesystem error report for type 5 error -117 [ 59.856923][ T4012] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 59.856986][ T4012] loop3: lost filesystem error report for type 5 error -117 [ 59.858758][ T4012] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.139: corrupted xattr block 95: invalid header [ 59.858923][ T4012] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.859968][ T4012] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 59.860102][ T4012] EXT4-fs (loop3): 1 orphan inode deleted [ 59.865092][ T4012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.868138][ T4012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.733359][ T4051] loop3: detected capacity change from 0 to 512 [ 60.741340][ T4051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 60.741403][ T4051] System zones: 1-12 [ 60.741820][ T4051] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.148: missing EA_INODE flag [ 60.741852][ T4051] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 60.754082][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 60.754122][ C1] EXT4-fs (loop3): initial error at time 1791584949: ext4_xattr_inode_iget:437: inode 12 [ 60.754157][ C1] EXT4-fs (loop3): last error at time 1791584949: ext4_xattr_inode_iget:437: inode 12 [ 60.785934][ T4051] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.148: error while reading EA inode 12 err=-117 [ 60.786175][ T4051] EXT4-fs (loop3): 1 orphan inode deleted [ 60.786732][ T4051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.792133][ T3550] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.905778][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.087327][ T4051] ip_tables: iptables: counters copy to user failed while replacing table [ 61.087807][ T4051] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 61.171988][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.343005][ T3609] Bluetooth: hci1: command 0x1003 tx timeout [ 61.343041][ T3523] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 61.376277][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.412762][ T4070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'. [ 62.035389][ T30] audit: type=1400 audit(1791584951.122:270): avc: denied { map_read map_write } for pid=4076 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.244690][ T4079] loop2: detected capacity change from 0 to 164 [ 62.447919][ T4086] loop3: detected capacity change from 0 to 512 [ 62.461481][ T4086] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.493910][ T4086] Quota error (device loop3): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 62.493972][ T4086] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 62.493996][ T4086] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.161: Failed to acquire dquot type 1 [ 62.494019][ T4086] fserror_report: 1 callbacks suppressed [ 62.494030][ T4086] loop3: lost filesystem error report for type 5 error -117 [ 62.494280][ T4086] EXT4-fs (loop3): Remounting filesystem read-only [ 62.494318][ T4086] EXT4-fs (loop3): 1 truncate cleaned up [ 62.495056][ T4086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.826627][ T4086] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 62.826839][ T4086] netlink: 220 bytes leftover after parsing attributes in process `syz.3.161'. [ 62.874257][ T4086] netlink: 10 bytes leftover after parsing attributes in process `syz.3.161'. [ 63.230446][ T4101] loop0: detected capacity change from 0 to 512 [ 63.232800][ T4101] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.256120][ T4101] Quota error (device loop0): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 63.256243][ T4101] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 63.256300][ T4101] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.166: Failed to acquire dquot type 1 [ 63.256331][ T4101] loop0: lost filesystem error report for type 5 error -117 [ 63.256480][ T4101] EXT4-fs (loop0): Remounting filesystem read-only [ 63.256531][ T4101] EXT4-fs (loop0): 1 truncate cleaned up [ 63.256916][ T4101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.355141][ T4105] netlink: 'syz.0.166': attribute type 1 has an invalid length. [ 63.355253][ T4105] netlink: 220 bytes leftover after parsing attributes in process `syz.0.166'. [ 63.355611][ T4105] netlink: 10 bytes leftover after parsing attributes in process `syz.0.166'. [ 63.467089][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.936352][ T4115] loop1: detected capacity change from 0 to 512 [ 63.937408][ T4115] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.968311][ T4115] Quota error (device loop1): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 63.968444][ T4115] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 63.968469][ T4115] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.170: Failed to acquire dquot type 1 [ 63.968489][ T4115] loop1: lost filesystem error report for type 5 error -117 [ 63.968723][ T4115] EXT4-fs (loop1): Remounting filesystem read-only [ 63.968807][ T4115] EXT4-fs (loop1): 1 truncate cleaned up [ 63.969353][ T4115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.029072][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.146844][ T4120] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 64.146863][ T4120] netlink: 220 bytes leftover after parsing attributes in process `syz.1.170'. [ 64.158983][ T4120] netlink: 10 bytes leftover after parsing attributes in process `syz.1.170'. [ 64.393443][ T405] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.416261][ T4123] loop2: detected capacity change from 0 to 512 [ 64.449065][ T4123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.449152][ T4123] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.475187][ T30] audit: type=1400 audit(1791584953.562:271): avc: denied { write } for pid=4122 comm="syz.2.172" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.934976][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 64.966839][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.987773][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 65.016970][ T4135] loop3: detected capacity change from 0 to 512 [ 65.150455][ T4135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.150566][ T4135] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.165626][ T4137] loop1: detected capacity change from 0 to 164 [ 65.184679][ T30] audit: type=1400 audit(1791584954.272:272): avc: denied { write } for pid=4134 comm="syz.3.175" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.437423][ T4119] syz.0.171 (4119) used greatest stack depth: 9672 bytes left [ 66.070331][ T4152] loop4: detected capacity change from 0 to 512 [ 66.094191][ T4152] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.124216][ T4152] Quota error (device loop4): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 66.124272][ T4152] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 66.124348][ T4152] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.181: Failed to acquire dquot type 1 [ 66.124375][ T4152] loop4: lost filesystem error report for type 5 error -117 [ 66.129710][ T4152] EXT4-fs (loop4): Remounting filesystem read-only [ 66.129751][ T4152] EXT4-fs (loop4): 1 truncate cleaned up [ 66.130340][ T4152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.397915][ T4152] netlink: 'syz.4.181': attribute type 1 has an invalid length. [ 66.398638][ T4152] netlink: 220 bytes leftover after parsing attributes in process `syz.4.181'. [ 66.424250][ T4152] netlink: 10 bytes leftover after parsing attributes in process `syz.4.181'. [ 66.472447][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.506069][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.546540][ T4161] loop0: detected capacity change from 0 to 164 [ 66.819197][ T4160] loop2: detected capacity change from 0 to 164 [ 67.032086][ T3609] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 67.051887][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.086562][ T1687] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.095148][ T4169] loop4: detected capacity change from 0 to 512 [ 67.113683][ T4169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.113761][ T4169] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.293150][ T4164] bonding: no command found in bonding_masters - use +ifname or -ifname [ 67.420262][ T4164] loop1: detected capacity change from 0 to 512 [ 67.435226][ T4164] EXT4-fs: Ignoring removed nobh option [ 67.656310][ T4164] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.695624][ T4164] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.185: bg 0: block 7: invalid block bitmap [ 67.695668][ T4164] loop1: lost filesystem error report for type 5 error -117 [ 67.702970][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 67.703482][ C0] EXT4-fs (loop1): initial error at time 1791584956: ext4_validate_block_bitmap:436 [ 67.704172][ C0] EXT4-fs (loop1): last error at time 1791584956: ext4_validate_block_bitmap:436 [ 67.712797][ T4164] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 67.712937][ T4164] loop1: lost filesystem error report for type 5 error -117 [ 67.714725][ T4164] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #11: comm syz.1.185: corrupted xattr block 95: invalid header [ 67.715169][ T4164] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.715844][ T4164] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 67.715955][ T4164] EXT4-fs (loop1): 1 orphan inode deleted [ 67.869581][ T4189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 67.869610][ T4189] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.266272][ T4198] set_capacity_and_notify: 3 callbacks suppressed [ 68.266306][ T4198] loop3: detected capacity change from 0 to 128 [ 68.427556][ T4203] loop2: detected capacity change from 0 to 164 [ 68.611992][ T4198] bio_check_eod: 25 callbacks suppressed [ 68.612115][ T4198] syz.3.196: attempt to access beyond end of device [ 68.612115][ T4198] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 68.655226][ T405] kworker/u8:7: attempt to access beyond end of device [ 68.655226][ T405] loop3: rw=1, sector=146, nr_sectors = 6 limit=128 [ 68.717287][ T4198] syz.3.196: attempt to access beyond end of device [ 68.717287][ T4198] loop3: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 68.726499][ T4198] buffer_io_error: 12 callbacks suppressed [ 68.726584][ T4198] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 68.726824][ T4198] syz.3.196: attempt to access beyond end of device [ 68.726824][ T4198] loop3: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 68.727014][ T4198] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 68.785049][ T4198] syz.3.196: attempt to access beyond end of device [ 68.785049][ T4198] loop3: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 69.111782][ T3609] Bluetooth: hci0: command 0x1003 tx timeout [ 69.111865][ T3550] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.275390][ T4215] loop2: detected capacity change from 0 to 128 [ 69.471905][ T4219] bonding: no command found in bonding_masters - use +ifname or -ifname [ 69.482368][ T4219] loop4: detected capacity change from 0 to 512 [ 69.486307][ T4219] EXT4-fs: Ignoring removed nobh option [ 69.490719][ T4219] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.490952][ T4219] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.203: bg 0: block 7: invalid block bitmap [ 69.491041][ T4219] loop4: lost filesystem error report for type 5 error -117 [ 69.491254][ T4219] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 69.491329][ T4219] loop4: lost filesystem error report for type 5 error -117 [ 69.492274][ T4219] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.203: corrupted xattr block 95: invalid header [ 69.492370][ T4219] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.492816][ T4219] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 69.492918][ T4219] EXT4-fs (loop4): 1 orphan inode deleted [ 69.542045][ T4227] loop1: detected capacity change from 0 to 128 [ 69.578221][ T4225] loop0: detected capacity change from 0 to 164 [ 69.609715][ T4227] syz.1.205: attempt to access beyond end of device [ 69.609715][ T4227] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 69.644192][ T4227] syz.1.205: attempt to access beyond end of device [ 69.644192][ T4227] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 69.675161][ T12] kworker/u8:0: attempt to access beyond end of device [ 69.675161][ T12] loop1: rw=8388609, sector=150, nr_sectors = 2 limit=128 [ 69.675208][ T12] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 69.675228][ T12] kworker/u8:0: attempt to access beyond end of device [ 69.675228][ T12] loop1: rw=8388609, sector=152, nr_sectors = 2 limit=128 [ 69.675253][ T12] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 69.692042][ T4227] syz.1.205: attempt to access beyond end of device [ 69.692042][ T4227] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 69.694658][ T4227] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 69.694733][ T4227] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 69.707908][ T4227] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 69.708066][ T4227] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 69.712960][ T4227] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 69.713036][ T4227] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 70.711525][ T405] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.908226][ T4240] loop0: detected capacity change from 0 to 164 [ 71.268506][ T4248] loop1: detected capacity change from 0 to 512 [ 71.272537][ T4248] EXT4-fs: Ignoring removed nobh option [ 71.279564][ T4248] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.280116][ T4248] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.211: bg 0: block 7: invalid block bitmap [ 71.280278][ T4248] loop1: lost filesystem error report for type 5 error -117 [ 71.280760][ T4248] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 71.280847][ T4248] loop1: lost filesystem error report for type 5 error -117 [ 71.281598][ T4248] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #11: comm syz.1.211: corrupted xattr block 95: invalid header [ 71.281770][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 71.281837][ C1] EXT4-fs (loop1): initial error at time 1791584960: ext4_validate_block_bitmap:436 [ 71.281913][ C1] EXT4-fs (loop1): last error at time 1791584960: ext4_mb_clear_bb:6680 [ 71.282121][ T4248] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.285672][ T4248] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 71.285778][ T4248] EXT4-fs (loop1): 1 orphan inode deleted [ 71.286746][ T4248] EXT4-fs mount: 6 callbacks suppressed [ 71.286787][ T4248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.289948][ T4248] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.079497][ T405] Bluetooth: hci1: Frame reassembly failed (-84) [ 72.093379][ T4263] loop1: detected capacity change from 0 to 512 [ 72.114539][ T4263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.114657][ T4263] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.117374][ T30] audit: type=1400 audit(1791584961.202:273): avc: denied { write } for pid=4262 comm="syz.1.216" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.269380][ T4268] loop3: detected capacity change from 0 to 128 [ 72.486046][ T4271] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.505497][ T4271] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 72.505625][ T4271] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 72.505655][ T4271] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.218: Failed to acquire dquot type 1 [ 72.505684][ T4271] loop2: lost filesystem error report for type 5 error -117 [ 72.505940][ T4271] EXT4-fs (loop2): Remounting filesystem read-only [ 72.505981][ T4271] EXT4-fs (loop2): 1 truncate cleaned up [ 72.506512][ T4271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.599238][ T4276] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 72.599328][ T4276] netlink: 220 bytes leftover after parsing attributes in process `syz.2.218'. [ 72.601446][ T4276] netlink: 10 bytes leftover after parsing attributes in process `syz.2.218'. [ 72.781775][ T3550] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.209489][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.670815][ T4293] set_capacity_and_notify: 1 callbacks suppressed [ 73.670835][ T4293] loop0: detected capacity change from 0 to 164 [ 73.962996][ T4302] loop2: detected capacity change from 0 to 512 [ 73.988173][ T4302] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.061094][ T4302] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 74.061236][ T4302] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 74.061267][ T4302] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.228: Failed to acquire dquot type 1 [ 74.061295][ T4302] loop2: lost filesystem error report for type 5 error -117 [ 74.061853][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 74.061944][ C1] EXT4-fs (loop2): initial error at time 1791584963: ext4_acquire_dquot:7070 [ 74.062962][ C1] EXT4-fs (loop2): last error at time 1791584963: ext4_acquire_dquot:7070 [ 74.121898][ T4302] EXT4-fs (loop2): Remounting filesystem read-only [ 74.122102][ T4302] EXT4-fs (loop2): 1 truncate cleaned up [ 74.123216][ T4302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.142117][ T3523] Bluetooth: hci1: command 0x1003 tx timeout [ 74.142149][ T3609] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 74.265752][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.309933][ T4313] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 74.309955][ T4313] netlink: 220 bytes leftover after parsing attributes in process `syz.2.228'. [ 74.310238][ T4313] netlink: 10 bytes leftover after parsing attributes in process `syz.2.228'. [ 74.367621][ T4312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 74.857886][ T4329] loop3: detected capacity change from 0 to 128 [ 75.008620][ T4329] bio_check_eod: 52 callbacks suppressed [ 75.008642][ T4329] syz.3.233: attempt to access beyond end of device [ 75.008642][ T4329] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 75.043451][ T4322] bonding: no command found in bonding_masters - use +ifname or -ifname [ 75.067233][ T4329] syz.3.233: attempt to access beyond end of device [ 75.067233][ T4329] loop3: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 75.101739][ T12] kworker/u8:0: attempt to access beyond end of device [ 75.101739][ T12] loop3: rw=8388609, sector=150, nr_sectors = 2 limit=128 [ 75.101852][ T12] buffer_io_error: 28 callbacks suppressed [ 75.101867][ T12] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 75.101889][ T12] kworker/u8:0: attempt to access beyond end of device [ 75.101889][ T12] loop3: rw=8388609, sector=152, nr_sectors = 2 limit=128 [ 75.101912][ T12] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 75.175529][ T4322] loop1: detected capacity change from 0 to 512 [ 75.196336][ T4322] EXT4-fs: Ignoring removed nobh option [ 75.220144][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.293360][ T1795] kworker/u8:10: attempt to access beyond end of device [ 75.293360][ T1795] loop3: rw=1, sector=154, nr_sectors = 40 limit=128 [ 75.320247][ T4322] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.345221][ T4322] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.241: bg 0: block 7: invalid block bitmap [ 75.345311][ T4322] loop1: lost filesystem error report for type 5 error -117 [ 75.353291][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 75.353358][ C1] EXT4-fs (loop1): initial error at time 1791584964: ext4_validate_block_bitmap:436 [ 75.353443][ C1] EXT4-fs (loop1): last error at time 1791584964: ext4_validate_block_bitmap:436 [ 75.358015][ T4322] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 75.358158][ T4322] loop1: lost filesystem error report for type 5 error -117 [ 75.377751][ T4322] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #11: comm syz.1.241: corrupted xattr block 95: invalid header [ 75.377854][ T4322] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.381174][ T4322] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 75.381835][ T4322] EXT4-fs (loop1): 1 orphan inode deleted [ 75.385741][ T4322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.390429][ T4322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.407682][ T4329] syz.3.233: attempt to access beyond end of device [ 75.407682][ T4329] loop3: rw=2049, sector=194, nr_sectors = 56 limit=128 [ 76.027005][ T4347] loop2: detected capacity change from 0 to 128 [ 76.098623][ T4347] syz.2.237: attempt to access beyond end of device [ 76.098623][ T4347] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 76.115256][ T4347] syz.2.237: attempt to access beyond end of device [ 76.115256][ T4347] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 76.141701][ T4347] syz.2.237: attempt to access beyond end of device [ 76.141701][ T4347] loop2: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 76.141733][ T4347] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 76.141751][ T4347] syz.2.237: attempt to access beyond end of device [ 76.141751][ T4347] loop2: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 76.141772][ T4347] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 76.202853][ T4347] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 76.203272][ T4347] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 76.281606][ T4356] loop0: detected capacity change from 0 to 512 [ 76.292071][ T4356] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.529611][ T4356] Quota error (device loop0): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 76.529936][ T4356] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 76.530133][ T4356] EXT4-fs error (device loop0): ext4_acquire_dquot:7070: comm syz.0.239: Failed to acquire dquot type 1 [ 76.530330][ T4356] loop0: lost filesystem error report for type 5 error -117 [ 76.531188][ T4356] EXT4-fs (loop0): Remounting filesystem read-only [ 76.531222][ T4356] EXT4-fs (loop0): 1 truncate cleaned up [ 76.589556][ T4356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.852338][ T4362] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 76.852361][ T4362] netlink: 220 bytes leftover after parsing attributes in process `syz.0.239'. [ 76.852816][ T4362] netlink: 10 bytes leftover after parsing attributes in process `syz.0.239'. [ 77.292122][ T4355] syz.1.240 (4355) used greatest stack depth: 9608 bytes left [ 77.798099][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.999234][ T4376] loop2: detected capacity change from 0 to 128 [ 78.236284][ T4376] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 78.236644][ T4376] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 78.290880][ T4376] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 78.291199][ T4376] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 78.426498][ T4384] loop0: detected capacity change from 0 to 512 [ 78.428310][ T4384] EXT4-fs: Ignoring removed nobh option [ 78.633064][ T4384] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.633452][ T4384] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.245: bg 0: block 7: invalid block bitmap [ 78.633599][ T4384] loop0: lost filesystem error report for type 5 error -117 [ 78.640477][ T4384] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 78.640527][ T4384] loop0: lost filesystem error report for type 5 error -117 [ 78.641654][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 78.641681][ C0] EXT4-fs (loop0): initial error at time 1791584967: ext4_validate_block_bitmap:436 [ 78.641714][ C0] EXT4-fs (loop0): last error at time 1791584967: ext4_mb_clear_bb:6680 [ 78.695275][ T4384] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #11: comm syz.0.245: corrupted xattr block 95: invalid header [ 78.695331][ T4384] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.696305][ T4384] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 78.708581][ T4384] EXT4-fs (loop0): 1 orphan inode deleted [ 78.744813][ T4384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.780509][ T4384] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.199254][ T4389] loop1: detected capacity change from 0 to 128 [ 79.537111][ T4395] loop2: detected capacity change from 0 to 128 [ 80.210574][ T4404] loop3: detected capacity change from 0 to 128 [ 80.388976][ T4407] loop1: detected capacity change from 0 to 128 [ 80.508143][ T4404] bio_check_eod: 29 callbacks suppressed [ 80.508165][ T4404] syz.3.255: attempt to access beyond end of device [ 80.508165][ T4404] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 80.522011][ T4407] syz.1.256: attempt to access beyond end of device [ 80.522011][ T4407] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 80.523120][ T4407] syz.1.256: attempt to access beyond end of device [ 80.523120][ T4407] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 80.526465][ T4407] syz.1.256: attempt to access beyond end of device [ 80.526465][ T4407] loop1: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 80.527009][ T4407] buffer_io_error: 8 callbacks suppressed [ 80.527044][ T4407] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 80.527084][ T4407] syz.1.256: attempt to access beyond end of device [ 80.527084][ T4407] loop1: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 80.527388][ T4407] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 80.529482][ T4407] syz.1.256: attempt to access beyond end of device [ 80.529482][ T4407] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 80.531821][ T4407] syz.1.256: attempt to access beyond end of device [ 80.531821][ T4407] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 80.531900][ T4407] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 80.532051][ T4407] syz.1.256: attempt to access beyond end of device [ 80.532051][ T4407] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 80.532126][ T4407] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 80.534105][ T4407] syz.1.256: attempt to access beyond end of device [ 80.534105][ T4407] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 80.539346][ T4407] syz.1.256: attempt to access beyond end of device [ 80.539346][ T4407] loop1: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 80.539433][ T4407] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 80.539551][ T4407] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 80.542772][ T4407] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 80.542858][ T4407] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 80.551480][ T4407] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 80.551574][ T4407] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 81.462918][ T4420] bonding: no command found in bonding_masters - use +ifname or -ifname [ 81.735930][ T4429] loop3: detected capacity change from 0 to 164 [ 81.934047][ T4420] loop2: detected capacity change from 0 to 512 [ 81.943233][ T4420] EXT4-fs: Ignoring removed nobh option [ 81.979819][ T4432] loop4: detected capacity change from 0 to 164 [ 81.990742][ T4432] iso9660: Unknown parameter 'ÿÿÿÿÿÿ .ÃNÛBþO' [ 82.079142][ T4420] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.114186][ T4420] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.259: bg 0: block 7: invalid block bitmap [ 82.114335][ T4420] loop2: lost filesystem error report for type 5 error -117 [ 82.118773][ T4420] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 82.118904][ T4420] loop2: lost filesystem error report for type 5 error -117 [ 82.122535][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 82.123150][ C1] EXT4-fs (loop2): initial error at time 1791584971: ext4_validate_block_bitmap:436 [ 82.123395][ C1] EXT4-fs (loop2): last error at time 1791584971: ext4_mb_clear_bb:6680 [ 82.136609][ T4420] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #11: comm syz.2.259: corrupted xattr block 95: invalid header [ 82.136809][ T4420] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.137785][ T4420] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -117) [ 82.137893][ T4420] EXT4-fs (loop2): 1 orphan inode deleted [ 82.166521][ T4434] loop1: detected capacity change from 0 to 128 [ 82.187661][ T4420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.214581][ T4420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.199235][ T4453] loop4: detected capacity change from 0 to 164 [ 83.727073][ T4464] loop0: detected capacity change from 0 to 128 [ 84.417541][ T4472] loop2: detected capacity change from 0 to 164 [ 84.686648][ T4469] loop4: detected capacity change from 0 to 512 [ 84.687024][ T4469] EXT4-fs: Ignoring removed nobh option [ 84.704075][ T4469] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.704170][ T4469] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.275: bg 0: block 7: invalid block bitmap [ 84.704213][ T4469] loop4: lost filesystem error report for type 5 error -117 [ 84.707774][ T4469] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 84.707794][ T4469] loop4: lost filesystem error report for type 5 error -117 [ 84.708313][ T4469] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.275: corrupted xattr block 95: invalid header [ 84.708344][ T4469] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.709929][ T4469] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 84.710018][ T4469] EXT4-fs (loop4): 1 orphan inode deleted [ 84.710383][ T4469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.710884][ T4469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.853459][ T4497] loop2: detected capacity change from 0 to 128 [ 85.860108][ T4494] loop1: detected capacity change from 0 to 164 [ 86.131822][ T4497] bio_check_eod: 56 callbacks suppressed [ 86.131942][ T4497] syz.2.285: attempt to access beyond end of device [ 86.131942][ T4497] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 86.137962][ T4497] syz.2.285: attempt to access beyond end of device [ 86.137962][ T4497] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 86.146936][ T1795] kworker/u8:10: attempt to access beyond end of device [ 86.146936][ T1795] loop2: rw=8388609, sector=150, nr_sectors = 2 limit=128 [ 86.147064][ T1795] buffer_io_error: 28 callbacks suppressed [ 86.147078][ T1795] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 86.147165][ T1795] kworker/u8:10: attempt to access beyond end of device [ 86.147165][ T1795] loop2: rw=8388609, sector=152, nr_sectors = 2 limit=128 [ 86.147188][ T1795] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 86.156076][ T4497] syz.2.285: attempt to access beyond end of device [ 86.156076][ T4497] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 86.157804][ T4497] syz.2.285: attempt to access beyond end of device [ 86.157804][ T4497] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 86.157881][ T4497] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 86.157936][ T4497] syz.2.285: attempt to access beyond end of device [ 86.157936][ T4497] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 86.158156][ T4497] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 86.159311][ T4497] syz.2.285: attempt to access beyond end of device [ 86.159311][ T4497] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 86.164444][ T4497] syz.2.285: attempt to access beyond end of device [ 86.164444][ T4497] loop2: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 86.164562][ T4497] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 86.164727][ T4497] syz.2.285: attempt to access beyond end of device [ 86.164727][ T4497] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 86.164894][ T4497] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 86.167405][ T4497] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 86.167517][ T4497] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 86.180554][ T4497] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 86.180898][ T4497] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 86.236181][ T4504] loop0: detected capacity change from 0 to 128 [ 86.976228][ T1687] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.000307][ T4516] loop3: detected capacity change from 0 to 128 [ 87.009231][ T4518] loop0: detected capacity change from 0 to 512 [ 87.044436][ T4518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.044505][ T4518] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.091483][ T30] audit: type=1400 audit(1791584976.172:274): avc: denied { write } for pid=4517 comm="syz.0.291" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.539612][ T4540] loop2: detected capacity change from 0 to 512 [ 88.548422][ T4540] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.567946][ T4540] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 88.568049][ T4540] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 88.568080][ T4540] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.297: Failed to acquire dquot type 1 [ 88.568168][ T4540] loop2: lost filesystem error report for type 5 error -117 [ 88.568678][ T4540] EXT4-fs (loop2): Remounting filesystem read-only [ 88.568720][ T4540] EXT4-fs (loop2): 1 truncate cleaned up [ 88.569296][ T4540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.828746][ T4543] netlink: 'syz.2.297': attribute type 1 has an invalid length. [ 88.828767][ T4543] netlink: 220 bytes leftover after parsing attributes in process `syz.2.297'. [ 88.829206][ T4543] netlink: 10 bytes leftover after parsing attributes in process `syz.2.297'. [ 88.845513][ T4534] bonding: no command found in bonding_masters - use +ifname or -ifname [ 88.985836][ T4534] loop4: detected capacity change from 0 to 512 [ 88.996103][ T4534] EXT4-fs: Ignoring removed nobh option [ 89.023066][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.037896][ T4534] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.038652][ T4534] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.295: bg 0: block 7: invalid block bitmap [ 89.039072][ T4534] loop4: lost filesystem error report for type 5 error -117 [ 89.039852][ T4534] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 89.039911][ T4534] loop4: lost filesystem error report for type 5 error -117 [ 89.042607][ T4534] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.295: corrupted xattr block 95: invalid header [ 89.042982][ T4534] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.043677][ T4534] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 89.043780][ T4534] EXT4-fs (loop4): 1 orphan inode deleted [ 89.080154][ T4534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 89.114638][ T4534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.150117][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.252365][ T378] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.675169][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.250105][ T1687] Bluetooth: hci1: Frame reassembly failed (-84) [ 90.276112][ T4563] loop4: detected capacity change from 0 to 512 [ 90.313549][ T4563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.313621][ T4563] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.319036][ T30] audit: type=1400 audit(1791584979.402:275): avc: denied { write } for pid=4562 comm="syz.4.303" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.837916][ T4576] loop3: detected capacity change from 0 to 512 [ 90.839398][ T4576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 90.839496][ T4576] System zones: 1-12 [ 90.839913][ T4576] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.308: missing EA_INODE flag [ 90.839942][ T4576] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 90.840043][ T4576] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.308: error while reading EA inode 12 err=-117 [ 90.840087][ T4576] loop3: lost filesystem error report for type 5 error -117 [ 90.840223][ T4576] EXT4-fs (loop3): 1 orphan inode deleted [ 90.840664][ T4576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.261742][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.709876][ T4583] ip_tables: iptables: counters copy to user failed while replacing table [ 91.710074][ T4583] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 91.810278][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.894621][ T4592] loop1: detected capacity change from 0 to 164 [ 92.045382][ T4587] bonding: no command found in bonding_masters - use +ifname or -ifname [ 92.152489][ T4587] loop0: detected capacity change from 0 to 512 [ 92.159016][ T4587] EXT4-fs: Ignoring removed nobh option [ 92.166301][ T4587] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.167763][ T4587] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.310: bg 0: block 7: invalid block bitmap [ 92.167959][ T4587] loop0: lost filesystem error report for type 5 error -117 [ 92.168839][ T4587] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 92.168948][ T4587] loop0: lost filesystem error report for type 5 error -117 [ 92.170236][ T4587] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #11: comm syz.0.310: corrupted xattr block 95: invalid header [ 92.170620][ T4587] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.171193][ T4587] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 92.171292][ T4587] EXT4-fs (loop0): 1 orphan inode deleted [ 92.175195][ T4587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.201388][ T4587] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.301743][ T3550] Bluetooth: hci1: command 0x1003 tx timeout [ 92.302474][ T3609] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 92.360105][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.179242][ T4606] loop2: detected capacity change from 0 to 128 [ 93.505853][ T4613] loop1: detected capacity change from 0 to 164 [ 93.509004][ T4604] bonding: no command found in bonding_masters - use +ifname or -ifname [ 93.515614][ T4606] bio_check_eod: 47 callbacks suppressed [ 93.515658][ T4606] syz.2.318: attempt to access beyond end of device [ 93.515658][ T4606] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 93.561310][ T4606] syz.2.318: attempt to access beyond end of device [ 93.561310][ T4606] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 93.739691][ T1687] kworker/u8:8: attempt to access beyond end of device [ 93.739691][ T1687] loop2: rw=8388609, sector=150, nr_sectors = 2 limit=128 [ 93.739728][ T1687] buffer_io_error: 26 callbacks suppressed [ 93.739821][ T1687] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 93.739844][ T1687] kworker/u8:8: attempt to access beyond end of device [ 93.739844][ T1687] loop2: rw=8388609, sector=152, nr_sectors = 2 limit=128 [ 93.739954][ T1687] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 93.740120][ T1687] kworker/u8:8: attempt to access beyond end of device [ 93.740120][ T1687] loop2: rw=1, sector=154, nr_sectors = 48 limit=128 [ 93.765655][ T4606] syz.2.318: attempt to access beyond end of device [ 93.765655][ T4606] loop2: rw=2049, sector=202, nr_sectors = 48 limit=128 [ 93.867245][ T4604] loop3: detected capacity change from 0 to 512 [ 93.886047][ T4604] EXT4-fs: Ignoring removed nobh option [ 93.936735][ T4604] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.938218][ T4604] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.317: bg 0: block 7: invalid block bitmap [ 93.938318][ T4604] loop3: lost filesystem error report for type 5 error -117 [ 93.941696][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 93.941728][ C0] EXT4-fs (loop3): initial error at time 1791584983: ext4_validate_block_bitmap:436 [ 93.941755][ C0] EXT4-fs (loop3): last error at time 1791584983: ext4_validate_block_bitmap:436 [ 94.007650][ T4604] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 94.007682][ T4604] loop3: lost filesystem error report for type 5 error -117 [ 94.038842][ T4604] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.317: corrupted xattr block 95: invalid header [ 94.066514][ T4604] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.069115][ T4604] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 94.071023][ T4604] EXT4-fs (loop3): 1 orphan inode deleted [ 94.166842][ T4604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.223066][ T4604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.267224][ T4622] loop1: detected capacity change from 0 to 164 [ 94.506763][ T4627] loop2: detected capacity change from 0 to 164 [ 94.554551][ T4626] loop0: detected capacity change from 0 to 128 [ 94.636902][ T4626] syz.0.324: attempt to access beyond end of device [ 94.636902][ T4626] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 94.640734][ T4626] syz.0.324: attempt to access beyond end of device [ 94.640734][ T4626] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 94.686400][ T4626] syz.0.324: attempt to access beyond end of device [ 94.686400][ T4626] loop0: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 94.686521][ T4626] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 94.690834][ T4626] syz.0.324: attempt to access beyond end of device [ 94.690834][ T4626] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 94.691071][ T4626] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 94.697001][ T4626] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 94.697469][ T4626] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 94.705278][ T4626] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 94.705345][ T4626] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 94.712683][ T4626] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 94.712790][ T4626] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 96.287228][ T30] audit: type=1326 audit(1791584985.372:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1519fe1d9 code=0x7ffc0000 [ 96.287376][ T30] audit: type=1326 audit(1791584985.372:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1519fe1d9 code=0x7ffc0000 [ 96.302286][ T30] audit: type=1326 audit(1791584985.382:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1519fe1d9 code=0x7ffc0000 [ 96.302436][ T30] audit: type=1326 audit(1791584985.382:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc1519fe1d9 code=0x7ffc0000 [ 96.302572][ T30] audit: type=1326 audit(1791584985.382:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1519fe1d9 code=0x7ffc0000 [ 96.409501][ T30] audit: type=1326 audit(1791584985.492:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1519fe1d9 code=0x7ffc0000 [ 96.410116][ T30] audit: type=1326 audit(1791584985.492:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1519fdf42 code=0x7ffc0000 [ 96.410578][ T30] audit: type=1326 audit(1791584985.492:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc1519fdfd7 code=0x7ffc0000 [ 96.411036][ T30] audit: type=1326 audit(1791584985.492:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc1519baed1 code=0x7ffc0000 [ 96.411462][ T30] audit: type=1326 audit(1791584985.492:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.0.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc1519fefc9 code=0x7ffc0000 [ 96.446706][ T4655] set_capacity_and_notify: 1 callbacks suppressed [ 96.446725][ T4655] loop4: detected capacity change from 0 to 164 [ 96.702043][ T4663] loop2: detected capacity change from 0 to 128 [ 96.828574][ T4667] loop0: detected capacity change from 0 to 164 [ 97.330072][ T4684] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.339' sets config #0 [ 97.330388][ T4684] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.339' sets config #1 [ 98.039934][ T4697] loop3: detected capacity change from 0 to 512 [ 98.040334][ T4691] bonding: no command found in bonding_masters - use +ifname or -ifname [ 98.062584][ T4697] EXT4-fs: Ignoring removed nobh option [ 98.069534][ T4697] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.069685][ T4697] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.343: bg 0: block 7: invalid block bitmap [ 98.069720][ T4697] loop3: lost filesystem error report for type 5 error -117 [ 98.071925][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 98.072215][ C0] EXT4-fs (loop3): initial error at time 1791584987: ext4_validate_block_bitmap:436 [ 98.072710][ C0] EXT4-fs (loop3): last error at time 1791584987: ext4_validate_block_bitmap:436 [ 98.136919][ T4697] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 98.136946][ T4697] loop3: lost filesystem error report for type 5 error -117 [ 98.137379][ T4697] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.343: corrupted xattr block 95: invalid header [ 98.137440][ T4697] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 98.137847][ T4697] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 98.137885][ T4697] EXT4-fs (loop3): 1 orphan inode deleted [ 98.138300][ T4697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.138776][ T4697] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.166651][ T4700] loop4: detected capacity change from 0 to 164 [ 98.638773][ T4729] loop0: detected capacity change from 0 to 128 [ 98.958692][ T4729] bio_check_eod: 57 callbacks suppressed [ 98.958756][ T4729] syz.0.353: attempt to access beyond end of device [ 98.958756][ T4729] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 98.973287][ T4729] syz.0.353: attempt to access beyond end of device [ 98.973287][ T4729] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 98.977826][ T4729] syz.0.353: attempt to access beyond end of device [ 98.977826][ T4729] loop0: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 98.978045][ T4729] buffer_io_error: 28 callbacks suppressed [ 98.978087][ T4729] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 98.979706][ T4729] syz.0.353: attempt to access beyond end of device [ 98.979706][ T4729] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 98.979786][ T4729] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 98.984795][ T4729] syz.0.353: attempt to access beyond end of device [ 98.984795][ T4729] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 98.987482][ T4729] syz.0.353: attempt to access beyond end of device [ 98.987482][ T4729] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 98.987758][ T4729] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 98.987827][ T4729] syz.0.353: attempt to access beyond end of device [ 98.987827][ T4729] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 98.987883][ T4729] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 98.996887][ T4729] syz.0.353: attempt to access beyond end of device [ 98.996887][ T4729] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 99.023289][ T4729] syz.0.353: attempt to access beyond end of device [ 99.023289][ T4729] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 99.023382][ T4729] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 99.023716][ T4729] syz.0.353: attempt to access beyond end of device [ 99.023716][ T4729] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 99.023803][ T4729] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 99.204818][ T4726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.352'. [ 99.362422][ T4739] capability: warning: `syz.1.355' uses 32-bit capabilities (legacy support in use) [ 100.159105][ T4757] loop0: detected capacity change from 0 to 164 [ 100.275205][ T4758] loop1: detected capacity change from 0 to 1024 [ 100.310713][ T4758] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.318763][ T4758] EXT4-fs error (device loop1): ext4_quota_enable:7261: inode #4: comm syz.1.362: iget: bad extended attribute block 196608 [ 100.318863][ T4758] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 100.319342][ T4758] EXT4-fs error (device loop1): ext4_quota_enable:7264: comm syz.1.362: Bad quota inode: 4, type: 1 [ 100.319397][ T4758] loop1: lost filesystem error report for type 5 error -117 [ 100.319738][ T4758] EXT4-fs warning (device loop1): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.321638][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 100.321674][ C1] EXT4-fs (loop1): initial error at time 1791584989: ext4_quota_enable:7261: inode 4 [ 100.321749][ C1] EXT4-fs (loop1): last error at time 1791584989: ext4_quota_enable:7264 [ 100.324580][ T4758] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 100.325529][ T4758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.663486][ T4768] loop0: detected capacity change from 0 to 164 [ 100.927562][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.134332][ T4771] loop4: detected capacity change from 0 to 512 [ 101.138553][ T4771] EXT4-fs: Ignoring removed nobh option [ 101.155912][ T4771] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.156185][ T4771] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.364: bg 0: block 7: invalid block bitmap [ 101.156211][ T4771] loop4: lost filesystem error report for type 5 error -117 [ 101.158748][ T4771] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 101.158775][ T4771] loop4: lost filesystem error report for type 5 error -117 [ 101.159138][ T4771] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.364: corrupted xattr block 95: invalid header [ 101.159173][ T4771] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.159371][ T4771] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 101.159408][ T4771] EXT4-fs (loop4): 1 orphan inode deleted [ 101.159804][ T4771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.160326][ T4771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.572069][ T4781] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 101.572348][ T4781] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 101.612593][ T4781] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 101.612896][ T4781] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 101.904394][ T4788] set_capacity_and_notify: 1 callbacks suppressed [ 101.904430][ T4788] loop4: detected capacity change from 0 to 512 [ 101.907117][ T4788] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.933888][ T4788] __quota_error: 100 callbacks suppressed [ 101.933904][ T4788] Quota error (device loop4): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 101.934002][ T4788] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 101.934114][ T4788] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.373: Failed to acquire dquot type 1 [ 101.934142][ T4788] loop4: lost filesystem error report for type 5 error -117 [ 101.934279][ T4788] EXT4-fs (loop4): Remounting filesystem read-only [ 101.934343][ T4788] EXT4-fs (loop4): 1 truncate cleaned up [ 101.934818][ T4788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.082754][ T30] audit: type=1400 audit(1791584991.162:386): avc: denied { write } for pid=4787 comm="syz.4.373" name="fib_trie" dev="proc" ino=4026532430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 102.165330][ T4797] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 102.165393][ T4797] netlink: 220 bytes leftover after parsing attributes in process `syz.4.373'. [ 102.165914][ T4797] netlink: 10 bytes leftover after parsing attributes in process `syz.4.373'. [ 102.166356][ T4800] loop1: detected capacity change from 0 to 164 [ 102.483579][ T4807] loop2: detected capacity change from 0 to 512 [ 102.486002][ T4807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.507280][ T4807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.507453][ T4807] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.513614][ T30] audit: type=1400 audit(1791584991.602:387): avc: denied { write } for pid=4806 comm="syz.2.378" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.772514][ T30] audit: type=1400 audit(1791584991.862:388): avc: denied { wake_alarm } for pid=4813 comm="syz.0.380" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.774578][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.803047][ T4814] SELinux: Context ¼OPcÕÇ™»žÅè?‰s�Þ Uâ²Éì^tú”Q`wê�& ò˜m [ 102.803047][ T4814] ¤ù¡ ×%ÓZÊó®Ç@L0õNïµr‘L²1X‹)Ù’i†jÏÉ’%Ø‘ÙfËíîYjwõÔLÝ�˜»ã8ôÇݱá bV:±vÓiý is not valid (left unmapped). [ 102.804290][ T30] audit: type=1400 audit(1791584991.892:389): avc: denied { mac_admin } for pid=4813 comm="syz.0.380" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.804397][ T30] audit: type=1400 audit(1791584991.892:390): avc: denied { relabelto } for pid=4813 comm="syz.0.380" name="bus" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 102.804595][ T30] audit: type=1400 audit(1791584991.892:391): avc: denied { associate } for pid=4813 comm="syz.0.380" name="bus" dev="tmpfs" ino=473 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 102.858550][ T4816] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.381'. [ 102.899736][ T30] audit: type=1400 audit(1791584991.982:392): avc: denied { unlink } for pid=3306 comm="syz-executor" name="bus" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 103.013232][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.091399][ T4824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.384'. [ 103.094298][ T4824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.384'. [ 103.118888][ T30] audit: type=1400 audit(1791584992.202:393): avc: denied { module_request } for pid=4821 comm="syz.3.384" kmod="xfrm-type-2-255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 103.146307][ T4830] loop3: detected capacity change from 0 to 512 [ 103.148584][ T4825] SELinux: Context system_u:object_r:audit_spool_t:s0 is not valid (left unmapped). [ 103.375170][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 103.475497][ T4837] loop0: detected capacity change from 0 to 128 [ 103.784715][ T4851] loop1: detected capacity change from 0 to 164 [ 105.043049][ T4876] FAULT_INJECTION: forcing a failure. [ 105.043049][ T4876] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.043104][ T4876] CPU: 0 UID: 0 PID: 4876 Comm: syz.2.399 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.043138][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.043164][ T4876] Call Trace: [ 105.043172][ T4876] [ 105.043209][ T4876] __dump_stack+0x1d/0x30 [ 105.043242][ T4876] dump_stack_lvl+0x95/0xd0 [ 105.043290][ T4876] dump_stack+0x15/0x1b [ 105.043353][ T4876] should_fail_ex+0x262/0x280 [ 105.043391][ T4876] should_fail+0xb/0x20 [ 105.043423][ T4876] should_fail_usercopy+0x1a/0x20 [ 105.043508][ T4876] _copy_from_user+0x1c/0xb0 [ 105.043555][ T4876] ___sys_sendmsg+0xc1/0x1e0 [ 105.043594][ T4876] __x64_sys_sendmsg+0xd4/0x160 [ 105.043697][ T4876] x64_sys_call+0x22ab/0x2550 [ 105.043722][ T4876] do_syscall_64+0x112/0x360 [ 105.043748][ T4876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.043818][ T4876] RIP: 0033:0x7f82f394e1d9 [ 105.043838][ T4876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.043863][ T4876] RSP: 002b:00007f82f23a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.043889][ T4876] RAX: ffffffffffffffda RBX: 00007f82f3bd5fa0 RCX: 00007f82f394e1d9 [ 105.043908][ T4876] RDX: 0000000000000040 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 105.044018][ T4876] RBP: 00007f82f23a7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.044036][ T4876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.044096][ T4876] R13: 00007f82f3bd6038 R14: 00007f82f3bd5fa0 R15: 00007fff055ca928 [ 105.044120][ T4876] [ 105.444313][ T4884] loop2: detected capacity change from 0 to 164 [ 105.933605][ T4910] loop2: detected capacity change from 0 to 1764 [ 105.942656][ T4910] iso9660: Unknown parameter 'sessix0000000000000011' [ 105.999058][ T4911] loop4: detected capacity change from 0 to 164 [ 106.267170][ T4914] loop0: detected capacity change from 0 to 128 [ 106.508800][ T4910] ext4: Unknown parameter 'euid' [ 106.563087][ T4914] bio_check_eod: 20 callbacks suppressed [ 106.563152][ T4914] syz.0.412: attempt to access beyond end of device [ 106.563152][ T4914] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 106.590089][ T4914] syz.0.412: attempt to access beyond end of device [ 106.590089][ T4914] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 106.663874][ T4927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.663974][ T4927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.676069][ T4914] syz.0.412: attempt to access beyond end of device [ 106.676069][ T4914] loop0: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 106.676272][ T4914] buffer_io_error: 6 callbacks suppressed [ 106.676307][ T4914] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 106.676380][ T4914] syz.0.412: attempt to access beyond end of device [ 106.676380][ T4914] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 106.676607][ T4914] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 106.681857][ T4914] syz.0.412: attempt to access beyond end of device [ 106.681857][ T4914] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 106.692948][ T4914] syz.0.412: attempt to access beyond end of device [ 106.692948][ T4914] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 106.693585][ T4914] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 106.693657][ T4914] syz.0.412: attempt to access beyond end of device [ 106.693657][ T4914] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 106.693723][ T4914] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 106.742962][ T4914] syz.0.412: attempt to access beyond end of device [ 106.742962][ T4914] loop0: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 107.253899][ T4943] set_capacity_and_notify: 1 callbacks suppressed [ 107.255200][ T4943] loop3: detected capacity change from 0 to 164 [ 107.551199][ T4949] loop0: detected capacity change from 0 to 164 [ 107.681728][ T4936] ================================================================== [ 107.681768][ T4936] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 107.681814][ T4936] [ 107.681820][ T4936] read-write to 0xffffffff86e07a00 of 8 bytes by interrupt on cpu 1: [ 107.681842][ T4936] tick_do_update_jiffies64+0x113/0x1c0 [ 107.681894][ T4936] tick_nohz_handler+0x88/0x380 [ 107.681933][ T4936] __hrtimer_run_queues+0x1f8/0x510 [ 107.681964][ T4936] hrtimer_interrupt+0x27b/0x860 [ 107.681994][ T4936] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 107.682026][ T4936] sysvec_apic_timer_interrupt+0x6f/0x80 [ 107.682070][ T4936] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.682102][ T4936] __sanitizer_cov_trace_pc+0x70/0x80 [ 107.682140][ T4936] walk_page_range_mm_unsafe+0x3d2/0x530 [ 107.682185][ T4936] walk_page_range+0x56/0x70 [ 107.682223][ T4936] try_to_inc_max_seq+0x702/0x9e0 [ 107.682262][ T4936] try_to_shrink_lruvec+0x8bc/0xb30 [ 107.682299][ T4936] shrink_lruvec+0x252/0x1d40 [ 107.682317][ T4936] shrink_node+0x67c/0x2000 [ 107.682341][ T4936] do_try_to_free_pages+0x408/0xca0 [ 107.682359][ T4936] try_to_free_mem_cgroup_pages+0x201/0x420 [ 107.682387][ T4936] mem_cgroup_force_empty_write+0x77/0x100 [ 107.682426][ T4936] cgroup_file_write+0x197/0x350 [ 107.682469][ T4936] kernfs_fop_write_iter+0x1d2/0x2e0 [ 107.682499][ T4936] vfs_write+0x57f/0x9a0 [ 107.682531][ T4936] ksys_write+0xdc/0x1a0 [ 107.682572][ T4936] __x64_sys_write+0x40/0x50 [ 107.682614][ T4936] x64_sys_call+0x154e/0x2550 [ 107.682649][ T4936] do_syscall_64+0x112/0x360 [ 107.682679][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.682708][ T4936] [ 107.682716][ T4936] read to 0xffffffff86e07a00 of 8 bytes by task 4936 on cpu 0: [ 107.682737][ T4936] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 107.682768][ T4936] count_shadow_nodes+0x6a/0x250 [ 107.682797][ T4936] do_shrink_slab+0x61/0x650 [ 107.682834][ T4936] shrink_slab+0x53b/0x8e0 [ 107.682869][ T4936] shrink_node+0x6b8/0x2000 [ 107.682903][ T4936] do_try_to_free_pages+0x408/0xca0 [ 107.682921][ T4936] try_to_free_mem_cgroup_pages+0x201/0x420 [ 107.682941][ T4936] mem_cgroup_force_empty_write+0x77/0x100 [ 107.682970][ T4936] cgroup_file_write+0x197/0x350 [ 107.683009][ T4936] kernfs_fop_write_iter+0x1d2/0x2e0 [ 107.683045][ T4936] vfs_write+0x57f/0x9a0 [ 107.683081][ T4936] ksys_write+0xdc/0x1a0 [ 107.683110][ T4936] __x64_sys_write+0x40/0x50 [ 107.683140][ T4936] x64_sys_call+0x154e/0x2550 [ 107.683174][ T4936] do_syscall_64+0x112/0x360 [ 107.683204][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.683232][ T4936] [ 107.683238][ T4936] value changed: 0x00000000ffffb499 -> 0x00000000ffffb49a [ 107.683262][ T4936] [ 107.683267][ T4936] Reported by Kernel Concurrency Sanitizer on: [ 107.683282][ T4936] CPU: 0 UID: 0 PID: 4936 Comm: syz.4.420 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.683315][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.683333][ T4936] ==================================================================