last executing test programs: 17m45.872429784s ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000045000100020008"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x2, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x1, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4dd, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x8000, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) eventfd(0x8c66) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 17m44.40295421s ago: executing program 0 (id=39): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x1e, 0x14fd, &(0x7f00000021c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="01000000"], 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x4000, &(0x7f0000000f80)=ANY=[@ANYBLOB="726f6469722c726f6469722c73686f72746e616d653d77696e39352c757466383d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c7574e1ceece133b051e34e66383d302c73686fe8746e616d653d77696e39352c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757365667265652c757466383d312c666c7573682c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c747a3d5554432c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d616363656c7469632c00"], 0x1, 0x36b, &(0x7f0000000340)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 17m42.0613041s ago: executing program 0 (id=42): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 17m40.015459724s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'veth1_vlan\x00', @multicast}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000001ec0)=ANY=[@ANYBLOB="020000000100000000000000020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="800000"], 0x2c, 0x0) 17m39.700218874s ago: executing program 0 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x100000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x0, 0x0, 0x7f) 17m35.98108889s ago: executing program 0 (id=48): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x0) 17m19.988509392s ago: executing program 32 (id=48): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x0) 17m12.9229939s ago: executing program 2 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x2}]) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0), 0x0, 0xbcd, &(0x7f0000000640)="$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") sched_setaffinity(0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000008) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'xfrm0\x00'}) 17m11.655456362s ago: executing program 2 (id=73): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200000505000100070000002027c043383f78c5f7d37ec3fab478a4bc87ce5e188c0fb4bac5bb55a2a871def1506fec5ac49a230bd85dd076226223b6a9bb3544b6ef049373f21e0d089612c60af8697a82c7af6ab1b7204f91ec76d9deaffbd753f84fe70f08abefa43ae622e0d8a5a2ac6640384c04d338f21046e7d8bebe5f59a14222436d763fc9cb8c41445ea4e1e06ecfbecfe1a9e4c7ec2fc60c396d136e01f8cc91f0eaa060dce5e0b77f2fab9591c0b5d65296d2e6c4ffe3313b9f1057638d969ab349f3"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 17m8.372022051s ago: executing program 2 (id=75): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000084081, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x141101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 17m6.572335801s ago: executing program 2 (id=76): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16m53.861141494s ago: executing program 2 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc8}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sched_setaffinity(r2, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSETKEYCODE(r5, 0x4b4d, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 16m51.014623996s ago: executing program 2 (id=89): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009405, &(0x7f0000000440)) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x3, 0x1}, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x40080) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e044f3d20"], 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 16m32.632030928s ago: executing program 33 (id=89): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009405, &(0x7f0000000440)) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x3, 0x1}, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x40080) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e044f3d20"], 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 13m30.966689973s ago: executing program 3 (id=319): r0 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) r1 = inotify_init() openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x2a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x84) r2 = io_uring_setup(0xa5d, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r2, 0x2218, 0x7521, 0x16, 0x0, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x18b) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000001400)={'comedi_parport\x00', [0x100, 0xd, 0x4d0, 0x2, 0x1, 0x100, 0x2001, 0x20000000, 0x6, 0x9, 0x0, 0xf, 0x1, 0x401, 0xfffd, 0x0, 0x0, 0x8, 0xea9, 0x401, 0x7, 0x2, 0x4, 0x9, 0x3, 0x7, 0x7, 0x0, 0x7, 0x7, 0x8]}) ioctl$COMEDI_SETRSUBD(r4, 0x6410) umount2(0x0, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 13m28.198864865s ago: executing program 3 (id=322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$rxrpc(0x21, 0x2, 0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000002020101000000000000000000000106aa6cb455282771f639b00365258022563e8b449ecc77748e49032bddd69d6e83293356a38bb65e9f27a8590a014f8ec219d644ba4125e32a787ed5cd56e65213484b003265cb7f36d09079f542ea059e65b70df833f42985e0ccfbda1814f0e8913d8757780b1acb1bc89b350a2982fee7c10c0b3443582b1ea5e1d6546ae2c2a0f009c4999e478ed02751b163ef3b9e8db91f48c2f9eb0277b8d63ffaed4c8d72dfb41ad925f28faef8cf39c9cce917da21a04c3c8eaacc83182a328507238142c6c7ef03"], 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0xc010) 13m26.938257979s ago: executing program 3 (id=324): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x490, &(0x7f0000000800)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc0800000000000000f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a2d47aff43355f9d23a606e1a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a808e9a51cc0d73e298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbb16e002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r3, 0x4a8e) socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) r4 = getpid() ioprio_get$pid(0x2, r4) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 13m15.657150777s ago: executing program 3 (id=332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$rxrpc(0x21, 0x2, 0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000002020101000000000000000000000106aa6cb455282771f639b00365258022563e8b449ecc77748e49032bddd69d6e83293356a38bb65e9f27a8590a014f8ec219d644ba4125e32a787ed5cd56e65213484b003265cb7f36d09079f542ea059e65b70df833f42985e0ccfbda1814f0e8913d8757780b1acb1bc89b350a2982fee7c10c0b3443582b1ea5e1d6546ae2c2a0f009c4999e478ed02751b163ef3b9e8db91f48c2f9eb0277b8d63ffaed4c8d72dfb41ad925f28faef8cf39c9cce917da21a04c3c8eaacc83182a328507238142c6c7ef03"], 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0xc010) 13m14.416568525s ago: executing program 3 (id=333): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$loop(0x0, 0x3, 0x189083) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) futex(0x0, 0x5, 0x10000, 0x0, 0x0, 0x3000000) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x3, 0x9032, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 13m9.863295028s ago: executing program 3 (id=336): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}, "00000000c00000d2"}}}}}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x40000000000080, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) 12m53.301636673s ago: executing program 34 (id=336): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}, "00000000c00000d2"}}}}}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x40000000000080, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) 3.458701922s ago: executing program 6 (id=2041): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x0, 0x20}, 0xc) 3.146470916s ago: executing program 6 (id=2045): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0xa, "3da4932e"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x1, "5d8c3dda"}]}}, 0x0}, 0x0) 2.11610423s ago: executing program 1 (id=2051): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000200)=[{0x5, 0x810, 0x0, 0x0}, {0x5, 0xa00, 0x0, 0x0}], 0x2}) 2.07348727s ago: executing program 5 (id=2052): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0x2020) 1.963802316s ago: executing program 6 (id=2054): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x1f, r0, 0x100000000, 0x2681) 1.660894767s ago: executing program 6 (id=2056): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0xd8, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x87, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.448922447s ago: executing program 1 (id=2058): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x32a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8, 0x4, 0x24}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.036689434s ago: executing program 5 (id=2059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.002429483s ago: executing program 6 (id=2060): getpid() syz_usb_connect$uac3(0x5, 0x89, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000010630780204000010203010902770003017f0006080b0002012030230904000000010130000a24011013000b0000000924090603000000000904010000010230000904010101010230000905010960002510050a2525040400000005"], 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) 879.051532ms ago: executing program 5 (id=2061): setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x8) setsockopt(r0, 0x112, 0x14, 0x0, 0xf8) 765.387478ms ago: executing program 1 (id=2063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=@newlink={0x48, 0x10, 0x1, 0x70bd3a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) 724.281628ms ago: executing program 4 (id=2064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x28, r1, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 708.706742ms ago: executing program 5 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 639.937648ms ago: executing program 4 (id=2066): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000200), 0x4) 526.442775ms ago: executing program 4 (id=2067): setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x14, 0x0, 0x0) 509.594589ms ago: executing program 5 (id=2068): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000040), 0x7fffffffffffffff) 437.881106ms ago: executing program 1 (id=2069): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 353.311786ms ago: executing program 4 (id=2070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c00028008000440000000000800054000000000080003400000000008000640009a0006080002"], 0x94}}, 0x0) 326.981912ms ago: executing program 5 (id=2071): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 313.656435ms ago: executing program 1 (id=2072): setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x8) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4040014) 313.487125ms ago: executing program 6 (id=2073): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810c0a, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x61ba, &(0x7f000000f2c0)="$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") open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 183.741226ms ago: executing program 4 (id=2074): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4a042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xffffff01, 0xffffffff, 0x0) 140.358756ms ago: executing program 1 (id=2075): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) 0s ago: executing program 4 (id=2076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000600000004920800024000000001"], 0xfea1}}, 0x800) kernel console output (not intermixed with test programs): 800][ T8773] path_openat+0x284f/0x3270 [ 575.452468][ T8773] ? do_sys_openat2+0xda/0x1d0 [ 575.457281][ T8773] ? __x64_sys_openat+0x139/0x160 [ 575.462359][ T8773] ? verify_lock_unused+0x140/0x140 [ 575.467608][ T8773] ? do_filp_open+0x430/0x430 [ 575.472358][ T8773] do_filp_open+0x1f2/0x430 [ 575.476915][ T8773] ? vfs_tmpfile+0x620/0x620 [ 575.481614][ T8773] ? _raw_spin_unlock+0x28/0x40 [ 575.486519][ T8773] ? alloc_fd+0x590/0x640 [ 575.490929][ T8773] do_sys_openat2+0x134/0x1d0 [ 575.495695][ T8773] ? do_sys_open+0xe0/0xe0 [ 575.500171][ T8773] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 575.506213][ T8773] ? lock_chain_count+0x20/0x20 [ 575.511129][ T8773] __x64_sys_openat+0x139/0x160 [ 575.516092][ T8773] do_syscall_64+0x55/0xb0 [ 575.520562][ T8773] ? clear_bhb_loop+0x40/0x90 [ 575.525402][ T8773] ? clear_bhb_loop+0x40/0x90 [ 575.530136][ T8773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.536079][ T8773] RIP: 0033:0x7f7aaa39e159 [ 575.540539][ T8773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.560195][ T8773] RSP: 002b:00007f7aab1fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.568666][ T8773] RAX: ffffffffffffffda RBX: 00007f7aaa625fa0 RCX: 00007f7aaa39e159 [ 575.576679][ T8773] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 575.584694][ T8773] RBP: 00007f7aaa43506b R08: 0000000000000000 R09: 0000000000000000 [ 575.592717][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.600740][ T8773] R13: 00007f7aaa626038 R14: 00007f7aaa625fa0 R15: 00007ffc3b643e38 [ 575.608777][ T8773] [ 575.870774][ T8773] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -ENOMEM [ 577.278986][ T8787] loop4: detected capacity change from 0 to 64 [ 577.296925][ T8787] hfs: unable to parse mount options [ 577.909991][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 581.600881][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 584.063747][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.580'. [ 584.757495][ T8833] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6118] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8833] [ 585.131584][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.579'. [ 585.423288][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.477554][ T8836] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 585.506633][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.582'. [ 585.879324][ T8842] loop5: detected capacity change from 0 to 1024 [ 586.556946][ T8842] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 586.579159][ T8842] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 586.583440][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 586.588083][ T8842] EXT4-fs (loop5): orphan cleanup on readonly fs [ 586.614786][ T8842] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 586.626506][ T8842] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 586.636596][ T8842] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.582: Failed to acquire dquot type 0 [ 586.649963][ T8842] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 586.660111][ T8842] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 586.670193][ T8842] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.582: Failed to acquire dquot type 0 [ 586.682121][ T8842] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.582: Freeing blocks not in datazone - block = 0, count = 4096 [ 586.696076][ T8842] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 586.706308][ T8842] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 586.716378][ T8842] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.582: Failed to acquire dquot type 0 [ 586.737385][ T8842] EXT4-fs (loop5): 1 orphan inode deleted [ 586.764050][ T5822] IPVS: starting estimator thread 0... [ 586.785591][ T8842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 586.907375][ T8851] IPVS: using max 18 ests per chain, 43200 per kthread [ 587.045962][ T6380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.066043][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.584'. [ 587.148007][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.513814][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.590610][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.588'. [ 589.032331][ T8868] loop5: detected capacity change from 0 to 1024 [ 589.224611][ T8868] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 589.243685][ T8868] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 589.253936][ T8868] EXT4-fs (loop5): orphan cleanup on readonly fs [ 589.677477][ T8868] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 589.687588][ T8868] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 589.698518][ T8868] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.588: Failed to acquire dquot type 0 [ 589.711753][ T8868] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 589.722169][ T8868] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 589.732320][ T8868] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.588: Failed to acquire dquot type 0 [ 589.744294][ T8868] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.588: Freeing blocks not in datazone - block = 0, count = 4096 [ 589.760073][ T8868] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.588: Failed to acquire dquot type 0 [ 589.773955][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.786783][ T8868] EXT4-fs (loop5): 1 orphan inode deleted [ 589.824375][ T8871] loop4: detected capacity change from 0 to 256 [ 589.869165][ T8868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.070703][ T8873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.589'. [ 590.185741][ T6380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.666651][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.592'. [ 592.649164][ T8894] tmpfs: Unknown parameter 'QO V' [ 594.239790][ T8901] autofs4:pid:8901:autofs_fill_super: called with bogus options [ 594.614124][ T8907] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 594.732502][ T8907] loop5: detected capacity change from 0 to 2048 [ 594.748438][ T8907] UDF-fs: bad mount option "0xffffffffffffffff" or missing value [ 594.849125][ T8913] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 596.071523][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.6.600'. [ 597.350097][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'. [ 598.852705][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.607'. [ 600.333122][ T8967] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 604.621530][ T8983] loop4: detected capacity change from 0 to 32768 [ 604.668622][ T8983] (syz.4.611,8983,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 604.697463][ T8983] (syz.4.611,8983,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 604.720259][ T8983] (syz.4.611,8983,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 604.841812][ T8983] JBD2: Ignoring recovery information on journal [ 604.922219][ T8983] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 604.936811][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.612'. [ 606.065979][ T8997] loop5: detected capacity change from 0 to 128 [ 606.115055][ T8997] EXT4-fs (loop5): Test dummy encryption mode enabled [ 606.238068][ T8997] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 606.348781][ T8997] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 607.869455][ T6380] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.016765][ T6118] ocfs2: Unmounting device (7,4) on (node local) [ 608.051814][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.617'. [ 608.522668][ T9016] loop5: detected capacity change from 0 to 32768 [ 608.537228][ T49] hsr_slave_0: left promiscuous mode [ 608.546758][ T9016] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.618 (9016) [ 608.567050][ T9016] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 608.578789][ T9016] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 608.587870][ T9016] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 608.597912][ T9016] BTRFS info (device loop5): use zstd compression, level 3 [ 608.605246][ T9016] BTRFS info (device loop5): force clearing of disk cache [ 608.612531][ T9016] BTRFS info (device loop5): enabling disk space caching [ 608.619831][ T9016] BTRFS info (device loop5): disk space caching is enabled [ 608.771877][ T49] hsr_slave_1: left promiscuous mode [ 608.827448][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.878523][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.929240][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.971811][ T9016] BTRFS info (device loop5): enabling ssd optimizations [ 608.979010][ T9016] BTRFS info (device loop5): auto enabling async discard [ 608.987715][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.993170][ T9016] BTRFS info (device loop5): rebuilding free space tree [ 609.052185][ T49] bridge_slave_1: left allmulticast mode [ 609.089340][ T9016] BTRFS info (device loop5): disabling free space tree [ 609.096491][ T9016] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 609.106891][ T9016] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 609.107868][ T49] bridge_slave_1: left promiscuous mode [ 609.160540][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.199033][ T49] bridge_slave_0: left allmulticast mode [ 609.229033][ T49] bridge_slave_0: left promiscuous mode [ 609.236315][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.409660][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 610.559339][ T49] veth1_macvtap: left promiscuous mode [ 610.565010][ T49] veth0_macvtap: left promiscuous mode [ 610.620755][ T49] veth1_vlan: left promiscuous mode [ 610.655452][ T49] veth0_vlan: left promiscuous mode [ 610.873352][ T9060] loop4: detected capacity change from 0 to 1024 [ 611.106332][ T9063] xt_connbytes: Forcing CT accounting to be enabled [ 611.113274][ T9063] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 611.125509][ T9063] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 611.823895][ T9060] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 611.899804][ T9060] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 611.908407][ T9060] EXT4-fs (loop4): orphan cleanup on readonly fs [ 611.948189][ T9060] __quota_error: 2 callbacks suppressed [ 611.948209][ T9060] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 611.964062][ T9060] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 611.974300][ T9060] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.621: Failed to acquire dquot type 0 [ 611.992832][ T9060] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 612.003129][ T9060] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 612.014194][ T9060] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.621: Failed to acquire dquot type 0 [ 612.047813][ T9060] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.621: Freeing blocks not in datazone - block = 0, count = 4096 [ 612.066394][ T9060] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 612.076572][ T9060] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 612.086660][ T9060] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.621: Failed to acquire dquot type 0 [ 612.116534][ T9060] EXT4-fs (loop4): 1 orphan inode deleted [ 612.134720][ T9060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 612.390635][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.410017][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.625'. [ 612.548494][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 615.526007][ T49] team0 (unregistering): Port device team_slave_1 removed [ 615.586072][ T49] team0 (unregistering): Port device team_slave_0 removed [ 615.643499][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.708838][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.170693][ T49] bond0 (unregistering): Released all slaves [ 616.485906][ T9076] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.530480][ T6380] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 617.736214][ T9103] overlayfs: missing 'lowerdir' [ 619.660720][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.635'. [ 620.274668][ T9133] loop4: detected capacity change from 0 to 1024 [ 620.425854][ T9133] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 620.464172][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.637'. [ 620.473548][ T9133] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 620.483051][ T9133] EXT4-fs (loop4): orphan cleanup on readonly fs [ 620.492465][ T9133] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 620.502635][ T9133] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 620.513701][ T9133] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.635: Failed to acquire dquot type 0 [ 620.549236][ T9133] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 620.559633][ T9133] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 620.569742][ T9133] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.635: Failed to acquire dquot type 0 [ 620.587883][ T9133] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.635: Freeing blocks not in datazone - block = 0, count = 4096 [ 620.727870][ T9133] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 620.738576][ T9133] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 620.748876][ T9133] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.635: Failed to acquire dquot type 0 [ 620.761737][ T9130] 9pnet_fd: p9_fd_create_tcp (9130): problem connecting socket to 127.0.0.1 [ 620.770771][ T9133] EXT4-fs (loop4): 1 orphan inode deleted [ 621.519804][ T9133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.073264][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.728160][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.735178][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.328792][ T9176] loop4: detected capacity change from 0 to 1024 [ 625.355180][ T9176] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 625.415095][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.648'. [ 625.432581][ T9176] JBD2: no valid journal superblock found [ 625.603852][ T9176] EXT4-fs (loop4): Could not load journal inode [ 630.572310][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.650'. [ 631.188543][ T9198] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 631.392779][ T9208] loop4: detected capacity change from 0 to 128 [ 632.633626][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 632.736888][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 635.548643][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 635.982408][ T9250] loop4: detected capacity change from 0 to 1024 [ 637.270341][ T9250] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 637.333452][ T9250] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 637.341974][ T9250] EXT4-fs (loop4): orphan cleanup on readonly fs [ 637.366816][ T9250] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 637.377582][ T9250] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 637.387780][ T9250] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.659: Failed to acquire dquot type 0 [ 638.463399][ T9250] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 638.474290][ T9250] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 638.484406][ T9250] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.659: Failed to acquire dquot type 0 [ 638.524207][ T9250] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.659: Freeing blocks not in datazone - block = 0, count = 4096 [ 638.580242][ T9250] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 638.594551][ T9250] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 638.604735][ T9250] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.659: Failed to acquire dquot type 0 [ 638.634574][ T9250] EXT4-fs (loop4): 1 orphan inode deleted [ 638.658018][ T9250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 638.808910][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.937966][ T28] audit: type=1800 audit(1790766977.812:32): pid=9265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.663" name="/" dev="fuse" ino=1 res=0 errno=0 [ 639.542759][ T9279] autofs4:pid:9279:autofs_fill_super: called with bogus options [ 644.505603][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.673'. [ 644.950278][ T9322] loop4: detected capacity change from 0 to 1024 [ 646.579404][ T9322] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 646.637795][ T9322] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 646.646256][ T9322] EXT4-fs (loop4): orphan cleanup on readonly fs [ 646.702622][ T9322] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 646.712807][ T9322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 646.723054][ T9322] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.673: Failed to acquire dquot type 0 [ 646.755134][ T9322] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 646.767617][ T9322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 646.781202][ T9322] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.673: Failed to acquire dquot type 0 [ 646.799463][ T9322] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.673: Freeing blocks not in datazone - block = 0, count = 4096 [ 646.817990][ T9322] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 646.829319][ T9322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 646.839440][ T9322] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.673: Failed to acquire dquot type 0 [ 646.855166][ T9322] EXT4-fs (loop4): 1 orphan inode deleted [ 646.958766][ T9322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 647.281435][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.225284][ T9349] tipc: Started in network mode [ 649.230505][ T9349] tipc: Node identity 4, cluster identity 4711 [ 649.236768][ T9349] tipc: Node number set to 4 [ 653.181646][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 653.590357][ T9400] loop4: detected capacity change from 0 to 1024 [ 654.187656][ T9400] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 654.218816][ T9400] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 654.227581][ T9400] EXT4-fs (loop4): orphan cleanup on readonly fs [ 654.237709][ T9400] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 654.247893][ T9400] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 654.258180][ T9400] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.687: Failed to acquire dquot type 0 [ 654.284422][ T9400] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 654.294576][ T9400] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 654.305631][ T9400] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.687: Failed to acquire dquot type 0 [ 654.337460][ T9400] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.687: Freeing blocks not in datazone - block = 0, count = 4096 [ 654.353261][ T9400] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 654.363550][ T9400] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 654.373614][ T9400] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.687: Failed to acquire dquot type 0 [ 654.387399][ T9400] EXT4-fs (loop4): 1 orphan inode deleted [ 654.402901][ T9400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 654.454388][ T9398] loop5: detected capacity change from 0 to 256 [ 654.520505][ T9398] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 654.698512][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.740086][ T9398] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 655.397508][ T9412] Timeout policy `syz1' can only be used by L3 protocol number 17 [ 658.585306][ T5783] Bluetooth: hci2: adv larger than maximum supported [ 658.585373][ T5783] Bluetooth: hci2: Malformed LE Event: 0x0d [ 662.892923][ T5783] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 664.600614][ T9455] loop5: detected capacity change from 0 to 128 [ 665.682910][ T9458] netlink: 'syz.1.700': attribute type 4 has an invalid length. [ 666.005740][ T9475] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6380] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9475] [ 666.069476][ T9475] loop5: detected capacity change from 0 to 164 [ 666.372865][ T9475] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 667.269983][ T9483] loop5: detected capacity change from 0 to 8 [ 667.290924][ T9483] squashfs: Unknown parameter 'Ž_Y¦…' [ 667.508846][ T9484] autofs4:pid:9484:autofs_fill_super: called with bogus options [ 669.934251][ T5783] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 671.250069][ T9515] loop5: detected capacity change from 0 to 164 [ 672.604884][ T9522] rock: directory entry would overflow storage [ 672.611315][ T9522] rock: sig=0x4f50, size=4, remaining=3 [ 672.616968][ T9522] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 674.248763][ T9539] autofs4:pid:9539:autofs_fill_super: called with bogus options [ 675.055125][ T9550] loop4: detected capacity change from 0 to 256 [ 676.034949][ T9555] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 683.170668][ T9599] netlink: 'syz.6.728': attribute type 12 has an invalid length. [ 685.507953][ T9631] CIFS mount error: No usable UNC path provided in device string! [ 685.507953][ T9631] [ 685.518459][ T9631] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 686.250466][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.262891][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.146698][ T28] audit: type=1326 audit(1790767027.012:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.4.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x0 [ 688.196579][ T9650] hsr0: entered promiscuous mode [ 688.245268][ T9650] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.737' sets config #32767 [ 688.942140][ T9654] autofs4:pid:9654:autofs_fill_super: called with bogus options [ 689.256835][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'. [ 689.377930][ T9661] hsr_slave_0: left promiscuous mode [ 689.440926][ T9666] rtc_cmos 00:00: Alarms can be up to one day in the future [ 689.477380][ T9661] hsr_slave_1: left promiscuous mode [ 690.554488][ T5820] rtc_cmos 00:00: Alarms can be up to one day in the future [ 690.563209][ T5820] rtc_cmos 00:00: Alarms can be up to one day in the future [ 690.584716][ T5820] rtc_cmos 00:00: Alarms can be up to one day in the future [ 690.620399][ T5820] rtc_cmos 00:00: Alarms can be up to one day in the future [ 691.017372][ T5820] rtc rtc0: __rtc_set_alarm: err=-22 [ 694.482925][ T9711] 9pnet_virtio: no channels available for device syz [ 694.493042][ T9711] overlayfs: failed to clone upperpath [ 697.539968][ T9732] xt_CT: No such helper "pptp" [ 698.248844][ T9742] loop5: detected capacity change from 0 to 8 [ 699.022654][ T9739] SQUASHFS error: Failed to read block 0x4de: -5 [ 699.030539][ T9739] SQUASHFS error: Failed to read block 0x4de: -5 [ 699.037634][ T28] audit: type=1800 audit(1790767037.912:34): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.751" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 704.076569][ T9782] netlink: 48 bytes leftover after parsing attributes in process `syz.1.757'. [ 704.728275][ T9795] loop4: detected capacity change from 0 to 256 [ 706.824839][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 706.847494][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 706.871403][ T9797] ceph: No mds server is up or the cluster is laggy [ 709.114954][ T9819] rtc_cmos 00:00: Alarms can be up to one day in the future [ 710.078727][ T28] audit: type=1326 audit(1790767048.922:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.4.764" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 710.275425][ T28] audit: type=1326 audit(1790767048.922:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.4.764" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 712.058159][ T9848] netlink: 48 bytes leftover after parsing attributes in process `syz.6.769'. [ 712.533440][ T9859] FAULT_INJECTION: forcing a failure. [ 712.533440][ T9859] name failslab, interval 1, probability 0, space 9, times 0 [ 712.557751][ T9859] CPU: 1 PID: 9859 Comm: syz.5.779 Not tainted syzkaller #0 [ 712.565140][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.575242][ T9859] Call Trace: [ 712.578540][ T9859] [ 712.581509][ T9859] dump_stack_lvl+0x18c/0x250 [ 712.586210][ T9859] ? show_regs_print_info+0x20/0x20 [ 712.591452][ T9859] ? load_image+0x420/0x420 [ 712.595973][ T9859] ? __might_sleep+0xe0/0xe0 [ 712.600603][ T9859] ? __lock_acquire+0x7d80/0x7d80 [ 712.605641][ T9859] ? __asan_memset+0x22/0x40 [ 712.610264][ T9859] should_fail_ex+0x394/0x4c0 [ 712.614973][ T9859] should_failslab+0x9/0x20 [ 712.619499][ T9859] slab_pre_alloc_hook+0x59/0x300 [ 712.624551][ T9859] ? stack_trace_snprint+0xf0/0xf0 [ 712.629693][ T9859] ? __kthread_create_on_node+0x116/0x3d0 [ 712.635425][ T9859] __kmem_cache_alloc_node+0x53/0x250 [ 712.640830][ T9859] ? __kthread_create_on_node+0x116/0x3d0 [ 712.646560][ T9859] kmalloc_trace+0x2a/0xe0 [ 712.650993][ T9859] ? install_unbound_pwq+0x480/0x480 [ 712.656294][ T9859] __kthread_create_on_node+0x116/0x3d0 [ 712.661857][ T9859] ? do_dentry_open+0x880/0x14b0 [ 712.666818][ T9859] ? kthread_create_on_node+0x140/0x140 [ 712.672399][ T9859] ? install_unbound_pwq+0x480/0x480 [ 712.677760][ T9859] ? install_unbound_pwq+0x480/0x480 [ 712.683091][ T9859] kthread_create_on_node+0xec/0x140 [ 712.688411][ T9859] ? tsk_fork_get_node+0x70/0x70 [ 712.693363][ T9859] ? rcu_is_watching+0x15/0xb0 [ 712.698148][ T9859] init_rescuer+0x1a9/0x2d0 [ 712.702664][ T9859] alloc_workqueue+0xcf0/0x1380 [ 712.707529][ T9859] ? __asan_memcpy+0x40/0x70 [ 712.712146][ T9859] ? snprintf+0xe9/0x140 [ 712.716413][ T9859] ? lockdep_init_map_type+0x9c/0x8e0 [ 712.721825][ T9859] ? apply_workqueue_attrs+0x180/0x180 [ 712.727317][ T9859] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 712.733238][ T9859] nci_register_device+0x400/0xa00 [ 712.738374][ T9859] ? nci_free_device+0x90/0x90 [ 712.743159][ T9859] ? __init_waitqueue_head+0xa8/0x140 [ 712.748564][ T9859] virtual_ncidev_open+0x12c/0x1a0 [ 712.753703][ T9859] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 712.759009][ T9859] misc_open+0x326/0x3a0 [ 712.763276][ T9859] chrdev_open+0x58c/0x600 [ 712.767705][ T9859] ? cd_forget+0x160/0x160 [ 712.772137][ T9859] ? fsnotify_perm+0x3ed/0x5e0 [ 712.776944][ T9859] do_dentry_open+0x880/0x14b0 [ 712.781757][ T9859] ? cd_forget+0x160/0x160 [ 712.786196][ T9859] path_openat+0x284f/0x3270 [ 712.790818][ T9859] ? do_sys_openat2+0xda/0x1d0 [ 712.795593][ T9859] ? __x64_sys_openat+0x139/0x160 [ 712.800637][ T9859] ? verify_lock_unused+0x140/0x140 [ 712.805868][ T9859] ? do_filp_open+0x430/0x430 [ 712.810576][ T9859] do_filp_open+0x1f2/0x430 [ 712.815100][ T9859] ? vfs_tmpfile+0x620/0x620 [ 712.819720][ T9859] ? _raw_spin_unlock+0x28/0x40 [ 712.824598][ T9859] ? alloc_fd+0x590/0x640 [ 712.828958][ T9859] do_sys_openat2+0x134/0x1d0 [ 712.833654][ T9859] ? do_sys_open+0xe0/0xe0 [ 712.838085][ T9859] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 712.844082][ T9859] ? lock_chain_count+0x20/0x20 [ 712.848949][ T9859] __x64_sys_openat+0x139/0x160 [ 712.853828][ T9859] do_syscall_64+0x55/0xb0 [ 712.858259][ T9859] ? clear_bhb_loop+0x40/0x90 [ 712.862969][ T9859] ? clear_bhb_loop+0x40/0x90 [ 712.867662][ T9859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.873573][ T9859] RIP: 0033:0x7f7aaa39e159 [ 712.878020][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.897670][ T9859] RSP: 002b:00007f7aab1fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 712.906093][ T9859] RAX: ffffffffffffffda RBX: 00007f7aaa625fa0 RCX: 00007f7aaa39e159 [ 712.914080][ T9859] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 712.922065][ T9859] RBP: 00007f7aaa43506b R08: 0000000000000000 R09: 0000000000000000 [ 712.930073][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.938069][ T9859] R13: 00007f7aaa626038 R14: 00007f7aaa625fa0 R15: 00007ffc3b643e38 [ 712.946082][ T9859] [ 714.492573][ T9859] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -ENOMEM [ 715.212870][ T9859] loop5: detected capacity change from 0 to 512 [ 715.708707][ T9859] EXT4-fs (loop5): 1 truncate cleaned up [ 715.769577][ T9859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.319082][ T6380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.490120][ T9906] overlayfs: failed to clone upperpath [ 720.714834][ T9913] sctp: failed to load transform for md5: -2 [ 720.957663][ T9911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.782'. [ 722.408414][ T28] audit: type=1326 audit(1790767060.382:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 722.781842][ T28] audit: type=1326 audit(1790767060.382:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 722.900565][ T28] audit: type=1326 audit(1790767060.392:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 723.162170][ T9938] netlink: 48 bytes leftover after parsing attributes in process `syz.6.785'. [ 723.344532][ T28] audit: type=1326 audit(1790767060.392:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 723.446497][ T28] audit: type=1326 audit(1790767060.392:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 723.747096][ C1] hrtimer: interrupt took 56009 ns [ 723.798339][ T28] audit: type=1326 audit(1790767060.392:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 724.077437][ T28] audit: type=1326 audit(1790767060.392:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 724.164534][ T28] audit: type=1326 audit(1790767060.392:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 724.349362][ T28] audit: type=1326 audit(1790767060.392:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 724.418548][ T28] audit: type=1326 audit(1790767060.392:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.6.784" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 724.844183][ T9949] loop5: detected capacity change from 0 to 512 [ 725.099921][ T9949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.115352][ T9960] loop4: detected capacity change from 0 to 256 [ 725.156808][ T9949] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.189439][ T6380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.249890][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 730.249916][ T28] audit: type=1326 audit(1790767069.122:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.6.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x0 [ 731.268078][T10002] hsr0: entered promiscuous mode [ 732.111741][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.794'. [ 732.271247][T10010] hsr_slave_0: left promiscuous mode [ 733.144004][T10010] hsr_slave_1: left promiscuous mode [ 733.277264][T10026] netlink: 'syz.4.798': attribute type 2 has an invalid length. [ 733.285737][T10026] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 733.293738][T10026] netlink: 224 bytes leftover after parsing attributes in process `syz.4.798'. [ 734.339717][T10035] loop5: detected capacity change from 0 to 512 [ 734.363162][T10035] EXT4-fs (loop5): Test dummy encryption mode enabled [ 734.407140][T10035] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 734.509355][T10035] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.799: bad orphan inode 131083 [ 734.587010][T10035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.163640][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.066910][T10059] ip_tables: iptables: counters copy to user failed while replacing table [ 736.078402][T10059] ip_tables: iptables: counters copy to user failed while replacing table [ 736.356683][T10035] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 737.091823][T10035] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.509732][T10103] loop4: detected capacity change from 0 to 128 [ 739.651690][T10106] xt_hashlimit: size too large, truncated to 1048576 [ 741.626819][T10113] netlink: 'syz.6.808': attribute type 1 has an invalid length. [ 742.148605][T10115] sctp: failed to load transform for md5: -2 [ 742.472910][T10113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 742.709103][T10125] macvlan2: entered promiscuous mode [ 742.714763][T10125] macvlan2: entered allmulticast mode [ 742.722478][T10125] bond1: entered allmulticast mode [ 743.091627][T10135] loop4: detected capacity change from 0 to 512 [ 743.380811][T10125] bond1: entered promiscuous mode [ 743.396162][T10135] EXT4-fs (loop4): Test dummy encryption mode enabled [ 743.434396][T10125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 743.481208][T10125] team0: Port device macvlan2 added [ 743.486754][T10135] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #11: comm syz.4.809: casefold flag without casefold feature [ 743.532039][T10135] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.809: couldn't read orphan inode 11 (err -117) [ 743.581126][T10135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.849849][T10126] bond1: (slave ip6gretap1): making interface the new active one [ 743.864915][T10126] ip6gretap1: entered promiscuous mode [ 743.873465][T10126] ip6gretap1: entered allmulticast mode [ 743.885091][T10126] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 744.150014][T10148] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 747.432917][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.466138][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.816'. [ 747.621532][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.637860][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.792092][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'. [ 751.230461][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 751.472301][ T28] audit: type=1326 audit(1790767090.769:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 752.046875][ T28] audit: type=1326 audit(1790767090.769:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 752.199466][ T28] audit: type=1326 audit(1790767090.769:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 752.238250][ T28] audit: type=1326 audit(1790767090.769:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 752.290675][ T28] audit: type=1326 audit(1790767090.769:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 752.357136][ T28] audit: type=1326 audit(1790767090.769:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 752.427171][ T28] audit: type=1326 audit(1790767090.769:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 752.570538][ T28] audit: type=1326 audit(1790767090.769:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 752.595261][ T28] audit: type=1326 audit(1790767090.769:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 752.733226][T10213] 9pnet_fd: Insufficient options for proto=fd [ 752.782185][ T28] audit: type=1326 audit(1790767090.769:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.5.822" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 754.145049][T10235] lo: entered allmulticast mode [ 754.154516][T10235] tunl0: entered allmulticast mode [ 754.178513][T10235] gre0: entered allmulticast mode [ 754.195058][T10235] gretap0: entered allmulticast mode [ 754.215896][T10235] erspan0: entered allmulticast mode [ 754.263035][T10235] ip_vti0: entered allmulticast mode [ 754.308353][T10235] ip6_vti0: entered allmulticast mode [ 754.365101][T10235] sit0: entered allmulticast mode [ 754.405810][T10235] ip6tnl0: entered allmulticast mode [ 754.435762][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.829'. [ 754.438406][T10235] ip6gre0: entered allmulticast mode [ 754.502939][T10235] syz_tun: entered allmulticast mode [ 754.528881][T10235] ip6gretap0: entered allmulticast mode [ 754.543198][T10235] bridge0: entered allmulticast mode [ 754.563907][T10235] vcan0: entered allmulticast mode [ 754.580091][T10235] bond0: entered allmulticast mode [ 754.585294][T10235] bond_slave_0: entered allmulticast mode [ 754.612815][T10235] bond_slave_1: entered allmulticast mode [ 754.630321][T10235] team0: entered allmulticast mode [ 754.644520][T10235] team_slave_0: entered allmulticast mode [ 754.650846][T10235] team_slave_1: entered allmulticast mode [ 754.664337][T10235] dummy0: entered allmulticast mode [ 754.671097][T10235] nlmon0: entered allmulticast mode [ 754.688485][T10235] caif0: entered allmulticast mode [ 754.696568][T10235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 757.147692][T10286] ip_tables: iptables: counters copy to user failed while replacing table [ 757.179167][T10286] ip_tables: iptables: counters copy to user failed while replacing table [ 761.503914][T10328] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 272). There's a risk of filesystem corruption in case of system crash. [ 761.684295][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 761.684336][ T28] audit: type=1326 audit(1790767102.503:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 762.347275][ T28] audit: type=1326 audit(1790767102.503:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 762.423649][ T28] audit: type=1326 audit(1790767102.503:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 762.507231][ T28] audit: type=1326 audit(1790767102.503:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 762.614518][ T28] audit: type=1326 audit(1790767102.513:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 762.705352][ T28] audit: type=1326 audit(1790767102.523:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 762.778194][T10345] netlink: 48 bytes leftover after parsing attributes in process `syz.4.848'. [ 762.805238][ T28] audit: type=1326 audit(1790767102.523:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 762.843061][T10345] FAULT_INJECTION: forcing a failure. [ 762.843061][T10345] name failslab, interval 1, probability 0, space 9, times 0 [ 762.868961][ T28] audit: type=1326 audit(1790767102.523:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 762.907372][T10345] CPU: 1 PID: 10345 Comm: syz.4.848 Not tainted syzkaller #0 [ 762.914829][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 762.924935][T10345] Call Trace: [ 762.927483][ T28] audit: type=1326 audit(1790767102.523:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 762.928244][T10345] [ 762.955256][T10345] dump_stack_lvl+0x18c/0x250 [ 762.960010][T10345] ? show_regs_print_info+0x20/0x20 [ 762.965273][T10345] ? load_image+0x420/0x420 [ 762.969838][T10345] ? __might_sleep+0xe0/0xe0 [ 762.974489][T10345] ? __lock_acquire+0x7d80/0x7d80 [ 762.979578][T10345] should_fail_ex+0x394/0x4c0 [ 762.984326][T10345] should_failslab+0x9/0x20 [ 762.988888][T10345] slab_pre_alloc_hook+0x59/0x300 [ 762.993979][T10345] kmem_cache_alloc_node+0x5e/0x310 [ 762.999245][T10345] ? __alloc_skb+0x103/0x2c0 [ 763.003923][T10345] __alloc_skb+0x103/0x2c0 [ 763.006268][ T28] audit: type=1326 audit(1790767102.523:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10328 comm="syz.6.847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 763.008372][T10345] ctrl_getfamily+0x3d1/0x5b0 [ 763.037042][T10345] ? nla_put_string+0x30/0x30 [ 763.041789][T10345] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 763.048188][T10345] genl_family_rcv_msg_doit+0x21a/0x310 [ 763.053801][T10345] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 763.059781][T10345] genl_rcv_msg+0x611/0x7a0 [ 763.064351][T10345] ? genl_bind+0x360/0x360 [ 763.068831][T10345] ? nla_put_string+0x30/0x30 [ 763.073560][T10345] ? ref_tracker_free+0x686/0x830 [ 763.078647][T10345] netlink_rcv_skb+0x235/0x4c0 [ 763.083466][T10345] ? genl_bind+0x360/0x360 [ 763.087935][T10345] ? netlink_ack+0x1160/0x1160 [ 763.092769][T10345] ? __lock_acquire+0x7d80/0x7d80 [ 763.097859][T10345] ? down_read+0x1ac/0x2e0 [ 763.102351][T10345] genl_rcv+0x28/0x40 [ 763.106385][T10345] netlink_unicast+0x7b1/0x930 [ 763.111222][T10345] netlink_sendmsg+0x8d0/0xbf0 [ 763.116049][T10345] ? netlink_getsockopt+0x590/0x590 [ 763.121297][T10345] ? apparmor_socket_sendmsg+0x8e/0x330 [ 763.126899][T10345] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 763.132242][T10345] ? security_socket_sendmsg+0x80/0xa0 [ 763.137763][T10345] __sys_sendto+0x4a9/0x6b0 [ 763.142414][T10345] ? __ia32_sys_getpeername+0x90/0x90 [ 763.147854][T10345] ? __lock_acquire+0x7d80/0x7d80 [ 763.152955][T10345] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 763.159008][T10345] ? lock_chain_count+0x20/0x20 [ 763.163913][T10345] ? lock_chain_count+0x20/0x20 [ 763.168824][T10345] __x64_sys_sendto+0xde/0xf0 [ 763.173564][T10345] do_syscall_64+0x55/0xb0 [ 763.178029][T10345] ? clear_bhb_loop+0x40/0x90 [ 763.182764][T10345] ? clear_bhb_loop+0x40/0x90 [ 763.187500][T10345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.193458][T10345] RIP: 0033:0x7faf29d5e98e [ 763.197928][T10345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 763.217678][T10345] RSP: 002b:00007faf2acc3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 763.226159][T10345] RAX: ffffffffffffffda RBX: 00007faf2acc56c0 RCX: 00007faf29d5e98e [ 763.234208][T10345] RDX: 0000000000000024 RSI: 00007faf2acc4000 RDI: 000000000000000a [ 763.242239][T10345] RBP: 0000000000000000 R08: 00007faf2acc3f04 R09: 000000000000000c [ 763.250262][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 763.258290][T10345] R13: 00007faf2acc3f58 R14: 00007faf2acc4000 R15: 0000000000000000 [ 763.266347][T10345] [ 763.305006][T10350] loop4: detected capacity change from 0 to 512 [ 763.921654][T10350] EXT4-fs (loop4): 1 truncate cleaned up [ 763.945742][T10350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.085060][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.850'. [ 764.471900][T10366] futex_wake_op: syz.6.851 tries to shift op by 144; fix this program [ 765.382989][T10356] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 765.487618][T10356] EXT4-fs (loop4): Remounting filesystem read-only [ 765.528048][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.282795][T10388] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 767.481918][T10395] xt_TCPMSS: Only works on TCP SYN packets [ 769.862251][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 771.234732][T10426] netlink: 48 bytes leftover after parsing attributes in process `syz.5.862'. [ 771.409091][T10425] lo speed is unknown, defaulting to 1000 [ 771.415381][T10425] lo speed is unknown, defaulting to 1000 [ 771.424573][T10425] lo speed is unknown, defaulting to 1000 [ 771.438038][T10425] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 771.454526][T10425] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 771.713051][T10441] fuse: Bad value for 'fd' [ 771.893939][T10425] lo speed is unknown, defaulting to 1000 [ 771.903401][T10425] lo speed is unknown, defaulting to 1000 [ 771.912635][T10425] lo speed is unknown, defaulting to 1000 [ 771.920443][T10425] lo speed is unknown, defaulting to 1000 [ 771.938789][T10425] lo speed is unknown, defaulting to 1000 [ 772.063900][ T6122] lo speed is unknown, defaulting to 1000 [ 772.627357][T10435] netlink: 'syz.6.866': attribute type 10 has an invalid length. [ 775.060583][T10451] fuse: Bad value for 'fd' [ 775.888068][T10435] netlink: 40 bytes leftover after parsing attributes in process `syz.6.866'. [ 775.941608][T10435] dummy0: entered promiscuous mode [ 775.951370][T10435] dummy0: left allmulticast mode [ 776.040898][T10435] bridge0: port 3(dummy0) entered blocking state [ 776.057015][T10435] bridge0: port 3(dummy0) entered disabled state [ 776.065547][T10435] dummy0: entered allmulticast mode [ 776.117078][T10435] bridge0: port 3(dummy0) entered blocking state [ 776.123652][T10435] bridge0: port 3(dummy0) entered forwarding state [ 778.177549][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.872'. [ 780.618026][T10502] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 780.902864][T10513] netlink: 48 bytes leftover after parsing attributes in process `syz.6.878'. [ 783.754801][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.887'. [ 784.942624][T10556] netlink: 48 bytes leftover after parsing attributes in process `syz.4.888'. [ 784.966538][T10556] loop4: detected capacity change from 0 to 512 [ 785.002652][T10556] EXT4-fs (loop4): 1 truncate cleaned up [ 785.021003][T10556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.394826][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.556460][T10565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.889'. [ 785.586822][T10565] netlink: 'syz.4.889': attribute type 16 has an invalid length. [ 785.613421][T10565] netlink: 'syz.4.889': attribute type 17 has an invalid length. [ 785.704492][T10565] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 788.169572][T10589] lo speed is unknown, defaulting to 1000 [ 788.192292][T10590] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 788.219209][T10590] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 788.241566][T10592] netlink: 48 bytes leftover after parsing attributes in process `syz.5.897'. [ 788.560314][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 789.317780][T10602] loop4: detected capacity change from 0 to 1024 [ 789.336177][T10602] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 789.379432][T10602] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 789.387979][T10602] EXT4-fs (loop4): orphan cleanup on readonly fs [ 789.430630][T10602] __quota_error: 62 callbacks suppressed [ 789.430652][T10602] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 789.446579][T10602] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 789.456743][T10602] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.899: Failed to acquire dquot type 0 [ 789.468621][T10602] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 789.479951][T10602] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 789.490225][T10602] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.899: Failed to acquire dquot type 0 [ 789.502735][T10602] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.899: Freeing blocks not in datazone - block = 0, count = 4096 [ 789.527808][T10602] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 789.538289][T10602] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 789.548386][T10602] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.899: Failed to acquire dquot type 0 [ 789.561070][T10602] EXT4-fs (loop4): 1 orphan inode deleted [ 789.577498][T10602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 789.807555][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.251161][T10622] netlink: 48 bytes leftover after parsing attributes in process `syz.5.906'. [ 791.552815][T10630] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 793.002518][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.910'. [ 794.279511][T10645] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 796.507259][T10669] netlink: 48 bytes leftover after parsing attributes in process `syz.4.916'. [ 796.678041][T10669] loop4: detected capacity change from 0 to 512 [ 796.735754][T10669] EXT4-fs (loop4): 1 truncate cleaned up [ 796.746546][T10669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 796.948708][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.263522][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.922'. [ 801.673713][T10713] Cannot find set identified by id 0 to match [ 803.493076][T10720] sctp: failed to load transform for md5: -2 [ 803.932898][T10739] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 804.559233][T10741] netlink: 64 bytes leftover after parsing attributes in process `syz.5.934'. [ 804.613511][T10741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 804.626516][T10741] ip6gretap2: entered allmulticast mode [ 804.649526][T10741] batman_adv: batadv0: Adding interface: ip6gretap2 [ 804.656538][T10741] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.682514][T10741] batman_adv: batadv0: Interface activated: ip6gretap2 [ 807.744864][T10762] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 808.287928][T10770] netlink: 40 bytes leftover after parsing attributes in process `syz.6.943'. [ 808.912259][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.939'. [ 809.128191][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.135562][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.778673][T10783] sctp: failed to load transform for md5: -2 [ 812.038893][T10803] tipc: Started in network mode [ 812.043950][T10803] tipc: Node identity 4, cluster identity 4711 [ 812.050464][T10803] tipc: Node number set to 4 [ 814.429270][T10824] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 814.443175][T10824] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 814.469605][T10824] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 814.546188][T10824] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 814.563443][T10824] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 814.570805][T10824] pci 0000:00:05.0: vgaarb: bridge control possible [ 814.577425][T10824] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 814.588602][T10824] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 816.183942][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'. [ 816.691259][T10843] loop4: detected capacity change from 0 to 1024 [ 816.923503][T10843] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 816.936084][T10843] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 816.945151][T10843] EXT4-fs (loop4): orphan cleanup on readonly fs [ 816.954698][T10843] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 816.964936][T10843] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 816.975085][T10843] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.957: Failed to acquire dquot type 0 [ 817.006426][T10843] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 817.017402][T10843] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 817.028298][T10843] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.957: Failed to acquire dquot type 0 [ 817.050901][T10843] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.957: Freeing blocks not in datazone - block = 0, count = 4096 [ 817.073090][T10843] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 817.083464][T10843] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 817.093573][T10843] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.957: Failed to acquire dquot type 0 [ 817.121085][T10843] EXT4-fs (loop4): 1 orphan inode deleted [ 817.138355][T10843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 819.228551][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.393511][T10864] loop4: detected capacity change from 0 to 512 [ 819.428372][T10864] ext4: Bad value for 'data' [ 821.115616][T10878] loop4: detected capacity change from 0 to 1024 [ 821.271799][T10878] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 821.846850][T10886] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 823.205674][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.974'. [ 824.209012][T10900] overlayfs: failed to clone upperpath [ 824.226058][T10900] netlink: 'syz.1.973': attribute type 1 has an invalid length. [ 824.233851][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 824.250548][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 824.267795][ T28] audit: type=1800 audit(1790767166.136:150): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.975" name="idVendor" dev="configfs" ino=22715 res=0 errno=0 [ 824.316892][ T28] audit: type=1800 audit(1790767166.156:151): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.975" name="idProduct" dev="configfs" ino=22716 res=0 errno=0 [ 824.558013][ T28] audit: type=1800 audit(1790767166.156:152): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.975" name="max_speed" dev="configfs" ino=22717 res=0 errno=0 [ 824.587464][T10907] usb 1-1: usbfs: process 10907 (syz.4.975) did not claim interface 0 before use [ 825.268816][ T28] audit: type=1800 audit(1790767166.166:153): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.975" name="c_sync" dev="configfs" ino=22719 res=0 errno=0 [ 825.362251][ T28] audit: type=1800 audit(1790767166.176:154): pid=10902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.975" name="UDC" dev="configfs" ino=22720 res=0 errno=0 [ 825.640369][T10915] loop4: detected capacity change from 0 to 512 [ 826.462332][T10915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.562785][T10915] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.604190][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.716069][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.984'. [ 829.071393][T10946] loop4: detected capacity change from 0 to 1024 [ 829.299371][T10946] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 829.326723][T10946] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 829.337175][T10946] EXT4-fs (loop4): orphan cleanup on readonly fs [ 829.733898][T10946] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 829.744112][T10946] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 829.754638][T10946] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.984: Failed to acquire dquot type 0 [ 829.771069][T10946] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 829.781225][T10946] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 829.791350][T10946] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.984: Failed to acquire dquot type 0 [ 829.804739][T10946] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.984: Freeing blocks not in datazone - block = 0, count = 4096 [ 829.823475][T10946] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 829.833654][T10946] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 829.843735][T10946] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.984: Failed to acquire dquot type 0 [ 829.859315][T10946] EXT4-fs (loop4): 1 orphan inode deleted [ 829.875471][T10946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 830.250125][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.355218][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 836.224825][ T5768] IPVS: starting estimator thread 0... [ 836.249598][T10969] netlink: 'syz.6.990': attribute type 39 has an invalid length. [ 836.456181][T10973] IPVS: using max 19 ests per chain, 45600 per kthread [ 838.143579][ T28] audit: type=1326 audit(1790767179.946:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 838.461059][ T28] audit: type=1326 audit(1790767179.946:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 838.674729][ T28] audit: type=1326 audit(1790767179.946:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 838.737206][ T28] audit: type=1326 audit(1790767179.946:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 838.761396][ T28] audit: type=1326 audit(1790767179.966:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 838.785606][ T28] audit: type=1326 audit(1790767179.966:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 838.804527][T10993] syz.1.997 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 838.837122][ T28] audit: type=1326 audit(1790767179.966:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 838.871480][ T28] audit: type=1326 audit(1790767179.966:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 838.901129][ T28] audit: type=1326 audit(1790767179.976:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 839.687299][T10994] futex_wake_op: syz.1.997 tries to shift op by -1; fix this program [ 840.029999][ T28] audit: type=1326 audit(1790767179.976:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.6.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 843.807505][T11018] : renamed from bridge_slave_0 (while UP) [ 845.807382][T11039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 848.177224][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1010'. [ 848.190766][T11047] macsec0: entered promiscuous mode [ 850.543410][T11068] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 860.765928][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1028'. [ 864.063027][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 864.844401][T11141] loop4: detected capacity change from 0 to 1024 [ 865.285490][T11141] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 865.405030][T11141] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 865.413709][T11141] EXT4-fs (loop4): orphan cleanup on readonly fs [ 865.443519][T11141] __quota_error: 67 callbacks suppressed [ 865.443537][T11141] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 865.461065][T11141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 865.471138][T11141] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1032: Failed to acquire dquot type 0 [ 865.486279][T11141] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 865.496414][T11141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 865.506463][T11141] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1032: Failed to acquire dquot type 0 [ 865.588998][T11141] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1032: Freeing blocks not in datazone - block = 0, count = 4096 [ 865.673503][T11141] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 865.683643][T11141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 865.694265][T11141] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1032: Failed to acquire dquot type 0 [ 865.887531][T11141] EXT4-fs (loop4): 1 orphan inode deleted [ 866.645897][T11141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 866.723504][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1034'. [ 866.975065][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.963790][T11174] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1040'. [ 871.269815][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.276228][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.522583][ T28] audit: type=1326 audit(1790767215.376:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 872.883786][ T28] audit: type=1326 audit(1790767215.376:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 873.287621][ T28] audit: type=1326 audit(1790767215.376:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 873.378685][ T28] audit: type=1326 audit(1790767215.376:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 873.385097][T11202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1046'. [ 873.402904][ T28] audit: type=1326 audit(1790767215.376:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 873.402960][ T28] audit: type=1326 audit(1790767215.386:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 873.403007][ T28] audit: type=1326 audit(1790767215.386:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 873.403052][ T28] audit: type=1326 audit(1790767215.386:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 873.403154][ T28] audit: type=1326 audit(1790767215.386:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 873.611552][ T28] audit: type=1326 audit(1790767215.386:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11189 comm="syz.5.1045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7aaa39e159 code=0x7ffc0000 [ 882.709046][T11269] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1057'. [ 887.106489][T11297] FAULT_INJECTION: forcing a failure. [ 887.106489][T11297] name failslab, interval 1, probability 0, space 9, times 0 [ 887.137108][T11297] CPU: 0 PID: 11297 Comm: syz.4.1072 Not tainted syzkaller #0 [ 887.144656][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 887.154782][T11297] Call Trace: [ 887.158136][T11297] [ 887.161108][T11297] dump_stack_lvl+0x18c/0x250 [ 887.165886][T11297] ? show_regs_print_info+0x20/0x20 [ 887.171138][T11297] ? load_image+0x420/0x420 [ 887.175808][T11297] ? __lock_acquire+0x7d80/0x7d80 [ 887.180893][T11297] ? kasan_set_track+0x5f/0x70 [ 887.185716][T11297] should_fail_ex+0x394/0x4c0 [ 887.190456][T11297] should_failslab+0x9/0x20 [ 887.195017][T11297] slab_pre_alloc_hook+0x59/0x300 [ 887.200111][T11297] ? string+0x257/0x290 [ 887.204318][T11297] ? __kthread_create_on_node+0x1b4/0x3d0 [ 887.210120][T11297] ? __kthread_create_on_node+0x1b4/0x3d0 [ 887.215885][T11297] __kmem_cache_alloc_node+0x53/0x250 [ 887.221322][T11297] ? __kthread_create_on_node+0x1b4/0x3d0 [ 887.227116][T11297] __kmalloc_node_track_caller+0xa4/0x230 [ 887.232903][T11297] kvasprintf+0xec/0x1a0 [ 887.237202][T11297] ? bust_spinlocks+0xd0/0xd0 [ 887.241952][T11297] __kthread_create_on_node+0x1b4/0x3d0 [ 887.247556][T11297] ? do_dentry_open+0x880/0x14b0 [ 887.252554][T11297] ? kthread_create_on_node+0x140/0x140 [ 887.258175][T11297] ? install_unbound_pwq+0x480/0x480 [ 887.263524][T11297] ? install_unbound_pwq+0x480/0x480 [ 887.268901][T11297] kthread_create_on_node+0xec/0x140 [ 887.274249][T11297] ? tsk_fork_get_node+0x70/0x70 [ 887.279271][T11297] ? rcu_is_watching+0x15/0xb0 [ 887.284118][T11297] init_rescuer+0x1a9/0x2d0 [ 887.288661][T11297] alloc_workqueue+0xcf0/0x1380 [ 887.293537][T11297] ? __asan_memcpy+0x40/0x70 [ 887.298174][T11297] ? snprintf+0xe9/0x140 [ 887.302446][T11297] ? lockdep_init_map_type+0x9c/0x8e0 [ 887.307854][T11297] ? apply_workqueue_attrs+0x180/0x180 [ 887.313340][T11297] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 887.319298][T11297] nci_register_device+0x400/0xa00 [ 887.324481][T11297] ? nci_free_device+0x90/0x90 [ 887.329275][T11297] ? __init_waitqueue_head+0xa8/0x140 [ 887.334677][T11297] virtual_ncidev_open+0x12c/0x1a0 [ 887.339826][T11297] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 887.345057][T11297] misc_open+0x326/0x3a0 [ 887.349351][T11297] chrdev_open+0x58c/0x600 [ 887.353800][T11297] ? cd_forget+0x160/0x160 [ 887.358253][T11297] ? fsnotify_perm+0x3ed/0x5e0 [ 887.363052][T11297] do_dentry_open+0x880/0x14b0 [ 887.367877][T11297] ? cd_forget+0x160/0x160 [ 887.372427][T11297] path_openat+0x284f/0x3270 [ 887.377080][T11297] ? do_sys_openat2+0xda/0x1d0 [ 887.381888][T11297] ? __x64_sys_openat+0x139/0x160 [ 887.386947][T11297] ? verify_lock_unused+0x140/0x140 [ 887.392178][T11297] ? do_filp_open+0x430/0x430 [ 887.396909][T11297] do_filp_open+0x1f2/0x430 [ 887.401630][T11297] ? vfs_tmpfile+0x620/0x620 [ 887.406279][T11297] ? _raw_spin_unlock+0x28/0x40 [ 887.411159][T11297] ? alloc_fd+0x590/0x640 [ 887.415532][T11297] do_sys_openat2+0x134/0x1d0 [ 887.420250][T11297] ? do_sys_open+0xe0/0xe0 [ 887.424700][T11297] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 887.430711][T11297] ? lock_chain_count+0x20/0x20 [ 887.435598][T11297] __x64_sys_openat+0x139/0x160 [ 887.440486][T11297] do_syscall_64+0x55/0xb0 [ 887.444936][T11297] ? clear_bhb_loop+0x40/0x90 [ 887.449668][T11297] ? clear_bhb_loop+0x40/0x90 [ 887.454383][T11297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.460323][T11297] RIP: 0033:0x7faf29d9e159 [ 887.464770][T11297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.484435][T11297] RSP: 002b:00007faf2acc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 887.492922][T11297] RAX: ffffffffffffffda RBX: 00007faf2a025fa0 RCX: 00007faf29d9e159 [ 887.500928][T11297] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 887.508927][T11297] RBP: 00007faf29e3506b R08: 0000000000000000 R09: 0000000000000000 [ 887.516965][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.524975][T11297] R13: 00007faf2a026038 R14: 00007faf2a025fa0 R15: 00007ffe13943128 [ 887.532988][T11297] [ 887.594553][T11300] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1072'. [ 887.647871][T11297] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -ENOMEM [ 887.737501][T11300] loop4: detected capacity change from 0 to 512 [ 887.808753][T11300] EXT4-fs (loop4): 1 truncate cleaned up [ 887.837765][T11300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.034078][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.426111][T11362] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 906.047110][ T5783] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 909.873236][T11426] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1097'. [ 919.333192][T11479] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1107'. [ 925.379299][T11522] atomic_op ffff888023ecc998 conn xmit_atomic 0000000000000000 [ 927.158853][T11535] tc_dump_action: action bad kind [ 927.542765][T11543] loop4: detected capacity change from 0 to 1024 [ 928.178114][T11527] bridge0: port 4(syz_tun) entered blocking state [ 928.198871][T11543] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 928.229751][T11543] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 928.238575][T11543] EXT4-fs (loop4): orphan cleanup on readonly fs [ 928.247885][T11543] __quota_error: 5 callbacks suppressed [ 928.247901][T11543] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 928.263537][T11543] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 928.273910][T11543] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1124: Failed to acquire dquot type 0 [ 928.296387][T11527] bridge0: port 4(syz_tun) entered disabled state [ 928.297353][T11543] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 928.313145][T11543] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 928.323217][T11543] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1124: Failed to acquire dquot type 0 [ 928.336207][T11543] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1124: Freeing blocks not in datazone - block = 0, count = 4096 [ 928.350925][T11543] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 928.361002][T11543] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 928.371055][T11543] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1124: Failed to acquire dquot type 0 [ 928.382809][T11543] EXT4-fs (loop4): 1 orphan inode deleted [ 928.389906][T11543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 928.445076][T11527] syz_tun: entered promiscuous mode [ 928.452733][T11527] bridge0: port 4(syz_tun) entered blocking state [ 928.459816][T11527] bridge0: port 4(syz_tun) entered forwarding state [ 928.638971][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.678325][T11530] netlink: 'syz.6.1120': attribute type 9 has an invalid length. [ 929.374762][T11551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1126'. [ 931.948308][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.954962][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.966632][T11573] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1131'. [ 934.010331][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1135'. [ 935.942592][T11604] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 938.791648][T11613] bridge0: port 3(syz_tun) entered blocking state [ 938.799091][T11613] bridge0: port 3(syz_tun) entered disabled state [ 938.812080][T11613] syz_tun: entered allmulticast mode [ 938.850404][T11613] syz_tun: entered promiscuous mode [ 938.859378][T11613] bridge0: port 3(syz_tun) entered blocking state [ 938.866046][T11613] bridge0: port 3(syz_tun) entered forwarding state [ 938.874983][T11614] bridge0: port 4(ip6gretap0) entered blocking state [ 938.882210][T11614] bridge0: port 4(ip6gretap0) entered disabled state [ 938.889326][T11614] ip6gretap0: entered allmulticast mode [ 938.897402][T11614] ip6gretap0: entered promiscuous mode [ 938.904014][T11614] bridge0: port 4(ip6gretap0) entered blocking state [ 938.910986][T11614] bridge0: port 4(ip6gretap0) entered forwarding state [ 940.529318][T11620] ucma_write: process 907 (syz.4.1141) changed security contexts after opening file descriptor, this is not allowed. [ 941.379975][T11625] UBIFS error (pid: 11625): cannot open "(null)", error -22 [ 941.382281][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1142'. [ 943.464337][T11652] netlink: 'syz.1.1148': attribute type 10 has an invalid length. [ 943.514493][T11652] team0 (unregistering): Port device team_slave_0 removed [ 943.531903][T11652] team0 (unregistering): Port device team_slave_1 removed [ 944.936886][T11663] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 950.887805][T11680] ceph: No mds server is up or the cluster is laggy [ 951.701788][T11695] loop4: detected capacity change from 0 to 1024 [ 952.326220][T11695] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 952.348442][T11695] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 952.356865][T11695] EXT4-fs (loop4): orphan cleanup on readonly fs [ 952.369104][T11695] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 952.379218][T11695] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 952.390689][T11695] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1156: Failed to acquire dquot type 0 [ 952.404975][T11695] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 952.415183][T11695] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 952.425288][T11695] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1156: Failed to acquire dquot type 0 [ 952.438464][T11695] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1156: Freeing blocks not in datazone - block = 0, count = 4096 [ 952.455625][T11695] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 952.466334][T11695] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 952.476467][T11695] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1156: Failed to acquire dquot type 0 [ 952.488479][T11695] EXT4-fs (loop4): 1 orphan inode deleted [ 952.584012][T11695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 953.323187][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.697435][ T28] audit: type=1326 audit(1790767297.556:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11717 comm="syz.4.1160" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf29d9e159 code=0x0 [ 955.357742][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1163'. [ 955.367860][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1163'. [ 955.378158][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1163'. [ 955.390755][T11726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1163'. [ 958.357484][T11747] loop4: detected capacity change from 0 to 1024 [ 958.871604][T11747] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 959.015274][T11747] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 959.023914][T11747] EXT4-fs (loop4): orphan cleanup on readonly fs [ 959.040717][T11747] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 959.052453][T11747] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 959.062539][T11747] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1168: Failed to acquire dquot type 0 [ 959.074730][T11747] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 959.085068][T11747] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 959.095184][T11747] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1168: Failed to acquire dquot type 0 [ 959.118044][T11747] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1168: Freeing blocks not in datazone - block = 0, count = 4096 [ 959.134662][T11747] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 959.144805][T11747] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 959.156044][T11747] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1168: Failed to acquire dquot type 0 [ 959.169789][T11747] EXT4-fs (loop4): 1 orphan inode deleted [ 959.177696][T11747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 959.430644][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.762442][T11753] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 961.337702][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 961.346813][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 961.356092][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 961.368647][T11771] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1174'. [ 963.800640][T11790] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 965.122900][T11794] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1178'. [ 969.584946][T11798] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 972.609601][T11826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 972.621260][T11826] fuse: Bad value for 'fd' [ 974.084478][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.093586][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.863243][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1194'. [ 976.939076][T11863] loop4: detected capacity change from 0 to 1024 [ 977.033247][T11863] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 977.435538][T11863] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 977.444143][T11863] EXT4-fs (loop4): orphan cleanup on readonly fs [ 977.471583][T11863] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 977.482947][T11863] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 977.493109][T11863] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1196: Failed to acquire dquot type 0 [ 977.523340][T11863] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 977.533541][T11863] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 977.543891][T11863] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1196: Failed to acquire dquot type 0 [ 977.560680][T11863] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1196: Freeing blocks not in datazone - block = 0, count = 4096 [ 977.582879][T11863] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 977.593035][T11863] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 977.603634][T11863] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1196: Failed to acquire dquot type 0 [ 977.615828][T11863] EXT4-fs (loop4): 1 orphan inode deleted [ 977.623479][T11863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 977.879940][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.084889][T11871] overlayfs: missing 'lowerdir' [ 979.163297][T11882] bridge0: port 5(ip6gretap0) entered blocking state [ 979.170667][T11882] bridge0: port 5(ip6gretap0) entered disabled state [ 979.188844][T11882] ip6gretap0: entered promiscuous mode [ 979.196917][T11882] bridge0: port 5(ip6gretap0) entered blocking state [ 979.203787][T11882] bridge0: port 5(ip6gretap0) entered forwarding state [ 981.060639][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 983.816485][T11924] loop4: detected capacity change from 0 to 512 [ 983.859751][T11924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 983.895841][T11924] System zones: 1-12 [ 983.925193][T11924] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.1211: missing EA_INODE flag [ 983.950817][T11924] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1211: error while reading EA inode 12 err=-117 [ 984.010368][T11924] EXT4-fs (loop4): 1 orphan inode deleted [ 984.036445][T11924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.490967][T11935] xt_hashlimit: size too large, truncated to 1048576 [ 985.866178][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.126849][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'. [ 986.958829][T11950] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1216'. [ 987.897265][T11957] Cannot find del_set index 4 as target [ 988.767091][T11961] overlayfs: conflicting options: nfs_export=on,index=off [ 988.993585][T11953] sctp: failed to load transform for md5: -2 [ 990.529897][T11976] overlayfs: missing 'lowerdir' [ 992.761158][T11994] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1227'. [ 993.415400][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.422233][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.652997][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1225'. [ 994.721388][T12007] loop4: detected capacity change from 0 to 1024 [ 995.354694][T12010] sctp: failed to load transform for md5: -2 [ 995.577112][T12007] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 995.669835][T12007] JBD2: no valid journal superblock found [ 995.699941][T12007] EXT4-fs (loop4): Could not load journal inode [ 999.054869][T12042] ceph: No mds server is up or the cluster is laggy [ 1003.951942][T12066] /dev/sg0: Can't lookup blockdev [ 1004.066476][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 1004.361542][T12095] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1009.175702][T12134] tipc: Started in network mode [ 1009.181455][T12134] tipc: Node identity ac141441, cluster identity 4711 [ 1009.190611][T12134] tipc: Enabled bearer , priority 10 [ 1010.634712][ T6122] tipc: Node number set to 2886997057 [ 1013.954774][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1272'. [ 1013.975505][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1270'. [ 1015.126158][T12181] team_slave_0 (unregistering): left allmulticast mode [ 1015.162337][T12181] team0: Port device team_slave_0 removed [ 1021.860784][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 1022.567372][T12233] loop4: detected capacity change from 0 to 1024 [ 1022.589975][T12233] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1022.603654][T12233] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1022.612258][T12233] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1022.623971][T12233] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1022.634168][T12233] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1022.645285][T12233] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1281: Failed to acquire dquot type 0 [ 1022.664652][T12233] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1022.674994][T12233] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1022.685241][T12233] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1281: Failed to acquire dquot type 0 [ 1022.784747][T12233] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1281: Freeing blocks not in datazone - block = 0, count = 4096 [ 1022.825583][T12233] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1022.838330][T12233] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1022.849960][T12233] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1281: Failed to acquire dquot type 0 [ 1022.865619][T12233] EXT4-fs (loop4): 1 orphan inode deleted [ 1022.878857][T12233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1022.918860][T12237] Cannot find del_set index 4 as target [ 1023.208845][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.209569][T12252] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1286'. [ 1024.235977][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 1024.292104][T12255] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1288'. [ 1024.418633][ T28] audit: type=1326 audit(1790767367.286:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12248 comm="syz.4.1285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x0 [ 1025.903853][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 1026.664801][T12273] loop4: detected capacity change from 0 to 1024 [ 1026.710304][T12273] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1026.723059][T12273] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1026.738207][T12273] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1026.748928][T12273] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1026.759409][T12273] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1026.769572][T12273] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1293: Failed to acquire dquot type 0 [ 1026.782077][T12273] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1026.792199][T12273] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1293: Failed to acquire dquot type 0 [ 1026.868977][T12273] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1293: Freeing blocks not in datazone - block = 0, count = 4096 [ 1026.883858][T12273] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1293: Failed to acquire dquot type 0 [ 1026.895784][T12273] EXT4-fs (loop4): 1 orphan inode deleted [ 1026.903507][T12273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1027.221761][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.364995][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1296'. [ 1030.695880][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1304'. [ 1031.253382][T12317] loop4: detected capacity change from 0 to 1024 [ 1031.738888][T12317] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1031.763683][T12317] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1031.773592][T12317] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1031.784573][T12317] __quota_error: 3 callbacks suppressed [ 1031.784590][T12317] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1031.800964][T12317] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1031.811065][T12317] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1304: Failed to acquire dquot type 0 [ 1031.822899][T12317] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1031.833087][T12317] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1031.843605][T12317] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1304: Failed to acquire dquot type 0 [ 1031.859227][T12317] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1304: Freeing blocks not in datazone - block = 0, count = 4096 [ 1031.877482][T12317] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1031.887561][T12317] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1031.897595][T12317] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1304: Failed to acquire dquot type 0 [ 1031.909339][T12317] EXT4-fs (loop4): 1 orphan inode deleted [ 1031.919340][T12317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1032.176258][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.937905][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1311'. [ 1035.350752][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1317'. [ 1036.503562][ T28] audit: type=1326 audit(1790767379.356:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 1036.757570][ T28] audit: type=1326 audit(1790767379.356:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 1036.844647][ T28] audit: type=1326 audit(1790767379.356:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 1036.891022][ T28] audit: type=1326 audit(1790767379.356:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 1036.942500][ T28] audit: type=1326 audit(1790767379.356:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 1036.977479][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 1037.614622][T12381] loop4: detected capacity change from 0 to 1024 [ 1038.633232][T12381] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1038.648349][T12381] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1038.656776][T12381] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1038.657247][ T28] audit: type=1326 audit(1790767379.356:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 1038.687274][T12381] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1038.697378][T12381] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1038.704962][ T28] audit: type=1326 audit(1790767379.406:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 1038.707683][T12381] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1322: Failed to acquire dquot type 0 [ 1038.754529][T12381] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1038.764728][T12381] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1038.774913][T12381] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1322: Failed to acquire dquot type 0 [ 1038.787116][ T28] audit: type=1326 audit(1790767379.586:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.6.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce19e159 code=0x7ffc0000 [ 1038.811545][T12381] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1322: Freeing blocks not in datazone - block = 0, count = 4096 [ 1038.832965][T12381] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1322: Failed to acquire dquot type 0 [ 1038.845005][T12381] EXT4-fs (loop4): 1 orphan inode deleted [ 1038.852827][T12381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1039.110164][ T6118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.678800][T12388] Illegal XDP return value 1175857204 on prog (id 80) dev syz_tun, expect packet loss! [ 1054.817777][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.824165][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.042234][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1365'. [ 1064.693364][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1064.693380][ T28] audit: type=1326 audit(1790767407.556:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a5f9e159 code=0x7ffc0000 [ 1064.832395][ T28] audit: type=1326 audit(1790767407.596:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a5f9e159 code=0x7ffc0000 [ 1064.856709][ T28] audit: type=1326 audit(1790767407.606:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f58a5f9e159 code=0x7ffc0000 [ 1064.914105][ T28] audit: type=1326 audit(1790767407.606:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a5f9e159 code=0x7ffc0000 [ 1064.997130][ T28] audit: type=1326 audit(1790767407.606:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a5f9e159 code=0x7ffc0000 [ 1065.033189][ T28] audit: type=1326 audit(1790767407.606:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f58a5f9e159 code=0x7ffc0000 [ 1065.058390][ T28] audit: type=1326 audit(1790767407.606:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a5f9e159 code=0x7ffc0000 [ 1065.115284][ T28] audit: type=1326 audit(1790767407.606:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a5f9e159 code=0x7ffc0000 [ 1065.182838][ T28] audit: type=1326 audit(1790767407.756:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58a5f5e98e code=0x7ffc0000 [ 1065.594770][ T28] audit: type=1326 audit(1790767407.766:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.1.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a5f9e159 code=0x7ffc0000 [ 1070.430289][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 1070.619505][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 1073.586786][T12644] Timeout policy `syz1' can only be used by L3 protocol number 17 [ 1074.169748][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 1074.169765][ T28] audit: type=1326 audit(1790767417.036:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 1074.377374][T12644] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1074.457125][ T28] audit: type=1326 audit(1790767417.066:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 1074.483971][ T28] audit: type=1326 audit(1790767417.126:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 1074.516635][ T28] audit: type=1326 audit(1790767417.126:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 1074.603710][ T28] audit: type=1326 audit(1790767417.126:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 1074.857038][ T28] audit: type=1326 audit(1790767417.126:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 1074.898177][ T28] audit: type=1326 audit(1790767417.126:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 1075.737953][ T28] audit: type=1326 audit(1790767417.166:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf29d5e98e code=0x7ffc0000 [ 1075.829655][ T28] audit: type=1326 audit(1790767417.166:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 1075.886315][ T28] audit: type=1326 audit(1790767417.166:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.4.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf29d9e159 code=0x7ffc0000 [ 1078.306341][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1395'. [ 1078.526109][T12683] lo speed is unknown, defaulting to 1000 [ 1082.050145][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 1082.138804][T12708] bridge0: left allmulticast mode [ 1082.530982][T12719] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1082.625115][T12719] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1084.133334][T12743] bridge_slave_0: left allmulticast mode [ 1084.157173][T12743] bridge_slave_0: left promiscuous mode [ 1084.163046][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.200854][T12743] bridge_slave_1: left allmulticast mode [ 1085.308076][T12743] bridge_slave_1: left promiscuous mode [ 1085.313959][T12743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.352970][T12743] bond0: (slave bond_slave_0): Releasing backup interface [ 1085.367994][T12743] bond_slave_0: left allmulticast mode [ 1086.475856][T12743] bond0: (slave bond_slave_1): Releasing backup interface [ 1086.549988][T12743] bond_slave_1: left allmulticast mode [ 1086.583816][T12743] team_slave_0: left allmulticast mode [ 1086.614885][T12761] siw: device registration error -23 [ 1086.652721][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 1086.667171][T12743] team0: Port device team_slave_0 removed [ 1086.928586][T12743] team_slave_1: left allmulticast mode [ 1086.941692][T12743] team0: Port device team_slave_1 removed [ 1086.966638][T12743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.974498][T12743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.012920][T12743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.020659][T12743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.041916][T12743] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1087.065582][T12743] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1087.081000][T12743] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1087.094830][T12743] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1087.140822][T12751] team0: Mode changed to "loadbalance" [ 1088.627929][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 1088.712077][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 1088.983951][T12772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.230158][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1418'. [ 1091.686071][T12817] MPI: mpi too large (113288 bits) [ 1091.702302][T12820] overlayfs: failed to clone upperpath [ 1091.710943][T12817] MPI: mpi too large (113288 bits) [ 1091.753661][T12820] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1423'. [ 1093.021287][T12830] udevd[12830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1093.061296][T12830] udevd[12830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1095.195868][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1431'. [ 1095.328984][ T6121] libceph: connect (1)[c::]:6789 error -101 [ 1095.335175][ T6121] libceph: mon0 (1)[c::]:6789 connect error [ 1095.517378][T12844] ceph: No mds server is up or the cluster is laggy [ 1095.626674][T12872] kAFS: unable to lookup cell 'Þ({^ú@' [ 1095.677513][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 1099.500925][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1444'. [ 1100.431603][T12907] sctp: [Deprecated]: syz.4.1445 (pid 12907) Use of int in max_burst socket option. [ 1100.431603][T12907] Use struct sctp_assoc_value instead [ 1100.548377][T12909] sctp: [Deprecated]: syz.4.1445 (pid 12909) Use of int in maxseg socket option. [ 1100.548377][T12909] Use struct sctp_assoc_value instead [ 1100.636804][ T5820] Process accounting resumed [ 1101.798181][T12914] netlink: 'syz.6.1447': attribute type 10 has an invalid length. [ 1101.951909][T12914] bridge0: port 3(dummy0) entered disabled state [ 1101.961030][T12914] dummy0: left allmulticast mode [ 1101.966056][T12914] dummy0: left promiscuous mode [ 1101.971608][T12914] bridge0: port 3(dummy0) entered disabled state [ 1101.984141][T12914] dummy0: entered allmulticast mode [ 1101.990493][T12914] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1103.743718][T12942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1455'. [ 1104.866569][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 1105.169310][T12948] netlink: 'syz.6.1457': attribute type 3 has an invalid length. [ 1110.323058][T13008] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1110.337197][T13013] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1475'. [ 1111.108458][T13019] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1478'. [ 1113.063370][T13049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1489'. [ 1116.247720][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.254555][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.860627][T13134] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1519'. [ 1123.943800][T13167] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1532'. [ 1124.785180][T13189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1542'. [ 1127.038801][T13215] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1551'. [ 1138.675046][T13363] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1606'. [ 1140.025648][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 1140.095659][T13398] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1619'. [ 1140.233314][T13403] netlink: 'syz.5.1621': attribute type 10 has an invalid length. [ 1140.265537][T13403] macvlan1: entered allmulticast mode [ 1140.290469][T13403] veth1_vlan: entered allmulticast mode [ 1140.304638][T13403] team0: Port device macvlan1 added [ 1140.464704][T13411] netlink: 'syz.5.1626': attribute type 10 has an invalid length. [ 1140.479538][T13411] nlmon0: left allmulticast mode [ 1140.491963][T13411] nlmon0: entered allmulticast mode [ 1140.502745][T13411] team0: Device nlmon0 is of different type [ 1141.776235][T13423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1631'. [ 1141.998856][T13431] netlink: 'syz.1.1635': attribute type 12 has an invalid length. [ 1142.370618][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1641'. [ 1143.228213][T13447] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1642'. [ 1143.571273][T13460] Timeout policy `syz1' can only be used by L3 protocol number 17 [ 1144.788085][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'. [ 1145.733226][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 1145.780519][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1657'. [ 1145.792206][T13485] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1657'. [ 1145.938609][T13483] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1655'. [ 1148.711962][T13502] No such timeout policy "syz1" [ 1149.553347][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 1151.691738][T13534] libceph: resolve '‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1151.806322][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1677'. [ 1153.021389][T13552] C: renamed from team_slave_0 [ 1153.042473][T13552] netlink: 'syz.5.1678': attribute type 2 has an invalid length. [ 1153.074385][T13552] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1678'. [ 1153.252056][T13552] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1154.365017][T13570] sctp: [Deprecated]: syz.6.1685 (pid 13570) Use of int in max_burst socket option. [ 1154.365017][T13570] Use struct sctp_assoc_value instead [ 1154.436233][T13570] sctp: [Deprecated]: syz.6.1685 (pid 13570) Use of int in maxseg socket option. [ 1154.436233][T13570] Use struct sctp_assoc_value instead [ 1154.848625][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 1157.010206][T13610] –: renamed from virt_wifi0 [ 1158.172858][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 1158.428154][T13634] xt_bpf: check failed: parse error [ 1161.041212][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1722'. [ 1163.266593][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1731'. [ 1163.468228][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 1163.532372][T13709] veth0_virt_wifi: entered promiscuous mode [ 1163.682751][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1737'. [ 1166.384690][T13738] bond1: option packets_per_slave: invalid value (18446744073709551489) [ 1166.465012][T13738] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1166.973641][T13738] bond1 (unregistering): Released all slaves [ 1169.263953][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1771'. [ 1171.066101][T13827] netlink: 'syz.5.1787': attribute type 1 has an invalid length. [ 1171.120488][T13829] X.509: signatureAlgorithm (15) differs from tbsCertificate.signature (16) [ 1171.393412][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 1174.110744][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 1175.735377][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1817'. [ 1175.908680][T13897] netlink: 'syz.4.1818': attribute type 21 has an invalid length. [ 1175.916583][T13897] IPv6: NLM_F_CREATE should be specified when creating new route [ 1176.895543][T13924] netlink: 'syz.1.1829': attribute type 13 has an invalid length. [ 1176.923121][T13924] gretap0: refused to change device tx_queue_len [ 1176.938392][T13924] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1177.454627][T13947] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1841'. [ 1177.675981][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1846'. [ 1177.697591][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.703983][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.737526][T13959] netlink: 'syz.6.1847': attribute type 1 has an invalid length. [ 1177.745404][T13959] netlink: 'syz.6.1847': attribute type 1 has an invalid length. [ 1179.461106][T14023] netlink: 'syz.4.1877': attribute type 5 has an invalid length. [ 1179.505715][T14023] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1179.516688][T14023] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1179.525945][T14023] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1179.764094][T14033] tipc: Can't bind to reserved service type 1 [ 1179.933865][T14038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 1180.983810][T14052] ip6gre1: entered promiscuous mode [ 1181.019781][T14052] ip6gre1: entered allmulticast mode [ 1181.037371][T14056] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1893'. [ 1181.317685][T14067] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1899'. [ 1181.519265][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1902'. [ 1182.926513][T14093] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1908'. [ 1182.960678][T14093] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1908'. [ 1183.260626][T14100] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1912'. [ 1183.474001][T14107] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1916'. [ 1183.526190][T14111] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.626551][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1919'. [ 1183.663349][T14116] ip6erspan0: entered allmulticast mode [ 1183.833996][T14125] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1924'. [ 1183.862608][T14125] caif0: left allmulticast mode [ 1183.872932][T14125] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1924'. [ 1183.905812][T14125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1184.797921][T14152] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1186.176631][T14185] __nla_validate_parse: 2 callbacks suppressed [ 1186.176650][T14185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1950'. [ 1186.609333][T14194] lo speed is unknown, defaulting to 1000 [ 1187.367176][T14208] (null): rxe_set_mtu: Set mtu to 1024 [ 1187.816486][T14208] infiniband syz0: set active [ 1187.825517][T14208] infiniband syz0: added bond_slave_1 [ 1187.949099][T14208] RDS/IB: syz0: added [ 1187.954953][T14208] smc: adding ib device syz0 with port count 1 [ 1188.007678][T14208] smc: ib device syz0 port 1 has pnetid [ 1189.355260][T14244] ip_tables: iptables: counters copy to user failed while replacing table [ 1190.860747][T14293] netlink: 'syz.5.1999': attribute type 29 has an invalid length. [ 1190.875231][T14293] netlink: 'syz.5.1999': attribute type 29 has an invalid length. [ 1190.887083][T14293] netlink: 'syz.5.1999': attribute type 29 has an invalid length. [ 1191.699596][T14300] ip_tables: iptables: counters copy to user failed while replacing table [ 1191.962868][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 1193.297725][T14344] bridge_slave_0: default FDB implementation only supports local addresses [ 1193.507529][T14350] ip_tables: iptables: counters copy to user failed while replacing table [ 1197.078170][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2055'. [ 1197.106999][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 1198.872553][T14469] [ 1198.874970][T14469] ====================================================== [ 1198.882023][T14469] WARNING: possible circular locking dependency detected [ 1198.889095][T14469] syzkaller #0 Not tainted [ 1198.893543][T14469] ------------------------------------------------------ [ 1198.900596][T14469] syz.4.2076/14469 is trying to acquire lock: [ 1198.906683][T14469] ffffffff976c1598 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x67/0x230 [ 1198.916853][T14469] [ 1198.916853][T14469] but task is already holding lock: [ 1198.924254][T14469] ffff888078848ab8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 1198.934683][T14469] [ 1198.934683][T14469] which lock already depends on the new lock. [ 1198.934683][T14469] [ 1198.945142][T14469] [ 1198.945142][T14469] the existing dependency chain (in reverse order) is: [ 1198.954198][T14469] [ 1198.954198][T14469] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1198.962508][T14469] __mutex_lock+0x135/0xc80 [ 1198.967588][T14469] nf_tables_dumpreset_obj+0x72/0xa0 [ 1198.973547][T14469] netlink_dump+0x738/0xec0 [ 1198.978654][T14469] __netlink_dump_start+0x57c/0x7a0 [ 1198.984434][T14469] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1198.990640][T14469] nf_tables_getobj_reset+0x1e1/0x630 [ 1198.996604][T14469] nfnetlink_rcv_msg+0x89c/0x1290 [ 1199.002296][T14469] netlink_rcv_skb+0x235/0x4c0 [ 1199.007640][T14469] nfnetlink_rcv+0x2c9/0x2490 [ 1199.012894][T14469] netlink_unicast+0x7b1/0x930 [ 1199.018228][T14469] netlink_sendmsg+0x8d0/0xbf0 [ 1199.023577][T14469] ____sys_sendmsg+0x61b/0x980 [ 1199.028931][T14469] ___sys_sendmsg+0x2a6/0x360 [ 1199.034174][T14469] __se_sys_sendmsg+0x1d0/0x2c0 [ 1199.039598][T14469] do_syscall_64+0x55/0xb0 [ 1199.044586][T14469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.051060][T14469] [ 1199.051060][T14469] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1199.059386][T14469] __mutex_lock+0x135/0xc80 [ 1199.064460][T14469] __netlink_dump_start+0xf4/0x7a0 [ 1199.070141][T14469] ip_set_dump+0x15c/0x1f0 [ 1199.075134][T14469] nfnetlink_rcv_msg+0xcaf/0x1290 [ 1199.080743][T14469] netlink_rcv_skb+0x235/0x4c0 [ 1199.086088][T14469] nfnetlink_rcv+0x2c9/0x2490 [ 1199.091337][T14469] netlink_unicast+0x7b1/0x930 [ 1199.096760][T14469] netlink_sendmsg+0x8d0/0xbf0 [ 1199.102098][T14469] ____sys_sendmsg+0x61b/0x980 [ 1199.107429][T14469] ___sys_sendmsg+0x2a6/0x360 [ 1199.112679][T14469] __se_sys_sendmsg+0x1d0/0x2c0 [ 1199.118146][T14469] do_syscall_64+0x55/0xb0 [ 1199.123143][T14469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.129609][T14469] [ 1199.129609][T14469] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1199.137490][T14469] __lock_acquire+0x37ef/0x7d80 [ 1199.142926][T14469] lock_acquire+0x19e/0x420 [ 1199.148032][T14469] __mutex_lock+0x135/0xc80 [ 1199.153104][T14469] ip_set_nfnl_get_byindex+0x67/0x230 [ 1199.159049][T14469] set_target_v1_checkentry+0x8c/0x4f0 [ 1199.165163][T14469] xt_check_target+0x4a1/0xbf0 [ 1199.170569][T14469] nft_target_init+0x694/0xa00 [ 1199.175986][T14469] nf_tables_newrule+0x176e/0x2870 [ 1199.181666][T14469] nfnetlink_rcv+0x1133/0x2490 [ 1199.187029][T14469] netlink_unicast+0x7b1/0x930 [ 1199.192366][T14469] netlink_sendmsg+0x8d0/0xbf0 [ 1199.197693][T14469] ____sys_sendmsg+0x61b/0x980 [ 1199.203031][T14469] ___sys_sendmsg+0x2a6/0x360 [ 1199.208309][T14469] __se_sys_sendmsg+0x1d0/0x2c0 [ 1199.213731][T14469] do_syscall_64+0x55/0xb0 [ 1199.218728][T14469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.225198][T14469] [ 1199.225198][T14469] other info that might help us debug this: [ 1199.225198][T14469] [ 1199.235471][T14469] Chain exists of: [ 1199.235471][T14469] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1199.235471][T14469] [ 1199.249931][T14469] Possible unsafe locking scenario: [ 1199.249931][T14469] [ 1199.257403][T14469] CPU0 CPU1 [ 1199.262781][T14469] ---- ---- [ 1199.268158][T14469] lock(&nft_net->commit_mutex); [ 1199.273201][T14469] lock(nlk_cb_mutex-NETFILTER); [ 1199.280781][T14469] lock(&nft_net->commit_mutex); [ 1199.288346][T14469] lock(nfnl_subsys_ipset); [ 1199.292961][T14469] [ 1199.292961][T14469] *** DEADLOCK *** [ 1199.292961][T14469] [ 1199.301115][T14469] 1 lock held by syz.4.2076/14469: [ 1199.306239][T14469] #0: ffff888078848ab8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 1199.316995][T14469] [ 1199.316995][T14469] stack backtrace: [ 1199.322894][T14469] CPU: 1 PID: 14469 Comm: syz.4.2076 Not tainted syzkaller #0 [ 1199.330372][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1199.340464][T14469] Call Trace: [ 1199.343759][T14469] [ 1199.346712][T14469] dump_stack_lvl+0x18c/0x250 [ 1199.351426][T14469] ? load_image+0x420/0x420 [ 1199.355978][T14469] ? show_regs_print_info+0x20/0x20 [ 1199.361212][T14469] ? print_circular_bug+0x12b/0x1a0 [ 1199.366438][T14469] check_noncircular+0x2fc/0x400 [ 1199.371404][T14469] ? print_deadlock_bug+0x5d0/0x5d0 [ 1199.376639][T14469] ? lockdep_lock+0xf5/0x230 [ 1199.381277][T14469] ? _find_first_zero_bit+0xd6/0x100 [ 1199.386599][T14469] __lock_acquire+0x37ef/0x7d80 [ 1199.391496][T14469] ? __lock_acquire+0x1262/0x7d80 [ 1199.396559][T14469] ? verify_lock_unused+0x140/0x140 [ 1199.401800][T14469] lock_acquire+0x19e/0x420 [ 1199.406337][T14469] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1199.411917][T14469] ? __might_sleep+0xe0/0xe0 [ 1199.416544][T14469] ? read_lock_is_recursive+0x20/0x20 [ 1199.421944][T14469] ? is_bpf_text_address+0x26/0x2a0 [ 1199.427180][T14469] __mutex_lock+0x135/0xc80 [ 1199.431738][T14469] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1199.437311][T14469] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1199.442884][T14469] ? mutex_lock_nested+0x20/0x20 [ 1199.447846][T14469] ? ip_set_pernet+0x23/0x230 [ 1199.452549][T14469] ip_set_nfnl_get_byindex+0x67/0x230 [ 1199.457955][T14469] set_target_v1_checkentry+0x8c/0x4f0 [ 1199.463461][T14469] ? set_target_v1+0x3f0/0x3f0 [ 1199.468268][T14469] xt_check_target+0x4a1/0xbf0 [ 1199.473050][T14469] ? __flush_work+0x120/0xac0 [ 1199.477756][T14469] ? xt_find_jump_offset+0xe0/0xe0 [ 1199.482900][T14469] ? stack_trace_snprint+0xf0/0xf0 [ 1199.488048][T14469] ? __stack_depot_save+0x1f/0x660 [ 1199.493187][T14469] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1199.499196][T14469] ? nft_target_init+0x1ea/0xa00 [ 1199.504167][T14469] nft_target_init+0x694/0xa00 [ 1199.508963][T14469] ? nfnetlink_rcv+0x1133/0x2490 [ 1199.513925][T14469] ? netlink_unicast+0x7b1/0x930 [ 1199.518900][T14469] ? nft_target_release_ops+0x70/0x70 [ 1199.524322][T14469] ? nf_tables_newrule+0x1515/0x2870 [ 1199.529646][T14469] ? rcu_is_watching+0x15/0xb0 [ 1199.534452][T14469] ? nf_tables_newrule+0x1515/0x2870 [ 1199.539908][T14469] ? __kmalloc+0xe5/0x240 [ 1199.544273][T14469] nf_tables_newrule+0x176e/0x2870 [ 1199.549416][T14469] ? nf_tables_delchain+0x1050/0x1050 [ 1199.554807][T14469] ? __lock_acquire+0x7d80/0x7d80 [ 1199.559854][T14469] ? mutex_unlock+0x10/0x10 [ 1199.564380][T14469] ? __nla_parse+0x40/0x50 [ 1199.568840][T14469] nfnetlink_rcv+0x1133/0x2490 [ 1199.573640][T14469] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1199.579234][T14469] ? __lock_acquire+0x7d80/0x7d80 [ 1199.584291][T14469] ? netlink_deliver_tap+0x2e/0x1b0 [ 1199.589529][T14469] netlink_unicast+0x7b1/0x930 [ 1199.594328][T14469] netlink_sendmsg+0x8d0/0xbf0 [ 1199.599124][T14469] ? netlink_getsockopt+0x590/0x590 [ 1199.604350][T14469] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1199.609941][T14469] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1199.615258][T14469] ? security_socket_sendmsg+0x80/0xa0 [ 1199.620747][T14469] ? netlink_getsockopt+0x590/0x590 [ 1199.625975][T14469] ____sys_sendmsg+0x61b/0x980 [ 1199.630769][T14469] ? __asan_memset+0x22/0x40 [ 1199.635396][T14469] ? __sys_sendmsg_sock+0x30/0x30 [ 1199.640446][T14469] ? __import_iovec+0x5f2/0x850 [ 1199.645330][T14469] ? import_iovec+0x73/0xa0 [ 1199.649869][T14469] ___sys_sendmsg+0x2a6/0x360 [ 1199.654578][T14469] ? __sys_sendmsg+0x2b0/0x2b0 [ 1199.659405][T14469] __se_sys_sendmsg+0x1d0/0x2c0 [ 1199.664306][T14469] ? __x64_sys_sendmsg+0x80/0x80 [ 1199.669275][T14469] ? lockdep_hardirqs_on+0x98/0x150 [ 1199.674571][T14469] do_syscall_64+0x55/0xb0 [ 1199.679014][T14469] ? clear_bhb_loop+0x40/0x90 [ 1199.683739][T14469] ? clear_bhb_loop+0x40/0x90 [ 1199.688449][T14469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.694372][T14469] RIP: 0033:0x7faf29d9e159 [ 1199.698827][T14469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.718466][T14469] RSP: 002b:00007faf2acc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1199.726906][T14469] RAX: ffffffffffffffda RBX: 00007faf2a025fa0 RCX: 00007faf29d9e159 [ 1199.734913][T14469] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 1199.742946][T14469] RBP: 00007faf29e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1199.750945][T14469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.758939][T14469] R13: 00007faf2a026038 R14: 00007faf2a025fa0 R15: 00007ffe13943128 [ 1199.766952][T14469]