last executing test programs: 25m15.387738027s ago: executing program 0 (id=1102): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="14002b"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004084) 25m15.331940588s ago: executing program 0 (id=1103): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d5809042c"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) 25m13.476891114s ago: executing program 0 (id=1129): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xd) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 25m13.444600595s ago: executing program 0 (id=1131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8001, 0x0) r3 = eventfd2(0xfffffffe, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={r2, 0xffff, 0x2, r3}) close(r1) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x5b}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40002}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = eventfd(0x4) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r6, 0x8, 0x2, r2}) r7 = dup3(r4, r5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) r8 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r8) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0x0) ptrace(0x4207, r8) ptrace$peeksig(0x4209, r8, &(0x7f0000000240)={0x3, 0x1, 0x5}, &(0x7f0000000980)=[{}, {}, {}, {}, {}]) 25m12.847418356s ago: executing program 0 (id=1139): fsopen(0x0, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2809}], 0x1, 0x0, 0x0, 0x9c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) mlockall(0x2) 25m12.607683901s ago: executing program 0 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0f12, 0x1}}) 25m12.571258831s ago: executing program 32 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0f12, 0x1}}) 24m4.745276448s ago: executing program 4 (id=1615): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 24m4.745006038s ago: executing program 4 (id=1616): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f00000000c0)={[{@dots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@nfs}, {@nodots}, {@fat=@showexec}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@nodots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") 24m4.704593319s ago: executing program 4 (id=1617): creat(&(0x7f0000000340)='./file0\x00', 0x101) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) flock(0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 24m3.823925126s ago: executing program 4 (id=1624): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000580)='./file1\x00', 0x219) 24m2.647661659s ago: executing program 4 (id=1631): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 24m2.287718526s ago: executing program 4 (id=1638): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)={0x40, 0x10, 0xc, "008000010a0100130a000080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x40, 0x6, 0x28, "42a8644c28e73063a3f65be48d0e3a13c71311db90aa392d163f8cb83ff041feae3c7e374bddce7c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x4, "b15ef637"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24m2.287535986s ago: executing program 33 (id=1638): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)={0x40, 0x10, 0xc, "008000010a0100130a000080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x40, 0x6, 0x28, "42a8644c28e73063a3f65be48d0e3a13c71311db90aa392d163f8cb83ff041feae3c7e374bddce7c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x4, "b15ef637"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.219673056s ago: executing program 5 (id=5558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x200000f5, &(0x7f00000004c0)=[{0x2, 0x80, 0x67, 0x81}, {0x6, 0x0, 0x2, 0x6}, {0x7, 0xa, 0x8, 0x8}, {0x4, 0x0, 0x22, 0x1ff}, {0xfab, 0x2, 0x9, 0xeee7}, {0xfff7, 0xfd, 0x6, 0x40}, {0x1ff, 0x8, 0x7, 0x7}, {0x8, 0x4, 0xf8, 0xb}, {0x3, 0x40, 0x5, 0x10001}, {0xfffe, 0x3}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x3000042, &(0x7f0000000380)={[{@none}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="654e0538288eac318eb10cae08b72ea33fba493c5d347c37a9aef3f4c88de65c9f5cb29f2849ab460567942ea0cc552d26ee695ec8c49ffb58a0e774246775288c6e6eca0ab0383e", 0x48, 0x40, 0x0, 0xfffffffffffffe1f) unshare(0x40020000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 15.902377102s ago: executing program 5 (id=5564): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x6, 0x6, 0x5}}]}, 0x40}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414aa0c0002800500010000000000240002801400010008000100ac14140008000200ac1414aa0c0002800600010000000000080007400000000004000d807d198c367d62003d70499218b67fb886e0d18acf62daf9db9d4779582b930c3796b9d7"], 0x68}}, 0x0) 12.145778015s ago: executing program 5 (id=5569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x200000f5, &(0x7f00000004c0)=[{0x2, 0x80, 0x67, 0x81}, {0x6, 0x0, 0x2, 0x6}, {0x7, 0xa, 0x8, 0x8}, {0x4, 0x0, 0x22, 0x1ff}, {0xfab, 0x2, 0x9, 0xeee7}, {0xfff7, 0xfd, 0x6, 0x40}, {0x1ff, 0x8, 0x7, 0x7}, {0x8, 0x4, 0xf8, 0xb}, {0x3, 0x40, 0x5, 0x10001}, {0xfffe, 0x3}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x3000042, &(0x7f0000000380)={[{@none}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="654e0538288eac318eb10cae08b72ea33fba493c5d347c37a9aef3f4c88de65c9f5cb29f2849ab460567942ea0cc552d26ee695ec8c49ffb58a0e774246775288c6e6eca0ab0383e", 0x48, 0x40, 0x0, 0xfffffffffffffe1f) unshare(0x40020000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 9.055613855s ago: executing program 5 (id=5577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mount$incfs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x40, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x4, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008c}, 0x4000080) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x8932, &(0x7f0000000500)={'gre0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x2a) 8.337691228s ago: executing program 6 (id=5578): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x161842, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 7.767719259s ago: executing program 5 (id=5581): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x62802, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x39b, @remote}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000002c0), 0xfe, 0x4fb, &(0x7f0000000880)="$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") 7.425184336s ago: executing program 6 (id=5582): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 6.986215525s ago: executing program 1 (id=5584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007000000080000000500000080000000", @ANYRES32, @ANYBLOB="0000000000000000f9ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="112c1440633e673fb09a17f88c795d8dca77118ea409f37791efb518926393", @ANYBLOB], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRESOCT=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152c, &(0x7f0000001f80)="$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") socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000280)='5', 0x1}], 0x1}, 0x4040005) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r9, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='finish_task_reaping\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.034346033s ago: executing program 3 (id=5585): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x700, 0x80, 0x4, 0xe, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @private=0xa010100, {[@cipso={0x86, 0x27, 0x3, [{0x6, 0xc, "960f86fab907bbc722f8"}, {0x6, 0xb, "b6b0d4c49f79ed22f9"}, {0x2, 0xa, "42d6c9909b94445a"}]}, @timestamp_addr={0x44, 0x2c, 0xae, 0x1, 0x6, [{@multicast2, 0x2}, {@remote, 0x3ff}, {@multicast1, 0x4}, {@empty, 0x5cc}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xec6}]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000001440)=ANY=[@ANYRESOCT=r6], 0x31) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") bind$unix(r3, &(0x7f0000000440)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file1\x00'}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) statfs(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x23ce00c, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x210883, &(0x7f0000000ac0)={[{@nouid32}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 6.028483483s ago: executing program 5 (id=5586): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000001a6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFMTU(r3, 0x8995, &(0x7f0000000180)={'veth0_to_bond\x00', 0xe4c0000}) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x6, 0x6, 0x8, 0xfffffff9, 0x2, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x8700, 0x2, 0x1}}) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000b40)) bind$xdp(r6, &(0x7f0000000b00)={0x2c, 0x0, r8, 0x16, r9}, 0x10) timer_create(0x0, 0x0, 0x0) listxattr(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r10}, &(0x7f0000000400), &(0x7f0000000500)=r11}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r12, 0x0, 0xffbf) 5.519749273s ago: executing program 6 (id=5587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x200000f5, &(0x7f00000004c0)=[{0x2, 0x80, 0x67, 0x81}, {0x6, 0x0, 0x2, 0x6}, {0x7, 0xa, 0x8, 0x8}, {0x4, 0x0, 0x22, 0x1ff}, {0xfab, 0x2, 0x9, 0xeee7}, {0xfff7, 0xfd, 0x6, 0x40}, {0x1ff, 0x8, 0x7, 0x7}, {0x8, 0x4, 0xf8, 0xb}, {0x3, 0x40, 0x5, 0x10001}, {0xfffe, 0x3}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x3000042, &(0x7f0000000380)={[{@none}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="654e0538288eac318eb10cae08b72ea33fba493c5d347c37a9aef3f4c88de65c9f5cb29f2849ab460567942ea0cc552d26ee695ec8c49ffb58a0e774246775288c6e6eca0ab0383e", 0x48, 0x40, 0x0, 0xfffffffffffffe1f) unshare(0x40020000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 5.359925316s ago: executing program 1 (id=5589): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x401, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0xb, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xab, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x3, 0xf], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x4, 0x57, 0x5, 0x4, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$key(0xf, 0x3, 0x2) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9d5c000) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x14}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0xff81, 0x3f00, 0x5, 0x0}) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4.185734579s ago: executing program 2 (id=5590): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') fchdir(r0) lstat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (fail_nth: 1) 4.184291339s ago: executing program 6 (id=5591): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.529666421s ago: executing program 1 (id=5592): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x10, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040010) (fail_nth: 1) 3.249071467s ago: executing program 3 (id=5593): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x10, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040010) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@mcast2, 0x3b, r1}) 3.157840758s ago: executing program 2 (id=5594): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000180)={[{@lazytime}, {}, {@acl}, {@nolazytime}, {@fastboot}, {@discard_unit_section}, {@disable_ext_identify}, {@lazytime}, {@whint_mode_user}, {@data_flush}, {}, {@background_gc_off}, {@six_active_logs}, {@background_gc_off}, {@data_flush}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nousep_xattr#\xc5\xf8\xf5\xfe\a\xc7\xa5\x17\xe1\xb8\xd3\'\xe5\xe4\x81b\v\x91aOtR\xdb\xd6u\xfc-\xb3\xf4\xf4A-\xf7\x1f7;:\xa4fZ\xf2\t\xafrkR\xef\xe7w\xfc\xd0J`\xcb\xf48\x895b\xb7n\xfe\x8a\xc6K\xb7g\x99\xca,\xdb\xc3~\xe4\xaa9W\xa2\xfe\xaf\xce\"\xc1m\xc8\xecq\xfbG\x97AK\xdf\xa7D\x8f\xa6\xe2\xc4L7\x8e\xf5%\xac\x84n\xe1\x13\xa1u\xf00\xbe)c\x82I\xe6Pu\xaaG1-\x12\x14\xe7\x12\xd6[\x8a>\xbbc-\x11\x15\x02\xe0bW\xfew\xb3\xe4@\xf9\x94.\xf9\x00\xfa\x17\xeb8>\v\x04|\x0eYZ\xd3\x06\xb4\xdb:fKW\xc9\xebhn\x82`'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x15x\xd38/vjf\xfa\xb0\xe4\x00>\x85m^\xf4\x16\x18d\a\tA\xa2\xee\xdf\xf4H\xc3{I\xe8\x1c7\x1e\xf8&\xf9\x1db\xc1-\x7f\xc19\xdd\xf7\x90\vW&]\xae\x1c\xfc\xc5\xf8\xbc\xb3yZ\x89\xc4E\xc7I\xb2\xb8\x1d2\x99\xccg9\x92Y\xe3\xec\xdaI\xfc\xe5\xdb\x8b\xd9\xbdy\x80\xee\xa8\xdf\x8bMO\f\xc8\xfcdNJ\x02\x1bj\xd0\x85S\x1c\x8a\x17h!\xde\x19\xc5\xc1\xbf\x9c$\x1a\xea@2o \xc5\x12m\x86\xb5T\xbb\xf0\x8c\xf9\x98#\xcd?\x03\xbc\xd6\xf0\xbd\xbe\x88\x84\f\xacw\x9bl\x1a\xae\x9a;\xf5U\x93\xc4\x06\x13 \xc9\x01\xd1P\x80\xdf[\x97\x84\'Ec\xaaa\xedJ\xb0\xbd \xf0\xad\xe2\xf1\x9f\xbd\xf1-\x95c\b\x00\fc.\x0e\x8d\xfb/\xf0\xa3&\xeblU\xe8A\x174>\xe1\xdd\xbfbV9\x16\xeaY%\xad}\xd2GB\r\xdb\xb3\x14^\xec\xc7\xb5\x86\x0e\x1a\xb6\x12_\t\xdf5l;\xdbY\x88\x8b'}}]}, 0x1, 0x5543, &(0x7f0000005e40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_FLAGS_EXT={0x8}]}, 0x24}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0xabaed49750a45545) 3.06844282s ago: executing program 1 (id=5595): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffd4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 3.040114791s ago: executing program 6 (id=5596): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x62802, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x39b, @remote}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000002c0), 0xfe, 0x4fb, &(0x7f0000000880)="$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") 2.947602243s ago: executing program 3 (id=5597): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 2.06985522s ago: executing program 1 (id=5598): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) (fail_nth: 1) 1.892556793s ago: executing program 6 (id=5599): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r2, 0x80081270, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000841}, 0x4000040) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb"], 0x0) 1.642341198s ago: executing program 3 (id=5600): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xf, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000a40)='./file1\x00', 0x8181) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071122800000000009500000000000000c3a21c38a58adc73bd5e545368734a05471f4aa7a41055605643054a4e06d12f057eaf3cca921b8d068c52e29860bd458ba2e2b2c96e9cbe8c77a93311d5060fc8dcf929175a47cb29ca6990baf916ba1249ae9ff4dc3b5eac48f10abc05f97fcf5683b94daf821d9fcf7be499e78c0708cb7fb5ad2a09aec57ce9b2a72dd934f9b842c1d1559e32c450ffde385d2a731001363f14970e9251c3a7"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6b}, 0x94) recvmmsg(r1, &(0x7f0000012540)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/14, 0xe}], 0x2}, 0x2}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095", @ANYRES8=r1, @ANYBLOB="3a94541152f5955857a81067eac6b66e0a513e276cc0616f61df87cc38f398da7abdbc79a2a76bd9", @ANYRESHEX=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143042, 0x2a0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {0xfff7, 0xf7, 0x8944, 0xfc2}, 0x3a, [0xfc, 0xa, 0x10, 0x6, 0x1, 0x6e3f, 0x8664, 0x8, 0x5, 0x800, 0x4, 0x1, 0x9b, 0x8, 0x55, 0x5, 0x9, 0xfd, 0x8, 0x400, 0xb61b, 0x7, 0x8, 0x5, 0x3, 0x8000, 0x8, 0x7, 0x80000000, 0x7, 0x6, 0x9, 0x0, 0x5, 0xde, 0x2, 0x4ba, 0xae75, 0xfffffffb, 0x3, 0xfffff800, 0xfffffffa, 0xffff0001, 0x4, 0x40, 0x8000fe, 0xff, 0x6, 0x4, 0x80000000, 0x400, 0x10, 0xff5, 0x9fffff, 0x7, 0x0, 0x4, 0x1648, 0x9, 0x1, 0x2, 0xfffffffc, 0x8, 0xf62], [0xc3, 0x9, 0x8a, 0x0, 0x9, 0x80000000, 0x0, 0x6, 0x5, 0x18a3, 0x7, 0x0, 0x8001, 0x81, 0x101, 0xfffffffc, 0x2, 0x3ff, 0x5, 0x1, 0x6, 0x9, 0x4, 0x8, 0x4, 0x1, 0x3fb, 0x8, 0x5, 0x800, 0x2, 0x91, 0x80, 0x7, 0x8, 0x8, 0x7, 0x40800000, 0x8, 0x80000000, 0x8001, 0x6b, 0x0, 0x8, 0x7, 0x8bd2, 0x2, 0x8, 0xff, 0x0, 0x4, 0x1732, 0x0, 0x75, 0x10, 0x0, 0x1, 0x1ff, 0x3, 0xffffff01, 0x1, 0x2, 0x4, 0x5], [0x8, 0x9, 0xffff, 0x80000001, 0x4, 0xf, 0x10001, 0xc9, 0x8, 0x7, 0x0, 0x5, 0xeb, 0x8, 0xd, 0xa, 0x2, 0x8, 0x5, 0x7, 0x49, 0x7fffffff, 0x8, 0x7ff, 0x596, 0x3, 0x4, 0x80000000, 0x205, 0x5, 0xa, 0x3, 0xc, 0x4, 0x1000, 0x5025, 0x331, 0x0, 0x8, 0x8, 0x2, 0x5, 0x0, 0x80, 0x0, 0x6, 0x0, 0x1ff, 0x81, 0x2, 0x2, 0x2, 0x7fffffff, 0x1, 0xffff, 0x5, 0x5, 0x3, 0x9, 0x7ff, 0x2, 0x7, 0x5, 0x3fc8], [0x397, 0x7, 0x0, 0x508, 0x19, 0x0, 0x9ee, 0xffff, 0x3, 0x8, 0x5, 0xffff00, 0xfffffff2, 0x3, 0xb, 0x1, 0x9b50, 0x0, 0x3, 0x28, 0xd, 0x8, 0xfffffffe, 0x5, 0xf, 0xf, 0x3, 0x200, 0xe603, 0x2, 0x9, 0x5, 0x8001, 0x2, 0x40, 0x556, 0x101, 0x1, 0xa, 0x81, 0x104, 0xb5, 0x2, 0xd7c, 0x3, 0x1, 0x1, 0xfe, 0x400, 0x0, 0x1, 0x1, 0x1511, 0x4, 0x2, 0x21, 0xffff0000, 0x6, 0x9, 0x81, 0x3, 0x7, 0xb19, 0x9]}, 0x45c) fallocate(r5, 0x0, 0x0, 0x8000c62) lseek(r4, 0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000008000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000080000800000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB="00000000d3ec66ecc053c543da2e5f", @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r6, &(0x7f0000000740), &(0x7f0000000480)=""/243}, 0x20) pivot_root(0x0, 0x0) 947.684122ms ago: executing program 1 (id=5601): r0 = socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 861.702323ms ago: executing program 2 (id=5602): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 800.387654ms ago: executing program 2 (id=5603): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (fail_nth: 1) 503.72143ms ago: executing program 3 (id=5604): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) 348.235293ms ago: executing program 2 (id=5605): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e1f}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e1f}]}}}]}, 0x40}}, 0x0) r4 = inotify_init1(0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20044005) fcntl$getownex(r4, 0x5, 0x0) (async) fcntl$getownex(r4, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r7, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) socket$inet(0x2, 0x2, 0x0) (async) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r8, &(0x7f0000000280)={0x2, 0x5e21, @broadcast}, 0x10) (async) bind$inet(r8, &(0x7f0000000280)={0x2, 0x5e21, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000280), 0x0) (async) pipe2$9p(&(0x7f0000000280), 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r9, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x6}) fcntl$lock(r9, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x80000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000240)={@local, 0x71, r10}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 48.575659ms ago: executing program 2 (id=5606): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') (fail_nth: 1) pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) 0s ago: executing program 3 (id=5607): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x1, 0x2}, 0x20) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r2, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x58, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4da}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x95}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44085}, 0x4008000) kernel console output (not intermixed with test programs): 19906] loop6: detected capacity change from 0 to 128 [ 1755.322772][T19918] loop5: detected capacity change from 0 to 512 [ 1756.131327][T19919] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1756.207833][T19918] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1756.249776][T19918] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1756.308128][T19918] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.5161: bad orphan inode 131083 [ 1756.318875][T19918] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1757.207695][T19933] tipc: Enabling of bearer rejected, already enabled [ 1758.007755][T19934] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1759.528671][T19945] loop3: detected capacity change from 0 to 8192 [ 1759.692447][T19955] syz.6.5171[19955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1759.692887][T19955] syz.6.5171[19955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1759.754818][T19955] usb usb1: usbfs: process 19955 (syz.6.5171) did not claim interface 0 before use [ 1760.486914][T19960] loop2: detected capacity change from 0 to 512 [ 1760.600157][T19960] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1760.608616][T19960] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1760.615538][T19960] EXT4-fs warning (device loop2): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1760.630126][T19960] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1760.637125][T19960] EXT4-fs error (device loop2): __ext4_iget:4925: inode #16: block 127754: comm syz.2.5172: invalid block [ 1760.649220][T19960] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.5172: couldn't read orphan inode 16 (err -117) [ 1760.661423][T19960] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1762.204998][T19982] loop1: detected capacity change from 0 to 512 [ 1762.214521][T19980] usb usb1: usbfs: process 19980 (syz.5.5176) did not claim interface 0 before use [ 1762.238443][T19984] loop2: detected capacity change from 0 to 512 [ 1762.291287][T19984] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1762.298382][T19984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1762.327695][T19984] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.5178: bad orphan inode 131083 [ 1762.570945][T19984] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1762.586644][T19982] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1762.626950][T19982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1762.635364][T19990] loop6: detected capacity change from 0 to 512 [ 1762.644128][T19985] cgroup: Need name or subsystem set [ 1762.645980][T19982] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5179: bad orphan inode 131083 [ 1762.661810][T19982] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1762.781555][T19990] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1762.794794][T19990] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1762.805925][T19990] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5180: bad orphan inode 131083 [ 1762.830397][T19990] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1763.043701][T19993] tipc: Enabling of bearer rejected, already enabled [ 1763.054191][T19995] tipc: Enabling of bearer rejected, already enabled [ 1763.405407][T19997] loop3: detected capacity change from 0 to 512 [ 1763.440076][T20002] loop2: detected capacity change from 0 to 512 [ 1763.451882][T20003] loop1: detected capacity change from 0 to 512 [ 1763.530394][T19997] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1763.537211][T19997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1763.548087][T20003] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1763.556706][T20002] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1763.557365][T19997] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5182: bad orphan inode 131083 [ 1763.569197][T20002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1763.574875][T20003] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1763.915473][T20007] tipc: Enabling of bearer rejected, already enabled [ 1764.372813][T20002] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.5181: bad orphan inode 131083 [ 1764.383448][T20002] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1764.398271][T19997] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1764.486820][T20003] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5184: bad orphan inode 131083 [ 1764.612361][T20003] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1764.780171][T20015] tipc: Enabling of bearer rejected, already enabled [ 1765.048346][T20012] loop6: detected capacity change from 0 to 8192 [ 1765.653548][T20026] loop5: detected capacity change from 0 to 512 [ 1765.712373][T20026] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1765.859983][T20026] EXT4-fs (loop5): 1 truncate cleaned up [ 1765.865724][T20026] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1767.396694][T20034] tipc: Enabling of bearer rejected, already enabled [ 1768.030993][T20041] loop3: detected capacity change from 0 to 8192 [ 1768.107609][T20047] loop5: detected capacity change from 0 to 512 [ 1769.250468][T20047] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1769.257907][T20047] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1769.269505][T20047] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.5190: bad orphan inode 131083 [ 1769.280351][T20047] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1769.413151][T20056] loop6: detected capacity change from 0 to 512 [ 1769.847254][T20055] tipc: Enabling of bearer rejected, already enabled [ 1769.890785][T20056] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1770.089437][T20056] EXT4-fs (loop6): 1 truncate cleaned up [ 1770.095197][T20056] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1770.453184][T20064] loop3: detected capacity change from 0 to 512 [ 1770.520774][T20067] loop5: detected capacity change from 0 to 512 [ 1770.532225][T20064] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1770.539229][T20064] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1770.550506][T20064] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5195: bad orphan inode 131083 [ 1770.561416][T20064] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1770.636820][T20070] overlayfs: missing 'lowerdir' [ 1771.910002][T20067] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1771.940331][T20067] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1771.960539][T20076] loop6: detected capacity change from 0 to 512 [ 1772.070584][T20075] loop1: detected capacity change from 0 to 8192 [ 1772.078055][T20076] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1772.086333][T20076] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1772.098404][T20067] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.5198: bad orphan inode 131083 [ 1772.116360][T20067] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1772.149570][T20076] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5199: bad orphan inode 131083 [ 1772.203522][T20082] tipc: Enabling of bearer rejected, already enabled [ 1772.309105][T20084] loop2: detected capacity change from 0 to 512 [ 1772.421891][T20084] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1772.576277][T20084] EXT4-fs (loop2): 1 truncate cleaned up [ 1772.582083][T20084] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1772.754582][T20076] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1772.785014][T20091] FAULT_INJECTION: forcing a failure. [ 1772.785014][T20091] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1772.839896][T20091] CPU: 1 PID: 20091 Comm: syz.2.5203 Not tainted syzkaller #0 [ 1772.847391][T20091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1772.857461][T20091] Call Trace: [ 1772.860754][T20091] [ 1772.863666][T20091] __dump_stack+0x21/0x30 [ 1772.867993][T20091] dump_stack_lvl+0xee/0x150 [ 1772.872572][T20091] ? show_regs_print_info+0x20/0x20 [ 1772.877756][T20091] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1772.883317][T20091] ? _raw_spin_lock+0xe0/0xe0 [ 1772.888092][T20091] dump_stack+0x15/0x20 [ 1772.892233][T20091] should_fail+0x3c1/0x510 [ 1772.896704][T20091] should_fail_alloc_page+0x55/0x80 [ 1772.901902][T20091] prepare_alloc_pages+0x156/0x600 [ 1772.907105][T20091] ? __alloc_pages_bulk+0xab0/0xab0 [ 1772.912297][T20091] ? __sys_bpf+0x5e3/0x730 [ 1772.916697][T20091] ? __x64_sys_bpf+0x7c/0x90 [ 1772.921272][T20091] ? x64_sys_call+0x4b9/0x9a0 [ 1772.925940][T20091] ? do_syscall_64+0x4c/0xa0 [ 1772.930533][T20091] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1772.936588][T20091] __alloc_pages+0x10a/0x440 [ 1772.941163][T20091] ? prep_new_page+0x110/0x110 [ 1772.945913][T20091] kmalloc_order+0x4c/0x160 [ 1772.950406][T20091] kmalloc_order_trace+0x18/0xb0 [ 1772.955323][T20091] __kmalloc+0x199/0x2c0 [ 1772.959552][T20091] ? kvmalloc_node+0x206/0x300 [ 1772.964301][T20091] kvmalloc_node+0x206/0x300 [ 1772.968885][T20091] ? vm_mmap+0xb0/0xb0 [ 1772.973024][T20091] generic_map_lookup_batch+0x457/0xa70 [ 1772.978556][T20091] ? security_file_permission+0x79/0xa0 [ 1772.984095][T20091] ? bpf_map_update_value+0x3e0/0x3e0 [ 1772.989455][T20091] ? __fdget+0x1a1/0x230 [ 1772.993733][T20091] ? bpf_map_update_value+0x3e0/0x3e0 [ 1772.999097][T20091] bpf_map_do_batch+0x2d4/0x5f0 [ 1773.003935][T20091] ? security_bpf+0x82/0xa0 [ 1773.008433][T20091] __sys_bpf+0x5e3/0x730 [ 1773.012664][T20091] ? bpf_link_show_fdinfo+0x310/0x310 [ 1773.018128][T20091] ? debug_smp_processor_id+0x17/0x20 [ 1773.023489][T20091] __x64_sys_bpf+0x7c/0x90 [ 1773.027893][T20091] x64_sys_call+0x4b9/0x9a0 [ 1773.032418][T20091] do_syscall_64+0x4c/0xa0 [ 1773.036824][T20091] ? clear_bhb_loop+0x50/0xa0 [ 1773.041492][T20091] ? clear_bhb_loop+0x50/0xa0 [ 1773.046154][T20091] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1773.052043][T20091] RIP: 0033:0x7f17d4fc0ba9 [ 1773.056454][T20091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1773.076047][T20091] RSP: 002b:00007f17d3a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1773.084449][T20091] RAX: ffffffffffffffda RBX: 00007f17d5207fa0 RCX: 00007f17d4fc0ba9 [ 1773.092403][T20091] RDX: 0000000000000038 RSI: 0000200000000480 RDI: 0000000000000018 [ 1773.100358][T20091] RBP: 00007f17d3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.108412][T20091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.116385][T20091] R13: 00007f17d5208038 R14: 00007f17d5207fa0 R15: 00007ffcc59ba258 [ 1773.124344][T20091] [ 1773.166617][T20095] loop3: detected capacity change from 0 to 512 [ 1774.065871][T20095] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1774.072857][T20095] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1774.088369][T20092] tipc: Enabling of bearer rejected, already enabled [ 1774.096861][T20095] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5205: bad orphan inode 131083 [ 1774.107559][T20095] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1774.702093][T20113] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1775.849727][T20119] loop1: detected capacity change from 0 to 512 [ 1775.892125][T20119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1775.998800][T20121] overlayfs: unrecognized mount option "/" or missing value [ 1776.401834][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1776.401849][ T30] audit: type=1400 audit(1757729028.661:1289): avc: denied { map } for pid=20123 comm="syz.6.5212" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1776.463159][T20119] EXT4-fs (loop1): 1 truncate cleaned up [ 1776.469400][T20119] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1776.973658][T20135] loop3: detected capacity change from 0 to 512 [ 1776.981868][T20135] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1777.041750][T20135] EXT4-fs (loop3): 1 truncate cleaned up [ 1777.047497][T20135] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 1777.813457][T20142] loop1: detected capacity change from 0 to 512 [ 1779.730833][T20144] loop2: detected capacity change from 0 to 512 [ 1779.853810][T20144] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1779.866525][T20142] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1780.017028][T20144] EXT4-fs (loop2): 1 truncate cleaned up [ 1780.022777][T20144] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1780.074297][T20142] EXT4-fs (loop1): 1 truncate cleaned up [ 1780.080179][T20142] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1780.509275][T20146] loop6: detected capacity change from 0 to 40427 [ 1780.600660][T20146] F2FS-fs (loop6): invalid crc value [ 1780.620222][T20157] loop2: detected capacity change from 0 to 128 [ 1780.641647][T20146] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1780.861896][T20162] loop5: detected capacity change from 0 to 512 [ 1781.439554][T20146] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 1781.469975][T20146] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1781.478253][T20162] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1781.486752][T20162] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1781.493496][T20162] EXT4-fs warning (device loop5): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1781.508062][T20162] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1781.515551][T20162] EXT4-fs error (device loop5): __ext4_iget:4925: inode #16: block 127754: comm syz.5.5217: invalid block [ 1781.579386][T20168] cgroup: Need name or subsystem set [ 1781.821224][T20146] attempt to access beyond end of device [ 1781.821224][T20146] loop6: rw=2049, want=53256, limit=40427 [ 1781.835381][T20146] xt_hashlimit: size too large, truncated to 1048576 [ 1781.842630][T20162] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.5217: couldn't read orphan inode 16 (err -117) [ 1781.854885][T20162] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1781.915866][T20149] xt_hashlimit: max too large, truncated to 1048576 [ 1782.295933][T20171] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1782.438678][T18034] attempt to access beyond end of device [ 1782.438678][T18034] loop6: rw=2049, want=45104, limit=40427 [ 1783.121826][T20179] cgroup: Need name or subsystem set [ 1783.187800][T20187] loop3: detected capacity change from 0 to 512 [ 1783.250761][T20187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1783.900965][T20187] EXT4-fs (loop3): 1 truncate cleaned up [ 1783.906764][T20187] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 1784.070866][T20196] loop1: detected capacity change from 0 to 128 [ 1784.082622][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 1784.151785][ T30] audit: type=1400 audit(1757729036.411:1290): avc: denied { append } for pid=20193 comm="syz.6.5224" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1784.188010][T20203] capability: warning: `syz.5.5230' uses deprecated v2 capabilities in a way that may be insecure [ 1784.235081][ T30] audit: type=1326 audit(1757729036.441:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1784.542056][ T30] audit: type=1326 audit(1757729036.441:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1784.716426][ T30] audit: type=1326 audit(1757729036.441:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1784.846797][T20214] loop2: detected capacity change from 0 to 512 [ 1784.943534][T20214] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1785.241469][T20214] EXT4-fs (loop2): 1 truncate cleaned up [ 1785.247197][T20214] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1785.522954][ T7764] attempt to access beyond end of device [ 1785.522954][ T7764] loop1: rw=1, want=1041, limit=128 [ 1785.798762][ T30] audit: type=1326 audit(1757729036.461:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1785.860661][ T30] audit: type=1326 audit(1757729036.461:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1785.890056][T20222] loop6: detected capacity change from 0 to 512 [ 1785.908599][ T30] audit: type=1326 audit(1757729036.461:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1785.933307][ T30] audit: type=1326 audit(1757729036.461:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1785.958705][ T30] audit: type=1326 audit(1757729036.461:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1785.991919][T20226] loop2: detected capacity change from 0 to 512 [ 1785.993386][ T30] audit: type=1326 audit(1757729036.461:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1786.034098][T20222] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1786.047024][T20226] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1786.064136][T20222] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1786.071351][T20226] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1786.161119][T20232] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1786.535876][T20231] FAULT_INJECTION: forcing a failure. [ 1786.535876][T20231] name failslab, interval 1, probability 0, space 0, times 1 [ 1786.645974][T20231] CPU: 1 PID: 20231 Comm: syz.1.5236 Not tainted syzkaller #0 [ 1786.653476][T20231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1786.663536][T20231] Call Trace: [ 1786.666902][T20231] [ 1786.669827][T20231] __dump_stack+0x21/0x30 [ 1786.674150][T20231] dump_stack_lvl+0xee/0x150 [ 1786.678734][T20231] ? show_regs_print_info+0x20/0x20 [ 1786.683945][T20231] ? do_writev+0x14a/0x2b0 [ 1786.688356][T20231] ? x64_sys_call+0x974/0x9a0 [ 1786.693039][T20231] ? do_syscall_64+0x4c/0xa0 [ 1786.697637][T20231] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1786.703744][T20231] dump_stack+0x15/0x20 [ 1786.707901][T20231] should_fail+0x3c1/0x510 [ 1786.712321][T20231] __should_failslab+0xa4/0xe0 [ 1786.717107][T20231] should_failslab+0x9/0x20 [ 1786.721606][T20231] slab_pre_alloc_hook+0x3b/0xe0 [ 1786.726560][T20231] ? audit_log_start+0x3a4/0x8b0 [ 1786.731494][T20231] kmem_cache_alloc+0x44/0x260 [ 1786.736351][T20231] audit_log_start+0x3a4/0x8b0 [ 1786.741122][T20231] ? audit_serial+0x30/0x30 [ 1786.745713][T20231] ? call_rcu+0x5db/0xfe0 [ 1786.746184][T20240] loop3: detected capacity change from 0 to 128 [ 1786.750048][T20231] ? __kasan_check_write+0x14/0x20 [ 1786.750072][T20231] ? rcu_gp_kthread_wake+0x90/0x90 [ 1786.750087][T20231] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1786.750105][T20231] ? slow_avc_audit+0x220/0x220 [ 1786.776766][T20231] common_lsm_audit+0xd1/0x1600 [ 1786.781629][T20231] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 1786.787176][T20231] ? ipv6_skb_to_auditdata+0xcd0/0xcd0 [ 1786.792722][T20231] ? avc_update_node+0x30b/0xe30 [ 1786.797659][T20231] ? avc_denied+0x132/0x1b0 [ 1786.802158][T20231] slow_avc_audit+0x1ac/0x220 [ 1786.806836][T20231] ? avc_get_hash_stats+0x180/0x180 [ 1786.812031][T20231] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1786.817409][T20231] avc_has_perm+0x1e6/0x240 [ 1786.821913][T20231] ? avc_has_perm_noaudit+0x460/0x460 [ 1786.827316][T20231] file_has_perm+0x4a1/0x640 [ 1786.831905][T20231] ? match_file+0x130/0x130 [ 1786.836491][T20231] ? check_stack_object+0x126/0x140 [ 1786.841688][T20231] selinux_file_permission+0x3f4/0x510 [ 1786.847146][T20231] security_file_permission+0x69/0xa0 [ 1786.852520][T20231] do_iter_write+0x16d/0x7b0 [ 1786.857110][T20231] vfs_writev+0x2c9/0x540 [ 1786.861447][T20231] ? do_writev+0x2b0/0x2b0 [ 1786.865946][T20231] ? __fget_files+0x2c4/0x320 [ 1786.870714][T20231] ? __fdget_pos+0x1f7/0x380 [ 1786.875306][T20231] ? do_writev+0x76/0x2b0 [ 1786.879629][T20231] do_writev+0x14a/0x2b0 [ 1786.883960][T20231] ? do_readv+0x3e0/0x3e0 [ 1786.888381][T20231] ? debug_smp_processor_id+0x17/0x20 [ 1786.893753][T20231] __x64_sys_writev+0x7d/0x90 [ 1786.898431][T20231] x64_sys_call+0x974/0x9a0 [ 1786.902928][T20231] do_syscall_64+0x4c/0xa0 [ 1786.907338][T20231] ? clear_bhb_loop+0x50/0xa0 [ 1786.912013][T20231] ? clear_bhb_loop+0x50/0xa0 [ 1786.916701][T20231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1786.922591][T20231] RIP: 0033:0x7f2730a61ba9 [ 1786.927004][T20231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1786.946785][T20231] RSP: 002b:00007f272f4ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1786.955208][T20231] RAX: ffffffffffffffda RBX: 00007f2730ca8fa0 RCX: 00007f2730a61ba9 [ 1786.963183][T20231] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000007 [ 1786.971240][T20231] RBP: 00007f272f4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.979211][T20231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.987178][T20231] R13: 00007f2730ca9038 R14: 00007f2730ca8fa0 R15: 00007fffaca12c38 [ 1786.995160][T20231] [ 1787.033874][T20222] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1787.049685][T20222] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1787.061169][T20226] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.5237: bad orphan inode 131083 [ 1787.072340][T20226] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1787.087833][T20222] EXT4-fs (loop6): 1 truncate cleaned up [ 1787.105834][T20222] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1787.761777][T20247] tipc: Enabling of bearer rejected, already enabled [ 1790.074821][T20255] loop1: detected capacity change from 0 to 512 [ 1791.425024][T20252] loop5: detected capacity change from 0 to 128 [ 1791.490820][T20255] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1791.531952][T20255] EXT4-fs (loop1): 1 truncate cleaned up [ 1791.534028][T20258] loop3: detected capacity change from 0 to 8192 [ 1791.537627][T20255] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1791.616596][T20261] loop2: detected capacity change from 0 to 8192 [ 1791.724297][T20267] FAULT_INJECTION: forcing a failure. [ 1791.724297][T20267] name failslab, interval 1, probability 0, space 0, times 0 [ 1791.737940][T20267] CPU: 1 PID: 20267 Comm: syz.2.5247 Not tainted syzkaller #0 [ 1791.745421][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1791.755478][T20267] Call Trace: [ 1791.758751][T20267] [ 1791.761677][T20267] __dump_stack+0x21/0x30 [ 1791.766008][T20267] dump_stack_lvl+0xee/0x150 [ 1791.770604][T20267] ? show_regs_print_info+0x20/0x20 [ 1791.775795][T20267] dump_stack+0x15/0x20 [ 1791.779936][T20267] should_fail+0x3c1/0x510 [ 1791.784350][T20267] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1791.789803][T20267] __should_failslab+0xa4/0xe0 [ 1791.794554][T20267] should_failslab+0x9/0x20 [ 1791.799041][T20267] slab_pre_alloc_hook+0x3b/0xe0 [ 1791.803969][T20267] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1791.809433][T20267] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1791.814888][T20267] __kmalloc_track_caller+0x6c/0x2c0 [ 1791.820254][T20267] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1791.825700][T20267] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1791.831180][T20267] __alloc_skb+0x21a/0x740 [ 1791.835588][T20267] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1791.840949][T20267] rtnetlink_event+0xd2/0x1a0 [ 1791.845613][T20267] raw_notifier_call_chain+0x90/0x100 [ 1791.850973][T20267] dev_set_mac_address+0x318/0x420 [ 1791.856070][T20267] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 1791.861867][T20267] dev_set_mac_address_user+0x31/0x50 [ 1791.867343][T20267] dev_ifsioc+0x757/0xe70 [ 1791.871665][T20267] ? dev_ioctl+0xd10/0xd10 [ 1791.876107][T20267] ? __kasan_check_write+0x14/0x20 [ 1791.881645][T20267] ? mutex_lock+0x95/0x1a0 [ 1791.886142][T20267] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1791.892714][T20267] ? dev_get_by_name_rcu+0xc8/0xf0 [ 1791.897815][T20267] dev_ioctl+0x560/0xd10 [ 1791.902077][T20267] sock_do_ioctl+0x22e/0x300 [ 1791.906666][T20267] ? sock_show_fdinfo+0xa0/0xa0 [ 1791.911502][T20267] ? selinux_file_ioctl+0x377/0x480 [ 1791.916841][T20267] sock_ioctl+0x4bc/0x6b0 [ 1791.921257][T20267] ? sock_poll+0x3d0/0x3d0 [ 1791.925668][T20267] ? __fget_files+0x2c4/0x320 [ 1791.930336][T20267] ? security_file_ioctl+0x84/0xa0 [ 1791.935463][T20267] ? sock_poll+0x3d0/0x3d0 [ 1791.939871][T20267] __se_sys_ioctl+0x121/0x1a0 [ 1791.944627][T20267] __x64_sys_ioctl+0x7b/0x90 [ 1791.949207][T20267] x64_sys_call+0x2f/0x9a0 [ 1791.953613][T20267] do_syscall_64+0x4c/0xa0 [ 1791.958037][T20267] ? clear_bhb_loop+0x50/0xa0 [ 1791.962712][T20267] ? clear_bhb_loop+0x50/0xa0 [ 1791.967379][T20267] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1791.973264][T20267] RIP: 0033:0x7f17d4fc0ba9 [ 1791.977674][T20267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1791.997371][T20267] RSP: 002b:00007f17d3a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1792.005779][T20267] RAX: ffffffffffffffda RBX: 00007f17d5207fa0 RCX: 00007f17d4fc0ba9 [ 1792.013737][T20267] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000008 [ 1792.021700][T20267] RBP: 00007f17d3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.029666][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.037714][T20267] R13: 00007f17d5208038 R14: 00007f17d5207fa0 R15: 00007ffcc59ba258 [ 1792.045716][T20267] [ 1792.071599][T20271] tipc: Enabling of bearer rejected, already enabled [ 1792.876307][T20284] loop2: detected capacity change from 0 to 128 [ 1793.332235][T20286] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1793.868596][T20291] loop1: detected capacity change from 0 to 512 [ 1793.994087][T20291] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1794.011109][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1794.011125][ T30] audit: type=1326 audit(1757729046.241:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1794.293022][T20291] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1794.303856][ T30] audit: type=1326 audit(1757729046.241:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1794.342414][T20291] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5254: bad orphan inode 131083 [ 1794.361435][T20302] loop2: detected capacity change from 0 to 1024 [ 1794.372705][T20291] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1794.412652][ T30] audit: type=1326 audit(1757729046.241:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1794.436526][ T30] audit: type=1326 audit(1757729046.241:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1794.440456][ T26] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1794.466338][ T30] audit: type=1326 audit(1757729046.241:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1794.492975][T20306] syz.3.5258 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1794.508686][T20307] loop3: detected capacity change from 0 to 512 [ 1794.517135][ T30] audit: type=1326 audit(1757729046.241:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1794.520932][T20302] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 1794.558352][ T30] audit: type=1326 audit(1757729046.241:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1794.564800][T20307] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1794.582578][ T30] audit: type=1326 audit(1757729046.241:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1794.593476][T20302] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1794.640012][ T30] audit: type=1326 audit(1757729046.241:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943baaba9 code=0x7ffc0000 [ 1794.665615][ T30] audit: type=1326 audit(1757729046.241:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20296 comm="syz.6.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe943ba9510 code=0x7ffc0000 [ 1794.700903][T20311] tipc: Enabling of bearer rejected, already enabled [ 1794.794662][T20307] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1795.072196][T20328] FAULT_INJECTION: forcing a failure. [ 1795.072196][T20328] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.086729][T20328] CPU: 0 PID: 20328 Comm: syz.2.5263 Not tainted syzkaller #0 [ 1795.094228][T20328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1795.112966][T20328] Call Trace: [ 1795.116253][T20328] [ 1795.119177][T20328] __dump_stack+0x21/0x30 [ 1795.123508][T20328] dump_stack_lvl+0xee/0x150 [ 1795.128094][T20328] ? show_regs_print_info+0x20/0x20 [ 1795.133297][T20328] dump_stack+0x15/0x20 [ 1795.137455][T20328] should_fail+0x3c1/0x510 [ 1795.141869][T20328] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1795.147336][T20328] __should_failslab+0xa4/0xe0 [ 1795.152085][T20328] should_failslab+0x9/0x20 [ 1795.156568][T20328] slab_pre_alloc_hook+0x3b/0xe0 [ 1795.161483][T20328] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1795.166929][T20328] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1795.172364][T20328] __kmalloc_track_caller+0x6c/0x2c0 [ 1795.177630][T20328] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1795.179747][ T26] usb 7-1: config 3 has an invalid descriptor of length 245, skipping remainder of the config [ 1795.183243][T20328] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1795.193695][ T26] usb 7-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1795.198994][T20328] __alloc_skb+0x21a/0x740 [ 1795.207995][ T26] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1795.212355][T20328] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 1795.212383][T20328] rtnetlink_event+0xd2/0x1a0 [ 1795.221418][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.226650][T20328] raw_notifier_call_chain+0x90/0x100 [ 1795.244651][T20328] dev_set_mac_address+0x318/0x420 [ 1795.249755][T20328] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 1795.255939][T20328] dev_set_mac_address_user+0x31/0x50 [ 1795.261312][T20328] dev_ifsioc+0x757/0xe70 [ 1795.265640][T20328] ? dev_ioctl+0xd10/0xd10 [ 1795.270051][T20328] ? __kasan_check_write+0x14/0x20 [ 1795.275224][T20328] ? mutex_lock+0x95/0x1a0 [ 1795.279647][T20328] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1795.286371][T20328] ? dev_get_by_name_rcu+0xc8/0xf0 [ 1795.291486][T20328] dev_ioctl+0x560/0xd10 [ 1795.295723][T20328] sock_do_ioctl+0x22e/0x300 [ 1795.300339][T20328] ? sock_show_fdinfo+0xa0/0xa0 [ 1795.305312][T20328] ? selinux_file_ioctl+0x377/0x480 [ 1795.310504][T20328] sock_ioctl+0x4bc/0x6b0 [ 1795.314835][T20328] ? sock_poll+0x3d0/0x3d0 [ 1795.319348][T20328] ? __fget_files+0x2c4/0x320 [ 1795.324023][T20328] ? security_file_ioctl+0x84/0xa0 [ 1795.329121][T20328] ? sock_poll+0x3d0/0x3d0 [ 1795.333515][T20328] __se_sys_ioctl+0x121/0x1a0 [ 1795.338174][T20328] __x64_sys_ioctl+0x7b/0x90 [ 1795.342751][T20328] x64_sys_call+0x2f/0x9a0 [ 1795.347142][T20328] do_syscall_64+0x4c/0xa0 [ 1795.351549][T20328] ? clear_bhb_loop+0x50/0xa0 [ 1795.356200][T20328] ? clear_bhb_loop+0x50/0xa0 [ 1795.360872][T20328] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1795.366743][T20328] RIP: 0033:0x7f17d4fc0ba9 [ 1795.371135][T20328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1795.390734][T20328] RSP: 002b:00007f17d3a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.399125][T20328] RAX: ffffffffffffffda RBX: 00007f17d5207fa0 RCX: 00007f17d4fc0ba9 [ 1795.407073][T20328] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 1795.415062][T20328] RBP: 00007f17d3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.423027][T20328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1795.431000][T20328] R13: 00007f17d5208038 R14: 00007f17d5207fa0 R15: 00007ffcc59ba258 [ 1795.438956][T20328] [ 1795.571183][T20333] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1795.748685][T20335] loop2: detected capacity change from 0 to 128 [ 1796.062701][T20342] loop1: detected capacity change from 0 to 512 [ 1796.090638][T20342] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1796.100083][T20342] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1796.111894][T20342] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5269: bad orphan inode 131083 [ 1796.122779][T20342] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1796.591334][T20348] tipc: Enabling of bearer rejected, already enabled [ 1797.135974][ T339] usb 7-1: USB disconnect, device number 3 [ 1797.238215][T20350] loop2: detected capacity change from 0 to 8192 [ 1797.251657][T20353] loop1: detected capacity change from 0 to 512 [ 1797.300430][T20353] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1797.328118][T20353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1797.353119][T20353] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5271: bad orphan inode 131083 [ 1797.409852][T20353] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1797.627714][T20367] loop6: detected capacity change from 0 to 512 [ 1799.164496][T20379] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5277'. [ 1799.558237][T20391] loop5: detected capacity change from 0 to 128 [ 1799.904594][T20393] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1800.390580][T20395] loop6: detected capacity change from 0 to 512 [ 1800.472744][T20395] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1800.618360][T20395] EXT4-fs (loop6): 1 truncate cleaned up [ 1800.624202][T20395] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1800.828570][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1800.828586][ T30] audit: type=1400 audit(1757729053.081:1368): avc: denied { read } for pid=20402 comm="syz.3.5284" path="socket:[98135]" dev="sockfs" ino=98135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1801.211342][T20415] loop5: detected capacity change from 0 to 128 [ 1801.289636][T15850] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1801.318434][T20417] loop6: detected capacity change from 0 to 128 [ 1801.569629][T15850] usb 3-1: Using ep0 maxpacket: 16 [ 1801.641357][T20419] loop1: detected capacity change from 0 to 8192 [ 1801.726207][T15850] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.736787][T15850] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1801.746264][T15850] usb 3-1: config 1 has no interface number 1 [ 1801.757522][T15850] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1801.759681][ T30] audit: type=1400 audit(1757729054.011:1369): avc: denied { create } for pid=20425 comm="syz.1.5290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1801.767103][T15850] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1801.800110][T20426] FAULT_INJECTION: forcing a failure. [ 1801.800110][T20426] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1801.817716][T20424] loop3: detected capacity change from 0 to 128 [ 1801.831560][T15850] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1801.838598][T20426] CPU: 1 PID: 20426 Comm: syz.1.5290 Not tainted syzkaller #0 [ 1801.846076][T20426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1801.856131][T20426] Call Trace: [ 1801.859395][T20426] [ 1801.862334][T20426] __dump_stack+0x21/0x30 [ 1801.866655][T20426] dump_stack_lvl+0xee/0x150 [ 1801.871350][T20426] ? show_regs_print_info+0x20/0x20 [ 1801.876544][T20426] dump_stack+0x15/0x20 [ 1801.880688][T20426] should_fail+0x3c1/0x510 [ 1801.885090][T20426] should_fail_usercopy+0x1a/0x20 [ 1801.890098][T20426] strncpy_from_user+0x24/0x2e0 [ 1801.894966][T20426] ? kmem_cache_alloc+0xf7/0x260 [ 1801.899909][T20426] getname_flags+0xf4/0x500 [ 1801.904422][T20426] ? debug_smp_processor_id+0x17/0x20 [ 1801.909811][T20426] __x64_sys_rmdir+0x3c/0x50 [ 1801.914411][T20426] x64_sys_call+0x25f/0x9a0 [ 1801.918956][T20426] do_syscall_64+0x4c/0xa0 [ 1801.923382][T20426] ? clear_bhb_loop+0x50/0xa0 [ 1801.928064][T20426] ? clear_bhb_loop+0x50/0xa0 [ 1801.932747][T20426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1801.938663][T20426] RIP: 0033:0x7f2730a61ba9 [ 1801.943125][T20426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1801.962733][T20426] RSP: 002b:00007f272f4ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1801.971246][T20426] RAX: ffffffffffffffda RBX: 00007f2730ca8fa0 RCX: 00007f2730a61ba9 [ 1801.979241][T20426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1801.987229][T20426] RBP: 00007f272f4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.995210][T20426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.003190][T20426] R13: 00007f2730ca9038 R14: 00007f2730ca8fa0 R15: 00007fffaca12c38 [ 1802.011176][T20426] [ 1802.108973][T20434] FAULT_INJECTION: forcing a failure. [ 1802.108973][T20434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1802.123639][T20434] CPU: 0 PID: 20434 Comm: syz.1.5293 Not tainted syzkaller #0 [ 1802.131151][T20434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1802.141204][T20434] Call Trace: [ 1802.144481][T20434] [ 1802.147404][T20434] __dump_stack+0x21/0x30 [ 1802.151735][T20434] dump_stack_lvl+0xee/0x150 [ 1802.156333][T20434] ? show_regs_print_info+0x20/0x20 [ 1802.161530][T20434] dump_stack+0x15/0x20 [ 1802.165684][T20434] should_fail+0x3c1/0x510 [ 1802.170099][T20434] should_fail_usercopy+0x1a/0x20 [ 1802.175122][T20434] strncpy_from_user+0x24/0x2e0 [ 1802.179974][T20434] ? kmem_cache_alloc+0xf7/0x260 [ 1802.184909][T20434] getname_flags+0xf4/0x500 [ 1802.189415][T20434] user_path_at_empty+0x30/0x1c0 [ 1802.194358][T20434] __se_sys_pivot_root+0x17f/0xc40 [ 1802.199472][T20434] ? bpf_trace_run2+0xb5/0x1b0 [ 1802.204329][T20434] ? __x64_sys_pivot_root+0x70/0x70 [ 1802.209528][T20434] ? ksys_write+0x1eb/0x240 [ 1802.214028][T20434] ? __ia32_sys_read+0x90/0x90 [ 1802.218796][T20434] ? __bpf_trace_sys_enter+0x62/0x70 [ 1802.224079][T20434] __x64_sys_pivot_root+0x5b/0x70 [ 1802.229192][T20434] x64_sys_call+0x6e2/0x9a0 [ 1802.233698][T20434] do_syscall_64+0x4c/0xa0 [ 1802.238112][T20434] ? clear_bhb_loop+0x50/0xa0 [ 1802.242788][T20434] ? clear_bhb_loop+0x50/0xa0 [ 1802.247458][T20434] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1802.253348][T20434] RIP: 0033:0x7f2730a61ba9 [ 1802.257762][T20434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1802.277365][T20434] RSP: 002b:00007f272f4ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 1802.285817][T20434] RAX: ffffffffffffffda RBX: 00007f2730ca8fa0 RCX: 00007f2730a61ba9 [ 1802.293803][T20434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1802.301807][T20434] RBP: 00007f272f4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1802.309815][T20434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.317884][T20434] R13: 00007f2730ca9038 R14: 00007f2730ca8fa0 R15: 00007fffaca12c38 [ 1802.325861][T20434] [ 1802.533694][T20435] loop6: detected capacity change from 0 to 512 [ 1802.558351][T20435] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1802.573471][T20435] EXT4-fs (loop6): 1 truncate cleaned up [ 1802.579294][T20435] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1802.720421][T20017] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1802.769674][T15850] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1802.788472][T15850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.809635][T15850] usb 3-1: Product: syz [ 1802.817282][T20451] loop3: detected capacity change from 0 to 8192 [ 1802.824419][T15850] usb 3-1: Manufacturer: syz [ 1802.829029][T15850] usb 3-1: SerialNumber: syz [ 1802.976498][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5300'. [ 1802.986165][T20458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20458 comm=syz.6.5300 [ 1803.004083][ T30] audit: type=1400 audit(1757729055.261:1370): avc: denied { append } for pid=20452 comm="syz.5.5298" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1803.019729][T20017] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 1803.068305][T20461] loop3: detected capacity change from 0 to 128 [ 1803.137210][ T30] audit: type=1400 audit(1757729055.281:1371): avc: denied { open } for pid=20452 comm="syz.5.5298" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1803.260807][T20462] loop2: detected capacity change from 0 to 1024 [ 1803.308013][T20462] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.5285: Invalid block bitmap block 0 in block_group 0 [ 1803.322063][T20462] Quota error (device loop2): write_blk: dquota write failed [ 1803.329623][T20462] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1803.339671][T20462] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.5285: Failed to acquire dquot type 0 [ 1803.351495][T20462] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.5285: Freeing blocks not in datazone - block = 0, count = 4096 [ 1803.365209][T20462] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.5285: Invalid inode bitmap blk 0 in block_group 0 [ 1803.378072][T20462] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 1803.378187][ T7764] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 1803.395193][T20017] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1803.402872][T20462] EXT4-fs (loop2): 1 orphan inode deleted [ 1803.406476][ T7764] EXT4-fs error (device loop2): ext4_release_dquot:6236: comm kworker/u4:8: Failed to release dquot type 0 [ 1803.408614][T20462] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 1803.432294][T20017] usb 2-1: can't read configurations, error -61 [ 1803.444115][ T30] audit: type=1400 audit(1757729055.701:1372): avc: denied { write } for pid=20404 comm="syz.2.5285" name="igmp" dev="proc" ino=4026533037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1803.458719][T20458] loop6: detected capacity change from 0 to 40427 [ 1803.511513][T20458] F2FS-fs (loop6): Unrecognized mount option "00000000000000000003" or missing value [ 1803.570840][T20468] loop6: detected capacity change from 0 to 128 [ 1803.599630][T20017] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1803.607974][ T30] audit: type=1400 audit(1757729055.861:1373): avc: denied { remount } for pid=20467 comm="syz.6.5301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1803.877505][T20477] loop6: detected capacity change from 0 to 128 [ 1803.909755][T20017] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 1803.931826][T20478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5305'. [ 1804.039686][T20017] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1804.047378][T20017] usb 2-1: can't read configurations, error -61 [ 1804.053952][T20017] usb usb2-port1: attempt power cycle [ 1804.418298][T20481] device bridge_slave_0 left promiscuous mode [ 1804.424583][T20481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.432786][T20481] device bridge_slave_1 left promiscuous mode [ 1804.438970][T20481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.470027][T20017] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1804.529056][T20485] FAULT_INJECTION: forcing a failure. [ 1804.529056][T20485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.542516][T20485] CPU: 1 PID: 20485 Comm: syz.2.5309 Not tainted syzkaller #0 [ 1804.550007][T20485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1804.560048][T20485] Call Trace: [ 1804.563323][T20485] [ 1804.566238][T20485] __dump_stack+0x21/0x30 [ 1804.570553][T20485] dump_stack_lvl+0xee/0x150 [ 1804.575126][T20485] ? show_regs_print_info+0x20/0x20 [ 1804.580309][T20485] dump_stack+0x15/0x20 [ 1804.584452][T20485] should_fail+0x3c1/0x510 [ 1804.588862][T20485] should_fail_usercopy+0x1a/0x20 [ 1804.594049][T20485] _copy_from_iter+0x21a/0x1050 [ 1804.598928][T20485] ? kasan_quarantine_put+0x34/0x190 [ 1804.604204][T20485] ? copy_mc_pipe_to_iter+0x770/0x770 [ 1804.609591][T20485] ? pskb_expand_head+0x36c/0x11d0 [ 1804.614706][T20485] ? check_stack_object+0x81/0x140 [ 1804.619819][T20485] ? __kasan_check_read+0x11/0x20 [ 1804.624832][T20485] ? __check_object_size+0x2f4/0x3c0 [ 1804.630105][T20485] skb_copy_datagram_from_iter+0xfa/0x6b0 [ 1804.635814][T20485] tun_get_user+0xc3c/0x33c0 [ 1804.640430][T20485] ? __kasan_poison_object_data+0x1/0x30 [ 1804.646046][T20485] ? kmem_cache_free+0x100/0x320 [ 1804.650970][T20485] ? tun_do_read+0x1c40/0x1c40 [ 1804.655718][T20485] ? kstrtouint_from_user+0x1a0/0x200 [ 1804.661078][T20485] ? kstrtol_from_user+0x260/0x260 [ 1804.666176][T20485] ? putname+0x111/0x160 [ 1804.670399][T20485] ? bpf_get_current_comm+0x44/0xa0 [ 1804.675580][T20485] ? avc_policy_seqno+0x1b/0x70 [ 1804.680424][T20485] ? selinux_file_permission+0x2aa/0x510 [ 1804.686044][T20485] tun_chr_write_iter+0x1eb/0x2e0 [ 1804.691057][T20485] vfs_write+0x802/0xf70 [ 1804.695288][T20485] ? file_end_write+0x1b0/0x1b0 [ 1804.700124][T20485] ? __fget_files+0x2c4/0x320 [ 1804.704789][T20485] ? __fdget_pos+0x1f7/0x380 [ 1804.709364][T20485] ? ksys_write+0x71/0x240 [ 1804.713767][T20485] ksys_write+0x140/0x240 [ 1804.718082][T20485] ? __ia32_sys_read+0x90/0x90 [ 1804.722835][T20485] ? debug_smp_processor_id+0x17/0x20 [ 1804.728195][T20485] __x64_sys_write+0x7b/0x90 [ 1804.732773][T20485] x64_sys_call+0x8ef/0x9a0 [ 1804.737265][T20485] do_syscall_64+0x4c/0xa0 [ 1804.741667][T20485] ? clear_bhb_loop+0x50/0xa0 [ 1804.746332][T20485] ? clear_bhb_loop+0x50/0xa0 [ 1804.750998][T20485] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1804.756902][T20485] RIP: 0033:0x7f17d4fc0ba9 [ 1804.761304][T20485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1804.780924][T20485] RSP: 002b:00007f17d3a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1804.789328][T20485] RAX: ffffffffffffffda RBX: 00007f17d5207fa0 RCX: 00007f17d4fc0ba9 [ 1804.797287][T20485] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1804.805242][T20485] RBP: 00007f17d3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.813200][T20485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1804.821157][T20485] R13: 00007f17d5208038 R14: 00007f17d5207fa0 R15: 00007ffcc59ba258 [ 1804.829119][T20485] [ 1804.832951][T15850] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1804.849767][T20017] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 1804.849971][T15850] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1804.879878][T15850] usb 3-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 1804.887098][T15850] usb 3-1: selecting invalid altsetting 0 [ 1804.899877][T15817] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1804.916259][ T30] audit: type=1400 audit(1757729057.171:1374): avc: denied { setopt } for pid=20486 comm="syz.2.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1804.934602][T15850] usb 3-1: USB disconnect, device number 10 [ 1804.989678][T20017] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1805.009620][T20017] usb 2-1: can't read configurations, error -61 [ 1805.406750][T20500] loop3: detected capacity change from 0 to 512 [ 1805.464889][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5313'. [ 1805.474367][T20500] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1805.484042][T20500] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1805.490947][T20017] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1805.499816][T20500] EXT4-fs warning (device loop3): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1805.514914][T20500] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1805.522115][T20500] EXT4-fs error (device loop3): __ext4_iget:4925: inode #16: block 127754: comm syz.3.5312: invalid block [ 1805.606249][T20507] loop6: detected capacity change from 0 to 512 [ 1806.425435][T20510] loop1: detected capacity change from 0 to 128 [ 1806.432770][T20500] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.5312: couldn't read orphan inode 16 (err -117) [ 1806.500626][T20507] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1806.616294][T20500] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1806.639170][T20507] EXT4-fs (loop6): 1 truncate cleaned up [ 1806.644944][T20507] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1806.660348][T20496] loop2: detected capacity change from 0 to 1024 [ 1806.706426][T20496] EXT4-fs (loop2): Ignoring removed bh option [ 1806.713174][T20496] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1806.725349][T20514] loop1: detected capacity change from 0 to 512 [ 1806.786952][T20514] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1806.787108][T20496] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1806.794366][T20514] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1806.804657][T20496] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,bh,nomblk_io_submit,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 1806.834625][T20514] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5317: bad orphan inode 131083 [ 1806.847843][T20514] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1806.919723][T15817] usb 6-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 1806.935994][T15817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1806.944386][T15817] usb 6-1: SerialNumber: syz [ 1807.026419][T15817] usb 6-1: config 0 descriptor?? [ 1807.484572][T20525] tipc: Enabling of bearer rejected, already enabled [ 1808.806963][T20528] loop2: detected capacity change from 0 to 512 [ 1808.909695][T20017] usb 2-1: device not accepting address 12, error -71 [ 1808.918166][T20017] usb usb2-port1: unable to enumerate USB device [ 1808.927456][T15817] usb 6-1: USB disconnect, device number 13 [ 1808.942355][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): ..@: link becomes ready [ 1808.952083][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1808.961852][T20528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1809.672246][T20539] loop1: detected capacity change from 0 to 128 [ 1809.735615][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1809.810881][T20528] EXT4-fs (loop2): 1 truncate cleaned up [ 1809.816636][T20528] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1809.911607][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1809.921058][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1809.934535][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1809.942798][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5323'. [ 1809.952300][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1809.973811][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1810.011805][T20542] loop6: detected capacity change from 0 to 128 [ 1810.586806][T20554] loop3: detected capacity change from 0 to 512 [ 1810.677987][T20558] cgroup: Need name or subsystem set [ 1810.718083][T20559] syz.5.5331[20559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1810.718689][T20559] syz.5.5331[20559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1810.867301][T20559] usb usb1: usbfs: process 20559 (syz.5.5331) did not claim interface 0 before use [ 1810.927136][T20554] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1810.936087][T20554] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1810.977192][T20554] EXT4-fs warning (device loop3): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1810.991899][T20554] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1810.999082][T20554] EXT4-fs error (device loop3): __ext4_iget:4925: inode #16: block 127754: comm syz.3.5328: invalid block [ 1811.011395][T20554] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.5328: couldn't read orphan inode 16 (err -117) [ 1811.030048][T20554] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1811.131168][T20563] loop2: detected capacity change from 0 to 40427 [ 1811.145439][T20563] F2FS-fs (loop2): invalid crc value [ 1811.258837][T20577] loop1: detected capacity change from 0 to 128 [ 1811.462128][T20563] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1811.462365][T20576] loop6: detected capacity change from 0 to 1024 [ 1811.490225][T20576] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1811.505062][T20576] EXT4-fs error (device loop6): ext4_get_journal_inode:5151: inode #32: comm syz.6.5337: iget: special inode unallocated [ 1811.506091][T20563] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 1811.525852][T20576] EXT4-fs (loop6): no journal found [ 1811.530294][T20563] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1811.533695][T20576] EXT4-fs (loop6): can't get journal size [ 1811.810120][T20587] loop5: detected capacity change from 0 to 512 [ 1811.868435][T20587] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1815.827796][T20587] EXT4-fs: failed to create workqueue [ 1815.833238][T20587] EXT4-fs (loop5): mount failed [ 1815.888731][T20576] EXT4-fs: failed to create workqueue [ 1816.029425][T20576] EXT4-fs (loop6): mount failed [ 1816.201037][T20598] loop2: detected capacity change from 0 to 512 [ 1816.260372][T20602] loop3: detected capacity change from 0 to 512 [ 1816.317228][T20602] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1816.325433][T20602] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1816.357000][T20602] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5344: bad orphan inode 131083 [ 1816.419839][T20602] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1816.467739][T20594] loop1: detected capacity change from 0 to 40427 [ 1816.504773][T20609] cgroup: Need name or subsystem set [ 1816.752494][T20594] F2FS-fs (loop1): invalid crc value [ 1816.770799][T20594] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1816.859851][T20614] tipc: Enabling of bearer rejected, already enabled [ 1816.886024][T20594] F2FS-fs (loop1): Start checkpoint disabled! [ 1816.944568][T20594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1817.039754][T20594] overlayfs: failed to resolve './file1': -2 [ 1817.069464][ T8] attempt to access beyond end of device [ 1817.069464][ T8] loop1: rw=2049, want=40976, limit=40427 [ 1817.171855][T20619] loop6: detected capacity change from 0 to 128 [ 1817.193963][ T30] audit: type=1400 audit(1757729069.451:1375): avc: denied { mounton } for pid=20620 comm="syz.3.5349" path="/proc/1659/task" dev="proc" ino=98832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1817.217191][T20623] syz.2.5346[20623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1817.217266][T20623] syz.2.5346[20623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1817.230974][ T761] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1817.250527][T20623] usb usb1: usbfs: process 20623 (syz.2.5346) did not claim interface 0 before use [ 1817.316331][T20619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20619 comm=syz.6.5348 [ 1817.350237][T20619] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5348'. [ 1817.647516][T20619] syz.6.5348 (20619) used greatest stack depth: 20064 bytes left [ 1817.719706][ T761] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1817.738819][ T761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2624, setting to 1024 [ 1817.750916][T20629] loop1: detected capacity change from 0 to 8192 [ 1817.862270][ T761] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1819.469529][T20639] loop2: detected capacity change from 0 to 512 [ 1820.182436][T20639] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1820.387756][T20639] EXT4-fs (loop2): 1 truncate cleaned up [ 1820.393502][T20639] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1820.501020][T20643] input: syz1 as /devices/virtual/input/input9 [ 1820.570600][ T761] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1820.588096][ T761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.624257][ T761] usb 6-1: Product: syz [ 1820.636586][ T761] usb 6-1: config 0 descriptor?? [ 1820.681563][ T761] usb 6-1: can't set config #0, error -71 [ 1820.702926][T20652] loop1: detected capacity change from 0 to 512 [ 1820.716492][ T761] usb 6-1: USB disconnect, device number 14 [ 1820.725079][T20655] incfs: iterate_incfs_dir / -22 [ 1820.730086][T20655] incfs: iterate_incfs_dir / -22 [ 1820.800341][T20652] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1820.807156][T20652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1820.822663][T20652] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5359: bad orphan inode 131083 [ 1820.834870][T20652] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1821.576215][T20662] loop2: detected capacity change from 0 to 1024 [ 1822.300965][ T30] audit: type=1400 audit(1757729073.821:1376): avc: denied { write } for pid=20654 comm="syz.2.5356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1822.422769][T20664] cgroup: Need name or subsystem set [ 1822.540679][T20665] tipc: Enabling of bearer rejected, already enabled [ 1822.861533][T20667] netlink: 23 bytes leftover after parsing attributes in process `syz.5.5361'. [ 1822.903932][T20669] loop3: detected capacity change from 0 to 512 [ 1822.936360][T20669] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1822.960249][T20675] SELinux: security_context_str_to_sid(E) failed for (dev ?, type ?) errno=-22 [ 1822.971194][T20675] SELinux: security_context_str_to_sid(E) failed for (dev sysfs, type sysfs) errno=-22 [ 1822.990631][T20673] loop2: detected capacity change from 0 to 8192 [ 1823.059064][T20669] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1823.072037][T20669] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5360: bad orphan inode 131083 [ 1823.084497][T20669] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1823.260964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1823.358071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1823.367815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1823.376162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1823.385463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1823.395047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1823.403828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1823.422521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1823.540591][T20693] loop2: detected capacity change from 0 to 512 [ 1823.610833][T20693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1823.685841][T20693] EXT4-fs (loop2): 1 truncate cleaned up [ 1823.691812][T20693] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1823.891014][T20697] loop1: detected capacity change from 0 to 1024 [ 1823.970481][T20697] EXT4-fs (loop1): Ignoring removed nobh option [ 1823.982393][T20697] EXT4-fs (loop1): Ignoring removed bh option [ 1823.994198][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5365'. [ 1824.003724][T20697] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1824.048699][T20697] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,delalloc,grpquota,nobh,user_xattr,bh,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 1824.156479][ T30] audit: type=1400 audit(1757729076.411:1377): avc: denied { append } for pid=20696 comm="syz.1.5369" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1824.334107][T20717] loop3: detected capacity change from 0 to 512 [ 1824.403492][T20717] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1824.453294][T20717] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1824.467076][T20721] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1824.487969][T20721] overlayfs: missing 'lowerdir' [ 1824.741639][T20717] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5370: bad orphan inode 131083 [ 1824.762849][T20717] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1824.847828][T20742] loop1: detected capacity change from 0 to 512 [ 1824.857338][T20742] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1824.864928][T20742] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1824.896465][T20742] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1824.903797][T20742] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1824.926787][T20742] EXT4-fs (loop1): 1 truncate cleaned up [ 1824.943078][T20742] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1824.966314][T20746] loop5: detected capacity change from 0 to 512 [ 1825.041601][T20746] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1825.058307][T20746] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1825.072106][T20746] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.5373: bad orphan inode 131083 [ 1825.083197][T20746] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1825.303809][T20751] tipc: Enabling of bearer rejected, already enabled [ 1825.546159][T20758] loop2: detected capacity change from 0 to 512 [ 1825.622209][T20759] usb usb1: usbfs: process 20759 (syz.3.5375) did not claim interface 0 before use [ 1828.558571][T20758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1828.580990][T20758] EXT4-fs: failed to create workqueue [ 1828.586491][T20758] EXT4-fs (loop2): mount failed [ 1828.626964][T20762] loop3: detected capacity change from 0 to 8192 [ 1828.804694][T20771] loop6: detected capacity change from 0 to 128 [ 1829.050352][T20775] IPv4: Oversized IP packet from 127.202.26.0 [ 1829.060849][T20777] loop1: detected capacity change from 0 to 8192 [ 1829.146084][ T60] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1830.632812][ T30] audit: type=1400 audit(1757729082.896:1378): avc: denied { watch } for pid=20782 comm="syz.1.5385" path="/486/control" dev="tmpfs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1831.162535][T20794] loop6: detected capacity change from 0 to 512 [ 1831.208399][T20796] loop1: detected capacity change from 0 to 512 [ 1831.241194][T20794] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1831.252613][T20794] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1831.264618][T20794] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5388: bad orphan inode 131083 [ 1831.277494][T20799] loop2: detected capacity change from 0 to 128 [ 1831.285036][T20796] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1831.292305][T20796] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1831.323313][T20794] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1831.337939][T20796] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1831.345701][T20796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1831.362493][T20801] tmpfs: Bad value for 'fscontext' [ 1831.422038][T20796] EXT4-fs (loop1): 1 truncate cleaned up [ 1831.427187][T20804] loop3: detected capacity change from 0 to 512 [ 1831.427829][T20796] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1831.473153][T20803] tipc: Enabling of bearer rejected, already enabled [ 1831.504756][T20804] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1831.512810][T20804] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1831.521392][T20804] System zones: 0-1, 15-15, 18-18, 34-34 [ 1831.528737][T20804] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1831.535485][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.546974][T20804] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1831.559508][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.570021][T20804] EXT4-fs warning (device loop3): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1831.578521][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1831.632612][T20804] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1831.640872][T20804] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5390: bg 0: block 40: padding at end of block bitmap is not set [ 1831.646666][ T60] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1831.664200][T20804] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 1831.664253][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.673600][T20804] EXT4-fs (loop3): 1 truncate cleaned up [ 1831.686945][T20804] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 1831.721173][ T60] usb 6-1: config 0 descriptor?? [ 1831.739840][ T60] usb 6-1: can't set config #0, error -71 [ 1831.751131][ T60] usb 6-1: USB disconnect, device number 15 [ 1831.795289][T20811] loop6: detected capacity change from 0 to 8192 [ 1831.898638][T20815] usb usb1: usbfs: process 20815 (syz.5.5393) did not claim interface 0 before use [ 1831.942989][T20821] xt_bpf: check failed: parse error [ 1831.950686][ T30] audit: type=1400 audit(1757729084.216:1379): avc: denied { read } for pid=20822 comm="syz.6.5396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1831.981796][ T30] audit: type=1400 audit(1757729084.246:1380): avc: denied { bind } for pid=20824 comm="syz.3.5395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1832.129071][T20821] loop2: detected capacity change from 0 to 256 [ 1832.183133][ T30] audit: type=1400 audit(1757729084.446:1381): avc: denied { mounton } for pid=20820 comm="syz.2.5397" path="/498/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1832.210545][T20821] FAT-fs (loop2): Directory bread(block 64) failed [ 1832.217322][T20821] FAT-fs (loop2): Directory bread(block 65) failed [ 1832.226038][T20821] FAT-fs (loop2): Directory bread(block 66) failed [ 1832.232976][T20821] FAT-fs (loop2): Directory bread(block 67) failed [ 1832.239824][T20821] FAT-fs (loop2): Directory bread(block 68) failed [ 1832.246406][T20821] FAT-fs (loop2): Directory bread(block 69) failed [ 1832.253023][T20821] FAT-fs (loop2): Directory bread(block 70) failed [ 1832.259758][T20821] FAT-fs (loop2): Directory bread(block 71) failed [ 1832.266541][T20821] FAT-fs (loop2): Directory bread(block 72) failed [ 1832.273171][T20821] FAT-fs (loop2): Directory bread(block 73) failed [ 1832.389704][ T60] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1832.589230][T20839] loop5: detected capacity change from 0 to 256 [ 1832.647786][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 1832.653923][T20839] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1832.668251][T20839] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1832.678580][T20839] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1832.769687][ T60] usb 4-1: config 0 has an invalid descriptor of length 227, skipping remainder of the config [ 1832.781513][ T60] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1832.790870][ T60] usb 4-1: New USB device found, idVendor=238b, idProduct=4c29, bcdDevice=96.1d [ 1832.814063][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.828328][ T60] usb 4-1: config 0 descriptor?? [ 1832.933910][T20847] loop6: detected capacity change from 0 to 8192 [ 1832.953836][T20852] loop2: detected capacity change from 0 to 512 [ 1832.981490][T20849] loop5: detected capacity change from 0 to 128 [ 1832.994111][T20852] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1833.004529][T20852] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1833.034098][T20852] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.5405: bad orphan inode 131083 [ 1833.048873][T20852] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1833.098201][T20858] loop6: detected capacity change from 0 to 8192 [ 1833.118260][T13062] usb 4-1: USB disconnect, device number 11 [ 1833.176129][T20860] tipc: Enabling of bearer rejected, already enabled [ 1833.254022][T20869] cgroup: Need name or subsystem set [ 1833.818529][T20874] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1833.832812][T20874] overlayfs: missing 'lowerdir' [ 1833.898313][T20875] loop5: detected capacity change from 0 to 512 [ 1834.009853][T20875] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1834.039397][T20875] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1834.061673][T20875] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.5413: bad orphan inode 131083 [ 1834.138614][T20875] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1834.207203][T20881] cgroup: Need name or subsystem set [ 1836.113411][T20903] cgroup: Need name or subsystem set [ 1836.121279][T20900] loop1: detected capacity change from 0 to 4096 [ 1836.161569][ T30] audit: type=1326 audit(1757729088.366:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1836.190297][T20900] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1836.261060][ T30] audit: type=1326 audit(1757729088.366:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1836.450191][ T30] audit: type=1326 audit(1757729088.366:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1836.485940][T20900] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1836.569086][T20900] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1836.594904][T20894] loop2: detected capacity change from 0 to 8192 [ 1836.805925][T20912] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1837.007867][T20917] loop3: detected capacity change from 0 to 512 [ 1837.019102][ T30] audit: type=1326 audit(1757729088.366:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1837.043678][ T30] audit: type=1326 audit(1757729088.366:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1837.067437][ T30] audit: type=1326 audit(1757729088.366:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1837.218473][T20921] cgroup: Need name or subsystem set [ 1837.265617][T20917] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1837.368544][T20917] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1837.379161][ T30] audit: type=1326 audit(1757729088.366:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1837.458504][T20917] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5424: bad orphan inode 131083 [ 1837.462178][ T30] audit: type=1326 audit(1757729088.366:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1837.512038][ T30] audit: type=1326 audit(1757729088.366:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1837.536026][ T30] audit: type=1326 audit(1757729088.366:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20891 comm="syz.1.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2730a61ba9 code=0x7ffc0000 [ 1837.569752][T20917] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1837.713573][T20928] tipc: Enabling of bearer rejected, already enabled [ 1838.071528][ T39] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1838.281545][T20948] loop1: detected capacity change from 0 to 512 [ 1838.458800][T20945] loop6: detected capacity change from 0 to 8192 [ 1838.482711][T20948] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1838.491432][T20948] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1838.499070][T20948] EXT4-fs warning (device loop1): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1838.513763][T20948] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1838.532245][T20948] EXT4-fs error (device loop1): __ext4_iget:4925: inode #16: block 127754: comm syz.1.5432: invalid block [ 1838.544018][T20948] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.5432: couldn't read orphan inode 16 (err -117) [ 1838.556229][T20948] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1838.574283][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 1838.644646][T20958] loop6: detected capacity change from 0 to 1024 [ 1838.657977][T20955] loop2: detected capacity change from 0 to 8192 [ 1838.702430][T20958] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1838.759273][ T39] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.768132][T20964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5438'. [ 1838.770683][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1838.785151][T20964] netlink: 'syz.2.5438': attribute type 4 has an invalid length. [ 1838.828972][T20966] loop2: detected capacity change from 0 to 512 [ 1838.845660][T20967] fuse: Bad value for 'user_id' [ 1838.856635][T20966] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1838.868663][T20966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1838.883307][T20966] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.5439: bad orphan inode 131083 [ 1838.894468][T20966] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1838.899216][ T39] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1838.954297][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.000418][ T39] usb 6-1: config 0 descriptor?? [ 1839.058764][T20974] tipc: Enabling of bearer rejected, already enabled [ 1839.107280][T20975] cgroup: Need name or subsystem set [ 1839.495233][T20978] loop3: detected capacity change from 0 to 512 [ 1839.503849][T20978] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1839.511045][T20978] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1839.523299][T20978] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5442: bad orphan inode 131083 [ 1839.534232][T20978] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1839.619682][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 1839.625882][ T39] usbhid: probe of 6-1:0.0 failed with error -71 [ 1839.634426][ T39] usb 6-1: USB disconnect, device number 16 [ 1839.737315][T20981] tipc: Enabling of bearer rejected, already enabled [ 1839.997892][T20984] loop1: detected capacity change from 0 to 8192 [ 1840.263615][T21000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5449'. [ 1840.281974][T20998] loop6: detected capacity change from 0 to 128 [ 1840.419281][T21000] netlink: 'syz.1.5449': attribute type 4 has an invalid length. [ 1840.454608][T20998] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1840.833288][T21006] cgroup: Need name or subsystem set [ 1840.961415][T20998] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1841.020318][T20998] device pim6reg1 entered promiscuous mode [ 1841.205902][T21012] netlink: 'syz.1.5452': attribute type 1 has an invalid length. [ 1841.412348][T21014] loop2: detected capacity change from 0 to 512 [ 1841.443602][T21014] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1841.454336][T21014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1841.466097][T21014] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.5453: bad orphan inode 131083 [ 1841.477608][T21014] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1841.599534][T21016] tipc: Enabling of bearer rejected, already enabled [ 1841.646351][T21022] loop5: detected capacity change from 0 to 512 [ 1841.678378][T21022] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1841.733571][T21022] EXT4-fs (loop5): invalid journal inode [ 1841.737098][T21020] loop3: detected capacity change from 0 to 8192 [ 1841.739330][T21022] EXT4-fs (loop5): can't get journal size [ 1841.752031][T21022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 1841.760155][T21022] System zones: 1-12, 13-13 [ 1841.765294][T21022] EXT4-fs (loop5): 1 truncate cleaned up [ 1841.765558][T21020] FAT-fs (loop3): Unrecognized mount option "GPL" or missing value [ 1841.781733][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1841.781747][ T30] audit: type=1326 audit(1757729094.046:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1841.785143][T21022] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 1841.811745][ T30] audit: type=1326 audit(1757729094.046:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1841.850503][T21027] cgroup: Need name or subsystem set [ 1841.877256][ T30] audit: type=1326 audit(1757729094.046:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1841.914926][ T30] audit: type=1326 audit(1757729094.046:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1841.939024][ T30] audit: type=1326 audit(1757729094.046:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1841.979671][ T30] audit: type=1326 audit(1757729094.046:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1842.003970][ T30] audit: type=1326 audit(1757729094.046:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1842.028106][ T30] audit: type=1326 audit(1757729094.046:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1842.051884][ T30] audit: type=1326 audit(1757729094.136:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1842.077541][ T30] audit: type=1326 audit(1757729094.136:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d246ffba9 code=0x7ffc0000 [ 1842.155270][T21035] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1842.164073][T21035] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1842.304053][T15850] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1842.332664][T21040] usb usb1: usbfs: process 21040 (syz.1.5462) did not claim interface 0 before use [ 1843.315337][T21048] loop1: detected capacity change from 0 to 512 [ 1843.329913][T21043] cgroup: Need name or subsystem set [ 1843.443563][T21048] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1843.469387][T21048] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1843.476621][T21048] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1843.484175][T15850] usb 6-1: Using ep0 maxpacket: 16 [ 1843.489680][T21048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1843.540845][T21048] EXT4-fs (loop1): 1 truncate cleaned up [ 1843.546755][T21048] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1843.871373][T21060] loop3: detected capacity change from 0 to 512 [ 1844.434520][T15850] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1844.445172][T15850] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1844.835768][T21066] netlink: 'syz.6.5469': attribute type 1 has an invalid length. [ 1845.422165][T21060] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1845.431294][T21060] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1845.438242][T21060] EXT4-fs warning (device loop3): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1845.453071][T21060] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1845.460657][T21060] EXT4-fs error (device loop3): __ext4_iget:4925: inode #16: block 127754: comm syz.3.5468: invalid block [ 1845.472285][T21060] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.5468: couldn't read orphan inode 16 (err -117) [ 1845.484403][T21060] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1845.593587][T21070] loop6: detected capacity change from 0 to 512 [ 1845.929887][T21070] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1845.937698][T21070] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1845.950657][T21070] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5470: bad orphan inode 131083 [ 1845.950874][T15850] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1845.961376][T21070] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1846.016204][T21079] loop3: detected capacity change from 0 to 256 [ 1846.026999][T21079] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1846.037901][T21079] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1846.048525][T21079] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1846.128125][T15850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.766876][T21081] tipc: Enabling of bearer rejected, already enabled [ 1846.786447][T21086] loop5: detected capacity change from 0 to 512 [ 1847.569659][T15850] usb 6-1: can't set config #1, error -71 [ 1847.577266][T15850] usb 6-1: USB disconnect, device number 17 [ 1847.589335][T21086] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1847.668726][T21086] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1847.982094][T21090] cgroup: Need name or subsystem set [ 1848.552558][T21091] fuse: Bad value for 'fd' [ 1849.178067][T21086] EXT4-fs warning (device loop5): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1849.192699][T21086] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1849.200485][T21086] EXT4-fs error (device loop5): __ext4_iget:4925: inode #16: block 127754: comm syz.5.5471: invalid block [ 1849.212197][T21086] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.5471: couldn't read orphan inode 16 (err -117) [ 1849.224617][T21086] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1849.284324][T21095] loop3: detected capacity change from 0 to 512 [ 1849.408597][T21100] loop1: detected capacity change from 0 to 512 [ 1849.412437][T21101] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1849.452789][T21095] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1849.459726][T21095] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1849.471506][T21095] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5475: bad orphan inode 131083 [ 1849.482506][T21095] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1849.544706][T21108] loop6: detected capacity change from 0 to 128 [ 1849.558131][T21100] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1849.657801][T21100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1849.723723][T21100] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5479: bad orphan inode 131083 [ 1849.802403][T21100] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1849.921521][T21114] tipc: Enabling of bearer rejected, already enabled [ 1850.069128][T21116] tipc: Enabling of bearer rejected, already enabled [ 1850.549721][T21117] loop5: detected capacity change from 0 to 256 [ 1850.695354][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5478'. [ 1850.944918][T21125] FAULT_INJECTION: forcing a failure. [ 1850.944918][T21125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1851.052419][T21125] CPU: 1 PID: 21125 Comm: syz.1.5483 Not tainted syzkaller #0 [ 1851.059915][T21125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1851.069968][T21125] Call Trace: [ 1851.073244][T21125] [ 1851.076171][T21125] __dump_stack+0x21/0x30 [ 1851.080509][T21125] dump_stack_lvl+0xee/0x150 [ 1851.085099][T21125] ? show_regs_print_info+0x20/0x20 [ 1851.090315][T21125] dump_stack+0x15/0x20 [ 1851.094461][T21125] should_fail+0x3c1/0x510 [ 1851.098862][T21125] should_fail_usercopy+0x1a/0x20 [ 1851.103876][T21125] _copy_to_user+0x20/0x90 [ 1851.108290][T21125] simple_read_from_buffer+0xe9/0x160 [ 1851.113657][T21125] proc_fail_nth_read+0x19a/0x210 [ 1851.118670][T21125] ? proc_fault_inject_write+0x2f0/0x2f0 [ 1851.124303][T21125] ? security_file_permission+0x83/0xa0 [ 1851.129843][T21125] ? proc_fault_inject_write+0x2f0/0x2f0 [ 1851.135459][T21125] vfs_read+0x282/0xbe0 [ 1851.139598][T21125] ? kernel_read+0x1f0/0x1f0 [ 1851.144177][T21125] ? __kasan_check_write+0x14/0x20 [ 1851.149276][T21125] ? mutex_lock+0x95/0x1a0 [ 1851.153673][T21125] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1851.160247][T21125] ? __fget_files+0x2c4/0x320 [ 1851.164915][T21125] ? __fdget_pos+0x2d2/0x380 [ 1851.169663][T21125] ? ksys_read+0x71/0x240 [ 1851.173975][T21125] ksys_read+0x140/0x240 [ 1851.178200][T21125] ? vfs_write+0xf70/0xf70 [ 1851.182599][T21125] ? __kasan_check_write+0x14/0x20 [ 1851.187691][T21125] ? switch_fpu_return+0x15d/0x2c0 [ 1851.192964][T21125] __x64_sys_read+0x7b/0x90 [ 1851.197464][T21125] x64_sys_call+0x96d/0x9a0 [ 1851.201952][T21125] do_syscall_64+0x4c/0xa0 [ 1851.206352][T21125] ? clear_bhb_loop+0x50/0xa0 [ 1851.211101][T21125] ? clear_bhb_loop+0x50/0xa0 [ 1851.215762][T21125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1851.221638][T21125] RIP: 0033:0x7f2730a605bc [ 1851.226037][T21125] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1851.245628][T21125] RSP: 002b:00007f272f4ca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1851.254032][T21125] RAX: ffffffffffffffda RBX: 00007f2730ca8fa0 RCX: 00007f2730a605bc [ 1851.261990][T21125] RDX: 000000000000000f RSI: 00007f272f4ca0a0 RDI: 0000000000000007 [ 1851.270035][T21125] RBP: 00007f272f4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.277997][T21125] R10: 00000000000005ee R11: 0000000000000246 R12: 0000000000000001 [ 1851.285956][T21125] R13: 00007f2730ca9038 R14: 00007f2730ca8fa0 R15: 00007fffaca12c38 [ 1851.293922][T21125] [ 1851.300982][T21128] loop2: detected capacity change from 0 to 512 [ 1851.348187][T21128] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1851.356725][T21128] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1851.363759][T21128] EXT4-fs warning (device loop2): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1851.378484][T21128] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1851.389850][T21128] EXT4-fs error (device loop2): __ext4_iget:4925: inode #16: block 127754: comm syz.2.5484: invalid block [ 1851.401899][T21128] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.5484: couldn't read orphan inode 16 (err -117) [ 1851.418328][T21128] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1851.423830][T21134] loop5: detected capacity change from 0 to 256 [ 1851.481351][T21134] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1851.493169][T21134] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1851.520518][T21134] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1851.555971][T21139] loop1: detected capacity change from 0 to 128 [ 1851.632079][T21138] loop6: detected capacity change from 0 to 40427 [ 1851.688564][T21138] F2FS-fs (loop6): invalid crc value [ 1851.709054][T21138] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1851.725821][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1851.725836][ T30] audit: type=1400 audit(1757729103.986:1461): avc: denied { mounton } for pid=21143 comm="syz.3.5489" path="/491/file0" dev="tmpfs" ino=2989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1851.751766][T21138] F2FS-fs (loop6): Start checkpoint disabled! [ 1851.762128][T21138] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1851.807348][T20739] attempt to access beyond end of device [ 1851.807348][T20739] loop6: rw=2049, want=40976, limit=40427 [ 1851.973125][T21146] loop5: detected capacity change from 0 to 40427 [ 1851.989889][T21146] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1852.003623][T21146] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1852.013377][T21146] F2FS-fs (loop5): invalid crc value [ 1852.088659][T21156] cgroup: Need name or subsystem set [ 1852.555950][T21159] cgroup: Need name or subsystem set [ 1852.876014][T21146] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1852.889170][T21164] loop2: detected capacity change from 0 to 512 [ 1854.819968][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5494'. [ 1855.057894][T21164] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1855.233567][T21164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1855.292568][T21164] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.5493: bad orphan inode 131083 [ 1855.306196][ T30] audit: type=1400 audit(1757729107.566:1462): avc: denied { audit_write } for pid=21175 comm="syz.6.5496" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1855.335715][T21164] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1855.363471][T21179] loop6: detected capacity change from 0 to 256 [ 1855.369881][ T30] audit: type=1107 audit(1757729107.586:1463): pid=21175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W>)φx5sOu Y&nxZ_yTY 'Y 7ݴ5u?F+樽i ?kG֙21=ΑY3&f!tRQU:HƸ${%R=4h [ 1855.469369][T21181] __dump_stack+0x21/0x30 [ 1855.473727][T21181] dump_stack_lvl+0xee/0x150 [ 1855.478425][T21181] ? show_regs_print_info+0x20/0x20 [ 1855.483629][T21181] dump_stack+0x15/0x20 [ 1855.487795][T21181] should_fail+0x3c1/0x510 [ 1855.492215][T21181] should_fail_usercopy+0x1a/0x20 [ 1855.497247][T21181] _copy_from_user+0x20/0xd0 [ 1855.501845][T21181] bpf_test_init+0x13d/0x1c0 [ 1855.506450][T21181] bpf_prog_test_run_skb+0x193/0x1150 [ 1855.512006][T21181] ? __kasan_check_write+0x14/0x20 [ 1855.517292][T21181] ? fput_many+0x15a/0x1a0 [ 1855.521707][T21181] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 1855.527699][T21181] bpf_prog_test_run+0x3d5/0x620 [ 1855.532651][T21181] ? bpf_prog_query+0x230/0x230 [ 1855.537502][T21181] ? selinux_bpf+0xce/0xf0 [ 1855.541928][T21181] ? security_bpf+0x82/0xa0 [ 1855.546528][T21181] __sys_bpf+0x52c/0x730 [ 1855.550768][T21181] ? bpf_link_show_fdinfo+0x310/0x310 [ 1855.556152][T21181] ? debug_smp_processor_id+0x17/0x20 [ 1855.561528][T21181] __x64_sys_bpf+0x7c/0x90 [ 1855.565945][T21181] x64_sys_call+0x4b9/0x9a0 [ 1855.570445][T21181] do_syscall_64+0x4c/0xa0 [ 1855.574902][T21181] ? clear_bhb_loop+0x50/0xa0 [ 1855.579573][T21181] ? clear_bhb_loop+0x50/0xa0 [ 1855.584250][T21181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1855.590153][T21181] RIP: 0033:0x7f2730a61ba9 [ 1855.592278][T21183] loop3: detected capacity change from 0 to 1024 [ 1855.594573][T21181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1855.620579][T21181] RSP: 002b:00007f272f4ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1855.629007][T21181] RAX: ffffffffffffffda RBX: 00007f2730ca8fa0 RCX: 00007f2730a61ba9 [ 1855.636962][T21181] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1855.644914][T21181] RBP: 00007f272f4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.652907][T21181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1855.660884][T21181] R13: 00007f2730ca9038 R14: 00007f2730ca8fa0 R15: 00007fffaca12c38 [ 1855.668905][T21181] [ 1855.680924][T21179] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1855.696380][T21183] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1855.701777][T21179] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1855.715901][T21164] tipc: Enabling of bearer rejected, already enabled [ 1855.724434][T21183] EXT4-fs error (device loop3): ext4_get_journal_inode:5151: inode #32: comm syz.3.5500: iget: special inode unallocated [ 1855.748643][T21183] EXT4-fs (loop3): no journal found [ 1855.754744][T21179] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1855.767324][T21183] EXT4-fs (loop3): can't get journal size [ 1855.794478][T21183] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.5500: iget: special inode unallocated [ 1855.837221][T21183] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1855.866663][T21183] EXT4-fs (loop3): mount failed [ 1855.888240][T21191] loop2: detected capacity change from 0 to 512 [ 1855.953431][T21183] loop3: detected capacity change from 0 to 512 [ 1856.457804][T21195] netlink: 'syz.1.5502': attribute type 1 has an invalid length. [ 1856.471928][T21198] loop6: detected capacity change from 0 to 512 [ 1856.510991][T21191] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1856.591200][T21183] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.5500: casefold flag without casefold feature [ 1856.620917][T21191] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1856.629752][T21198] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1856.649679][T21198] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1856.652477][T21191] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1856.656545][T21198] EXT4-fs warning (device loop6): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1856.663297][T21191] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1856.677754][T21198] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1856.694463][T21198] EXT4-fs error (device loop6): __ext4_iget:4925: inode #16: block 127754: comm syz.6.5501: invalid block [ 1856.706290][T21198] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.5501: couldn't read orphan inode 16 (err -117) [ 1856.718780][T21198] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1856.753262][T21183] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.5500: couldn't read orphan inode 15 (err -117) [ 1856.798524][T21183] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1856.813072][T21191] EXT4-fs (loop2): 1 truncate cleaned up [ 1856.818824][T21191] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1856.968141][T21205] cgroup: Need name or subsystem set [ 1857.626586][T21206] overlayfs: unrecognized mount option "fowner<00000000000000000000" or missing value [ 1858.266058][T21212] syz.5.5506[21212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1858.267357][T21212] syz.5.5506[21212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1858.876485][T21212] usb usb1: usbfs: process 21212 (syz.5.5506) did not claim interface 0 before use [ 1858.944923][T21215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5508'. [ 1858.962196][T21215] netlink: 'syz.1.5508': attribute type 4 has an invalid length. [ 1859.031233][ T30] audit: type=1400 audit(1757729111.296:1464): avc: denied { getopt } for pid=21219 comm="syz.1.5509" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1860.383506][T21226] syz.3.5507[21226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1860.383865][T21226] syz.3.5507[21226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1860.445925][T21226] usb usb1: usbfs: process 21226 (syz.3.5507) did not claim interface 0 before use [ 1860.637606][ T30] audit: type=1400 audit(1757729112.836:1465): avc: denied { listen } for pid=21219 comm="syz.1.5509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1860.767196][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5510'. [ 1860.980112][T21231] loop6: detected capacity change from 0 to 512 [ 1861.016048][T21231] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1861.056371][T21237] loop3: detected capacity change from 0 to 512 [ 1861.056642][T21231] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1861.164014][T21231] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5513: bad orphan inode 131083 [ 1861.174882][T21231] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1861.191373][T21237] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1861.198183][T21237] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1861.458733][T21243] loop1: detected capacity change from 0 to 512 [ 1861.534384][T21231] tipc: Enabling of bearer rejected, already enabled [ 1861.607286][T21243] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1861.615940][T21243] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1861.622941][T21243] EXT4-fs warning (device loop1): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1861.638079][T21243] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1861.645134][T21243] EXT4-fs error (device loop1): __ext4_iget:4925: inode #16: block 127754: comm syz.1.5516: invalid block [ 1861.656894][T21237] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5515: bad orphan inode 131083 [ 1861.657349][T21237] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1861.671420][T21250] loop2: detected capacity change from 0 to 256 [ 1861.687775][T21243] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.5516: couldn't read orphan inode 16 (err -117) [ 1861.949145][T21237] tipc: Enabling of bearer rejected, already enabled [ 1862.000476][T21251] FAULT_INJECTION: forcing a failure. [ 1862.000476][T21251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1862.013852][T21251] CPU: 0 PID: 21251 Comm: syz.5.5518 Not tainted syzkaller #0 [ 1862.021320][T21251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1862.031371][T21251] Call Trace: [ 1862.034646][T21251] [ 1862.037564][T21251] __dump_stack+0x21/0x30 [ 1862.041888][T21251] dump_stack_lvl+0xee/0x150 [ 1862.046464][T21251] ? show_regs_print_info+0x20/0x20 [ 1862.051648][T21251] ? has_cap_mac_admin+0x330/0x330 [ 1862.056743][T21251] dump_stack+0x15/0x20 [ 1862.060881][T21251] should_fail+0x3c1/0x510 [ 1862.065279][T21251] should_fail_usercopy+0x1a/0x20 [ 1862.070283][T21251] _copy_from_user+0x20/0xd0 [ 1862.074861][T21251] get_user_ifreq+0x6c/0x180 [ 1862.079434][T21251] sock_ioctl+0x605/0x6b0 [ 1862.083749][T21251] ? sock_poll+0x3d0/0x3d0 [ 1862.088150][T21251] ? security_file_ioctl+0x84/0xa0 [ 1862.093260][T21251] ? sock_poll+0x3d0/0x3d0 [ 1862.097664][T21251] __se_sys_ioctl+0x121/0x1a0 [ 1862.102328][T21251] __x64_sys_ioctl+0x7b/0x90 [ 1862.106903][T21251] x64_sys_call+0x2f/0x9a0 [ 1862.111304][T21251] do_syscall_64+0x4c/0xa0 [ 1862.115706][T21251] ? clear_bhb_loop+0x50/0xa0 [ 1862.120373][T21251] ? clear_bhb_loop+0x50/0xa0 [ 1862.125048][T21251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1862.131012][T21251] RIP: 0033:0x7f983cbffba9 [ 1862.135424][T21251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1862.155027][T21251] RSP: 002b:00007f983b647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1862.163428][T21251] RAX: ffffffffffffffda RBX: 00007f983ce47090 RCX: 00007f983cbffba9 [ 1862.171483][T21251] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 1862.179436][T21251] RBP: 00007f983b647090 R08: 0000000000000000 R09: 0000000000000000 [ 1862.187391][T21251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1862.195348][T21251] R13: 00007f983ce47128 R14: 00007f983ce47090 R15: 00007ffd18785408 [ 1862.203310][T21251] [ 1862.208487][T21243] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1862.229082][T21250] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1862.260429][T21250] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1862.275432][T21250] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1862.895205][T21258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5520'. [ 1862.923306][T21262] cgroup: Need name or subsystem set [ 1863.094933][T21258] netlink: 'syz.2.5520': attribute type 4 has an invalid length. [ 1863.209488][T21272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21272 comm=syz.6.5526 [ 1863.277681][T21280] loop6: detected capacity change from 0 to 1024 [ 1863.458481][T21282] netlink: 'syz.2.5527': attribute type 1 has an invalid length. [ 1864.061796][T21284] usb usb1: usbfs: process 21284 (syz.1.5524) did not claim interface 0 before use [ 1864.469668][T21280] EXT4-fs (loop6): Ignoring removed nobh option [ 1864.476206][T21280] EXT4-fs (loop6): Ignoring removed bh option [ 1864.506385][T21286] loop3: detected capacity change from 0 to 512 [ 1864.528438][T21289] loop1: detected capacity change from 0 to 512 [ 1864.552170][T21291] loop2: detected capacity change from 0 to 512 [ 1864.559436][T21280] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,grpquota,nobh,abort,lazytime,usrquota,resgid=0x0000000000000000,bh,,errors=continue. Quota mode: writeback. [ 1864.579674][T21280] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1864.607782][T21286] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1864.619980][T21286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1864.631362][T21286] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5528: bad orphan inode 131083 [ 1864.642285][T21286] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1864.660294][T21291] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1864.672666][T21291] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1864.707210][T21289] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1864.714428][T21289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1864.749959][T21289] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5529: bad orphan inode 131083 [ 1864.760743][T21289] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1864.788988][T21291] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.5530: bad orphan inode 131083 [ 1864.850405][T21291] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1864.858580][T21299] loop6: detected capacity change from 0 to 512 [ 1864.890052][T21299] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1864.937691][T21286] tipc: Enabling of bearer rejected, already enabled [ 1865.373922][T21300] loop5: detected capacity change from 0 to 512 [ 1865.381517][T21302] tipc: Enabling of bearer rejected, already enabled [ 1865.394154][T21291] tipc: Enabling of bearer rejected, already enabled [ 1865.394610][T21299] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1865.413447][T21299] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5532: bad orphan inode 131083 [ 1865.424542][T21299] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1865.443121][T21300] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1865.451986][T21300] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1865.458878][T21300] EXT4-fs warning (device loop5): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1865.473624][T21300] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1865.481426][T21300] EXT4-fs error (device loop5): __ext4_iget:4925: inode #16: block 127754: comm syz.5.5531: invalid block [ 1865.493575][T21300] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.5531: couldn't read orphan inode 16 (err -117) [ 1865.506668][T21300] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1865.583012][T21310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5536'. [ 1865.592640][T21310] netlink: 'syz.2.5536': attribute type 4 has an invalid length. [ 1865.701926][T21318] tipc: Enabling of bearer rejected, already enabled [ 1865.940857][T21322] fuse: Bad value for 'user_id' [ 1866.176147][T21331] usb usb1: usbfs: process 21331 (syz.3.5540) did not claim interface 0 before use [ 1866.203693][T21332] cgroup: Need name or subsystem set [ 1866.339899][T21334] syz.2.5543[21334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1866.339974][T21334] syz.2.5543[21334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1866.498510][T21334] usb usb1: usbfs: process 21334 (syz.2.5543) did not claim interface 0 before use [ 1866.560715][T21338] loop5: detected capacity change from 0 to 512 [ 1866.573746][T21341] loop6: detected capacity change from 0 to 512 [ 1866.621899][T21338] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1866.627818][T21341] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1866.635673][T21341] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1866.637758][T21338] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1866.657358][T21341] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5545: bad orphan inode 131083 [ 1866.657544][T21338] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.5544: bad orphan inode 131083 [ 1866.668430][T21341] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1866.678421][T21338] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1866.710902][T21341] tipc: Enabling of bearer rejected, already enabled [ 1866.725591][T21338] tipc: Enabling of bearer rejected, already enabled [ 1866.769057][ T30] audit: type=1400 audit(1757729119.026:1466): avc: denied { mount } for pid=21347 comm="syz.5.5547" name="/" dev="configfs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1866.855787][ T30] audit: type=1400 audit(1757729119.066:1467): avc: denied { search } for pid=21347 comm="syz.5.5547" name="/" dev="configfs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1867.400941][T21354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5549'. [ 1867.582734][T21359] loop1: detected capacity change from 0 to 512 [ 1867.892738][T21361] loop3: detected capacity change from 0 to 128 [ 1868.776686][ T30] audit: type=1400 audit(1757729119.066:1468): avc: denied { read } for pid=21347 comm="syz.5.5547" name="/" dev="configfs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1868.799068][ T30] audit: type=1400 audit(1757729119.476:1469): avc: denied { open } for pid=21347 comm="syz.5.5547" path="/" dev="configfs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1868.833481][T21359] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1868.841985][T21359] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1868.849041][T21359] EXT4-fs warning (device loop1): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1868.863717][T21359] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1868.871629][T21354] netlink: 'syz.2.5549': attribute type 4 has an invalid length. [ 1868.880029][T21359] EXT4-fs error (device loop1): __ext4_iget:4925: inode #16: block 127754: comm syz.1.5548: invalid block [ 1868.891960][T21359] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.5548: couldn't read orphan inode 16 (err -117) [ 1868.905659][T21359] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1868.969158][T21354] netlink: 'syz.2.5549': attribute type 4 has an invalid length. [ 1870.716370][T21371] cgroup: Need name or subsystem set [ 1870.741147][T21371] fuse: Bad value for 'fd' [ 1870.797823][T21380] loop6: detected capacity change from 0 to 512 [ 1870.804294][T21378] loop3: detected capacity change from 0 to 512 [ 1870.834249][T21380] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1870.840185][T21378] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1870.841667][T21380] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1870.899703][T21378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1870.928332][T21378] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5556: bad orphan inode 131083 [ 1870.939063][T21378] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1870.954871][T21380] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5557: bad orphan inode 131083 [ 1870.969227][T21380] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1870.990970][T21380] tipc: Enabling of bearer rejected, already enabled [ 1871.015362][T21391] FAULT_INJECTION: forcing a failure. [ 1871.015362][T21391] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.028546][T21391] CPU: 1 PID: 21391 Comm: syz.2.5559 Not tainted syzkaller #0 [ 1871.036031][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1871.046131][T21391] Call Trace: [ 1871.049401][T21391] [ 1871.052317][T21391] __dump_stack+0x21/0x30 [ 1871.056639][T21391] dump_stack_lvl+0xee/0x150 [ 1871.061214][T21391] ? show_regs_print_info+0x20/0x20 [ 1871.066398][T21391] ? __kasan_slab_alloc+0xcf/0xf0 [ 1871.071409][T21391] ? slab_post_alloc_hook+0x4f/0x2b0 [ 1871.076750][T21391] dump_stack+0x15/0x20 [ 1871.080897][T21391] should_fail+0x3c1/0x510 [ 1871.085302][T21391] __should_failslab+0xa4/0xe0 [ 1871.090060][T21391] should_failslab+0x9/0x20 [ 1871.094547][T21391] slab_pre_alloc_hook+0x3b/0xe0 [ 1871.099483][T21391] ? __alloc_skb+0xe0/0x740 [ 1871.103975][T21391] kmem_cache_alloc+0x44/0x260 [ 1871.108728][T21391] __alloc_skb+0xe0/0x740 [ 1871.113042][T21391] alloc_skb_with_frags+0xa8/0x620 [ 1871.118142][T21391] ? memcpy+0x56/0x70 [ 1871.122136][T21391] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1871.127494][T21391] sock_alloc_send_pskb+0x853/0x980 [ 1871.132774][T21391] ? sock_kzfree_s+0x60/0x60 [ 1871.137348][T21391] ? avc_has_perm+0x158/0x240 [ 1871.142014][T21391] ? security_socket_getpeersec_dgram+0xaa/0xc0 [ 1871.148239][T21391] unix_stream_sendmsg+0x41b/0xc80 [ 1871.153338][T21391] ? unix_show_fdinfo+0xa0/0xa0 [ 1871.158179][T21391] ? security_socket_sendmsg+0x82/0xa0 [ 1871.163633][T21391] ? unix_show_fdinfo+0xa0/0xa0 [ 1871.168537][T21391] ____sys_sendmsg+0x5a2/0x8c0 [ 1871.173303][T21391] ? __sys_sendmsg_sock+0x40/0x40 [ 1871.178331][T21391] ? import_iovec+0x7c/0xb0 [ 1871.182822][T21391] ___sys_sendmsg+0x1f0/0x260 [ 1871.187485][T21391] ? __sys_sendmsg+0x250/0x250 [ 1871.192242][T21391] ? __fdget+0x1a1/0x230 [ 1871.196472][T21391] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1871.201400][T21391] ? ___sys_sendmsg+0x260/0x260 [ 1871.206235][T21391] ? ksys_write+0x1eb/0x240 [ 1871.210724][T21391] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1871.216780][T21391] x64_sys_call+0x4b/0x9a0 [ 1871.221190][T21391] do_syscall_64+0x4c/0xa0 [ 1871.225599][T21391] ? clear_bhb_loop+0x50/0xa0 [ 1871.230272][T21391] ? clear_bhb_loop+0x50/0xa0 [ 1871.234936][T21391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1871.240879][T21391] RIP: 0033:0x7f17d4fc0ba9 [ 1871.245283][T21391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1871.264897][T21391] RSP: 002b:00007f17d3a29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1871.273302][T21391] RAX: ffffffffffffffda RBX: 00007f17d5207fa0 RCX: 00007f17d4fc0ba9 [ 1871.281260][T21391] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 1871.289219][T21391] RBP: 00007f17d3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.297178][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.305138][T21391] R13: 00007f17d5208038 R14: 00007f17d5207fa0 R15: 00007ffcc59ba258 [ 1871.313106][T21391] [ 1871.318430][T21378] tipc: Enabling of bearer rejected, already enabled [ 1871.826255][T21403] loop1: detected capacity change from 0 to 128 [ 1871.876717][T21402] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1871.932352][T21402] netlink: 'syz.3.5562': attribute type 3 has an invalid length. [ 1872.058942][T21404] usb usb1: usbfs: process 21404 (syz.6.5560) did not claim interface 0 before use [ 1874.814800][T21413] loop2: detected capacity change from 0 to 512 [ 1874.936825][T21417] netlink: 'syz.5.5564': attribute type 1 has an invalid length. [ 1875.948221][T21413] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1875.956822][T21413] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1876.001353][T21413] EXT4-fs warning (device loop2): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1876.016067][T21413] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1876.028780][T21424] loop3: detected capacity change from 0 to 512 [ 1876.035713][T21413] EXT4-fs error (device loop2): __ext4_iget:4925: inode #16: block 127754: comm syz.2.5563: invalid block [ 1876.439924][T21413] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.5563: couldn't read orphan inode 16 (err -117) [ 1876.941481][T21429] loop1: detected capacity change from 0 to 512 [ 1876.957696][T21413] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1878.089995][T21429] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1878.121025][T21433] FAULT_INJECTION: forcing a failure. [ 1878.121025][T21433] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.543066][T21434] cgroup: Need name or subsystem set [ 1878.576326][T21429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1878.586715][T21433] CPU: 1 PID: 21433 Comm: syz.3.5572 Not tainted syzkaller #0 [ 1878.594224][T21433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1878.604279][T21433] Call Trace: [ 1878.607113][T21429] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.5570: bad orphan inode 131083 [ 1878.607552][T21433] [ 1878.607561][T21433] __dump_stack+0x21/0x30 [ 1878.618221][T21429] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1878.620783][T21433] dump_stack_lvl+0xee/0x150 [ 1878.620808][T21433] ? show_regs_print_info+0x20/0x20 [ 1878.620827][T21433] dump_stack+0x15/0x20 [ 1878.653029][T21433] should_fail+0x3c1/0x510 [ 1878.657605][T21433] __should_failslab+0xa4/0xe0 [ 1878.662348][T21433] should_failslab+0x9/0x20 [ 1878.666828][T21433] slab_pre_alloc_hook+0x3b/0xe0 [ 1878.671752][T21433] __kmalloc+0x6d/0x2c0 [ 1878.675887][T21433] ? kobject_get_path+0xbf/0x1f0 [ 1878.680813][T21433] kobject_get_path+0xbf/0x1f0 [ 1878.685556][T21433] kobject_uevent_env+0x28b/0x700 [ 1878.690580][T21433] kobject_uevent+0x1d/0x30 [ 1878.695067][T21433] __kobject_del+0xd7/0x2f0 [ 1878.699581][T21433] kobject_put+0x1db/0x270 [ 1878.704000][T21433] netdev_queue_update_kobjects+0x37b/0x3e0 [ 1878.709876][T21433] netif_set_real_num_tx_queues+0x160/0x780 [ 1878.715748][T21433] __tun_detach+0xb31/0x1450 [ 1878.720328][T21433] __tun_chr_ioctl+0xb04/0x1eb0 [ 1878.725224][T21433] ? tun_flow_create+0x320/0x320 [ 1878.730137][T21433] ? mutex_unlock+0x89/0x220 [ 1878.734717][T21433] ? __fget_files+0x2c4/0x320 [ 1878.739371][T21433] tun_chr_ioctl+0x2a/0x40 [ 1878.743763][T21433] ? tun_chr_poll+0x720/0x720 [ 1878.748426][T21433] __se_sys_ioctl+0x121/0x1a0 [ 1878.753107][T21433] __x64_sys_ioctl+0x7b/0x90 [ 1878.757683][T21433] x64_sys_call+0x2f/0x9a0 [ 1878.762076][T21433] do_syscall_64+0x4c/0xa0 [ 1878.766476][T21433] ? clear_bhb_loop+0x50/0xa0 [ 1878.771140][T21433] ? clear_bhb_loop+0x50/0xa0 [ 1878.775813][T21433] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1878.781685][T21433] RIP: 0033:0x7f6d246ffba9 [ 1878.786077][T21433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1878.805663][T21433] RSP: 002b:00007f6d23168038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1878.814064][T21433] RAX: ffffffffffffffda RBX: 00007f6d24946fa0 RCX: 00007f6d246ffba9 [ 1878.822013][T21433] RDX: 0000200000000100 RSI: 00000000400454d9 RDI: 0000000000000007 [ 1878.830052][T21433] RBP: 00007f6d23168090 R08: 0000000000000000 R09: 0000000000000000 [ 1878.838024][T21433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1878.846000][T21433] R13: 00007f6d24947038 R14: 00007f6d24946fa0 R15: 00007ffe4aed9c38 [ 1878.853971][T21433] [ 1878.857731][T21434] fuse: Bad value for 'fd' [ 1878.865011][T21437] tipc: Enabling of bearer rejected, already enabled [ 1878.915513][T21442] loop3: detected capacity change from 0 to 512 [ 1878.943452][T21442] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1878.973467][T21442] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1879.044779][T21442] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5574: bad orphan inode 131083 [ 1879.359580][T21456] netlink: 'syz.1.5575': attribute type 1 has an invalid length. [ 1879.698903][T21454] usb usb1: usbfs: process 21454 (syz.6.5576) did not claim interface 0 before use [ 1879.737168][T21442] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1879.803249][T21452] loop5: detected capacity change from 0 to 8192 [ 1879.844713][ T389] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1879.899675][T21463] loop1: detected capacity change from 0 to 512 [ 1880.011412][T21463] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1880.173710][T21463] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1880.180653][T21463] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1880.187785][T21463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1880.217192][T21463] EXT4-fs (loop1): 1 truncate cleaned up [ 1880.223051][T21463] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1880.373437][ T389] usb 3-1: Using ep0 maxpacket: 8 [ 1880.679264][T21473] loop6: detected capacity change from 0 to 512 [ 1880.876332][T21475] loop5: detected capacity change from 0 to 512 [ 1881.024010][ T389] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.043399][T21473] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1881.058212][T21473] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1881.068141][ T389] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1881.069654][T21473] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5582: bad orphan inode 131083 [ 1881.077325][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.078498][ T389] usb 3-1: config 0 descriptor?? [ 1881.102180][T21473] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1881.140116][ T389] usb 3-1: bad CDC descriptors [ 1881.192564][T21475] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1881.201068][T21475] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1881.207795][T21475] EXT4-fs warning (device loop5): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1881.222629][T21475] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1881.229487][T21475] EXT4-fs error (device loop5): __ext4_iget:4925: inode #16: block 127754: comm syz.5.5581: invalid block [ 1881.241450][T21475] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.5581: couldn't read orphan inode 16 (err -117) [ 1881.253562][T21475] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1881.339900][T21483] loop1: detected capacity change from 0 to 256 [ 1881.948952][T21483] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1882.071988][T21485] tipc: Enabling of bearer rejected, already enabled [ 1882.543702][ T289] usb 3-1: USB disconnect, device number 11 [ 1882.582719][ T30] audit: type=1400 audit(1757729134.846:1470): avc: denied { create } for pid=21488 comm="syz.5.5586" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1882.724263][ T30] audit: type=1326 audit(1757729134.986:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21488 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983cbffba9 code=0x7ffc0000 [ 1883.202501][T21492] netlink: 'syz.2.5588': attribute type 1 has an invalid length. [ 1883.229264][T21491] loop5: detected capacity change from 0 to 512 [ 1883.363297][T21499] cgroup: Need name or subsystem set [ 1883.779098][T21497] loop3: detected capacity change from 0 to 4096 [ 1883.866016][T21497] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1883.874132][T21497] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1884.021183][T21504] FAULT_INJECTION: forcing a failure. [ 1884.021183][T21504] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.048177][T21497] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 1884.087121][T21497] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1884.229154][T21508] usb usb1: usbfs: process 21508 (syz.1.5589) did not claim interface 0 before use [ 1884.284729][ T30] audit: type=1326 audit(1757729134.986:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21488 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983cbffba9 code=0x7ffc0000 [ 1884.319734][T21504] CPU: 1 PID: 21504 Comm: syz.2.5590 Not tainted syzkaller #0 [ 1884.327230][T21504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1884.337489][T21504] Call Trace: [ 1884.340773][T21504] [ 1884.343705][T21504] __dump_stack+0x21/0x30 [ 1884.348036][T21504] dump_stack_lvl+0xee/0x150 [ 1884.352626][T21504] ? show_regs_print_info+0x20/0x20 [ 1884.357843][T21504] dump_stack+0x15/0x20 [ 1884.362005][T21504] should_fail+0x3c1/0x510 [ 1884.366424][T21504] __should_failslab+0xa4/0xe0 [ 1884.371192][T21504] should_failslab+0x9/0x20 [ 1884.375703][T21504] slab_pre_alloc_hook+0x3b/0xe0 [ 1884.380659][T21504] ? getname_flags+0xb9/0x500 [ 1884.385346][T21504] kmem_cache_alloc+0x44/0x260 [ 1884.390119][T21504] getname_flags+0xb9/0x500 [ 1884.394632][T21504] user_path_at_empty+0x30/0x1c0 [ 1884.399592][T21504] vfs_statx+0xfb/0xa60 [ 1884.403746][T21504] ? vfs_fstatat+0x40/0x40 [ 1884.408242][T21504] ? __switch_to+0x51d/0xe20 [ 1884.412830][T21504] __se_sys_newlstat+0xb8/0x320 [ 1884.417674][T21504] ? __x64_sys_newlstat+0x70/0x70 [ 1884.422719][T21504] ? _raw_spin_unlock+0x4d/0x70 [ 1884.427565][T21504] ? finish_task_switch+0x16b/0x780 [ 1884.432786][T21504] ? __switch_to_asm+0x3a/0x60 [ 1884.437548][T21504] ? __schedule+0xb76/0x14c0 [ 1884.442136][T21504] ? __kasan_check_write+0x14/0x20 [ 1884.447243][T21504] ? switch_fpu_return+0x15d/0x2c0 [ 1884.452353][T21504] __x64_sys_newlstat+0x5b/0x70 [ 1884.457208][T21504] x64_sys_call+0x290/0x9a0 [ 1884.461974][T21504] do_syscall_64+0x4c/0xa0 [ 1884.466387][T21504] ? clear_bhb_loop+0x50/0xa0 [ 1884.471058][T21504] ? clear_bhb_loop+0x50/0xa0 [ 1884.475743][T21504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1884.481632][T21504] RIP: 0033:0x7f17d4fc0ba9 [ 1884.486045][T21504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.505653][T21504] RSP: 002b:00007f17d3a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1884.514072][T21504] RAX: ffffffffffffffda RBX: 00007f17d5207fa0 RCX: 00007f17d4fc0ba9 [ 1884.522047][T21504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1884.530017][T21504] RBP: 00007f17d3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.537984][T21504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.545960][T21504] R13: 00007f17d5208038 R14: 00007f17d5207fa0 R15: 00007ffcc59ba258 [ 1884.553935][T21504] [ 1884.567145][T21511] FAULT_INJECTION: forcing a failure. [ 1884.567145][T21511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.588158][ T30] audit: type=1326 audit(1757729134.986:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21488 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983cbffba9 code=0x7ffc0000 [ 1884.625017][T21506] loop6: detected capacity change from 0 to 8192 [ 1884.633768][T21511] CPU: 0 PID: 21511 Comm: syz.1.5592 Not tainted syzkaller #0 [ 1884.634850][T21491] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1884.641246][T21511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1884.641264][T21511] Call Trace: [ 1884.641270][T21511] [ 1884.641278][T21511] __dump_stack+0x21/0x30 [ 1884.641301][T21511] dump_stack_lvl+0xee/0x150 [ 1884.641318][T21511] ? show_regs_print_info+0x20/0x20 [ 1884.641338][T21511] ? put_callchain_entry+0xb0/0xb0 [ 1884.641358][T21511] dump_stack+0x15/0x20 [ 1884.641374][T21511] should_fail+0x3c1/0x510 [ 1884.641393][T21511] should_fail_usercopy+0x1a/0x20 [ 1884.641410][T21511] _copy_from_user+0x20/0xd0 [ 1884.641428][T21511] __copy_msghdr_from_user+0xaf/0x5e0 [ 1884.656788][T21491] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1884.662470][T21511] ? _kstrtoull+0x3c0/0x4d0 [ 1884.662500][T21511] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 1884.662518][T21511] ? kstrtouint_from_user+0x1a0/0x200 [ 1884.662537][T21511] ___sys_sendmsg+0x156/0x260 [ 1884.666812][ T30] audit: type=1326 audit(1757729134.986:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21488 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983cbffba9 code=0x7ffc0000 [ 1884.668721][T21511] ? __sys_sendmsg+0x250/0x250 [ 1884.673245][ T30] audit: type=1326 audit(1757729134.986:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21488 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f983cbffba9 code=0x7ffc0000 [ 1884.677652][T21511] ? __fdget+0x1a1/0x230 [ 1884.677676][T21511] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1884.677705][T21511] ? ___sys_sendmsg+0x260/0x260 [ 1884.806899][T21511] ? ksys_write+0x1eb/0x240 [ 1884.811686][T21511] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1884.817749][T21511] x64_sys_call+0x4b/0x9a0 [ 1884.822173][T21511] do_syscall_64+0x4c/0xa0 [ 1884.826577][T21511] ? clear_bhb_loop+0x50/0xa0 [ 1884.831242][T21511] ? clear_bhb_loop+0x50/0xa0 [ 1884.835908][T21511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1884.841970][T21511] RIP: 0033:0x7f2730a61ba9 [ 1884.846376][T21511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.865970][T21511] RSP: 002b:00007f272f4ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1884.874393][T21511] RAX: ffffffffffffffda RBX: 00007f2730ca8fa0 RCX: 00007f2730a61ba9 [ 1884.882347][T21511] RDX: 0000000020040010 RSI: 0000200000001300 RDI: 0000000000000003 [ 1884.890306][T21511] RBP: 00007f272f4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.898279][T21511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.906240][T21511] R13: 00007f2730ca9038 R14: 00007f2730ca8fa0 R15: 00007fffaca12c38 [ 1884.914205][T21511] [ 1884.925235][ T30] audit: type=1326 audit(1757729134.986:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21488 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983cbffba9 code=0x7ffc0000 [ 1884.991623][T21518] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1885.053310][ T30] audit: type=1326 audit(1757729134.986:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21488 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983cbffba9 code=0x7ffc0000 [ 1885.129800][ T30] audit: type=1326 audit(1757729134.986:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21488 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f983cbffba9 code=0x7ffc0000 [ 1885.155175][ T30] audit: type=1326 audit(1757729134.986:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21488 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983cbffba9 code=0x7ffc0000 [ 1885.165310][T21525] loop3: detected capacity change from 0 to 512 [ 1885.582607][T21525] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1885.590554][T21530] loop6: detected capacity change from 0 to 512 [ 1885.590587][T21529] loop1: detected capacity change from 0 to 512 [ 1885.626752][T21525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1885.642711][T21529] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1885.750080][T21530] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1885.759688][T21530] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1885.766612][T21530] EXT4-fs warning (device loop6): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1885.781160][T21530] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1885.788854][T21530] EXT4-fs error (device loop6): __ext4_iget:4925: inode #16: block 127754: comm syz.6.5596: invalid block [ 1885.823479][T21529] EXT4-fs (loop1): 1 truncate cleaned up [ 1885.829185][T21529] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 1885.989132][T21530] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.5596: couldn't read orphan inode 16 (err -117) [ 1886.006169][T21530] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1886.033046][T21525] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5597: bad orphan inode 131083 [ 1886.065933][T21525] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1886.132375][T21536] loop1: detected capacity change from 0 to 512 [ 1886.141974][T21516] loop2: detected capacity change from 0 to 40427 [ 1886.179839][T21516] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 1886.281079][T21538] tipc: Enabling of bearer rejected, already enabled [ 1886.384924][T21516] F2FS-fs (loop2): invalid crc value [ 1886.461321][T21516] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1886.472770][T21536] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1886.497955][T21536] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1886.546763][T21536] FAULT_INJECTION: forcing a failure. [ 1886.546763][T21536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.570451][T21516] F2FS-fs (loop2): recover fsync data on readonly fs [ 1886.587590][T21536] CPU: 0 PID: 21536 Comm: syz.1.5598 Not tainted syzkaller #0 [ 1886.595085][T21536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1886.605242][T21536] Call Trace: [ 1886.608553][T21536] [ 1886.611477][T21536] __dump_stack+0x21/0x30 [ 1886.615810][T21536] dump_stack_lvl+0xee/0x150 [ 1886.620393][T21536] ? show_regs_print_info+0x20/0x20 [ 1886.625606][T21536] dump_stack+0x15/0x20 [ 1886.629764][T21536] should_fail+0x3c1/0x510 [ 1886.634178][T21536] should_fail_usercopy+0x1a/0x20 [ 1886.639197][T21536] _copy_from_user+0x20/0xd0 [ 1886.643787][T21536] ext4_ioctl+0x1cd0/0x33c0 [ 1886.648291][T21536] ? ext4_fileattr_set+0x1640/0x1640 [ 1886.653575][T21536] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 1886.659210][T21536] ? kstrtouint_from_user+0x1a0/0x200 [ 1886.664581][T21536] ? kstrtol_from_user+0x260/0x260 [ 1886.669694][T21536] ? ioctl_has_perm+0x394/0x4d0 [ 1886.674539][T21536] ? has_cap_mac_admin+0x330/0x330 [ 1886.679660][T21536] ? vfs_write+0xc17/0xf70 [ 1886.684073][T21536] ? selinux_file_ioctl+0x377/0x480 [ 1886.689274][T21536] ? selinux_file_alloc_security+0x120/0x120 [ 1886.689678][T21516] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1886.695251][T21536] ? mutex_unlock+0x89/0x220 [ 1886.695279][T21536] ? __mutex_lock_slowpath+0x10/0x10 [ 1886.695296][T21536] ? __fget_files+0x2c4/0x320 [ 1886.710398][T21516] SELinux: security_context_str_to_sid() failed for (dev loop2, type f2fs) errno=-22 [ 1886.712561][T21536] ? security_file_ioctl+0x84/0xa0 [ 1886.731844][T21536] ? ext4_fileattr_set+0x1640/0x1640 [ 1886.737139][T21536] __se_sys_ioctl+0x121/0x1a0 [ 1886.741824][T21536] __x64_sys_ioctl+0x7b/0x90 [ 1886.746416][T21536] x64_sys_call+0x2f/0x9a0 [ 1886.750829][T21536] do_syscall_64+0x4c/0xa0 [ 1886.755242][T21536] ? clear_bhb_loop+0x50/0xa0 [ 1886.759915][T21536] ? clear_bhb_loop+0x50/0xa0 [ 1886.764585][T21536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1886.770463][T21536] RIP: 0033:0x7f2730a61ba9 [ 1886.774861][T21536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1886.794452][T21536] RSP: 002b:00007f272f4ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1886.802852][T21536] RAX: ffffffffffffffda RBX: 00007f2730ca8fa0 RCX: 00007f2730a61ba9 [ 1886.810807][T21536] RDX: 0000200000000080 RSI: 00000000c0185879 RDI: 0000000000000004 [ 1886.818802][T21536] RBP: 00007f272f4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.826758][T21536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.834890][T21536] R13: 00007f2730ca9038 R14: 00007f2730ca8fa0 R15: 00007fffaca12c38 [ 1886.842853][T21536] [ 1886.999586][ T389] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1887.289610][ T389] usb 7-1: Using ep0 maxpacket: 16 [ 1887.316361][T21552] FAULT_INJECTION: forcing a failure. [ 1887.316361][T21552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.329937][T21552] CPU: 1 PID: 21552 Comm: syz.2.5603 Not tainted syzkaller #0 [ 1887.337410][T21552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1887.347467][T21552] Call Trace: [ 1887.350750][T21552] [ 1887.353675][T21552] __dump_stack+0x21/0x30 [ 1887.358005][T21552] dump_stack_lvl+0xee/0x150 [ 1887.362597][T21552] ? show_regs_print_info+0x20/0x20 [ 1887.367795][T21552] dump_stack+0x15/0x20 [ 1887.371947][T21552] should_fail+0x3c1/0x510 [ 1887.376356][T21552] should_fail_usercopy+0x1a/0x20 [ 1887.381373][T21552] _copy_from_user+0x20/0xd0 [ 1887.386089][T21552] sock_do_ioctl+0x175/0x300 [ 1887.390681][T21552] ? sock_show_fdinfo+0xa0/0xa0 [ 1887.395706][T21552] ? selinux_file_ioctl+0x377/0x480 [ 1887.400914][T21552] sock_ioctl+0x4bc/0x6b0 [ 1887.405253][T21552] ? sock_poll+0x3d0/0x3d0 [ 1887.409675][T21552] ? __fget_files+0x2c4/0x320 [ 1887.414368][T21552] ? security_file_ioctl+0x84/0xa0 [ 1887.419477][T21552] ? sock_poll+0x3d0/0x3d0 [ 1887.423898][T21552] __se_sys_ioctl+0x121/0x1a0 [ 1887.428580][T21552] __x64_sys_ioctl+0x7b/0x90 [ 1887.433171][T21552] x64_sys_call+0x2f/0x9a0 [ 1887.437596][T21552] do_syscall_64+0x4c/0xa0 [ 1887.442010][T21552] ? clear_bhb_loop+0x50/0xa0 [ 1887.446687][T21552] ? clear_bhb_loop+0x50/0xa0 [ 1887.451363][T21552] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1887.457254][T21552] RIP: 0033:0x7f17d4fc0ba9 [ 1887.461669][T21552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1887.481277][T21552] RSP: 002b:00007f17d3a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1887.489696][T21552] RAX: ffffffffffffffda RBX: 00007f17d5207fa0 RCX: 00007f17d4fc0ba9 [ 1887.497672][T21552] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 1887.505643][T21552] RBP: 00007f17d3a29090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.513698][T21552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1887.521701][T21552] R13: 00007f17d5208038 R14: 00007f17d5207fa0 R15: 00007ffcc59ba258 [ 1887.529684][T21552] [ 1887.539631][ T389] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1887.555064][ T389] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1887.586874][ T389] usb 7-1: config 0 has no interface number 0 [ 1887.759701][ T389] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1887.789130][ T389] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.809319][ T389] usb 7-1: Product: syz [ 1887.817669][ T389] usb 7-1: Manufacturer: syz [ 1887.829589][ T389] usb 7-1: SerialNumber: syz [ 1887.844119][ T389] usb 7-1: config 0 descriptor?? [ 1887.890171][ T389] asix: probe of 7-1:0.251 failed with error -22 [ 1888.054376][T21562] FAULT_INJECTION: forcing a failure. [ 1888.054376][T21562] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.097841][ T389] usb 7-1: USB disconnect, device number 4 [ 1888.121111][T21562] CPU: 1 PID: 21562 Comm: syz.2.5606 Not tainted syzkaller #0 [ 1888.128606][T21562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1888.138741][T21562] Call Trace: [ 1888.142006][T21562] [ 1888.144919][T21562] __dump_stack+0x21/0x30 [ 1888.149241][T21562] dump_stack_lvl+0xee/0x150 [ 1888.153924][T21562] ? show_regs_print_info+0x20/0x20 [ 1888.159116][T21562] dump_stack+0x15/0x20 [ 1888.163263][T21562] should_fail+0x3c1/0x510 [ 1888.167667][T21562] __should_failslab+0xa4/0xe0 [ 1888.172426][T21562] should_failslab+0x9/0x20 [ 1888.176922][T21562] slab_pre_alloc_hook+0x3b/0xe0 [ 1888.181861][T21562] ? getname_flags+0xb9/0x500 [ 1888.186526][T21562] kmem_cache_alloc+0x44/0x260 [ 1888.191288][T21562] getname_flags+0xb9/0x500 [ 1888.195788][T21562] getname+0x19/0x20 [ 1888.199673][T21562] do_sys_openat2+0xd9/0x7b0 [ 1888.204255][T21562] ? __kasan_check_write+0x14/0x20 [ 1888.209351][T21562] ? fput_many+0x15a/0x1a0 [ 1888.213751][T21562] ? do_sys_open+0xe0/0xe0 [ 1888.218159][T21562] ? fput+0x1a/0x20 [ 1888.221953][T21562] ? ksys_write+0x1eb/0x240 [ 1888.226530][T21562] ? __ia32_sys_read+0x90/0x90 [ 1888.231282][T21562] __x64_sys_openat+0x136/0x160 [ 1888.236128][T21562] x64_sys_call+0x219/0x9a0 [ 1888.240620][T21562] do_syscall_64+0x4c/0xa0 [ 1888.245025][T21562] ? clear_bhb_loop+0x50/0xa0 [ 1888.249697][T21562] ? clear_bhb_loop+0x50/0xa0 [ 1888.254363][T21562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1888.260243][T21562] RIP: 0033:0x7f17d4fbf510 [ 1888.264650][T21562] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1888.284243][T21562] RSP: 002b:00007f17d3a28f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1888.292649][T21562] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f17d4fbf510 [ 1888.300709][T21562] RDX: 0000000000000002 RSI: 00007f17d3a28fa0 RDI: 00000000ffffff9c [ 1888.308666][T21562] RBP: 00007f17d3a28fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1888.316901][T21562] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1888.324868][T21562] R13: 00007f17d5208038 R14: 00007f17d5207fa0 R15: 00007ffcc59ba258 [ 1888.332836][T21562] [ 1888.341380][T21567] tipc: Enabling of bearer rejected, already enabled [ 1888.348810][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 1888.348827][ T30] audit: type=1400 audit(1757729140.606:1578): avc: denied { search } for pid=21569 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1888.388706][ T30] audit: type=1400 audit(1757729140.646:1579): avc: denied { read } for pid=21570 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1888.429694][ T30] audit: type=1400 audit(1757729140.646:1580): avc: denied { open } for pid=21570 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1888.468343][ T30] audit: type=1400 audit(1757729140.646:1581): avc: denied { getattr } for pid=21570 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1888.498377][ T30] audit: type=1400 audit(1757729140.646:1582): avc: denied { getattr } for pid=21570 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1888.543781][ T30] audit: type=1400 audit(1757729140.796:1583): avc: denied { read } for pid=21576 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1888.570538][ T30] audit: type=1400 audit(1757729140.796:1584): avc: denied { open } for pid=21576 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1888.596817][T21582] cgroup: Need name or subsystem set [ 1888.627608][ T30] audit: type=1400 audit(1757729140.886:1585): avc: denied { write } for pid=21569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1888.653995][T21587] syz.3.5608[21587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1888.654066][T21587] syz.3.5608[21587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1888.667508][ T30] audit: type=1400 audit(1757729140.886:1586): avc: denied { add_name } for pid=21569 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1889.069766][T21595] loop5: detected capacity change from 0 to 512 [ 1889.920409][T21595] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1889.928934][T21595] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1889.936796][T21595] EXT4-fs warning (device loop5): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1889.951396][T21595] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1889.960093][T21595] EXT4-fs error (device loop5): __ext4_iget:4925: inode #16: block 127754: comm syz.5.5610: invalid block [ 1890.026494][T21602] overlayfs: unrecognized mount option "default_permissions:/" or missing value [ 1890.174501][T21605] loop1: detected capacity change from 0 to 512 [ 1890.184178][T21606] loop3: detected capacity change from 0 to 512 [ 1890.225887][T21595] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.5610: couldn't read orphan inode 16 (err -117) [ 1890.238342][T21595] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1890.269720][T21608] FAULT_INJECTION: forcing a failure. [ 1890.269720][T21608] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.290714][T21608] CPU: 0 PID: 21608 Comm: syz.2.5615 Not tainted syzkaller #0 [ 1890.298206][T21608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1890.308271][T21608] Call Trace: [ 1890.311551][T21608] [ 1890.314487][T21608] __dump_stack+0x21/0x30 [ 1890.318821][T21608] dump_stack_lvl+0xee/0x150 [ 1890.323415][T21608] ? show_regs_print_info+0x20/0x20 [ 1890.328616][T21608] dump_stack+0x15/0x20 [ 1890.332782][T21608] should_fail+0x3c1/0x510 [ 1890.337197][T21608] __should_failslab+0xa4/0xe0 [ 1890.341963][T21608] should_failslab+0x9/0x20 [ 1890.342454][ T30] audit: type=1400 audit(1757729140.886:1587): avc: denied { create } for pid=21569 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1890.346464][T21608] slab_pre_alloc_hook+0x3b/0xe0 [ 1890.374110][T21608] __kmalloc+0x6d/0x2c0 [ 1890.378287][T21608] ? __se_sys_memfd_create+0xf2/0x3b0 [ 1890.383659][T21608] ? strnlen_user+0x13b/0x1c0 [ 1890.388365][T21608] __se_sys_memfd_create+0xf2/0x3b0 [ 1890.393545][T21608] __x64_sys_memfd_create+0x5b/0x70 [ 1890.398736][T21608] x64_sys_call+0x473/0x9a0 [ 1890.403223][T21608] do_syscall_64+0x4c/0xa0 [ 1890.407625][T21608] ? clear_bhb_loop+0x50/0xa0 [ 1890.412283][T21608] ? clear_bhb_loop+0x50/0xa0 [ 1890.416940][T21608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1890.422808][T21608] RIP: 0033:0x7f17d4fc0ba9 [ 1890.427200][T21608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1890.446971][T21608] RSP: 002b:00007f17d3a28e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1890.455382][T21608] RAX: ffffffffffffffda RBX: 0000000000000625 RCX: 00007f17d4fc0ba9 [ 1890.463342][T21608] RDX: 00007f17d3a28ef0 RSI: 0000000000000000 RDI: 00007f17d50447e8 [ 1890.471308][T21608] RBP: 0000200000000800 R08: 00007f17d3a28bb7 R09: 00007f17d3a28e40 [ 1890.479270][T21608] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 1890.487225][T21608] R13: 00007f17d3a28ef0 R14: 00007f17d3a28eb0 R15: 0000200000000f80 [ 1890.495186][T21608] [ 1890.508869][T21611] loop6: detected capacity change from 0 to 128 [ 1890.532258][T21605] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1890.539855][T21606] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1890.549191][T21606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1890.560763][T21605] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1890.567645][T21605] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1890.575700][T21605] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1890.586592][T21606] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5613: bad orphan inode 131083 [ 1890.607993][T21606] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 1890.608056][T21605] EXT4-fs (loop1): 1 truncate cleaned up [ 1890.637087][T21605] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1890.810715][T21618] tipc: Enabling of bearer rejected, already enabled