last executing test programs: 4m45.892278507s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x14) unshare(0x40600) syncfs(0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4m30.742485969s ago: executing program 32 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x14) unshare(0x40600) syncfs(0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4m10.373802563s ago: executing program 1 (id=235): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 4m8.76055685s ago: executing program 1 (id=243): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x3, 0x41, 0x1}) 4m8.223488666s ago: executing program 1 (id=246): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x200}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 4m6.896454079s ago: executing program 1 (id=253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) 4m6.083539177s ago: executing program 1 (id=256): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f0000000000)=ANY=[], 0x0, 0x728, &(0x7f0000000b80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) open$dir(0x0, 0xc000, 0x2) 4m5.482167711s ago: executing program 1 (id=259): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0x8}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0x10}, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@union={0xb, 0x8, 0x0, 0x5, 0x0, 0x8, [{0xa, 0x2, 0x2af}, {0x9, 0x4, 0xbd547d1}, {0xb, 0x5, 0x1ac}, {0x10, 0x2, 0x6}, {0x6, 0x5, 0x40}, {0x10, 0x4, 0x2}, {0xe, 0x2, 0x2}, {0x10, 0x1, 0x2}]}]}, {0x0, [0x51, 0x2e]}}, 0x0, 0x88, 0x0, 0x0, 0x6, 0x10000, @value=r0}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r6, 0x0) 3m50.276023969s ago: executing program 33 (id=259): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0x8}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0x10}, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@union={0xb, 0x8, 0x0, 0x5, 0x0, 0x8, [{0xa, 0x2, 0x2af}, {0x9, 0x4, 0xbd547d1}, {0xb, 0x5, 0x1ac}, {0x10, 0x2, 0x6}, {0x6, 0x5, 0x40}, {0x10, 0x4, 0x2}, {0xe, 0x2, 0x2}, {0x10, 0x1, 0x2}]}]}, {0x0, [0x51, 0x2e]}}, 0x0, 0x88, 0x0, 0x0, 0x6, 0x10000, @value=r0}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r6, 0x0) 57.133993195s ago: executing program 6 (id=1587): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 56.864340973s ago: executing program 6 (id=1591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) close(r2) 56.664574608s ago: executing program 6 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/An1SAonIuTk3VwOFwURzOoJFFRCNEu4qCgiJgpghC5gKCDzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ5c72qXQpTlK39vb6x8QPh94eXjf95s8v2f4jb/gl9YT/3S73UxEdC8d/9d9rXzhyY3Sg/LLiEy8jojeP3+bOrjJpMR//3oz7dfTfmz0cqd/53G2tfZi99ab+UZPuv+W1pXxdt+Jh+PMTeQWrn7/US0O1HIfV4v1zZ8ry88nt/Pl9rNGc+pp9tG7lFtM9WKqn6MWX+NTvI1KVOJ9VE+p/0hr487+9WJr5sP9vUJncO5uypVOOOdR+3/pHXrVrD+8PX1t+F5tdqm8deEwV/kfbxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOdvIrdw9fuPanGglvu4Wqxv/lxZfj65nS+3nzWaU0+zj96l3GKqF1P9HLX4Gp/ibVSiEu+jekr9R1obd/avF1szH+7vFTqDc3dTrnTCOY/a/0vv0Ktm/eHt6WvD92qzS+WtC4e5yqUzegAAAAAAAAAAAAAAAAAAAACIiHzhyY3Sg/LLiEy8jojf//6j5+C8m753z6TczVTX0/nY6OVO/87jbGvtxe6tN/ONv9L5t7SujLf7zn0Yju3fAAAA//8CE5V6") 56.187089026s ago: executing program 6 (id=1603): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000140)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 55.730667168s ago: executing program 6 (id=1606): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getrandom(0x0, 0x0, 0x2) 55.276651305s ago: executing program 6 (id=1611): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r4}, 0xc) 40.019988516s ago: executing program 34 (id=1611): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r4}, 0xc) 8.916504619s ago: executing program 0 (id=1945): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x12, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3, 0x4000}}, 0x20) 8.768295272s ago: executing program 4 (id=1948): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 8.498798831s ago: executing program 0 (id=1949): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000e263c7f393efd41bffa52c93debe602cba977ab06c750c964d7a1bdf2621d7e92632eea92124edd71038ee7a4b7b411ef9a0f69368f12dba37ed07ef485e15f33fa596f43a74fa49531ee7bf1ebb776fa72c320c340eff507a75767e866d805d4e669a23", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000ac0)=""/111, &(0x7f0000000b40)=0x6f) 8.343716174s ago: executing program 4 (id=1952): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 4.510615355s ago: executing program 5 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x7, 0x0, &(0x7f0000000c40)="63eced8e46dc3f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.451200793s ago: executing program 7 (id=1974): unshare(0x28000600) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 4.194815541s ago: executing program 5 (id=1976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x4000000000000004}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) 3.9791896s ago: executing program 5 (id=1978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_mb_release_inode_pa\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 3.882695818s ago: executing program 7 (id=1979): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 3.681218095s ago: executing program 8 (id=1980): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) 3.224321466s ago: executing program 7 (id=1981): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x28, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) 3.179272004s ago: executing program 8 (id=1982): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000000)="5cdd30", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0}, 0x4c) r0 = syz_io_uring_setup(0xd38, &(0x7f0000000300)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.173009364s ago: executing program 4 (id=1983): inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) socket(0x10, 0xa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400009bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r8, 0x0, 0x7) kcmp(r3, r2, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000000)=ANY=[@ANYBLOB="6dc2084c6176653d7374617469632c00"]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) cachestat(r1, &(0x7f0000000300)={0x8, 0x40000}, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4e, 0x10, 0x1, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 3.059438026s ago: executing program 5 (id=1984): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 2.670976254s ago: executing program 8 (id=1985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.482795634s ago: executing program 2 (id=1986): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$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") close(r2) 2.439253244s ago: executing program 7 (id=1987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES16=r1], 0x0, 0x162, 0x0, 0x0, 0x41100, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf09000000000000550901"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1e000000000000000500000006", @ANYRES8=r8, @ANYRESDEC=r7, @ANYRESOCT=r4, @ANYBLOB="003d73771df3f643d0711c3e1487c7e75bd2fff488156ad33def123c8c21e1cbe80096e37549e9354f006ae03ea17447b0386c773362e513365fc9504ce8e7100128f9f1f34dd90556f3fb0e586d4772f359f6be1d81b583d072150828c49163afb67b1d58cc368c5433a5966b5d1bc45136a050ae108883950a6e3813296eb8647900db5b93df1d48d7286bfb4d496185471cf1d02a8e05320569721618389e9ca1da57c1d5c9a8ac0277b85453f40b1c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000680), &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085", @ANYRES32, @ANYRES64=r10], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@loopback, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast2, 0x7, 0xe, 0xe, 0x0, 0x2, 0x10008}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000000480)={0x3, 'veth1_to_bridge\x00', {0x9}, 0x4}) lsm_get_self_attr(0x67, 0x0, &(0x7f00000001c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.326586228s ago: executing program 4 (id=1988): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2.046945943s ago: executing program 8 (id=1989): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) syz_open_procfs(0x0, &(0x7f0000000600)='ns\x00') 2.046679616s ago: executing program 0 (id=1990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x4000000000000004}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) 1.962153198s ago: executing program 2 (id=1991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 1.669859216s ago: executing program 4 (id=1992): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fcntl$dupfd(r0, 0x0, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1.619044965s ago: executing program 8 (id=1993): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0xb, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a623, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000500)) getsockname$llc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd144, 0x0, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0xddd3, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r4 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00f8ff1f000103feffffffe8080000000000000000000002000000080001000000000008000f0005000000"], 0x2c}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) getpgid(r4) 1.522800391s ago: executing program 0 (id=1994): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_timedreceive(0xffffffffffffffff, 0x0, 0xfffffffffffffee3, 0x1, 0x0) 1.34335688s ago: executing program 2 (id=1995): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) 1.268352511s ago: executing program 0 (id=1996): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_mb_release_inode_pa\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 1.146873078s ago: executing program 5 (id=1997): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000000)="5cdd30", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0}, 0x4c) r0 = syz_io_uring_setup(0xd38, &(0x7f0000000300)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.127351956s ago: executing program 2 (id=1998): unshare(0x22020600) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) 968.763528ms ago: executing program 7 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008"], 0x60}}, 0xc024) 674.7705ms ago: executing program 2 (id=2000): inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) socket(0x10, 0xa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400009bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r8, 0x0, 0x7) kcmp(r3, r2, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000000)=ANY=[@ANYBLOB="6dc2084c6176653d7374617469632c00"]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) cachestat(r1, &(0x7f0000000300)={0x8, 0x40000}, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4e, 0x10, 0x1, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 473.60718ms ago: executing program 0 (id=2001): syz_io_uring_complete(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x4d8b, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240000c4) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 417.101173ms ago: executing program 7 (id=2002): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") 266.298876ms ago: executing program 5 (id=2003): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") close(r2) 69.269701ms ago: executing program 8 (id=2004): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4f, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x8}]}) write$char_usb(r0, 0x0, 0x0) 298.119µs ago: executing program 2 (id=2005): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=2006): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='ns\x00') kernel console output (not intermixed with test programs): 000000000000003' [ 261.520793][ T8470] loop4: detected capacity change from 0 to 2048 [ 261.620022][ T8470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 261.751670][ T8462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.772636][ T8462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.792173][ T8462] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.828887][ T8462] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 261.848512][ T8462] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 261.871042][ T8462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.889306][ T8480] fuse: Unknown parameter 'user_id00000000000000000000' [ 261.974364][ T8470] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 261.998454][ T8470] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 226 with error 28 [ 262.072139][ T8470] EXT4-fs (loop4): This should not happen!! Data will be lost [ 262.072139][ T8470] [ 262.127330][ T8470] EXT4-fs (loop4): Total free blocks count 0 [ 262.152115][ T8470] EXT4-fs (loop4): Free/Dirty block details [ 262.162879][ T8470] EXT4-fs (loop4): free_blocks=2415919104 [ 262.172700][ T8470] EXT4-fs (loop4): dirty_blocks=240 [ 262.234948][ T8470] EXT4-fs (loop4): Block reservation details [ 262.241051][ T8470] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 262.293888][ T8487] random: crng reseeded on system resumption [ 262.593875][ T8489] tmpfs: Unknown parameter 'mÂLave' [ 262.802592][ T8501] fuse: Unknown parameter '0x0000000000000003' [ 262.890413][ T991] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 263.072857][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 263.250789][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.913'. [ 263.616913][ T8521] fuse: Unknown parameter 'user_id00000000000000000000' [ 263.792320][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 263.798464][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 263.917908][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.924850][ T5852] Bluetooth: hci6: command 0x0c1a tx timeout [ 263.930875][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 264.072298][ T8528] netlink: 'syz.7.918': attribute type 9 has an invalid length. [ 264.132179][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.918'. [ 264.195263][ T8525] loop6: detected capacity change from 0 to 2048 [ 264.355627][ T7905] loop6: p1 p2 p3 [ 264.467799][ T8525] loop6: p1 p2 p3 [ 264.705413][ T30] kauditd_printk_skb: 228 callbacks suppressed [ 264.705439][ T30] audit: type=1326 audit(1761265676.924:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 264.769107][ T8542] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 264.785731][ T30] audit: type=1326 audit(1761265676.954:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 264.797245][ T7941] udevd[7941]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 264.822002][ T8060] udevd[8060]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 264.842424][ T7905] udevd[7905]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 264.920390][ T30] audit: type=1326 audit(1761265676.954:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 265.011324][ T30] audit: type=1326 audit(1761265676.954:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 265.051216][ T7941] udevd[7941]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 265.057427][ T8060] udevd[8060]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 265.071941][ T7905] udevd[7905]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 265.115168][ T30] audit: type=1326 audit(1761265676.954:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 265.217066][ T30] audit: type=1326 audit(1761265676.964:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 265.297437][ T8549] fuse: Unknown parameter '0x0000000000000003' [ 265.310673][ T30] audit: type=1326 audit(1761265676.964:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 265.346217][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.355546][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.367986][ T30] audit: type=1326 audit(1761265676.964:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 265.426053][ T8551] loop0: detected capacity change from 0 to 1024 [ 265.445118][ T30] audit: type=1326 audit(1761265676.964:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 265.470309][ T30] audit: type=1326 audit(1761265676.964:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 265.500438][ T8551] EXT4-fs: inline encryption not supported [ 265.516298][ T8551] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 265.638081][ T8551] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.930: lblock 1 mapped to illegal pblock 1 (length 1) [ 265.688289][ T8558] fuse: Unknown parameter 'user_id00000000000000000000' [ 265.722294][ T8551] EXT4-fs (loop0): Remounting filesystem read-only [ 265.752362][ T8551] EXT4-fs (loop0): 1 orphan inode deleted [ 265.810617][ T8551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.061097][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.151618][ T8568] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 266.315801][ T8572] netlink: 'syz.0.937': attribute type 4 has an invalid length. [ 266.750411][ T8583] netlink: 'syz.7.941': attribute type 58 has an invalid length. [ 266.762139][ T8583] netlink: 20 bytes leftover after parsing attributes in process `syz.7.941'. [ 267.364736][ T8592] fuse: Bad value for 'fd' [ 268.348692][ T8609] Bluetooth: MGMT ver 1.23 [ 268.812512][ T8624] fuse: Bad value for 'fd' [ 269.420909][ T8639] loop6: detected capacity change from 0 to 2048 [ 269.858517][ T8649] loop0: detected capacity change from 0 to 512 [ 269.908691][ T8649] EXT4-fs: inline encryption not supported [ 269.926444][ T8650] netlink: 172 bytes leftover after parsing attributes in process `syz.5.970'. [ 269.965485][ T8649] ext4: Bad value for 'resuid' [ 269.983055][ T8649] ext4: Bad value for 'resuid' [ 270.097580][ T7905] loop6: p1 p2 p3 [ 270.450321][ T7905] udevd[7905]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 270.490619][ T7941] udevd[7941]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 270.533896][ T8060] udevd[8060]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 270.641618][ T1204] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 270.702915][ T1204] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.204257][ T8670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.211591][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 272.211616][ T30] audit: type=1326 audit(1761265684.424:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 272.254150][ T8670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.260320][ T8670] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.332477][ T8670] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 272.338620][ T8670] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 272.351812][ T8680] tmpfs: Unknown parameter 'mÂLave' [ 272.366369][ T30] audit: type=1326 audit(1761265684.424:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 272.411497][ T8670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.423232][ T30] audit: type=1326 audit(1761265684.424:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 272.446029][ T30] audit: type=1326 audit(1761265684.424:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 272.471100][ T30] audit: type=1326 audit(1761265684.424:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 272.542157][ T30] audit: type=1326 audit(1761265684.424:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 272.617384][ T30] audit: type=1326 audit(1761265684.424:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 272.724468][ T30] audit: type=1326 audit(1761265684.424:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 272.786321][ T8686] loop5: detected capacity change from 0 to 2048 [ 272.797918][ T8687] loop0: detected capacity change from 0 to 2048 [ 272.818861][ T30] audit: type=1326 audit(1761265684.544:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 272.874376][ T7905] loop5: p1 p2 p3 [ 272.957796][ T8687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 272.981582][ T30] audit: type=1326 audit(1761265684.544:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 273.051686][ T8686] loop5: p1 p2 p3 [ 273.457259][ T7941] udevd[7941]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 273.470336][ T8060] udevd[8060]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 273.486218][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 273.504472][ T7905] udevd[7905]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 273.645247][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 273.777698][ T7905] udevd[7905]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 273.781566][ T7989] udevd[7989]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 273.798620][ T8060] udevd[8060]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 274.352315][ T5852] Bluetooth: hci6: command 0x0c1a tx timeout [ 274.358566][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 274.365091][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 274.365110][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 274.392355][ T5963] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 274.432177][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.454874][ T5963] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.396220][ T8735] loop0: detected capacity change from 0 to 4096 [ 275.735528][ T8735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.564832][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.602714][ T8744] sctp: [Deprecated]: syz.5.1007 (pid 8744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.602714][ T8744] Use struct sctp_sack_info instead [ 276.762785][ T8734] warn_alloc: 1 callbacks suppressed [ 276.762811][ T8734] syz.7.1004: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.814541][ T8734] CPU: 1 UID: 0 PID: 8734 Comm: syz.7.1004 Not tainted syzkaller #0 PREEMPT(full) [ 276.814599][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.814623][ T8734] Call Trace: [ 276.814636][ T8734] [ 276.814650][ T8734] dump_stack_lvl+0x16c/0x1f0 [ 276.814701][ T8734] warn_alloc+0x248/0x3a0 [ 276.814757][ T8734] ? __pfx_warn_alloc+0x10/0x10 [ 276.814832][ T8734] ? xskq_create+0xfb/0x1d0 [ 276.814892][ T8734] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.814940][ T8734] ? __vmalloc_node_noprof+0xad/0xf0 [ 276.814997][ T8734] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 276.815063][ T8734] ? xskq_create+0xfb/0x1d0 [ 276.815137][ T8734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.815200][ T8734] ? xskq_create+0xfb/0x1d0 [ 276.815266][ T8734] vmalloc_user_noprof+0x9e/0xe0 [ 276.815307][ T8734] ? xskq_create+0xfb/0x1d0 [ 276.815371][ T8734] xskq_create+0xfb/0x1d0 [ 276.815438][ T8734] xsk_setsockopt+0x792/0x9a0 [ 276.815505][ T8734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.815574][ T8734] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.815621][ T8734] ? find_held_lock+0x2b/0x80 [ 276.815677][ T8734] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.815723][ T8734] ? aa_sock_opt_perm+0xfd/0x1c0 [ 276.815780][ T8734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.815844][ T8734] do_sock_setsockopt+0xf3/0x1d0 [ 276.815896][ T8734] __sys_setsockopt+0x1a0/0x230 [ 276.815969][ T8734] __x64_sys_setsockopt+0xbd/0x160 [ 276.816033][ T8734] ? do_syscall_64+0x91/0xfa0 [ 276.816079][ T8734] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.816126][ T8734] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.816171][ T8734] do_syscall_64+0xcd/0xfa0 [ 276.816219][ T8734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.816259][ T8734] RIP: 0033:0x7fcce898efc9 [ 276.816288][ T8734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.816327][ T8734] RSP: 002b:00007fcce9781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.816364][ T8734] RAX: ffffffffffffffda RBX: 00007fcce8be5fa0 RCX: 00007fcce898efc9 [ 276.816391][ T8734] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 276.816415][ T8734] RBP: 00007fcce8a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 276.816440][ T8734] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 276.816465][ T8734] R13: 00007fcce8be6038 R14: 00007fcce8be5fa0 R15: 00007ffd845468a8 [ 276.816524][ T8734] [ 276.818805][ T8734] Mem-Info: [ 277.105890][ T8734] active_anon:6819 inactive_anon:0 isolated_anon:0 [ 277.105890][ T8734] active_file:4108 inactive_file:39983 isolated_file:0 [ 277.105890][ T8734] unevictable:768 dirty:248 writeback:0 [ 277.105890][ T8734] slab_reclaimable:11021 slab_unreclaimable:109889 [ 277.105890][ T8734] mapped:34740 shmem:2704 pagetables:1429 [ 277.105890][ T8734] sec_pagetables:0 bounce:0 [ 277.105890][ T8734] kernel_misc_reclaimable:0 [ 277.105890][ T8734] free:1214749 free_pcp:22992 free_cma:0 [ 277.204581][ T8734] Node 0 active_anon:24476kB inactive_anon:0kB active_file:16432kB inactive_file:159728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138960kB dirty:988kB writeback:0kB shmem:6380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13032kB pagetables:5484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 277.297856][ T8734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 277.368765][ T8734] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.467817][ T8734] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 277.487417][ T8734] Node 0 DMA32 free:916148kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25368kB inactive_anon:0kB active_file:16432kB inactive_file:159700kB unevictable:1536kB writepending:980kB zspages:0kB present:3129332kB managed:2545020kB mlocked:0kB bounce:0kB free_pcp:77924kB local_pcp:46832kB free_cma:0kB [ 277.561489][ T8734] lowmem_reserve[]: 0 0 1 1 1 [ 277.571612][ T8734] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.672291][ T8734] lowmem_reserve[]: 0 0 0 0 0 [ 277.677101][ T8734] Node 1 Normal free:3891576kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18624kB local_pcp:10880kB free_cma:0kB [ 277.762145][ T8734] lowmem_reserve[]: 0 0 0 0 0 [ 277.766963][ T8734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.823729][ T8734] Node 0 DMA32: 2*4kB (ME) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 1*512kB (M) 1*1024kB (E) 3*2048kB (UME) 218*4096kB (M) = 901720kB [ 277.897978][ T8734] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 277.942158][ T8734] Node 1 Normal: 184*4kB (UME) 53*8kB (UME) 47*16kB (UME) 120*32kB (UME) 32*64kB (UME) 6*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891576kB [ 278.003243][ T8734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.014721][ T8734] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 278.024319][ T8734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.046990][ T8734] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 278.062319][ T8734] 45730 total pagecache pages [ 278.080776][ T8734] 0 pages in swap cache [ 278.092493][ T8734] Free swap = 124996kB [ 278.099029][ T8734] Total swap = 124996kB [ 278.103857][ T8734] 2097051 pages RAM [ 278.107832][ T8734] 0 pages HighMem/MovableOnly [ 278.130234][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 278.130259][ T30] audit: type=1326 audit(1761265690.344:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.162283][ T8734] 428706 pages reserved [ 278.166625][ T8734] 0 pages cma reserved [ 278.173107][ T30] audit: type=1326 audit(1761265690.344:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.231436][ T30] audit: type=1326 audit(1761265690.384:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.289983][ T30] audit: type=1326 audit(1761265690.384:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.352164][ T30] audit: type=1326 audit(1761265690.384:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.417082][ T30] audit: type=1326 audit(1761265690.384:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.468015][ T30] audit: type=1326 audit(1761265690.384:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.546836][ T30] audit: type=1326 audit(1761265690.384:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.579678][ T30] audit: type=1326 audit(1761265690.384:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.609560][ T30] audit: type=1326 audit(1761265690.384:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8775 comm="syz.0.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 278.812661][ T8769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.818930][ T8769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.829273][ T8769] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.842483][ T8769] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 278.862381][ T8769] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 278.886146][ T8769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.905630][ T8771] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 279.139199][ T8791] loop7: detected capacity change from 0 to 512 [ 279.212525][ T8791] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 279.248099][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 279.256599][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 279.272183][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 279.290121][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 279.309367][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 279.326306][ T8795] loop0: detected capacity change from 0 to 2048 [ 279.338859][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 279.358996][ T8791] EXT4-fs (loop7): 1 truncate cleaned up [ 279.361280][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 279.374463][ T8791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.450242][ T8795] loop0: p1 p2 p3 [ 279.461942][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 279.489239][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 279.506600][ T3403] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 279.546803][ T3403] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 279.568592][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.794314][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1031'. [ 279.893706][ T8809] fuse: Unknown parameter '0x0000000000000003' [ 280.112207][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 280.832334][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 280.832350][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 280.912941][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 280.912968][ T5852] Bluetooth: hci6: command 0x0c1a tx timeout [ 280.919091][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 281.029266][ T8835] loop7: detected capacity change from 0 to 2048 [ 281.075821][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 281.152068][ T8835] loop7: p1 p2 p3 [ 281.507142][ T8845] tipc: Can't bind to reserved service type 1 [ 281.660675][ T8850] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 281.982564][ T8858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'. [ 282.172027][ T8864] netlink: 'syz.7.1057': attribute type 16 has an invalid length. [ 282.199447][ T8866] netlink: 'syz.5.1059': attribute type 4 has an invalid length. [ 282.208379][ T8864] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1057'. [ 282.341366][ T8869] loop4: detected capacity change from 0 to 512 [ 282.373364][ T8869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.428511][ T8867] tmpfs: Unknown parameter 'mÂLave' [ 282.455741][ T8869] EXT4-fs (loop4): 1 truncate cleaned up [ 282.481418][ T8869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.622601][ T8876] loop7: detected capacity change from 0 to 2048 [ 282.728650][ T8876] loop7: p1 p2 p3 [ 282.890505][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.192816][ T30] kauditd_printk_skb: 237 callbacks suppressed [ 283.192842][ T30] audit: type=1326 audit(1761265695.404:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 283.253137][ T30] audit: type=1326 audit(1761265695.444:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 283.275882][ T30] audit: type=1326 audit(1761265695.444:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 283.330491][ T30] audit: type=1326 audit(1761265695.444:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a2018d810 code=0x7ffc0000 [ 283.372700][ T30] audit: type=1326 audit(1761265695.454:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a2018ebcb code=0x7ffc0000 [ 283.420566][ T30] audit: type=1326 audit(1761265695.454:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a2018ebcb code=0x7ffc0000 [ 283.486763][ T30] audit: type=1326 audit(1761265695.454:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a2018ebcb code=0x7ffc0000 [ 283.513118][ T3403] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 283.560518][ T30] audit: type=1326 audit(1761265695.454:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a2018ebcb code=0x7ffc0000 [ 283.616185][ T30] audit: type=1326 audit(1761265695.584:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a2018ebcb code=0x7ffc0000 [ 283.670294][ T30] audit: type=1326 audit(1761265695.664:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a2018ebcb code=0x7ffc0000 [ 283.703528][ T3403] usb 5-1: device descriptor read/64, error -71 [ 283.962966][ T3403] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 284.122226][ T3403] usb 5-1: device descriptor read/64, error -71 [ 284.243600][ T3403] usb usb5-port1: attempt power cycle [ 284.299527][ T8922] tipc: Started in network mode [ 284.304606][ T8922] tipc: Node identity ac14140f, cluster identity 4711 [ 284.311666][ T8922] tipc: New replicast peer: 255.255.255.255 [ 284.318695][ T8922] tipc: Enabled bearer , priority 10 [ 284.388175][ T8925] wg2: entered promiscuous mode [ 284.401016][ T8925] wg2: entered allmulticast mode [ 284.612205][ T3403] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.663341][ T3403] usb 5-1: device descriptor read/8, error -71 [ 284.718115][ T8930] netlink: 'syz.5.1086': attribute type 1 has an invalid length. [ 284.924189][ T3403] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 285.002845][ T3403] usb 5-1: device descriptor read/8, error -71 [ 285.114567][ T3403] usb usb5-port1: unable to enumerate USB device [ 285.123098][ T8942] netlink: 'syz.6.1092': attribute type 4 has an invalid length. [ 285.292048][ T8945] loop2: detected capacity change from 0 to 2048 [ 285.377856][ T8945] loop2: p1 < > p4 [ 285.412668][ T8945] loop2: p4 size 8388608 extends beyond EOD, truncated [ 285.443281][ T9] tipc: Node number set to 2886997007 [ 286.094019][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1104'. [ 286.142939][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1104'. [ 286.532772][ T8982] netlink: 'syz.7.1110': attribute type 4 has an invalid length. [ 286.574715][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1111'. [ 287.104241][ T9002] loop5: detected capacity change from 0 to 512 [ 287.150316][ T9002] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 287.253308][ T9002] EXT4-fs (loop5): 1 truncate cleaned up [ 287.292360][ T9002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.463361][ T9011] hub 2-0:1.0: USB hub found [ 287.493844][ T9011] hub 2-0:1.0: 1 port detected [ 287.811724][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.731562][ T9023] loop5: detected capacity change from 0 to 512 [ 288.808189][ T9023] ext3: Unknown parameter 'hash' [ 290.256967][ T9052] loop4: detected capacity change from 0 to 512 [ 290.342138][ T9052] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 290.412187][ T9052] EXT4-fs (loop4): 1 truncate cleaned up [ 290.425137][ T9052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.821757][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.010904][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1142'. [ 291.186782][ T30] kauditd_printk_skb: 339 callbacks suppressed [ 291.186809][ T30] audit: type=1326 audit(1761265703.404:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 291.334170][ T30] audit: type=1326 audit(1761265703.404:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 291.455207][ T30] audit: type=1326 audit(1761265703.454:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 291.541547][ T30] audit: type=1326 audit(1761265703.454:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 291.618907][ T30] audit: type=1326 audit(1761265703.454:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 291.711921][ T30] audit: type=1326 audit(1761265703.474:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 291.834944][ T30] audit: type=1326 audit(1761265703.984:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 291.914713][ T30] audit: type=1326 audit(1761265703.994:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 292.423518][ T9090] Falling back ldisc for ttyS3. [ 292.442021][ T9093] tipc: Enabled bearer , priority 0 [ 292.481801][ T9093] syzkaller0: entered promiscuous mode [ 292.512170][ T9093] syzkaller0: entered allmulticast mode [ 292.617885][ T9093] tipc: Resetting bearer [ 292.689830][ T9091] tipc: Resetting bearer [ 292.763093][ T9100] 9pnet_fd: Insufficient options for proto=fd [ 292.773143][ T9091] tipc: Disabling bearer [ 293.315467][ T9107] loop5: detected capacity change from 0 to 8192 [ 293.421420][ T30] audit: type=1326 audit(1761265705.634:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 293.511191][ T30] audit: type=1326 audit(1761265705.664:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 294.935858][ T9137] loop4: detected capacity change from 0 to 512 [ 294.980977][ T9141] loop2: detected capacity change from 0 to 512 [ 295.007635][ T9141] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 295.039983][ T9141] EXT4-fs (loop2): 1 truncate cleaned up [ 295.045777][ T9137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.045906][ T9137] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.073667][ T9127] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.094330][ T9127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.112568][ T9127] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 295.130074][ T9127] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 295.146200][ T9141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.162496][ T9127] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 295.178873][ T9127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.295941][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.429467][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.811203][ T9164] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 296.453353][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 297.160846][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 297.167043][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 297.173250][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 297.232959][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 297.248791][ T5852] Bluetooth: hci6: command 0x0c1a tx timeout [ 297.420113][ T9183] netlink: 'syz.4.1187': attribute type 3 has an invalid length. [ 297.427991][ T9183] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1187'. [ 298.153909][ T9198] netlink: 133536 bytes leftover after parsing attributes in process `syz.7.1193'. [ 298.715013][ T9215] loop2: detected capacity change from 0 to 512 [ 298.755942][ T9215] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 298.782668][ T9215] EXT4-fs (loop2): orphan cleanup on readonly fs [ 298.835212][ T9215] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1201: corrupted inode contents [ 298.850406][ T9220] IPv6: Can't replace route, no match found [ 298.942154][ T9215] EXT4-fs (loop2): Remounting filesystem read-only [ 298.987660][ T9215] EXT4-fs (loop2): 1 truncate cleaned up [ 299.024914][ T42] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 299.082132][ T42] __quota_error: 263 callbacks suppressed [ 299.082160][ T42] Quota error (device loop2): write_blk: dquota write failed [ 299.130263][ T42] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 299.167528][ T42] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 299.258808][ T42] Quota error (device loop2): write_blk: dquota write failed [ 299.278970][ T42] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 299.336281][ T42] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 299.353012][ T42] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 299.383262][ T42] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 299.425816][ T9215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.679847][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.808554][ T30] audit: type=1326 audit(1761265712.024:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 299.887815][ T30] audit: type=1326 audit(1761265712.024:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 299.912866][ T30] audit: type=1326 audit(1761265712.024:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 299.936353][ T30] audit: type=1326 audit(1761265712.084:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 300.123694][ T9249] loop5: detected capacity change from 0 to 512 [ 300.231392][ T9249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.312248][ T9249] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.144303][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.599055][ T9278] loop7: detected capacity change from 0 to 1024 [ 301.690056][ T9278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.907667][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.787694][ T9304] loop7: detected capacity change from 0 to 2048 [ 303.001802][ T9313] loop5: detected capacity change from 0 to 512 [ 303.215102][ T9313] EXT4-fs (loop5): 1 orphan inode deleted [ 303.233616][ T9313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.285797][ T9313] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.475583][ T14] EXT4-fs error (device loop5): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 1 [ 303.517722][ T9304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.439188][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.598973][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 304.598998][ T30] audit: type=1326 audit(1761265716.814:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 304.735731][ T30] audit: type=1326 audit(1761265716.844:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 304.765484][ T9328] loop4: detected capacity change from 0 to 4096 [ 304.835953][ T9328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.882153][ T30] audit: type=1326 audit(1761265716.844:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 305.058039][ T30] audit: type=1326 audit(1761265716.854:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 305.205116][ T30] audit: type=1326 audit(1761265716.944:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efff73c1885 code=0x7ffc0000 [ 305.298275][ T30] audit: type=1326 audit(1761265716.954:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 305.428096][ T30] audit: type=1326 audit(1761265716.954:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 305.471393][ T9343] loop7: detected capacity change from 0 to 128 [ 305.828343][ T30] audit: type=1326 audit(1761265717.014:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 305.848800][ T9343] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 306.833403][ T30] audit: type=1326 audit(1761265717.024:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 306.856046][ T30] audit: type=1326 audit(1761265717.024:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 307.178714][ T9343] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 307.443896][ T9352] loop2: detected capacity change from 0 to 2048 [ 307.544015][ T14] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 307.597482][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.616417][ T9352] loop2: p1 p2 p3 [ 308.797585][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.803318][ T9361] tipc: Started in network mode [ 308.814056][ T9361] tipc: Node identity c6608c1f917a, cluster identity 4711 [ 308.821351][ T9361] tipc: Enabled bearer , priority 0 [ 308.831048][ T9361] syzkaller0: entered promiscuous mode [ 308.840690][ T9361] syzkaller0: entered allmulticast mode [ 308.928082][ T9370] tipc: Resetting bearer [ 308.957800][ T9360] tipc: Resetting bearer [ 308.983685][ T9360] tipc: Disabling bearer [ 309.043184][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1262'. [ 309.676485][ T9394] loop6: detected capacity change from 0 to 1024 [ 309.766548][ T9394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.985997][ T6200] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.583748][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1286'. [ 310.900799][ T9443] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1291'. [ 311.202261][ T9455] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 311.208987][ T9455] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 311.236867][ T9455] vhci_hcd vhci_hcd.0: Device attached [ 311.244819][ T9456] vhci_hcd: connection closed [ 311.248842][ T6073] vhci_hcd: stop threads [ 311.283471][ T6073] vhci_hcd: release socket [ 311.301028][ T6073] vhci_hcd: disconnect device [ 312.312049][ T9491] loop2: detected capacity change from 0 to 512 [ 312.375899][ T9491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.389493][ T9491] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.452163][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 312.452190][ T30] audit: type=1800 audit(1761265724.644:2878): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1313" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 312.618575][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.593173][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1321'. [ 314.706559][ T30] audit: type=1326 audit(1761265726.924:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 314.779310][ T30] audit: type=1326 audit(1761265726.924:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 314.801929][ T30] audit: type=1326 audit(1761265726.924:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 314.825122][ T30] audit: type=1326 audit(1761265726.924:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 314.847724][ T30] audit: type=1326 audit(1761265726.924:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 314.890992][ T30] audit: type=1326 audit(1761265726.924:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 314.994014][ T30] audit: type=1326 audit(1761265726.954:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 315.046318][ T30] audit: type=1326 audit(1761265726.954:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 315.132772][ T30] audit: type=1326 audit(1761265726.954:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz.0.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 315.244698][ T9556] netlink: 'syz.0.1340': attribute type 4 has an invalid length. [ 315.270662][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 315.400032][ T9560] loop7: detected capacity change from 0 to 2048 [ 315.498501][ T9560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 315.726493][ T9554] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 315.780127][ T9554] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 280 with error 28 [ 315.815527][ T9554] EXT4-fs (loop7): This should not happen!! Data will be lost [ 315.815527][ T9554] [ 315.881467][ T9554] EXT4-fs (loop7): Total free blocks count 0 [ 315.936086][ T9554] EXT4-fs (loop7): Free/Dirty block details [ 315.942027][ T9554] EXT4-fs (loop7): free_blocks=2415919104 [ 315.972478][ T9554] EXT4-fs (loop7): dirty_blocks=288 [ 315.985213][ T9554] EXT4-fs (loop7): Block reservation details [ 316.020380][ T9554] EXT4-fs (loop7): i_reserved_data_blocks=18 [ 316.561830][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1349'. [ 316.767494][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 316.849426][ T9594] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 317.777777][ T9606] loop7: detected capacity change from 0 to 512 [ 318.111677][ T9606] EXT4-fs (loop7): 1 orphan inode deleted [ 318.134152][ T9606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.162915][ T6075] __quota_error: 24 callbacks suppressed [ 318.162970][ T6075] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 318.189470][ T9606] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.890671][ T30] audit: type=1326 audit(1761265731.104:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.0.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 319.044663][ T30] audit: type=1326 audit(1761265731.104:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.0.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 319.224842][ T30] audit: type=1326 audit(1761265731.104:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.0.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd79798f003 code=0x7ffc0000 [ 319.388729][ T30] audit: type=1326 audit(1761265731.144:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.0.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd79798da7f code=0x7ffc0000 [ 319.542251][ T30] audit: type=1326 audit(1761265731.144:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.0.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd79798f057 code=0x7ffc0000 [ 319.619522][ T6075] EXT4-fs error (device loop7): ext4_release_dquot:6979: comm kworker/u8:12: Failed to release dquot type 1 [ 319.832317][ T30] audit: type=1326 audit(1761265731.144:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.0.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd79798d810 code=0x7ffc0000 [ 319.967388][ T30] audit: type=1326 audit(1761265731.144:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.0.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd79798dc2a code=0x7ffc0000 [ 320.050108][ T9626] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 320.228518][ T30] audit: type=1326 audit(1761265731.144:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.0.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 320.429393][ T30] audit: type=1326 audit(1761265731.184:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.0.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 320.955448][ T9640] loop2: detected capacity change from 0 to 2048 [ 321.222790][ T9640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 322.206328][ T9660] tipc: Started in network mode [ 322.240709][ T9660] tipc: Node identity 3691f2de1b55, cluster identity 4711 [ 322.288284][ T9660] tipc: Enabled bearer , priority 0 [ 322.321255][ T9661] syzkaller0: entered promiscuous mode [ 322.328671][ T9661] syzkaller0: entered allmulticast mode [ 322.360535][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 322.403910][ T9660] tipc: Resetting bearer [ 322.454543][ T9659] tipc: Resetting bearer [ 322.557881][ T9659] tipc: Disabling bearer [ 322.681332][ T9665] netlink: 'syz.5.1371': attribute type 4 has an invalid length. [ 322.718959][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1371'. [ 322.747686][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.187512][ T9680] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 323.254379][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'. [ 323.355788][ T9684] loop6: detected capacity change from 0 to 4096 [ 323.371541][ T9684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.379234][ T9684] EXT4-fs: Ignoring removed i_version option [ 323.417449][ T9684] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.1380: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 256(256) [ 323.479282][ T9684] EXT4-fs error (device loop6): ext4_quota_enable:7138: comm syz.6.1380: Bad quota inode: 4, type: 1 [ 323.522120][ T9684] EXT4-fs warning (device loop6): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.546265][ T9684] EXT4-fs (loop6): mount failed [ 323.650801][ T9700] loop7: detected capacity change from 0 to 1024 [ 323.699252][ T9700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.885852][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.459819][ T9723] tmpfs: Unknown parameter 'mÂLave' [ 324.702050][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1400'. [ 324.796151][ T9710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.823266][ T9710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.842723][ T9710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.862451][ T9710] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 324.892117][ T9710] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 324.908497][ T9710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.113808][ T9742] loop2: detected capacity change from 0 to 1024 [ 325.165140][ T9743] loop5: detected capacity change from 0 to 1024 [ 325.199481][ T9742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.255064][ T9743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.376204][ T9742] EXT4-fs error (device loop2): mb_free_blocks:2014: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 325.544542][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.548908][ T9757] netlink: 'syz.4.1409': attribute type 4 has an invalid length. [ 325.585290][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.593238][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 326.059648][ T9764] loop4: detected capacity change from 0 to 512 [ 326.078276][ T9764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 326.112596][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 326.132209][ T9764] EXT4-fs (loop4): 1 truncate cleaned up [ 326.142572][ T9764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.310798][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1417'. [ 326.314555][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.375295][ T9769] tmpfs: Unknown parameter 'mÂLave' [ 326.620023][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1418'. [ 326.686299][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1418'. [ 326.758748][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.765180][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.833878][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 326.833899][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 326.923247][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.924176][ T5852] Bluetooth: hci6: command 0x0c1a tx timeout [ 326.929683][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 327.198676][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 327.198701][ T30] audit: type=1326 audit(1761265739.414:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 327.268284][ T30] audit: type=1326 audit(1761265739.444:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 327.331495][ T30] audit: type=1326 audit(1761265739.444:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 327.391019][ T30] audit: type=1326 audit(1761265739.444:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 327.434274][ T30] audit: type=1326 audit(1761265739.444:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 327.460150][ T30] audit: type=1326 audit(1761265739.454:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 327.470223][ T9790] loop2: detected capacity change from 0 to 2048 [ 327.483128][ T30] audit: type=1326 audit(1761265739.454:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 327.511475][ T30] audit: type=1326 audit(1761265739.454:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efff738f003 code=0x7ffc0000 [ 327.560546][ T30] audit: type=1326 audit(1761265739.454:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efff738f003 code=0x7ffc0000 [ 327.593447][ T30] audit: type=1326 audit(1761265739.454:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.2.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 327.675331][ T9790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 327.843829][ T9782] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 327.850579][ T9782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.873497][ T9782] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 327.996393][ T9782] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 328.076932][ T9782] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 328.087314][ T9782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.190309][ T9789] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 328.212549][ T9789] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 490 with error 28 [ 328.289171][ T9789] EXT4-fs (loop2): This should not happen!! Data will be lost [ 328.289171][ T9789] [ 328.370183][ T9789] EXT4-fs (loop2): Total free blocks count 0 [ 328.422146][ T9789] EXT4-fs (loop2): Free/Dirty block details [ 328.429198][ T9806] netlink: 'syz.4.1425': attribute type 4 has an invalid length. [ 328.478155][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 328.481554][ T9789] EXT4-fs (loop2): free_blocks=2415919104 [ 328.569645][ T9789] EXT4-fs (loop2): dirty_blocks=496 [ 328.631315][ T9789] EXT4-fs (loop2): Block reservation details [ 328.660735][ T9815] loop5: detected capacity change from 0 to 512 [ 328.672302][ T9789] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 328.691172][ T9815] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 328.766597][ T9815] EXT4-fs (loop5): 1 truncate cleaned up [ 328.804369][ T9815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.987226][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 329.259580][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.475753][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1436'. [ 329.533153][ T9829] tmpfs: Unknown parameter 'mÂLave' [ 329.712701][ T9838] loop4: detected capacity change from 0 to 512 [ 329.811079][ T9838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.863541][ T9838] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.032764][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 330.038907][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 330.045011][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 330.045026][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 330.087471][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.112247][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 330.118309][ T5837] Bluetooth: hci6: command 0x0c1a tx timeout [ 330.136839][ T9851] loop7: detected capacity change from 0 to 2048 [ 330.291320][ T9851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 330.330257][ T9858] tipc: New replicast peer: 255.255.255.83 [ 330.337230][ T9858] tipc: Enabled bearer , priority 10 [ 330.390205][ T9860] netlink: 'syz.4.1445': attribute type 21 has an invalid length. [ 330.449140][ T9860] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1445'. [ 330.482383][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'. [ 330.555882][ T9851] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 330.603532][ T9851] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 286 with error 28 [ 330.693228][ T9851] EXT4-fs (loop7): This should not happen!! Data will be lost [ 330.693228][ T9851] [ 330.799248][ T9851] EXT4-fs (loop7): Total free blocks count 0 [ 330.839506][ T9851] EXT4-fs (loop7): Free/Dirty block details [ 330.882145][ T9851] EXT4-fs (loop7): free_blocks=2415919104 [ 330.915967][ T9851] EXT4-fs (loop7): dirty_blocks=288 [ 330.956956][ T9851] EXT4-fs (loop7): Block reservation details [ 331.012177][ T9851] EXT4-fs (loop7): i_reserved_data_blocks=18 [ 331.304303][ T9882] tmpfs: Unknown parameter 'mÂLave' [ 331.565886][ T1154] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 331.728297][ T9891] loop5: detected capacity change from 0 to 512 [ 331.812337][ T9891] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.1459: bg 0: block 393: padding at end of block bitmap is not set [ 331.858476][ T9893] loop2: detected capacity change from 0 to 2048 [ 331.912602][ T9891] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 331.938619][ T9893] loop2: p1 p2 p3 [ 331.972626][ T9891] EXT4-fs (loop5): 2 truncates cleaned up [ 332.011113][ T9891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.096262][ T9891] EXT4-fs error (device loop5): ext4_check_all_de:658: inode #12: block 7: comm syz.5.1459: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 332.304887][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.290936][ T9915] loop4: detected capacity change from 0 to 512 [ 333.347509][ T9915] EXT4-fs (loop4): orphan cleanup on readonly fs [ 333.373585][ T9903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.380064][ T9915] EXT4-fs error (device loop4): ext4_xattr_inode_iget:444: comm syz.4.1468: error while reading EA inode 32 err=-116 [ 333.399962][ T9903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.404565][ T9915] EXT4-fs (loop4): Remounting filesystem read-only [ 333.412683][ T9915] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 333.426108][ T9915] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 333.432447][ T9903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.436436][ T9915] EXT4-fs (loop4): 1 orphan inode deleted [ 333.450088][ T9915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 333.466113][ T9915] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.586383][ T9903] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 333.625752][ T9903] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 333.635842][ T9903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.740610][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 333.740636][ T30] audit: type=1326 audit(1761265745.954:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 333.801416][ T30] audit: type=1326 audit(1761265745.984:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 333.893508][ T30] audit: type=1326 audit(1761265745.994:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 333.986480][ T30] audit: type=1326 audit(1761265746.054:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 334.060631][ T9923] loop7: detected capacity change from 0 to 2048 [ 334.080549][ T30] audit: type=1326 audit(1761265746.054:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 334.136478][ T30] audit: type=1326 audit(1761265746.064:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 334.224305][ T9923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 334.239427][ T30] audit: type=1326 audit(1761265746.074:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcce898f003 code=0x7ffc0000 [ 334.262808][ T30] audit: type=1326 audit(1761265746.074:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcce898f003 code=0x7ffc0000 [ 334.285518][ T30] audit: type=1326 audit(1761265746.074:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 334.309840][ T30] audit: type=1326 audit(1761265746.074:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.7.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 334.366577][ T9933] loop4: detected capacity change from 0 to 2048 [ 334.473528][ T9933] loop4: p1 p2 p3 [ 334.598750][ T9923] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 334.643877][ T9923] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 382 with error 28 [ 334.673049][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 334.766486][ T9923] EXT4-fs (loop7): This should not happen!! Data will be lost [ 334.766486][ T9923] [ 334.842213][ T9923] EXT4-fs (loop7): Total free blocks count 0 [ 334.848272][ T9923] EXT4-fs (loop7): Free/Dirty block details [ 334.912204][ T9923] EXT4-fs (loop7): free_blocks=2415919104 [ 334.918013][ T9923] EXT4-fs (loop7): dirty_blocks=384 [ 334.972172][ T9923] EXT4-fs (loop7): Block reservation details [ 334.978209][ T9923] EXT4-fs (loop7): i_reserved_data_blocks=24 [ 335.015630][ T9942] loop5: detected capacity change from 0 to 1024 [ 335.085483][ T9942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.284171][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.352791][ T6073] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 335.484038][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 335.490095][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 335.632580][ T5837] Bluetooth: hci6: command 0x0c1a tx timeout [ 335.640111][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 335.712428][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 336.554770][ T9969] syz.2.1489 (9969) used greatest stack depth: 19720 bytes left [ 336.569768][ T9975] loop5: detected capacity change from 0 to 1024 [ 336.646476][ T9975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.735345][ T9982] loop4: detected capacity change from 0 to 1024 [ 336.743111][ T9982] EXT4-fs: Ignoring removed orlov option [ 336.777308][ T9982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.873462][ T9985] 9pnet_fd: Insufficient options for proto=fd [ 336.874737][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.028390][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.875905][ T9990] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.880046][ T9990] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.885038][ T9990] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.885431][ T9990] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 337.885758][ T9990] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 337.886163][ T9990] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.826454][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 338.826481][ T30] audit: type=1326 audit(1761265751.044:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 338.920754][ T30] audit: type=1326 audit(1761265751.044:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 338.990632][ T30] audit: type=1326 audit(1761265751.074:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd385c1885 code=0x7ffc0000 [ 339.084807][ T30] audit: type=1326 audit(1761265751.114:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 339.132806][T10006] tmpfs: Unknown parameter 'mÂLave' [ 339.153356][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 339.172261][ T30] audit: type=1326 audit(1761265751.114:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 339.195391][ T30] audit: type=1326 audit(1761265751.114:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 339.218337][ T30] audit: type=1326 audit(1761265751.114:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 339.279447][T10020] loop2: detected capacity change from 0 to 1024 [ 339.288949][ T30] audit: type=1326 audit(1761265751.134:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 339.367992][ T30] audit: type=1326 audit(1761265751.134:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 339.428482][T10020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.468977][ T30] audit: type=1326 audit(1761265751.174:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 339.672324][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.707355][T10029] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1511'. [ 339.952381][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.958451][ T5837] Bluetooth: hci6: command 0x0c1a tx timeout [ 339.964592][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 339.970623][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 339.976786][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 341.912453][ T3403] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 342.072139][ T3403] usb 8-1: Invalid ep0 maxpacket: 16 [ 342.252745][ T3403] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 342.422607][ T3403] usb 8-1: Invalid ep0 maxpacket: 16 [ 342.440461][ T3403] usb usb8-port1: attempt power cycle [ 342.652363][T10087] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 342.800743][ T3403] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 342.883152][ T3403] usb 8-1: Invalid ep0 maxpacket: 16 [ 343.015698][T10092] loop2: detected capacity change from 0 to 512 [ 343.052245][ T3403] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 343.059864][T10092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 343.132976][ T3403] usb 8-1: Invalid ep0 maxpacket: 16 [ 343.139077][ T3403] usb usb8-port1: unable to enumerate USB device [ 343.196590][T10092] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 343.224332][T10092] EXT4-fs (loop2): 1 truncate cleaned up [ 343.263715][T10092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.019200][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.199623][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'. [ 344.468682][T10109] 9pnet_fd: Insufficient options for proto=fd [ 345.226560][T10124] tipc: Started in network mode [ 345.240333][T10124] tipc: Node identity 569c9c143bdf, cluster identity 4711 [ 345.262044][T10124] tipc: Enabled bearer , priority 0 [ 345.309145][T10128] syzkaller0: entered promiscuous mode [ 345.324762][T10128] syzkaller0: entered allmulticast mode [ 345.404313][T10123] tipc: Resetting bearer [ 345.459193][T10123] tipc: Disabling bearer [ 345.518730][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 345.518756][ T30] audit: type=1326 audit(1761265757.734:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 345.588321][ T30] audit: type=1326 audit(1761265757.764:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 345.663735][ T30] audit: type=1326 audit(1761265757.764:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 345.693815][T10133] tmpfs: Unknown parameter 'mÂLave' [ 345.748686][ T30] audit: type=1326 audit(1761265757.764:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 345.812455][ T30] audit: type=1326 audit(1761265757.764:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 345.912356][ T30] audit: type=1326 audit(1761265757.764:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 345.958614][ T30] audit: type=1326 audit(1761265757.844:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7979c1885 code=0x7ffc0000 [ 346.012174][ T30] audit: type=1326 audit(1761265757.844:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 346.036619][T10143] loop2: detected capacity change from 0 to 2048 [ 346.043696][ T30] audit: type=1326 audit(1761265757.844:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 346.096254][T10143] loop2: p1 p2 p3 [ 346.155541][ T30] audit: type=1326 audit(1761265757.854:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 346.280722][T10148] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1559'. [ 346.343808][T10150] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 346.734072][T10160] loop2: detected capacity change from 0 to 512 [ 346.786303][T10160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.849223][T10160] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.247033][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.661929][T10173] tmpfs: Unknown parameter 'mÂLave' [ 348.939803][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 349.209278][T10195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1579'. [ 349.389181][T10198] loop5: detected capacity change from 0 to 1024 [ 349.457058][T10198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.616028][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.144828][T10220] tmpfs: Unknown parameter 'mÂLave' [ 350.337881][T10230] loop6: detected capacity change from 0 to 2048 [ 350.445088][T10230] loop6: p1 p2 p3 [ 350.600161][T10242] loop7: detected capacity change from 0 to 1024 [ 350.661656][T10242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.877271][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.020788][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 351.020814][ T30] audit: type=1326 audit(1761265763.234:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 351.095197][ T30] audit: type=1326 audit(1761265763.234:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff738efc9 code=0x7ffc0000 [ 351.196772][ T30] audit: type=1326 audit(1761265763.404:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 351.266409][ T30] audit: type=1326 audit(1761265763.404:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 351.342332][ T30] audit: type=1326 audit(1761265763.414:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 351.471249][ T30] audit: type=1326 audit(1761265763.414:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 351.632293][ T30] audit: type=1326 audit(1761265763.414:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 351.746126][ T30] audit: type=1326 audit(1761265763.414:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 351.864300][ T30] audit: type=1326 audit(1761265763.414:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 351.962403][ T30] audit: type=1326 audit(1761265763.414:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f673ab8efc9 code=0x7ffc0000 [ 352.112873][T10273] tmpfs: Unknown parameter 'mÂLave' [ 352.119911][T10283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1614'. [ 352.282273][T10287] netlink: 'syz.7.1615': attribute type 12 has an invalid length. [ 352.390155][T10286] loop4: detected capacity change from 0 to 2048 [ 352.493956][T10286] loop4: p1 p2 p3 [ 352.631033][T10295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1620'. [ 352.862646][T10301] netlink: 'syz.4.1621': attribute type 1 has an invalid length. [ 353.118027][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1624'. [ 353.179585][T10305] loop7: detected capacity change from 0 to 2048 [ 353.273319][T10305] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 353.608241][T10315] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 353.777896][T10315] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 184 with error 28 [ 353.851800][T10315] EXT4-fs (loop7): This should not happen!! Data will be lost [ 353.851800][T10315] [ 353.873852][T10315] EXT4-fs (loop7): Total free blocks count 0 [ 353.880661][T10315] EXT4-fs (loop7): Free/Dirty block details [ 353.886659][T10315] EXT4-fs (loop7): free_blocks=2415919104 [ 353.892415][T10315] EXT4-fs (loop7): dirty_blocks=192 [ 353.897624][T10315] EXT4-fs (loop7): Block reservation details [ 353.903664][T10315] EXT4-fs (loop7): i_reserved_data_blocks=12 [ 355.643721][ T991] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 355.977360][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1637'. [ 356.777757][T10365] 9pnet_fd: Insufficient options for proto=fd [ 358.403847][T10381] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 359.483869][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 359.483893][ T30] audit: type=1326 audit(1761265771.704:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 359.483974][ T30] audit: type=1326 audit(1761265771.704:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 359.549625][ T30] audit: type=1326 audit(1761265771.764:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 359.550057][ T30] audit: type=1326 audit(1761265771.764:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 359.550289][ T30] audit: type=1326 audit(1761265771.764:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 359.557876][ T30] audit: type=1326 audit(1761265771.774:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 359.558443][ T30] audit: type=1326 audit(1761265771.774:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 359.558659][ T30] audit: type=1326 audit(1761265771.774:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 359.562151][ T30] audit: type=1326 audit(1761265771.774:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcce898d810 code=0x7ffc0000 [ 359.595334][T10413] netlink: 'syz.4.1665': attribute type 4 has an invalid length. [ 359.720241][ T30] audit: type=1326 audit(1761265771.774:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 359.782407][T10413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1665'. [ 361.042674][T10453] netlink: 'syz.5.1682': attribute type 4 has an invalid length. [ 361.050436][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1682'. [ 362.035179][T10482] netlink: 256 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 362.077879][T10482] netlink: 24 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 362.167509][T10476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.244245][T10484] loop7: detected capacity change from 0 to 2048 [ 362.374984][T10484] loop7: p1 p2 p3 [ 362.381228][T10488] netlink: 'syz.0.1698': attribute type 4 has an invalid length. [ 362.427699][T10476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.452552][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 362.653844][T10476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.026317][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1704'. [ 363.028083][T10476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.289231][T10508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.739139][ T991] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.786293][ T991] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.808914][T10513] loop5: detected capacity change from 0 to 512 [ 363.863062][T10513] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 363.876828][ T1154] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.932253][T10513] EXT4-fs (loop5): 1 truncate cleaned up [ 363.954976][T10513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.976592][ T6075] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.240467][T10523] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 364.247112][T10523] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 364.259123][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.292460][T10523] vhci_hcd vhci_hcd.0: Device attached [ 364.325409][T10525] vhci_hcd: connection closed [ 364.326793][ T6075] vhci_hcd: stop threads [ 364.353417][ T6075] vhci_hcd: release socket [ 364.368302][ T6075] vhci_hcd: disconnect device [ 364.482325][T10531] netlink: 'syz.5.1715': attribute type 4 has an invalid length. [ 364.504204][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 364.504226][ T30] audit: type=1326 audit(1761265776.724:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 364.566661][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1715'. [ 364.570940][ T30] audit: type=1326 audit(1761265776.754:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a2012b099 code=0x7ffc0000 [ 364.674513][ T30] audit: type=1326 audit(1761265776.754:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.4.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 365.161911][T10546] IPv6: addrconf: prefix option has invalid lifetime [ 365.904944][T10562] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 366.951705][T10576] loop7: detected capacity change from 0 to 2048 [ 367.264369][T10576] loop7: p1 p2 p3 [ 369.730349][T10587] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 369.741551][T10587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 369.802918][T10587] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.864952][T10587] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 369.871082][T10587] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 369.893335][T10587] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.504277][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.563087][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.571801][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.580814][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.595530][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.381137][T10609] netlink: 256 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 371.392663][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 371.413136][T10609] netlink: 24 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 371.792349][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 371.882457][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 371.891076][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 371.952765][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 371.969097][T10622] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 372.643548][T10594] chnl_net:caif_netlink_parms(): no params data found [ 372.673466][ T5852] Bluetooth: hci3: command tx timeout [ 373.149271][T10594] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.165275][ T30] audit: type=1326 audit(1761265785.384:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 373.179010][T10594] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.246897][T10594] bridge_slave_0: entered allmulticast mode [ 373.252307][ T30] audit: type=1326 audit(1761265785.384:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 373.284780][T10594] bridge_slave_0: entered promiscuous mode [ 373.308797][T10594] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.344991][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.355915][ T30] audit: type=1326 audit(1761265785.384:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 373.416530][ T30] audit: type=1326 audit(1761265785.384:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 373.502418][T10594] bridge_slave_1: entered allmulticast mode [ 373.515299][T10594] bridge_slave_1: entered promiscuous mode [ 373.523006][ T30] audit: type=1326 audit(1761265785.384:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 373.547971][T10661] tmpfs: Unknown parameter 'mÂLave' [ 373.616826][ T30] audit: type=1326 audit(1761265785.384:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 373.699016][ T30] audit: type=1326 audit(1761265785.384:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 373.776387][T10594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.777926][ T30] audit: type=1326 audit(1761265785.544:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 373.819439][T10594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.909987][ T30] audit: type=1326 audit(1761265785.544:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10660 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 373.993261][ T30] audit: type=1326 audit(1761265785.554:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.5.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd385c1885 code=0x7ffc0000 [ 374.079585][T10594] team0: Port device team_slave_0 added [ 374.106249][T10594] team0: Port device team_slave_1 added [ 374.136946][T10684] loop5: detected capacity change from 0 to 512 [ 374.157252][T10684] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 374.234386][T10594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.254767][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.285342][T10684] EXT4-fs (loop5): 1 truncate cleaned up [ 374.317617][T10684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.342123][T10594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.360052][T10594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.367036][T10594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.393231][T10594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.584228][T10594] hsr_slave_0: entered promiscuous mode [ 374.624433][T10594] hsr_slave_1: entered promiscuous mode [ 374.631269][T10594] debugfs: 'hsr0' already exists in 'hsr' [ 374.660644][T10594] Cannot create hsr debugfs directory [ 374.683362][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.752771][ T5852] Bluetooth: hci3: command tx timeout [ 375.548939][T10703] tmpfs: Unknown parameter 'mÂLave' [ 375.584317][T10594] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 375.644913][T10594] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 375.711513][T10594] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 375.784824][T10594] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 376.142622][T10594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.215434][T10594] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.266903][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.274091][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.337767][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.344944][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.422543][T10722] syzkaller0: entered promiscuous mode [ 376.428044][T10722] syzkaller0: entered allmulticast mode [ 376.843089][ T5852] Bluetooth: hci3: command tx timeout [ 377.347308][T10594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.462608][T10744] tmpfs: Unknown parameter 'mÂLave' [ 378.871859][T10594] veth0_vlan: entered promiscuous mode [ 378.890861][T10775] 9pnet_fd: Insufficient options for proto=fd [ 378.912693][ T5852] Bluetooth: hci3: command tx timeout [ 378.949684][T10594] veth1_vlan: entered promiscuous mode [ 379.039338][T10594] veth0_macvtap: entered promiscuous mode [ 379.067245][T10594] veth1_macvtap: entered promiscuous mode [ 379.145429][T10594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.178810][T10594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.218148][ T1154] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.266887][ T1154] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.292970][ T1154] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.342707][ T1154] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.556521][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.592181][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.724359][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.732346][T10786] lo: entered allmulticast mode [ 379.755184][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.776128][T10785] lo: left allmulticast mode [ 379.815227][T10788] netlink: 'syz.0.1807': attribute type 21 has an invalid length. [ 380.139517][T10795] loop7: detected capacity change from 0 to 512 [ 380.193693][T10796] loop8: detected capacity change from 0 to 1024 [ 380.221011][T10795] __quota_error: 211 callbacks suppressed [ 380.221035][T10795] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 380.238792][T10795] EXT4-fs warning (device loop7): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 380.255510][T10795] EXT4-fs (loop7): mount failed [ 380.294915][T10796] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.425222][T10594] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.618589][T10813] 9pnet_fd: Insufficient options for proto=fd [ 380.869174][T10816] loop8: detected capacity change from 0 to 512 [ 380.913035][T10816] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 380.961271][T10816] EXT4-fs (loop8): 1 truncate cleaned up [ 380.997063][T10816] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.088638][T10819] loop5: detected capacity change from 0 to 512 [ 381.166529][T10819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.251441][ T30] audit: type=1326 audit(1761265793.464:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 381.261983][T10819] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.359378][ T30] audit: type=1326 audit(1761265793.464:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 381.452258][ T30] audit: type=1326 audit(1761265793.474:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 381.456149][T10594] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.538432][ T30] audit: type=1326 audit(1761265793.474:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 381.578428][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.626975][ T30] audit: type=1326 audit(1761265793.474:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 381.716188][ T30] audit: type=1326 audit(1761265793.474:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 381.797882][ T30] audit: type=1326 audit(1761265793.474:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 381.888213][ T30] audit: type=1326 audit(1761265793.474:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce898efc9 code=0x7ffc0000 [ 381.947198][T10843] 9pnet_fd: Insufficient options for proto=fd [ 381.993694][ T30] audit: type=1326 audit(1761265793.474:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.7.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcce898d810 code=0x7ffc0000 [ 383.053450][T10854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 383.066361][T10854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 383.130675][T10854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 383.168673][T10854] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 383.200671][T10854] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 383.229083][T10854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 383.268821][T10854] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 383.282422][T10870] syz.2.1837 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 383.300647][T10854] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 384.356653][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 384.370727][T10888] loop8: detected capacity change from 0 to 1024 [ 384.496815][T10888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.705623][T10594] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.889815][T10899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 384.922773][T10898] loop5: detected capacity change from 0 to 512 [ 384.986409][T10898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.082368][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 385.127426][T10898] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.157419][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 385.233676][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 385.234683][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 385.239757][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 385.258909][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 385.258931][ T30] audit: type=1800 audit(1761265797.474:3979): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1850" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 385.454626][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.615963][T10919] loop5: detected capacity change from 0 to 256 [ 385.637058][T10919] vfat: Bad value for 'uni_xlate' [ 385.701785][T10919] loop5: detected capacity change from 0 to 256 [ 385.989379][ T30] audit: type=1326 audit(1761265798.204:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 386.027819][T10926] loop8: detected capacity change from 0 to 1024 [ 386.071783][ T30] audit: type=1326 audit(1761265798.204:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 386.118569][ T30] audit: type=1326 audit(1761265798.204:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 386.198735][ T30] audit: type=1326 audit(1761265798.204:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 386.201404][T10926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.352197][ T30] audit: type=1326 audit(1761265798.564:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 386.410554][ T30] audit: type=1326 audit(1761265798.564:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 386.487545][ T30] audit: type=1326 audit(1761265798.574:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 386.564895][T10594] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.599368][ T30] audit: type=1326 audit(1761265798.574:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 386.747501][ T30] audit: type=1326 audit(1761265798.574:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.0.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 387.312232][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 387.692303][T10953] loop8: detected capacity change from 0 to 2048 [ 387.893150][T10953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 388.206638][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.214932][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.365176][T10953] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 388.438635][T10953] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 290 with max blocks 100 with error 28 [ 388.536229][T10953] EXT4-fs (loop8): This should not happen!! Data will be lost [ 388.536229][T10953] [ 388.572180][T10953] EXT4-fs (loop8): Total free blocks count 0 [ 388.593687][T10953] EXT4-fs (loop8): Free/Dirty block details [ 388.599600][T10953] EXT4-fs (loop8): free_blocks=2415919104 [ 388.652164][T10953] EXT4-fs (loop8): dirty_blocks=400 [ 388.666196][T10953] EXT4-fs (loop8): Block reservation details [ 388.713178][T10953] EXT4-fs (loop8): i_reserved_data_blocks=25 [ 388.950159][T10594] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 389.392455][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 390.285600][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 390.285625][ T30] audit: type=1326 audit(1761265802.504:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 390.353084][ T30] audit: type=1326 audit(1761265802.544:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 390.405241][T11003] loop5: detected capacity change from 0 to 512 [ 390.440117][ T30] audit: type=1326 audit(1761265802.544:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 390.532901][ T30] audit: type=1326 audit(1761265802.544:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 390.566606][T11003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.601629][ T30] audit: type=1326 audit(1761265802.544:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 390.645459][ T30] audit: type=1326 audit(1761265802.614:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd79798f003 code=0x7ffc0000 [ 390.686227][ T30] audit: type=1326 audit(1761265802.614:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd79798f003 code=0x7ffc0000 [ 390.708938][ T30] audit: type=1326 audit(1761265802.614:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 390.712286][T11003] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.736100][ T30] audit: type=1326 audit(1761265802.614:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 390.824585][ T30] audit: type=1326 audit(1761265802.724:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.0.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd79798efc9 code=0x7ffc0000 [ 391.097541][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.677848][T11030] 9pnet_fd: Insufficient options for proto=fd [ 393.131798][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1906'. [ 393.648319][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 394.366150][T11056] loop7: detected capacity change from 0 to 512 [ 394.412756][T11056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 394.484792][T11056] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 394.547857][T11058] tmpfs: Unknown parameter 'mÂLave' [ 394.562384][T11062] can0: slcan on ttyS3. [ 394.574349][T11056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.637367][T11056] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.822472][T11061] can0 (unregistered): slcan off ttyS3. [ 395.358586][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.577209][T11086] 9pnet_fd: Insufficient options for proto=fd [ 396.391732][T11107] loop8: detected capacity change from 0 to 512 [ 396.430405][T11107] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 396.471221][T11103] tmpfs: Unknown parameter 'mÂLave' [ 396.505991][T11107] EXT4-fs (loop8): 1 truncate cleaned up [ 396.515928][T11107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.815040][T11113] loop7: detected capacity change from 0 to 2048 [ 396.862039][T10594] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.935180][T11113] loop7: p1 p2 p3 [ 397.210087][T11124] 9pnet_fd: Insufficient options for proto=fd [ 397.403818][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 398.076062][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 398.076087][ T30] audit: type=1326 audit(1761265810.294:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 398.212202][ T30] audit: type=1326 audit(1761265810.324:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 398.284146][T11145] tmpfs: Unknown parameter 'mÂLave' [ 398.326064][ T30] audit: type=1326 audit(1761265810.324:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 398.447036][ T30] audit: type=1326 audit(1761265810.334:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 398.554095][ T30] audit: type=1326 audit(1761265810.344:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 398.636202][ T30] audit: type=1326 audit(1761265810.344:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 398.764468][ T30] audit: type=1326 audit(1761265810.344:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 398.849829][ T30] audit: type=1326 audit(1761265810.344:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 399.018459][ T30] audit: type=1326 audit(1761265810.374:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 399.072681][T11162] tipc: Enabled bearer , priority 0 [ 399.184644][ T30] audit: type=1326 audit(1761265810.374:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11141 comm="syz.5.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3858efc9 code=0x7ffc0000 [ 399.647563][T11157] tipc: Disabling bearer [ 399.914160][T11170] ipvlan2: entered promiscuous mode [ 400.064677][T11174] loop8: detected capacity change from 0 to 164 [ 400.085990][T11174] Unable to read rock-ridge attributes [ 400.129069][T11174] Unable to read rock-ridge attributes [ 400.218609][T11178] IPVS: length: 111 != 24 [ 400.238713][T11174] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 400.531332][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1961'. [ 401.431865][T11194] 9pnet_fd: Insufficient options for proto=fd [ 401.529748][T11190] tmpfs: Unknown parameter 'mÂLave' [ 401.969118][T11198] loop7: detected capacity change from 0 to 1024 [ 402.031611][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1971'. [ 402.114704][T11198] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.365105][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.474663][T11212] netlink: 'syz.8.1972': attribute type 27 has an invalid length. [ 402.669368][T11216] netlink: 'syz.2.1975': attribute type 10 has an invalid length. [ 403.063973][T11224] loop7: detected capacity change from 0 to 512 [ 403.090487][T11224] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 403.130723][T11224] EXT4-fs (loop7): 1 truncate cleaned up [ 403.183367][T11224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.680161][ T6973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.823336][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 403.823362][ T30] audit: type=1326 audit(1761265816.044:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11229 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 403.947655][ T30] audit: type=1326 audit(1761265816.044:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11229 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 404.024138][T11231] tmpfs: Unknown parameter 'mÂLave' [ 404.074243][T11236] 9pnet_fd: Insufficient options for proto=fd [ 404.112899][ T30] audit: type=1326 audit(1761265816.044:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11229 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 404.222176][ T30] audit: type=1326 audit(1761265816.044:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11229 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 404.364930][ T30] audit: type=1326 audit(1761265816.044:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11229 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 404.504610][ T30] audit: type=1326 audit(1761265816.044:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11229 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 404.589765][T11242] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 404.643283][ T30] audit: type=1326 audit(1761265816.044:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11229 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 404.682790][T11242] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 404.691233][T11242] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 404.762662][ T30] audit: type=1326 audit(1761265816.124:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11229 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 404.890756][ T30] audit: type=1326 audit(1761265816.124:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11229 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2018efc9 code=0x7ffc0000 [ 405.036144][ T30] audit: type=1326 audit(1761265816.134:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11234 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0a201c1885 code=0x7ffc0000 [ 405.450957][T11256] loop8: detected capacity change from 0 to 2048 [ 405.549138][T11256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 405.776945][T11266] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 405.862680][T11266] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 222 with error 28 [ 405.923616][T11266] EXT4-fs (loop8): This should not happen!! Data will be lost [ 405.923616][T11266] [ 405.972284][T11266] EXT4-fs (loop8): Total free blocks count 0 [ 405.978291][T11266] EXT4-fs (loop8): Free/Dirty block details [ 406.028485][T11266] EXT4-fs (loop8): free_blocks=2415919104 [ 406.076744][T11266] EXT4-fs (loop8): dirty_blocks=224 [ 406.081979][T11266] EXT4-fs (loop8): Block reservation details [ 406.275932][T11266] EXT4-fs (loop8): i_reserved_data_blocks=14 [ 406.562055][T11278] tmpfs: Unknown parameter 'mÂLave' [ 406.700235][T11283] loop7: detected capacity change from 0 to 512 [ 406.735698][T11283] ------------[ cut here ]------------ [ 406.741382][T11283] EA inode 11 i_nlink=2 [ 406.741982][T11283] WARNING: CPU: 0 PID: 11283 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 406.757852][T11283] Modules linked in: [ 406.761974][T11283] CPU: 0 UID: 0 PID: 11283 Comm: syz.7.2002 Not tainted syzkaller #0 PREEMPT(full) [ 406.771920][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.782617][T11283] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 406.789648][T11283] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5d a8 8b e8 45 f2 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 e6 be 2e ff 44 0f b6 2d 05 75 dc 0d [ 406.811824][T11283] RSP: 0018:ffffc90003e57178 EFLAGS: 00010282 [ 406.820376][T11283] RAX: 0000000000000000 RBX: ffff8880550b1f48 RCX: ffffc9000ce16000 [ 406.828489][T11283] RDX: 0000000000080000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 406.836576][T11283] RBP: ffffc90003e57240 R08: 0000000000000001 R09: 0000000000000000 [ 406.844622][T11283] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 406.852690][T11283] R13: 0000000000000000 R14: 1ffff920007cae32 R15: ffff8880550b2138 [ 406.860679][T11283] FS: 00007fcce97816c0(0000) GS:ffff888124a0c000(0000) knlGS:0000000000000000 [ 406.869953][T11283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.876744][T11283] CR2: 0000000000000000 CR3: 000000008ba1e000 CR4: 0000000000350ef0 [ 406.884809][T11283] Call Trace: [ 406.888096][T11283] [ 406.891035][T11283] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 406.897539][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.903271][T11283] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 406.910941][T11283] ext4_xattr_set_entry+0x158f/0x1f00 [ 406.918472][T11283] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 406.924360][T11283] ? xattr_find_entry+0x289/0x330 [ 406.929448][T11283] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 406.934741][T11283] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 406.940701][T11283] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 406.947083][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.952794][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.958464][T11283] ? dquot_initialize_needed+0x183/0x2a0 [ 406.964226][T11283] __ext4_expand_extra_isize+0x346/0x480 [ 406.969921][T11283] __ext4_mark_inode_dirty+0x544/0x870 [ 406.975470][T11283] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 406.981506][T11283] ? __pfx___might_resched+0x10/0x10 [ 406.986978][T11283] ? ext4_journal_check_start+0x22b/0x340 [ 406.993253][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.998921][T11283] ? __ext4_journal_start_sb+0x19e/0x690 [ 407.004794][T11283] ? ext4_evict_inode+0x5cf/0x18e0 [ 407.011951][T11283] ext4_evict_inode+0x74e/0x18e0 [ 407.019447][T11283] ? __pfx_ext4_evict_inode+0x10/0x10 [ 407.024909][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.030579][T11283] ? __pfx_ext4_evict_inode+0x10/0x10 [ 407.036050][T11283] evict+0x3e6/0x920 [ 407.039979][T11283] ? __pfx_evict+0x10/0x10 [ 407.044957][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.050636][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.056362][T11283] iput.part.0+0x6a9/0xb00 [ 407.060805][T11283] ? __pfx_ext4_drop_inode+0x10/0x10 [ 407.066374][T11283] iput+0x35/0x40 [ 407.070034][T11283] ext4_orphan_cleanup+0x731/0x11e0 [ 407.075378][T11283] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 407.081073][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.086789][T11283] ? ext4_register_li_request+0xec/0x9b0 [ 407.092515][T11283] ext4_fill_super+0x8db7/0xaf70 [ 407.097567][T11283] ? __pfx_ext4_fill_super+0x10/0x10 [ 407.102995][T11283] ? do_raw_spin_lock+0x12c/0x2b0 [ 407.108057][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.116308][T11283] ? find_held_lock+0x2b/0x80 [ 407.121035][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.129187][T11283] ? sb_set_blocksize+0x176/0x1d0 [ 407.134332][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.139995][T11283] ? setup_bdev_super+0x369/0x730 [ 407.145109][T11283] get_tree_bdev_flags+0x38c/0x620 [ 407.150437][T11283] ? __pfx_ext4_fill_super+0x10/0x10 [ 407.155830][T11283] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 407.161514][T11283] ? apparmor_capable+0x114/0x1d0 [ 407.166662][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.172401][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.178073][T11283] ? security_capable+0x7e/0x260 [ 407.183129][T11283] vfs_get_tree+0x8e/0x340 [ 407.187583][T11283] path_mount+0x7b9/0x23a0 [ 407.192044][T11283] ? __pfx_path_mount+0x10/0x10 [ 407.196962][T11283] ? putname+0x154/0x1a0 [ 407.201269][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.207000][T11283] ? putname+0x154/0x1a0 [ 407.211286][T11283] ? __x64_sys_mount+0x293/0x310 [ 407.218464][T11283] __x64_sys_mount+0x293/0x310 [ 407.225235][T11283] ? __pfx___x64_sys_mount+0x10/0x10 [ 407.230558][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.236609][T11283] do_syscall_64+0xcd/0xfa0 [ 407.241156][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.247109][T11283] RIP: 0033:0x7fcce899076a [ 407.251541][T11283] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.271276][T11283] RSP: 002b:00007fcce9780e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 407.279791][T11283] RAX: ffffffffffffffda RBX: 00007fcce9780ef0 RCX: 00007fcce899076a [ 407.287846][T11283] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcce9780eb0 [ 407.296083][T11283] RBP: 0000200000000180 R08: 00007fcce9780ef0 R09: 0000000001a08700 [ 407.304754][T11283] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 407.313546][T11283] R13: 00007fcce9780eb0 R14: 0000000000000470 R15: 0000200000000700 [ 407.323745][T11283] [ 407.326779][T11283] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 407.334066][T11283] CPU: 0 UID: 0 PID: 11283 Comm: syz.7.2002 Not tainted syzkaller #0 PREEMPT(full) [ 407.343457][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 407.353516][T11283] Call Trace: [ 407.356785][T11283] [ 407.359710][T11283] dump_stack_lvl+0x3d/0x1f0 [ 407.364320][T11283] vpanic+0x640/0x6f0 [ 407.368337][T11283] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 407.374346][T11283] panic+0xca/0xd0 [ 407.378099][T11283] ? __pfx_panic+0x10/0x10 [ 407.382566][T11283] check_panic_on_warn+0xab/0xb0 [ 407.387537][T11283] __warn+0xf6/0x3c0 [ 407.391434][T11283] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 407.397456][T11283] report_bug+0x3c3/0x580 [ 407.401801][T11283] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 407.407817][T11283] handle_bug+0x184/0x210 [ 407.412169][T11283] exc_invalid_op+0x17/0x50 [ 407.416693][T11283] asm_exc_invalid_op+0x1a/0x20 [ 407.421552][T11283] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 407.428177][T11283] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 80 5d a8 8b e8 45 f2 ec fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 e6 be 2e ff 44 0f b6 2d 05 75 dc 0d [ 407.447881][T11283] RSP: 0018:ffffc90003e57178 EFLAGS: 00010282 [ 407.453955][T11283] RAX: 0000000000000000 RBX: ffff8880550b1f48 RCX: ffffc9000ce16000 [ 407.461927][T11283] RDX: 0000000000080000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 407.469896][T11283] RBP: ffffc90003e57240 R08: 0000000000000001 R09: 0000000000000000 [ 407.477867][T11283] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 407.486015][T11283] R13: 0000000000000000 R14: 1ffff920007cae32 R15: ffff8880550b2138 [ 407.494011][T11283] ? __warn_printk+0x1a5/0x350 [ 407.498927][T11283] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 407.504946][T11283] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 407.511312][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.516981][T11283] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 407.522504][T11283] ext4_xattr_set_entry+0x158f/0x1f00 [ 407.527931][T11283] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 407.533682][T11283] ? xattr_find_entry+0x289/0x330 [ 407.538746][T11283] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 407.543957][T11283] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 407.549892][T11283] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 407.556158][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.561813][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.567469][T11283] ? dquot_initialize_needed+0x183/0x2a0 [ 407.573132][T11283] __ext4_expand_extra_isize+0x346/0x480 [ 407.578813][T11283] __ext4_mark_inode_dirty+0x544/0x870 [ 407.584302][T11283] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 407.590309][T11283] ? __pfx___might_resched+0x10/0x10 [ 407.595631][T11283] ? ext4_journal_check_start+0x22b/0x340 [ 407.601456][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.607117][T11283] ? __ext4_journal_start_sb+0x19e/0x690 [ 407.612762][T11283] ? ext4_evict_inode+0x5cf/0x18e0 [ 407.617902][T11283] ext4_evict_inode+0x74e/0x18e0 [ 407.622886][T11283] ? __pfx_ext4_evict_inode+0x10/0x10 [ 407.628303][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.634029][T11283] ? __pfx_ext4_evict_inode+0x10/0x10 [ 407.639429][T11283] evict+0x3e6/0x920 [ 407.643356][T11283] ? __pfx_evict+0x10/0x10 [ 407.647786][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.653449][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.659111][T11283] iput.part.0+0x6a9/0xb00 [ 407.663548][T11283] ? __pfx_ext4_drop_inode+0x10/0x10 [ 407.668851][T11283] iput+0x35/0x40 [ 407.672497][T11283] ext4_orphan_cleanup+0x731/0x11e0 [ 407.677738][T11283] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 407.683408][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.689064][T11283] ? ext4_register_li_request+0xec/0x9b0 [ 407.694733][T11283] ext4_fill_super+0x8db7/0xaf70 [ 407.699734][T11283] ? __pfx_ext4_fill_super+0x10/0x10 [ 407.705047][T11283] ? do_raw_spin_lock+0x12c/0x2b0 [ 407.710090][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.715767][T11283] ? find_held_lock+0x2b/0x80 [ 407.720481][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.726136][T11283] ? sb_set_blocksize+0x176/0x1d0 [ 407.731208][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.736858][T11283] ? setup_bdev_super+0x369/0x730 [ 407.741915][T11283] get_tree_bdev_flags+0x38c/0x620 [ 407.747067][T11283] ? __pfx_ext4_fill_super+0x10/0x10 [ 407.752385][T11283] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 407.758047][T11283] ? apparmor_capable+0x114/0x1d0 [ 407.763103][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.768758][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.774496][T11283] ? security_capable+0x7e/0x260 [ 407.779502][T11283] vfs_get_tree+0x8e/0x340 [ 407.783951][T11283] path_mount+0x7b9/0x23a0 [ 407.788401][T11283] ? __pfx_path_mount+0x10/0x10 [ 407.793271][T11283] ? putname+0x154/0x1a0 [ 407.797540][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.803195][T11283] ? putname+0x154/0x1a0 [ 407.807455][T11283] ? __x64_sys_mount+0x293/0x310 [ 407.812420][T11283] __x64_sys_mount+0x293/0x310 [ 407.817202][T11283] ? __pfx___x64_sys_mount+0x10/0x10 [ 407.822500][T11283] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.828167][T11283] do_syscall_64+0xcd/0xfa0 [ 407.832694][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.838609][T11283] RIP: 0033:0x7fcce899076a [ 407.843028][T11283] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.862646][T11283] RSP: 002b:00007fcce9780e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 407.871073][T11283] RAX: ffffffffffffffda RBX: 00007fcce9780ef0 RCX: 00007fcce899076a [ 407.879046][T11283] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcce9780eb0 [ 407.887019][T11283] RBP: 0000200000000180 R08: 00007fcce9780ef0 R09: 0000000001a08700 [ 407.894998][T11283] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 407.902972][T11283] R13: 00007fcce9780eb0 R14: 0000000000000470 R15: 0000200000000700 [ 407.910972][T11283] [ 407.914184][T11283] Kernel Offset: disabled [ 407.918506][T11283] Rebooting in 86400 seconds..