last executing test programs: 3.103860104s ago: executing program 0 (id=5124): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 3.069460716s ago: executing program 0 (id=5125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 2.941427692s ago: executing program 0 (id=5129): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x24008444) semget$private(0x0, 0x1, 0x39e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x10094, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.805029908s ago: executing program 0 (id=5133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mknod(&(0x7f00000001c0)='./file0\x00', 0x8001420, 0xffffffff) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) readv(r5, &(0x7f0000000780)=[{0x0}], 0x1) vmsplice(r5, &(0x7f00000007c0)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/2219], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000180)=r7) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 2.602118836s ago: executing program 2 (id=5137): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0xe, 0x0, 0x0, 0x0, 0x808, 0x180, 0xee353cc557df3748, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x2012, 0x6, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x100, 0x1a0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x10) msgrcv(r6, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r6, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}}, 0x4) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r9, 0x0) 2.585343877s ago: executing program 0 (id=5138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0xb) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 2.52650425s ago: executing program 0 (id=5140): socket(0x1e, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.931653876s ago: executing program 2 (id=5146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) (fail_nth: 4) 1.509361854s ago: executing program 2 (id=5147): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) 1.473935596s ago: executing program 2 (id=5148): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.407041789s ago: executing program 1 (id=5150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) 1.361358561s ago: executing program 1 (id=5151): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) getpid() perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0xe, 0x0, 0x0, 0x0, 0x808, 0x180, 0xee353cc557df3748, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x2012, 0x6, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x100, 0x1a0) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}}, 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) 1.360210531s ago: executing program 2 (id=5152): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x404}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000b80)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="ff9b256eedddfa18db3e1dbec811ef8e875a5607fe0cc9bef4b65ba2732cec9873fa4e012c82372852cd8edf5508a307ce977ce66c3dd38419b60fedd79deb0aae06b9369bab4745f014eaf5", @ANYRESHEX=r2], 0x48}, 0x1, 0x0, 0x0, 0xd1}, 0x20040807) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) sendfile(r7, r8, &(0x7f0000000000), 0xfffb) fcntl$addseals(r8, 0x409, 0x8) lseek(r8, 0x101, 0x3) write$P9_RRENAME(r8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x12) writev(r9, &(0x7f0000000a80)=[{&(0x7f0000000880)="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", 0x100}, {&(0x7f0000000300)="f720545dd3b07efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99ddf1012e0d43912798e5d", 0x34}, {&(0x7f0000000cc0)="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", 0x13a}, {&(0x7f0000000b00)="c65af98d1d6348436b7f6dadea44f8a1a129eaca85b3762707d0b9350af61f3dcb1be1cb464afaa91f4b7530d641325570996c60994836df", 0x38}], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) 1.336070852s ago: executing program 2 (id=5153): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x4004820) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 1.209743397s ago: executing program 3 (id=5156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.199260538s ago: executing program 1 (id=5157): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffff7, 0xfffffffffffffffc, 0xfffffffffffffffc}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xffffffffffffff4e) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 1.172357039s ago: executing program 1 (id=5159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="000022000000000000000000000000000000003218ea7fe5b3b1c21688a105af0d42f420e3e8e7b82b7df33357629dc381195a87a491171ff457b7c0b10289ee8cd82710089e1baf7d4c939245168e811d244fb1b99006eb87e0b7066057dc3764ada315d2413f9ca412962da309f7c4e3d141cf0f4083c4173efc1128e975add3b099b7ec89afb6a48d89e1c3e67e2b9b4a86a441d3b9b6370644e4cee41e7b6693227885044b1d1aded93c7c5666b6665c14446516a5cf58764870d6020dbb50e014ccfcdf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) statx(r1, &(0x7f0000000680)='.\x00', 0x0, 0x0, &(0x7f0000000080)) 1.119617631s ago: executing program 3 (id=5160): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) 943.101059ms ago: executing program 3 (id=5161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) 876.370662ms ago: executing program 3 (id=5162): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbdf, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400100000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 697.35992ms ago: executing program 3 (id=5165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 557.317056ms ago: executing program 4 (id=5166): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffff7, 0xfffffffffffffffc, 0xfffffffffffffffc}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xffffffffffffff4e) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 485.071659ms ago: executing program 3 (id=5167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r1 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x20008050) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0x0, 0x7}, 0x2, 0x10000, 0xba, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r4, r3, 0x0, r4}, 0x10) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000040)={@loopback}, &(0x7f00000001c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 395.344363ms ago: executing program 4 (id=5168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0xdb60, 0x40, 0x0, 0x12f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 299.061197ms ago: executing program 4 (id=5169): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'wg2\x00', {0x2, 0x4e22, @loopback}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002400), 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() keyctl$clear(0x7, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = syz_open_dev$vcsa(&(0x7f0000000600), 0x81, 0x40) r10 = geteuid() fstat(r5, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x214280, 0x0) r14 = openat$cgroup_type(r9, &(0x7f0000000a80), 0x2, 0x0) sendmmsg$unix(r8, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="782d3aa0eb2b7d71b7e9f52905f0d623276808503fbd018ad46503950eebeb57dda69b2d5fa2eba09342375e097f9aaffc4d558a6d0ea351c7230da521f79226560ddc0188483e29b0135e0d65a4c39b09d49f314aef822ac0164ad95bf03d7d04088d8bca1e91d15c871ec86dde89faa4b608b595ff6f22797dd79330702ba693911d8aa2fd26b789bd48eb518d0ba29eb577443cc215237e24066df7f5c75ec3c984c821352e", 0xa7}, {&(0x7f0000000080)="44b6d39dac1cf8e1f76171945a94fc605a02058202fa4118d3f8e6759311b8869ed8dd076d7c5f6cca206f3d15e62c7309", 0x31}, {&(0x7f0000000380)="644e93137c26b0c90253353c90e879c8ec743b7b9e32cbed64d1f8a8a7f3a899d2db8172e5140f97bc47c452069077eb7991b1ed5f3d3f96b7b0f74afa30f08f54f840b157a6600784e354b56badadc35465b5b3de968eda3055f3db86941f211673aef6848065b7947886dc4e4eaf", 0x6f}, {&(0x7f0000000400)="ee75bd545043a3ed7221cbe9b5f1f2b695872e6df3ac8fed9c7d239e686271c1148ce5651207d301e81c45bcb462c3cc927d92ceade021428a31bd137d3f972ccdd2a84df87d94bc2c47ef2ef0eedca9b627fd451d78a1f2f8a5ca93d21bd2c068433d0e561af2dd184fe304a172a76300f4d69c07e20da13c63bcdaa0c5a08ed22ad70f99d2ed8eac1f6d71d7f109df810b02eff071d5f400e10027202610c2f44e2c142fca967483adce2c02ba405112fec29dea399a8da415d133e123905bc9954207b41ff8647c55f282d510f755c318c5aa35b8d7ce9c31c28dfd99ad30b2d617a24c8dbd3cd0d5ec56e2733acf1714fa715cbbd289", 0xf8}], 0x4, 0x0, 0x0, 0x8044}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0xfffffffffffffd75, &(0x7f0000000500), 0x0, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [r9, r5, r2, r3, r5]}}], 0x28, 0x10}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000700)="b48ae57e555948359fa26109437e26841099d7c9f6ce072ce7eb4e65371851e22b6d4b1908aa6b9c7705861e13f6ec4bcb6c341ff0b4790dbf8a764cf50bbfffe293a895f84f3eb206945319074ff71de785d38b78174e4a5ecef8a5c863a1caafd73932095f343145ce96edff17d7b6e31ed1749c8e287c4731b0ea1b2dcf8a438d56c28d3835e74a9e0342a50413fc62e841442efcc86c4ee1f27860be661fcfe8754bb546c65ec08dcb3270dcefeab8f0c9bece7628aa3f1732224c76a2c5c909d2f88466553f377eaca5d0993c602e84", 0xfffffffffffffefb}, {&(0x7f0000000800)="443975afd88b19be4ec0f4deb970024547482037539a41cbb49b7152c1c0b69e676db871c8b8c5b4e686579d075363f6fe24743a2319679b740946c56b1f6dadc34cf5c48d3fde2ce2e689f5d1ad64af5be10effe9d46babf4ccb3a6f8ffc9acd6574cbdb98fb8db26732ce3f83a07c83dacf7a17cb6be", 0x77}, {&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000e40)="b9318391d031e4dbf9d3e39ee74c411291f5af38c10a9e29db720c59b402d077091e32acc771e4e5d0b455548ba11f60daaf3181bd2ce0d77442de1dc5041df09625830a8a92e1b0c5b9e885e123d3db178ce7543cb807b1022f303c1058a7353aea0cbfe0b055a8bf8e8a62fb682c03e85770f9985304d3428376ce8f3b31f7db5aa1314c8056ed2a527279548daf862f76a78b80a4b565766d1f5f2f4d1339c3c27ff1643a88ba6f7b327332d72d5028b6caca8782821f712b", 0x8f}], 0x4, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r6, r10, r11}}}, @rights={{0x34, 0x1, 0x1, [r12, r9, r9, 0xffffffffffffffff, r0, r13, r5, r1, r2]}}, @rights={{0x24, 0x1, 0x1, [r9, 0xffffffffffffffff, r12, r1, r14]}}], 0x80, 0x10}}, {{&(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="a5f886cac2166391bef48c5f780552a1835c7a99f85c295558635c1593", 0x1d}, {&(0x7f0000000b80)="4aa2b1e4cfdfb5", 0x7}], 0x2, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000000}}], 0x4, 0x4040010) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r16}, 0x10) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) 135.519125ms ago: executing program 1 (id=5170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2d, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x40}]}, 0x24}}, 0x0) 65.259377ms ago: executing program 1 (id=5171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r11, 0xfc5, 0x70bd29, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2}]}]}, 0x24}}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x74, r11, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x7e}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="bdce90508b35"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5a9b6bd670d4"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="2e3962e7fe0d"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x1, 0x0, 0x0, {0x0, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0x2, 0x9}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000010}, 0x40000) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) 64.840547ms ago: executing program 4 (id=5172): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 42.772448ms ago: executing program 4 (id=5173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) 0s ago: executing program 4 (id=5174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f00000002c0)=@v1={0x2, "f53b0d95a4d7971b37e50f7e7407aaac4f"}, 0x12, 0x0) kernel console output (not intermixed with test programs): an inode deleted [ 311.858180][T18882] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.869000][ T8099] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 1 [ 312.056023][T18888] loop2: detected capacity change from 0 to 512 [ 312.073230][T18888] EXT4-fs (loop2): 1 orphan inode deleted [ 312.079999][T18888] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.629688][T18905] geneve2: entered promiscuous mode [ 312.629704][T18905] geneve2: entered allmulticast mode [ 312.638536][T18710] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.651925][T18710] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.661207][T18710] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.661342][T18710] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.686927][T18907] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 312.745139][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 312.745345][ T3604] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 312.811425][T18909] lo speed is unknown, defaulting to 1000 [ 313.088875][T18920] EXT4-fs (loop4): 1 orphan inode deleted [ 313.095136][T18920] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.468460][T18939] netlink: 'syz.2.4232': attribute type 15 has an invalid length. [ 313.499605][T18941] FAULT_INJECTION: forcing a failure. [ 313.499605][T18941] name failslab, interval 1, probability 0, space 0, times 0 [ 313.499678][T18941] CPU: 1 UID: 0 PID: 18941 Comm: syz.0.4233 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 313.499732][T18941] Tainted: [W]=WARN [ 313.499738][T18941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.499751][T18941] Call Trace: [ 313.499757][T18941] [ 313.499764][T18941] __dump_stack+0x1d/0x30 [ 313.499788][T18941] dump_stack_lvl+0xe8/0x140 [ 313.499810][T18941] dump_stack+0x15/0x1b [ 313.499897][T18941] should_fail_ex+0x265/0x280 [ 313.499918][T18941] should_failslab+0x8c/0xb0 [ 313.499944][T18941] __kmalloc_cache_noprof+0x65/0x4c0 [ 313.499968][T18941] ? cgroup_init_fs_context+0x38/0x340 [ 313.500010][T18941] cgroup_init_fs_context+0x38/0x340 [ 313.500031][T18941] alloc_fs_context+0x4a4/0x590 [ 313.500074][T18941] fs_context_for_mount+0x22/0x30 [ 313.500148][T18941] __se_sys_fsopen+0xa0/0x1e0 [ 313.500174][T18941] __x64_sys_fsopen+0x31/0x40 [ 313.500198][T18941] x64_sys_call+0xb84/0x3000 [ 313.500223][T18941] do_syscall_64+0xd8/0x2a0 [ 313.500314][T18941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.500337][T18941] RIP: 0033:0x7fd558c9f749 [ 313.500352][T18941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.500370][T18941] RSP: 002b:00007fd557707038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 313.500388][T18941] RAX: ffffffffffffffda RBX: 00007fd558ef5fa0 RCX: 00007fd558c9f749 [ 313.500461][T18941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 313.500547][T18941] RBP: 00007fd557707090 R08: 0000000000000000 R09: 0000000000000000 [ 313.500558][T18941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.500569][T18941] R13: 00007fd558ef6038 R14: 00007fd558ef5fa0 R15: 00007ffd90e589c8 [ 313.500588][T18941] [ 313.600424][ T3604] Bluetooth: hci1: command 0x1003 tx timeout [ 313.600442][ T4724] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 314.040247][T18968] EXT4-fs (loop3): 1 orphan inode deleted [ 314.042118][T18968] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.312141][T18982] __nla_validate_parse: 11 callbacks suppressed [ 314.312156][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4248'. [ 314.318317][T18982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4248'. [ 314.366386][T18966] buffer_io_error: 15 callbacks suppressed [ 314.366400][T18966] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.366429][T18966] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.366452][T18966] loop9: unable to read partition table [ 314.366469][T18966] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 314.366469][T18966] ) failed (rc=-5) [ 314.368799][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.443708][T18988] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 314.447701][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.471447][T18988] EXT4-fs (loop0): 1 truncate cleaned up [ 314.555110][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.555207][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.555335][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.853989][T19007] lo speed is unknown, defaulting to 1000 [ 315.157905][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 315.166513][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 315.174494][ T3513] loop9: unable to read partition table [ 315.278561][T19008] Buffer I/O error on dev loop9, logical block 0, async page read [ 315.295616][T19008] loop9: unable to read partition table [ 315.302006][T19008] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 315.302006][T19008] ) failed (rc=-5) [ 315.340635][T19015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 315.363024][T19017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 315.379530][T19015] EXT4-fs (loop3): 1 truncate cleaned up [ 315.390412][T19015] EXT4-fs mount: 30 callbacks suppressed [ 315.390490][T19015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.397043][T19017] EXT4-fs (loop4): 1 truncate cleaned up [ 315.414968][T19017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.596656][T19031] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 315.611352][T19031] EXT4-fs (loop2): 1 truncate cleaned up [ 315.618999][T19031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.100376][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.136034][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.182908][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.346595][T19023] set_capacity_and_notify: 11 callbacks suppressed [ 316.346620][T19023] loop9: detected capacity change from 0 to 7 [ 316.360163][T19023] loop9: unable to read partition table [ 316.367067][T19023] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 316.367067][T19023] ) failed (rc=-5) [ 316.436489][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 316.436504][ T29] audit: type=1326 audit(1765071014.108:16108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 316.536338][T19063] lo speed is unknown, defaulting to 1000 [ 316.586561][T19063] loop4: detected capacity change from 0 to 128 [ 316.639102][ T29] audit: type=1326 audit(1765071014.305:16109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 316.696754][T19059] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4271'. [ 316.719897][T19063] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.732779][T19063] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 316.839353][ T29] audit: type=1326 audit(1765071014.351:16110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 316.863252][ T29] audit: type=1326 audit(1765071014.351:16111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 316.886808][ T29] audit: type=1326 audit(1765071014.351:16112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 316.910481][ T29] audit: type=1326 audit(1765071014.351:16113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 316.934073][ T29] audit: type=1326 audit(1765071014.351:16114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 316.957838][ T29] audit: type=1326 audit(1765071014.351:16115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 316.981550][ T29] audit: type=1326 audit(1765071014.351:16116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 316.992510][T19070] netlink: 'syz.1.4274': attribute type 29 has an invalid length. [ 317.005130][ T29] audit: type=1326 audit(1765071014.351:16117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19058 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 317.044166][T19059] geneve2: entered promiscuous mode [ 317.049423][T19059] geneve2: entered allmulticast mode [ 317.163372][T19076] loop3: detected capacity change from 0 to 512 [ 317.170399][T19076] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 317.184026][T19076] EXT4-fs (loop3): 1 truncate cleaned up [ 317.190370][T19076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.253547][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.273821][T19084] loop2: detected capacity change from 0 to 512 [ 317.281592][T19082] loop1: detected capacity change from 0 to 128 [ 317.302863][T19091] loop4: detected capacity change from 0 to 512 [ 317.323614][T19084] EXT4-fs (loop2): 1 orphan inode deleted [ 317.341030][T19084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.354070][ T8101] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1 [ 317.366344][T19084] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.387992][T19091] EXT4-fs (loop4): 1 orphan inode deleted [ 317.405141][T19091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.405423][T19091] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.637754][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.736541][T19114] lo speed is unknown, defaulting to 1000 [ 317.943631][T19112] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4288'. [ 317.962360][T19112] geneve2: entered promiscuous mode [ 317.962378][T19112] geneve2: entered allmulticast mode [ 317.966504][T18071] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.967008][T18071] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.967057][T18071] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 317.967085][T18071] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 318.229161][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.317376][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.497334][T19129] loop0: detected capacity change from 0 to 128 [ 318.589569][ T8104] Bluetooth: hci0: Frame reassembly failed (-84) [ 318.648521][T19152] loop3: detected capacity change from 0 to 512 [ 318.740451][T19152] EXT4-fs (loop3): 1 orphan inode deleted [ 318.740922][T19152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.759225][ T8104] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:21: Failed to release dquot type 1 [ 318.817483][T19152] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.840361][T19164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4305'. [ 318.840389][T19164] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4305'. [ 318.874686][T19167] lo speed is unknown, defaulting to 1000 [ 320.010389][T19179] lo speed is unknown, defaulting to 1000 [ 320.132071][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.426606][T19199] loop2: detected capacity change from 0 to 128 [ 320.453566][T19205] loop0: detected capacity change from 0 to 128 [ 320.468734][T19207] lo speed is unknown, defaulting to 1000 [ 320.584485][T19215] EXT4-fs (loop3): 1 orphan inode deleted [ 320.591499][T19215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.605319][T19215] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.617653][T19090] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:30: Failed to release dquot type 1 [ 320.645410][T19220] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 320.647342][T19220] EXT4-fs (loop0): 1 truncate cleaned up [ 320.662067][T19220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.783472][ T3604] Bluetooth: hci0: command 0x1003 tx timeout [ 320.783560][ T4724] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 320.829616][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.495115][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.728346][T19244] set_capacity_and_notify: 2 callbacks suppressed [ 321.728361][T19244] loop0: detected capacity change from 0 to 128 [ 321.759907][T19254] loop3: detected capacity change from 0 to 512 [ 321.789868][T19254] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 321.816055][T19254] EXT4-fs (loop3): 1 truncate cleaned up [ 321.822202][T19254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.843131][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 321.843142][ T29] audit: type=1326 audit(1765071019.169:16247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 321.854525][T19259] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4337'. [ 321.873038][ T29] audit: type=1326 audit(1765071019.179:16248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 321.905650][ T29] audit: type=1326 audit(1765071019.179:16249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 321.929506][ T29] audit: type=1326 audit(1765071019.179:16250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 321.953132][ T29] audit: type=1326 audit(1765071019.179:16251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 321.976785][ T29] audit: type=1326 audit(1765071019.179:16252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 322.000482][ T29] audit: type=1326 audit(1765071019.179:16253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 322.024297][ T29] audit: type=1326 audit(1765071019.179:16254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 322.047872][ T29] audit: type=1326 audit(1765071019.179:16255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 322.071658][ T29] audit: type=1326 audit(1765071019.179:16256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 322.096214][T19259] geneve2: entered promiscuous mode [ 322.101432][T19259] geneve2: entered allmulticast mode [ 322.108760][T19262] loop9: detected capacity change from 0 to 7 [ 322.115105][T19262] buffer_io_error: 13 callbacks suppressed [ 322.115117][T19262] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.129161][T19262] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.137040][T19262] loop9: unable to read partition table [ 322.140167][T19264] lo speed is unknown, defaulting to 1000 [ 322.148543][T19262] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 322.148543][T19262] ) failed (rc=-5) [ 322.150051][ T4778] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.182474][T19266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4338'. [ 322.191489][T19266] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4338'. [ 322.202207][ T4778] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.207932][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.210420][ T4778] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.227224][ T4778] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.236728][ T4778] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.281755][T19274] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4342'. [ 322.315127][T19278] loop1: detected capacity change from 0 to 512 [ 322.331893][T19278] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 322.352182][T19278] EXT4-fs (loop1): 1 truncate cleaned up [ 322.358595][T19278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.508988][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.787924][T19303] loop9: detected capacity change from 0 to 7 [ 322.788084][T19303] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.788114][T19303] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.809862][T19303] loop9: unable to read partition table [ 322.816439][T19303] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 322.816439][T19303] ) failed (rc=-5) [ 322.818019][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 323.034146][T19308] netlink: 'syz.2.4353': attribute type 29 has an invalid length. [ 323.111616][T19315] 9pnet_fd: Insufficient options for proto=fd [ 323.134499][T19316] loop2: detected capacity change from 0 to 512 [ 323.141418][T19316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 323.152160][T19316] EXT4-fs (loop2): 1 truncate cleaned up [ 323.152600][T19316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.323569][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.330417][T19330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4363'. [ 323.344625][T19330] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4363'. [ 323.388464][T19334] lo speed is unknown, defaulting to 1000 [ 323.480060][T19344] loop3: detected capacity change from 0 to 512 [ 323.486886][T19344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 323.513037][T19344] EXT4-fs (loop3): 1 truncate cleaned up [ 323.521408][T19343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'. [ 323.537677][T19343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4367'. [ 323.545670][T19344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.722260][T19361] loop0: detected capacity change from 0 to 512 [ 323.739068][T19361] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 323.771747][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.787915][T19361] EXT4-fs (loop0): 1 truncate cleaned up [ 323.807863][T19361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.906101][T19371] lo speed is unknown, defaulting to 1000 [ 323.993352][T19371] loop1: detected capacity change from 0 to 128 [ 324.045350][T19371] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.057667][T19371] ext4 filesystem being mounted at /362/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.247839][T19379] netlink: 'syz.3.4378': attribute type 17 has an invalid length. [ 324.255709][T19379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4378'. [ 324.264621][T19379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4378'. [ 324.287300][T19379] gretap0: entered promiscuous mode [ 324.294499][T19379] gretap0: left promiscuous mode [ 324.320032][T19383] loop2: detected capacity change from 0 to 512 [ 324.357845][T19383] EXT4-fs (loop2): 1 orphan inode deleted [ 324.364039][T19383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.378935][T19383] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.390510][ T8100] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:17: Failed to release dquot type 1 [ 324.439477][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.577963][T19404] EXT4-fs (loop0): 1 orphan inode deleted [ 324.584763][T19404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.585066][T19404] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.625508][T12581] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.716534][T19416] lo speed is unknown, defaulting to 1000 [ 324.903618][T19426] netlink: 'syz.3.4393': attribute type 17 has an invalid length. [ 324.906481][T19426] gretap0: entered promiscuous mode [ 324.918722][T19426] gretap0: left promiscuous mode [ 325.237376][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.463810][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.500166][T19451] EXT4-fs (loop0): 1 orphan inode deleted [ 325.511451][T19451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.524653][T19451] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.542290][T18412] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:27: Failed to release dquot type 1 [ 325.900238][ T8095] Bluetooth: hci1: Frame reassembly failed (-84) [ 326.265969][T19493] netlink: 'syz.3.4418': attribute type 29 has an invalid length. [ 326.343713][ T3513] loop9: unable to read partition table [ 326.351075][T19484] loop9: unable to read partition table [ 326.357434][T19484] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 326.357434][T19484] ) failed (rc=-5) [ 326.395444][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.854975][ T4724] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 327.022861][T19525] netlink: 'syz.4.4430': attribute type 29 has an invalid length. [ 327.173721][T19535] set_capacity_and_notify: 4 callbacks suppressed [ 327.173744][T19535] loop3: detected capacity change from 0 to 512 [ 327.296583][T19536] lo speed is unknown, defaulting to 1000 [ 327.986365][T19538] lo speed is unknown, defaulting to 1000 [ 328.052409][ T3604] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 328.073764][T19538] loop0: detected capacity change from 0 to 128 [ 328.121263][T19538] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.133483][T19538] ext4 filesystem being mounted at /298/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.149833][T19540] loop4: detected capacity change from 0 to 512 [ 328.177545][T19540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 328.187668][T19535] EXT4-fs (loop3): 1 orphan inode deleted [ 328.195542][T19540] EXT4-fs (loop4): 1 truncate cleaned up [ 328.198398][T19535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.214608][ T41] __quota_error: 138 callbacks suppressed [ 328.214623][ T41] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 328.225340][T19540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.230281][ T41] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 328.251551][T19548] loop1: detected capacity change from 0 to 512 [ 328.260440][T19535] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.279302][T19548] EXT4-fs (loop1): 1 orphan inode deleted [ 328.318627][T19548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.358253][ T8101] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 328.358306][ T8101] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1 [ 328.358858][T19548] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.378033][T13875] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.488124][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.518295][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.616875][T19564] netlink: 'syz.4.4441': attribute type 29 has an invalid length. [ 328.923469][T19574] lo speed is unknown, defaulting to 1000 [ 328.956759][T19574] loop4: detected capacity change from 0 to 128 [ 329.859799][T19576] lo speed is unknown, defaulting to 1000 [ 329.909143][T19574] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 329.921534][T19574] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.936494][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.985923][T19585] __nla_validate_parse: 4 callbacks suppressed [ 329.985939][T19585] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4447'. [ 330.184024][T19589] loop2: detected capacity change from 0 to 512 [ 330.194189][T19589] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 330.212812][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.238135][T19592] loop3: detected capacity change from 0 to 512 [ 330.300143][T19592] EXT4-fs (loop3): 1 orphan inode deleted [ 330.307259][T19589] EXT4-fs (loop2): 1 truncate cleaned up [ 330.319488][ T8098] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 330.329310][ T8098] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 1 [ 330.348458][T19589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.361656][T19592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.381439][T19592] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.516915][ T29] audit: type=1326 audit(1765071027.280:16393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 330.516952][ T29] audit: type=1326 audit(1765071027.280:16394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 330.518553][ T29] audit: type=1326 audit(1765071027.280:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 330.518674][ T29] audit: type=1326 audit(1765071027.280:16396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.0.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 330.582174][T19601] loop4: detected capacity change from 0 to 128 [ 330.693326][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.712034][T19607] netlink: 'syz.2.4454': attribute type 29 has an invalid length. [ 330.789580][ T29] audit: type=1326 audit(1765071027.542:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19613 comm="syz.0.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 330.789772][ T29] audit: type=1326 audit(1765071027.542:16398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19613 comm="syz.0.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 330.789925][ T29] audit: type=1326 audit(1765071027.542:16399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19613 comm="syz.0.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 330.792336][T19614] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4457'. [ 331.032054][T19625] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4461'. [ 331.193933][T19629] lo speed is unknown, defaulting to 1000 [ 331.561046][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.593548][T19636] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4464'. [ 331.624377][T19636] geneve2: entered promiscuous mode [ 331.629622][T19636] geneve2: entered allmulticast mode [ 331.663176][T19639] netlink: 'syz.1.4465': attribute type 29 has an invalid length. [ 331.818559][T19621] loop9: detected capacity change from 0 to 7 [ 331.830709][ T3513] buffer_io_error: 13 callbacks suppressed [ 331.830721][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.844715][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.852642][ T3513] loop9: unable to read partition table [ 331.858686][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.866530][T19621] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.874403][T19621] loop9: unable to read partition table [ 331.912455][T19621] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 331.912455][T19621] ) failed (rc=-5) [ 331.930496][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 331.953428][T19652] lo speed is unknown, defaulting to 1000 [ 332.036776][T19652] loop3: detected capacity change from 0 to 128 [ 332.063703][T19652] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.080952][T19652] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.160509][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 332.200544][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 332.258086][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 332.287796][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 332.433327][T19661] EXT4-fs (loop4): 1 orphan inode deleted [ 332.443423][T19661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.456173][T19090] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:30: Failed to release dquot type 1 [ 332.467279][T19661] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.488021][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.601267][T19672] set_capacity_and_notify: 1 callbacks suppressed [ 332.601284][T19672] loop4: detected capacity change from 0 to 128 [ 332.792065][T14994] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.945770][T19679] loop3: detected capacity change from 0 to 512 [ 332.952712][T19679] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 332.965295][T19679] EXT4-fs (loop3): 1 truncate cleaned up [ 332.987666][T19679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.005539][T19684] netlink: 'syz.0.4478': attribute type 29 has an invalid length. [ 333.058513][T18008] Bluetooth: hci0: Frame reassembly failed (-84) [ 333.078344][T19691] loop0: detected capacity change from 0 to 512 [ 333.091858][T19691] EXT4-fs (loop0): 1 orphan inode deleted [ 333.098392][T19691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.111253][ T53] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 333.128002][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.137300][T19695] loop2: detected capacity change from 0 to 512 [ 333.138712][T19691] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.163346][T19695] EXT4-fs (loop2): 1 orphan inode deleted [ 333.177657][T19695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.193958][T18071] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 1 [ 333.194024][T19695] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.238191][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.575408][T19712] loop2: detected capacity change from 0 to 128 [ 333.707200][T19712] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.708456][T19712] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.807078][T19715] loop3: detected capacity change from 0 to 512 [ 333.837810][T19715] EXT4-fs (loop3): 1 orphan inode deleted [ 333.839319][T19715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.839780][T19715] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.856730][ T815] __quota_error: 152 callbacks suppressed [ 333.856741][ T815] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 333.856846][ T815] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 334.030720][ T29] audit: type=1326 audit(1765071030.573:16549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 334.056217][T19721] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4489'. [ 334.058119][ T29] audit: type=1326 audit(1765071030.573:16550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 334.089327][ T29] audit: type=1326 audit(1765071030.601:16551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 334.112918][ T29] audit: type=1326 audit(1765071030.601:16552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 334.112945][ T29] audit: type=1326 audit(1765071030.601:16553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 334.112970][ T29] audit: type=1326 audit(1765071030.601:16554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 334.113010][ T29] audit: type=1326 audit(1765071030.601:16555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 334.113037][ T29] audit: type=1326 audit(1765071030.601:16556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 334.113110][ T29] audit: type=1326 audit(1765071030.601:16557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 334.162435][T19721] geneve2: entered promiscuous mode [ 334.162454][T19721] geneve2: entered allmulticast mode [ 334.286440][T13055] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.391350][T19731] loop2: detected capacity change from 0 to 512 [ 334.528369][T19731] EXT4-fs (loop2): 1 orphan inode deleted [ 334.536884][T19731] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.640724][T19736] lo speed is unknown, defaulting to 1000 [ 334.770348][T19736] loop0: detected capacity change from 0 to 128 [ 334.823767][T19736] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.972560][T19739] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4495'. [ 335.016517][T19739] geneve2: entered promiscuous mode [ 335.021920][T19739] geneve2: entered allmulticast mode [ 335.029223][ T8101] Bluetooth: hci1: Frame reassembly failed (-84) [ 335.129139][T19744] loop2: detected capacity change from 0 to 128 [ 335.235324][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 335.241960][ T4724] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 335.304926][T18008] Bluetooth: hci0: Frame reassembly failed (-84) [ 335.318124][T19749] loop1: detected capacity change from 0 to 512 [ 335.344238][T19749] EXT4-fs (loop1): 1 orphan inode deleted [ 335.352630][T19749] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.366485][ T8100] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:17: Failed to release dquot type 1 [ 335.435183][T19761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.454507][T19761] EXT4-fs (loop0): 1 truncate cleaned up [ 335.712501][T19771] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.936553][T19776] EXT4-fs (loop0): 1 orphan inode deleted [ 335.953013][T18077] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:26: Failed to release dquot type 1 [ 335.971540][T19778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.987984][T19776] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.024690][T19778] EXT4-fs (loop4): 1 truncate cleaned up [ 336.417860][T19789] netlink: 'syz.1.4511': attribute type 1 has an invalid length. [ 336.432934][T19789] 8021q: adding VLAN 0 to HW filter on device bond14 [ 336.796183][T19803] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.796221][T19803] loop9: unable to read partition table [ 336.796242][T19803] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 336.796242][T19803] ) failed (rc=-5) [ 337.212791][ T3604] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 337.300444][T19814] EXT4-fs (loop0): 1 orphan inode deleted [ 337.301062][T19814] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.331039][T17614] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 1 [ 337.459052][ T3604] Bluetooth: hci0: command 0x1003 tx timeout [ 337.459213][ T4724] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 337.750706][T19829] netlink: 'syz.1.4523': attribute type 29 has an invalid length. [ 338.024692][T19836] netlink: 'syz.2.4526': attribute type 17 has an invalid length. [ 338.024709][T19836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4526'. [ 338.041640][T19836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4526'. [ 338.043808][T19836] gretap0: entered promiscuous mode [ 338.057983][T19836] gretap0: left promiscuous mode [ 338.574927][T19852] set_capacity_and_notify: 8 callbacks suppressed [ 338.574980][T19852] loop9: detected capacity change from 0 to 7 [ 338.587638][T19852] buffer_io_error: 6 callbacks suppressed [ 338.587651][T19852] Buffer I/O error on dev loop9, logical block 0, async page read [ 338.601304][T19852] Buffer I/O error on dev loop9, logical block 0, async page read [ 338.609150][T19852] loop9: unable to read partition table [ 338.614930][T19852] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 338.614930][T19852] ) failed (rc=-5) [ 338.617468][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 338.636918][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 338.644868][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 338.652990][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 338.660960][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 338.877268][T19860] geneve2: entered promiscuous mode [ 338.882560][T19860] geneve2: entered allmulticast mode [ 339.287030][T19872] loop2: detected capacity change from 0 to 512 [ 339.288465][T19874] netlink: 'syz.0.4538': attribute type 1 has an invalid length. [ 339.301618][T19872] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.316919][T19874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.331229][T19872] EXT4-fs (loop2): 1 truncate cleaned up [ 339.364450][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 339.364462][ T29] audit: type=1326 audit(1765071035.560:16695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.402591][ T29] audit: type=1326 audit(1765071035.569:16696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.404244][T19880] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4539'. [ 339.426243][ T29] audit: type=1326 audit(1765071035.569:16697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.435392][ T4724] Bluetooth: hci1: command 0x1003 tx timeout [ 339.458916][ T29] audit: type=1326 audit(1765071035.578:16698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.465242][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 339.488506][ T29] audit: type=1326 audit(1765071035.597:16699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.553908][ T29] audit: type=1326 audit(1765071035.597:16700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.577619][ T29] audit: type=1326 audit(1765071035.597:16701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.601229][ T29] audit: type=1326 audit(1765071035.597:16702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.624897][ T29] audit: type=1326 audit(1765071035.597:16703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.648552][ T29] audit: type=1326 audit(1765071035.597:16704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19879 comm="syz.0.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd558c9f749 code=0x7ffc0000 [ 339.824509][T19894] lo speed is unknown, defaulting to 1000 [ 339.906851][T19894] loop1: detected capacity change from 0 to 128 [ 340.035440][T19894] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.298592][T17614] Bluetooth: hci0: Frame reassembly failed (-84) [ 340.542734][T19920] loop9: detected capacity change from 0 to 7 [ 340.549486][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.557361][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.565217][ T3513] loop9: unable to read partition table [ 340.571772][T19920] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.580036][T19920] loop9: unable to read partition table [ 340.585747][T19920] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 340.585747][T19920] ) failed (rc=-5) [ 340.671077][T19924] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4552'. [ 340.685030][T19924] geneve2: entered promiscuous mode [ 340.690543][T19924] geneve2: entered allmulticast mode [ 340.844101][T19933] loop0: detected capacity change from 0 to 128 [ 341.460821][T19963] lo speed is unknown, defaulting to 1000 [ 341.543898][T19963] loop3: detected capacity change from 0 to 128 [ 341.611345][T19963] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.869354][T19972] loop4: detected capacity change from 0 to 128 [ 342.140024][T19993] loop4: detected capacity change from 0 to 128 [ 342.178586][T19994] loop9: detected capacity change from 0 to 7 [ 342.185480][ T3513] loop9: unable to read partition table [ 342.196921][T19994] loop9: unable to read partition table [ 342.206591][T19994] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 342.206591][T19994] ) failed (rc=-5) [ 342.437774][T20006] loop3: detected capacity change from 0 to 128 [ 342.504035][ T4724] Bluetooth: hci0: command 0x1003 tx timeout [ 342.510112][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 342.587676][T20006] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.883784][T20017] netlink: 'syz.1.4584': attribute type 1 has an invalid length. [ 342.910828][T20017] 8021q: adding VLAN 0 to HW filter on device bond15 [ 343.060629][T20036] lo speed is unknown, defaulting to 1000 [ 343.170672][T20045] netlink: 'syz.0.4594': attribute type 1 has an invalid length. [ 343.192228][T20045] 8021q: adding VLAN 0 to HW filter on device bond6 [ 343.563966][T20067] loop9: unable to read partition table [ 343.564014][T20067] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 343.564014][T20067] ) failed (rc=-5) [ 343.802921][T20076] EXT4-fs (loop0): 1 orphan inode deleted [ 343.803477][T20076] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.819813][ T61] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 343.988247][T20082] set_capacity_and_notify: 4 callbacks suppressed [ 343.988262][T20082] loop4: detected capacity change from 0 to 512 [ 344.013667][T20082] EXT4-fs (loop4): 1 orphan inode deleted [ 344.015366][T20082] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.043438][ T41] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 344.147442][ T8097] Bluetooth: hci0: Frame reassembly failed (-84) [ 344.523194][T20102] loop3: detected capacity change from 0 to 512 [ 344.539891][T20102] EXT4-fs (loop3): 1 orphan inode deleted [ 344.546520][T20102] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.980608][ T6152] Bluetooth: hci1: Frame reassembly failed (-84) [ 345.260052][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 345.260066][ T29] audit: type=1326 audit(1765071041.070:16794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20121 comm="syz.4.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 345.260146][ T29] audit: type=1326 audit(1765071041.070:16795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20121 comm="syz.4.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 345.260240][ T29] audit: type=1326 audit(1765071041.070:16796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20121 comm="syz.4.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 345.715013][T20140] lo speed is unknown, defaulting to 1000 [ 345.762091][T20140] loop3: detected capacity change from 0 to 128 [ 345.830279][T20140] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.352176][ T3604] Bluetooth: hci0: command 0x1003 tx timeout [ 346.352239][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.503271][T20162] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4634'. [ 346.598346][T20170] loop2: detected capacity change from 0 to 128 [ 346.648501][T20170] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.813944][T20175] loop4: detected capacity change from 0 to 128 [ 346.843978][T20179] loop3: detected capacity change from 0 to 512 [ 346.915767][T20179] EXT4-fs (loop3): 1 orphan inode deleted [ 346.925983][T20179] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.941932][ T8102] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 346.951787][ T8102] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:19: Failed to release dquot type 1 [ 347.118584][ T3604] Bluetooth: hci0: sending frame failed (-49) [ 347.118631][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 347.124800][ T3561] Bluetooth: hci1: command 0x1003 tx timeout [ 347.125436][ T4724] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 347.153055][T20196] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4645'. [ 347.292224][T20203] loop0: detected capacity change from 0 to 512 [ 347.322149][T20203] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 347.328307][T20203] EXT4-fs (loop0): 1 truncate cleaned up [ 347.402093][T20205] lo speed is unknown, defaulting to 1000 [ 347.532315][T20205] loop1: detected capacity change from 0 to 128 [ 347.554688][T20205] EXT4-fs mount: 38 callbacks suppressed [ 347.554701][T20205] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.555415][T20205] ext4 filesystem being mounted at /425/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.779461][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.826911][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.866147][T20212] loop9: detected capacity change from 0 to 7 [ 347.873012][T20212] buffer_io_error: 22 callbacks suppressed [ 347.873026][T20212] Buffer I/O error on dev loop9, logical block 0, async page read [ 347.887618][T20212] Buffer I/O error on dev loop9, logical block 0, async page read [ 347.895545][T20212] loop9: unable to read partition table [ 347.901294][T20212] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 347.901294][T20212] ) failed (rc=-5) [ 347.903641][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 347.936191][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 347.945352][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 347.953376][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 347.996784][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 348.038741][T20225] loop0: detected capacity change from 0 to 512 [ 348.050706][T20225] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 348.088683][T12581] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.089424][T20225] EXT4-fs (loop0): 1 truncate cleaned up [ 348.113515][T20225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.131670][T20210] Buffer I/O error on dev loop9, logical block 0, async page read [ 348.141078][T20210] Buffer I/O error on dev loop9, logical block 0, async page read [ 348.148953][T20210] loop9: unable to read partition table [ 348.154750][T20210] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 348.154750][T20210] ) failed (rc=-5) [ 348.156069][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 348.283698][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.324665][ T29] audit: type=1326 audit(1765071043.942:16797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 348.348347][ T29] audit: type=1326 audit(1765071043.942:16798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 348.389135][ T29] audit: type=1326 audit(1765071043.979:16799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 348.412833][ T29] audit: type=1326 audit(1765071043.979:16800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 348.436589][ T29] audit: type=1326 audit(1765071043.989:16801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 348.460211][ T29] audit: type=1326 audit(1765071043.989:16802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 348.723839][T20259] lo speed is unknown, defaulting to 1000 [ 348.840926][T20259] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.853495][T20259] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.958869][T20256] EXT4-fs (loop3): 1 orphan inode deleted [ 348.984637][T20256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.033719][T20256] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.077953][ T8102] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:19: Failed to release dquot type 1 [ 349.449931][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.653001][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.691578][T18008] Bluetooth: hci2: Frame reassembly failed (-84) [ 349.816725][T20282] set_capacity_and_notify: 4 callbacks suppressed [ 349.816736][T20282] loop9: detected capacity change from 0 to 7 [ 349.829770][ T3513] loop9: unable to read partition table [ 349.835690][T20282] loop9: unable to read partition table [ 349.841451][T20282] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 349.841451][T20282] ) failed (rc=-5) [ 350.077435][T20295] loop4: detected capacity change from 0 to 128 [ 350.172816][T20297] 9pnet_fd: Insufficient options for proto=fd [ 350.210772][T20301] 9pnet_fd: Insufficient options for proto=fd [ 350.285755][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 350.285858][ T4724] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 350.536889][T20328] loop2: detected capacity change from 0 to 128 [ 350.976632][T20389] loop9: detected capacity change from 0 to 7 [ 350.989383][ T3513] loop9: unable to read partition table [ 350.996653][T20389] loop9: unable to read partition table [ 351.004093][T20389] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 351.004093][T20389] ) failed (rc=-5) [ 351.483001][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 351.618242][T20447] lo speed is unknown, defaulting to 1000 [ 351.910514][ T3604] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 351.910934][ T3561] Bluetooth: hci2: command 0x1003 tx timeout [ 352.073382][T20473] 9pnet_fd: Insufficient options for proto=fd [ 352.190910][T20482] lo speed is unknown, defaulting to 1000 [ 352.274009][T20482] loop4: detected capacity change from 0 to 128 [ 352.309774][T20482] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.322446][T20482] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.906747][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.183892][T20546] loop2: detected capacity change from 0 to 128 [ 353.235233][T20577] loop9: detected capacity change from 0 to 7 [ 353.242332][ T3513] buffer_io_error: 22 callbacks suppressed [ 353.242345][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 353.265206][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 353.273153][ T3513] loop9: unable to read partition table [ 353.283688][T20577] Buffer I/O error on dev loop9, logical block 0, async page read [ 353.301060][T20577] Buffer I/O error on dev loop9, logical block 0, async page read [ 353.308923][T20577] loop9: unable to read partition table [ 353.424150][T20577] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 353.424150][T20577] ) failed (rc=-5) [ 353.427249][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 353.446075][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 353.454319][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 353.463008][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 353.472397][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 353.566734][T20612] lo speed is unknown, defaulting to 1000 [ 353.616789][T20612] loop2: detected capacity change from 0 to 128 [ 353.644283][T20612] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.657038][T20612] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.714459][T20615] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4703'. [ 353.962114][T20631] loop1: detected capacity change from 0 to 512 [ 353.970746][T20631] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 354.013091][T20625] loop3: detected capacity change from 0 to 512 [ 354.039692][T20625] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 354.041225][T20631] EXT4-fs (loop1): 1 truncate cleaned up [ 354.056805][T20631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.071450][T20625] EXT4-fs (loop3): 1 truncate cleaned up [ 354.077495][T20625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.099207][T20634] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.111456][T20634] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.212620][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.263674][T13055] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.281777][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.540778][T20665] geneve2: entered promiscuous mode [ 354.546012][T20665] geneve2: entered allmulticast mode [ 354.553563][T18071] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.565595][T18071] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.577781][T18071] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.589077][T20667] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4715'. [ 354.598857][T18071] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.652410][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4716'. [ 354.735971][T20679] EXT4-fs (loop2): 1 orphan inode deleted [ 354.752891][T20679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.766071][ T1842] __quota_error: 75 callbacks suppressed [ 354.766085][ T1842] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 354.781523][ T1842] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 354.806792][T20679] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.865752][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.047965][T20695] Buffer I/O error on dev loop9, logical block 0, async page read [ 355.047999][T20695] loop9: unable to read partition table [ 355.048064][T20695] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 355.048064][T20695] ) failed (rc=-5) [ 355.471170][T20717] set_capacity_and_notify: 4 callbacks suppressed [ 355.471186][T20717] loop0: detected capacity change from 0 to 128 [ 355.547410][T20733] geneve2: entered promiscuous mode [ 355.547430][T20733] geneve2: entered allmulticast mode [ 355.550055][T19831] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.550228][T19831] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.550303][T19831] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.550334][T19831] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.590034][T20738] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4728'. [ 355.597688][T20740] loop0: detected capacity change from 0 to 512 [ 355.641907][T20740] EXT4-fs (loop0): 1 orphan inode deleted [ 355.642333][T20740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.642500][T20740] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.704712][T20751] loop1: detected capacity change from 0 to 512 [ 355.754833][T20751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 355.766758][T20751] EXT4-fs (loop1): 1 truncate cleaned up [ 355.767177][T20751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.770625][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.932711][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.267961][T20797] loop1: detected capacity change from 0 to 512 [ 356.268629][T20797] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 356.269770][T20797] EXT4-fs (loop1): 1 truncate cleaned up [ 356.270413][T20797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.413360][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.511430][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.696073][T20832] loop0: detected capacity change from 0 to 128 [ 356.812955][ T29] audit: type=1400 audit(1765071051.885:16877): avc: denied { execute } for pid=20871 comm="syz.2.4740" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 356.834533][ T29] audit: type=1400 audit(1765071051.885:16878): avc: denied { execute_no_trans } for pid=20871 comm="syz.2.4740" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 356.847240][T20875] loop9: detected capacity change from 0 to 7 [ 356.866388][T20875] loop9: unable to read partition table [ 356.875397][T20875] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 356.875397][T20875] ) failed (rc=-5) [ 356.894807][T20877] loop3: detected capacity change from 0 to 128 [ 357.278168][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4745'. [ 357.405152][ T29] audit: type=1326 audit(1765071052.446:16879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.1.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 357.429630][T20897] loop4: detected capacity change from 0 to 512 [ 357.438379][ T29] audit: type=1326 audit(1765071052.465:16880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.1.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 357.462114][ T29] audit: type=1326 audit(1765071052.465:16881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.1.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 357.485728][ T29] audit: type=1326 audit(1765071052.465:16882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.1.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 357.509457][ T29] audit: type=1326 audit(1765071052.465:16883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.1.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 357.533281][ T29] audit: type=1326 audit(1765071052.465:16884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.1.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 357.556950][ T29] audit: type=1326 audit(1765071052.465:16885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20898 comm="syz.1.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 357.559005][T20897] EXT4-fs (loop4): 1 orphan inode deleted [ 357.582517][T20532] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:37: Failed to release dquot type 1 [ 357.598805][T20897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.613062][T20897] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.655554][T20907] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4750'. [ 357.824177][T20921] loop3: detected capacity change from 0 to 128 [ 357.913722][T20928] lo speed is unknown, defaulting to 1000 [ 357.919149][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 357.973836][T20931] loop3: detected capacity change from 0 to 512 [ 357.981558][T20931] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 357.993609][T20931] EXT4-fs (loop3): 1 truncate cleaned up [ 357.993902][T20931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.210656][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.256220][T20941] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4762'. [ 358.343039][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.384615][T20956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 358.403572][T20956] EXT4-fs (loop4): 1 truncate cleaned up [ 358.413636][T20956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.453260][T18700] Bluetooth: hci1: Frame reassembly failed (-84) [ 358.617225][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.004560][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 359.145322][T21068] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 359.166334][T21068] EXT4-fs (loop4): 1 truncate cleaned up [ 359.173052][T21068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.321658][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.463478][T18412] Bluetooth: hci2: Frame reassembly failed (-84) [ 359.504846][T21107] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.517249][T21107] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.863318][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 359.864449][ T3604] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 360.059797][T21115] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 360.071162][T21115] EXT4-fs (loop1): 1 truncate cleaned up [ 360.077740][T21115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.184290][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.272026][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.469099][T21131] EXT4-fs (loop1): 1 orphan inode deleted [ 360.477218][T21137] lo speed is unknown, defaulting to 1000 [ 360.483862][T20521] __quota_error: 91 callbacks suppressed [ 360.483870][T20521] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 360.489991][T21131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.499227][T20521] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:36: Failed to release dquot type 1 [ 360.526245][T21131] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.571741][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.633317][ T3561] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 360.710492][ T29] audit: type=1326 audit(1765071055.533:16976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21143 comm="syz.4.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 360.756341][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 360.848902][ T29] audit: type=1326 audit(1765071055.533:16977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21143 comm="syz.4.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 360.872583][ T29] audit: type=1326 audit(1765071055.533:16978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21143 comm="syz.4.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 361.060123][T21173] set_capacity_and_notify: 6 callbacks suppressed [ 361.060136][T21173] loop4: detected capacity change from 0 to 128 [ 361.659142][ T4724] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 361.996047][T21286] loop9: detected capacity change from 0 to 7 [ 362.005888][ T3513] buffer_io_error: 13 callbacks suppressed [ 362.005901][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.020747][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.028838][ T3513] loop9: unable to read partition table [ 362.035564][T21286] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.043726][T21286] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.051694][T21286] loop9: unable to read partition table [ 362.064917][T21286] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 362.064917][T21286] ) failed (rc=-5) [ 362.079502][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.079590][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.079668][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.079735][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.117630][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.910372][T21334] loop4: detected capacity change from 0 to 512 [ 362.953648][ T4724] Bluetooth: hci0: command 0x1003 tx timeout [ 362.959673][ T3604] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 362.990869][T21334] EXT4-fs (loop4): 1 orphan inode deleted [ 362.991215][T21334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.016956][T18412] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 363.026730][T18412] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:27: Failed to release dquot type 1 [ 363.038386][T21334] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.401889][T21362] lo speed is unknown, defaulting to 1000 [ 363.493934][T21349] netlink: 'syz.1.4818': attribute type 1 has an invalid length. [ 363.501782][T21349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4818'. [ 363.692038][T21370] lo speed is unknown, defaulting to 1000 [ 363.780409][T21370] loop2: detected capacity change from 0 to 128 [ 363.935461][T21370] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.935681][T21370] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.989306][T21374] loop9: detected capacity change from 0 to 7 [ 363.989644][T21374] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.989698][T21374] loop9: unable to read partition table [ 363.989770][T21374] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 363.989770][T21374] ) failed (rc=-5) [ 364.034908][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'. [ 364.158794][T21376] loop0: detected capacity change from 0 to 512 [ 364.181161][T21376] EXT4-fs (loop0): orphan cleanup on readonly fs [ 364.187672][T21376] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 364.197079][T21376] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 364.212329][T21376] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.4827: attempt to clear invalid blocks 2 len 1 [ 364.236457][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.253416][T21376] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4827: invalid indirect mapped block 1819239214 (level 0) [ 364.294199][T21376] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4827: invalid indirect mapped block 1819239214 (level 1) [ 364.392031][T21376] EXT4-fs (loop0): 1 truncate cleaned up [ 364.398195][T21376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.411844][T13055] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.422111][T21376] EXT4-fs error (device loop0): __ext4_remount:6789: comm syz.0.4827: Abort forced by user [ 364.453930][T21376] EXT4-fs (loop0): Remounting filesystem read-only [ 364.460564][T21376] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 364.521582][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.734192][T21431] lo speed is unknown, defaulting to 1000 [ 364.823577][T21453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4842'. [ 364.851003][ T29] audit: type=1400 audit(1765071059.406:16979): avc: denied { getopt } for pid=21452 comm="syz.2.4842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 364.879507][ T29] audit: type=1326 audit(1765071059.425:16980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21452 comm="syz.2.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x50000 [ 364.902856][ T29] audit: type=1326 audit(1765071059.425:16981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21452 comm="syz.2.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x50000 [ 364.926193][ T29] audit: type=1326 audit(1765071059.425:16982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21452 comm="syz.2.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x50000 [ 364.949569][ T29] audit: type=1326 audit(1765071059.425:16983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21452 comm="syz.2.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x50000 [ 365.458348][T21481] loop4: detected capacity change from 0 to 128 [ 365.529352][T21481] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.541826][T21481] ext4 filesystem being mounted at /346/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.723134][T21490] loop1: detected capacity change from 0 to 512 [ 365.740253][T21490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 365.765362][T21490] EXT4-fs (loop1): 1 truncate cleaned up [ 365.773334][T21490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.080674][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.100358][T21547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4854'. [ 366.153464][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.217046][T21566] loop4: detected capacity change from 0 to 512 [ 366.231507][T21568] loop0: detected capacity change from 0 to 128 [ 366.259870][T21570] EXT4-fs (loop1): 1 orphan inode deleted [ 366.266856][T21570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.278625][T21566] EXT4-fs (loop4): 1 orphan inode deleted [ 366.279492][ T8103] __quota_error: 65 callbacks suppressed [ 366.279583][ T8103] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 366.285577][T21566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.290773][ T8103] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 1 [ 366.325886][T21566] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.326794][ T8103] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 366.336586][T21570] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.346183][ T8103] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 1 [ 366.390233][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.429136][T21584] set_capacity_and_notify: 1 callbacks suppressed [ 366.429152][T21584] loop4: detected capacity change from 0 to 512 [ 366.484475][T21584] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 366.502428][T21584] EXT4-fs (loop4): 1 truncate cleaned up [ 366.502848][T21584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.738925][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.980981][T21633] loop4: detected capacity change from 0 to 128 [ 367.173227][T21639] loop2: detected capacity change from 0 to 128 [ 367.386820][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.391037][T21633] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.391355][T21633] ext4 filesystem being mounted at /349/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.492258][T21645] lo speed is unknown, defaulting to 1000 [ 367.531729][ T29] audit: type=1326 audit(1765071061.913:17049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21643 comm="syz.3.4873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4eccd6f749 code=0x0 [ 367.704634][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.767592][T21662] loop0: detected capacity change from 0 to 512 [ 367.779279][T21662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 367.793302][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4877'. [ 367.808403][T21662] EXT4-fs (loop0): 1 truncate cleaned up [ 367.818188][T21662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.982206][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.103957][T21684] loop4: detected capacity change from 0 to 128 [ 368.120856][T21684] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.133151][T21684] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 368.191487][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.219144][T21694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4890'. [ 368.246979][ T29] audit: type=1326 audit(1765071062.587:17050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 368.276668][ T29] audit: type=1326 audit(1765071062.606:17051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 368.300311][ T29] audit: type=1326 audit(1765071062.606:17052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea94e1f749 code=0x7ffc0000 [ 368.401831][ T29] audit: type=1326 audit(1765071062.718:17053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.3.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 368.425445][ T29] audit: type=1326 audit(1765071062.718:17054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.3.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 368.449168][ T29] audit: type=1326 audit(1765071062.718:17055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.3.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 368.472762][ T29] audit: type=1326 audit(1765071062.718:17056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.3.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 368.525803][T21720] geneve2: entered promiscuous mode [ 368.531049][T21720] geneve2: entered allmulticast mode [ 368.575404][ T41] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 368.619591][T18700] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 368.635405][T18700] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 368.655013][T18700] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 368.701339][T21729] loop1: detected capacity change from 0 to 512 [ 368.703533][T21733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 368.723336][T21729] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 368.765674][T21729] EXT4-fs (loop1): 1 truncate cleaned up [ 368.959159][T21764] loop3: detected capacity change from 0 to 512 [ 368.966127][T21764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 369.003749][T21764] EXT4-fs (loop3): 1 truncate cleaned up [ 369.035203][T20532] Bluetooth: hci0: Frame reassembly failed (-84) [ 369.198637][T21791] loop0: detected capacity change from 0 to 1024 [ 369.209024][T21791] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 369.333079][T21807] lo speed is unknown, defaulting to 1000 [ 369.738434][T21884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4913'. [ 369.945464][T21892] loop4: detected capacity change from 0 to 128 [ 369.993396][T21895] lo speed is unknown, defaulting to 1000 [ 370.022729][T21895] loop0: detected capacity change from 0 to 128 [ 370.037873][T21895] ext4 filesystem being mounted at /420/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 370.104333][T21898] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 370.122853][T21898] EXT4-fs (loop4): 1 truncate cleaned up [ 370.254481][T20544] Bluetooth: hci1: Frame reassembly failed (-84) [ 370.260904][T21904] EXT4-fs: inline encryption not supported [ 370.311904][T21904] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 370.326968][T21904] EXT4-fs (loop4): Remounting filesystem read-only [ 370.347816][T21909] EXT4-fs (loop2): 1 orphan inode deleted [ 370.363553][T20532] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:37: Failed to release dquot type 1 [ 370.376246][T21909] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.058009][ T3513] buffer_io_error: 6 callbacks suppressed [ 371.058022][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.058051][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.058065][ T3513] loop9: unable to read partition table [ 371.058276][T21937] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.093304][T21937] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.101156][T21937] loop9: unable to read partition table [ 371.101196][T21937] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 371.101196][T21937] ) failed (rc=-5) [ 371.102397][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.102535][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.102664][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.102729][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.102797][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.236715][ T3604] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.504371][T21948] Buffer I/O error on dev loop9, logical block 0, async page read [ 371.512316][T21948] loop9: unable to read partition table [ 371.518011][T21948] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 371.518011][T21948] ) failed (rc=-5) [ 371.787770][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 371.787785][ T29] audit: type=1400 audit(1765071065.889:17133): avc: denied { create } for pid=21949 comm="syz.1.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 371.828553][ T29] audit: type=1400 audit(1765071065.936:17134): avc: denied { open } for pid=21951 comm="syz.1.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 371.848042][ T29] audit: type=1400 audit(1765071065.936:17135): avc: denied { kernel } for pid=21951 comm="syz.1.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 371.851806][T21952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4935'. [ 371.881833][ T29] audit: type=1400 audit(1765071065.983:17136): avc: denied { tracepoint } for pid=21951 comm="syz.1.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 372.088804][T21963] set_capacity_and_notify: 5 callbacks suppressed [ 372.088814][T21963] loop0: detected capacity change from 0 to 512 [ 372.115454][T21963] EXT4-fs (loop0): 1 orphan inode deleted [ 372.121630][T21963] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.134781][T18700] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 372.144589][T18700] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 1 [ 372.288337][ T29] audit: type=1326 audit(1765071066.366:17137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.2.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 372.288388][ T29] audit: type=1326 audit(1765071066.366:17138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.2.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 372.288415][ T29] audit: type=1326 audit(1765071066.366:17139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.2.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 372.288442][ T29] audit: type=1326 audit(1765071066.366:17140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.2.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 372.288552][ T29] audit: type=1326 audit(1765071066.366:17141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.2.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 372.352522][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 372.418583][T21978] loop1: detected capacity change from 0 to 128 [ 372.434122][ T4724] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 372.487215][T21980] loop4: detected capacity change from 0 to 512 [ 372.511803][T21980] EXT4-fs (loop4): 1 orphan inode deleted [ 372.512359][T21980] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.531586][ T53] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 373.321261][T22003] 9pnet_fd: Insufficient options for proto=fd [ 373.559410][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4960'. [ 374.107610][T19831] Bluetooth: hci1: Frame reassembly failed (-84) [ 374.137176][T22039] loop3: detected capacity change from 0 to 512 [ 374.147752][T22039] EXT4-fs (loop3): 1 orphan inode deleted [ 374.148456][T22039] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.166528][T19831] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:32: Failed to release dquot type 1 [ 374.354345][T22045] loop0: detected capacity change from 0 to 128 [ 374.366880][T22045] ext4 filesystem being mounted at /429/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.571725][ T4724] Bluetooth: hci0: command 0x1003 tx timeout [ 374.571865][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 374.626833][T22052] loop2: detected capacity change from 0 to 512 [ 374.649838][T22052] EXT4-fs (loop2): 1 orphan inode deleted [ 374.653739][T22052] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.680828][T18008] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 1 [ 375.534806][T22073] loop0: detected capacity change from 0 to 512 [ 375.542945][T22073] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 375.564252][T22073] EXT4-fs (loop0): 1 truncate cleaned up [ 375.617882][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4979'. [ 375.755849][T22085] loop2: detected capacity change from 0 to 512 [ 375.767618][T22085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 375.769636][T22085] EXT4-fs (loop2): 1 truncate cleaned up [ 375.865821][T22092] loop0: detected capacity change from 0 to 2048 [ 375.891280][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4985'. [ 376.088364][T22101] loop3: detected capacity change from 0 to 512 [ 376.103968][T22101] EXT4-fs (loop3): 1 orphan inode deleted [ 376.112628][T22101] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.126385][ T8099] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 1 [ 376.230893][ T8953] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 376.231360][ T8953] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 376.231417][ T8953] EXT4-fs (loop0): This should not happen!! Data will be lost [ 376.231417][ T8953] [ 376.231428][ T8953] EXT4-fs (loop0): Total free blocks count 0 [ 376.231438][ T8953] EXT4-fs (loop0): Free/Dirty block details [ 376.231449][ T8953] EXT4-fs (loop0): free_blocks=66060288 [ 376.231462][ T8953] EXT4-fs (loop0): dirty_blocks=4112 [ 376.231512][ T8953] EXT4-fs (loop0): Block reservation details [ 376.231523][ T8953] EXT4-fs (loop0): i_reserved_data_blocks=257 [ 376.234724][ T8099] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 376.316453][ T8099] EXT4-fs (loop0): This should not happen!! Data will be lost [ 376.316453][ T8099] [ 376.326730][ T3604] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 376.767421][T22135] EXT4-fs (loop2): 1 orphan inode deleted [ 376.775820][T22135] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.785902][ T8095] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 377.388392][T22139] buffer_io_error: 6 callbacks suppressed [ 377.388405][T22139] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.388464][T22139] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.388478][T22139] loop9: unable to read partition table [ 377.388499][T22139] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 377.388499][T22139] ) failed (rc=-5) [ 377.390291][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.390375][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.390516][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.390584][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.390662][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.758177][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 377.758192][ T29] audit: type=1400 audit(1765071071.484:17178): avc: denied { write } for pid=22172 comm="syz.3.5012" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 377.788420][ T29] audit: type=1326 audit(1765071071.493:17179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.3.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 377.812075][ T29] audit: type=1326 audit(1765071071.493:17180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.3.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 377.812160][T22175] set_capacity_and_notify: 3 callbacks suppressed [ 377.812171][T22175] loop2: detected capacity change from 0 to 512 [ 377.835986][T22176] loop9: detected capacity change from 0 to 7 [ 377.842416][ T29] audit: type=1326 audit(1765071071.493:17181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.3.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 377.850597][T22176] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.854744][ T29] audit: type=1326 audit(1765071071.493:17182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.3.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 377.886053][T22176] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.886073][T22176] loop9: unable to read partition table [ 377.886094][T22176] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 377.886094][T22176] ) failed (rc=-5) [ 377.909640][ T29] audit: type=1326 audit(1765071071.493:17183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.3.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 377.909668][ T29] audit: type=1326 audit(1765071071.493:17184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.3.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 377.909690][ T29] audit: type=1326 audit(1765071071.493:17185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.3.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 377.956668][ T4778] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.959901][ T29] audit: type=1326 audit(1765071071.493:17186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.3.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 378.024024][T22175] EXT4-fs (loop2): 1 orphan inode deleted [ 378.038467][ T29] audit: type=1326 audit(1765071071.493:17187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22172 comm="syz.3.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccd6f749 code=0x7ffc0000 [ 378.068911][ T53] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 378.081864][T22175] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.119146][T22184] loop3: detected capacity change from 0 to 512 [ 378.134862][T22184] EXT4-fs (loop3): 1 orphan inode deleted [ 378.135276][T22184] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.153414][ T8095] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 378.373272][T22194] loop1: detected capacity change from 0 to 128 [ 378.379746][T22194] ext4 filesystem being mounted at /501/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.571554][T22201] loop4: detected capacity change from 0 to 128 [ 378.745123][T22207] lo speed is unknown, defaulting to 1000 [ 378.768456][T22207] loop4: detected capacity change from 0 to 128 [ 378.782927][T22207] ext4 filesystem being mounted at /382/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.914870][T22216] loop2: detected capacity change from 0 to 512 [ 378.917142][T22216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 378.936526][T22216] EXT4-fs (loop2): 1 truncate cleaned up [ 379.069732][T22222] loop3: detected capacity change from 0 to 512 [ 379.091523][T22222] EXT4-fs (loop3): 1 orphan inode deleted [ 379.098245][T22222] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.110627][T18700] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 1 [ 379.137287][T22232] loop2: detected capacity change from 0 to 512 [ 379.161838][T22232] EXT4-fs (loop2): 1 orphan inode deleted [ 379.170735][T22232] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.179282][T18700] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 1 [ 379.331570][T22247] loop1: detected capacity change from 0 to 512 [ 379.364351][T22247] EXT4-fs (loop1): 1 orphan inode deleted [ 379.365058][T22247] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.387649][ T8100] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:17: Failed to release dquot type 1 [ 380.043373][T13055] EXT4-fs unmount: 45 callbacks suppressed [ 380.043437][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.046716][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.201118][T22314] EXT4-fs (loop2): 1 orphan inode deleted [ 380.201704][T22314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.221661][T18700] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 1 [ 380.234469][T22324] loop9: unable to read partition table [ 380.234603][T22324] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 380.234603][T22324] ) failed (rc=-5) [ 380.235797][T22314] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.324446][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.596272][T22383] lo speed is unknown, defaulting to 1000 [ 380.628540][T22383] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.628858][T22383] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.677342][T22387] lo speed is unknown, defaulting to 1000 [ 380.710073][ T8100] Bluetooth: hci0: Frame reassembly failed (-84) [ 381.054117][T22415] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 381.068719][T22415] EXT4-fs (loop0): 1 truncate cleaned up [ 381.069243][T22415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.308538][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.425480][T14106] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.500819][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.285431][T20521] Bluetooth: hci1: Frame reassembly failed (-84) [ 382.516508][T22585] loop9: unable to read partition table [ 382.522261][T22585] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 382.522261][T22585] ) failed (rc=-5) [ 382.866616][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 382.866648][ T4724] Bluetooth: hci0: command 0x1003 tx timeout [ 383.016088][T18077] Bluetooth: hci0: Frame reassembly failed (-84) [ 383.201823][T22608] set_capacity_and_notify: 6 callbacks suppressed [ 383.201837][T22608] loop1: detected capacity change from 0 to 512 [ 383.232385][T22608] EXT4-fs (loop1): 1 orphan inode deleted [ 383.238757][T22608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.251863][T22608] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.262324][T20521] __quota_error: 58 callbacks suppressed [ 383.262337][T20521] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 383.277789][T20521] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:36: Failed to release dquot type 1 [ 383.381873][T22619] loop4: detected capacity change from 0 to 512 [ 383.385460][T22619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 383.402035][T22619] EXT4-fs (loop4): 1 truncate cleaned up [ 383.402392][T22619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.534472][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.549692][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5093'. [ 383.664341][T22633] FAULT_INJECTION: forcing a failure. [ 383.664341][T22633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.677560][T22633] CPU: 1 UID: 0 PID: 22633 Comm: syz.2.5098 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 383.677592][T22633] Tainted: [W]=WARN [ 383.677626][T22633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.677636][T22633] Call Trace: [ 383.677642][T22633] [ 383.677648][T22633] __dump_stack+0x1d/0x30 [ 383.677729][T22633] dump_stack_lvl+0xe8/0x140 [ 383.677803][T22633] dump_stack+0x15/0x1b [ 383.677821][T22633] should_fail_ex+0x265/0x280 [ 383.677842][T22633] should_fail+0xb/0x20 [ 383.677861][T22633] should_fail_usercopy+0x1a/0x20 [ 383.677929][T22633] strncpy_from_user+0x27/0x260 [ 383.677962][T22633] getname_flags+0xae/0x3b0 [ 383.677987][T22633] do_sys_openat2+0x60/0x150 [ 383.678080][T22633] __x64_sys_openat+0xf2/0x120 [ 383.678140][T22633] x64_sys_call+0x2b07/0x3000 [ 383.678224][T22633] do_syscall_64+0xd8/0x2a0 [ 383.678248][T22633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.678265][T22633] RIP: 0033:0x7fc0574ef749 [ 383.678278][T22633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.678294][T22633] RSP: 002b:00007fc055f4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.678325][T22633] RAX: ffffffffffffffda RBX: 00007fc057745fa0 RCX: 00007fc0574ef749 [ 383.678339][T22633] RDX: 0000000000060442 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 383.678417][T22633] RBP: 00007fc055f4f090 R08: 0000000000000000 R09: 0000000000000000 [ 383.678427][T22633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.678439][T22633] R13: 00007fc057746038 R14: 00007fc057745fa0 R15: 00007ffccf5a4778 [ 383.678457][T22633] [ 383.902945][ T29] audit: type=1326 audit(1765071077.218:17240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22638 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 383.905385][ T29] audit: type=1326 audit(1765071077.218:17241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22638 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 383.951082][ T29] audit: type=1326 audit(1765071077.256:17242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22638 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 383.974681][ T29] audit: type=1326 audit(1765071077.256:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22638 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 383.974710][ T29] audit: type=1326 audit(1765071077.256:17244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22638 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 383.974826][ T29] audit: type=1326 audit(1765071077.265:17245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22638 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 383.974849][ T29] audit: type=1326 audit(1765071077.274:17246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22638 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 383.974928][ T29] audit: type=1326 audit(1765071077.274:17247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22638 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 383.974955][ T29] audit: type=1326 audit(1765071077.274:17248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22638 comm="syz.2.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0574ef749 code=0x7ffc0000 [ 384.002388][T22639] loop2: detected capacity change from 0 to 512 [ 384.141389][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.155342][T22639] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.5101: EA inode hash validation failed [ 384.170145][T22639] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.5101: corrupted inode contents [ 384.182901][T22639] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.5101: mark_inode_dirty error [ 384.210933][T22639] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.5101: corrupted inode contents [ 384.225947][T22647] loop1: detected capacity change from 0 to 512 [ 384.227928][T22639] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.5101: mark_inode_dirty error [ 384.236389][T22647] ext4: Bad value for 'max_batch_time' [ 384.251990][T22639] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.5101: mark inode dirty (error -117) [ 384.270287][T22649] netlink: 'syz.1.5105': attribute type 29 has an invalid length. [ 384.281745][T22639] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 384.297073][T22639] EXT4-fs (loop2): 1 orphan inode deleted [ 384.304643][T22651] 9pnet_fd: Insufficient options for proto=fd [ 384.308144][T22639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.393631][T22657] loop1: detected capacity change from 0 to 512 [ 384.402644][T22658] tipc: Started in network mode [ 384.407587][T22658] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 384.417878][T22658] tipc: Enabled bearer , priority 10 [ 384.425583][T22657] EXT4-fs (loop1): 1 orphan inode deleted [ 384.432027][T22657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.444556][ T31] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 384.445832][T22657] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.491766][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 384.491879][ T3604] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 384.804383][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.067963][T22669] loop2: detected capacity change from 0 to 512 [ 385.093380][T22669] EXT4-fs (loop2): 1 orphan inode deleted [ 385.094020][T22669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.097768][T22669] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.117393][T18700] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 1 [ 385.176140][ T3604] Bluetooth: hci0: command 0x1003 tx timeout [ 385.176524][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 385.286810][T22677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5115'. [ 385.311281][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.325032][T22679] netlink: 'syz.1.5116': attribute type 29 has an invalid length. [ 385.395184][T22686] loop0: detected capacity change from 0 to 512 [ 385.402750][T22686] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 385.418678][T22686] EXT4-fs (loop0): 1 truncate cleaned up [ 385.419052][T22686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.624455][ T3425] tipc: Node number set to 4269801491 [ 385.624825][T13875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.732193][T22693] loop9: detected capacity change from 0 to 7 [ 385.732351][T22693] buffer_io_error: 18 callbacks suppressed [ 385.732362][T22693] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.732485][T22693] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.732499][T22693] loop9: unable to read partition table [ 385.732515][T22693] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 385.732515][T22693] ) failed (rc=-5) [ 385.733470][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.734765][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.734833][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.734907][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.735043][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.774120][ T3561] Bluetooth: hci2: command 0x1003 tx timeout [ 385.774300][ T4724] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 385.791322][T22709] erspan0: entered promiscuous mode [ 385.834726][T22714] loop4: detected capacity change from 0 to 512 [ 385.905540][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5130'. [ 385.929742][T22721] netlink: 'syz.0.5129': attribute type 29 has an invalid length. [ 385.976929][T22714] EXT4-fs (loop4): 1 orphan inode deleted [ 385.987283][T22714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.999909][ T1842] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 386.016602][T22725] loop1: detected capacity change from 0 to 512 [ 386.024475][T22714] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.040379][T22725] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 386.058786][T22725] EXT4-fs (loop1): 1 truncate cleaned up [ 386.065661][T22725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.082147][T13055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.265206][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.303835][T18412] Bluetooth: hci0: Frame reassembly failed (-84) [ 386.363911][T22749] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 386.377931][T22749] EXT4-fs (loop3): 1 truncate cleaned up [ 386.378499][T22749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.642432][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.684204][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 386.684237][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 386.684250][ T3513] loop9: unable to read partition table [ 386.685619][ T3513] Buffer I/O error on dev loop9, logical block 0, async page read [ 386.784626][T22740] loop9: unable to read partition table [ 386.791889][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.801695][T22740] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 386.801695][T22740] ) failed (rc=-5) [ 386.924114][T22766] FAULT_INJECTION: forcing a failure. [ 386.924114][T22766] name failslab, interval 1, probability 0, space 0, times 0 [ 386.936767][T22766] CPU: 0 UID: 0 PID: 22766 Comm: syz.2.5146 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 386.936877][T22766] Tainted: [W]=WARN [ 386.936884][T22766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.936896][T22766] Call Trace: [ 386.936901][T22766] [ 386.936908][T22766] __dump_stack+0x1d/0x30 [ 386.936964][T22766] dump_stack_lvl+0xe8/0x140 [ 386.936985][T22766] dump_stack+0x15/0x1b [ 386.937036][T22766] should_fail_ex+0x265/0x280 [ 386.937055][T22766] should_failslab+0x8c/0xb0 [ 386.937075][T22766] kmem_cache_alloc_noprof+0x69/0x4b0 [ 386.937129][T22766] ? skb_clone+0x151/0x1f0 [ 386.937153][T22766] skb_clone+0x151/0x1f0 [ 386.937171][T22766] __netlink_deliver_tap+0x2c9/0x500 [ 386.937274][T22766] netlink_unicast+0x66b/0x690 [ 386.937294][T22766] netlink_sendmsg+0x58b/0x6b0 [ 386.937318][T22766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.937352][T22766] __sock_sendmsg+0x145/0x180 [ 386.937391][T22766] ____sys_sendmsg+0x31e/0x4a0 [ 386.937413][T22766] ___sys_sendmsg+0x17b/0x1d0 [ 386.937440][T22766] __x64_sys_sendmsg+0xd4/0x160 [ 386.937472][T22766] x64_sys_call+0x17ba/0x3000 [ 386.937517][T22766] do_syscall_64+0xd8/0x2a0 [ 386.937541][T22766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.937558][T22766] RIP: 0033:0x7fc0574ef749 [ 386.937625][T22766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.937641][T22766] RSP: 002b:00007fc055f4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.937659][T22766] RAX: ffffffffffffffda RBX: 00007fc057745fa0 RCX: 00007fc0574ef749 [ 386.937673][T22766] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 386.937686][T22766] RBP: 00007fc055f4f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.937699][T22766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.937712][T22766] R13: 00007fc057746038 R14: 00007fc057745fa0 R15: 00007ffccf5a4778 [ 386.937873][T22766] [ 387.189979][T22764] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.202629][T22758] loop9: unable to read partition table [ 387.206570][T22764] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 387.208645][T22758] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 387.208645][T22758] ) failed (rc=-5) [ 387.624212][T14994] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.677148][T22798] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 387.716947][T22798] EXT4-fs (loop4): 1 truncate cleaned up [ 387.730922][T22802] lo speed is unknown, defaulting to 1000 [ 387.753624][T22798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.948001][T14106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.989944][T22831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.079648][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.510536][ T3561] Bluetooth: hci0: command 0x1003 tx timeout [ 388.522460][ T4724] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 388.651882][T22890] lo speed is unknown, defaulting to 1000 [ 388.769301][T22901] set_capacity_and_notify: 9 callbacks suppressed [ 388.769318][T22901] loop1: detected capacity change from 0 to 2048 [ 388.799620][ T3513] loop1: p1 < > p4 [ 388.806103][ T3513] loop1: p4 size 8388608 extends beyond EOD, truncated [ 388.828311][ T4778] ================================================================== [ 388.836404][ T4778] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 388.843347][ T4778] [ 388.845656][ T4778] write to 0xffff8881046e66bc of 4 bytes by task 3513 on cpu 0: [ 388.853262][ T4778] shmem_mknod+0x143/0x170 [ 388.857668][ T4778] shmem_create+0x34/0x50 [ 388.861986][ T4778] path_openat+0x1115/0x23b0 [ 388.866570][ T4778] do_filp_open+0x109/0x230 [ 388.871063][ T4778] do_sys_openat2+0xa6/0x150 [ 388.875650][ T4778] __x64_sys_openat+0xf2/0x120 [ 388.880408][ T4778] x64_sys_call+0x2b07/0x3000 [ 388.885073][ T4778] do_syscall_64+0xd8/0x2a0 [ 388.889566][ T4778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.895452][ T4778] [ 388.897760][ T4778] read to 0xffff8881046e66bc of 4 bytes by task 4778 on cpu 1: [ 388.905284][ T4778] fill_mg_cmtime+0x5b/0x260 [ 388.909861][ T4778] generic_fillattr+0x24a/0x340 [ 388.914697][ T4778] shmem_getattr+0x181/0x200 [ 388.919276][ T4778] vfs_getattr_nosec+0x146/0x1e0 [ 388.924197][ T4778] vfs_statx+0x113/0x390 [ 388.928427][ T4778] vfs_fstatat+0x115/0x170 [ 388.932831][ T4778] __se_sys_newfstatat+0x55/0x260 [ 388.937845][ T4778] __x64_sys_newfstatat+0x55/0x70 [ 388.942856][ T4778] x64_sys_call+0x111f/0x3000 [ 388.947521][ T4778] do_syscall_64+0xd8/0x2a0 [ 388.952016][ T4778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.957891][ T4778] [ 388.960197][ T4778] value changed: 0x325860ee -> 0x325c3e24 [ 388.965894][ T4778] [ 388.968196][ T4778] Reported by Kernel Concurrency Sanitizer on: [ 388.974328][ T4778] CPU: 1 UID: 0 PID: 4778 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 388.985158][ T4778] Tainted: [W]=WARN [ 388.988938][ T4778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.998970][ T4778] ================================================================== [ 389.007127][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 389.007139][ T29] audit: type=1326 audit(1765071081.830:17417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22912 comm="syz.4.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 389.036876][ T29] audit: type=1326 audit(1765071081.830:17418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22912 comm="syz.4.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 389.060528][ T29] audit: type=1326 audit(1765071081.830:17419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22912 comm="syz.4.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 389.084077][ T29] audit: type=1326 audit(1765071081.830:17420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22912 comm="syz.4.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e77cf749 code=0x7ffc0000 [ 389.149794][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 389.160713][T22901] loop1: p1 < > p4 [ 389.166487][T22901] loop1: p4 size 8388608 extends beyond EOD, truncated