last executing test programs: 1m32.938339927s ago: executing program 2 (id=565): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10) 1m32.704898113s ago: executing program 2 (id=568): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 1m32.566615036s ago: executing program 2 (id=571): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x81, 0x7fffffff, 0x7, 0x4}, 0x7, 0xd}, [{0x4, 0xc, 0x1, 0x0, 0x8, 0xa517}, {0x9, 0x6283, 0x4, 0x7ff, 0x6, 0x5}, {0x7fff, 0x9, 0x1, 0x7, 0x680, 0x80}, {0x6, 0xe62, 0x0, 0x10, 0x7, 0x7c}, {0x1, 0x0, 0x8, 0x2, 0x0, 0x487}, {0x6235, 0x4, 0x6408, 0x7, 0x3, 0x7}, {0xa10, 0x6, 0x7, 0x7, 0x3, 0xefe3}, {0x9, 0x3, 0x400, 0xff, 0x8, 0xd}, {0x5, 0x6fb, 0x6, 0xc, 0x7, 0x8}, {0x0, 0x8001, 0x1, 0x101, 0x7}, {0x6, 0x1, 0xfa5b, 0x9, 0x78d7, 0x4}, {0x6, 0x7, 0x6, 0x6, 0x1, 0x7}, {0x8, 0x4, 0xfffffffa, 0x401, 0xff}, {0x7, 0x1, 0xbf5, 0xd42, 0xfbe, 0x10000}, {0xffffffff, 0x1, 0xe, 0x5, 0x7, 0x2}, {0xe8d, 0x9, 0x3, 0x2, 0x2, 0x5}, {0x7fa, 0x2a, 0x1, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x9, 0x9}, {0x81, 0x2, 0x5547, 0x7, 0x4, 0x3}, {0x2000005, 0x4, 0x65b97795, 0x9, 0x4, 0x4d}, {0xaea, 0x83b2, 0x7, 0xa, 0x3, 0x1}, {0xff, 0x3ff, 0x0, 0x6, 0x100, 0xc0000000}, {0x3ff, 0x9, 0xf, 0x1000}, {0x40, 0x7e23, 0x1, 0x10000, 0x9, 0x8}, {0xffffffff, 0x17, 0x9, 0x7fffffff, 0x59, 0x80000001}, {0x8, 0x8, 0x0, 0x9, 0x2, 0x9}, {0x6, 0x80000001, 0x5, 0x80000001, 0x6, 0x1}, {0x3, 0x1, 0x9, 0x8ab6, 0x7, 0xc}, {0x80, 0x9, 0x2, 0x5, 0x9, 0x1}, {0x83ae, 0xf, 0x5, 0x2, 0xffff, 0xffffffac}, {0x31, 0x5, 0x80000000, 0x80, 0xc3}, {0x7, 0x5, 0x8000, 0x7, 0x8, 0x3}, {0x1, 0xfffffff7, 0x8, 0x5, 0xffffff90, 0x101}, {0x8, 0x3, 0x4, 0x2, 0x4, 0x1ff}, {0x6, 0xd, 0x2, 0x3f, 0xfff, 0x2}, {0x8001, 0x2, 0x0, 0x5fe2, 0xb80, 0xebc2}, {0x6, 0x80, 0xb, 0x59, 0x8, 0x5}, {0x91, 0x0, 0xba, 0x8080, 0xe, 0xfffff4e2}, {0x0, 0x38e3, 0x7, 0xffffffff, 0xdf, 0x79}, {0x5, 0x80f, 0x3, 0x6, 0x80e, 0x4}, {0x200, 0x6, 0x5, 0xd3, 0x6, 0x7}, {0x3, 0x8, 0xf, 0x8, 0x5, 0xfffffff7}, {0x9, 0x0, 0x9, 0x80, 0x9, 0x3}, {0x1, 0x81, 0x401, 0x98b, 0x2, 0xe}, {0x1, 0x8, 0x3ff, 0x2, 0x200, 0x7}, {0x3, 0x5, 0xc, 0xe9f, 0x3, 0x1ff}, {0x6, 0x890, 0x8, 0x1ff, 0xff, 0xf579}, {0x1, 0x3, 0x6, 0x80, 0x0, 0x7ff}, {0x5, 0x7, 0x1, 0x1000, 0x4642, 0x10000}, {0x80, 0x8, 0xfffffff7, 0xfff, 0x23, 0x5ee6}, {0x7f, 0x4, 0x24, 0x9, 0x1, 0x1}, {0xbc, 0x5, 0x1, 0x1ff, 0x3, 0x5291}, {0xc, 0x4, 0x4, 0x2, 0x4, 0x2}, {0x9, 0x8, 0x3, 0x0, 0x0, 0xfffffff7}, {0x8, 0x4, 0x9, 0x7, 0x8, 0x3000000}, {0x2, 0x9, 0x3ff, 0x7f, 0xffffffff, 0x4772}, {0xa, 0x5, 0x56e, 0x7, 0x60, 0x8}, {0x1, 0x0, 0x4, 0x3, 0xb56, 0x3}, {0xe, 0x3, 0xfffffff7, 0x8, 0xfffffffc, 0x401}, {0x29, 0x1, 0x3, 0x7, 0x9, 0x69}, {0xe, 0x77, 0x779, 0x2, 0x4, 0x81}, {0x6, 0x6, 0xbe, 0x1, 0x8, 0x3}, {0x9, 0x6, 0x9, 0x3, 0x10001, 0x9}, {0x5cc, 0x8000, 0x3, 0x3b55, 0x3, 0x4}, {0x9, 0x1, 0x0, 0x2, 0x4, 0x9}, {0x9, 0x4000, 0x3, 0x8fd, 0x10001, 0x2}, {0xfe, 0x4, 0x3, 0x1, 0xdd, 0x2}, {0x7, 0x7, 0x7fff, 0x8001, 0xfffffffd, 0x4}, {0xa95, 0xd, 0x1, 0x7, 0x10000, 0x3}, {0x8702, 0x81, 0x2, 0x400, 0x0, 0x5}, {0x2, 0x7f, 0x3ff, 0x2, 0x9262, 0x4}, {0xd255, 0x0, 0x1, 0x4, 0x1, 0xf}, {0x0, 0x3, 0x8, 0xffff, 0xf161, 0x2}, {0x7f, 0xd82, 0x6, 0x7, 0x80000001}, {0x1, 0x7, 0x9, 0x4, 0x10000, 0x7}, {0x65, 0x6, 0x4, 0x3, 0x4e7, 0xfffff952}, {0x1, 0x2b3, 0xfd, 0x10001, 0x5, 0x401}, {0x6, 0x600, 0xb9c, 0xf8b, 0x7}, {0x1, 0x3, 0x7, 0x892a4e08, 0x8b4, 0x5}, {0xffffffff, 0xfffffff8, 0x4be, 0x15, 0x80000001, 0xa}, {0x6, 0x37fc, 0x4, 0x3ff, 0x5, 0x5}, {0x5, 0x8, 0x6, 0x7fff, 0xfffffffc, 0x10}, {0x7, 0x8, 0x728, 0x3, 0x2, 0xb}, {0xfffffff7, 0x2, 0x7, 0x33a, 0x4c, 0xfc000000}, {0x3720, 0xffff0000, 0x4, 0x100, 0x7, 0x80000000}, {0xc, 0x7f, 0x0, 0x222d, 0x4, 0xa7fc}, {0x4, 0xe4bf, 0x6, 0x9, 0x2}, {0x2, 0x3, 0x6, 0x6, 0x6, 0xd}, {0xffffffeb, 0x7920, 0x4, 0x7, 0x1, 0x3}, {0xf05, 0x1, 0x1, 0x9, 0x4, 0x1}, {0x2, 0x5, 0x8000, 0xffffffff, 0xfffffff0, 0x1}, {0x3, 0x2, 0x1, 0x5, 0x7, 0x1}, {0xfffffffc, 0x5, 0x0, 0x5, 0x6, 0x6}, {0x2, 0x65, 0xf4ea, 0x7fffffff, 0x8, 0x4}, {0x8001, 0x7, 0x9, 0xfff, 0x6, 0x7f}, {0xb5b5, 0xffffffff, 0x40, 0x2, 0xfffff535, 0x9}, {0xf79, 0x0, 0x40, 0x0, 0xffff, 0x200}, {0x278424d5, 0xffffffff, 0x5, 0x7, 0x3f3b5b77, 0x9}, {0x5, 0xb, 0x1, 0x7, 0x0, 0x2}, {0x1, 0x101, 0x7f, 0x0, 0xc81, 0x3}, {0x10000, 0x9d3, 0x7, 0x6, 0x3, 0xbd}, {0x9, 0x7, 0xb33e, 0xa, 0x6, 0x6}, {0xafd6, 0x19a0, 0x2, 0xdaa, 0x401, 0x8}, {0x2, 0x9, 0x8, 0x200, 0x3, 0xa5a}, {0x5, 0x11, 0x6, 0x1, 0x4, 0xfffffff9}, {0x81, 0x4, 0x4, 0xffffb72c, 0x1, 0x2}, {0x1, 0xffff, 0xd, 0xd, 0x9, 0x5}, {0x240, 0xd3db, 0xffff8000, 0x409, 0x80000001, 0x401}, {0x8, 0x2, 0x4, 0x7ff, 0x754200, 0x2}, {0x7, 0x8, 0x2, 0x0, 0x5, 0x10001}, {0x7b7, 0x5, 0xffff, 0x0, 0x10001, 0x9}, {0x5, 0x4, 0x9, 0x10, 0x8e, 0x8e}, {0x16, 0x4, 0x4, 0x2, 0x2, 0x9}, {0x7, 0x4, 0x8, 0x10001, 0x8000, 0x1}, {0x1d62, 0x4, 0x9, 0xf3a, 0x7fffffff, 0x9ad}, {0x7, 0xe4, 0x6, 0x9e, 0x7, 0xf059}, {0x3, 0x6, 0x8, 0x1400000, 0xed9, 0x6}, {0xfffffffb, 0x6, 0x10000, 0x7, 0x0, 0x6}, {0xe06, 0x8, 0x3, 0x7, 0x10001, 0x3}, {0x101, 0x8, 0x101, 0x30, 0x4, 0x6}, {0x2, 0x7fff, 0x2d, 0x0, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x1, 0x80, 0xc}, {0x0, 0x6, 0x4, 0xad, 0x40, 0x6}, {0x1000, 0x4, 0x1, 0x6, 0x4}, {0xe38, 0x5, 0x5, 0x3, 0x3, 0x4}, {0x1, 0xff, 0x6, 0x41fb, 0x200, 0x200}, {0x6, 0x55460a17, 0x54, 0x9, 0x6, 0x5}, {0x401, 0x10, 0x4, 0x74c8bacd, 0x5, 0x6}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x3}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x5}, {0x1, 0x83b0069cb76b49f3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0xd779dfac818b8296, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m31.718335357s ago: executing program 2 (id=573): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/218, 0xda}], 0x1, 0x0) 1m31.402877895s ago: executing program 2 (id=577): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) r1 = dup(r0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x90000009}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7) 1m31.138733781s ago: executing program 2 (id=580): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x931766f6319eed40) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x8}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000003c0)={[{@commit={'commit', 0x3d, 0x4}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}, {@quota}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M1Pe+86bt33z3m4D6Ftj2T9JxPqIuBgRoxFRaT5hLH+5duVs7Z8rZ2tJ1Otv/Z3E/RFx9crZWvFfNLbMunxHvV7k17Qo9/y7EdXZ2ZmTRX5i7tgHE6dOn3n2yLHq4ZnDM8enDhzYu2f70P6pfR2JM4vr6taPT2zb8uo7F16vHbzw3q/fZ/VdXxwv4+iksfzqtvREpwvrsg0L0kmlixVhRbJ2Gyy2izEaAzFy/dhovPJZVysH3G6VVr+fC+fqwP9YNlAH+lH5iz57/i23OzTu6AmXX8wnPLK4rxVbfqQSaXHOYNPzbScNR8TBc/9+k21xm+YhAAAW+jEb/zzTavyXxgMLzrunWEPZGBH3RsSmiLgvIjZHNNaBsnMfjIiHVlh+8wrJjeOf9NKibH1ghSUsLRv/PV+sbS0e/5Wjv9g4UOQ2NOIfTA4dmZ3ZXVyTXTG4JstPLvqRxX56+Y+vmvd9WUyzjy0Y/2VbVv7iCNNLzRN009W56uojz13+NGJrpVX8yfV1wCQitkTE1lss48hT321rd6xV/OVY+KY6sM5U/zbiybz9z0VT/KWk7frk5HP7p/ZNDMfszO6J8q640W+/n3+zXfmrir8DsvZf2/L+z+PPnhGT4YhTp88cbazXnrqFQv78vJa0ObT5pvHfeP/XdkYMJW830kPlWcXrUPJa9jJS7v+oOjd3cmr+Z8t843Uyj3/Xjvn4qzHf/zflj2eNK/FwRGQ38faIeCQiHi3a7rGIeDwidiwR/i8v7Xy/3bH27b/ErHwHZfFPL9H+2Vtelppv/5UnBo7+/EO78uvLav+9jdSuYs9y3v+WW8HVXDsAAAC4W6SNz8An6fj1dJqOj+ef4d8ca9NKRDx96MSHx6fzz8pvjMG0nOkaXTAfOlnMDZf5qab8nmLe+OuBkUZ+vHZidrrbwUOfW9em/2f+6uxSC9CLfF8L+pf+D/1L/4f+pf9D/3qh2xUAumOo9e5P7nQ9gK5Y+fh/+LbUA7jzPP9D/9L/oX/p/9CX2n43Pl3VV/7v1kSlN6rRMjHSG9UoE5H2RDU6l3jji7xL9Ep9ykRl2X/M4hYTa1oe6vY7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8FwAA//99Idom") bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m15.752788139s ago: executing program 32 (id=580): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x931766f6319eed40) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x8}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000003c0)={[{@commit={'commit', 0x3d, 0x4}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}, {@quota}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.830794714s ago: executing program 3 (id=991): mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "862f40d9a538aaf2", "31ef1b1703a3cd403e6a762682588ba97b0e11f88e799997fc5bf38c4bec128d", "a0198468", "525170a77bb202e5"}, 0x38) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) accept4(r0, 0x0, 0x0, 0x80800) 7.643013683s ago: executing program 3 (id=1004): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x81, 0x7fffffff, 0x7, 0x4}, 0x7, 0xd}, [{0x4, 0xc, 0x1, 0x0, 0x8, 0xa517}, {0x9, 0x6283, 0x4, 0x7ff, 0x6, 0x5}, {0x7fff, 0x9, 0x1, 0x7, 0x680, 0x80}, {0x6, 0xe62, 0x0, 0x10, 0x7, 0x7c}, {0x1, 0x0, 0x8, 0x2, 0x0, 0x487}, {0x6235, 0x4, 0x6408, 0x7, 0x3, 0x7}, {0xa10, 0x6, 0x7, 0x7, 0x3, 0xefe3}, {0x9, 0x3, 0x400, 0xff, 0x8, 0xd}, {0x5, 0x6fb, 0x6, 0xc, 0x7, 0x8}, {0x0, 0x8001, 0x1, 0x101, 0x7}, {0x6, 0x1, 0xfa5b, 0x9, 0x78d7, 0x4}, {0x6, 0x7, 0x6, 0x6, 0x1, 0x7}, {0x8, 0x4, 0xfffffffa, 0x401, 0xff}, {0x7, 0x1, 0xbf5, 0xd42, 0xfbe, 0x10000}, {0xffffffff, 0x1, 0xe, 0x5, 0x7, 0x2}, {0xe8d, 0x9, 0x3, 0x2, 0x2, 0x5}, {0x7fa, 0x2a, 0x1, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x9, 0x9}, {0x81, 0x2, 0x5547, 0x7, 0x4, 0x3}, {0x2000005, 0x4, 0x65b97795, 0x9, 0x4, 0x4d}, {0xaea, 0x83b2, 0x7, 0xa, 0x3, 0x1}, {0xff, 0x3ff, 0x0, 0x6, 0x100, 0xc0000000}, {0x3ff, 0x9, 0xf, 0x1000}, {0x40, 0x7e23, 0x1, 0x10000, 0x9, 0x8}, {0xffffffff, 0x17, 0x9, 0x7fffffff, 0x59, 0x80000001}, {0x8, 0x8, 0x0, 0x9, 0x2, 0x9}, {0x6, 0x80000001, 0x5, 0x80000001, 0x6, 0x1}, {0x3, 0x1, 0x9, 0x8ab6, 0x7, 0xc}, {0x80, 0x9, 0x2, 0x5, 0x9, 0x1}, {0x83ae, 0xf, 0x5, 0x2, 0xffff, 0xffffffac}, {0x31, 0x5, 0x80000000, 0x80, 0xc3}, {0x7, 0x5, 0x8000, 0x7, 0x8, 0x3}, {0x1, 0xfffffff7, 0x8, 0x5, 0xffffff90, 0x101}, {0x8, 0x3, 0x4, 0x2, 0x4, 0x1ff}, {0x6, 0xd, 0x2, 0x3f, 0xfff, 0x2}, {0x8001, 0x2, 0x0, 0x5fe2, 0xb80, 0xebc2}, {0x6, 0x80, 0xb, 0x59, 0x8, 0x5}, {0x91, 0x0, 0xba, 0x8080, 0xe, 0xfffff4e2}, {0x0, 0x38e3, 0x7, 0xffffffff, 0xdf, 0x79}, {0x5, 0x80f, 0x3, 0x6, 0x80e, 0x4}, {0x200, 0x6, 0x5, 0xd3, 0x6, 0x7}, {0x3, 0x8, 0xf, 0x8, 0x5, 0xfffffff7}, {0x9, 0x0, 0x9, 0x80, 0x9, 0x3}, {0x1, 0x81, 0x401, 0x98b, 0x2, 0xe}, {0x1, 0x8, 0x3ff, 0x2, 0x200, 0x7}, {0x3, 0x5, 0xc, 0xe9f, 0x3, 0x1ff}, {0x6, 0x890, 0x8, 0x1ff, 0xff, 0xf579}, {0x1, 0x3, 0x6, 0x80, 0x0, 0x7ff}, {0x5, 0x7, 0x1, 0x1000, 0x4642, 0x10000}, {0x80, 0x8, 0xfffffff7, 0xfff, 0x23, 0x5ee6}, {0x7f, 0x4, 0x24, 0x9, 0x1, 0x1}, {0xbc, 0x5, 0x1, 0x1ff, 0x3, 0x5291}, {0xc, 0x4, 0x4, 0x2, 0x4, 0x2}, {0x9, 0x8, 0x3, 0x0, 0x0, 0xfffffff7}, {0x8, 0x4, 0x9, 0x7, 0x8, 0x3000000}, {0x2, 0x9, 0x3ff, 0x7f, 0xffffffff, 0x4772}, {0xa, 0x5, 0x56e, 0x7, 0x60, 0x8}, {0x1, 0x0, 0x4, 0x3, 0xb56, 0x3}, {0xe, 0x3, 0xfffffff7, 0x8, 0xfffffffc, 0x401}, {0x29, 0x1, 0x3, 0x7, 0x9, 0x69}, {0xe, 0x77, 0x779, 0x2, 0x4, 0x81}, {0x6, 0x6, 0xbe, 0x1, 0x8, 0x3}, {0x9, 0x6, 0x9, 0x3, 0x10001, 0x9}, {0x5cc, 0x8000, 0x3, 0x3b55, 0x3, 0x4}, {0x9, 0x1, 0x0, 0x2, 0x4, 0x9}, {0x9, 0x4000, 0x3, 0x8fd, 0x10001, 0x2}, {0xfe, 0x4, 0x3, 0x1, 0xdd, 0x2}, {0x7, 0x7, 0x7fff, 0x8001, 0xfffffffd, 0x4}, {0xa95, 0xd, 0x1, 0x7, 0x10000, 0x3}, {0x8702, 0x81, 0x2, 0x400, 0x0, 0x5}, {0x2, 0x7f, 0x3ff, 0x2, 0x9262, 0x4}, {0xd255, 0x0, 0x1, 0x4, 0x1, 0xf}, {0x0, 0x3, 0x8, 0xffff, 0xf161, 0x2}, {0x7f, 0xd82, 0x6, 0x7, 0x80000001}, {0x1, 0x7, 0x9, 0x4, 0x10000, 0x7}, {0x65, 0x6, 0x4, 0x3, 0x4e7, 0xfffff952}, {0x1, 0x2b3, 0xfd, 0x10001, 0x5, 0x401}, {0x6, 0x600, 0xb9c, 0xf8b, 0x7}, {0x1, 0x3, 0x7, 0x892a4e08, 0x8b4, 0x5}, {0xffffffff, 0xfffffff8, 0x4be, 0x15, 0x80000001, 0xa}, {0x6, 0x37fc, 0x4, 0x3ff, 0x5, 0x5}, {0x5, 0x8, 0x6, 0x7fff, 0xfffffffc, 0x10}, {0x7, 0x8, 0x728, 0x3, 0x2, 0xb}, {0xfffffff7, 0x2, 0x7, 0x33a, 0x4c, 0xfc000000}, {0x3720, 0xffff0000, 0x4, 0x100, 0x7, 0x80000000}, {0xc, 0x7f, 0x0, 0x222d, 0x4, 0xa7fc}, {0x4, 0xe4bf, 0x6, 0x9, 0x2}, {0x2, 0x3, 0x6, 0x6, 0x6, 0xd}, {0xffffffeb, 0x7920, 0x4, 0x7, 0x1, 0x3}, {0xf05, 0x1, 0x1, 0x9, 0x4, 0x1}, {0x2, 0x5, 0x8000, 0xffffffff, 0xfffffff0, 0x1}, {0x3, 0x2, 0x1, 0x5, 0x7, 0x1}, {0xfffffffc, 0x5, 0x0, 0x5, 0x6, 0x6}, {0x2, 0x65, 0xf4ea, 0x7fffffff, 0x8, 0x4}, {0x8001, 0x7, 0x9, 0xfff, 0x6, 0x7f}, {0xb5b5, 0xffffffff, 0x40, 0x2, 0xfffff535, 0x9}, {0xf79, 0x0, 0x40, 0x0, 0xffff, 0x200}, {0x278424d5, 0xffffffff, 0x5, 0x7, 0x3f3b5b77, 0x9}, {0x5, 0xb, 0x1, 0x7, 0x0, 0x2}, {0x1, 0x101, 0x7f, 0x0, 0xc81, 0x3}, {0x10000, 0x9d3, 0x7, 0x6, 0x3, 0xbd}, {0x9, 0x7, 0xb33e, 0xa, 0x6, 0x6}, {0xafd6, 0x19a0, 0x2, 0xdaa, 0x401, 0x8}, {0x2, 0x9, 0x8, 0x200, 0x3, 0xa5a}, {0x5, 0x11, 0x6, 0x1, 0x4, 0xfffffff9}, {0x81, 0x4, 0x4, 0xffffb72c, 0x1, 0x2}, {0x1, 0xffff, 0xd, 0xd, 0x9, 0x5}, {0x240, 0xd3db, 0xffff8000, 0x409, 0x80000001, 0x401}, {0x8, 0x2, 0x4, 0x7ff, 0x754200, 0x2}, {0x7, 0x8, 0x2, 0x0, 0x5, 0x10001}, {0x7b7, 0x5, 0xffff, 0x0, 0x10001, 0x9}, {0x5, 0x4, 0x9, 0x10, 0x8e, 0x8e}, {0x16, 0x4, 0x4, 0x2, 0x2, 0x9}, {0x7, 0x4, 0x8, 0x10001, 0x8000, 0x1}, {0x1d62, 0x4, 0x9, 0xf3a, 0x7fffffff, 0x9ad}, {0x7, 0xe4, 0x6, 0x9e, 0x7, 0xf059}, {0x3, 0x6, 0x8, 0x1400000, 0xed9, 0x6}, {0xfffffffb, 0x6, 0x10000, 0x7, 0x0, 0x6}, {0xe06, 0x8, 0x3, 0x7, 0x10001, 0x3}, {0x101, 0x8, 0x101, 0x30, 0x4, 0x6}, {0x2, 0x7fff, 0x2d, 0x0, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x1, 0x80, 0xc}, {0x0, 0x6, 0x4, 0xad, 0x40, 0x6}, {0x1000, 0x4, 0x1, 0x6, 0x4}, {0xe38, 0x5, 0x5, 0x3, 0x3, 0x4}, {0x1, 0xff, 0x6, 0x41fb, 0x200, 0x200}, {0x6, 0x55460a17, 0x54, 0x9, 0x6, 0x5}, {0x401, 0x10, 0x4, 0x74c8bacd, 0x5, 0x6}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x3}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x5}, {0x1, 0x83b0069cb76b49f3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0xd779dfac818b8296, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.616058743s ago: executing program 0 (id=1005): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0xcc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4002, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 7.36931564s ago: executing program 1 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000819}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffb) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) 7.35915321s ago: executing program 3 (id=999): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknod(&(0x7f0000000240)='./file0\x00', 0x40, 0xffff) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config\x00', 0x130) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x48000, 0x142) openat(r1, &(0x7f0000000440)='./config/usb_gadget/g1\x00', 0x248881, 0x1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800dd8d26bd7000fcdbdf2502dc4c41f90000060022002008000f00fe070000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x400004d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private=0xa010101}, 0xa2, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x83}) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='m', 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000029c0)=""/102397, 0x18ffd) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x4000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a0509070000002cbd7000fddbdf2505001a00fe80000000000000000000000000000b0000000000000000000000000000002800008a"], 0x38}}, 0x40004) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x80}, &(0x7f00000000c0)=0x8) 4.48675685s ago: executing program 1 (id=1003): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syncfs(r0) 4.263827036s ago: executing program 0 (id=1008): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000080) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r1 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000609000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000) lseek(0xffffffffffffffff, 0x8000000000000002, 0x0) socket(0x5, 0x4, 0x18) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 4.262610566s ago: executing program 3 (id=1009): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x4000000000007fa) symlink(0x0, &(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r1, &(0x7f00000002c0)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f00000006c0)="$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") r2 = open(&(0x7f00000002c0)='./file1\x00', 0x4827e, 0x1bb) fallocate(r2, 0x0, 0x9e1f, 0x575) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000d38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r4 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x19e00}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040891) fsmount(r3, 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000340)='ro\x00H\x96\xf7\v\xcd \xd5\x19\x8ct\x14|\xa9\xd4\xc2\xf0\xf0\xab\xdf\x8f \x00\xc5\xb3\x99\xbf\xed\xa0\xe0\xa9\xc6\xab\xab\x95\xa8\x04O\b\xcc\x9b\x11\xa2`\xce\xffM]\xa1iB,\xae\x16\xf6|\xf5\'W\xd8~\xb7\xf80w+\xb7=f\xb7\xf2+\xe9zG\x9b\xadL\xfa\xbeb\xb1\xe6m\xab$\xd3\x97\xd6~ \xb8y\x13\xaf{\xc9\xa0\x941>\xa4Fgh\xb9r\x9b\xa4\xc1\x90\xf2\x85/A\xb3\x8e\x04~E\x7f\x14W\xcb?k\xa7ZB1\xe0n\x17\xc7U\xf6f\xd5\xdd\'\x05\x90\x10\xa2~\xf3\xe07`\x96\x85r', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x94deeaae95cbbca3}) 3.954714273s ago: executing program 1 (id=1010): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) process_vm_readv(0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/218, 0xda}], 0x1, 0x0) 3.211846482s ago: executing program 4 (id=1012): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x81, 0x7fffffff, 0x7, 0x4}, 0x7, 0xd}, [{0x4, 0xc, 0x1, 0x0, 0x8, 0xa517}, {0x9, 0x6283, 0x4, 0x7ff, 0x6, 0x5}, {0x7fff, 0x9, 0x1, 0x7, 0x680, 0x80}, {0x6, 0xe62, 0x0, 0x10, 0x7, 0x7c}, {0x1, 0x0, 0x8, 0x2, 0x0, 0x487}, {0x6235, 0x4, 0x6408, 0x7, 0x3, 0x7}, {0xa10, 0x6, 0x7, 0x7, 0x3, 0xefe3}, {0x9, 0x3, 0x400, 0xff, 0x8, 0xd}, {0x5, 0x6fb, 0x6, 0xc, 0x7, 0x8}, {0x0, 0x8001, 0x1, 0x101, 0x7}, {0x6, 0x1, 0xfa5b, 0x9, 0x78d7, 0x4}, {0x6, 0x7, 0x6, 0x6, 0x1, 0x7}, {0x8, 0x4, 0xfffffffa, 0x401, 0xff}, {0x7, 0x1, 0xbf5, 0xd42, 0xfbe, 0x10000}, {0xffffffff, 0x1, 0xe, 0x5, 0x7, 0x2}, {0xe8d, 0x9, 0x3, 0x2, 0x2, 0x5}, {0x7fa, 0x2a, 0x1, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x9, 0x9}, {0x81, 0x2, 0x5547, 0x7, 0x4, 0x3}, {0x2000005, 0x4, 0x65b97795, 0x9, 0x4, 0x4d}, {0xaea, 0x83b2, 0x7, 0xa, 0x3, 0x1}, {0xff, 0x3ff, 0x0, 0x6, 0x100, 0xc0000000}, {0x3ff, 0x9, 0xf, 0x1000}, {0x40, 0x7e23, 0x1, 0x10000, 0x9, 0x8}, {0xffffffff, 0x17, 0x9, 0x7fffffff, 0x59, 0x80000001}, {0x8, 0x8, 0x0, 0x9, 0x2, 0x9}, {0x6, 0x80000001, 0x5, 0x80000001, 0x6, 0x1}, {0x3, 0x1, 0x9, 0x8ab6, 0x7, 0xc}, {0x80, 0x9, 0x2, 0x5, 0x9, 0x1}, {0x83ae, 0xf, 0x5, 0x2, 0xffff, 0xffffffac}, {0x31, 0x5, 0x80000000, 0x80, 0xc3}, {0x7, 0x5, 0x8000, 0x7, 0x8, 0x3}, {0x1, 0xfffffff7, 0x8, 0x5, 0xffffff90, 0x101}, {0x8, 0x3, 0x4, 0x2, 0x4, 0x1ff}, {0x6, 0xd, 0x2, 0x3f, 0xfff, 0x2}, {0x8001, 0x2, 0x0, 0x5fe2, 0xb80, 0xebc2}, {0x6, 0x80, 0xb, 0x59, 0x8, 0x5}, {0x91, 0x0, 0xba, 0x8080, 0xe, 0xfffff4e2}, {0x0, 0x38e3, 0x7, 0xffffffff, 0xdf, 0x79}, {0x5, 0x80f, 0x3, 0x6, 0x80e, 0x4}, {0x200, 0x6, 0x5, 0xd3, 0x6, 0x7}, {0x3, 0x8, 0xf, 0x8, 0x5, 0xfffffff7}, {0x9, 0x0, 0x9, 0x80, 0x9, 0x3}, {0x1, 0x81, 0x401, 0x98b, 0x2, 0xe}, {0x1, 0x8, 0x3ff, 0x2, 0x200, 0x7}, {0x3, 0x5, 0xc, 0xe9f, 0x3, 0x1ff}, {0x6, 0x890, 0x8, 0x1ff, 0xff, 0xf579}, {0x1, 0x3, 0x6, 0x80, 0x0, 0x7ff}, {0x5, 0x7, 0x1, 0x1000, 0x4642, 0x10000}, {0x80, 0x8, 0xfffffff7, 0xfff, 0x23, 0x5ee6}, {0x7f, 0x4, 0x24, 0x9, 0x1, 0x1}, {0xbc, 0x5, 0x1, 0x1ff, 0x3, 0x5291}, {0xc, 0x4, 0x4, 0x2, 0x4, 0x2}, {0x9, 0x8, 0x3, 0x0, 0x0, 0xfffffff7}, {0x8, 0x4, 0x9, 0x7, 0x8, 0x3000000}, {0x2, 0x9, 0x3ff, 0x7f, 0xffffffff, 0x4772}, {0xa, 0x5, 0x56e, 0x7, 0x60, 0x8}, {0x1, 0x0, 0x4, 0x3, 0xb56, 0x3}, {0xe, 0x3, 0xfffffff7, 0x8, 0xfffffffc, 0x401}, {0x29, 0x1, 0x3, 0x7, 0x9, 0x69}, {0xe, 0x77, 0x779, 0x2, 0x4, 0x81}, {0x6, 0x6, 0xbe, 0x1, 0x8, 0x3}, {0x9, 0x6, 0x9, 0x3, 0x10001, 0x9}, {0x5cc, 0x8000, 0x3, 0x3b55, 0x3, 0x4}, {0x9, 0x1, 0x0, 0x2, 0x4, 0x9}, {0x9, 0x4000, 0x3, 0x8fd, 0x10001, 0x2}, {0xfe, 0x4, 0x3, 0x1, 0xdd, 0x2}, {0x7, 0x7, 0x7fff, 0x8001, 0xfffffffd, 0x4}, {0xa95, 0xd, 0x1, 0x7, 0x10000, 0x3}, {0x8702, 0x81, 0x2, 0x400, 0x0, 0x5}, {0x2, 0x7f, 0x3ff, 0x2, 0x9262, 0x4}, {0xd255, 0x0, 0x1, 0x4, 0x1, 0xf}, {0x0, 0x3, 0x8, 0xffff, 0xf161, 0x2}, {0x7f, 0xd82, 0x6, 0x7, 0x80000001}, {0x1, 0x7, 0x9, 0x4, 0x10000, 0x7}, {0x65, 0x6, 0x4, 0x3, 0x4e7, 0xfffff952}, {0x1, 0x2b3, 0xfd, 0x10001, 0x5, 0x401}, {0x6, 0x600, 0xb9c, 0xf8b, 0x7}, {0x1, 0x3, 0x7, 0x892a4e08, 0x8b4, 0x5}, {0xffffffff, 0xfffffff8, 0x4be, 0x15, 0x80000001, 0xa}, {0x6, 0x37fc, 0x4, 0x3ff, 0x5, 0x5}, {0x5, 0x8, 0x6, 0x7fff, 0xfffffffc, 0x10}, {0x7, 0x8, 0x728, 0x3, 0x2, 0xb}, {0xfffffff7, 0x2, 0x7, 0x33a, 0x4c, 0xfc000000}, {0x3720, 0xffff0000, 0x4, 0x100, 0x7, 0x80000000}, {0xc, 0x7f, 0x0, 0x222d, 0x4, 0xa7fc}, {0x4, 0xe4bf, 0x6, 0x9, 0x2}, {0x2, 0x3, 0x6, 0x6, 0x6, 0xd}, {0xffffffeb, 0x7920, 0x4, 0x7, 0x1, 0x3}, {0xf05, 0x1, 0x1, 0x9, 0x4, 0x1}, {0x2, 0x5, 0x8000, 0xffffffff, 0xfffffff0, 0x1}, {0x3, 0x2, 0x1, 0x5, 0x7, 0x1}, {0xfffffffc, 0x5, 0x0, 0x5, 0x6, 0x6}, {0x2, 0x65, 0xf4ea, 0x7fffffff, 0x8, 0x4}, {0x8001, 0x7, 0x9, 0xfff, 0x6, 0x7f}, {0xb5b5, 0xffffffff, 0x40, 0x2, 0xfffff535, 0x9}, {0xf79, 0x0, 0x40, 0x0, 0xffff, 0x200}, {0x278424d5, 0xffffffff, 0x5, 0x7, 0x3f3b5b77, 0x9}, {0x5, 0xb, 0x1, 0x7, 0x0, 0x2}, {0x1, 0x101, 0x7f, 0x0, 0xc81, 0x3}, {0x10000, 0x9d3, 0x7, 0x6, 0x3, 0xbd}, {0x9, 0x7, 0xb33e, 0xa, 0x6, 0x6}, {0xafd6, 0x19a0, 0x2, 0xdaa, 0x401, 0x8}, {0x2, 0x9, 0x8, 0x200, 0x3, 0xa5a}, {0x5, 0x11, 0x6, 0x1, 0x4, 0xfffffff9}, {0x81, 0x4, 0x4, 0xffffb72c, 0x1, 0x2}, {0x1, 0xffff, 0xd, 0xd, 0x9, 0x5}, {0x240, 0xd3db, 0xffff8000, 0x409, 0x80000001, 0x401}, {0x8, 0x2, 0x4, 0x7ff, 0x754200, 0x2}, {0x7, 0x8, 0x2, 0x0, 0x5, 0x10001}, {0x7b7, 0x5, 0xffff, 0x0, 0x10001, 0x9}, {0x5, 0x4, 0x9, 0x10, 0x8e, 0x8e}, {0x16, 0x4, 0x4, 0x2, 0x2, 0x9}, {0x7, 0x4, 0x8, 0x10001, 0x8000, 0x1}, {0x1d62, 0x4, 0x9, 0xf3a, 0x7fffffff, 0x9ad}, {0x7, 0xe4, 0x6, 0x9e, 0x7, 0xf059}, {0x3, 0x6, 0x8, 0x1400000, 0xed9, 0x6}, {0xfffffffb, 0x6, 0x10000, 0x7, 0x0, 0x6}, {0xe06, 0x8, 0x3, 0x7, 0x10001, 0x3}, {0x101, 0x8, 0x101, 0x30, 0x4, 0x6}, {0x2, 0x7fff, 0x2d, 0x0, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x1, 0x80, 0xc}, {0x0, 0x6, 0x4, 0xad, 0x40, 0x6}, {0x1000, 0x4, 0x1, 0x6, 0x4}, {0xe38, 0x5, 0x5, 0x3, 0x3, 0x4}, {0x1, 0xff, 0x6, 0x41fb, 0x200, 0x200}, {0x6, 0x55460a17, 0x54, 0x9, 0x6, 0x5}, {0x401, 0x10, 0x4, 0x74c8bacd, 0x5, 0x6}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x3}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x5}, {0x1, 0x83b0069cb76b49f3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0xd779dfac818b8296, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.140603603s ago: executing program 0 (id=1013): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2c1, &(0x7f0000000740)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) 3.140455703s ago: executing program 1 (id=1014): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20000) dup3(r1, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0x1, 0x578, &(0x7f0000001140)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sh1Wje72/B9LPmuUm0lwrVirLU5GjCUfb3586tG+zXpz+zT+E8e3vv61O//Tydfn24z/1pFbHTcdhP6f3VH/77xw76MvfujU/vb6/81G6UT2SHb9ay87V7Z7gE/6/AEAAAAAAMAgyUXEwUhyhfVyLlcorL2/40jsz5Ur1drJi5Wly7PR+KzseIzmmne6D7W8H2Iyez9ssz61oT4dEYcj4tuRfY16YaZSnu138AAAAAAAAAAAAAAAAAAAADAgDnT4/H/q95F+Hx3w1DW+2GBPv48C6IeuX/nfi296AgZS1/wHnlvyH4aX/IfhJf9heMl/GF7yH4aX/IfhJf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgp86fO5cu9dWH12fS+uzV5aX5ytVTs6XqfGFhaaYwU1m8UpirVObKpcJMZaHb3ytXKlcmp2Lp2kStVK1NVJdXLixUli7XLlxaKM6VLpRG/5eoAAAAAAAAAAAAAAAAAAAA4NlSXV6ZL5bLpUWFjoX3YyAO42kGuGZXu+cHJYpiuZxE3BiAwxiwws2se3e2Vx8vSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwwX8BAAD//2uSMF0=") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) 3.034985376s ago: executing program 5 (id=1015): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5414, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @sk_skb=0xe0145e606114eef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x7, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.965895268s ago: executing program 4 (id=1016): getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f40"], 0x0) 2.890774639s ago: executing program 0 (id=1017): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 2.596743006s ago: executing program 4 (id=1018): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 1.992998132s ago: executing program 5 (id=1019): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.893271564s ago: executing program 0 (id=1020): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000000)={[{@resgid={'resgid', 0x3d, 0xee01}}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x1, 0x0, 0x87fffff) 1.893097064s ago: executing program 1 (id=1021): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x4c, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES32=r0], 0x1, 0x3a2, &(0x7f0000000340)="$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") syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x1}]}) syz_open_dev$vcsu(0x0, 0x253, 0x0) close_range(r2, 0xffffffffffffffff, 0x600000000000000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.881259214s ago: executing program 3 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) unshare(0x22020600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000000000000000000000001122334411"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f40003820000000000000000100100200001267000000000100100201001001017705dc0000000073797a5f74756e000000000000000000"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x108843, 0x55) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r7 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r7, 0x9) syz_io_uring_complete(r6, r7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 1.121064503s ago: executing program 4 (id=1023): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.092490634s ago: executing program 5 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 990.771786ms ago: executing program 4 (id=1025): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 893.602928ms ago: executing program 0 (id=1026): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x81, 0x7fffffff, 0x7, 0x4}, 0x7, 0xd}, [{0x4, 0xc, 0x1, 0x0, 0x8, 0xa517}, {0x9, 0x6283, 0x4, 0x7ff, 0x6, 0x5}, {0x7fff, 0x9, 0x1, 0x7, 0x680, 0x80}, {0x6, 0xe62, 0x0, 0x10, 0x7, 0x7c}, {0x1, 0x0, 0x8, 0x2, 0x0, 0x487}, {0x6235, 0x4, 0x6408, 0x7, 0x3, 0x7}, {0xa10, 0x6, 0x7, 0x7, 0x3, 0xefe3}, {0x9, 0x3, 0x400, 0xff, 0x8, 0xd}, {0x5, 0x6fb, 0x6, 0xc, 0x7, 0x8}, {0x0, 0x8001, 0x1, 0x101, 0x7}, {0x6, 0x1, 0xfa5b, 0x9, 0x78d7, 0x4}, {0x6, 0x7, 0x6, 0x6, 0x1, 0x7}, {0x8, 0x4, 0xfffffffa, 0x401, 0xff}, {0x7, 0x1, 0xbf5, 0xd42, 0xfbe, 0x10000}, {0xffffffff, 0x1, 0xe, 0x5, 0x7, 0x2}, {0xe8d, 0x9, 0x3, 0x2, 0x2, 0x5}, {0x7fa, 0x2a, 0x1, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x9, 0x9}, {0x81, 0x2, 0x5547, 0x7, 0x4, 0x3}, {0x2000005, 0x4, 0x65b97795, 0x9, 0x4, 0x4d}, {0xaea, 0x83b2, 0x7, 0xa, 0x3, 0x1}, {0xff, 0x3ff, 0x0, 0x6, 0x100, 0xc0000000}, {0x3ff, 0x9, 0xf, 0x1000}, {0x40, 0x7e23, 0x1, 0x10000, 0x9, 0x8}, {0xffffffff, 0x17, 0x9, 0x7fffffff, 0x59, 0x80000001}, {0x8, 0x8, 0x0, 0x9, 0x2, 0x9}, {0x6, 0x80000001, 0x5, 0x80000001, 0x6, 0x1}, {0x3, 0x1, 0x9, 0x8ab6, 0x7, 0xc}, {0x80, 0x9, 0x2, 0x5, 0x9, 0x1}, {0x83ae, 0xf, 0x5, 0x2, 0xffff, 0xffffffac}, {0x31, 0x5, 0x80000000, 0x80, 0xc3}, {0x7, 0x5, 0x8000, 0x7, 0x8, 0x3}, {0x1, 0xfffffff7, 0x8, 0x5, 0xffffff90, 0x101}, {0x8, 0x3, 0x4, 0x2, 0x4, 0x1ff}, {0x6, 0xd, 0x2, 0x3f, 0xfff, 0x2}, {0x8001, 0x2, 0x0, 0x5fe2, 0xb80, 0xebc2}, {0x6, 0x80, 0xb, 0x59, 0x8, 0x5}, {0x91, 0x0, 0xba, 0x8080, 0xe, 0xfffff4e2}, {0x0, 0x38e3, 0x7, 0xffffffff, 0xdf, 0x79}, {0x5, 0x80f, 0x3, 0x6, 0x80e, 0x4}, {0x200, 0x6, 0x5, 0xd3, 0x6, 0x7}, {0x3, 0x8, 0xf, 0x8, 0x5, 0xfffffff7}, {0x9, 0x0, 0x9, 0x80, 0x9, 0x3}, {0x1, 0x81, 0x401, 0x98b, 0x2, 0xe}, {0x1, 0x8, 0x3ff, 0x2, 0x200, 0x7}, {0x3, 0x5, 0xc, 0xe9f, 0x3, 0x1ff}, {0x6, 0x890, 0x8, 0x1ff, 0xff, 0xf579}, {0x1, 0x3, 0x6, 0x80, 0x0, 0x7ff}, {0x5, 0x7, 0x1, 0x1000, 0x4642, 0x10000}, {0x80, 0x8, 0xfffffff7, 0xfff, 0x23, 0x5ee6}, {0x7f, 0x4, 0x24, 0x9, 0x1, 0x1}, {0xbc, 0x5, 0x1, 0x1ff, 0x3, 0x5291}, {0xc, 0x4, 0x4, 0x2, 0x4, 0x2}, {0x9, 0x8, 0x3, 0x0, 0x0, 0xfffffff7}, {0x8, 0x4, 0x9, 0x7, 0x8, 0x3000000}, {0x2, 0x9, 0x3ff, 0x7f, 0xffffffff, 0x4772}, {0xa, 0x5, 0x56e, 0x7, 0x60, 0x8}, {0x1, 0x0, 0x4, 0x3, 0xb56, 0x3}, {0xe, 0x3, 0xfffffff7, 0x8, 0xfffffffc, 0x401}, {0x29, 0x1, 0x3, 0x7, 0x9, 0x69}, {0xe, 0x77, 0x779, 0x2, 0x4, 0x81}, {0x6, 0x6, 0xbe, 0x1, 0x8, 0x3}, {0x9, 0x6, 0x9, 0x3, 0x10001, 0x9}, {0x5cc, 0x8000, 0x3, 0x3b55, 0x3, 0x4}, {0x9, 0x1, 0x0, 0x2, 0x4, 0x9}, {0x9, 0x4000, 0x3, 0x8fd, 0x10001, 0x2}, {0xfe, 0x4, 0x3, 0x1, 0xdd, 0x2}, {0x7, 0x7, 0x7fff, 0x8001, 0xfffffffd, 0x4}, {0xa95, 0xd, 0x1, 0x7, 0x10000, 0x3}, {0x8702, 0x81, 0x2, 0x400, 0x0, 0x5}, {0x2, 0x7f, 0x3ff, 0x2, 0x9262, 0x4}, {0xd255, 0x0, 0x1, 0x4, 0x1, 0xf}, {0x0, 0x3, 0x8, 0xffff, 0xf161, 0x2}, {0x7f, 0xd82, 0x6, 0x7, 0x80000001}, {0x1, 0x7, 0x9, 0x4, 0x10000, 0x7}, {0x65, 0x6, 0x4, 0x3, 0x4e7, 0xfffff952}, {0x1, 0x2b3, 0xfd, 0x10001, 0x5, 0x401}, {0x6, 0x600, 0xb9c, 0xf8b, 0x7}, {0x1, 0x3, 0x7, 0x892a4e08, 0x8b4, 0x5}, {0xffffffff, 0xfffffff8, 0x4be, 0x15, 0x80000001, 0xa}, {0x6, 0x37fc, 0x4, 0x3ff, 0x5, 0x5}, {0x5, 0x8, 0x6, 0x7fff, 0xfffffffc, 0x10}, {0x7, 0x8, 0x728, 0x3, 0x2, 0xb}, {0xfffffff7, 0x2, 0x7, 0x33a, 0x4c, 0xfc000000}, {0x3720, 0xffff0000, 0x4, 0x100, 0x7, 0x80000000}, {0xc, 0x7f, 0x0, 0x222d, 0x4, 0xa7fc}, {0x4, 0xe4bf, 0x6, 0x9, 0x2}, {0x2, 0x3, 0x6, 0x6, 0x6, 0xd}, {0xffffffeb, 0x7920, 0x4, 0x7, 0x1, 0x3}, {0xf05, 0x1, 0x1, 0x9, 0x4, 0x1}, {0x2, 0x5, 0x8000, 0xffffffff, 0xfffffff0, 0x1}, {0x3, 0x2, 0x1, 0x5, 0x7, 0x1}, {0xfffffffc, 0x5, 0x0, 0x5, 0x6, 0x6}, {0x2, 0x65, 0xf4ea, 0x7fffffff, 0x8, 0x4}, {0x8001, 0x7, 0x9, 0xfff, 0x6, 0x7f}, {0xb5b5, 0xffffffff, 0x40, 0x2, 0xfffff535, 0x9}, {0xf79, 0x0, 0x40, 0x0, 0xffff, 0x200}, {0x278424d5, 0xffffffff, 0x5, 0x7, 0x3f3b5b77, 0x9}, {0x5, 0xb, 0x1, 0x7, 0x0, 0x2}, {0x1, 0x101, 0x7f, 0x0, 0xc81, 0x3}, {0x10000, 0x9d3, 0x7, 0x6, 0x3, 0xbd}, {0x9, 0x7, 0xb33e, 0xa, 0x6, 0x6}, {0xafd6, 0x19a0, 0x2, 0xdaa, 0x401, 0x8}, {0x2, 0x9, 0x8, 0x200, 0x3, 0xa5a}, {0x5, 0x11, 0x6, 0x1, 0x4, 0xfffffff9}, {0x81, 0x4, 0x4, 0xffffb72c, 0x1, 0x2}, {0x1, 0xffff, 0xd, 0xd, 0x9, 0x5}, {0x240, 0xd3db, 0xffff8000, 0x409, 0x80000001, 0x401}, {0x8, 0x2, 0x4, 0x7ff, 0x754200, 0x2}, {0x7, 0x8, 0x2, 0x0, 0x5, 0x10001}, {0x7b7, 0x5, 0xffff, 0x0, 0x10001, 0x9}, {0x5, 0x4, 0x9, 0x10, 0x8e, 0x8e}, {0x16, 0x4, 0x4, 0x2, 0x2, 0x9}, {0x7, 0x4, 0x8, 0x10001, 0x8000, 0x1}, {0x1d62, 0x4, 0x9, 0xf3a, 0x7fffffff, 0x9ad}, {0x7, 0xe4, 0x6, 0x9e, 0x7, 0xf059}, {0x3, 0x6, 0x8, 0x1400000, 0xed9, 0x6}, {0xfffffffb, 0x6, 0x10000, 0x7, 0x0, 0x6}, {0xe06, 0x8, 0x3, 0x7, 0x10001, 0x3}, {0x101, 0x8, 0x101, 0x30, 0x4, 0x6}, {0x2, 0x7fff, 0x2d, 0x0, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x1, 0x80, 0xc}, {0x0, 0x6, 0x4, 0xad, 0x40, 0x6}, {0x1000, 0x4, 0x1, 0x6, 0x4}, {0xe38, 0x5, 0x5, 0x3, 0x3, 0x4}, {0x1, 0xff, 0x6, 0x41fb, 0x200, 0x200}, {0x6, 0x55460a17, 0x54, 0x9, 0x6, 0x5}, {0x401, 0x10, 0x4, 0x74c8bacd, 0x5, 0x6}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x3}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x5}, {0x1, 0x83b0069cb76b49f3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0xd779dfac818b8296, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 871.361379ms ago: executing program 5 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="707265765f73746174652e66756e6374696f6e203d3d3666f5", 0x19) 778.668211ms ago: executing program 5 (id=1028): getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f40"], 0x0) 721.226393ms ago: executing program 4 (id=1029): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(r1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 21.57206ms ago: executing program 1 (id=1030): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5414, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @sk_skb=0xe0145e606114eef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x7, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.49374ms ago: executing program 5 (id=1031): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20000) dup3(r1, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0x1, 0x578, &(0x7f0000001140)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) 0s ago: executing program 3 (id=1032): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x4881b39f, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) kernel console output (not intermixed with test programs): 4/0x320 [ 76.360434][ T5015] netlink: 'syz.3.246': attribute type 32 has an invalid length. [ 76.365221][ T5011] blk_mq_alloc_map_and_requests+0xd0/0x4d0 [ 76.365259][ T5011] blk_mq_alloc_tag_set+0x794/0xf30 [ 76.365281][ T5011] loop_add+0x257/0x890 [ 76.365305][ T5011] loop_control_ioctl+0x124/0x550 [ 76.365327][ T5011] ? xor_init+0x60/0x60 [ 76.365350][ T5011] ? bpf_lsm_file_ioctl+0x5/0x10 [ 76.365366][ T5011] ? security_file_ioctl+0x7c/0xa0 [ 76.365384][ T5011] ? xor_init+0x60/0x60 [ 76.365400][ T5011] __se_sys_ioctl+0xfa/0x170 [ 76.416379][ T5011] do_syscall_64+0x4c/0xa0 [ 76.420808][ T5011] ? clear_bhb_loop+0x30/0x80 [ 76.425496][ T5011] ? clear_bhb_loop+0x30/0x80 [ 76.430180][ T5011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.436081][ T5011] RIP: 0033:0x7febef58e159 [ 76.440506][ T5011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.460118][ T5011] RSP: 002b:00007febed7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.468646][ T5011] RAX: ffffffffffffffda RBX: 00007febef815fa0 RCX: 00007febef58e159 [ 76.476627][ T5011] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 76.484608][ T5011] RBP: 00007febef62506b R08: 0000000000000000 R09: 0000000000000000 [ 76.492587][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.500564][ T5011] R13: 00007febef816038 R14: 00007febef815fa0 R15: 00007fff88ba6c68 [ 76.508559][ T5011] [ 76.727410][ T5030] loop2: detected capacity change from 0 to 1024 [ 76.751383][ T5031] loop4: detected capacity change from 0 to 512 [ 76.777240][ T5030] EXT4-fs (loop2): Ignoring removed bh option [ 76.828914][ T5031] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.843561][ T5030] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,nodiscard,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,acl,,errors=continue. Quota mode: none. [ 76.857149][ T5031] Quota error (device loop4): v2_read_file_info: Block with free entry too big (9 >= 6). [ 76.898767][ T5031] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.914369][ T5031] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 76.930120][ T5031] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.253: bad orphan inode 14 [ 76.978219][ T5031] ext4_test_bit(bit=13, block=18) = 1 [ 76.996110][ T5031] is_bad_inode(inode)=0 [ 77.023310][ T5031] NEXT_ORPHAN(inode)=0 [ 77.034794][ T5031] max_ino=32 [ 77.042603][ T5031] i_nlink=1 [ 77.049167][ T5031] EXT4-fs (loop4): 1 truncate cleaned up [ 77.061648][ T5031] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,,errors=continue. Quota mode: writeback. [ 77.376281][ T5052] FAULT_INJECTION: forcing a failure. [ 77.376281][ T5052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.390514][ T5052] CPU: 1 PID: 5052 Comm: syz.4.258 Not tainted syzkaller #0 [ 77.397818][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.407894][ T5052] Call Trace: [ 77.411179][ T5052] [ 77.414113][ T5052] dump_stack_lvl+0x188/0x250 [ 77.418802][ T5052] ? show_regs_print_info+0x20/0x20 [ 77.424008][ T5052] ? load_image+0x410/0x410 [ 77.428528][ T5052] should_fail+0x383/0x4b0 [ 77.432947][ T5052] prepare_alloc_pages+0x1e3/0x5b0 [ 77.438072][ T5052] __alloc_pages+0x11b/0x480 [ 77.442674][ T5052] ? zone_statistics+0x170/0x170 [ 77.447620][ T5052] ? rcu_lock_acquire+0x30/0x30 [ 77.452479][ T5052] ? alloc_pages+0x452/0x560 [ 77.457078][ T5052] __get_free_pages+0x8/0x30 [ 77.461683][ T5052] __tlb_remove_page_size+0x1f2/0x3f0 [ 77.467763][ T5052] unmap_page_range+0xfcf/0x2410 [ 77.472752][ T5052] unmap_vmas+0x131/0x250 [ 77.477098][ T5052] ? unmap_page_range+0x2410/0x2410 [ 77.482393][ T5052] ? __mutex_lock_common+0x435/0x2400 [ 77.487773][ T5052] ? exit_mm_release+0x16/0x30 [ 77.492553][ T5052] exit_mmap+0x3b9/0x640 [ 77.496814][ T5052] ? vm_brk+0x20/0x20 [ 77.500818][ T5052] ? uprobe_clear_state+0x2f6/0x460 [ 77.506043][ T5052] __mmput+0x115/0x390 [ 77.510123][ T5052] exit_mm+0x632/0x7b0 [ 77.514201][ T5052] ? perf_pmu_migrate_context+0xb70/0xb70 [ 77.519941][ T5052] ? do_exit+0x2110/0x2110 [ 77.524364][ T5052] ? __ia32_sys_timer_delete+0x40/0x40 [ 77.529925][ T5052] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 77.535398][ T5052] ? tty_audit_exit+0x149/0x1f0 [ 77.540251][ T5052] do_exit+0x5b8/0x2110 [ 77.544422][ T5052] ? put_task_struct+0x80/0x80 [ 77.549197][ T5052] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.551307][ T5055] loop2: detected capacity change from 0 to 512 [ 77.555191][ T5052] ? _raw_spin_lock_irq+0xb7/0xf0 [ 77.566667][ T5052] do_group_exit+0x12c/0x2f0 [ 77.571357][ T5052] ? lockdep_hardirqs_on+0x94/0x140 [ 77.576571][ T5052] get_signal+0x7eb/0x12e0 [ 77.581016][ T5052] arch_do_signal_or_restart+0xe6/0x12a0 [ 77.586674][ T5052] ? futex_exit_release+0x1c0/0x1c0 [ 77.591877][ T5052] ? get_sigframe_size+0x10/0x10 [ 77.596825][ T5052] ? __context_tracking_exit+0x4c/0x80 [ 77.602288][ T5052] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.608267][ T5052] ? exit_to_user_mode_loop+0x3b/0x130 [ 77.613718][ T5052] exit_to_user_mode_loop+0x9e/0x130 [ 77.618987][ T5052] exit_to_user_mode_prepare+0xee/0x180 [ 77.624516][ T5052] syscall_exit_to_user_mode+0x16/0x40 [ 77.629956][ T5052] do_syscall_64+0x58/0xa0 [ 77.634369][ T5052] ? clear_bhb_loop+0x30/0x80 [ 77.639031][ T5052] ? clear_bhb_loop+0x30/0x80 [ 77.643693][ T5052] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.649572][ T5052] RIP: 0033:0x7fb98bc77159 [ 77.653972][ T5052] Code: Unable to access opcode bytes at RIP 0x7fb98bc7712f. [ 77.661319][ T5052] RSP: 002b:00007fb989ecf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.669724][ T5052] RAX: fffffffffffffe00 RBX: 00007fb98befefa8 RCX: 00007fb98bc77159 [ 77.677678][ T5052] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb98befefa8 [ 77.685633][ T5052] RBP: 00007fb98befefa0 R08: 0000000000000000 R09: 0000000000000000 [ 77.693677][ T5052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.701634][ T5052] R13: 00007fb98beff038 R14: 00007ffdab0c5e70 R15: 00007ffdab0c5f58 [ 77.709600][ T5052] [ 77.754927][ T5055] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.827713][ T5055] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 77.847148][ T5055] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.260: Corrupt directory, running e2fsck is recommended [ 77.874553][ T5055] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 77.883456][ T5055] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.260: corrupted in-inode xattr [ 77.902811][ T5055] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.260: couldn't read orphan inode 15 (err -117) [ 77.934848][ T5055] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,inode_readahead_blks=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.sb=0x0000000000000004,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 77.942972][ T5064] loop3: detected capacity change from 0 to 256 [ 78.067677][ T5073] IPv6: Can't replace route, no match found [ 78.266997][ T5079] tc action pedit offset must be on 32 bit boundaries [ 78.293909][ T5084] device batadv_slave_0 entered promiscuous mode [ 78.315079][ T5085] loop2: detected capacity change from 0 to 512 [ 78.346842][ T5087] FAULT_INJECTION: forcing a failure. [ 78.346842][ T5087] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.382548][ T5087] CPU: 0 PID: 5087 Comm: syz.0.274 Not tainted syzkaller #0 [ 78.389958][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.400024][ T5087] Call Trace: [ 78.403484][ T5087] [ 78.406428][ T5087] dump_stack_lvl+0x188/0x250 [ 78.411121][ T5087] ? show_regs_print_info+0x20/0x20 [ 78.416346][ T5087] ? load_image+0x410/0x410 [ 78.420864][ T5087] ? __lock_acquire+0x7d40/0x7d40 [ 78.425910][ T5087] should_fail+0x383/0x4b0 [ 78.430342][ T5087] _copy_from_user+0x2e/0x170 [ 78.435117][ T5087] kstrtouint_from_user+0xd3/0x220 [ 78.440248][ T5087] ? kstrtol_from_user+0x2a0/0x2a0 [ 78.445389][ T5087] proc_fail_nth_write+0x8b/0x200 [ 78.450426][ T5087] ? proc_fail_nth_read+0x220/0x220 [ 78.455636][ T5087] ? common_file_perm+0x171/0x1c0 [ 78.460679][ T5087] ? proc_fail_nth_read+0x220/0x220 [ 78.465974][ T5087] vfs_write+0x304/0xd70 [ 78.470346][ T5087] ? file_end_write+0x250/0x250 [ 78.475226][ T5087] ? mutex_lock_nested+0x17/0x20 [ 78.480170][ T5087] ? __fdget_pos+0x2bf/0x370 [ 78.484768][ T5087] ? ksys_write+0x70/0x260 [ 78.489197][ T5087] ksys_write+0x153/0x260 [ 78.493540][ T5087] ? __ia32_sys_read+0x80/0x80 [ 78.498322][ T5087] ? lockdep_hardirqs_on+0x94/0x140 [ 78.503543][ T5087] do_syscall_64+0x4c/0xa0 [ 78.507971][ T5087] ? clear_bhb_loop+0x30/0x80 [ 78.512660][ T5087] ? clear_bhb_loop+0x30/0x80 [ 78.517357][ T5087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.523272][ T5087] RIP: 0033:0x7f88f46ac159 [ 78.527710][ T5087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.547335][ T5087] RSP: 002b:00007f88f2904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.555768][ T5087] RAX: ffffffffffffffda RBX: 00007f88f4933fa0 RCX: 00007f88f46ac159 [ 78.563756][ T5087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 78.571771][ T5087] RBP: 00007f88f474306b R08: 0000000000000000 R09: 0000000000000000 [ 78.579931][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.587918][ T5087] R13: 00007f88f4934038 R14: 00007f88f4933fa0 R15: 00007ffe41827dd8 [ 78.595936][ T5087] [ 78.708278][ T5085] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #2: comm syz.2.273: corrupted xattr block 255 [ 78.769994][ T5085] EXT4-fs (loop2): Remounting filesystem read-only [ 78.789015][ T5085] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 78.797608][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,noblock_validity,max_batch_time=0x0000000000000000,errors=remount-ro,auto_da_alloc,grpjquota=.init_itable,barrier=0x0000000000000003,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 78.832768][ T5085] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #2: comm syz.2.273: corrupted xattr block 255 [ 78.884068][ T5085] EXT4-fs (loop2): Remounting filesystem read-only [ 79.063244][ T5080] device batadv_slave_0 left promiscuous mode [ 79.134481][ T5104] capability: warning: `syz.2.279' uses deprecated v2 capabilities in a way that may be insecure [ 79.208038][ T5107] loop3: detected capacity change from 0 to 1024 [ 79.321646][ T5107] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 79.398747][ T5107] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 79.441732][ T5107] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.280: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 79.476312][ T5107] EXT4-fs (loop3): no journal found [ 79.483138][ T5107] EXT4-fs (loop3): can't get journal size [ 79.511283][ T5107] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noblock_validity,max_dir_size_kb=0x0000000000000008,noinit_itable,quota,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 79.912830][ T5130] syz.1.287 (5130) used greatest stack depth: 19472 bytes left [ 80.249226][ T5138] tipc: Started in network mode [ 80.254467][ T5138] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 80.262360][ T5138] tipc: Enabled bearer , priority 1 [ 80.477604][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 80.502505][ T5144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.290'. [ 80.520251][ T5144] device geneve2 entered promiscuous mode [ 80.536190][ T5149] loop3: detected capacity change from 0 to 512 [ 80.580886][ T5149] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.787011][ T5149] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.291: bad orphan inode 131083 [ 80.894757][ T5149] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,init_itable,grpquota,,errors=continue. Quota mode: writeback. [ 80.919058][ T5154] Zero length message leads to an empty skb [ 81.382921][ T5166] netlink: 256 bytes leftover after parsing attributes in process `syz.0.292'. [ 81.488026][ T1108] cfg80211: failed to load regulatory.db [ 81.671973][ C0] sched: RT throttling activated [ 81.736199][ T5162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 81.825271][ T5149] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.291: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 82.004069][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.018468][ T5164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.034509][ T23] tipc: Node number set to 43690 [ 82.191137][ T5169] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5177] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5169] [ 82.449526][ T5169] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5177] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5169] [ 82.677819][ T5169] loop1: detected capacity change from 0 to 512 [ 82.779844][ T5169] EXT4-fs (loop1): 1 truncate cleaned up [ 82.912411][ T5169] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 83.024121][ T5169] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.297: invalid indirect mapped block 4294901760 (level 0) [ 83.104439][ T5169] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.297: invalid indirect mapped block 2185560079 (level 0) [ 83.213175][ T5169] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.297: corrupted inode contents [ 83.261466][ T5169] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #13: comm syz.1.297: mark_inode_dirty error [ 83.296753][ T5169] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.297: invalid indirect mapped block 65535 (level 2) [ 83.314428][ T5169] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.297: corrupted inode contents [ 83.364526][ T5169] EXT4-fs error (device loop1): ext4_truncate:4286: inode #13: comm syz.1.297: mark_inode_dirty error [ 83.410483][ T5169] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 83.784244][ T5219] loop0: detected capacity change from 0 to 1024 [ 84.019003][ T5219] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,quota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,lazytime,,errors=continue. Quota mode: writeback. [ 84.595317][ T5230] tipc: Enabled bearer , priority 1 [ 84.832610][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 84.859017][ T5247] netlink: 56 bytes leftover after parsing attributes in process `syz.0.307'. [ 85.003321][ T5247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.161941][ T5255] netlink: 256 bytes leftover after parsing attributes in process `syz.4.310'. [ 85.175136][ T5247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.088161][ T5247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.128704][ T5247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.159249][ T5247] device geneve2 entered promiscuous mode [ 86.192041][ T23] tipc: Node number set to 2319365165 [ 86.528669][ T5272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 86.655865][ T5274] netlink: 256 bytes leftover after parsing attributes in process `syz.3.326'. [ 87.749633][ T5279] xt_hashlimit: size too large, truncated to 1048576 [ 87.861021][ T5287] tipc: Enabled bearer , priority 1 [ 88.093207][ T5290] netlink: 43 bytes leftover after parsing attributes in process `syz.3.327'. [ 88.699689][ T5296] loop4: detected capacity change from 0 to 2048 [ 88.773099][ T5300] loop2: detected capacity change from 0 to 512 [ 88.852155][ T5296] Alternate GPT is invalid, using primary GPT. [ 88.869572][ T5296] loop4: p2 p3 p7 [ 88.878517][ T5300] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.421738][ T3558] Alternate GPT is invalid, using primary GPT. [ 89.578874][ T3558] loop4: p2 p3 p7 [ 89.895520][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 89.945973][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 89.946150][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 90.105971][ T5321] loop4: detected capacity change from 0 to 512 [ 90.260332][ T5321] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 90.293718][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 90.313368][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 90.326320][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 90.605424][ T5330] ip_tables: iptables: counters copy to user failed while replacing table [ 90.690718][ T5332] tipc: Enabling of bearer rejected, already enabled [ 91.459808][ T5331] loop4: detected capacity change from 0 to 8192 [ 91.491490][ T26] audit: type=1326 audit(1791120403.741:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5340 comm="syz.0.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88f46ac159 code=0x0 [ 91.515972][ T5331] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.580725][ T5331] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 91.619128][ T5331] FAT-fs (loop4): Filesystem has been set read-only [ 91.828806][ T5352] FAULT_INJECTION: forcing a failure. [ 91.828806][ T5352] name failslab, interval 1, probability 0, space 0, times 0 [ 91.862348][ T5352] CPU: 0 PID: 5352 Comm: syz.3.349 Not tainted syzkaller #0 [ 91.870132][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.880288][ T5352] Call Trace: [ 91.883679][ T5352] [ 91.886622][ T5352] dump_stack_lvl+0x188/0x250 [ 91.891322][ T5352] ? show_regs_print_info+0x20/0x20 [ 91.896532][ T5352] ? load_image+0x410/0x410 [ 91.901059][ T5352] ? __lock_acquire+0x7d40/0x7d40 [ 91.906193][ T5352] should_fail+0x383/0x4b0 [ 91.910623][ T5352] should_failslab+0x5/0x20 [ 91.915134][ T5352] slab_pre_alloc_hook+0x51/0xc0 [ 91.920084][ T5352] ? security_inode_alloc+0x30/0x110 [ 91.925381][ T5352] kmem_cache_alloc+0x3d/0x280 [ 91.930164][ T5352] security_inode_alloc+0x30/0x110 [ 91.935317][ T5352] inode_init_always+0x8e5/0xc90 [ 91.940269][ T5352] new_inode_pseudo+0x8e/0x210 [ 91.945140][ T5352] __sock_create+0x128/0x910 [ 91.949752][ T5352] __sys_socketpair+0x1bd/0x540 [ 91.956224][ T5352] __x64_sys_socketpair+0x97/0xb0 [ 91.961351][ T5352] do_syscall_64+0x4c/0xa0 [ 91.965779][ T5352] ? clear_bhb_loop+0x30/0x80 [ 91.970464][ T5352] ? clear_bhb_loop+0x30/0x80 [ 91.975147][ T5352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.981064][ T5352] RIP: 0033:0x7f79e6511159 [ 91.985485][ T5352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.005181][ T5352] RSP: 002b:00007f79e4769028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 92.013605][ T5352] RAX: ffffffffffffffda RBX: 00007f79e6798fa0 RCX: 00007f79e6511159 [ 92.021587][ T5352] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 92.029567][ T5352] RBP: 00007f79e65a806b R08: 0000000000000000 R09: 0000000000000000 [ 92.037544][ T5352] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.045524][ T5352] R13: 00007f79e6799038 R14: 00007f79e6798fa0 R15: 00007ffc955e5398 [ 92.053604][ T5352] [ 92.190349][ T5352] socket: no more sockets [ 92.320778][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 92.345119][ T5362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.353'. [ 92.800560][ T5380] loop4: detected capacity change from 0 to 1024 [ 92.924433][ T5380] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.047922][ T5380] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 93.348143][ T26] audit: type=1326 audit(1791120405.591:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f46ac159 code=0x7ffc0000 [ 93.352841][ T5395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'. [ 93.412734][ T26] audit: type=1326 audit(1791120405.601:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f46ac159 code=0x7ffc0000 [ 93.492560][ T5396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.366'. [ 93.501539][ T5396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.366'. [ 93.516838][ T26] audit: type=1326 audit(1791120405.601:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f46ac159 code=0x7ffc0000 [ 93.579992][ T5396] netlink: 'syz.0.366': attribute type 6 has an invalid length. [ 93.612122][ T26] audit: type=1326 audit(1791120405.601:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f88f46ac159 code=0x7ffc0000 [ 93.712189][ T26] audit: type=1326 audit(1791120405.601:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f46ac159 code=0x7ffc0000 [ 93.799789][ T26] audit: type=1326 audit(1791120405.601:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f46ac159 code=0x7ffc0000 [ 93.855123][ T26] audit: type=1326 audit(1791120405.601:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f46ac159 code=0x7ffc0000 [ 93.920156][ T26] audit: type=1326 audit(1791120405.601:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88f46ac159 code=0x7ffc0000 [ 93.982223][ T26] audit: type=1326 audit(1791120405.601:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f46ac159 code=0x7ffc0000 [ 94.155042][ T5404] program syz.3.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.632646][ T5418] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.838151][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 95.892643][ T5466] loop2: detected capacity change from 0 to 2048 [ 96.048237][ T5466] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,user_xattr,,errors=continue. Quota mode: none. [ 96.112853][ T5466] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.238559][ T5483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.388: bg 0: block 345: padding at end of block bitmap is not set [ 96.331905][ T5483] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 117 [ 96.380773][ T5483] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.380773][ T5483] [ 96.586485][ T5487] tipc: Enabling of bearer rejected, already enabled [ 97.006184][ T5466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 97.115891][ T5466] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.115891][ T5466] [ 97.140022][ T5466] EXT4-fs (loop2): Total free blocks count 0 [ 97.186931][ T5466] EXT4-fs (loop2): Free/Dirty block details [ 97.256663][ T5466] EXT4-fs (loop2): free_blocks=0 [ 97.261711][ T5466] EXT4-fs (loop2): dirty_blocks=112 [ 97.282939][ T5466] EXT4-fs (loop2): Block reservation details [ 97.289131][ T5466] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 97.378294][ T5496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.399'. [ 97.454951][ T5496] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 98.230998][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 98.256520][ T5525] FAULT_INJECTION: forcing a failure. [ 98.256520][ T5525] name failslab, interval 1, probability 0, space 0, times 0 [ 98.279060][ T5534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 98.312289][ T5525] CPU: 1 PID: 5525 Comm: syz.0.406 Not tainted syzkaller #0 [ 98.318741][ T5538] loop4: detected capacity change from 0 to 512 [ 98.319611][ T5525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.336025][ T5525] Call Trace: [ 98.338925][ T5534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 98.339311][ T5525] [ 98.339320][ T5525] dump_stack_lvl+0x188/0x250 [ 98.355749][ T5525] ? show_regs_print_info+0x20/0x20 [ 98.360961][ T5525] ? load_image+0x410/0x410 [ 98.365566][ T5525] ? __lock_acquire+0x7d40/0x7d40 [ 98.370643][ T5525] should_fail+0x383/0x4b0 [ 98.375162][ T5525] should_failslab+0x5/0x20 [ 98.379676][ T5525] slab_pre_alloc_hook+0x51/0xc0 [ 98.384616][ T5525] __kmalloc_node+0x6d/0x3a0 [ 98.389202][ T5525] ? kvmalloc_node+0x84/0x130 [ 98.393876][ T5525] kvmalloc_node+0x84/0x130 [ 98.398374][ T5525] nf_hook_entries_grow+0x31a/0x760 [ 98.403570][ T5525] __nf_register_net_hook+0x234/0x850 [ 98.408940][ T5525] nf_register_net_hook+0xae/0x190 [ 98.414041][ T5525] nf_register_net_hooks+0x40/0x1a0 [ 98.419251][ T5525] ip_vs_register_hooks+0xca/0x140 [ 98.424354][ T5525] ip_vs_add_service+0x2c2/0x1230 [ 98.429366][ T5525] ? __ip_vs_service_find+0x3da/0x470 [ 98.434815][ T5525] do_ip_vs_set_ctl+0x8eb/0xa10 [ 98.439659][ T5525] ? local_bh_enable+0x20/0x20 [ 98.444516][ T5525] ? mutex_unlock+0x10/0x10 [ 98.449015][ T5525] ? __local_bh_enable_ip+0x136/0x1c0 [ 98.454373][ T5525] ? lockdep_hardirqs_on+0x94/0x140 [ 98.459559][ T5525] ? __local_bh_enable_ip+0x136/0x1c0 [ 98.464925][ T5525] nf_setsockopt+0x25f/0x280 [ 98.469507][ T5525] ip_setsockopt+0x29c3/0x31e0 [ 98.474269][ T5525] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 98.479637][ T5525] ? __might_sleep+0xf0/0xf0 [ 98.484216][ T5525] ? rcu_lock_release+0x9/0x20 [ 98.488979][ T5525] tcp_setsockopt+0x229/0x1e60 [ 98.493733][ T5525] ? aa_sk_perm+0x7dc/0x910 [ 98.498226][ T5525] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 98.503589][ T5525] ? aa_af_perm+0x340/0x340 [ 98.508075][ T5525] ? __fget_files+0x402/0x470 [ 98.512768][ T5525] ? aa_sock_opt_perm+0x74/0x100 [ 98.517690][ T5525] ? sock_common_setsockopt+0x32/0xb0 [ 98.523046][ T5525] ? sock_common_recvmsg+0x1c0/0x1c0 [ 98.528327][ T5525] __sys_setsockopt+0x2bf/0x3d0 [ 98.533172][ T5525] __x64_sys_setsockopt+0xb1/0xc0 [ 98.538192][ T5525] do_syscall_64+0x4c/0xa0 [ 98.542596][ T5525] ? clear_bhb_loop+0x30/0x80 [ 98.547255][ T5525] ? clear_bhb_loop+0x30/0x80 [ 98.551918][ T5525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.557798][ T5525] RIP: 0033:0x7f88f46ac159 [ 98.562217][ T5525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.581826][ T5525] RSP: 002b:00007f88f2904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.590234][ T5525] RAX: ffffffffffffffda RBX: 00007f88f4933fa0 RCX: 00007f88f46ac159 [ 98.598190][ T5525] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 98.606166][ T5525] RBP: 00007f88f474306b R08: 000000000000002c R09: 0000000000000000 [ 98.614139][ T5525] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 98.622102][ T5525] R13: 00007f88f4934038 R14: 00007f88f4933fa0 R15: 00007ffe41827dd8 [ 98.630159][ T5525] [ 99.300670][ T5538] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #2: comm syz.4.410: corrupted xattr block 255 [ 99.533805][ T5538] EXT4-fs (loop4): Remounting filesystem read-only [ 99.540343][ T5538] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 99.580915][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f207000: rx timeout, send abort [ 100.081584][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f45e000: rx timeout, send abort [ 100.105198][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f207000: abort rx timeout. Force session deactivation [ 100.236856][ T5538] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,noblock_validity,max_batch_time=0x0000000000000000,errors=remount-ro,auto_da_alloc,grpjquota=.init_itable,barrier=0x0000000000000003,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 100.294789][ T5538] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #2: comm syz.4.410: corrupted xattr block 255 [ 100.360068][ T5538] EXT4-fs (loop4): Remounting filesystem read-only [ 100.590016][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f45e000: abort rx timeout. Force session deactivation [ 101.831927][ T5598] loop1: detected capacity change from 0 to 512 [ 102.049523][ T5622] loop2: detected capacity change from 0 to 512 [ 102.191788][ T5630] loop0: detected capacity change from 0 to 512 [ 102.200278][ T5598] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 102.413182][ T5630] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 102.422223][ T5598] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.422788][ T5622] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.452268][ T5622] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 102.460921][ T5630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 102.507707][ T5630] EXT4-fs (loop0): orphan cleanup on readonly fs [ 102.515334][ T5622] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 102.612875][ T5630] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.434: iget: bad i_size value: 12154761577498 [ 102.641156][ T5630] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.434: couldn't read orphan inode 13 (err -117) [ 102.663496][ T5622] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.432: attempt to clear invalid blocks 33619980 len 1 [ 102.707819][ T5630] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 102.753301][ T5622] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.432: invalid indirect mapped block 1819239214 (level 0) [ 102.761670][ T5630] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.434: dx entry: limit 65535 != root limit 120 [ 102.808012][ T5622] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.432: invalid indirect mapped block 1819239214 (level 1) [ 102.808603][ T5630] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.434: Corrupt directory, running e2fsck is recommended [ 103.081042][ T5622] EXT4-fs (loop2): 1 truncate cleaned up [ 103.148722][ T5622] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,stripe=0x0000000000000008,noblock_validity,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 103.484610][ T5622] EXT4-fs error (device loop2): ext4_lookup:1857: inode #2: comm syz.2.432: 'file1' linked to parent dir [ 104.782503][ T5685] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.954212][ T5697] FAULT_INJECTION: forcing a failure. [ 104.954212][ T5697] name failslab, interval 1, probability 0, space 0, times 0 [ 104.968219][ T26] kauditd_printk_skb: 156 callbacks suppressed [ 104.968231][ T26] audit: type=1326 audit(1791120417.221:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.4.451" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98bc77159 code=0x0 [ 104.982028][ T5697] CPU: 0 PID: 5697 Comm: syz.2.450 Not tainted syzkaller #0 [ 105.005312][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.015375][ T5697] Call Trace: [ 105.018676][ T5697] [ 105.021614][ T5697] dump_stack_lvl+0x188/0x250 [ 105.026307][ T5697] ? show_regs_print_info+0x20/0x20 [ 105.031590][ T5697] ? load_image+0x410/0x410 [ 105.036113][ T5697] ? __lock_acquire+0x7d40/0x7d40 [ 105.041156][ T5697] should_fail+0x383/0x4b0 [ 105.045590][ T5697] should_failslab+0x5/0x20 [ 105.050103][ T5697] slab_pre_alloc_hook+0x51/0xc0 [ 105.055058][ T5697] ? sockfs_init_fs_context+0xa0/0xa0 [ 105.060447][ T5697] ? sock_alloc_inode+0x17/0xb0 [ 105.065316][ T5697] kmem_cache_alloc+0x3d/0x280 [ 105.070079][ T5697] ? sockfs_init_fs_context+0xa0/0xa0 [ 105.075462][ T5697] sock_alloc_inode+0x17/0xb0 [ 105.080130][ T5697] ? sockfs_init_fs_context+0xa0/0xa0 [ 105.085489][ T5697] new_inode_pseudo+0x5f/0x210 [ 105.090245][ T5697] __sock_create+0x128/0x910 [ 105.094826][ T5697] __sys_socketpair+0x1bd/0x540 [ 105.099847][ T5697] __x64_sys_socketpair+0x97/0xb0 [ 105.104873][ T5697] do_syscall_64+0x4c/0xa0 [ 105.109284][ T5697] ? clear_bhb_loop+0x30/0x80 [ 105.113953][ T5697] ? clear_bhb_loop+0x30/0x80 [ 105.118626][ T5697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.124508][ T5697] RIP: 0033:0x7f4455044159 [ 105.128909][ T5697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.148498][ T5697] RSP: 002b:00007f445329c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 105.156905][ T5697] RAX: ffffffffffffffda RBX: 00007f44552cbfa0 RCX: 00007f4455044159 [ 105.164974][ T5697] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 105.173126][ T5697] RBP: 00007f44550db06b R08: 0000000000000000 R09: 0000000000000000 [ 105.181184][ T5697] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.189233][ T5697] R13: 00007f44552cc038 R14: 00007f44552cbfa0 R15: 00007ffcc4dbdf48 [ 105.197219][ T5697] [ 105.208158][ T5697] socket: no more sockets [ 106.827593][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 106.914945][ T5719] loop4: detected capacity change from 0 to 512 [ 106.934253][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 106.972853][ T5722] loop3: detected capacity change from 0 to 1024 [ 106.976927][ T5719] EXT4-fs (loop4): inline encryption not supported [ 107.057659][ T5719] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.459: inode #1: comm syz.4.459: iget: illegal inode # [ 107.080526][ T5719] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.459: error while reading EA inode 1 err=-117 [ 107.081411][ T5716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 107.112312][ T5719] EXT4-fs (loop4): 1 orphan inode deleted [ 107.117508][ T5722] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.118183][ T5719] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,inlinecrypt,,errors=continue. Quota mode: none. [ 107.158346][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.449435][ T5734] device wireguard0 entered promiscuous mode [ 108.148794][ T5739] loop4: detected capacity change from 0 to 128 [ 108.188256][ T5739] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.253786][ T5741] FAULT_INJECTION: forcing a failure. [ 108.253786][ T5741] name failslab, interval 1, probability 0, space 0, times 0 [ 108.262414][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.274737][ T21] usb 3-1: no configurations [ 108.280017][ T21] usb 3-1: can't read configurations, error -22 [ 108.294508][ T5741] CPU: 1 PID: 5741 Comm: syz.0.466 Not tainted syzkaller #0 [ 108.301832][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.311895][ T5741] Call Trace: [ 108.315186][ T5741] [ 108.318142][ T5741] dump_stack_lvl+0x188/0x250 [ 108.322836][ T5741] ? show_regs_print_info+0x20/0x20 [ 108.328054][ T5741] ? load_image+0x410/0x410 [ 108.332592][ T5741] ? __might_sleep+0xf0/0xf0 [ 108.337210][ T5741] ? __lock_acquire+0x7d40/0x7d40 [ 108.342257][ T5741] should_fail+0x383/0x4b0 [ 108.346697][ T5741] should_failslab+0x5/0x20 [ 108.351357][ T5741] slab_pre_alloc_hook+0x51/0xc0 [ 108.356394][ T5741] ? __kernfs_new_node+0xe3/0x6b0 [ 108.361468][ T5741] kmem_cache_alloc+0x3d/0x280 [ 108.366342][ T5741] __kernfs_new_node+0xe3/0x6b0 [ 108.371206][ T5741] ? widen_string+0x3b/0x320 [ 108.375812][ T5741] ? kernfs_new_node+0x250/0x250 [ 108.380856][ T5741] ? snprintf+0xe5/0x140 [ 108.385114][ T5741] kernfs_new_node+0x148/0x250 [ 108.389897][ T5741] __kernfs_create_file+0x47/0x2e0 [ 108.395017][ T5741] cgroup_addrm_files+0xac3/0x1020 [ 108.400156][ T5741] ? rcu_lock_release+0x20/0x20 [ 108.405010][ T5741] ? vfs_mkdir+0x386/0x570 [ 108.409437][ T5741] ? __x64_sys_mkdirat+0x85/0x90 [ 108.414386][ T5741] ? do_syscall_64+0x4c/0xa0 [ 108.418985][ T5741] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.425065][ T5741] ? mark_lock+0x94/0x320 [ 108.429410][ T5741] ? mark_lock+0x94/0x320 [ 108.433756][ T5741] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.439758][ T5741] ? __local_bh_enable_ip+0x136/0x1c0 [ 108.445150][ T5741] ? lockdep_hardirqs_on+0x94/0x140 [ 108.450368][ T5741] css_populate_dir+0x155/0x350 [ 108.455238][ T5741] cgroup_apply_control_enable+0x641/0xb00 [ 108.461069][ T5741] cgroup_mkdir+0xcbd/0xeb0 [ 108.465597][ T5741] ? css_task_iter_end+0x280/0x280 [ 108.470729][ T5741] ? do_raw_spin_unlock+0x11d/0x230 [ 108.475937][ T5741] ? kernfs_iop_permission+0x22d/0x310 [ 108.481405][ T5741] ? css_task_iter_end+0x280/0x280 [ 108.486521][ T5741] kernfs_iop_mkdir+0x23d/0x3d0 [ 108.491394][ T5741] vfs_mkdir+0x386/0x570 [ 108.495651][ T5741] do_mkdirat+0x1dd/0x5c0 [ 108.499989][ T5741] ? vfs_mkdir+0x570/0x570 [ 108.504423][ T5741] __x64_sys_mkdirat+0x85/0x90 [ 108.509205][ T5741] do_syscall_64+0x4c/0xa0 [ 108.513636][ T5741] ? clear_bhb_loop+0x30/0x80 [ 108.518322][ T5741] ? clear_bhb_loop+0x30/0x80 [ 108.523009][ T5741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.528912][ T5741] RIP: 0033:0x7f88f46ac159 [ 108.533338][ T5741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.552950][ T5741] RSP: 002b:00007f88f2904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 108.561375][ T5741] RAX: ffffffffffffffda RBX: 00007f88f4933fa0 RCX: 00007f88f46ac159 [ 108.569357][ T5741] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 108.577337][ T5741] RBP: 00007f88f474306b R08: 0000000000000000 R09: 0000000000000000 [ 108.585404][ T5741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.593386][ T5741] R13: 00007f88f4934038 R14: 00007f88f4933fa0 R15: 00007ffe41827dd8 [ 108.601387][ T5741] [ 108.608332][ T5741] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 108.831433][ T5751] loop2: detected capacity change from 0 to 1024 [ 108.905609][ T5753] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5757] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5753] [ 109.559893][ T5751] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,quota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,lazytime,,errors=continue. Quota mode: writeback. [ 109.615483][ T5760] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5757] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5760] [ 109.666549][ T5747] loop4: detected capacity change from 0 to 512 [ 111.085686][ T5747] EXT4-fs (loop4): 1 truncate cleaned up [ 111.131649][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'. [ 111.177843][ T5747] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 111.372526][ T5787] loop2: detected capacity change from 0 to 1024 [ 111.462232][ T5747] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.469: invalid indirect mapped block 4294901760 (level 0) [ 111.482522][ T5787] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.947491][ T5747] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.469: invalid indirect mapped block 2185560079 (level 0) [ 112.221888][ T5747] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #13: comm syz.4.469: corrupted inode contents [ 112.244973][ T5794] FAULT_INJECTION: forcing a failure. [ 112.244973][ T5794] name failslab, interval 1, probability 0, space 0, times 0 [ 112.257997][ T5794] CPU: 0 PID: 5794 Comm: syz.0.478 Not tainted syzkaller #0 [ 112.265412][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.275482][ T5794] Call Trace: [ 112.278777][ T5794] [ 112.281720][ T5794] dump_stack_lvl+0x188/0x250 [ 112.286416][ T5794] ? show_regs_print_info+0x20/0x20 [ 112.291635][ T5794] ? load_image+0x410/0x410 [ 112.296171][ T5794] ? __lock_acquire+0x7d40/0x7d40 [ 112.301220][ T5794] should_fail+0x383/0x4b0 [ 112.305661][ T5794] should_failslab+0x5/0x20 [ 112.310278][ T5794] slab_pre_alloc_hook+0x51/0xc0 [ 112.315233][ T5794] ? sockfs_init_fs_context+0xa0/0xa0 [ 112.318744][ T5747] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #13: comm syz.4.469: mark_inode_dirty error [ 112.320617][ T5794] ? sock_alloc_inode+0x17/0xb0 [ 112.320645][ T5794] kmem_cache_alloc+0x3d/0x280 [ 112.341481][ T5794] ? sockfs_init_fs_context+0xa0/0xa0 [ 112.346964][ T5794] sock_alloc_inode+0x17/0xb0 [ 112.351674][ T5794] ? sockfs_init_fs_context+0xa0/0xa0 [ 112.357067][ T5794] new_inode_pseudo+0x5f/0x210 [ 112.362027][ T5794] __sock_create+0x128/0x910 [ 112.366730][ T5794] __sys_socketpair+0x1bd/0x540 [ 112.371604][ T5794] __x64_sys_socketpair+0x97/0xb0 [ 112.376670][ T5794] do_syscall_64+0x4c/0xa0 [ 112.381133][ T5794] ? clear_bhb_loop+0x30/0x80 [ 112.385828][ T5794] ? clear_bhb_loop+0x30/0x80 [ 112.390526][ T5794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.396440][ T5794] RIP: 0033:0x7f88f46ac159 [ 112.399385][ T5747] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.469: invalid indirect mapped block 65535 (level 2) [ 112.400891][ T5794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.434092][ T5794] RSP: 002b:00007f88f2904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 112.442553][ T5794] RAX: ffffffffffffffda RBX: 00007f88f4933fa0 RCX: 00007f88f46ac159 [ 112.450541][ T5794] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 112.458531][ T5794] RBP: 00007f88f474306b R08: 0000000000000000 R09: 0000000000000000 [ 112.466785][ T5794] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.475115][ T5794] R13: 00007f88f4934038 R14: 00007f88f4933fa0 R15: 00007ffe41827dd8 [ 112.483116][ T5794] [ 112.500582][ T5747] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #13: comm syz.4.469: corrupted inode contents [ 112.542337][ T5801] loop5: detected capacity change from 0 to 7 [ 112.550813][ T5747] EXT4-fs error (device loop4): ext4_truncate:4286: inode #13: comm syz.4.469: mark_inode_dirty error [ 112.551837][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.572940][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.582240][ T5747] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem [ 112.610246][ T5794] socket: no more sockets [ 112.612261][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.625491][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.662186][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.673141][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.712373][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.723322][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.827257][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.838245][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.900508][ T5808] loop2: detected capacity change from 0 to 512 [ 112.912479][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.923625][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.968201][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.979246][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.994827][ T5801] ldm_validate_partition_table(): Disk read failed. [ 113.214313][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.225283][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 113.317106][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.328305][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 113.402271][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.413257][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 113.494890][ T5801] Dev loop5: unable to read RDB block 0 [ 113.501919][ T5801] loop5: unable to read partition table [ 113.594323][ T5808] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 113.612200][ T5801] loop5: partition table beyond EOD, truncated [ 113.618499][ T5801] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 113.653572][ T5808] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.469808][ T3558] ldm_validate_partition_table(): Disk read failed. [ 114.478272][ T5830] loop3: detected capacity change from 0 to 1024 [ 114.485130][ T3558] Dev loop5: unable to read RDB block 0 [ 114.521405][ T3558] loop5: unable to read partition table [ 114.528156][ T3558] loop5: partition table beyond EOD, truncated [ 114.631268][ T5830] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,quota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,lazytime,,errors=continue. Quota mode: writeback. [ 114.721231][ T5846] FAULT_INJECTION: forcing a failure. [ 114.721231][ T5846] name failslab, interval 1, probability 0, space 0, times 0 [ 114.788236][ T5846] CPU: 0 PID: 5846 Comm: syz.4.495 Not tainted syzkaller #0 [ 114.795560][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.805635][ T5846] Call Trace: [ 114.808924][ T5846] [ 114.811869][ T5846] dump_stack_lvl+0x188/0x250 [ 114.816562][ T5846] ? show_regs_print_info+0x20/0x20 [ 114.821774][ T5846] ? load_image+0x410/0x410 [ 114.826399][ T5846] ? __might_sleep+0xf0/0xf0 [ 114.831014][ T5846] ? __lock_acquire+0x7d40/0x7d40 [ 114.836057][ T5846] ? verify_lock_unused+0x140/0x140 [ 114.841275][ T5846] should_fail+0x383/0x4b0 [ 114.845712][ T5846] should_failslab+0x5/0x20 [ 114.850228][ T5846] slab_pre_alloc_hook+0x51/0xc0 [ 114.855176][ T5846] ? __kernfs_new_node+0xa8/0x6b0 [ 114.860220][ T5846] __kmalloc_track_caller+0x69/0x330 [ 114.865523][ T5846] ? __kernfs_new_node+0xa8/0x6b0 [ 114.870571][ T5846] kstrdup_const+0x51/0x90 [ 114.875000][ T5846] __kernfs_new_node+0xa8/0x6b0 [ 114.879868][ T5846] ? widen_string+0x3b/0x320 [ 114.884482][ T5846] ? kernfs_new_node+0x250/0x250 [ 114.889462][ T5846] ? snprintf+0xe5/0x140 [ 114.893729][ T5846] kernfs_new_node+0x148/0x250 [ 114.898606][ T5846] __kernfs_create_file+0x47/0x2e0 [ 114.903738][ T5846] cgroup_addrm_files+0xac3/0x1020 [ 114.908881][ T5846] ? rcu_lock_release+0x20/0x20 [ 114.913748][ T5846] ? vfs_mkdir+0x386/0x570 [ 114.918177][ T5846] ? __x64_sys_mkdirat+0x85/0x90 [ 114.923129][ T5846] ? do_syscall_64+0x4c/0xa0 [ 114.927820][ T5846] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.933901][ T5846] ? mark_lock+0x94/0x320 [ 114.938276][ T5846] ? __local_bh_enable_ip+0x136/0x1c0 [ 114.943666][ T5846] ? lockdep_hardirqs_on+0x94/0x140 [ 114.948890][ T5846] css_populate_dir+0x155/0x350 [ 114.953761][ T5846] cgroup_apply_control_enable+0x641/0xb00 [ 114.959601][ T5846] cgroup_mkdir+0xcbd/0xeb0 [ 114.964128][ T5846] ? css_task_iter_end+0x280/0x280 [ 114.969257][ T5846] ? do_raw_spin_unlock+0x11d/0x230 [ 114.974477][ T5846] ? kernfs_iop_permission+0x22d/0x310 [ 114.979955][ T5846] ? css_task_iter_end+0x280/0x280 [ 114.985084][ T5846] kernfs_iop_mkdir+0x23d/0x3d0 [ 114.989963][ T5846] vfs_mkdir+0x386/0x570 [ 114.994229][ T5846] do_mkdirat+0x1dd/0x5c0 [ 114.998581][ T5846] ? vfs_mkdir+0x570/0x570 [ 115.003044][ T5846] __x64_sys_mkdirat+0x85/0x90 [ 115.007828][ T5846] do_syscall_64+0x4c/0xa0 [ 115.012255][ T5846] ? clear_bhb_loop+0x30/0x80 [ 115.016965][ T5846] ? clear_bhb_loop+0x30/0x80 [ 115.021757][ T5846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.027665][ T5846] RIP: 0033:0x7fb98bc77159 [ 115.032089][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.051705][ T5846] RSP: 002b:00007fb989ecf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 115.060136][ T5846] RAX: ffffffffffffffda RBX: 00007fb98befefa0 RCX: 00007fb98bc77159 [ 115.068146][ T5846] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 115.076137][ T5846] RBP: 00007fb98bd0e06b R08: 0000000000000000 R09: 0000000000000000 [ 115.084217][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.092204][ T5846] R13: 00007fb98beff038 R14: 00007fb98befefa0 R15: 00007ffdab0c5f58 [ 115.100296][ T5846] [ 115.326366][ T5846] cgroup: cgroup_addrm_files: failed to add throttle.read_bps_device, err=-12 [ 115.942578][ T5862] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5870] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5862] [ 116.267360][ T5865] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5870] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5865] [ 116.625625][ T5869] loop0: detected capacity change from 0 to 512 [ 116.883820][ T5869] EXT4-fs (loop0): 1 truncate cleaned up [ 116.911584][ T5885] loop4: detected capacity change from 0 to 512 [ 116.954148][ T5869] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 117.073636][ T5897] loop1: detected capacity change from 0 to 1024 [ 117.136853][ T5885] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 117.220522][ T5885] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.252685][ T5862] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.500: invalid indirect mapped block 4294901760 (level 0) [ 117.260546][ T5897] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsddf,quota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,lazytime,,errors=continue. Quota mode: writeback. [ 117.318843][ T5862] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.500: invalid indirect mapped block 2185560079 (level 0) [ 117.338920][ T5862] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #13: comm syz.0.500: corrupted inode contents [ 117.373401][ T5862] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #13: comm syz.0.500: mark_inode_dirty error [ 117.427248][ T5862] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.500: invalid indirect mapped block 65535 (level 2) [ 117.448429][ T5862] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #13: comm syz.0.500: corrupted inode contents [ 117.475642][ T5862] EXT4-fs error (device loop0): ext4_truncate:4286: inode #13: comm syz.0.500: mark_inode_dirty error [ 117.527326][ T5862] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 118.668636][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 118.940628][ T5951] loop2: detected capacity change from 0 to 128 [ 119.084959][ T5951] attempt to access beyond end of device [ 119.084959][ T5951] loop2: rw=2049, want=250, limit=128 [ 119.140636][ T5951] attempt to access beyond end of device [ 119.140636][ T5951] loop2: rw=2049, want=154, limit=128 [ 119.203272][ T5955] loop4: detected capacity change from 0 to 4096 [ 119.320345][ T5967] loop3: detected capacity change from 0 to 512 [ 119.457034][ T5967] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 119.550683][ T5967] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.586889][ T5988] loop0: detected capacity change from 0 to 512 [ 120.642774][ T5985] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5991] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5985] [ 120.739713][ T5998] ip_tables: iptables: counters copy to user failed while replacing table [ 120.754330][ T5981] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5991] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5981] [ 120.757604][ T5988] EXT4-fs (loop0): 1 orphan inode deleted [ 120.779436][ T5985] loop2: detected capacity change from 0 to 512 [ 120.786011][ T5988] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.797275][ T5988] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.991015][ T5988] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 121.035786][ T5985] EXT4-fs (loop2): 1 truncate cleaned up [ 121.083337][ T5985] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 121.202757][ T5981] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.530: invalid indirect mapped block 4294901760 (level 0) [ 121.330461][ T5981] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.530: invalid indirect mapped block 2185560079 (level 0) [ 121.374109][ T5981] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #13: comm syz.2.530: corrupted inode contents [ 121.399405][ T6010] loop0: detected capacity change from 0 to 1024 [ 121.453298][ T26] audit: type=1326 audit(1791120433.711:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.1.541" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febef58e159 code=0x0 [ 121.500420][ T5981] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #13: comm syz.2.530: mark_inode_dirty error [ 121.524789][ T6010] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.578747][ T5981] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.530: invalid indirect mapped block 65535 (level 2) [ 121.629694][ T5981] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #13: comm syz.2.530: corrupted inode contents [ 121.722463][ T5981] EXT4-fs error (device loop2): ext4_truncate:4286: inode #13: comm syz.2.530: mark_inode_dirty error [ 121.759755][ T5981] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 122.354331][ T6036] tipc: Enabling of bearer rejected, already enabled [ 122.970301][ T6016] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 123.185111][ T6041] device syzkaller0 entered promiscuous mode [ 123.220993][ T6041] tipc: Enabled bearer , priority 0 [ 123.297650][ T6039] tipc: Resetting bearer [ 123.370401][ T6039] tipc: Disabling bearer [ 124.183238][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.082223][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.100471][ T21] usb 2-1: no configurations [ 125.130843][ T21] usb 2-1: can't read configurations, error -22 [ 125.192456][ T6068] loop3: detected capacity change from 0 to 164 [ 125.312283][ T6072] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6073] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6072] [ 125.705456][ T6077] tipc: Enabling of bearer rejected, already enabled [ 126.918396][ T6078] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 127.571291][ T4511] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.690793][ T6106] device syzkaller0 entered promiscuous mode [ 127.709202][ T6107] tipc: Enabled bearer , priority 0 [ 127.766778][ T6096] tipc: Resetting bearer [ 127.774236][ T6111] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6112] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6111] [ 127.824401][ T6096] tipc: Disabling bearer [ 127.846201][ T6115] loop3: detected capacity change from 0 to 256 [ 128.022220][ T4511] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.029936][ T4511] usb 5-1: no configurations [ 128.049135][ T4511] usb 5-1: can't read configurations, error -22 [ 128.251317][ T26] audit: type=1326 audit(1791120440.501:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.3.579" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79e6511159 code=0x0 [ 128.256858][ T6131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.581'. [ 128.546133][ T6138] loop2: detected capacity change from 0 to 512 [ 128.679124][ T6138] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 128.729394][ T6151] ip_tables: iptables: counters copy to user failed while replacing table [ 128.910087][ T6138] block device autoloading is deprecated and will be removed. [ 129.006841][ T6138] EXT4-fs (loop2): couldn't read superblock of external journal [ 129.354221][ T6168] tipc: Started in network mode [ 129.359266][ T6168] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 129.368467][ T6168] tipc: Enabled bearer , priority 1 [ 130.093721][ T6172] FAULT_INJECTION: forcing a failure. [ 130.093721][ T6172] name failslab, interval 1, probability 0, space 0, times 0 [ 130.112808][ T6172] CPU: 0 PID: 6172 Comm: syz.1.597 Not tainted syzkaller #0 [ 130.120158][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.130567][ T6172] Call Trace: [ 130.133872][ T6172] [ 130.136814][ T6172] dump_stack_lvl+0x188/0x250 [ 130.141595][ T6172] ? show_regs_print_info+0x20/0x20 [ 130.146803][ T6172] ? load_image+0x410/0x410 [ 130.151353][ T6172] ? __might_sleep+0xf0/0xf0 [ 130.156046][ T6172] ? __lock_acquire+0x7d40/0x7d40 [ 130.161097][ T6172] should_fail+0x383/0x4b0 [ 130.165566][ T6172] should_failslab+0x5/0x20 [ 130.170086][ T6172] slab_pre_alloc_hook+0x51/0xc0 [ 130.175045][ T6172] ? __d_alloc+0x27/0x6d0 [ 130.179566][ T6172] kmem_cache_alloc+0x3d/0x280 [ 130.184375][ T6172] __d_alloc+0x27/0x6d0 [ 130.188541][ T6172] ? d_alloc_pseudo+0xe/0x70 [ 130.193148][ T6172] d_alloc_pseudo+0x19/0x70 [ 130.197660][ T6172] alloc_file_pseudo+0xe0/0x200 [ 130.202526][ T6172] ? alloc_empty_file_noaccount+0x80/0x80 [ 130.208266][ T6172] ? alloc_fd+0x59e/0x650 [ 130.212613][ T6172] sock_alloc_file+0xb3/0x240 [ 130.217306][ T6172] __sys_socket+0x11d/0x170 [ 130.221828][ T6172] __x64_sys_socket+0x76/0x80 [ 130.226517][ T6172] do_syscall_64+0x4c/0xa0 [ 130.230949][ T6172] ? clear_bhb_loop+0x30/0x80 [ 130.235635][ T6172] ? clear_bhb_loop+0x30/0x80 [ 130.240321][ T6172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.246348][ T6172] RIP: 0033:0x7febef58e159 [ 130.250776][ T6172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.270412][ T6172] RSP: 002b:00007febed7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 130.278868][ T6172] RAX: ffffffffffffffda RBX: 00007febef815fa0 RCX: 00007febef58e159 [ 130.286856][ T6172] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 130.294847][ T6172] RBP: 00007febef62506b R08: 0000000000000000 R09: 0000000000000000 [ 130.302830][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.310815][ T6172] R13: 00007febef816038 R14: 00007febef815fa0 R15: 00007fff88ba6c68 [ 130.318815][ T6172] [ 130.482084][ T23] tipc: Node number set to 43690 [ 130.742204][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 130.765021][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 131.059612][ T6195] loop1: detected capacity change from 0 to 128 [ 131.132696][ T6195] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.173166][ T6195] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.197557][ T6195] EXT4-fs (loop1): shut down requested (2) [ 131.297688][ T4266] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.682309][ T4266] usb 4-1: config index 0 descriptor too short (expected 64906, got 45) [ 131.882402][ T4266] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.897385][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.911899][ T4266] usb 4-1: Product: syz [ 131.919903][ T4266] usb 4-1: Manufacturer: syz [ 131.940127][ T4266] usb 4-1: SerialNumber: syz [ 132.242199][ T4266] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 132.313742][ T4266] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 132.664671][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.671329][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.072436][ T4266] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 133.192085][ T4266] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 133.248249][ T4266] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 133.278301][ T4266] lan78xx: probe of 4-1:1.0 failed with error -71 [ 133.332155][ T4266] usb 4-1: USB disconnect, device number 2 [ 133.822617][ T4266] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.222179][ T4266] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.229921][ T4266] usb 4-1: no configurations [ 134.268987][ T4266] usb 4-1: can't read configurations, error -22 [ 134.555381][ T6245] loop4: detected capacity change from 0 to 128 [ 135.008182][ T6245] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.077215][ T6245] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.315993][ T6251] tipc: Enabling of bearer rejected, already enabled [ 136.002089][ T6245] EXT4-fs (loop4): shut down requested (2) [ 136.512675][ T6256] FAULT_INJECTION: forcing a failure. [ 136.512675][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 136.584787][ T6256] CPU: 0 PID: 6256 Comm: syz.4.624 Not tainted syzkaller #0 [ 136.592113][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.602187][ T6256] Call Trace: [ 136.605471][ T6256] [ 136.608443][ T6256] dump_stack_lvl+0x188/0x250 [ 136.613138][ T6256] ? show_regs_print_info+0x20/0x20 [ 136.618350][ T6256] ? load_image+0x410/0x410 [ 136.622866][ T6256] ? __might_sleep+0xf0/0xf0 [ 136.627472][ T6256] ? __lock_acquire+0x7d40/0x7d40 [ 136.632523][ T6256] should_fail+0x383/0x4b0 [ 136.636967][ T6256] should_failslab+0x5/0x20 [ 136.641469][ T6256] slab_pre_alloc_hook+0x51/0xc0 [ 136.646409][ T6256] ? __d_alloc+0x27/0x6d0 [ 136.650759][ T6256] kmem_cache_alloc+0x3d/0x280 [ 136.655540][ T6256] __d_alloc+0x27/0x6d0 [ 136.659709][ T6256] ? d_alloc_pseudo+0xe/0x70 [ 136.664330][ T6256] d_alloc_pseudo+0x19/0x70 [ 136.668939][ T6256] alloc_file_pseudo+0xe0/0x200 [ 136.673818][ T6256] ? alloc_empty_file_noaccount+0x80/0x80 [ 136.679553][ T6256] ? alloc_fd+0x59e/0x650 [ 136.683886][ T6256] sock_alloc_file+0xb3/0x240 [ 136.688583][ T6256] __sys_socket+0x11d/0x170 [ 136.693115][ T6256] __x64_sys_socket+0x76/0x80 [ 136.698066][ T6256] do_syscall_64+0x4c/0xa0 [ 136.702492][ T6256] ? clear_bhb_loop+0x30/0x80 [ 136.707180][ T6256] ? clear_bhb_loop+0x30/0x80 [ 136.711868][ T6256] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.717809][ T6256] RIP: 0033:0x7fb98bc77159 [ 136.722252][ T6256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.742041][ T6256] RSP: 002b:00007fb989ecf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 136.750469][ T6256] RAX: ffffffffffffffda RBX: 00007fb98befefa0 RCX: 00007fb98bc77159 [ 136.758547][ T6256] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 136.766532][ T6256] RBP: 00007fb98bd0e06b R08: 0000000000000000 R09: 0000000000000000 [ 136.774509][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.782480][ T6256] R13: 00007fb98beff038 R14: 00007fb98befefa0 R15: 00007ffdab0c5f58 [ 136.790473][ T6256] [ 138.832103][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.192192][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.199904][ T21] usb 2-1: no configurations [ 139.232010][ T21] usb 2-1: can't read configurations, error -22 [ 140.232053][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.356158][ T6291] tipc: Started in network mode [ 140.361273][ T6291] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 140.369250][ T6291] tipc: Enabled bearer , priority 1 [ 141.102140][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.109894][ T21] usb 2-1: no configurations [ 141.125189][ T21] usb 2-1: can't read configurations, error -22 [ 141.131655][ T21] usb usb2-port1: attempt power cycle [ 141.493405][ T4230] tipc: Node number set to 43690 [ 142.093654][ T6310] netlink: 36 bytes leftover after parsing attributes in process `syz.3.642'. [ 143.020007][ T6328] FAULT_INJECTION: forcing a failure. [ 143.020007][ T6328] name failslab, interval 1, probability 0, space 0, times 0 [ 143.117571][ T6328] CPU: 1 PID: 6328 Comm: syz.0.644 Not tainted syzkaller #0 [ 143.124901][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.134967][ T6328] Call Trace: [ 143.138271][ T6328] [ 143.141204][ T6328] dump_stack_lvl+0x188/0x250 [ 143.145907][ T6328] ? show_regs_print_info+0x20/0x20 [ 143.151113][ T6328] ? load_image+0x410/0x410 [ 143.155646][ T6328] ? __might_sleep+0xf0/0xf0 [ 143.160245][ T6328] ? __lock_acquire+0x7d40/0x7d40 [ 143.165284][ T6328] should_fail+0x383/0x4b0 [ 143.169718][ T6328] should_failslab+0x5/0x20 [ 143.174231][ T6328] slab_pre_alloc_hook+0x51/0xc0 [ 143.179178][ T6328] ? __d_alloc+0x27/0x6d0 [ 143.183514][ T6328] kmem_cache_alloc+0x3d/0x280 [ 143.188289][ T6328] __d_alloc+0x27/0x6d0 [ 143.192451][ T6328] ? d_alloc_pseudo+0xe/0x70 [ 143.197056][ T6328] d_alloc_pseudo+0x19/0x70 [ 143.201565][ T6328] alloc_file_pseudo+0xe0/0x200 [ 143.206425][ T6328] ? alloc_empty_file_noaccount+0x80/0x80 [ 143.212162][ T6328] ? alloc_fd+0x59e/0x650 [ 143.216509][ T6328] sock_alloc_file+0xb3/0x240 [ 143.221205][ T6328] __sys_socket+0x11d/0x170 [ 143.225722][ T6328] __x64_sys_socket+0x76/0x80 [ 143.230405][ T6328] do_syscall_64+0x4c/0xa0 [ 143.234927][ T6328] ? clear_bhb_loop+0x30/0x80 [ 143.239724][ T6328] ? clear_bhb_loop+0x30/0x80 [ 143.244420][ T6328] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.250333][ T6328] RIP: 0033:0x7f88f46ac159 [ 143.254761][ T6328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.274466][ T6328] RSP: 002b:00007f88f2904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 143.282896][ T6328] RAX: ffffffffffffffda RBX: 00007f88f4933fa0 RCX: 00007f88f46ac159 [ 143.290894][ T6328] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 143.298883][ T6328] RBP: 00007f88f474306b R08: 0000000000000000 R09: 0000000000000000 [ 143.307047][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.315123][ T6328] R13: 00007f88f4934038 R14: 00007f88f4933fa0 R15: 00007ffe41827dd8 [ 143.323213][ T6328] [ 143.719767][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.648'. [ 143.782671][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 144.372456][ T4235] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.539116][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 144.803026][ T4235] usb 5-1: config index 0 descriptor too short (expected 64906, got 45) [ 144.828821][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.878518][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.933138][ T6335] device bridge_slave_0 entered promiscuous mode [ 144.963274][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.972294][ T4235] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 144.981382][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.012128][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.020220][ T6335] device bridge_slave_1 entered promiscuous mode [ 145.032056][ T4235] usb 5-1: Product: syz [ 145.036251][ T4235] usb 5-1: Manufacturer: syz [ 145.040884][ T4235] usb 5-1: SerialNumber: syz [ 145.125168][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.155591][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.241334][ T6335] team0: Port device team_slave_0 added [ 145.270912][ T6335] team0: Port device team_slave_1 added [ 145.346614][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.382212][ T4235] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 145.402542][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.428551][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.448299][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.472622][ T4235] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 145.522578][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.529637][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.555943][ T4235] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 145.574248][ T4235] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 145.598862][ T4235] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 145.622036][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.625240][ T4235] lan78xx: probe of 5-1:1.0 failed with error -71 [ 145.682296][ T4235] usb 5-1: USB disconnect, device number 4 [ 145.771539][ T6335] device hsr_slave_0 entered promiscuous mode [ 145.804226][ T6335] device hsr_slave_1 entered promiscuous mode [ 145.821468][ T6335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.830594][ T6335] Cannot create hsr debugfs directory [ 146.141576][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 146.363833][ T6335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.384700][ T6335] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.413837][ T6335] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.448237][ T6335] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.722125][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.758914][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.777392][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.809887][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.840034][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.859791][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.892725][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.899817][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.959901][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.995945][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.015393][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.037059][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.044240][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.067430][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.096990][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.129715][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.162838][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.190216][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.234898][ T6127] tipc: Resetting bearer [ 147.313219][ T6127] tipc: Disabling bearer [ 147.353499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.368832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.384472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.407451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.430127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.449199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.475326][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.631663][ T4356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.733183][ T4356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.970829][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.989115][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.057174][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.149553][ T4356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.192316][ T1324] Bluetooth: hci5: command 0x041b tx timeout [ 148.294395][ T4356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.745285][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 148.771256][ T6418] ip_tables: iptables: counters copy to user failed while replacing table [ 148.788697][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 148.893039][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.913053][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.943136][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.961887][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.986966][ T4356] tipc: Disabling bearer [ 148.998003][ T4356] tipc: Left network mode [ 149.004761][ T6335] device veth0_vlan entered promiscuous mode [ 149.029676][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.062741][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.190069][ T6335] device veth1_vlan entered promiscuous mode [ 149.259574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.278162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.286655][ T4230] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.321670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.331137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.352261][ T6335] device veth0_macvtap entered promiscuous mode [ 149.394640][ T6335] device veth1_macvtap entered promiscuous mode [ 149.449661][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.481619][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.509724][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.531046][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.555111][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.579408][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.603115][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.638756][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.668808][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.682093][ T4230] usb 2-1: config index 0 descriptor too short (expected 64906, got 45) [ 149.720106][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.733127][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.750042][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.771292][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.816765][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.834310][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.847846][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.862677][ T4230] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 149.878413][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.888475][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.904786][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.918703][ T4230] usb 2-1: Product: syz [ 149.923037][ T4230] usb 2-1: Manufacturer: syz [ 149.930977][ T4230] usb 2-1: SerialNumber: syz [ 149.939340][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.959351][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.974858][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.005629][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.035296][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.054491][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.215939][ T4230] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 150.219069][ T6335] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.242109][ T4230] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 150.262274][ T4266] Bluetooth: hci5: command 0x040f tx timeout [ 150.298864][ T6335] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.328174][ T6335] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.368022][ T6335] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.422675][ T4230] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 150.439764][ T4230] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 150.452395][ T4230] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 150.504981][ T4230] lan78xx: probe of 2-1:1.0 failed with error -71 [ 150.741307][ T4230] usb 2-1: USB disconnect, device number 7 [ 150.890426][ T26] audit: type=1326 audit(1791120463.141:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.0.684" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88f46ac159 code=0x0 [ 150.935277][ T6456] tipc: Enabling of bearer rejected, already enabled [ 151.184992][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.217383][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.492520][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.518964][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.597670][ T6476] tipc: Enabling of bearer rejected, already enabled [ 151.715541][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.981728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.342601][ T4266] Bluetooth: hci5: command 0x0419 tx timeout [ 152.725280][ T6505] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6508] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6505] [ 152.753815][ T4356] device hsr_slave_0 left promiscuous mode [ 152.800904][ T4356] device hsr_slave_1 left promiscuous mode [ 152.814112][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.862139][ T4230] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 152.870335][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.014126][ T4356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.040557][ T4356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.196336][ T4356] device bridge_slave_1 left promiscuous mode [ 153.204619][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.221301][ T4356] device bridge_slave_0 left promiscuous mode [ 153.238131][ T4356] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.640740][ T4356] device veth1_macvtap left promiscuous mode [ 153.683549][ T4356] device veth0_macvtap left promiscuous mode [ 153.730664][ T4356] device veth1_vlan left promiscuous mode [ 153.758427][ T4356] device veth0_vlan left promiscuous mode [ 154.056468][ T6548] autofs4:pid:6548:autofs_fill_super: called with bogus options [ 154.438173][ T4356] team0 (unregistering): Port device team_slave_1 removed [ 154.449329][ T6558] FAULT_INJECTION: forcing a failure. [ 154.449329][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 154.472158][ T6558] CPU: 1 PID: 6558 Comm: syz.1.713 Not tainted syzkaller #0 [ 154.479666][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.489733][ T6558] Call Trace: [ 154.493025][ T6558] [ 154.495961][ T6558] dump_stack_lvl+0x188/0x250 [ 154.500652][ T6558] ? show_regs_print_info+0x20/0x20 [ 154.505869][ T6558] ? load_image+0x410/0x410 [ 154.510394][ T6558] ? __lock_acquire+0x7d40/0x7d40 [ 154.515445][ T6558] should_fail+0x383/0x4b0 [ 154.519882][ T6558] should_failslab+0x5/0x20 [ 154.524395][ T6558] slab_pre_alloc_hook+0x51/0xc0 [ 154.529353][ T6558] __kmalloc+0x6b/0x340 [ 154.533521][ T6558] ? mpi_powm+0x1887/0x2390 [ 154.538042][ T6558] mpi_powm+0x1887/0x2390 [ 154.542407][ T6558] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 154.548578][ T6558] ? mpihelp_cmp+0xb6/0xd0 [ 154.553010][ T6558] ? mpi_cmp+0x1b4/0x290 [ 154.557267][ T6558] rsa_enc+0x28f/0x3c0 [ 154.561362][ T6558] ? rsa_exit+0x20/0x20 [ 154.565537][ T6558] pkcs1pad_verify+0x465/0x670 [ 154.570323][ T6558] public_key_verify_signature+0x87f/0xd40 [ 154.576161][ T6558] ? public_key_free+0x80/0x80 [ 154.580975][ T6558] ? asymmetric_key_id_same+0x63/0xe0 [ 154.586405][ T6558] x509_check_for_self_signed+0x317/0x420 [ 154.592145][ T6558] x509_cert_parse+0x59c/0x7a0 [ 154.596925][ T6558] x509_key_preparse+0x60/0x5d0 [ 154.601792][ T6558] ? down_read+0x1aa/0x2e0 [ 154.606222][ T6558] asymmetric_key_preparse+0xa5/0x140 [ 154.611605][ T6558] key_create_or_update+0x432/0xa40 [ 154.616815][ T6558] ? security_key_permission+0x7c/0xa0 [ 154.622295][ T6558] ? key_type_put+0x20/0x20 [ 154.626824][ T6558] ? lookup_user_key_possessed+0x40/0x40 [ 154.632483][ T6558] ? __might_fault+0xb3/0x110 [ 154.637175][ T6558] __se_sys_add_key+0x34b/0x410 [ 154.642037][ T6558] ? __x64_sys_add_key+0xc0/0xc0 [ 154.647006][ T6558] ? lockdep_hardirqs_on+0x94/0x140 [ 154.652226][ T6558] ? __x64_sys_add_key+0x1c/0xc0 [ 154.657191][ T6558] do_syscall_64+0x4c/0xa0 [ 154.661627][ T6558] ? clear_bhb_loop+0x30/0x80 [ 154.666323][ T6558] ? clear_bhb_loop+0x30/0x80 [ 154.671108][ T6558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.677624][ T6558] RIP: 0033:0x7febef58e159 [ 154.682151][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.702293][ T6558] RSP: 002b:00007febed7e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 154.710736][ T6558] RAX: ffffffffffffffda RBX: 00007febef815fa0 RCX: 00007febef58e159 [ 154.718724][ T6558] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 154.726717][ T6558] RBP: 00007febef62506b R08: 000000000a195442 R09: 0000000000000000 [ 154.734703][ T6558] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 154.742695][ T6558] R13: 00007febef816038 R14: 00007febef815fa0 R15: 00007fff88ba6c68 [ 154.750696][ T6558] [ 154.758786][ T4356] team0 (unregistering): Port device team_slave_0 removed [ 154.786033][ T4356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.822855][ T4356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.945630][ T6563] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6564] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6563] [ 154.986060][ T4356] bond0 (unregistering): Released all slaves [ 155.081374][ T6530] tipc: Enabling of bearer rejected, already enabled [ 155.255720][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.268091][ T6571] loop3: detected capacity change from 0 to 512 [ 155.277208][ T6572] raw_sendmsg: syz.1.717 forgot to set AF_INET. Fix it! [ 155.290735][ T4230] usb 1-1: no configurations [ 155.312765][ T4230] usb 1-1: can't read configurations, error -22 [ 155.522726][ T6578] netlink: 391 bytes leftover after parsing attributes in process `syz.5.720'. [ 155.541230][ T6571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.718: missing EA_INODE flag [ 155.579516][ T6571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.718: error while reading EA inode 2 err=-117 [ 155.648769][ T6571] EXT4-fs (loop3): 1 orphan inode deleted [ 155.672208][ T6571] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 155.822295][ T6582] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.882393][ T6621] tipc: Enabling of bearer rejected, already enabled [ 157.342921][ T6640] ip_tables: iptables: counters copy to user failed while replacing table [ 157.401809][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.734'. [ 157.680476][ T6649] FAULT_INJECTION: forcing a failure. [ 157.680476][ T6649] name failslab, interval 1, probability 0, space 0, times 0 [ 157.752053][ T6649] CPU: 1 PID: 6649 Comm: syz.1.735 Not tainted syzkaller #0 [ 157.759392][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.769554][ T6649] Call Trace: [ 157.772841][ T6649] [ 157.775783][ T6649] dump_stack_lvl+0x188/0x250 [ 157.780475][ T6649] ? show_regs_print_info+0x20/0x20 [ 157.785682][ T6649] ? load_image+0x410/0x410 [ 157.790201][ T6649] ? mark_lock+0x94/0x320 [ 157.794548][ T6649] ? __lock_acquire+0x12df/0x7d40 [ 157.799597][ T6649] should_fail+0x383/0x4b0 [ 157.804122][ T6649] should_failslab+0x5/0x20 [ 157.808652][ T6649] slab_pre_alloc_hook+0x51/0xc0 [ 157.813598][ T6649] kmem_cache_alloc_trace+0x47/0x290 [ 157.818889][ T6649] ? nsim_fib_event_nb+0xd8/0xef0 [ 157.824017][ T6649] nsim_fib_event_nb+0xd8/0xef0 [ 157.828889][ T6649] atomic_notifier_call_chain+0x15d/0x280 [ 157.834708][ T6649] call_fib_notifiers+0x2d/0x60 [ 157.839563][ T6649] fib_table_delete+0xc7a/0xfc0 [ 157.844440][ T6649] ? nexthop_get_nhc_lookup+0x400/0x400 [ 157.850088][ T6649] ? __rwlock_init+0x140/0x140 [ 157.854863][ T6649] ? fib_new_table+0x106/0x2d0 [ 157.859640][ T6649] fib_magic+0x2ea/0x3b0 [ 157.863899][ T6649] ? fib_add_ifaddr+0x5c0/0x5c0 [ 157.868781][ T6649] fib_del_ifaddr+0x1079/0x1480 [ 157.874446][ T6649] fib_inetaddr_event+0xb7/0x1c0 [ 157.879399][ T6649] blocking_notifier_call_chain+0x103/0x1b0 [ 157.885404][ T6649] __inet_del_ifa+0xaac/0x1090 [ 157.890208][ T6649] devinet_ioctl+0x913/0x1ba0 [ 157.895150][ T6649] inet_ioctl+0x2fa/0x460 [ 157.899489][ T6649] ? inet_shutdown+0x370/0x370 [ 157.904263][ T6649] ? kfree+0xef/0x2a0 [ 157.908349][ T6649] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 157.913829][ T6649] sock_do_ioctl+0xfb/0x320 [ 157.918347][ T6649] ? sock_show_fdinfo+0xb0/0xb0 [ 157.923222][ T6649] sock_ioctl+0x48a/0x700 [ 157.927653][ T6649] ? sock_poll+0x420/0x420 [ 157.932088][ T6649] ? bpf_lsm_file_ioctl+0x5/0x10 [ 157.937029][ T6649] ? security_file_ioctl+0x7c/0xa0 [ 157.942152][ T6649] ? sock_poll+0x420/0x420 [ 157.946579][ T6649] __se_sys_ioctl+0xfa/0x170 [ 157.951172][ T6649] do_syscall_64+0x4c/0xa0 [ 157.955596][ T6649] ? clear_bhb_loop+0x30/0x80 [ 157.960280][ T6649] ? clear_bhb_loop+0x30/0x80 [ 157.964969][ T6649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.970870][ T6649] RIP: 0033:0x7febef58e159 [ 157.975292][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.994905][ T6649] RSP: 002b:00007febed7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.003334][ T6649] RAX: ffffffffffffffda RBX: 00007febef815fa0 RCX: 00007febef58e159 [ 158.011317][ T6649] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000005 [ 158.019292][ T6649] RBP: 00007febef62506b R08: 0000000000000000 R09: 0000000000000000 [ 158.027266][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.035242][ T6649] R13: 00007febef816038 R14: 00007febef815fa0 R15: 00007fff88ba6c68 [ 158.043254][ T6649] [ 158.112026][ T4230] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.692156][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.732063][ T4230] usb 4-1: no configurations [ 158.782037][ T4230] usb 4-1: can't read configurations, error -22 [ 159.523611][ T6689] tipc: Enabling of bearer rejected, already enabled [ 159.632186][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 160.269070][ T6694] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6696] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6694] [ 160.422278][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.430564][ T1108] usb 2-1: no configurations [ 160.462897][ T1108] usb 2-1: can't read configurations, error -22 [ 160.547707][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.748'. [ 160.703294][ T6716] cgroup2: Unknown parameter 'D' [ 161.342424][ T6737] tipc: Enabling of bearer rejected, already enabled [ 162.363277][ T6755] sock: sock_timestamping_bind_phc: sock not bind to device [ 162.520797][ T6759] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6763] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6759] [ 163.186238][ T4230] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 163.882090][ T4230] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.889999][ T4230] usb 2-1: no configurations [ 163.915544][ T6801] loop3: detected capacity change from 0 to 512 [ 163.922603][ T4230] usb 2-1: can't read configurations, error -22 [ 164.019848][ T5870] syz.0.500 (5870) used greatest stack depth: 18960 bytes left [ 164.292617][ T6801] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.705169][ T6820] tipc: Enabling of bearer rejected, already enabled [ 165.355405][ T6801] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 165.382566][ T6801] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.773: bg 0: block 248: padding at end of block bitmap is not set [ 165.447674][ T6801] Quota error (device loop3): write_blk: dquota write failed [ 165.544546][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.776'. [ 165.603724][ T6801] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 165.682069][ T6801] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.773: Failed to acquire dquot type 1 [ 165.743506][ T6801] EXT4-fs (loop3): 1 truncate cleaned up [ 165.771634][ T6801] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.392074][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.101342][ T6880] tipc: Enabling of bearer rejected, already enabled [ 167.792122][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 167.810364][ T1108] usb 5-1: no configurations [ 167.826306][ T1108] usb 5-1: can't read configurations, error -22 [ 167.882130][ T6892] netlink: 'syz.3.790': attribute type 4 has an invalid length. [ 168.650188][ T6924] netlink: 56 bytes leftover after parsing attributes in process `syz.3.799'. [ 168.891184][ T6929] ip_tables: iptables: counters copy to user failed while replacing table [ 169.757560][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 170.132148][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.139881][ T1108] usb 5-1: no configurations [ 170.189129][ T1108] usb 5-1: can't read configurations, error -22 [ 171.808247][ T7008] loop5: detected capacity change from 0 to 128 [ 171.882170][ T4511] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 171.902935][ T7008] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.252290][ T4511] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.271485][ T4511] usb 5-1: no configurations [ 172.302090][ T4511] usb 5-1: can't read configurations, error -22 [ 172.898139][ T7022] loop4: detected capacity change from 0 to 512 [ 173.046295][ T26] audit: type=1326 audit(1791120485.301:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.4.829" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98bc77159 code=0x0 [ 174.040132][ T7052] FAULT_INJECTION: forcing a failure. [ 174.040132][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 174.099108][ T7052] CPU: 1 PID: 7052 Comm: syz.5.836 Not tainted syzkaller #0 [ 174.106438][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.116507][ T7052] Call Trace: [ 174.119795][ T7052] [ 174.122734][ T7052] dump_stack_lvl+0x188/0x250 [ 174.127426][ T7052] ? show_regs_print_info+0x20/0x20 [ 174.132646][ T7052] ? load_image+0x410/0x410 [ 174.137174][ T7052] should_fail+0x383/0x4b0 [ 174.141618][ T7052] should_failslab+0x5/0x20 [ 174.146142][ T7052] slab_pre_alloc_hook+0x51/0xc0 [ 174.151096][ T7052] __kmalloc_node_track_caller+0x68/0x3a0 [ 174.156831][ T7052] ? __tcp_send_ack+0x9d/0x5d0 [ 174.161608][ T7052] ? __alloc_skb+0xf4/0x750 [ 174.166126][ T7052] ? __tcp_send_ack+0x9d/0x5d0 [ 174.170907][ T7052] __alloc_skb+0x22c/0x750 [ 174.175341][ T7052] __tcp_send_ack+0x9d/0x5d0 [ 174.179949][ T7052] tcp_rcv_established+0x13db/0x1de0 [ 174.185273][ T7052] ? tcp_check_space+0x880/0x880 [ 174.190224][ T7052] ? rt_is_expired+0x220/0x2a0 [ 174.194998][ T7052] tcp_v4_do_rcv+0x435/0x9b0 [ 174.199611][ T7052] __release_sock+0x1e6/0x460 [ 174.204311][ T7052] release_sock+0x5b/0x1b0 [ 174.208742][ T7052] sk_wait_data+0x203/0x470 [ 174.213276][ T7052] ? __sk_flush_backlog+0x30/0x30 [ 174.218313][ T7052] ? wait_woken+0x1b0/0x1b0 [ 174.222838][ T7052] ? __tcp_send_ack+0x172/0x5d0 [ 174.227703][ T7052] tcp_recvmsg_locked+0xe63/0x2690 [ 174.232858][ T7052] ? tcp_recvmsg+0x760/0x760 [ 174.237457][ T7052] ? __local_bh_enable_ip+0x136/0x1c0 [ 174.242857][ T7052] tcp_recvmsg+0x22a/0x760 [ 174.247285][ T7052] ? rcu_lock_release+0x9/0x20 [ 174.252062][ T7052] ? tcp_recv_timestamp+0x720/0x720 [ 174.257281][ T7052] ? aa_sk_perm+0x7dc/0x910 [ 174.261804][ T7052] inet_recvmsg+0x146/0x200 [ 174.266324][ T7052] ? __fget_files+0x402/0x470 [ 174.271013][ T7052] ? inet_sendpage+0x2e0/0x2e0 [ 174.275915][ T7052] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 174.281317][ T7052] ? security_socket_recvmsg+0x85/0xb0 [ 174.286798][ T7052] __sys_recvfrom+0x396/0x510 [ 174.291500][ T7052] ? __ia32_sys_send+0xb0/0xb0 [ 174.296309][ T7052] ? lock_chain_count+0x20/0x20 [ 174.301184][ T7052] __x64_sys_recvfrom+0xda/0xf0 [ 174.306055][ T7052] do_syscall_64+0x4c/0xa0 [ 174.310488][ T7052] ? clear_bhb_loop+0x30/0x80 [ 174.315184][ T7052] ? clear_bhb_loop+0x30/0x80 [ 174.319881][ T7052] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.325794][ T7052] RIP: 0033:0x7fb5d7196159 [ 174.330222][ T7052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.349837][ T7052] RSP: 002b:00007fb5d53cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 174.358358][ T7052] RAX: ffffffffffffffda RBX: 00007fb5d741e090 RCX: 00007fb5d7196159 [ 174.366356][ T7052] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 174.374346][ T7052] RBP: 00007fb5d722d06b R08: 0000000000000000 R09: fffffffffffffd25 [ 174.382332][ T7052] R10: 00000000c9100120 R11: 0000000000000246 R12: 0000000000000000 [ 174.390316][ T7052] R13: 00007fb5d741e128 R14: 00007fb5d741e090 R15: 00007fff0aab5628 [ 174.398317][ T7052] [ 174.407637][ T7060] loop3: detected capacity change from 0 to 128 [ 174.445978][ T7060] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.713205][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 175.719261][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 175.732343][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 175.801375][ T7123] loop0: detected capacity change from 0 to 1024 [ 175.812171][ T7124] loop1: detected capacity change from 0 to 128 [ 175.893891][ T7124] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.056360][ T7130] tipc: Enabling of bearer rejected, already enabled [ 176.776947][ T7123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.566591][ T4230] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 179.185278][ T7173] loop0: detected capacity change from 0 to 2048 [ 179.256097][ T4178] loop0: p3 < > p4 < > [ 179.260594][ T4178] loop0: partition table partially beyond EOD, truncated [ 179.308769][ T4178] loop0: p3 start 4284289 is beyond EOD, truncated [ 179.387862][ T7173] loop0: p3 < > p4 < > [ 179.438612][ T7173] loop0: partition table partially beyond EOD, truncated [ 179.492531][ T4230] usb 6-1: unable to get BOS descriptor or descriptor too short [ 179.500281][ T4230] usb 6-1: no configurations [ 179.522269][ T4230] usb 6-1: can't read configurations, error -22 [ 179.739640][ T7173] loop0: p3 start 4284289 is beyond EOD, truncated [ 179.838835][ T7209] tipc: Enabling of bearer rejected, already enabled [ 180.947968][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'. [ 181.020864][ T3558] loop0: p3 < > p4 < > [ 181.025283][ T3558] loop0: partition table partially beyond EOD, truncated [ 181.217123][ T3558] loop0: p3 start 4284289 is beyond EOD, truncated [ 181.253181][ T7239] netlink: 'syz.1.881': attribute type 4 has an invalid length. [ 181.626400][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 181.847189][ T7263] loop1: detected capacity change from 0 to 512 [ 182.135982][ T7275] tipc: Started in network mode [ 182.141033][ T7275] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 182.149552][ T7275] tipc: Enabled bearer , priority 1 [ 182.450310][ T7263] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.714428][ T7263] ip_tables: iptables: counters copy to user failed while replacing table [ 182.978568][ T7291] loop5: detected capacity change from 0 to 512 [ 183.193574][ T7291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c11c, mo2=0002] [ 183.203207][ T7291] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.215110][ T7291] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 183.226222][ T7291] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.894: Corrupt directory, running e2fsck is recommended [ 183.262096][ T21] tipc: Node number set to 43690 [ 183.267915][ T7291] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 183.329012][ T7291] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.894: corrupted in-inode xattr [ 183.373018][ T7291] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.894: couldn't read orphan inode 15 (err -117) [ 183.420146][ T7291] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000003,debug,grpjquota=.sb=0x0000000000000001,min_batch_time=0x0000000000000007,jqfmt=vfsv1,grpid,bsddf,errors=continue,noload,,,errors=continue. Quota mode: writeback. [ 183.553224][ T7291] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.619839][ T7291] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 183.664473][ T7291] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.894: Corrupt directory, running e2fsck is recommended [ 183.752226][ T7325] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.850744][ T7325] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 183.875668][ T4266] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 183.916984][ T7327] loop0: detected capacity change from 0 to 512 [ 183.983861][ T7325] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.894: Corrupt directory, running e2fsck is recommended [ 184.063151][ T7291] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 184.132774][ T7291] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 184.162378][ T7291] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.894: Corrupt directory, running e2fsck is recommended [ 184.346105][ T7321] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 184.416121][ T4266] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.483900][ T7343] tipc: Enabling of bearer rejected, already enabled [ 184.908007][ T7327] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,errors=remount-ro,grpjquota=,grpjquota=,. Quota mode: writeback. [ 185.065814][ T4266] usb 2-1: no configurations [ 185.070460][ T4266] usb 2-1: can't read configurations, error -22 [ 185.179473][ T7327] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.450306][ T7365] loop1: detected capacity change from 0 to 164 [ 186.164180][ T7384] rock: directory entry would overflow storage [ 186.170499][ T7384] rock: sig=0x4f50, size=4, remaining=3 [ 186.176228][ T7384] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 186.224664][ T7382] netlink: 'syz.1.913': attribute type 16 has an invalid length. [ 186.232599][ T7382] netlink: 'syz.1.913': attribute type 17 has an invalid length. [ 186.242528][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.251842][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.271354][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.278952][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.286529][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.409841][ T7382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.992098][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 187.197670][ T7412] loop1: detected capacity change from 0 to 2048 [ 187.491524][ T7412] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 187.784495][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.890122][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.948349][ T7405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.997165][ T7405] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.027651][ T7405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.102211][ T7413] tipc: Enabling of bearer rejected, already enabled [ 188.434282][ T7449] loop0: detected capacity change from 0 to 512 [ 188.452678][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.460396][ T21] usb 4-1: no configurations [ 188.465450][ T21] usb 4-1: can't read configurations, error -22 [ 188.476784][ T7449] EXT4-fs (loop0): Ignoring removed nobh option [ 188.546194][ T7450] tipc: Enabling of bearer rejected, already enabled [ 189.214720][ T7449] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 189.223393][ T7449] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 189.232305][ T7449] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.928: inode has both inline data and extents flags [ 189.345100][ T7449] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.928: couldn't read orphan inode 13 (err -117) [ 189.369761][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 189.449328][ T7449] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 190.266705][ T7449] EXT4-fs (loop0): group quota file already specified [ 190.341048][ T7470] netlink: 'syz.5.932': attribute type 10 has an invalid length. [ 190.433626][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.441470][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.521724][ T21] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 190.541405][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.548588][ T7470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.557074][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.564383][ T7470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.589582][ T21] wiimote 0005:057E:0306.0001: New device registered [ 190.661375][ T7481] udevd[7481]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 190.670617][ T7470] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 190.692957][ T7476] wiimote 0005:057E:0306.0001: Device removed [ 191.100984][ T7507] tipc: Enabling of bearer rejected, already enabled [ 192.453100][ T4511] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 192.579997][ T4511] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 192.641156][ T4511] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 192.676833][ T4511] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 192.886062][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.947'. [ 193.012291][ T4230] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 193.226547][ T13] wiimote 0005:057E:0330.0002: unknown main item tag 0x0 [ 193.262322][ T13] wiimote 0005:057E:0330.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 193.306346][ T13] wiimote 0005:057E:0330.0002: New device registered [ 193.350002][ T7539] wiimote 0005:057E:0330.0002: Device removed [ 193.422049][ T4230] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.433200][ T4230] usb 2-1: no configurations [ 193.437829][ T4230] usb 2-1: can't read configurations, error -22 [ 193.471721][ T7544] udevd[7544]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 194.050535][ T7557] netlink: 'syz.4.954': attribute type 10 has an invalid length. [ 194.067983][ T7556] loop1: detected capacity change from 0 to 2048 [ 194.076108][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.083524][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.105178][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.111565][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.164511][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.171642][ T7557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.179226][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.186348][ T7557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.223915][ T7557] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 194.268140][ T7556] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 194.422197][ T7] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2) [ 194.449624][ T7] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 194.488796][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 194.496035][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 194.506105][ T7] Workqueue: events wiimote_init_worker [ 194.511699][ T7] Call Trace: [ 194.514997][ T7] [ 194.517939][ T7] dump_stack_lvl+0x188/0x250 [ 194.522735][ T7] ? show_regs_print_info+0x20/0x20 [ 194.527947][ T7] ? load_image+0x410/0x410 [ 194.532470][ T7] sysfs_warn_dup+0x8a/0xa0 [ 194.536979][ T7] sysfs_do_create_link_sd+0xc0/0x110 [ 194.542358][ T7] device_add+0x83b/0x1050 [ 194.546786][ T7] __power_supply_register+0x882/0xa50 [ 194.550464][ T7572] loop0: detected capacity change from 0 to 512 [ 194.552271][ T7] wiimod_battery_probe+0x1ff/0x3a0 [ 194.552318][ T7] ? _find_next_bit+0x1a9/0x200 [ 194.552340][ T7] ? wiimod_rumble_play+0x150/0x150 [ 194.573883][ T7] ? input_ff_create_memless+0x2b8/0x580 [ 194.579538][ T7] wiimote_init_worker+0x12a1/0x2cc0 [ 194.584854][ T7] ? wiimote_queue_worker+0x420/0x420 [ 194.590249][ T7] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 194.596256][ T7] ? __lock_acquire+0x7d40/0x7d40 [ 194.601299][ T7] ? read_lock_is_recursive+0x10/0x10 [ 194.606684][ T7] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 194.612596][ T7] ? _raw_spin_unlock_irq+0x1f/0x40 [ 194.617916][ T7] process_one_work+0x867/0xff0 [ 194.622796][ T7] ? worker_detach_from_pool+0x240/0x240 [ 194.628432][ T7] ? lockdep_hardirqs_off+0x70/0x100 [ 194.633810][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.638834][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.644382][ T7] ? wq_worker_running+0x97/0x170 [ 194.649400][ T7] worker_thread+0xad7/0x12a0 [ 194.654093][ T7] kthread+0x42e/0x520 [ 194.658149][ T7] ? rcu_lock_release+0x20/0x20 [ 194.662986][ T7] ? kthread_blkcg+0xd0/0xd0 [ 194.667561][ T7] ret_from_fork+0x1f/0x30 [ 194.671979][ T7] [ 194.702136][ T7572] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 194.809838][ T7572] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,acl,,errors=continue. Quota mode: writeback. [ 194.881665][ T7572] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.560517][ T7] wiimote 0005:057E:0330.0002: cannot register battery device [ 195.843805][ T7590] device syzkaller0 entered promiscuous mode [ 195.868307][ T7590] tipc: Enabled bearer , priority 0 [ 195.900639][ T7589] tipc: Resetting bearer [ 195.922467][ T7589] tipc: Disabling bearer [ 195.937172][ T7593] loop0: detected capacity change from 0 to 1764 [ 196.048553][ T7595] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 196.157086][ T7598] loop1: detected capacity change from 0 to 1024 [ 196.201713][ T7600] sock: sock_set_timeout: `syz.4.965' (pid 7600) tries to set negative timeout [ 196.284685][ T7598] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.658876][ T7606] netlink: 'syz.0.964': attribute type 16 has an invalid length. [ 196.666983][ T7606] netlink: 'syz.0.964': attribute type 3 has an invalid length. [ 196.674957][ T7606] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.964'. [ 197.738331][ T7598] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 198.745009][ T7615] tipc: Enabling of bearer rejected, already enabled [ 199.816965][ T7623] ODEBUG: Out of memory. ODEBUG disabled [ 203.586824][ T7629] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 203.681266][ T7629] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 203.735429][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 203.902024][ T1108] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 204.067775][ T7626] tipc: Enabling of bearer rejected, already enabled [ 204.332854][ T7645] sock: sock_set_timeout: `syz.0.977' (pid 7645) tries to set negative timeout [ 204.409400][ T7648] loop3: detected capacity change from 0 to 2048 [ 204.522274][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.532082][ T1108] usb 2-1: no configurations [ 204.536696][ T1108] usb 2-1: can't read configurations, error -22 [ 207.015485][ T7652] netlink: 'syz.4.980': attribute type 16 has an invalid length. [ 207.015509][ T7652] netlink: 'syz.4.980': attribute type 3 has an invalid length. [ 207.015522][ T7652] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.980'. [ 207.489364][ T7659] loop1: detected capacity change from 0 to 1024 [ 207.541833][ T7659] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.588867][ T7667] device syzkaller0 entered promiscuous mode [ 207.616666][ T7667] tipc: Enabled bearer , priority 0 [ 207.641415][ T7668] loop0: detected capacity change from 0 to 1024 [ 207.650531][ T7664] tipc: Resetting bearer [ 207.913445][ T7664] tipc: Disabling bearer [ 207.931880][ T7670] tipc: Enabling of bearer rejected, already enabled [ 208.041153][ T7659] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 208.076772][ T7668] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.149543][ T7668] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 210.210518][ T7690] loop5: detected capacity change from 0 to 1764 [ 210.571746][ T7699] sock: sock_set_timeout: `syz.3.991' (pid 7699) tries to set negative timeout [ 211.088855][ T7704] tipc: Enabling of bearer rejected, already enabled [ 212.207227][ T7722] netlink: 'syz.5.994': attribute type 16 has an invalid length. [ 212.215093][ T7722] netlink: 'syz.5.994': attribute type 3 has an invalid length. [ 212.222961][ T7722] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.994'. [ 212.394138][ T7724] tipc: Enabling of bearer rejected, already enabled [ 212.437340][ T7719] loop1: detected capacity change from 0 to 2048 [ 213.267928][ T7717] loop0: detected capacity change from 0 to 1024 [ 214.451960][ T7717] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.848999][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 215.017038][ T7717] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 215.094393][ T7738] loop1: detected capacity change from 0 to 1764 [ 215.147176][ T7745] FAULT_INJECTION: forcing a failure. [ 215.147176][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 215.166100][ T7745] CPU: 0 PID: 7745 Comm: syz.5.1006 Not tainted syzkaller #0 [ 215.173605][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.183929][ T7745] Call Trace: [ 215.187595][ T7745] [ 215.190637][ T7745] dump_stack_lvl+0x188/0x250 [ 215.195340][ T7745] ? show_regs_print_info+0x20/0x20 [ 215.201104][ T7745] ? load_image+0x410/0x410 [ 215.206002][ T7745] ? __lock_acquire+0x7d40/0x7d40 [ 215.211185][ T7745] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.217296][ T7745] should_fail+0x383/0x4b0 [ 215.221739][ T7745] should_failslab+0x5/0x20 [ 215.226251][ T7745] slab_pre_alloc_hook+0x51/0xc0 [ 215.231235][ T7745] ? getname_flags+0xb7/0x4f0 [ 215.236201][ T7745] kmem_cache_alloc+0x3d/0x280 [ 215.240983][ T7745] getname_flags+0xb7/0x4f0 [ 215.245601][ T7745] do_sys_openat2+0xdd/0x500 [ 215.250383][ T7745] ? __lock_acquire+0x7d40/0x7d40 [ 215.255423][ T7745] ? do_sys_open+0xe0/0xe0 [ 215.259850][ T7745] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.266292][ T7745] ? lock_chain_count+0x20/0x20 [ 215.271188][ T7745] __x64_sys_openat+0x135/0x160 [ 215.276276][ T7745] do_syscall_64+0x4c/0xa0 [ 215.280805][ T7745] ? clear_bhb_loop+0x30/0x80 [ 215.285516][ T7745] ? clear_bhb_loop+0x30/0x80 [ 215.290312][ T7745] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.296311][ T7745] RIP: 0033:0x7fb5d715698e [ 215.300780][ T7745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.320418][ T7745] RSP: 002b:00007fb5d53edec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.328937][ T7745] RAX: ffffffffffffffda RBX: 00007fb5d53ee6c0 RCX: 00007fb5d715698e [ 215.336931][ T7745] RDX: 0000000000000000 RSI: 00007fb5d53edf90 RDI: ffffffffffffff9c [ 215.344920][ T7745] RBP: 00007fb5d722d06b R08: 0000000000000000 R09: 0000000000000000 [ 215.352905][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.360985][ T7745] R13: 00007fb5d741e038 R14: 00007fb5d741dfa0 R15: 00007fff0aab5628 [ 215.368978][ T7745] [ 215.423717][ T7747] loop3: detected capacity change from 0 to 1024 [ 215.496729][ T7749] tipc: Enabling of bearer rejected, already enabled [ 216.192248][ T7747] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.252832][ T7763] loop0: detected capacity change from 0 to 256 [ 216.268505][ T7747] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 216.393760][ T7769] loop1: detected capacity change from 0 to 1024 [ 216.437623][ T7769] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.459298][ T7787] loop0: detected capacity change from 0 to 2048 [ 218.163277][ T7791] loop1: detected capacity change from 0 to 512 [ 218.325983][ T26] audit: type=1326 audit(1791120530.581:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.1.1021" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febef58e159 code=0x0 [ 218.373379][ T7787] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 218.720719][ T7812] tipc: Enabling of bearer rejected, already enabled [ 219.413979][ T7815] [ 219.416367][ T7815] ====================================================== [ 219.423435][ T7815] WARNING: possible circular locking dependency detected [ 219.430572][ T7815] syzkaller #0 Not tainted [ 219.435123][ T7815] ------------------------------------------------------ [ 219.442184][ T7815] syz.4.1029/7815 is trying to acquire lock: [ 219.448023][ T7819] loop5: detected capacity change from 0 to 1024 [ 219.448174][ T7815] ffff88807a388918 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 219.465931][ T7815] [ 219.465931][ T7815] but task is already holding lock: [ 219.473308][ T7815] ffff88807ddba2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 219.482490][ T7815] [ 219.482490][ T7815] which lock already depends on the new lock. [ 219.482490][ T7815] [ 219.492904][ T7815] [ 219.492904][ T7815] the existing dependency chain (in reverse order) is: [ 219.501938][ T7815] [ 219.501938][ T7815] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 219.509689][ T7815] lock_sock_nested+0x44/0x100 [ 219.514985][ T7815] smc_listen_out+0xd4/0x3c0 [ 219.520144][ T7815] smc_listen_work+0x52a/0xd10 [ 219.525438][ T7815] process_one_work+0x867/0xff0 [ 219.530841][ T7815] worker_thread+0xad7/0x12a0 [ 219.536168][ T7815] kthread+0x42e/0x520 [ 219.540771][ T7815] ret_from_fork+0x1f/0x30 [ 219.545712][ T7815] [ 219.545712][ T7815] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 219.556013][ T7815] __lock_acquire+0x38f7/0x7d40 [ 219.561396][ T7815] lock_acquire+0x19f/0x400 [ 219.566427][ T7815] __flush_work+0x116/0x210 [ 219.571456][ T7815] __cancel_work_timer+0x3f4/0x560 [ 219.577110][ T7815] smc_clcsock_release+0x5c/0xe0 [ 219.582595][ T7815] __smc_release+0x644/0x7b0 [ 219.587721][ T7815] smc_close_non_accepted+0xd1/0x1f0 [ 219.593542][ T7815] smc_close_active+0xae2/0xea0 [ 219.598910][ T7815] __smc_release+0x9c/0x7b0 [ 219.603923][ T7815] smc_release+0x2c1/0x520 [ 219.608877][ T7815] sock_close+0xbf/0x210 [ 219.613650][ T7815] __fput+0x212/0x8c0 [ 219.618159][ T7815] task_work_run+0x125/0x1a0 [ 219.623293][ T7815] exit_to_user_mode_loop+0x10f/0x130 [ 219.629213][ T7815] exit_to_user_mode_prepare+0xee/0x180 [ 219.635282][ T7815] syscall_exit_to_user_mode+0x16/0x40 [ 219.641253][ T7815] do_syscall_64+0x58/0xa0 [ 219.646182][ T7815] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.652592][ T7815] [ 219.652592][ T7815] other info that might help us debug this: [ 219.652592][ T7815] [ 219.662818][ T7815] Possible unsafe locking scenario: [ 219.662818][ T7815] [ 219.670254][ T7815] CPU0 CPU1 [ 219.675623][ T7815] ---- ---- [ 219.680978][ T7815] lock(sk_lock-AF_SMC/1); [ 219.685481][ T7815] lock((work_completion)(&new_smc->smc_listen_work)); [ 219.694919][ T7815] lock(sk_lock-AF_SMC/1); [ 219.701957][ T7815] lock((work_completion)(&new_smc->smc_listen_work)); [ 219.708996][ T7815] [ 219.708996][ T7815] *** DEADLOCK *** [ 219.708996][ T7815] [ 219.717136][ T7815] 2 locks held by syz.4.1029/7815: [ 219.722240][ T7815] #0: ffff88805e5c7a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 219.732428][ T7815] #1: ffff88807ddba2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 219.741817][ T7815] [ 219.741817][ T7815] stack backtrace: [ 219.747717][ T7815] CPU: 0 PID: 7815 Comm: syz.4.1029 Not tainted syzkaller #0 [ 219.755104][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.765162][ T7815] Call Trace: [ 219.768439][ T7815] [ 219.771402][ T7815] dump_stack_lvl+0x188/0x250 [ 219.776106][ T7815] ? load_image+0x410/0x410 [ 219.780809][ T7815] ? show_regs_print_info+0x20/0x20 [ 219.786010][ T7815] ? print_circular_bug+0x12b/0x1a0 [ 219.791228][ T7815] check_noncircular+0x2f8/0x400 [ 219.796163][ T7815] ? look_up_lock_class+0x71/0x110 [ 219.801267][ T7815] ? print_deadlock_bug+0x5d0/0x5d0 [ 219.806454][ T7815] ? lockdep_lock+0xf1/0x1f0 [ 219.811041][ T7815] ? mark_lock+0x94/0x320 [ 219.815367][ T7815] ? _find_first_zero_bit+0xd1/0xf0 [ 219.820567][ T7815] __lock_acquire+0x38f7/0x7d40 [ 219.825434][ T7815] ? verify_lock_unused+0x140/0x140 [ 219.830630][ T7815] ? mark_lock+0x94/0x320 [ 219.834949][ T7815] ? __lock_acquire+0x13b3/0x7d40 [ 219.839972][ T7815] ? lockdep_lock+0xf1/0x1f0 [ 219.844559][ T7815] lock_acquire+0x19f/0x400 [ 219.849059][ T7815] ? __flush_work+0xfa/0x210 [ 219.853677][ T7815] ? read_lock_is_recursive+0x10/0x10 [ 219.859062][ T7815] __flush_work+0x116/0x210 [ 219.863559][ T7815] ? __flush_work+0xfa/0x210 [ 219.868179][ T7815] ? flush_work+0x20/0x20 [ 219.872524][ T7815] ? try_to_grab_pending+0xfb/0x820 [ 219.877708][ T7815] ? mark_lock+0x94/0x320 [ 219.882019][ T7815] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 219.887984][ T7815] ? lock_chain_count+0x20/0x20 [ 219.892822][ T7815] ? mark_lock+0x94/0x320 [ 219.897143][ T7815] ? __cancel_work_timer+0x36a/0x560 [ 219.902419][ T7815] __cancel_work_timer+0x3f4/0x560 [ 219.907540][ T7815] ? cancel_work_sync+0x20/0x20 [ 219.912395][ T7815] ? __local_bh_enable_ip+0x136/0x1c0 [ 219.917770][ T7815] ? lockdep_hardirqs_on+0x94/0x140 [ 219.922955][ T7815] ? __local_bh_enable_ip+0x136/0x1c0 [ 219.928313][ T7815] ? _local_bh_enable+0xa0/0xa0 [ 219.933146][ T7815] smc_clcsock_release+0x5c/0xe0 [ 219.938290][ T7815] __smc_release+0x644/0x7b0 [ 219.942891][ T7815] smc_close_non_accepted+0xd1/0x1f0 [ 219.948191][ T7815] smc_close_active+0xae2/0xea0 [ 219.953148][ T7815] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 219.958782][ T7815] __smc_release+0x9c/0x7b0 [ 219.963392][ T7815] smc_release+0x2c1/0x520 [ 219.967803][ T7815] sock_close+0xbf/0x210 [ 219.972049][ T7815] ? sock_mmap+0x90/0x90 [ 219.976380][ T7815] __fput+0x212/0x8c0 [ 219.980370][ T7815] task_work_run+0x125/0x1a0 [ 219.984959][ T7815] exit_to_user_mode_loop+0x10f/0x130 [ 219.990328][ T7815] exit_to_user_mode_prepare+0xee/0x180 [ 219.995872][ T7815] syscall_exit_to_user_mode+0x16/0x40 [ 220.001327][ T7815] do_syscall_64+0x58/0xa0 [ 220.005737][ T7815] ? clear_bhb_loop+0x30/0x80 [ 220.010493][ T7815] ? clear_bhb_loop+0x30/0x80 [ 220.015190][ T7815] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.021087][ T7815] RIP: 0033:0x7fb98bc77159 [ 220.025503][ T7815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.045109][ T7815] RSP: 002b:00007ffdab0c60b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 220.053705][ T7815] RAX: 0000000000000000 RBX: 00007ffdab0c61a0 RCX: 00007fb98bc77159 [ 220.061691][ T7815] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 220.069748][ T7815] RBP: 0000000000035892 R08: 0000000000000001 R09: 0000000000000000 [ 220.077713][ T7815] R10: 0000001b31820000 R11: 0000000000000246 R12: 00007ffdab0c61e0 [ 220.085763][ T7815] R13: 00007fb98befefac R14: 0000000000035924 R15: 00007fb98befefa0 [ 220.093918][ T7815] [ 220.147416][ T7819] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.