last executing test programs: 5m27.253527494s ago: executing program 3 (id=157): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) 5m27.187054526s ago: executing program 3 (id=159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd28, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0xc, 0x8, 0x106, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x0) 5m26.762172837s ago: executing program 3 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 5m25.916646158s ago: executing program 3 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40040) 5m25.657109474s ago: executing program 3 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m25.278138503s ago: executing program 3 (id=164): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10001, 0x3ff, 0x0, 0x100, 0x6b8, 0x0, 0x6, 0x6, 0xffffff4b}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x5c}}, 0x24040084) 5m22.948671392s ago: executing program 2 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002700)=@newtfilter={0x11c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0x7, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xf0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_SEL={0xe4, 0x5, {0x7, 0x1, 0xe, 0x6, 0xfff, 0x7374, 0x100, 0x0, [{0x6, 0x1, 0x2}, {0x2, 0x1, 0x0, 0x7}, {0x80000000, 0x1ff, 0x3, 0x6}, {0x3, 0x8, 0x0, 0x5}, {0x6, 0xb632, 0x9, 0x7fffffff}, {0x9f33, 0x280000, 0x10, 0x3}, {0xebe4, 0x8, 0x7, 0xfffffff9}, {0x80000001, 0x7fffffff, 0x7, 0x9}, {0x66, 0xfffffffe, 0x7, 0x40}, {0x64, 0x300, 0x10000, 0xe}, {0xb93, 0x81, 0x8, 0xaf2}, {0x5, 0x0, 0x0, 0x3}, {0xfffffffe, 0x28, 0x6, 0x1}]}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 5m21.342358352s ago: executing program 2 (id=178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 5m21.171284286s ago: executing program 2 (id=179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r10], 0x54}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 5m20.19699728s ago: executing program 2 (id=181): socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106) creat(&(0x7f0000000a00)='./bus\x00', 0xb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) 5m19.627279434s ago: executing program 2 (id=182): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x100, 0x54, 0x6, 0xf9}, 0x0) 5m18.262066198s ago: executing program 2 (id=185): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f00000003c0), 0x1, 0x5ed, &(0x7f0000000bc0)="$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") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x3) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x500, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r1 = getpid() brk(0xfffffffffffffff8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5m17.109199637s ago: executing program 32 (id=185): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f00000003c0), 0x1, 0x5ed, &(0x7f0000000bc0)="$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") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x3) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x500, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r1 = getpid() brk(0xfffffffffffffff8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5m9.37537519s ago: executing program 33 (id=164): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10001, 0x3ff, 0x0, 0x100, 0x6b8, 0x0, 0x6, 0x6, 0xffffff4b}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x5c}}, 0x24040084) 5m1.486823517s ago: executing program 0 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074") 5m1.034094888s ago: executing program 0 (id=226): writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df", 0xb}], 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37c}, {&(0x7f0000000a00)="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", 0x1d8}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m0.721499776s ago: executing program 0 (id=227): add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4f4, &(0x7f0000000ec0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 4m59.171974465s ago: executing program 0 (id=229): socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106) creat(&(0x7f0000000a00)='./bus\x00', 0xb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000380)='./bus\x00', 0x0, 0x139) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) 4m57.131994576s ago: executing program 4 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 4m57.112933386s ago: executing program 0 (id=235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 4m56.677982327s ago: executing program 4 (id=237): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x4f) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) 4m56.100002222s ago: executing program 1 (id=239): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) listxattr(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) unlink(&(0x7f0000000280)='./file1/file2\x00') 4m54.95112681s ago: executing program 4 (id=240): syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x1a9}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000680)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffffffff}}, {@dax_never}, {@lazytime}, {@journal_async_commit}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) rt_sigqueueinfo(0x0, 0x13, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 4m53.37027503s ago: executing program 1 (id=241): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00008cc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x4060, 0xc000, 0xa, 0x20002f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m53.3696269s ago: executing program 4 (id=242): socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106) creat(&(0x7f0000000a00)='./bus\x00', 0xb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) 4m53.005979859s ago: executing program 1 (id=243): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) listxattr(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") unlink(&(0x7f0000000280)='./file1/file2\x00') 4m52.752092625s ago: executing program 4 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 4m50.723120066s ago: executing program 1 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m50.334266935s ago: executing program 0 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002700)=@newtfilter={0x11c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0x7, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xf0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_SEL={0xe4, 0x5, {0x7, 0x1, 0xe, 0x6, 0xfff, 0x7374, 0x100, 0x0, [{0x6, 0x1, 0x2}, {0x2, 0x1, 0x0, 0x7}, {0x80000000, 0x1ff, 0x3, 0x6}, {0x3, 0x8, 0x0, 0x5}, {0x4, 0x7, 0x1, 0x6}, {0x9f33, 0x280000, 0x10, 0x3}, {0xebe4, 0x8, 0x7, 0xfffffff9}, {0x80000001, 0x7fffffff, 0x7, 0x9}, {0x66, 0xfffffffe, 0x7, 0x40}, {0x64, 0x300, 0x10000, 0xe}, {0xb93, 0x81, 0x8, 0xaf2}, {0x5, 0x0, 0x0, 0x3}, {0xfffffffe, 0x28, 0x6, 0x1}]}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 4m50.282698707s ago: executing program 1 (id=247): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x4f) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) 4m49.791115979s ago: executing program 34 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002700)=@newtfilter={0x11c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0x7, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xf0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_SEL={0xe4, 0x5, {0x7, 0x1, 0xe, 0x6, 0xfff, 0x7374, 0x100, 0x0, [{0x6, 0x1, 0x2}, {0x2, 0x1, 0x0, 0x7}, {0x80000000, 0x1ff, 0x3, 0x6}, {0x3, 0x8, 0x0, 0x5}, {0x4, 0x7, 0x1, 0x6}, {0x9f33, 0x280000, 0x10, 0x3}, {0xebe4, 0x8, 0x7, 0xfffffff9}, {0x80000001, 0x7fffffff, 0x7, 0x9}, {0x66, 0xfffffffe, 0x7, 0x40}, {0x64, 0x300, 0x10000, 0xe}, {0xb93, 0x81, 0x8, 0xaf2}, {0x5, 0x0, 0x0, 0x3}, {0xfffffffe, 0x28, 0x6, 0x1}]}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 4m49.602035434s ago: executing program 1 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x68, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x32, 0x5a, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3, [0x3]}, {0x0, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x2, {{0xe, 0x1, 0xfa, 0x0, 0x0, 0x0, 0x5, 0x3}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x10, 0x2, 0x0, 0x3, 0x0, 0x9}, 0x2, {0x1, 0x0, 0x1, 0x4, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 4m49.588614514s ago: executing program 4 (id=251): socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106) creat(&(0x7f0000000a00)='./bus\x00', 0xb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) 4m48.996609079s ago: executing program 35 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x68, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x32, 0x5a, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3, [0x3]}, {0x0, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x2, {{0xe, 0x1, 0xfa, 0x0, 0x0, 0x0, 0x5, 0x3}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x10, 0x2, 0x0, 0x3, 0x0, 0x9}, 0x2, {0x1, 0x0, 0x1, 0x4, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 4m48.94370358s ago: executing program 36 (id=251): socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106) creat(&(0x7f0000000a00)='./bus\x00', 0xb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) 10.537980847s ago: executing program 7 (id=1494): mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 10.501457398s ago: executing program 5 (id=1496): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 8.715993822s ago: executing program 5 (id=1497): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x301, 0x20}, 0xc) r1 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r5, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000000c0)=0x8000) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x5, 0x7, 0x7, 0x8, 0x8, 0x5, 0x9, 0x0, 0x10, 0xb, 0x9, 0x1, 0xa, 0xfe}, 0xe) 8.587185346s ago: executing program 7 (id=1500): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x764, &(0x7f0000000b00)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x37, &(0x7f0000000040)="beb6873df564652e529ffa99a01acb21e90d0f9f24713b62fd9db85170ac1407513c66017dd02ff52777b1cbee0ae8fce94c7fcc4510fa", 0x0, 0x0, 0x0}) 6.885842678s ago: executing program 6 (id=1502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x4}}]}, 0x20}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102396, 0x18ffc, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x6, 0x58, 0xfc}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 6.549733667s ago: executing program 7 (id=1504): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./cgroup.cpu/memory.force_empty\x00', &(0x7f0000000140)={{0x77359400}, {r2, r3/1000+60000}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000fc000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='\na', 0x2) 6.091624278s ago: executing program 5 (id=1505): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x141a40) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) syz_usb_connect$rtl8150(0x5, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 6.021345629s ago: executing program 8 (id=1506): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.943658731s ago: executing program 6 (id=1507): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x11) 5.870572504s ago: executing program 8 (id=1508): mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 5.786134046s ago: executing program 6 (id=1509): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0xfffffffe) socket$inet6(0xa, 0x3, 0x5) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffffffffffea6, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) syz_emit_ethernet(0xf6, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) listen(0xffffffffffffffff, 0x800) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 4.38042788s ago: executing program 6 (id=1510): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x308, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x61}, 0x0, 0x1e0, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x11, 0x4, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @dev={0xfe, 0x80, '\x00', 0x1e}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @mcast1, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 4.343876232s ago: executing program 8 (id=1511): r0 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 4.201348695s ago: executing program 6 (id=1512): open(0x0, 0x108943, 0x148) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0xffffffff) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1000a05, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc4d, &(0x7f0000001400)="$eJzs3VFsXtddAPD/ubbz2S0j3jqyFlb4CtJIvaakSVZnDSpfqGuYlKbWHO9tkr/YTvhUx7Zsh6XVAI8XHniYhBAPe7IEFdIQU0XRxKOBIm0vfUB74skCtZoQDwZNmoRUebr3O1/y2XEaL44dJ/392s//e889595zzr2+17F87gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOJ3Xz1/8oV0e3paeRC1AQAOwsXxr548tcPzHwB4dF26w7//AQAAAAAAAAAAAACAQyNFEU9EioWLG2myWm/rv9Cau35jYmR052IDqSrZU+UvP/0vnDp95ksvDp/txI8vf789Fa+PXzpff2X+2sLizNLSzHR9Yq41NT9d7HoPO5efuecaDZUdUIuI69NXrizVTz1/esvmG4Mf1h4/Nnhu+NkTT7fz3qhPjIyOjnfl6e2756Pf5k4jPI5EEScixXPf+3FqRkTVYXvsi7tcO/ttoGrEUNWIiZHRqiGzrebccrlxrNMRRUS9q1Cj00cHcC72pBGxUla/rPBQ2bzxheZi8/LsTH2subjcWm7Nz42ldm3L9tSjiLMpYjUi1mu3764viuiNFN85upEuR0RPpx++WA0MvnM9dv+dtS/Ketb7IlaLh+CcHWK1KOK1SPGT947HVNln+RNfiHitjN+PeLuML0ek8sI4E/HBDtcRD6feKOLPy/N/biNNV/eDzn3lwtfqX5m7Mt+Vt3Nf2dvzYTNfPQf+fBjYFg/GIb839UcRzeqOv5Hu/YcdAAAAAAAAAAAAAAAAAO63gSjiqUjx6r//YTWuOKpx6UfPDf/e4KdujhlPEU/eZT8p/j+ej4iVYndjco/kIcRjaSylBzyW+JOsP4r4ozz+71sPujIAAAAAAAAAAAAAAAAAAACfaEX8KFK89P7xtBrdc4q35q7WLzUvz7Znhe3M/duZM31zc3OzntqxkeNkjis5rua4luN6jlHk8jk2cpzMcSXH1SKiFhFreX09x+jJ5XNs5DiZ40qOqzmu5bieY/Tm8jk2cpzMcSXH1RzXclzPMQ7J3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+SIor4KFJ8+xsbKVJENCImox3Xag+6dgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqZaKeDdS1H+/cTOtNyJS9X/b8fLLmWgcKeNnojFcxpejcT7HZhV7G996APVnb/pSET+MFLX+d26e8E+1z39fe+3mZRBvf/PW2i/3tmNPZ+Pgh7XHjx09Nzz6q0/eaTntVIGhC6256zfqEyOjo+Ndyb356J/pShvMxy3uT9OJiKU333qjOTs7s3jvC+UlsIfiD2ph4H60/WAXjjyM/XwYFjbz1f7zFo/eQ1D5B7TwgG9MHIjy+f9BpPit9/+j88Dv/Pz3C+21m0/4+Okf33r+v7R9R/v0/H+iK+2l/NNIX29E//K1hb5jEf1Lb751onWteXXm6szcmZMnvzw8/OXTJ/uORPRfaf1aRLSXZmdO7rmrAAAAAAAAAAAAAAAAAA5WKuJ3IkXzhxupHhE3qvFag+eGnz3xdE/0VOOttozben380vn6K/PXFhZnlpZmpusTc62p+emZ3R6uvxruNTEyui+NuauBfa7/QP8r8wtvLrau/sHyjtsf6z9/eWl5sTm18+YYiCKi0Z0yVFV4YmS0qvRsqzlXFR3bcTDdz68vFfGfkWLqTD09k9Py+L/tI/y3jP9f2b6jfRr/9+mutPKYKRXx00jxm3/xZDxT1fOxuK3Pcr6/iRRDZz+f88WRMl+nDu33CrRHBpZ5/zdS/MNHW/N2xkM+cSvvC7vu2IdEef6PRop3/+y78es5rXfL+x92Pv+Pbd/RLs//5p9sK3eX8//ZrrTHtryv4P60/5OuPP8nIsXLT7wTv5HTej/m/R+dd28cz5lvvp9jn77/N7sKDVbH9fYPAAAAAAAAAACAyH//9beR4unR3vRiTtvN3/9Nb9/RPv391+e60qbvz3xFd10IU0wBAAAA8IjoS0X8KFJcXX7n5hjqreO/u8Z//vatX4yNpG1bq9/z/WL13oD7+fu/boP5uJN7bzYAAAAAAAAAAAAAAAAAAAAcKikV8WKeT31yh/nUByKWipxvLVK8+t/P5XzpWJmvMw/8YPW1/+L83Inzs7PzU83l5uXZmfr4QnNqpiz72Uix8defz2WLan71Z7bVpTMX+2KkGP27Tt72XOyducnb84G352Iv8346UvzX32/N25nH+pdu5T1V5v2rSPH1f9o577FbeU+Xeb8bKX7w9Xon72Nl3s77UT93K+/zU/NeFQoAAAAAAAAAAAAAAAAAAMDe9aUi/jRS/M+11Ztj+fP8/31dq5W3v9k13/82N6p5/ger+f/vtHwv8/8P3l7io822iM2j99hqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA43FIU8VakWLi4kdZq5Xpb/4XW3PUbEyOjOxcbSFXJnip/+el/4dTpM196cfhsJ358+fvtqXh9/NL5+ivz1xYWZ5aWZqbrE3OtqfnpmV3vYa/ltxuqOqB+7Y3r01euLNVPPX96y+Ybgx/WHj82eG742RNPd/JOjIyOjnfl6e2756PfJt0h/UgU8ZeR4rnv/Tj9cy2iiL33xV2unf02UDViqGrExMho1ZDZVnNuudw41umIIqLeVajR6aMDOBd70ohYKatfVniobN74QnOxeXl2pj7WXFxuLbfm58ZSu7Zle+pRxNkUsRoR67Xbd9cXRbwRKb5zdCP9Sy2ip9MPX7w4/tWTp+5cj2If27gLZT3rfRGrxUNwzg6xWhTxj5HiJ+8dj3+tRfRG+xNfiHitjN+PeDva5zuVF8aZiA92uI54OPVGEf9Xnv9zG+m9Wnk/6NxXLnyt/pXld7vzdu4rD/3z4SAd8ntTfxTxg+qOv5H+zfc1AAAAAAAAAAAAAAAAwCFSxK9EipfeP56q8cGdQdGLrbmr9UvNy7PtYX2dsX+dzZubm5v11I6N1E6ZzOsrOa7muJbjeo5R5PI5NsrYv7k5mddXclzNca24Ndi4Kt+Ty+fYyHEyx5UcV3Ncy3E9x+jN5XNs5DiZ40qOqzmu5bieYxySsXsAAAAAAAAAAAAAAAAAAMCjpaj+S/Htb2ykzVp7funJaMc184E+8n4WAAD//01P8iM=") r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1aa) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='1', 0x1) 4.181883676s ago: executing program 8 (id=1513): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r5, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000000c0)=0x8000) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x5, 0x7, 0x7, 0x8, 0x8, 0x5, 0x9, 0x0, 0x10, 0xb, 0x9, 0x1, 0xa, 0xfe}, 0xe) 2.41944637s ago: executing program 5 (id=1514): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000200)=@framed={{}, [@generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.338050932s ago: executing program 7 (id=1515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x4}}]}, 0x20}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102396, 0x18ffc, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x6, 0x58, 0xfc}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 2.210242265s ago: executing program 5 (id=1516): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x1) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c464a030403ff0700000000000002000600040000003e03000038000000d6000000977000007e032000000007000800070000000000d1c4397645784d7b46a79c994673d0785ff10e303d5e79592a35998452a7991d33fec04b5a694cf9d7a308748cf583953ac2b9c7182be8ed2b9914c3fd65dc81884d"], 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r3, 0x0, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)=0x1) r4 = fsopen(&(0x7f0000000380)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='source', &(0x7f0000000400)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa5U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-\x14V<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1c\x8b~\x00\x00\x00\x00\x00\x00i^N\xbd@\x01p\xb2\x88\xc3\xe2\x96T\xa3\xa5\xf2\x0f\xf2f\xb9$\xd2\x140x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x11) 1.514408502s ago: executing program 6 (id=1518): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") chdir(0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) sendfile(r0, r0, 0x0, 0x400000007ff) 1.469799703s ago: executing program 5 (id=1519): mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket(0x1e, 0x5, 0x0) 1.401935375s ago: executing program 7 (id=1520): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x308, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x61}, 0x0, 0x1e0, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x11, 0x4, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @dev={0xfe, 0x80, '\x00', 0x1e}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @mcast1, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1.294193518s ago: executing program 8 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') 0s ago: executing program 7 (id=1522): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x163440, 0x10) close(r1) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) kernel console output (not intermixed with test programs): id=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.8.734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e01b5e98e code=0x7ffc0000 [ 271.220240][ T28] audit: type=1326 audit(1791056558.472:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.8.734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e01b5e98e code=0x7ffc0000 [ 271.306998][ T28] audit: type=1326 audit(1791056558.472:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.8.734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e01b5e98e code=0x7ffc0000 [ 271.665934][ T8694] netlink: 88 bytes leftover after parsing attributes in process `syz.6.741'. [ 271.682480][ T8696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.873522][ T8708] FAULT_INJECTION: forcing a failure. [ 272.873522][ T8708] name failslab, interval 1, probability 0, space 0, times 0 [ 272.910104][ T8710] loop8: detected capacity change from 0 to 512 [ 272.933421][ T8708] CPU: 1 PID: 8708 Comm: syz.6.746 Not tainted syzkaller #0 [ 272.940776][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.950857][ T8708] Call Trace: [ 272.954154][ T8708] [ 272.957105][ T8708] dump_stack_lvl+0x18c/0x250 [ 272.961822][ T8708] ? show_regs_print_info+0x20/0x20 [ 272.967056][ T8708] ? load_image+0x420/0x420 [ 272.971600][ T8708] ? __might_sleep+0xe0/0xe0 [ 272.976220][ T8708] ? __lock_acquire+0x7eb0/0x7eb0 [ 272.981276][ T8708] should_fail_ex+0x394/0x4c0 [ 272.985986][ T8708] should_failslab+0x9/0x20 [ 272.990523][ T8708] slab_pre_alloc_hook+0x59/0x300 [ 272.995587][ T8708] kmem_cache_alloc_node+0x5e/0x310 [ 273.000824][ T8708] ? __alloc_skb+0x103/0x2c0 [ 273.005475][ T8708] __alloc_skb+0x103/0x2c0 [ 273.009922][ T8708] rtmsg_fib+0xdb/0x440 [ 273.014149][ T8708] ? atomic_notifier_call_chain+0x16e/0x180 [ 273.020087][ T8708] fib_table_delete+0xcd2/0xfc0 [ 273.024991][ T8708] ? nexthop_get_nhc_lookup+0x400/0x400 [ 273.030576][ T8708] ? l3mdev_fib_table+0x18/0x160 [ 273.035577][ T8708] ? fib_new_table+0x10a/0x2d0 [ 273.040397][ T8708] fib_magic+0x2ee/0x3b0 [ 273.044686][ T8708] ? fib_add_ifaddr+0x5d0/0x5d0 [ 273.049587][ T8708] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 273.055568][ T8708] fib_del_ifaddr+0x10b6/0x14c0 [ 273.060464][ T8708] ? inetaddr_event+0xf0/0x150 [ 273.065309][ T8708] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 273.071939][ T8708] fib_inetaddr_event+0xbb/0x1d0 [ 273.076916][ T8708] notifier_call_chain+0x18f/0x380 [ 273.082068][ T8708] blocking_notifier_call_chain+0x6a/0x90 [ 273.087831][ T8708] __inet_del_ifa+0xaac/0x1090 [ 273.092642][ T8708] inetdev_event+0x653/0x1610 [ 273.097355][ T8708] ? devinet_exit_net+0x220/0x220 [ 273.102423][ T8708] notifier_call_chain+0x18f/0x380 [ 273.107582][ T8708] dev_set_mtu_ext+0x463/0x680 [ 273.112395][ T8708] ? __read_once_word_nocheck+0x9/0x10 [ 273.117898][ T8708] ? dev_validate_mtu+0x170/0x170 [ 273.122959][ T8708] ? is_bpf_text_address+0x28f/0x2a0 [ 273.128297][ T8708] ? is_bpf_text_address+0x26/0x2a0 [ 273.133551][ T8708] do_setlink+0x842/0x3f40 [ 273.138010][ T8708] ? arch_stack_walk+0x160/0x190 [ 273.142992][ T8708] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 273.149177][ T8708] ? stack_trace_save+0xaa/0x100 [ 273.154152][ T8708] ? stack_trace_snprint+0xf0/0xf0 [ 273.159323][ T8708] ? __nla_validate+0x50/0x50 [ 273.164066][ T8708] ? validate_linkmsg+0x719/0x910 [ 273.169126][ T8708] rtnl_newlink+0x1848/0x2170 [ 273.173848][ T8708] ? rtnl_newlink+0x411/0x2170 [ 273.178656][ T8708] ? rtnl_setlink+0x4e0/0x4e0 [ 273.183364][ T8708] ? trace_raw_output_contention_end+0xd0/0xd0 [ 273.189573][ T8708] ? rcu_is_watching+0x15/0xb0 [ 273.194401][ T8708] ? trace_contention_end+0x39/0xe0 [ 273.199628][ T8708] ? __mutex_lock+0x30d/0xc80 [ 273.204373][ T8708] ? rtnl_setlink+0x4e0/0x4e0 [ 273.205335][ T8710] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 273.209073][ T8708] rtnetlink_rcv_msg+0x843/0xf90 [ 273.209165][ T8708] ? rtnetlink_rcv_msg+0x220/0xf90 [ 273.209199][ T8708] ? rtnetlink_bind+0x80/0x80 [ 273.209231][ T8708] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 273.239055][ T8708] ? lock_chain_count+0x20/0x20 [ 273.243925][ T8708] ? __local_bh_enable_ip+0x13a/0x1c0 [ 273.249317][ T8708] ? lockdep_hardirqs_on+0x98/0x150 [ 273.254523][ T8708] ? __local_bh_enable_ip+0x13a/0x1c0 [ 273.259910][ T8708] ? _local_bh_enable+0xa0/0xa0 [ 273.264802][ T8708] ? __dev_queue_xmit+0x272/0x37e0 [ 273.269920][ T8708] ? __dev_queue_xmit+0x1329/0x37e0 [ 273.275125][ T8708] ? __dev_queue_xmit+0x272/0x37e0 [ 273.280265][ T8708] ? ref_tracker_free+0x686/0x830 [ 273.285315][ T8708] netlink_rcv_skb+0x235/0x4c0 [ 273.290123][ T8708] ? rtnetlink_bind+0x80/0x80 [ 273.294809][ T8708] ? netlink_ack+0x1160/0x1160 [ 273.299594][ T8708] ? __lock_acquire+0x7eb0/0x7eb0 [ 273.304631][ T8708] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.309846][ T8708] netlink_unicast+0x7b1/0x930 [ 273.314623][ T8708] netlink_sendmsg+0x8d0/0xbf0 [ 273.319405][ T8708] ? netlink_getsockopt+0x590/0x590 [ 273.324609][ T8708] ? apparmor_socket_sendmsg+0x8e/0x330 [ 273.330165][ T8708] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.335460][ T8708] ? security_socket_sendmsg+0x80/0xa0 [ 273.340922][ T8708] ? netlink_getsockopt+0x590/0x590 [ 273.346131][ T8708] ____sys_sendmsg+0x61b/0x980 [ 273.350913][ T8708] ? __asan_memset+0x22/0x40 [ 273.355509][ T8708] ? __sys_sendmsg_sock+0x30/0x30 [ 273.360546][ T8708] ? __import_iovec+0x5f2/0x850 [ 273.365464][ T8708] ? import_iovec+0x73/0xa0 [ 273.370009][ T8708] ___sys_sendmsg+0x2a6/0x360 [ 273.374717][ T8708] ? __sys_sendmsg+0x2b0/0x2b0 [ 273.379536][ T8708] __se_sys_sendmsg+0x1d0/0x2c0 [ 273.384430][ T8708] ? __x64_sys_sendmsg+0x80/0x80 [ 273.389416][ T8708] ? lockdep_hardirqs_on+0x98/0x150 [ 273.394638][ T8708] do_syscall_64+0x55/0xb0 [ 273.399068][ T8708] ? clear_bhb_loop+0x40/0x90 [ 273.403750][ T8708] ? clear_bhb_loop+0x40/0x90 [ 273.408434][ T8708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.414339][ T8708] RIP: 0033:0x7f83b939e159 [ 273.418759][ T8708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.438373][ T8708] RSP: 002b:00007f83ba2b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.446793][ T8708] RAX: ffffffffffffffda RBX: 00007f83b9625fa0 RCX: 00007f83b939e159 [ 273.454770][ T8708] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 273.462745][ T8708] RBP: 00007f83b943506b R08: 0000000000000000 R09: 0000000000000000 [ 273.470721][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.478695][ T8708] R13: 00007f83b9626038 R14: 00007f83b9625fa0 R15: 00007ffeb96727c8 [ 273.486686][ T8708] [ 273.727663][ T8708] netlink: 128 bytes leftover after parsing attributes in process `syz.6.746'. [ 273.771936][ T8708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.848510][ T8710] loop8: detected capacity change from 0 to 128 [ 273.871120][ T8710] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.925931][ T8710] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.613145][ T8731] netlink: 72 bytes leftover after parsing attributes in process `syz.5.752'. [ 274.726982][ T8731] bridge0: port 3(syz_tun) entered disabled state [ 274.733731][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.155131][ T8742] FAULT_INJECTION: forcing a failure. [ 275.155131][ T8742] name failslab, interval 1, probability 0, space 0, times 0 [ 275.179906][ T8742] CPU: 0 PID: 8742 Comm: syz.6.756 Not tainted syzkaller #0 [ 275.187269][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.197356][ T8742] Call Trace: [ 275.200660][ T8742] [ 275.203613][ T8742] dump_stack_lvl+0x18c/0x250 [ 275.208338][ T8742] ? show_regs_print_info+0x20/0x20 [ 275.213574][ T8742] ? load_image+0x420/0x420 [ 275.218110][ T8742] ? __might_sleep+0xe0/0xe0 [ 275.222727][ T8742] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.227779][ T8742] should_fail_ex+0x394/0x4c0 [ 275.232490][ T8742] should_failslab+0x9/0x20 [ 275.237033][ T8742] slab_pre_alloc_hook+0x59/0x300 [ 275.242096][ T8742] kmem_cache_alloc+0x5a/0x2c0 [ 275.246896][ T8742] ? posix_lock_inode+0x246/0x3270 [ 275.252049][ T8742] posix_lock_inode+0x246/0x3270 [ 275.257022][ T8742] ? aa_path_link+0xf80/0xf80 [ 275.261733][ T8742] ? lockdep_softirqs_off+0x440/0x440 [ 275.267129][ T8742] ? slab_post_alloc_hook+0x86/0x4d0 [ 275.272438][ T8742] ? end_current_label_crit_section+0x149/0x170 [ 275.278711][ T8742] ? posix_lock_file+0x50/0x50 [ 275.283512][ T8742] ? bpf_lsm_file_lock+0x9/0x10 [ 275.288407][ T8742] fcntl_setlk+0x9c0/0x1070 [ 275.292964][ T8742] ? vfs_lock_file+0x110/0x110 [ 275.297765][ T8742] ? __might_fault+0xaa/0x120 [ 275.302464][ T8742] ? __might_fault+0xc6/0x120 [ 275.307160][ T8742] ? __might_fault+0xaa/0x120 [ 275.311867][ T8742] do_fcntl+0x88e/0x14a0 [ 275.316141][ T8742] ? kill_fasync+0x4b0/0x4b0 [ 275.320757][ T8742] ? __fget_files+0x28/0x460 [ 275.325383][ T8742] ? __fget_files+0x3fc/0x460 [ 275.330092][ T8742] ? tomoyo_file_fcntl+0x7b/0x220 [ 275.335143][ T8742] ? bpf_lsm_file_fcntl+0x9/0x10 [ 275.340106][ T8742] ? security_file_fcntl+0x80/0xa0 [ 275.345259][ T8742] __se_sys_fcntl+0xc9/0x1a0 [ 275.349888][ T8742] do_syscall_64+0x55/0xb0 [ 275.354335][ T8742] ? clear_bhb_loop+0x40/0x90 [ 275.359043][ T8742] ? clear_bhb_loop+0x40/0x90 [ 275.363761][ T8742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.369699][ T8742] RIP: 0033:0x7f83b939e159 [ 275.374151][ T8742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.393803][ T8742] RSP: 002b:00007f83ba2b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 275.402294][ T8742] RAX: ffffffffffffffda RBX: 00007f83b9625fa0 RCX: 00007f83b939e159 [ 275.410302][ T8742] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 275.418302][ T8742] RBP: 00007f83b943506b R08: 0000000000000000 R09: 0000000000000000 [ 275.426301][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.434291][ T8742] R13: 00007f83b9626038 R14: 00007f83b9625fa0 R15: 00007ffeb96727c8 [ 275.442310][ T8742] [ 275.489203][ T8750] loop7: detected capacity change from 0 to 512 [ 275.579734][ T8752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.652064][ T8750] ext4: Unknown parameter 'nouser_xattr' [ 276.210906][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 277.183872][ T8759] loop8: detected capacity change from 0 to 512 [ 277.219815][ T8759] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 279.005530][ T8773] loop8: detected capacity change from 0 to 1024 [ 279.059328][ T8773] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 279.100608][ T8773] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 279.110433][ T8773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.171336][ T8773] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 279.231690][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.284424][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 279.284438][ T28] audit: type=1326 audit(1791056567.642:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.363907][ T28] audit: type=1326 audit(1791056567.642:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.399233][ T28] audit: type=1326 audit(1791056567.642:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.445531][ T28] audit: type=1326 audit(1791056567.682:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.484358][ T28] audit: type=1326 audit(1791056567.692:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.589067][ T28] audit: type=1326 audit(1791056567.692:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.614019][ T28] audit: type=1326 audit(1791056567.692:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.645366][ T28] audit: type=1326 audit(1791056567.692:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.685230][ T28] audit: type=1326 audit(1791056567.692:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.714843][ T8798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.731761][ T28] audit: type=1326 audit(1791056567.692:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.5.767" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 279.764071][ T8801] loop5: detected capacity change from 0 to 512 [ 279.795177][ T8801] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 281.101089][ T8821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.118297][ T8821] loop7: detected capacity change from 0 to 512 [ 281.195179][ T8827] loop5: detected capacity change from 0 to 1024 [ 281.200574][ T8821] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.214276][ T8821] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.250523][ T8827] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 281.264040][ T8827] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 281.273009][ T8827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.384549][ T8827] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 281.520575][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.916794][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.453784][ T8844] loop7: detected capacity change from 0 to 4096 [ 282.503186][ T8849] loop8: detected capacity change from 0 to 512 [ 282.515735][ T8849] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 282.531055][ T8846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.563461][ T8844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.265258][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.274404][ T8611] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.286900][ T8849] loop8: detected capacity change from 0 to 128 [ 283.301306][ T8849] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 283.334351][ T8849] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 283.354617][ T8868] FAULT_INJECTION: forcing a failure. [ 283.354617][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 283.384816][ T8868] CPU: 0 PID: 8868 Comm: syz.6.787 Not tainted syzkaller #0 [ 283.392173][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.402259][ T8868] Call Trace: [ 283.405556][ T8868] [ 283.408504][ T8868] dump_stack_lvl+0x18c/0x250 [ 283.413218][ T8868] ? show_regs_print_info+0x20/0x20 [ 283.418443][ T8868] ? load_image+0x420/0x420 [ 283.422976][ T8868] ? __might_sleep+0xe0/0xe0 [ 283.427592][ T8868] ? __lock_acquire+0x7eb0/0x7eb0 [ 283.432645][ T8868] should_fail_ex+0x394/0x4c0 [ 283.437361][ T8868] should_failslab+0x9/0x20 [ 283.441906][ T8868] slab_pre_alloc_hook+0x59/0x300 [ 283.446966][ T8868] kmem_cache_alloc+0x5a/0x2c0 [ 283.451757][ T8868] ? getname_flags+0xbb/0x500 [ 283.456462][ T8868] getname_flags+0xbb/0x500 [ 283.461004][ T8868] __x64_sys_mkdirat+0x7c/0xa0 [ 283.465798][ T8868] do_syscall_64+0x55/0xb0 [ 283.470241][ T8868] ? clear_bhb_loop+0x40/0x90 [ 283.474935][ T8868] ? clear_bhb_loop+0x40/0x90 [ 283.479634][ T8868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.485556][ T8868] RIP: 0033:0x7f83b939e159 [ 283.489995][ T8868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.509630][ T8868] RSP: 002b:00007f83ba2b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 283.518072][ T8868] RAX: ffffffffffffffda RBX: 00007f83b9625fa0 RCX: 00007f83b939e159 [ 283.526067][ T8868] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 283.534058][ T8868] RBP: 00007f83b943506b R08: 0000000000000000 R09: 0000000000000000 [ 283.542054][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.550049][ T8868] R13: 00007f83b9626038 R14: 00007f83b9625fa0 R15: 00007ffeb96727c8 [ 283.558059][ T8868] [ 284.032035][ T8875] loop5: detected capacity change from 0 to 512 [ 284.246615][ T8875] syz.5.788: attempt to access beyond end of device [ 284.246615][ T8875] loop5: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 284.300348][ T8875] syz.5.788: attempt to access beyond end of device [ 284.300348][ T8875] loop5: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 284.330730][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 284.330744][ T28] audit: type=1800 audit(1791056572.692:326): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.788" name="file2" dev="loop5" ino=1048610 res=0 errno=0 [ 284.383840][ T8878] loop6: detected capacity change from 0 to 1024 [ 284.404335][ T8878] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 284.419584][ T8878] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 284.428500][ T8878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.465038][ T8878] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 284.681549][ T8887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.697870][ T8887] loop8: detected capacity change from 0 to 512 [ 284.798260][ T8887] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.811125][ T8887] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.129160][ T28] audit: type=1326 audit(1791056573.492:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7139e159 code=0x7ffc0000 [ 285.271101][ T28] audit: type=1326 audit(1791056573.522:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7139e159 code=0x7ffc0000 [ 285.403172][ T28] audit: type=1326 audit(1791056573.522:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7139e159 code=0x7ffc0000 [ 285.537577][ T28] audit: type=1326 audit(1791056573.522:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2a7139e159 code=0x7ffc0000 [ 285.672626][ T28] audit: type=1326 audit(1791056573.582:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 285.792748][ T28] audit: type=1326 audit(1791056573.582:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 285.928308][ T28] audit: type=1326 audit(1791056573.602:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 286.044451][ T28] audit: type=1326 audit(1791056573.602:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 286.168814][ T28] audit: type=1326 audit(1791056573.602:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 286.205076][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.216555][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.412174][ T8910] batman_adv: batadv0: Adding interface: syzkaller0 [ 286.435938][ T8910] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.503973][ T8910] batman_adv: batadv0: Interface activated: syzkaller0 [ 286.531621][ T8911] syzkaller0: entered promiscuous mode [ 286.538149][ T8911] syzkaller0: entered allmulticast mode [ 286.748248][ T8909] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 286.800810][ T8909] batman_adv: batadv0: Removing interface: syzkaller0 [ 286.899346][ T8921] gtp0: entered promiscuous mode [ 286.912965][ T8921] gtp0: entered allmulticast mode [ 286.934495][ T8925] loop7: detected capacity change from 0 to 512 [ 286.993588][ T8925] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 287.074848][ T8925] loop7: detected capacity change from 0 to 128 [ 287.095408][ T8925] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.164792][ T8925] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 288.062961][ T8946] loop5: detected capacity change from 0 to 1024 [ 288.135721][ T8946] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 288.151403][ T8946] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 288.160480][ T8946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.196937][ T8946] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 288.337895][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.546641][ T8991] syzkaller0: entered promiscuous mode [ 289.552183][ T8991] syzkaller0: entered allmulticast mode [ 289.803877][ T9002] loop7: detected capacity change from 0 to 512 [ 289.853309][ T9002] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 289.887443][ T9007] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(12) [ 289.986061][ T8928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.707207][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.814'. [ 291.089972][ T9025] syzkaller0: entered promiscuous mode [ 291.095600][ T9025] syzkaller0: entered allmulticast mode [ 291.332293][ T9041] loop6: detected capacity change from 0 to 512 [ 291.393483][ T9041] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 292.596161][ T9073] syzkaller0: entered promiscuous mode [ 292.616057][ T9073] syzkaller0: entered allmulticast mode [ 294.181450][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 294.181465][ T28] audit: type=1326 audit(1791056582.542:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.214935][ T28] audit: type=1326 audit(1791056582.542:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.226841][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 294.249678][ T28] audit: type=1326 audit(1791056582.542:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.274671][ T28] audit: type=1326 audit(1791056582.542:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.300925][ T28] audit: type=1326 audit(1791056582.572:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.332143][ T28] audit: type=1326 audit(1791056582.572:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.357134][ T28] audit: type=1326 audit(1791056582.572:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.381301][ T9044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.381973][ T28] audit: type=1326 audit(1791056582.572:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.416385][ T28] audit: type=1326 audit(1791056582.572:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.442262][ T28] audit: type=1326 audit(1791056582.572:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.5.841" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 294.461924][ T8] usb 8-1: config 0 has an invalid interface number: 18 but max is 0 [ 294.482249][ T8] usb 8-1: config 0 has no interface number 0 [ 294.494268][ T8] usb 8-1: config 0 interface 18 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 294.526054][ T8] usb 8-1: config 0 interface 18 has no altsetting 0 [ 294.547595][ T8] usb 8-1: New USB device found, idVendor=24c6, idProduct=e966, bcdDevice=9c.f0 [ 294.557520][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.585044][ T8] usb 8-1: Product: syz [ 294.592291][ T8] usb 8-1: Manufacturer: syz [ 294.603639][ T8] usb 8-1: SerialNumber: syz [ 294.667757][ T8] usb 8-1: config 0 descriptor?? [ 294.733636][ T9120] syzkaller0: entered promiscuous mode [ 294.776302][ T9120] syzkaller0: entered allmulticast mode [ 295.080003][ T9125] : renamed from bond_slave_0 [ 296.636043][ T9146] loop6: detected capacity change from 0 to 1024 [ 296.930355][ T9146] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 297.272673][ T9146] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 297.282037][ T9146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.547523][ T9146] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 297.658399][ T8] usb 8-1: USB disconnect, device number 2 [ 297.735696][ T9163] syzkaller0: entered promiscuous mode [ 297.745942][ T9163] syzkaller0: entered allmulticast mode [ 297.748453][ T49] nci: nci_rsp_packet: unknown rsp opcode 0x821 [ 297.881188][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.151470][ T9185] ip6gretap0: entered promiscuous mode [ 299.719879][ T9212] loop7: detected capacity change from 0 to 1024 [ 299.740202][ T9212] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 299.751993][ T9212] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 299.761745][ T9212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.796842][ T9212] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 300.061789][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.108328][ T9226] loop5: detected capacity change from 0 to 512 [ 300.124684][ T9226] EXT4-fs: Ignoring removed oldalloc option [ 300.191769][ T9226] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.867: bg 0: block 5: invalid block bitmap [ 300.234739][ T9226] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 300.246633][ T9230] loop7: detected capacity change from 0 to 128 [ 300.300182][ T9226] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.867: invalid indirect mapped block 3 (level 2) [ 300.346754][ T9226] EXT4-fs (loop5): 1 orphan inode deleted [ 300.362533][ T9226] EXT4-fs (loop5): 1 truncate cleaned up [ 300.376975][ T9226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.477427][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.583806][ T9162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.818527][ T9255] netlink: 184 bytes leftover after parsing attributes in process `syz.5.874'. [ 301.174958][ T9264] loop5: detected capacity change from 0 to 764 [ 301.314876][ T9264] rock: directory entry would overflow storage [ 301.433515][ T9264] rock: sig=0x4654, size=5, remaining=4 [ 301.978579][ T9275] loop6: detected capacity change from 0 to 164 [ 301.997056][ T9277] syzkaller1: entered promiscuous mode [ 302.023992][ T9277] syzkaller1: entered allmulticast mode [ 302.194398][ T9280] loop5: detected capacity change from 0 to 164 [ 302.298146][ T9280] Unable to read rock-ridge attributes [ 302.308180][ T9280] Unable to read rock-ridge attributes [ 302.377244][ T9280] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 302.946762][ T9294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.964990][ T9294] loop5: detected capacity change from 0 to 512 [ 303.274643][ T9294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.287542][ T9294] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.619863][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.981515][ T9313] loop7: detected capacity change from 0 to 1024 [ 304.036157][ T9313] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 304.109783][ T9313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.343098][ T9321] FAULT_INJECTION: forcing a failure. [ 304.343098][ T9321] name failslab, interval 1, probability 0, space 0, times 0 [ 304.378424][ T9321] CPU: 0 PID: 9321 Comm: syz.5.886 Not tainted syzkaller #0 [ 304.385784][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.395872][ T9321] Call Trace: [ 304.399183][ T9321] [ 304.402129][ T9321] dump_stack_lvl+0x18c/0x250 [ 304.406856][ T9321] ? show_regs_print_info+0x20/0x20 [ 304.412101][ T9321] ? load_image+0x420/0x420 [ 304.416653][ T9321] ? __lock_acquire+0x7eb0/0x7eb0 [ 304.421709][ T9321] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 304.427723][ T9321] ? __lock_acquire+0x7eb0/0x7eb0 [ 304.432789][ T9321] should_fail_ex+0x394/0x4c0 [ 304.437513][ T9321] should_failslab+0x9/0x20 [ 304.442040][ T9321] slab_pre_alloc_hook+0x59/0x300 [ 304.447074][ T9321] ? copy_net_ns+0x112/0x530 [ 304.451667][ T9321] ? copy_net_ns+0x112/0x530 [ 304.456259][ T9321] __kmem_cache_alloc_node+0x53/0x250 [ 304.461645][ T9321] ? copy_net_ns+0x112/0x530 [ 304.466238][ T9321] __kmalloc+0xa7/0x240 [ 304.470404][ T9321] copy_net_ns+0x112/0x530 [ 304.474845][ T9321] create_new_namespaces+0x3ce/0x700 [ 304.480171][ T9321] unshare_nsproxy_namespaces+0x11a/0x160 [ 304.485914][ T9321] ksys_unshare+0x4fa/0x8f0 [ 304.490442][ T9321] ? sighand_ctor+0x50/0x50 [ 304.494947][ T9321] ? lock_chain_count+0x20/0x20 [ 304.499803][ T9321] ? syscall_enter_from_user_mode+0x25/0x80 [ 304.505704][ T9321] __x64_sys_unshare+0x38/0x40 [ 304.510472][ T9321] do_syscall_64+0x55/0xb0 [ 304.514895][ T9321] ? clear_bhb_loop+0x40/0x90 [ 304.519567][ T9321] ? clear_bhb_loop+0x40/0x90 [ 304.524238][ T9321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.530146][ T9321] RIP: 0033:0x7fd8c479e159 [ 304.534564][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.554184][ T9321] RSP: 002b:00007fd8c5707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 304.562604][ T9321] RAX: ffffffffffffffda RBX: 00007fd8c4a25fa0 RCX: 00007fd8c479e159 [ 304.570579][ T9321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 304.578547][ T9321] RBP: 00007fd8c483506b R08: 0000000000000000 R09: 0000000000000000 [ 304.586523][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.594499][ T9321] R13: 00007fd8c4a26038 R14: 00007fd8c4a25fa0 R15: 00007fff56f4a7e8 [ 304.602484][ T9321] [ 304.643803][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.896000][ T28] kauditd_printk_skb: 1206 callbacks suppressed [ 304.896019][ T28] audit: type=1326 audit(1791056593.252:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 304.991388][ T28] audit: type=1326 audit(1791056593.252:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 305.065897][ T28] audit: type=1326 audit(1791056593.252:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 305.119903][ T28] audit: type=1326 audit(1791056593.252:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 305.175297][ T28] audit: type=1326 audit(1791056593.252:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 305.228952][ T9338] netlink: 25 bytes leftover after parsing attributes in process `syz.7.893'. [ 305.247657][ T28] audit: type=1326 audit(1791056593.272:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 305.297911][ T9344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.313689][ T9344] loop5: detected capacity change from 0 to 512 [ 305.331984][ T28] audit: type=1326 audit(1791056593.352:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 305.521884][ T28] audit: type=1326 audit(1791056593.352:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 305.649186][ T9344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.662300][ T9344] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.744438][ T28] audit: type=1326 audit(1791056593.352:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 305.939579][ T28] audit: type=1326 audit(1791056593.352:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.6.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 307.334746][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.560844][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 308.471717][ T9388] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 309.944635][ T9403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.960676][ T9403] loop7: detected capacity change from 0 to 512 [ 311.318696][ T9403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.331879][ T9403] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.499624][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.926489][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 311.926506][ T28] audit: type=1326 audit(1791056600.292:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7139e159 code=0x7ffc0000 [ 312.025213][ T28] audit: type=1326 audit(1791056600.322:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7139e159 code=0x7ffc0000 [ 312.078814][ T28] audit: type=1326 audit(1791056600.332:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7139e159 code=0x7ffc0000 [ 312.156217][ T28] audit: type=1326 audit(1791056600.332:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7139e159 code=0x7ffc0000 [ 312.215903][ T28] audit: type=1326 audit(1791056600.332:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2a7139e159 code=0x7ffc0000 [ 312.326221][ T28] audit: type=1326 audit(1791056600.412:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 312.395916][ T28] audit: type=1326 audit(1791056600.422:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 312.526000][ T28] audit: type=1326 audit(1791056600.422:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 312.585223][ T28] audit: type=1326 audit(1791056600.422:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 312.611237][ T28] audit: type=1326 audit(1791056600.422:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.7.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a7135e98e code=0x7ffc0000 [ 313.744120][ T9459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.760708][ T9459] loop6: detected capacity change from 0 to 512 [ 313.878404][ T9459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.891353][ T9459] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.499551][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.511389][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.926'. [ 315.768776][ T9493] loop5: detected capacity change from 0 to 1024 [ 315.842712][ T9493] EXT4-fs: Ignoring removed bh option [ 316.061105][ T9493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.238329][ T9493] process 'syz.5.928' launched './file2' with NULL argv: empty string added [ 316.459154][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.005027][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 317.043802][ T9534] netlink: 7 bytes leftover after parsing attributes in process `syz.6.937'. [ 317.051103][ T9535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.070635][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.6.937'. [ 317.202943][ T9535] loop5: detected capacity change from 0 to 512 [ 317.369526][ T9535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.396402][ T9535] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.050846][ T9558] ipt_REJECT: TCP_RESET invalid for non-tcp [ 318.699230][ T9584] loop8: detected capacity change from 0 to 512 [ 318.749331][ T9584] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 318.874473][ T9584] EXT4-fs (loop8): 1 truncate cleaned up [ 318.905702][ T9584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.814377][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.860092][ T9611] ipt_REJECT: TCP_RESET invalid for non-tcp [ 320.055423][ T9618] netlink: 'syz.6.955': attribute type 3 has an invalid length. [ 320.064368][ T9615] syzkaller0: entered promiscuous mode [ 320.080393][ T9615] syzkaller0: entered allmulticast mode [ 320.185677][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.192275][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.646605][ T9646] ipt_REJECT: TCP_RESET invalid for non-tcp [ 321.907240][ T9653] syzkaller0: entered promiscuous mode [ 321.912769][ T9653] syzkaller0: entered allmulticast mode [ 322.001864][ T9662] loop7: detected capacity change from 0 to 512 [ 322.015695][ T9662] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.061193][ T9662] EXT4-fs (loop7): failed to initialize system zone (-117) [ 322.087075][ T9662] EXT4-fs (loop7): mount failed [ 322.157445][ T8668] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.758150][ T9683] ipt_REJECT: TCP_RESET invalid for non-tcp [ 323.111818][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.348869][ T9694] syzkaller0: entered promiscuous mode [ 323.354419][ T9694] syzkaller0: entered allmulticast mode [ 323.684137][ T9708] ipt_REJECT: TCP_RESET invalid for non-tcp [ 323.914625][ T9716] loop5: detected capacity change from 0 to 512 [ 324.067436][ T9716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.132689][ T9716] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.222983][ T9725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.308904][ T9725] loop7: detected capacity change from 0 to 512 [ 324.389244][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.488483][ T9725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.627438][ T9725] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.754598][ T9734] loop5: detected capacity change from 0 to 128 [ 324.832042][ T9734] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.923101][ T9734] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 325.865440][ T6409] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.279013][ T9773] syzkaller0: entered promiscuous mode [ 326.301074][ T9773] syzkaller0: entered allmulticast mode [ 326.399980][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.992'. [ 326.424332][ T9782] random: crng reseeded on system resumption [ 326.821665][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1003'. [ 327.271802][ T9809] syzkaller0: entered promiscuous mode [ 327.281352][ T9809] syzkaller0: entered allmulticast mode [ 327.639351][ T9816] loop8: detected capacity change from 0 to 256 [ 327.649374][ T9818] loop5: detected capacity change from 0 to 256 [ 328.592722][ T9839] syzkaller0: entered promiscuous mode [ 328.608150][ T9839] syzkaller0: entered allmulticast mode [ 328.645546][ T9839] tipc: Enabling of bearer rejected, failed to enable media [ 328.782194][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.831944][ T9841] loop6: detected capacity change from 0 to 512 [ 328.848485][ T9841] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 328.958911][ T9841] EXT4-fs (loop6): 1 truncate cleaned up [ 328.966915][ T9841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.120361][ T9853] loop8: detected capacity change from 0 to 256 [ 330.406232][ T9878] syzkaller0: entered promiscuous mode [ 330.411794][ T9878] syzkaller0: entered allmulticast mode [ 330.457692][ T9878] tipc: Enabling of bearer rejected, failed to enable media [ 330.504254][ T9881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.571789][ T9881] loop8: detected capacity change from 0 to 512 [ 330.652732][ T9881] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.674124][ T9881] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.697065][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.920972][ T9891] loop6: detected capacity change from 0 to 128 [ 331.466880][ T9907] syz.5.1035 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 332.819024][ T9926] netlink: 'syz.7.1040': attribute type 3 has an invalid length. [ 333.134008][ T9931] loop6: detected capacity change from 0 to 128 [ 334.165500][ T9937] syzkaller0: entered promiscuous mode [ 334.171702][ T9937] syzkaller0: entered allmulticast mode [ 334.183977][ T9937] tipc: Enabling of bearer rejected, failed to enable media [ 334.555145][ T9940] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1044'. [ 334.617431][ T9942] FAULT_INJECTION: forcing a failure. [ 334.617431][ T9942] name fail_futex, interval 1, probability 0, space 0, times 1 [ 334.653362][ T9942] CPU: 1 PID: 9942 Comm: syz.5.1045 Not tainted syzkaller #0 [ 334.660820][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.670915][ T9942] Call Trace: [ 334.674225][ T9942] [ 334.677184][ T9942] dump_stack_lvl+0x18c/0x250 [ 334.682013][ T9942] ? show_regs_print_info+0x20/0x20 [ 334.687267][ T9942] ? load_image+0x420/0x420 [ 334.691820][ T9942] ? rcu_read_lock_sched_held+0x8a/0x110 [ 334.697502][ T9942] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 334.703757][ T9942] should_fail_ex+0x394/0x4c0 [ 334.708504][ T9942] get_futex_key+0x136/0x1030 [ 334.713263][ T9942] ? futex_setup_timer+0xc0/0xc0 [ 334.718232][ T9942] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 334.724263][ T9942] ? __lock_acquire+0x7eb0/0x7eb0 [ 334.729332][ T9942] ? lock_chain_count+0x20/0x20 [ 334.734223][ T9942] futex_wait_setup+0xbc/0x270 [ 334.739030][ T9942] ? futex_wait_multiple+0x920/0x920 [ 334.744348][ T9942] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 334.750295][ T9942] ? _raw_spin_unlock+0x40/0x40 [ 334.755222][ T9942] futex_wait+0x1bc/0x5c0 [ 334.759610][ T9942] ? futex_wait_setup+0x270/0x270 [ 334.764680][ T9942] ? exc_page_fault+0x8c/0x100 [ 334.769477][ T9942] ? lockdep_hardirqs_on+0x98/0x150 [ 334.774735][ T9942] ? rcuref_put_slowpath+0xc1/0x150 [ 334.779987][ T9942] do_futex+0x2ff/0x3e0 [ 334.784174][ T9942] ? _copy_from_user+0xc8/0xe0 [ 334.788976][ T9942] ? __ia32_sys_get_robust_list+0x110/0x110 [ 334.794905][ T9942] __se_sys_futex+0x3a9/0x440 [ 334.799617][ T9942] ? __x64_sys_futex+0xf0/0xf0 [ 334.804428][ T9942] ? __x64_sys_futex+0x21/0xf0 [ 334.809227][ T9942] do_syscall_64+0x55/0xb0 [ 334.813686][ T9942] ? clear_bhb_loop+0x40/0x90 [ 334.818418][ T9942] ? clear_bhb_loop+0x40/0x90 [ 334.823123][ T9942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.829053][ T9942] RIP: 0033:0x7fd8c479e159 [ 334.833506][ T9942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.853146][ T9942] RSP: 002b:00007fd8c57070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.861595][ T9942] RAX: ffffffffffffffda RBX: 00007fd8c4a25fa8 RCX: 00007fd8c479e159 [ 334.869604][ T9942] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd8c4a25fa8 [ 334.877618][ T9942] RBP: 00007fd8c4a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 334.885634][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.893650][ T9942] R13: 00007fd8c4a26038 R14: 00007fff56f4a700 R15: 00007fff56f4a7e8 [ 334.901685][ T9942] [ 335.196501][ T9958] loop5: detected capacity change from 0 to 256 [ 335.446684][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 335.446702][ T28] audit: type=1326 audit(1791056623.792:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 335.553492][ T28] audit: type=1326 audit(1791056623.792:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 335.688169][ T9968] loop5: detected capacity change from 0 to 256 [ 335.909588][ T9968] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.037719][ T28] audit: type=1326 audit(1791056623.792:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 336.316478][ T28] audit: type=1326 audit(1791056623.792:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f83b939e159 code=0x7ffc0000 [ 336.430448][ T9972] FAULT_INJECTION: forcing a failure. [ 336.430448][ T9972] name failslab, interval 1, probability 0, space 0, times 0 [ 336.444087][ T28] audit: type=1326 audit(1791056623.902:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 336.469418][ T9972] CPU: 1 PID: 9972 Comm: syz.7.1051 Not tainted syzkaller #0 [ 336.476851][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.486937][ T9972] Call Trace: [ 336.490243][ T9972] [ 336.493207][ T9972] dump_stack_lvl+0x18c/0x250 [ 336.497933][ T9972] ? show_regs_print_info+0x20/0x20 [ 336.503163][ T9972] ? load_image+0x420/0x420 [ 336.507703][ T9972] ? __might_sleep+0xe0/0xe0 [ 336.512330][ T9972] ? __lock_acquire+0x7eb0/0x7eb0 [ 336.517392][ T9972] should_fail_ex+0x394/0x4c0 [ 336.522115][ T9972] should_failslab+0x9/0x20 [ 336.526655][ T9972] slab_pre_alloc_hook+0x59/0x300 [ 336.531723][ T9972] ? get_callchain_buffers+0x1a2/0x360 [ 336.537238][ T9972] ? get_callchain_buffers+0x1a2/0x360 [ 336.542746][ T9972] __kmem_cache_alloc_node+0x53/0x250 [ 336.548174][ T9972] ? get_callchain_buffers+0x1a2/0x360 [ 336.553670][ T9972] __kmalloc_node+0xa6/0x240 [ 336.558309][ T9972] get_callchain_buffers+0x1a2/0x360 [ 336.563633][ T9972] stack_map_alloc+0x2fc/0x4b0 [ 336.568447][ T9972] map_create+0x877/0x12f0 [ 336.572908][ T9972] __sys_bpf+0x651/0x890 [ 336.577184][ T9972] ? bpf_link_show_fdinfo+0x560/0x560 [ 336.582604][ T9972] ? lock_chain_count+0x20/0x20 [ 336.586149][ T28] audit: type=1326 audit(1791056623.902:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 336.587475][ T9972] __x64_sys_bpf+0x7c/0x90 [ 336.615968][ T9972] do_syscall_64+0x55/0xb0 [ 336.620416][ T9972] ? clear_bhb_loop+0x40/0x90 [ 336.625112][ T9972] ? clear_bhb_loop+0x40/0x90 [ 336.629816][ T9972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.635751][ T9972] RIP: 0033:0x7f2a7139e159 [ 336.640194][ T9972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.659841][ T9972] RSP: 002b:00007f2a721c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.668297][ T9972] RAX: ffffffffffffffda RBX: 00007f2a71625fa0 RCX: 00007f2a7139e159 [ 336.676298][ T9972] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 336.684306][ T9972] RBP: 00007f2a7143506b R08: 0000000000000000 R09: 0000000000000000 [ 336.692344][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.700347][ T9972] R13: 00007f2a71626038 R14: 00007f2a71625fa0 R15: 00007ffda9129dc8 [ 336.708366][ T9972] [ 336.811336][ T9977] loop5: detected capacity change from 0 to 128 [ 336.837148][ T28] audit: type=1326 audit(1791056623.902:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 336.896026][ T28] audit: type=1326 audit(1791056623.902:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 336.955365][ T28] audit: type=1326 audit(1791056623.902:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 337.030719][ T28] audit: type=1326 audit(1791056623.902:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.6.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83b935e98e code=0x7ffc0000 [ 337.517826][ T9985] syzkaller0: entered promiscuous mode [ 337.544148][ T9985] syzkaller0: entered allmulticast mode [ 337.557491][ T9987] FAULT_INJECTION: forcing a failure. [ 337.557491][ T9987] name fail_futex, interval 1, probability 0, space 0, times 0 [ 337.600818][ T9985] tipc: Enabling of bearer rejected, failed to enable media [ 337.611733][ T9987] CPU: 1 PID: 9987 Comm: syz.7.1055 Not tainted syzkaller #0 [ 337.619162][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.629242][ T9987] Call Trace: [ 337.632526][ T9987] [ 337.635460][ T9987] dump_stack_lvl+0x18c/0x250 [ 337.640151][ T9987] ? search_extable+0xd0/0xd0 [ 337.644846][ T9987] ? show_regs_print_info+0x20/0x20 [ 337.650069][ T9987] ? load_image+0x420/0x420 [ 337.654584][ T9987] ? rep_movs_alternative+0x13/0x90 [ 337.659782][ T9987] should_fail_ex+0x394/0x4c0 [ 337.664466][ T9987] get_futex_key+0x136/0x1030 [ 337.669142][ T9987] ? ex_get_fixup_type+0x70/0x70 [ 337.674085][ T9987] ? futex_setup_timer+0xc0/0xc0 [ 337.679017][ T9987] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 337.685000][ T9987] ? do_user_addr_fault+0xe6f/0x12d0 [ 337.690290][ T9987] futex_wake+0x127/0x4f0 [ 337.694624][ T9987] ? exc_page_fault+0x8c/0x100 [ 337.699394][ T9987] ? lockdep_hardirqs_on+0x98/0x150 [ 337.704599][ T9987] ? futex_wake_mark+0x150/0x150 [ 337.709546][ T9987] ? asm_exc_page_fault+0x26/0x30 [ 337.714587][ T9987] ? rcuref_put_slowpath+0xc1/0x150 [ 337.719790][ T9987] do_futex+0x35d/0x3e0 [ 337.723946][ T9987] ? _copy_from_user+0xc8/0xe0 [ 337.728715][ T9987] ? __ia32_sys_get_robust_list+0x110/0x110 [ 337.734612][ T9987] __se_sys_futex+0x3a9/0x440 [ 337.739295][ T9987] ? __x64_sys_futex+0xf0/0xf0 [ 337.744062][ T9987] ? __x64_sys_futex+0x21/0xf0 [ 337.748823][ T9987] do_syscall_64+0x55/0xb0 [ 337.753244][ T9987] ? clear_bhb_loop+0x40/0x90 [ 337.757925][ T9987] ? clear_bhb_loop+0x40/0x90 [ 337.762597][ T9987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.768498][ T9987] RIP: 0033:0x7f2a7139e159 [ 337.772913][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.792523][ T9987] RSP: 002b:00007f2a721c50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 337.800939][ T9987] RAX: ffffffffffffffda RBX: 00007f2a71625fa8 RCX: 00007f2a7139e159 [ 337.808910][ T9987] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2a71625fac [ 337.816882][ T9987] RBP: 00007f2a71625fa0 R08: 0000000000745ad8 R09: 0000000000000000 [ 337.824855][ T9987] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 337.832844][ T9987] R13: 00007f2a71626038 R14: 00007ffda9129ce0 R15: 00007ffda9129dc8 [ 337.840827][ T9987] [ 338.106936][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.198496][T10002] loop8: detected capacity change from 0 to 512 [ 338.220498][T10002] EXT4-fs: Ignoring removed bh option [ 338.252515][T10002] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 338.318304][T10002] EXT4-fs (loop8): 1 truncate cleaned up [ 338.360704][T10002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.385606][T10011] loop7: detected capacity change from 0 to 128 [ 338.620268][T10017] loop5: detected capacity change from 0 to 256 [ 338.666490][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.298549][T10037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.346844][T10037] loop5: detected capacity change from 0 to 512 [ 339.661417][T10037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.674685][T10037] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.311594][T10048] loop6: detected capacity change from 0 to 128 [ 341.112339][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.199787][T10064] netlink: 'syz.7.1075': attribute type 3 has an invalid length. [ 342.097136][T10079] loop5: detected capacity change from 0 to 256 [ 342.528855][T10092] loop5: detected capacity change from 0 to 512 [ 342.572194][T10097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.603756][T10092] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 342.646705][T10097] bridge0: port 3(syz_tun) entered blocking state [ 342.653378][T10097] bridge0: port 3(syz_tun) entered disabled state [ 342.669416][T10092] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 342.679903][T10092] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1080: Corrupt directory, running e2fsck is recommended [ 342.680989][T10097] syz_tun: entered allmulticast mode [ 342.718209][T10097] syz_tun: entered promiscuous mode [ 342.728259][T10092] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 342.808483][T10092] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1080: corrupted in-inode xattr: e_name out of bounds [ 342.863383][T10092] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1080: couldn't read orphan inode 15 (err -117) [ 342.914229][T10092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.808432][T10110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.853138][T10110] loop7: detected capacity change from 0 to 512 [ 343.985367][T10110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.998657][T10110] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.264072][T10092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.428309][T10116] netlink: 'syz.8.1086': attribute type 3 has an invalid length. [ 344.704591][T10121] netlink: 'syz.6.1085': attribute type 4 has an invalid length. [ 345.056600][T10121] netlink: 'syz.6.1085': attribute type 33 has an invalid length. [ 345.056627][T10121] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1085'. [ 345.549499][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.556961][T10130] netlink: 'syz.5.1087': attribute type 3 has an invalid length. [ 345.578968][T10121] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 346.498254][T10142] loop7: detected capacity change from 0 to 512 [ 346.579929][T10142] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 346.684203][T10142] EXT4-fs (loop7): 1 truncate cleaned up [ 346.712086][T10142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.713532][T10145] syzkaller0: entered promiscuous mode [ 346.731033][T10145] syzkaller0: entered allmulticast mode [ 346.738446][T10151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.403410][T10160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.442920][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.569133][T10162] loop7: detected capacity change from 0 to 128 [ 348.156896][T10158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.289523][T10169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.337433][T10169] loop7: detected capacity change from 0 to 512 [ 348.499171][T10169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.512402][T10169] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.050837][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.144146][T10173] netlink: 'syz.7.1097': attribute type 3 has an invalid length. [ 351.514535][T10186] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 351.533229][T10190] loop8: detected capacity change from 0 to 512 [ 351.562762][T10190] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 351.641371][T10190] EXT4-fs (loop8): 1 truncate cleaned up [ 351.688698][T10190] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.807519][T10202] netlink: 'syz.7.1106': attribute type 3 has an invalid length. [ 352.817046][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.924610][T10215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.967962][T10218] netlink: 'syz.8.1107': attribute type 3 has an invalid length. [ 352.984335][T10215] loop6: detected capacity change from 0 to 512 [ 353.048152][T10216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.180440][T10215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.226210][T10215] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.239913][T10226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.064204][T10216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.130398][T10234] loop8: detected capacity change from 0 to 512 [ 354.157779][T10234] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 354.221554][T10234] EXT4-fs (loop8): 1 truncate cleaned up [ 354.265199][T10234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.302492][T10241] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 354.446775][T10244] loop7: detected capacity change from 0 to 512 [ 354.473523][T10244] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 354.541975][T10244] EXT4-fs (loop7): 1 truncate cleaned up [ 354.583968][T10244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.751963][T10258] netlink: 'syz.5.1117': attribute type 3 has an invalid length. [ 355.970589][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.201558][T10275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.227885][T10272] loop5: detected capacity change from 0 to 4096 [ 356.293670][T10272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.410919][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 356.410937][ T28] audit: type=1800 audit(1791056644.772:2006): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1120" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 356.499052][ T28] audit: type=1804 audit(1791056644.862:2007): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1120" name=2F6E6577726F6F742F3236312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop5" ino=15 res=1 errno=0 [ 356.603076][T10282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.618787][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.619171][ T6943] wlan1: authenticate with 08:02:11:00:00:00 [ 356.636923][ T6943] wlan1: No legacy rates in association response [ 356.644193][ T28] audit: type=1800 audit(1791056644.862:2008): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1120" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 357.436784][T10282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.951925][T10303] netlink: 'syz.7.1127': attribute type 3 has an invalid length. [ 358.065438][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.168658][T10308] loop5: detected capacity change from 0 to 512 [ 358.677712][T10308] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 359.046588][T10308] EXT4-fs (loop5): 1 truncate cleaned up [ 359.053700][T10308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.110083][T10316] FAULT_INJECTION: forcing a failure. [ 359.110083][T10316] name fail_futex, interval 1, probability 0, space 0, times 0 [ 359.165285][T10316] CPU: 0 PID: 10316 Comm: syz.8.1126 Not tainted syzkaller #0 [ 359.172836][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.182926][T10316] Call Trace: [ 359.186230][T10316] [ 359.189190][T10316] dump_stack_lvl+0x18c/0x250 [ 359.193914][T10316] ? show_regs_print_info+0x20/0x20 [ 359.199155][T10316] ? load_image+0x420/0x420 [ 359.203689][T10316] ? ____sys_sendmsg+0x779/0x980 [ 359.208673][T10316] ? __asan_memset+0x22/0x40 [ 359.213299][T10316] ? __sys_sendmsg_sock+0x30/0x30 [ 359.218364][T10316] should_fail_ex+0x394/0x4c0 [ 359.223084][T10316] get_futex_key+0x136/0x1030 [ 359.227799][T10316] ? rcu_is_watching+0x15/0xb0 [ 359.232599][T10316] ? ___sys_sendmsg+0x2b6/0x360 [ 359.237476][T10316] ? kfree+0x31/0x1a0 [ 359.241506][T10316] ? ___sys_sendmsg+0x2b6/0x360 [ 359.246392][T10316] ? futex_setup_timer+0xc0/0xc0 [ 359.251353][T10316] ? __sys_sendmsg+0x2b0/0x2b0 [ 359.256156][T10316] futex_wake+0x127/0x4f0 [ 359.260515][T10316] ? futex_wake_mark+0x150/0x150 [ 359.265493][T10316] do_futex+0x35d/0x3e0 [ 359.269675][T10316] ? __ia32_sys_get_robust_list+0x110/0x110 [ 359.275599][T10316] ? fput+0x154/0x1a0 [ 359.279635][T10316] __se_sys_futex+0x3a9/0x440 [ 359.284345][T10316] ? __x64_sys_futex+0xf0/0xf0 [ 359.289137][T10316] ? __x64_sys_futex+0x21/0xf0 [ 359.293927][T10316] do_syscall_64+0x55/0xb0 [ 359.298371][T10316] ? clear_bhb_loop+0x40/0x90 [ 359.303069][T10316] ? clear_bhb_loop+0x40/0x90 [ 359.307770][T10316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.313704][T10316] RIP: 0033:0x7f6e01b9e159 [ 359.318140][T10316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.337781][T10316] RSP: 002b:00007f6e0299c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 359.346236][T10316] RAX: ffffffffffffffda RBX: 00007f6e01e25fa8 RCX: 00007f6e01b9e159 [ 359.354248][T10316] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6e01e25fac [ 359.362252][T10316] RBP: 00007f6e01e25fa0 R08: 0000000000745ad8 R09: 0000000000000000 [ 359.370264][T10316] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 359.378279][T10316] R13: 00007f6e01e26038 R14: 00007ffe9ecd2590 R15: 00007ffe9ecd2678 [ 359.386301][T10316] [ 359.426277][T10325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.613194][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.055502][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.254571][T10337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.328861][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1135'. [ 360.859118][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.968376][T10370] loop5: detected capacity change from 0 to 256 [ 361.003072][T10374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.073365][T10378] loop6: detected capacity change from 0 to 512 [ 361.118626][T10378] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 361.174634][T10378] EXT4-fs (loop6): 1 truncate cleaned up [ 361.198775][T10378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.398490][ T28] audit: type=1326 audit(1791056649.762:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 361.441945][ T28] audit: type=1326 audit(1791056649.762:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 361.495963][ T28] audit: type=1326 audit(1791056649.762:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 361.522686][ T28] audit: type=1326 audit(1791056649.762:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 361.573022][ T28] audit: type=1326 audit(1791056649.762:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 361.618127][ T28] audit: type=1326 audit(1791056649.802:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 361.675940][ T28] audit: type=1326 audit(1791056649.802:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 361.741139][ T28] audit: type=1326 audit(1791056649.802:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 361.783207][ T28] audit: type=1326 audit(1791056649.802:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8c475e98e code=0x7ffc0000 [ 361.821709][ T28] audit: type=1326 audit(1791056649.802:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8c475e98e code=0x7ffc0000 [ 361.849147][ T28] audit: type=1326 audit(1791056649.802:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.5.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8c475e98e code=0x7ffc0000 [ 362.012493][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.022457][T10410] wlan1: authenticate with 08:02:11:00:00:00 [ 362.029380][T10410] wlan1: No legacy rates in association response [ 362.046172][T10410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.282464][T10418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.558822][T10426] syzkaller0: entered promiscuous mode [ 362.564656][T10426] syzkaller0: entered allmulticast mode [ 362.732256][T10410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.851232][T10438] loop8: detected capacity change from 0 to 256 [ 363.993519][T10445] loop8: detected capacity change from 0 to 512 [ 364.005250][T10445] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 364.061276][T10445] EXT4-fs (loop8): 1 truncate cleaned up [ 364.077568][T10445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.864076][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.346202][T10457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.563573][T10463] loop6: detected capacity change from 0 to 256 [ 365.651757][T10467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.901697][T10475] loop6: detected capacity change from 0 to 512 [ 365.939812][T10475] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 365.991998][T10475] EXT4-fs (loop6): 1 truncate cleaned up [ 366.025817][T10475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.165265][T10481] wlan1: authenticate with 08:02:11:00:00:00 [ 366.175375][T10481] wlan1: No legacy rates in association response [ 366.203362][T10481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.306460][T10481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.403360][T10490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.387100][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.531343][T10498] syzkaller0: entered promiscuous mode [ 367.546020][T10498] syzkaller0: entered allmulticast mode [ 367.620740][T10504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.294272][T10526] loop8: detected capacity change from 0 to 256 [ 369.523328][T10528] loop8: detected capacity change from 0 to 256 [ 370.546809][T10540] loop8: detected capacity change from 0 to 512 [ 370.576209][T10540] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 370.618365][T10540] EXT4-fs (loop8): 1 truncate cleaned up [ 370.645143][T10540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.147020][ T8611] udevd[8611]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 372.223628][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.255368][T10556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.761614][T10581] loop8: detected capacity change from 0 to 512 [ 372.770495][T10581] EXT4-fs: Ignoring removed bh option [ 372.813792][T10580] syzkaller0: entered promiscuous mode [ 372.824155][T10581] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 372.829568][T10580] syzkaller0: entered allmulticast mode [ 372.877522][T10581] EXT4-fs (loop8): 1 truncate cleaned up [ 372.884662][T10581] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.002922][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.283182][T10589] syzkaller0: entered promiscuous mode [ 373.295059][T10589] syzkaller0: entered allmulticast mode [ 373.345597][T10593] loop6: detected capacity change from 0 to 512 [ 373.374571][T10593] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 373.408320][T10593] EXT4-fs (loop6): 1 truncate cleaned up [ 373.427492][T10593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.214346][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.920151][ T8611] udevd[8611]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 375.272072][T10561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.312917][T10630] loop5: detected capacity change from 0 to 512 [ 376.315021][T10631] loop7: detected capacity change from 0 to 512 [ 376.327268][T10631] EXT4-fs: Ignoring removed bh option [ 376.361397][T10631] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 376.453690][T10631] EXT4-fs (loop7): 1 truncate cleaned up [ 376.454688][T10630] EXT4-fs (loop5): 1 truncate cleaned up [ 376.483226][T10631] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.508049][T10630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.537738][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 376.537769][ T28] audit: type=1800 audit(1791056664.902:2066): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1198" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 376.579801][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.619728][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.747571][T10637] loop5: detected capacity change from 0 to 512 [ 376.760890][T10637] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 376.777967][T10638] loop7: detected capacity change from 0 to 256 [ 376.829325][T10637] EXT4-fs (loop5): 1 truncate cleaned up [ 376.850018][T10637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.589064][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.941508][T10653] loop7: detected capacity change from 0 to 512 [ 377.980027][T10653] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 378.022286][T10657] loop6: detected capacity change from 0 to 512 [ 378.055333][T10657] EXT4-fs: Ignoring removed bh option [ 378.062626][T10653] EXT4-fs (loop7): 1 truncate cleaned up [ 378.073352][T10653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.124892][T10657] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 378.177274][T10657] EXT4-fs (loop6): 1 truncate cleaned up [ 378.184261][T10657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.313372][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.287950][T10678] loop8: detected capacity change from 0 to 512 [ 379.411090][T10678] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 379.489455][T10678] EXT4-fs (loop8): 1 truncate cleaned up [ 379.530727][T10678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.813725][T10686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.853093][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.863402][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.164689][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.221970][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.411581][T10704] loop6: detected capacity change from 0 to 512 [ 382.427358][T10704] EXT4-fs: Ignoring removed bh option [ 382.465667][T10704] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 382.533619][T10704] EXT4-fs (loop6): 1 truncate cleaned up [ 382.571106][T10704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.617042][T10714] loop7: detected capacity change from 0 to 256 [ 382.714053][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.717749][T10716] netlink: 'syz.8.1218': attribute type 3 has an invalid length. [ 382.915650][T10722] loop6: detected capacity change from 0 to 512 [ 382.992724][T10724] loop5: detected capacity change from 0 to 512 [ 383.007499][T10724] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 383.044502][T10722] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 383.078817][T10722] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 383.198013][T10722] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #13: comm syz.6.1220: iget: bad i_size value: 12154757448730 [ 383.237085][T10724] EXT4-fs (loop5): 1 truncate cleaned up [ 383.254471][T10724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.285736][T10722] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1220: couldn't read orphan inode 13 (err -117) [ 383.323269][T10729] Cannot find add_set index 0 as target [ 383.332038][T10722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.397015][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.633517][T10729] netlink: 'syz.7.1223': attribute type 2 has an invalid length. [ 384.612863][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.714094][T10754] loop6: detected capacity change from 0 to 512 [ 384.753858][T10754] EXT4-fs: Ignoring removed bh option [ 384.811279][T10754] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 384.827339][T10754] EXT4-fs (loop6): 1 truncate cleaned up [ 384.834369][T10754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.948971][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.119395][T10767] netlink: 'syz.7.1233': attribute type 3 has an invalid length. [ 385.602932][T10777] loop6: detected capacity change from 0 to 512 [ 385.876055][T10777] EXT4-fs: Ignoring removed nobh option [ 386.891945][T10777] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #3: comm syz.6.1235: corrupted inode contents [ 386.965974][T10777] EXT4-fs (loop6): Remounting filesystem read-only [ 386.979436][T10777] Quota error (device loop6): write_blk: dquota write failed [ 386.987304][T10777] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 386.997318][T10777] EXT4-fs (loop6): 1 truncate cleaned up [ 387.004299][T10777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.017140][T10777] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.121878][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.430809][T10806] FAULT_INJECTION: forcing a failure. [ 387.430809][T10806] name failslab, interval 1, probability 0, space 0, times 0 [ 387.497929][T10806] CPU: 1 PID: 10806 Comm: syz.6.1240 Not tainted syzkaller #0 [ 387.505478][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.515574][T10806] Call Trace: [ 387.519491][T10806] [ 387.522464][T10806] dump_stack_lvl+0x18c/0x250 [ 387.527285][T10806] ? show_regs_print_info+0x20/0x20 [ 387.532533][T10806] ? load_image+0x420/0x420 [ 387.537085][T10806] ? __might_sleep+0xe0/0xe0 [ 387.541726][T10806] ? __lock_acquire+0x7eb0/0x7eb0 [ 387.546802][T10806] ? percpu_ref_put+0x12/0x100 [ 387.551622][T10806] should_fail_ex+0x394/0x4c0 [ 387.556336][T10806] should_failslab+0x9/0x20 [ 387.560857][T10806] slab_pre_alloc_hook+0x59/0x300 [ 387.565916][T10806] kmem_cache_alloc+0x5a/0x2c0 [ 387.570706][T10806] ? vm_area_dup+0x61/0x270 [ 387.575221][T10806] vm_area_dup+0x61/0x270 [ 387.579583][T10806] copy_mm+0x11a6/0x1e30 [ 387.583855][T10806] ? copy_signal+0x640/0x640 [ 387.588505][T10806] ? __init_rwsem+0x122/0x160 [ 387.593228][T10806] ? copy_signal+0x51f/0x640 [ 387.598011][T10806] copy_process+0x16c9/0x3da0 [ 387.602826][T10806] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 387.608821][T10806] ? copy_process+0x98e/0x3da0 [ 387.613616][T10806] ? __pidfd_prepare+0x140/0x140 [ 387.618592][T10806] ? wake_up_q+0xca/0x100 [ 387.623066][T10806] kernel_clone+0x24b/0x8a0 [ 387.627644][T10806] ? futex_wake_mark+0x150/0x150 [ 387.632605][T10806] ? create_io_thread+0x190/0x190 [ 387.637663][T10806] ? do_futex+0x35d/0x3e0 [ 387.642009][T10806] __x64_sys_clone+0x1b7/0x230 [ 387.646881][T10806] ? __ia32_sys_vfork+0x140/0x140 [ 387.651926][T10806] ? lock_chain_count+0x20/0x20 [ 387.656801][T10806] ? lockdep_hardirqs_on+0x98/0x150 [ 387.662007][T10806] do_syscall_64+0x55/0xb0 [ 387.666528][T10806] ? clear_bhb_loop+0x40/0x90 [ 387.671926][T10806] ? clear_bhb_loop+0x40/0x90 [ 387.676620][T10806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.682553][T10806] RIP: 0033:0x7f83b939e159 [ 387.686979][T10806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.706617][T10806] RSP: 002b:00007f83ba2b1fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 387.716020][T10806] RAX: ffffffffffffffda RBX: 00007f83b9625fa0 RCX: 00007f83b939e159 [ 387.724058][T10806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.732049][T10806] RBP: 00007f83b943506b R08: 0000000000000000 R09: 0000000000000000 [ 387.740056][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.748061][T10806] R13: 00007f83b9626038 R14: 00007f83b9625fa0 R15: 00007ffeb96727c8 [ 387.756056][T10806] [ 387.783098][T10813] netlink: 'syz.7.1245': attribute type 3 has an invalid length. [ 387.982730][T10817] loop8: detected capacity change from 0 to 512 [ 388.016308][T10817] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 388.088829][T10817] EXT4-fs (loop8): 1 truncate cleaned up [ 388.096035][T10817] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.053199][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.206825][T10833] FAULT_INJECTION: forcing a failure. [ 389.206825][T10833] name failslab, interval 1, probability 0, space 0, times 0 [ 389.288960][T10833] CPU: 1 PID: 10833 Comm: syz.5.1251 Not tainted syzkaller #0 [ 389.296513][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.306603][T10833] Call Trace: [ 389.309948][T10833] [ 389.312920][T10833] dump_stack_lvl+0x18c/0x250 [ 389.317660][T10833] ? show_regs_print_info+0x20/0x20 [ 389.322950][T10833] ? load_image+0x420/0x420 [ 389.327526][T10833] ? __lock_acquire+0x7eb0/0x7eb0 [ 389.332599][T10833] should_fail_ex+0x394/0x4c0 [ 389.337327][T10833] should_failslab+0x9/0x20 [ 389.342180][T10833] slab_pre_alloc_hook+0x59/0x300 [ 389.347271][T10833] kmem_cache_alloc+0x5a/0x2c0 [ 389.352080][T10833] ? create_new_namespaces+0x34/0x700 [ 389.357481][T10833] create_new_namespaces+0x34/0x700 [ 389.362731][T10833] __se_sys_setns+0x2f3/0x1740 [ 389.367631][T10833] ? __x64_sys_setns+0x60/0x60 [ 389.372435][T10833] ? lockdep_hardirqs_on+0x98/0x150 [ 389.377665][T10833] do_syscall_64+0x55/0xb0 [ 389.382099][T10833] ? clear_bhb_loop+0x40/0x90 [ 389.386781][T10833] ? clear_bhb_loop+0x40/0x90 [ 389.391458][T10833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.397361][T10833] RIP: 0033:0x7fd8c479e159 [ 389.401781][T10833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.421411][T10833] RSP: 002b:00007fd8c5707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 389.429862][T10833] RAX: ffffffffffffffda RBX: 00007fd8c4a25fa0 RCX: 00007fd8c479e159 [ 389.437846][T10833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 389.445828][T10833] RBP: 00007fd8c483506b R08: 0000000000000000 R09: 0000000000000000 [ 389.453804][T10833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.461802][T10833] R13: 00007fd8c4a26038 R14: 00007fd8c4a25fa0 R15: 00007fff56f4a7e8 [ 389.469802][T10833] [ 389.541276][T10840] loop6: detected capacity change from 0 to 128 [ 389.587636][T10840] FAT-fs (loop6): Directory bread(block 1048) failed [ 389.598038][T10840] FAT-fs (loop6): Directory bread(block 1049) failed [ 389.635435][T10840] FAT-fs (loop6): Directory bread(block 1050) failed [ 389.682013][T10840] FAT-fs (loop6): Directory bread(block 1051) failed [ 389.726226][T10840] FAT-fs (loop6): Directory bread(block 1052) failed [ 389.733006][T10840] FAT-fs (loop6): Directory bread(block 1053) failed [ 389.785437][T10840] FAT-fs (loop6): Directory bread(block 1054) failed [ 389.807030][T10840] FAT-fs (loop6): Directory bread(block 1055) failed [ 390.074495][T10856] loop5: detected capacity change from 0 to 512 [ 390.160627][T10856] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 390.186573][T10858] syzkaller0: entered promiscuous mode [ 390.192117][T10858] syzkaller0: entered allmulticast mode [ 390.385870][T10856] EXT4-fs (loop5): 1 truncate cleaned up [ 390.825596][T10856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.871305][ T8611] udevd[8611]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 390.885772][T10870] sg_read: process 592 (syz.8.1260) changed security contexts after opening file descriptor, this is not allowed. [ 391.485129][T10889] loop8: detected capacity change from 0 to 128 [ 391.594541][T10889] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.693139][T10889] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.741754][ T6664] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.041044][T10903] syzkaller0: entered promiscuous mode [ 392.642459][T10903] syzkaller0: entered allmulticast mode [ 392.958591][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1273'. [ 393.199103][T10917] loop7: detected capacity change from 0 to 256 [ 393.238770][T10921] random: crng reseeded on system resumption [ 393.321109][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.051334][T10960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.174923][T10965] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1286'. [ 395.207370][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1286'. [ 395.217185][T10967] loop8: detected capacity change from 0 to 256 [ 395.251080][T10967] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 395.361594][T10971] loop7: detected capacity change from 0 to 256 [ 395.387862][T10974] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779264) [ 395.426259][T10974] FAT-fs (loop8): Filesystem has been set read-only [ 395.820682][T10992] random: crng reseeded on system resumption [ 396.014041][T11000] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1293'. [ 396.643706][ T28] audit: type=1800 audit(1791056685.002:2067): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1287" name="file1" dev="loop8" ino=1048611 res=0 errno=0 [ 396.833612][T11014] loop6: detected capacity change from 0 to 512 [ 396.844881][T11014] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 396.884435][T11014] EXT4-fs (loop6): 1 truncate cleaned up [ 396.902487][T11014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.016877][T11020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.313164][T11023] loop8: detected capacity change from 0 to 256 [ 397.492477][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.523418][T11027] syzkaller0: entered promiscuous mode [ 397.551474][T11027] syzkaller0: entered allmulticast mode [ 397.639913][T11031] loop5: detected capacity change from 0 to 512 [ 397.667395][T11031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 397.698371][T11033] Cannot find add_set index 0 as target [ 397.712889][T11031] EXT4-fs (loop5): 1 truncate cleaned up [ 397.750049][T11031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.961949][T11042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.006076][T11043] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1304'. [ 398.047973][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1304'. [ 398.961630][T11052] loop8: detected capacity change from 0 to 256 [ 398.998825][T11053] ipt_REJECT: TCP_RESET invalid for non-tcp [ 399.047740][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.225056][T11059] SET target dimension over the limit! [ 399.262732][T11062] syzkaller0: entered promiscuous mode [ 399.276373][T11062] syzkaller0: entered allmulticast mode [ 399.414753][T11070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.576021][T11077] loop8: detected capacity change from 0 to 512 [ 399.594533][T11077] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 399.652407][T11077] EXT4-fs (loop8): 1 truncate cleaned up [ 399.711037][T11084] loop5: detected capacity change from 0 to 256 [ 399.751040][T11077] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.452246][T11088] loop6: detected capacity change from 0 to 256 [ 400.699379][T11091] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 400.794475][T11094] loop6: detected capacity change from 0 to 512 [ 400.844343][T11094] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1322: corrupted in-inode xattr: invalid ea_ino [ 400.883253][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.898033][T11094] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1322: couldn't read orphan inode 15 (err -117) [ 400.967355][T11094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.995197][T11094] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1322: invalid indirect mapped block 234881024 (level 0) [ 401.044388][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.128149][T11101] syzkaller0: entered promiscuous mode [ 401.133702][T11101] syzkaller0: entered allmulticast mode [ 401.235438][T11107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.326171][T11123] loop7: detected capacity change from 0 to 512 [ 402.364910][T11123] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 402.388981][T11123] EXT4-fs (loop7): 1 truncate cleaned up [ 402.406173][T11123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.425008][ T28] audit: type=1326 audit(1791056690.782:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 402.552231][ T28] audit: type=1326 audit(1791056690.782:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 402.584232][ T28] audit: type=1326 audit(1791056690.832:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 402.635584][T11131] loop6: detected capacity change from 0 to 128 [ 402.645368][T11131] UDF-fs: bad mount option "ÿÿÿÿ" or missing value [ 402.710037][ T28] audit: type=1326 audit(1791056690.832:2071): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 402.789748][ T28] audit: type=1326 audit(1791056690.832:2072): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 402.909264][ T28] audit: type=1326 audit(1791056690.832:2073): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 402.954384][ T28] audit: type=1326 audit(1791056690.832:2074): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 403.013198][T11139] syzkaller0: entered promiscuous mode [ 403.024879][T11139] syzkaller0: entered allmulticast mode [ 403.031180][ T28] audit: type=1326 audit(1791056690.832:2075): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 403.039491][T11141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.056756][ T28] audit: type=1326 audit(1791056690.832:2076): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 403.090248][ T28] audit: type=1326 audit(1791056690.832:2077): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=11125 comm="syz.5.1330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c479e159 code=0x7ffc0000 [ 403.255250][T11147] loop5: detected capacity change from 0 to 512 [ 403.291579][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.336076][T11147] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 403.414674][T11147] EXT4-fs (loop5): 1 truncate cleaned up [ 403.440444][T11147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.357494][T11165] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1345'. [ 404.492754][T11171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.514778][T11174] loop7: detected capacity change from 0 to 512 [ 404.528857][T11174] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 404.564532][T11175] syzkaller0: entered promiscuous mode [ 404.572465][T11174] EXT4-fs (loop7): 1 truncate cleaned up [ 404.576056][T11175] syzkaller0: entered allmulticast mode [ 404.588562][T11174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.602357][T11190] loop8: detected capacity change from 0 to 512 [ 406.857303][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.848928][T11190] EXT4-fs warning (device loop8): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop8. [ 407.963236][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.072697][T11194] loop5: detected capacity change from 0 to 128 [ 408.113210][T11194] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 408.173568][T11194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.236338][T11197] input: syz1 as /devices/virtual/input/input6 [ 408.263154][T11201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.829859][ T8611] udevd[8611]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 409.418958][T11226] FAULT_INJECTION: forcing a failure. [ 409.418958][T11226] name failslab, interval 1, probability 0, space 0, times 0 [ 409.431967][T11226] CPU: 0 PID: 11226 Comm: syz.5.1367 Not tainted syzkaller #0 [ 409.439472][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.442005][T11228] loop8: detected capacity change from 0 to 1024 [ 409.449555][T11226] Call Trace: [ 409.449601][T11226] [ 409.449616][T11226] dump_stack_lvl+0x18c/0x250 [ 409.449655][T11226] ? show_regs_print_info+0x20/0x20 [ 409.457515][T11228] EXT4-fs: Ignoring removed bh option [ 409.459268][T11226] ? load_image+0x420/0x420 [ 409.482200][T11226] ? __might_sleep+0xe0/0xe0 [ 409.486851][T11226] ? __lock_acquire+0x7eb0/0x7eb0 [ 409.491916][T11226] should_fail_ex+0x394/0x4c0 [ 409.496622][T11226] should_failslab+0x9/0x20 [ 409.501138][T11226] slab_pre_alloc_hook+0x59/0x300 [ 409.506173][T11226] ? prepend_path+0x8a7/0x950 [ 409.510874][T11226] ? tomoyo_encode+0x2ad/0x570 [ 409.515645][T11226] ? tomoyo_encode+0x2ad/0x570 [ 409.520410][T11226] __kmem_cache_alloc_node+0x53/0x250 [ 409.525818][T11226] ? tomoyo_encode+0x2ad/0x570 [ 409.530585][T11226] __kmalloc+0xa7/0x240 [ 409.534750][T11226] tomoyo_encode+0x2ad/0x570 [ 409.539351][T11226] tomoyo_realpath_from_path+0x57c/0x5c0 [ 409.544989][T11226] ? tomoyo_domain+0xd6/0x120 [ 409.549672][T11226] tomoyo_path_number_perm+0x248/0x5e0 [ 409.555137][T11226] ? tomoyo_path_number_perm+0x217/0x5e0 [ 409.560779][T11226] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 409.566310][T11226] ? __fget_files+0x28/0x460 [ 409.570930][T11226] security_file_ioctl+0x70/0xa0 [ 409.575893][T11226] __se_sys_ioctl+0x48/0x170 [ 409.580502][T11226] do_syscall_64+0x55/0xb0 [ 409.584925][T11226] ? clear_bhb_loop+0x40/0x90 [ 409.589608][T11226] ? clear_bhb_loop+0x40/0x90 [ 409.594725][T11226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.600629][T11226] RIP: 0033:0x7fd8c479e159 [ 409.605051][T11226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.624663][T11226] RSP: 002b:00007fd8c5707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.633165][T11226] RAX: ffffffffffffffda RBX: 00007fd8c4a25fa0 RCX: 00007fd8c479e159 [ 409.641146][T11226] RDX: 0000200000000380 RSI: 00000000c08c5332 RDI: 0000000000000006 [ 409.649123][T11226] RBP: 00007fd8c483506b R08: 0000000000000000 R09: 0000000000000000 [ 409.657091][T11226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.665066][T11226] R13: 00007fd8c4a26038 R14: 00007fd8c4a25fa0 R15: 00007fff56f4a7e8 [ 409.673053][T11226] [ 409.689425][T11226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 409.706616][T11228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 409.724950][T11228] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.761938][T11228] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 3) [ 409.777045][T11228] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 409.792443][T11228] EXT4-fs (loop8): This should not happen!! Data will be lost [ 409.792443][T11228] [ 409.811228][T11228] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 1) [ 409.836040][T11228] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 1) [ 409.859236][T11228] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 1) [ 409.929357][T11228] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 1) [ 409.990206][T11227] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 1) [ 410.024828][T11227] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 1) [ 411.287061][T11244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.328904][T11236] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 1) [ 411.569622][T11236] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 1) [ 411.617194][T11236] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: block 3: comm syz.8.1368: lblock 3 mapped to illegal pblock 3 (length 1) [ 411.972450][ T8] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 412.022131][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 412.168406][ T8] usb 6-1: not running at top speed; connect to a high speed hub [ 412.188379][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.209592][T11272] loop8: detected capacity change from 0 to 256 [ 412.216048][ T8] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 412.228931][ T8] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 412.238755][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.431135][T11277] loop6: detected capacity change from 0 to 16 [ 412.460488][T11277] erofs: (device loop6): mounted with root inode @ nid 36. [ 412.784560][T11287] syzkaller0: entered promiscuous mode [ 412.790695][T11287] syzkaller0: entered allmulticast mode [ 412.825787][T11287] tipc: Enabled bearer , priority 0 [ 412.854951][T11287] tipc: Resetting bearer [ 412.868855][T11286] tipc: Resetting bearer [ 412.905581][T11286] tipc: Disabling bearer [ 413.043785][T11293] loop7: detected capacity change from 0 to 512 [ 413.065371][T11293] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 413.093079][T11293] EXT4-fs (loop7): 1 truncate cleaned up [ 413.105617][T11293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.208551][T11298] loop8: detected capacity change from 0 to 256 [ 413.534293][ T5811] usb 6-1: USB disconnect, device number 2 [ 413.763202][ T5775] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 413.905551][T11310] syzkaller0: entered promiscuous mode [ 413.911303][T11310] syzkaller0: entered allmulticast mode [ 413.924751][T11310] tipc: Enabled bearer , priority 0 [ 413.943375][T11310] tipc: Resetting bearer [ 413.961666][T11309] tipc: Resetting bearer [ 413.987940][T11309] tipc: Disabling bearer [ 414.566060][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.728192][T11335] syzkaller0: entered promiscuous mode [ 414.733829][T11335] syzkaller0: entered allmulticast mode [ 414.750510][T11335] tipc: Enabled bearer , priority 0 [ 414.775171][T11335] tipc: Resetting bearer [ 414.792704][T11334] tipc: Resetting bearer [ 414.833838][T11334] tipc: Disabling bearer [ 415.020181][T11351] loop8: detected capacity change from 0 to 512 [ 415.032320][T11351] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 415.471396][T11351] EXT4-fs (loop8): 1 truncate cleaned up [ 415.497533][ T8476] udevd[8476]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 415.598996][T11351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.891039][T11358] loop7: detected capacity change from 0 to 1024 [ 415.943531][T11358] EXT4-fs (loop7): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 415.963572][T11358] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.029364][T11358] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 3: comm syz.7.1414: lblock 3 mapped to illegal pblock 3 (length 2) [ 416.072425][T11358] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: comm syz.7.1414: lblock 0 mapped to illegal pblock 0 (length 3) [ 416.133515][T11358] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 416.193118][T11358] EXT4-fs (loop7): This should not happen!! Data will be lost [ 416.193118][T11358] [ 416.239379][ T2937] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:7: lblock 4 mapped to illegal pblock 4 (length 1) [ 416.288113][ T2937] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 416.326385][ T2937] EXT4-fs (loop7): This should not happen!! Data will be lost [ 416.326385][ T2937] [ 416.351157][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 416.425381][T11371] netlink: 'syz.7.1418': attribute type 3 has an invalid length. [ 416.463041][T11373] syzkaller0: entered promiscuous mode [ 416.469060][T11373] syzkaller0: entered allmulticast mode [ 416.481046][T11373] tipc: Enabled bearer , priority 0 [ 416.502176][T11373] tipc: Resetting bearer [ 416.511129][T11372] tipc: Resetting bearer [ 416.544464][T11372] tipc: Disabling bearer [ 416.790483][T11377] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 416.806721][T11377] loop6: detected capacity change from 0 to 512 [ 416.814238][T11377] ext4: Unknown parameter 'dont_appraise' [ 416.999751][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.313573][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1426'. [ 417.387733][T11391] xt_CONNSECMARK: invalid mode: 66 [ 417.779306][ T5775] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 417.788570][ T5775] Bluetooth: hci2: Injecting HCI hardware error event [ 417.801743][ T5775] Bluetooth: hci2: hardware error 0x00 [ 418.163097][T11402] loop5: detected capacity change from 0 to 512 [ 418.215799][T11402] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 418.243516][T11402] EXT4-fs (loop5): 1 truncate cleaned up [ 418.252384][T11402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.088101][T11427] loop6: detected capacity change from 0 to 512 [ 419.936387][ T5775] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 419.976069][T11427] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 419.995600][T11427] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #16: comm syz.6.1440: corrupted inode contents [ 420.012617][T11427] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #16: comm syz.6.1440: mark_inode_dirty error [ 420.028242][T11427] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #16: comm syz.6.1440: corrupted inode contents [ 420.041384][T11427] EXT4-fs error (device loop6): __ext4_ext_dirty:208: inode #16: comm syz.6.1440: mark_inode_dirty error [ 420.054184][T11427] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #16: comm syz.6.1440: corrupted inode contents [ 420.077243][T11427] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 420.087351][T11427] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #16: comm syz.6.1440: corrupted inode contents [ 420.099855][T11427] EXT4-fs error (device loop6): ext4_truncate:4314: inode #16: comm syz.6.1440: mark_inode_dirty error [ 420.111562][T11427] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 420.144258][T11427] EXT4-fs (loop6): 1 truncate cleaned up [ 420.151037][T11427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.163809][T11427] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.239903][ T40] __quota_error: 65 callbacks suppressed [ 420.239924][ T40] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 420.286253][ T40] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 1 [ 420.328044][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.375626][T11434] loop7: detected capacity change from 0 to 512 [ 420.392986][T11434] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 420.451785][T11434] EXT4-fs (loop7): 1 truncate cleaned up [ 420.473418][T11436] syzkaller0: entered promiscuous mode [ 420.479481][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.526571][T11436] syzkaller0: entered allmulticast mode [ 420.552904][T11434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.575595][T11436] tipc: Enabled bearer , priority 0 [ 420.616439][T11436] tipc: Resetting bearer [ 420.654063][T11435] tipc: Resetting bearer [ 420.743542][T11435] tipc: Disabling bearer [ 421.017829][T11447] xt_policy: too many policy elements [ 421.037430][T11447] capability: warning: `syz.5.1448' uses deprecated v2 capabilities in a way that may be insecure [ 422.063493][ T8611] udevd[8611]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 422.354808][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.539994][T11478] loop8: detected capacity change from 0 to 256 [ 422.610162][T11481] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 422.749703][T11485] netlink: 5856 bytes leftover after parsing attributes in process `syz.6.1462'. [ 422.942394][ T5811] smpboot: CPU 1 is now offline [ 423.059312][T11496] syzkaller0: entered promiscuous mode [ 423.067205][T11494] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 423.075597][T11496] syzkaller0: entered allmulticast mode [ 423.674483][T11516] syzkaller0: entered promiscuous mode [ 423.682506][T11516] syzkaller0: entered allmulticast mode [ 423.719576][T11520] loop8: detected capacity change from 0 to 512 [ 423.764004][T11520] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 423.822953][T11520] EXT4-fs (loop8): 1 truncate cleaned up [ 423.851714][T11520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.985300][T11529] loop6: detected capacity change from 0 to 1024 [ 424.004942][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.557858][T11529] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 425.585765][T11529] System zones: 0-1, 3-12 [ 425.607852][T11529] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.956035][ T5811] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 426.091785][T11555] loop8: detected capacity change from 0 to 512 [ 426.119581][T11555] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 426.158973][T11555] EXT4-fs (loop8): 1 truncate cleaned up [ 426.186494][T11555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.216294][ T5811] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.236315][ T5811] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 426.274340][ T5811] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 426.313782][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.340855][ T6664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.431191][ T5811] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 428.149137][ T5811] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 428.230732][ T6648] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 428.617832][T11589] loop7: detected capacity change from 0 to 2048 [ 429.849681][ T5811] usb 7-1: USB disconnect, device number 2 [ 429.921270][T11589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.008952][T11589] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.091123][T11602] netlink: 'syz.6.1502': attribute type 3 has an invalid length. [ 430.307131][ T6656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.400032][ T5811] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 432.584263][T11626] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 432.653704][ T5811] usb 6-1: config index 0 descriptor too short (expected 45, got 28) [ 432.676130][ T5811] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 432.723363][ T5811] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 432.764796][ T5811] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 432.785787][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.810802][ T5811] usb 6-1: Product: syz [ 432.815076][ T5811] usb 6-1: Manufacturer: syz [ 432.829426][T11632] loop6: detected capacity change from 0 to 2048 [ 432.844024][ T5811] usb 6-1: SerialNumber: syz [ 432.859154][T11632] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 432.884462][ T5811] rtl8150 6-1:1.0: couldn't find required endpoints [ 432.900711][T11632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.110602][ T5811] rtl8150: probe of 6-1:1.0 failed with error -5 [ 433.144232][ T5811] usb 6-1: USB disconnect, device number 3 [ 434.406152][T11632] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 434.471429][T11642] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 434.546882][T11632] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 434.637446][T11648] netlink: 'syz.7.1515': attribute type 3 has an invalid length. [ 434.647208][T11643] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 435.513211][T11657] loop6: detected capacity change from 0 to 1024 [ 436.883193][T11657] hfsplus: invalid length 32517 has been corrected to 255 [ 436.913419][T11663] file system registered [ 436.952042][T11663] [ 436.954407][T11663] ====================================================== [ 436.961420][T11663] WARNING: possible circular locking dependency detected [ 436.968506][T11663] syzkaller #0 Not tainted [ 436.972913][T11663] ------------------------------------------------------ [ 436.979941][T11663] syz.8.1521/11663 is trying to acquire lock: [ 436.985989][T11663] ffffffff8ddf5db0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 436.995747][T11663] [ 436.995747][T11663] but task is already holding lock: [ 437.003109][T11663] ffff88805ccc4670 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 437.012784][T11663] [ 437.012784][T11663] which lock already depends on the new lock. [ 437.012784][T11663] [ 437.023182][T11663] [ 437.023182][T11663] the existing dependency chain (in reverse order) is: [ 437.032190][T11663] [ 437.032190][T11663] -> #3 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 437.040888][T11663] down_write+0x97/0x200 [ 437.045658][T11663] configfs_depend_item_unlocked+0x157/0x460 [ 437.052174][T11663] usbg_make_tpg+0x1e1/0x550 [ 437.057344][T11663] target_fabric_make_tpg+0xa4/0x6d0 [ 437.063233][T11663] configfs_mkdir+0x515/0x9e0 [ 437.068439][T11663] vfs_mkdir+0x2a5/0x470 [ 437.073196][T11663] do_mkdirat+0x1dc/0x450 [ 437.078062][T11663] __x64_sys_mkdirat+0x89/0xa0 [ 437.083388][T11663] do_syscall_64+0x55/0xb0 [ 437.088338][T11663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.094761][T11663] [ 437.094761][T11663] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 437.103274][T11663] __mutex_lock+0x135/0xc80 [ 437.108316][T11663] tcm_alloc_inst+0x65/0x190 [ 437.113447][T11663] usb_get_function_instance+0xdd/0x2e0 [ 437.119548][T11663] function_make+0x11c/0x350 [ 437.124669][T11663] configfs_mkdir+0x515/0x9e0 [ 437.129872][T11663] vfs_mkdir+0x2a5/0x470 [ 437.134632][T11663] do_mkdirat+0x1dc/0x450 [ 437.139515][T11663] __x64_sys_mkdirat+0x89/0xa0 [ 437.144824][T11663] do_syscall_64+0x55/0xb0 [ 437.149771][T11663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.156187][T11663] [ 437.156187][T11663] -> #1 (func_lock){+.+.}-{3:3}: [ 437.163311][T11663] __mutex_lock+0x135/0xc80 [ 437.168359][T11663] usb_get_function_instance+0x2e/0x2e0 [ 437.174424][T11663] function_make+0x11c/0x350 [ 437.179532][T11663] configfs_mkdir+0x515/0x9e0 [ 437.184732][T11663] vfs_mkdir+0x2a5/0x470 [ 437.189605][T11663] do_mkdirat+0x1dc/0x450 [ 437.194452][T11663] __x64_sys_mkdirat+0x89/0xa0 [ 437.199748][T11663] do_syscall_64+0x55/0xb0 [ 437.204689][T11663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.211107][T11663] [ 437.211107][T11663] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 437.219368][T11663] __lock_acquire+0x3a07/0x7eb0 [ 437.224748][T11663] lock_acquire+0x19e/0x420 [ 437.229769][T11663] __mutex_lock+0x135/0xc80 [ 437.234791][T11663] configfs_rmdir+0x63c/0x980 [ 437.239988][T11663] vfs_rmdir+0x352/0x4b0 [ 437.244752][T11663] do_rmdir+0x29f/0x590 [ 437.249428][T11663] __x64_sys_rmdir+0x49/0x50 [ 437.254538][T11663] do_syscall_64+0x55/0xb0 [ 437.259488][T11663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.265910][T11663] [ 437.265910][T11663] other info that might help us debug this: [ 437.265910][T11663] [ 437.276137][T11663] Chain exists of: [ 437.276137][T11663] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#21 [ 437.276137][T11663] [ 437.291090][T11663] Possible unsafe locking scenario: [ 437.291090][T11663] [ 437.298535][T11663] CPU0 CPU1 [ 437.303895][T11663] ---- ---- [ 437.309251][T11663] lock(&sb->s_type->i_mutex_key#21); [ 437.314710][T11663] lock(tpg_instances_lock); [ 437.321957][T11663] lock(&sb->s_type->i_mutex_key#21); [ 437.329937][T11663] lock(gadget_subsys.su_mutex); [ 437.334960][T11663] [ 437.334960][T11663] *** DEADLOCK *** [ 437.334960][T11663] [ 437.343095][T11663] 3 locks held by syz.8.1521/11663: [ 437.348288][T11663] #0: ffff88801837c418 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 437.357524][T11663] #1: ffff88805cd5cb80 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 437.368329][T11663] #2: ffff88805ccc4670 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 437.378431][T11663] [ 437.378431][T11663] stack backtrace: [ 437.384344][T11663] CPU: 0 PID: 11663 Comm: syz.8.1521 Not tainted syzkaller #0 [ 437.391799][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.401854][T11663] Call Trace: [ 437.405137][T11663] [ 437.408066][T11663] dump_stack_lvl+0x18c/0x250 [ 437.412752][T11663] ? load_image+0x420/0x420 [ 437.417259][T11663] ? show_regs_print_info+0x20/0x20 [ 437.422465][T11663] ? print_circular_bug+0x12b/0x1a0 [ 437.427666][T11663] check_noncircular+0x2fc/0x400 [ 437.432622][T11663] ? print_deadlock_bug+0x5d0/0x5d0 [ 437.437819][T11663] ? lockdep_lock+0xf5/0x230 [ 437.442409][T11663] ? _find_first_zero_bit+0xd6/0x100 [ 437.447695][T11663] __lock_acquire+0x3a07/0x7eb0 [ 437.452570][T11663] ? verify_lock_unused+0x140/0x140 [ 437.457774][T11663] ? verify_lock_unused+0x140/0x140 [ 437.462980][T11663] lock_acquire+0x19e/0x420 [ 437.467487][T11663] ? configfs_rmdir+0x63c/0x980 [ 437.472348][T11663] ? __might_sleep+0xe0/0xe0 [ 437.476949][T11663] ? read_lock_is_recursive+0x20/0x20 [ 437.482330][T11663] __mutex_lock+0x135/0xc80 [ 437.486844][T11663] ? configfs_rmdir+0x63c/0x980 [ 437.491698][T11663] ? configfs_rmdir+0x63c/0x980 [ 437.496561][T11663] ? mutex_lock_nested+0x20/0x20 [ 437.501501][T11663] ? __lock_acquire+0x7eb0/0x7eb0 [ 437.506526][T11663] ? lockref_put_or_lock+0x72/0xb0 [ 437.511672][T11663] ? dput+0x3b/0x1e0 [ 437.515575][T11663] ? dput+0x3b/0x1e0 [ 437.519476][T11663] configfs_rmdir+0x63c/0x980 [ 437.524162][T11663] vfs_rmdir+0x352/0x4b0 [ 437.528408][T11663] do_rmdir+0x29f/0x590 [ 437.532563][T11663] ? __check_object_size+0x4fc/0xa40 [ 437.537866][T11663] ? d_delete_notify+0x150/0x150 [ 437.542805][T11663] ? getname_flags+0x20a/0x500 [ 437.547569][T11663] __x64_sys_rmdir+0x49/0x50 [ 437.552245][T11663] do_syscall_64+0x55/0xb0 [ 437.556665][T11663] ? clear_bhb_loop+0x40/0x90 [ 437.561343][T11663] ? clear_bhb_loop+0x40/0x90 [ 437.566014][T11663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.571915][T11663] RIP: 0033:0x7f6e01b9e159 [ 437.578125][T11663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.597770][T11663] RSP: 002b:00007f6e0299c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 437.606186][T11663] RAX: ffffffffffffffda RBX: 00007f6e01e25fa0 RCX: 00007f6e01b9e159 [ 437.614182][T11663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 437.622156][T11663] RBP: 00007f6e01c3506b R08: 0000000000000000 R09: 0000000000000000 [ 437.630126][T11663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.638103][T11663] R13: 00007f6e01e26038 R14: 00007f6e01e25fa0 R15: 00007ffe9ecd2678 [ 437.646081][T11663] [ 437.703235][ T28] audit: type=1800 audit(1791056726.062:2143): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1518" name="bus" dev="loop6" ino=25 res=0 errno=0 [ 437.716373][T11663] unloading [ 437.729029][ T49] hfsplus: b-tree write err: -5, ino 25 [ 437.734846][ T49] hfsplus: b-tree write err: -5, ino 4 [ 437.740919][ T49] hfsplus: b-tree write err: -5, ino 2 [ 437.760050][ T6664] ffs_data_put(): freeing [ 443.060075][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.067223][ T1290] ieee802154 phy1 wpan1: encryption failed: -22