last executing test programs: 4m5.763693877s ago: executing program 4 (id=166): syz_open_procfs(0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8000000000000000290000000b00000016"], 0xb8}, 0x3400c8d4) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000040)=0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0xd, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 4m4.56443338s ago: executing program 4 (id=169): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000004a80)=@delchain={0xccc, 0x65, 0x300, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0xfff1}, {0xd, 0xfff2}, {0x3, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x58a1}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_basic={{0xa}, {0xc84, 0x2, [@TCA_BASIC_POLICE={0xc80, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffa, 0x1, 0x5, 0x1, 0x80, {0x7, 0x1, 0x1, 0xba, 0x9, 0x3}, {0x24, 0x1, 0x2, 0xe5a, 0x7, 0x2}, 0x400}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0xc8, 0x26dd, 0xa5, 0x5, 0x6, 0x4, 0x5, 0x3e3, 0x8, 0x5, 0x5, 0x0, 0x6, 0xfffffff8, 0x2, 0x8, 0x53, 0x5, 0x9, 0x5, 0x0, 0x3ff, 0x0, 0x8, 0x5, 0xcd, 0x0, 0x0, 0x6, 0xfffffffc, 0x10001, 0x6, 0x2, 0x7aa, 0xffffcb55, 0x7bc9, 0x8, 0x7ff, 0x3, 0xffff9cbb, 0x8, 0x80, 0x7, 0x7, 0x2, 0x35f, 0x7, 0x6, 0x1, 0x1, 0x79, 0x4, 0x9, 0x1ff, 0x5, 0x8e1, 0x80, 0x0, 0x8, 0x6, 0x0, 0x64b3, 0x8, 0x64, 0x9, 0xfffffff7, 0x1000, 0x0, 0x5, 0x2, 0x7, 0x4ec, 0x4b315edc, 0x4, 0x6, 0x90, 0x5, 0x1, 0x1, 0x3, 0x9, 0x3, 0x80000001, 0x3, 0x10001, 0xf1a, 0x4, 0x9, 0x600, 0x7, 0x2, 0xacd, 0x3, 0x0, 0x2, 0x2, 0x7, 0x800006, 0x8, 0x5, 0xff, 0x74e, 0x8, 0x1ff, 0x4, 0x200, 0xec000000, 0x7ff, 0xc, 0x4000000, 0x3, 0x1, 0x8, 0x401, 0x2, 0x0, 0x6, 0xe4e, 0x4449, 0x7, 0xffffffff, 0x4, 0x5, 0x9, 0x1040, 0x7, 0x2, 0x3, 0x401, 0x26f, 0x4, 0x5, 0xd, 0x9, 0x7, 0x37, 0xf08f, 0x8, 0x6, 0x6, 0x9, 0x4d1, 0x8, 0x7ff, 0x1750, 0x9dea, 0x7, 0x2, 0x5, 0xffffff81, 0x0, 0xc, 0x6, 0x1, 0xa4, 0x4, 0x5, 0x7, 0xfff, 0x7, 0x20000000, 0x7, 0x2, 0x1, 0x1, 0xfffffffc, 0xfffff6ca, 0x40, 0x7, 0x3, 0x1, 0x6, 0xa, 0x6, 0xcb0, 0x3, 0x0, 0x8, 0x3ff, 0x4, 0xe, 0x2, 0x2, 0x6, 0x1, 0x0, 0x8, 0x5, 0x4, 0x9, 0x1, 0x16, 0x0, 0x7, 0x1, 0x1, 0x10000, 0x6, 0x3, 0xd, 0xf10, 0x8, 0x1800, 0xfe000, 0x1, 0x1, 0x9, 0xe81a, 0x800, 0x0, 0x23602cd, 0x2, 0x6, 0xffff, 0x6, 0x8, 0x200, 0x6, 0x4, 0x6, 0xe, 0x6, 0x3, 0x200, 0x0, 0xea3, 0x0, 0x3, 0x3, 0x1ff, 0x974, 0x6, 0x4, 0x1, 0x1, 0x916e, 0x6, 0x6, 0x9, 0x6, 0x3, 0x2, 0x0, 0x12, 0x101, 0x800, 0x100, 0x7, 0x7fffffff, 0x1, 0x0, 0x3ff, 0x22, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4e2f, 0x8, 0xbdf, 0x8000, 0x9, 0x2, 0x6, 0x7, 0xffff31a3, 0x200, 0x8, 0x2, 0x7, 0x8235, 0x80000001, 0x7f, 0x7, 0xe97, 0x6, 0x0, 0x3, 0x3, 0xd, 0x7f, 0x7, 0x7ff, 0x4, 0x2, 0x142c00, 0x3ff, 0x5, 0x9, 0x9c31, 0x5, 0x3, 0x7, 0x5, 0x10001, 0x6, 0x4, 0x800, 0x95e9, 0xfffffe01, 0x3, 0x6d, 0x8, 0x14e, 0xfffffff8, 0x9, 0x8, 0x9171, 0x1, 0x8, 0xff, 0x5, 0xe800, 0x85cd, 0xa48, 0x100, 0x1, 0x3, 0x9, 0x1ff, 0x9, 0x81, 0x2, 0x2, 0x8, 0x6, 0x2, 0x8, 0x40f, 0x2, 0x7, 0x8, 0x3, 0x97, 0x7fff, 0x2, 0x7fff, 0x5, 0x8, 0x7, 0x0, 0x6, 0x80000000, 0xf90d, 0x3, 0x1, 0x100, 0x2, 0x0, 0x7, 0x5e, 0x6e6f, 0x7d, 0x4ec6, 0x30, 0x80, 0x2, 0x478, 0x3, 0x9ce1, 0xd8, 0x1, 0x0, 0x3ff, 0x0, 0x7, 0xfffffe09, 0x0, 0x0, 0xe6, 0x7fffffff, 0x5, 0x40, 0x401, 0x80000000, 0x81, 0x1, 0x8, 0xc19, 0x80000000, 0x2, 0x1000, 0x58000, 0x1, 0x8, 0xfffffc00, 0x9, 0x0, 0x7, 0x81, 0xd, 0x7, 0xe, 0xee, 0x3, 0xd, 0x3f, 0x0, 0x9, 0x5, 0x1, 0x0, 0x3, 0x0, 0x10001, 0x0, 0x0, 0xa, 0x6, 0x1, 0x40, 0x8, 0x3, 0x4, 0x9, 0x3, 0x7, 0x0, 0x7, 0x5, 0x800, 0x400, 0x7fff, 0x3, 0x2, 0x661f, 0x178, 0x40, 0x5, 0x0, 0x2, 0xf, 0x7fff, 0xffff4586, 0x9, 0xffff, 0x5, 0x7, 0x9, 0x6, 0x5f6, 0x3, 0x0, 0x4, 0x87, 0xffff, 0xa6a2, 0x6, 0x6a8f, 0x7, 0x200, 0x200, 0x9, 0x3, 0x6, 0x24000000, 0x4, 0x80000000, 0x9, 0x7, 0x7, 0x9, 0x5, 0x1794, 0x4, 0x0, 0x6, 0x7fffffff, 0x8, 0x5, 0x8000, 0x101, 0x5, 0x0, 0x9, 0x7fffffff, 0x0, 0x8, 0xef, 0x7ff, 0x3c, 0xa, 0x800, 0xd, 0x7, 0x3, 0x8, 0x4, 0x664, 0x3, 0x5, 0x10, 0x9, 0x4, 0x401, 0x7, 0x2, 0x6, 0x4, 0x5, 0x9, 0xaf3, 0x7, 0x0, 0xff, 0xa5, 0x98, 0xd, 0x7, 0x3ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6e, 0x6, 0x7e, 0x8, 0x9, 0x43be0f78, 0xc196, 0x401, 0x8, 0x1, 0x2, 0x5, 0xb, 0x7, 0x5, 0x3, 0x4, 0x9, 0x9, 0x3, 0xfffffffa, 0xfffffffd, 0x586e0b34, 0x23, 0xfffff4c4, 0x8c2e, 0x2, 0x5, 0x2, 0x3, 0x8, 0x4, 0x3, 0x7, 0x3, 0x4, 0x9, 0x6, 0x2, 0x2874f20d, 0xff, 0x5, 0x7, 0x1, 0x7fffffff, 0xf14e, 0x4, 0xe311, 0xc82, 0x1, 0xb88, 0x270b, 0x20000, 0x9, 0x1ff, 0x3, 0x9, 0x9, 0x10, 0x3, 0x6, 0x1, 0xfffffffa, 0x0, 0x6, 0xa, 0x6, 0x8, 0xfffffffe, 0x6, 0x40, 0x5, 0x7ff, 0x9, 0x6, 0x1000, 0x2, 0x5, 0x3, 0x1c000000, 0xa, 0x8, 0xc, 0x68, 0x7, 0xb, 0xa, 0x4, 0xf, 0x0, 0x800, 0x74, 0xe, 0x0, 0x40, 0x4, 0xc, 0x1, 0x3dcd, 0x80000001, 0x3c86d090, 0x1, 0x57c, 0x5, 0x8, 0x10000, 0x5, 0x38aba2f1, 0x8eec, 0xffffff64, 0x80, 0x4, 0xd9, 0x5, 0x6, 0x460b, 0x7f, 0x4a4, 0x9, 0x5, 0x8, 0x0, 0xd6d, 0x7fff, 0x7f, 0xce, 0x9, 0x1, 0x900000, 0x80, 0xd, 0x7, 0x3, 0x5, 0x200, 0x2, 0xef, 0x80000001, 0x8, 0xad, 0x6, 0x3, 0x433, 0x10, 0xfffffff8, 0x3, 0x3, 0x8, 0x1, 0x0, 0x8001, 0x59, 0x9, 0x8, 0x2, 0x4, 0xfffffff8, 0x9, 0x5dec, 0x6da, 0x6, 0x266f0fad, 0x9, 0x6, 0xafa, 0x7fff, 0x3, 0x856e, 0x8, 0x8, 0x5, 0x6, 0x4, 0xfffff23a, 0x3, 0x60e6, 0xf, 0x6, 0x3ea, 0x4, 0xb0, 0xffff, 0x2, 0xc, 0x5, 0x7, 0x2, 0x5, 0xf443, 0x8, 0x0, 0x95, 0x7, 0x8, 0x3, 0xb83, 0x9, 0x1, 0x8, 0xebb, 0x10000, 0x6, 0x2fe1, 0x96, 0xffffffc9, 0x5, 0x3, 0x8000, 0x7fff, 0x3, 0xd11, 0x9b, 0x400, 0x7, 0x2, 0x3, 0x5, 0x4, 0x10001, 0xd, 0x2246, 0x7, 0x101, 0x4, 0x4, 0x5, 0x3ff, 0x0, 0x7fe, 0x2, 0x400, 0x6, 0xd, 0x401, 0x10, 0x6, 0x1, 0xffff, 0x80000004, 0x3, 0x7, 0x5, 0x80000001, 0x87a0, 0x2, 0xd1, 0x9935, 0x400, 0xa83, 0xffffd10c, 0x4, 0x4, 0x9, 0xffffffff, 0x7]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}]}}]}, 0xccc}, 0x1, 0x0, 0x0, 0xc084}, 0x2400c800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/13, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00', 0x0, 0x0) 4m3.135921175s ago: executing program 4 (id=175): gettid() prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getpgid(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, 0x0, 0x0, 0x100018, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000500)={[{@numtail}, {@fat=@discard}, {@utf8no}, {}, {@numtail}, {@rodir}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@smackfshat={'smackfshat', 0x3d, '-#($$:'}}]}, 0x7, 0x2b1, &(0x7f0000000840)="$eJzs3U+LG2UcB/Df5M8m0UNy8CRCB/TgqXTFF7CLVFAXBCUH9aCLjVAyobALgbRi7MmLV1+Br8eLePTiC1C82YM4MplJSNrJtlmbVrafz2V//J7nm+eZ2ZCc5skXr03Gt+683bj/9W/R7SbROIqjeJDEIBqx9G3U+uWP+j4A8D/3IM/jz7zUKVuzzRntLclWY++bAwD2Yv37f2PgCb7d732/v30BAPvz8SeffnB8cnLzozTtRky+mw6TKP+W48dfxe3IYhQ3oh9/R+QrZf3ueyc3o5UWBvHGZD4dFsnJ5z9Vr3/8e8Qifxj9GNTnD9PSWn4+HbbjpWr9oyxGH/4Y/XilyPz6/nLvy/xbNfkYHsSbr6/t/3r04+cv405kceuh/DeHafpO/sNf9z4rukU+mU+HndW8anbzWf1PAAAAAAAAAAAAAAAAAAAAAAC4+q6nK4PN83eWB/9fMP7o+UC95QE/87XzfW6kaZon5fxFvhURw1a82lpUAAAAAAAAAAAAAAAAAAAA8MI7n90dn2a9iFgU2eis7GSziNjs7FAsH+uvGYp/NjudiLjMEmVxbddUNKutZUlxye148ng7Oovk4yc3d7yK4vZno7OkFZe94Y8WyarTK4toRJydX4tyraLTK4u1zn9evRvlWpXxaXL7Malu3ZvkKRR5zduvuTV18HCnV11BzeTeBasfvHypPef9LUNJRLRXN/Pi12k/3Xu49iHR3P/nEAAAAAAAAAAAAAAAAAAAUD7/31g89FszeP85bAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnoPz2d3x6eL3/3co5lV425y8WRStqDo1yx4848sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgivs3AAD//7vhWeM=") mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./trace\x00', 0x1ff) 4m2.187083113s ago: executing program 4 (id=179): syz_open_procfs(0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8000000000000000290000000b00000016"], 0xb8}, 0x3400c8d4) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000040)=0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0xd, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 4m0.612013974s ago: executing program 4 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/root_id\x00', 0x0, 0x168) read(r0, &(0x7f0000000a80)=""/128, 0x80) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000380)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) 3m58.30041453s ago: executing program 4 (id=187): r0 = memfd_create(&(0x7f0000001580)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x8010002}) 3m43.287533716s ago: executing program 32 (id=187): r0 = memfd_create(&(0x7f0000001580)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x8010002}) 2m42.643906731s ago: executing program 0 (id=372): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000080)=ANY=[@ANYBLOB='flush,shortname=lower,uni_xlate=1,rodir,utf8=1,nonumtail=0,uni_xlate=1,nonumtail=0,uni_xlate=0,utf8=1,uni_xlate=0,utf8=1,shortname=mixed,nonumtail=0,dos1xfloppX,rodir,shortname=winnt,shortname=lower,\x00'], 0xf5, 0x2e8, &(0x7f00000009c0)="$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") r0 = socket(0x2b, 0x1, 0x1) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 2m41.445756164s ago: executing program 0 (id=375): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040)=0x1, 0x4) close(0x3) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/125, 0x7d}, 0x1ff}], 0x1, 0x40010020, 0x0) 2m41.276330951s ago: executing program 0 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/root_id\x00', 0x0, 0x168) read(r0, &(0x7f0000000a80)=""/128, 0x80) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000380)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) futex(r1, 0x6, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) 2m38.328970633s ago: executing program 0 (id=383): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40080, &(0x7f0000000240)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) 2m37.122346996s ago: executing program 0 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000500)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@oldalloc}, {@noload}, {@user_xattr}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000001080)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES64=r2], 0x1, 0x3a2, &(0x7f0000000c40)="$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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = dup(r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006, 0x80010, r3, 0x1000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 2m25.516496694s ago: executing program 0 (id=413): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000080)=ANY=[@ANYBLOB='flush,shortname=lower,uni_xlate=1,rodir,utf8=1,nonumtail=0,uni_xlate=1,nonumtail=0,uni_xlate=0,utf8=1,uni_xlate=0,utf8=1,shortname=mixed,nonumtail=0,dos1xfloppX,rodir,shortname=winnt,shortname=lower,\x00'], 0xf5, 0x2e8, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 2m25.287778577s ago: executing program 33 (id=413): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000080)=ANY=[@ANYBLOB='flush,shortname=lower,uni_xlate=1,rodir,utf8=1,nonumtail=0,uni_xlate=1,nonumtail=0,uni_xlate=0,utf8=1,uni_xlate=0,utf8=1,shortname=mixed,nonumtail=0,dos1xfloppX,rodir,shortname=winnt,shortname=lower,\x00'], 0xf5, 0x2e8, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 10.829769072s ago: executing program 6 (id=898): socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) close(r3) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 10.500526276s ago: executing program 5 (id=902): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000003180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000031c0)="2b0000000600aabbccddeec0", 0xc) 10.438079033s ago: executing program 5 (id=904): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x400, &(0x7f0000000280), 0x2, 0x790, &(0x7f00000031c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x100, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000011c0)={@desc={0x1, 0x0, @desc2}}) 10.012339796s ago: executing program 5 (id=906): socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) close(r3) r5 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0xffffffff, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 6.980519606s ago: executing program 2 (id=911): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='sys/class/net/bridge0/bridge/multicast_querier\x00', 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000440), 0x8) 6.512375754s ago: executing program 1 (id=914): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) 6.417697944s ago: executing program 1 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000500)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@oldalloc}, {@noload}, {@user_xattr}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000001080)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES64=r2], 0x1, 0x3a2, &(0x7f0000000c40)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x200, 0x82) r3 = dup(r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006, 0x80010, r3, 0x1000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 6.303817955s ago: executing program 6 (id=918): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10008, &(0x7f0000000200)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000b00)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) socket(0x80000000000000a, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0xa}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000e00)=@v1={0x2, @aes256, 0x4, @auto='\t\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.06583704s ago: executing program 2 (id=919): r0 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT(r0, 0x3, 0x12, 0x0) 5.850860592s ago: executing program 2 (id=920): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) syz_open_procfs(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000700)=0x8, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000007c0)={0xa000000c}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x621a}, [@generic={0x69, 0x1, 0x1, 0x4}]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000a00)={0x1, 0x1, 0x1b, 0x11, 0x158, &(0x7f0000000a40)}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000480), 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 5.038172965s ago: executing program 6 (id=921): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = openat$dm_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x188, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_dev={r2}, [@snapshot={0x0, 0x2880, 0x0, 0x50, 'snapshot\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'PO', 0x20, '256'}}]}) 4.949437004s ago: executing program 2 (id=922): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}, 0x3400c8d4) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000040)=0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0xd, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 4.100554191s ago: executing program 6 (id=924): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2e, &(0x7f0000002940)=""/191, &(0x7f0000002a00)=0xbf) 4.100299071s ago: executing program 2 (id=925): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000140)='s', 0x1) 4.000008771s ago: executing program 6 (id=926): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) futex(r0, 0x6, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0, 0x0) 3.941070457s ago: executing program 5 (id=927): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x18, 0x140b, 0x301, 0x70bd26, 0x25dfdbf7, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048055}, 0x0) 3.876440644s ago: executing program 2 (id=928): socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) close(r3) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 3.139973659s ago: executing program 5 (id=929): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) 3.103452013s ago: executing program 1 (id=931): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10008, &(0x7f0000000200)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") syz_mount_image$ext4(0x0, &(0x7f0000000b00)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) socket(0x80000000000000a, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0xa}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000e00)=@v1={0x2, @aes256, 0x4, @auto='\t\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.920330911s ago: executing program 3 (id=932): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) syz_open_procfs(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000700)=0x8, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000007c0)={0xa000000c}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x621a}, [@generic={0x69, 0x1, 0x1, 0x4}]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000a00)={0x1, 0x1, 0x1b, 0x11, 0x158, &(0x7f0000000a40)}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000480), 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.919701902s ago: executing program 5 (id=933): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000004a80)=@delchain={0xccc, 0x65, 0x300, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, {0xfff1}, {0xd, 0xfff2}, {0x3, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x58a1}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_basic={{0xa}, {0xc84, 0x2, [@TCA_BASIC_POLICE={0xc80, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffa, 0x1, 0x5, 0x1, 0x80, {0x7, 0x1, 0x1, 0xba, 0x9, 0x3}, {0x24, 0x1, 0x2, 0xe5a, 0x7, 0x2}, 0x400}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0xc8, 0x26dd, 0xa5, 0x5, 0x6, 0x4, 0x5, 0x3e3, 0x8, 0x5, 0x5, 0x0, 0x6, 0xfffffff8, 0x2, 0x8, 0x53, 0x5, 0x9, 0x5, 0x0, 0x3ff, 0x0, 0x8, 0x5, 0xcd, 0x0, 0x0, 0x6, 0xfffffffc, 0x10001, 0x6, 0x2, 0x7aa, 0xffffcb55, 0x7bc9, 0x8, 0x7ff, 0x3, 0xffff9cbb, 0x8, 0x80, 0x7, 0x7, 0x2, 0x35f, 0x7, 0x6, 0x1, 0x1, 0x79, 0x4, 0x9, 0x1ff, 0x5, 0x8e1, 0x80, 0x0, 0x8, 0x6, 0x0, 0x64b3, 0x8, 0x64, 0x9, 0xfffffff7, 0x1000, 0x0, 0x5, 0x2, 0x7, 0x4ec, 0x4b315edc, 0x4, 0x6, 0x90, 0x5, 0x1, 0x1, 0x3, 0x9, 0x3, 0x80000001, 0x3, 0x10001, 0xf1a, 0x4, 0x9, 0x600, 0x7, 0x2, 0xacd, 0x3, 0x0, 0x2, 0x2, 0x7, 0x800006, 0x8, 0x5, 0xff, 0x74e, 0x8, 0x1ff, 0x4, 0x200, 0xec000000, 0x7ff, 0xc, 0x4000000, 0x3, 0x1, 0x8, 0x401, 0x2, 0x0, 0x6, 0xe4e, 0x4449, 0x7, 0xffffffff, 0x4, 0x5, 0x9, 0x1040, 0x7, 0x2, 0x3, 0x401, 0x26f, 0x4, 0x5, 0xd, 0x9, 0x7, 0x37, 0xf08f, 0x8, 0x6, 0x6, 0x9, 0x4d1, 0x8, 0x7ff, 0x1750, 0x9dea, 0x7, 0x2, 0x5, 0xffffff81, 0x0, 0xc, 0x6, 0x1, 0xa4, 0x4, 0x5, 0x7, 0xfff, 0x7, 0x20000000, 0x7, 0x2, 0x1, 0x1, 0xfffffffc, 0xfffff6ca, 0x40, 0x7, 0x3, 0x1, 0x6, 0xa, 0x6, 0xcb0, 0x3, 0x0, 0x8, 0x3ff, 0x4, 0xe, 0x2, 0x2, 0x6, 0x1, 0x0, 0x8, 0x5, 0x4, 0x9, 0x1, 0x16, 0x0, 0x7, 0x1, 0x1, 0x10000, 0x6, 0x3, 0xd, 0xf10, 0x8, 0x1800, 0xfe000, 0x1, 0x1, 0x9, 0xe81a, 0x800, 0x0, 0x23602cd, 0x2, 0x6, 0xffff, 0x6, 0x8, 0x200, 0x6, 0x4, 0x6, 0xe, 0x6, 0x3, 0x200, 0x0, 0xea3, 0x0, 0x3, 0x3, 0x1ff, 0x974, 0x6, 0x4, 0x1, 0x1, 0x916e, 0x6, 0x6, 0x9, 0x6, 0x3, 0x2, 0x0, 0x12, 0x101, 0x800, 0x100, 0x7, 0x7fffffff, 0x1, 0x0, 0x3ff, 0x22, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4e2f, 0x8, 0xbdf, 0x8000, 0x9, 0x2, 0x6, 0x7, 0xffff31a3, 0x200, 0x8, 0x2, 0x7, 0x8235, 0x80000001, 0x7f, 0x7, 0xe97, 0x6, 0x0, 0x3, 0x3, 0xd, 0x7f, 0x7, 0x7ff, 0x4, 0x2, 0x142c00, 0x3ff, 0x5, 0x9, 0x9c31, 0x5, 0x3, 0x7, 0x5, 0x10001, 0x6, 0x4, 0x800, 0x95e9, 0xfffffe01, 0x3, 0x6d, 0x8, 0x14e, 0xfffffff8, 0x9, 0x8, 0x9171, 0x1, 0x8, 0xff, 0x5, 0xe800, 0x85cd, 0xa48, 0x100, 0x1, 0x3, 0x9, 0x1ff, 0x9, 0x81, 0x2, 0x2, 0x8, 0x6, 0x2, 0x8, 0x40f, 0x2, 0x7, 0x8, 0x3, 0x97, 0x7fff, 0x2, 0x7fff, 0x5, 0x8, 0x7, 0x0, 0x6, 0x80000000, 0xf90d, 0x3, 0x1, 0x100, 0x2, 0x0, 0x7, 0x5e, 0x6e6f, 0x7d, 0x4ec6, 0x30, 0x80, 0x2, 0x478, 0x3, 0x9ce1, 0xd8, 0x1, 0x0, 0x3ff, 0x0, 0x7, 0xfffffe09, 0x0, 0x0, 0xe6, 0x7fffffff, 0x5, 0x40, 0x401, 0x80000000, 0x81, 0x1, 0x8, 0xc19, 0x80000000, 0x2, 0x1000, 0x58000, 0x1, 0x8, 0xfffffc00, 0x9, 0x0, 0x7, 0x81, 0xd, 0x7, 0xe, 0xee, 0x3, 0xd, 0x3f, 0x0, 0x9, 0x5, 0x1, 0x0, 0x3, 0x0, 0x10001, 0x0, 0x0, 0xa, 0x6, 0x1, 0x40, 0x8, 0x3, 0x4, 0x9, 0x3, 0x7, 0x0, 0x7, 0x5, 0x800, 0x400, 0x7fff, 0x3, 0x2, 0x661f, 0x178, 0x40, 0x5, 0x0, 0x2, 0xf, 0x7fff, 0xffff4586, 0x9, 0xffff, 0x5, 0x7, 0x9, 0x6, 0x5f6, 0x3, 0x0, 0x4, 0x87, 0xffff, 0xa6a2, 0x6, 0x6a8f, 0x7, 0x200, 0x200, 0x9, 0x3, 0x6, 0x24000000, 0x4, 0x80000000, 0x9, 0x7, 0x7, 0x9, 0x5, 0x1794, 0x4, 0x0, 0x6, 0x7fffffff, 0x8, 0x5, 0x8000, 0x101, 0x5, 0x0, 0x9, 0x7fffffff, 0x0, 0x8, 0xef, 0x7ff, 0x3c, 0xa, 0x800, 0xd, 0x7, 0x3, 0x8, 0x4, 0x664, 0x3, 0x5, 0x10, 0x9, 0x4, 0x401, 0x7, 0x2, 0x6, 0x4, 0x5, 0x9, 0xaf3, 0x7, 0x0, 0xff, 0xa5, 0x98, 0xd, 0x7, 0x3ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6e, 0x6, 0x7e, 0x8, 0x9, 0x43be0f78, 0xc196, 0x401, 0x8, 0x1, 0x2, 0x5, 0xb, 0x7, 0x5, 0x3, 0x4, 0x9, 0x9, 0x3, 0xfffffffa, 0xfffffffd, 0x586e0b34, 0x23, 0xfffff4c4, 0x8c2e, 0x2, 0x5, 0x2, 0x3, 0x8, 0x4, 0x3, 0x7, 0x3, 0x4, 0x9, 0x6, 0x2, 0x2874f20d, 0xff, 0x5, 0x7, 0x1, 0x7fffffff, 0xf14e, 0x4, 0xe311, 0xc82, 0x1, 0xb88, 0x270b, 0x20000, 0x9, 0x1ff, 0x3, 0x9, 0x9, 0x10, 0x3, 0x6, 0x1, 0xfffffffa, 0x0, 0x6, 0xa, 0x6, 0x8, 0xfffffffe, 0x6, 0x40, 0x5, 0x7ff, 0x9, 0x6, 0x1000, 0x2, 0x5, 0x3, 0x1c000000, 0xa, 0x8, 0xc, 0x68, 0x7, 0xb, 0xa, 0x4, 0xf, 0x0, 0x800, 0x74, 0xe, 0x0, 0x40, 0x4, 0xc, 0x1, 0x3dcd, 0x80000001, 0x3c86d090, 0x1, 0x57c, 0x5, 0x8, 0x10000, 0x5, 0x38aba2f1, 0x8eec, 0xffffff64, 0x80, 0x4, 0xd9, 0x5, 0x6, 0x460b, 0x7f, 0x4a4, 0x9, 0x5, 0x8, 0x0, 0xd6d, 0x7fff, 0x7f, 0xce, 0x9, 0x1, 0x900000, 0x80, 0xd, 0x7, 0x3, 0x5, 0x200, 0x2, 0xef, 0x80000001, 0x8, 0xad, 0x6, 0x3, 0x433, 0x10, 0xfffffff8, 0x3, 0x3, 0x8, 0x1, 0x0, 0x8001, 0x59, 0x9, 0x8, 0x2, 0x4, 0xfffffff8, 0x9, 0x5dec, 0x6da, 0x6, 0x266f0fad, 0x9, 0x6, 0xafa, 0x7fff, 0x3, 0x856e, 0x8, 0x8, 0x5, 0x6, 0x4, 0xfffff23a, 0x3, 0x60e6, 0xf, 0x6, 0x3ea, 0x4, 0xb0, 0xffff, 0x2, 0xc, 0x5, 0x7, 0x2, 0x5, 0xf443, 0x8, 0x0, 0x95, 0x7, 0x8, 0x3, 0xb83, 0x9, 0x1, 0x8, 0xebb, 0x10000, 0x6, 0x2fe1, 0x96, 0xffffffc9, 0x5, 0x3, 0x8000, 0x7fff, 0x3, 0xd11, 0x9b, 0x400, 0x7, 0x2, 0x3, 0x5, 0x4, 0x10001, 0xd, 0x2246, 0x7, 0x101, 0x4, 0x4, 0x5, 0x3ff, 0x0, 0x7fe, 0x2, 0x400, 0x6, 0xd, 0x401, 0x10, 0x6, 0x1, 0xffff, 0x80000004, 0x3, 0x7, 0x5, 0x80000001, 0x87a0, 0x2, 0xd1, 0x9935, 0x400, 0xa83, 0xffffd10c, 0x4, 0x4, 0x9, 0xffffffff, 0x7]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}]}}]}, 0xccc}, 0x1, 0x0, 0x0, 0xc084}, 0x2400c800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/13, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00', 0x0, 0x0) 1.966027469s ago: executing program 3 (id=934): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 1.716861055s ago: executing program 3 (id=935): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 1.36371899s ago: executing program 3 (id=936): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="800000000000000029"], 0xb8}, 0x3400c8d4) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000040)=0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0xd, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 1.360257701s ago: executing program 6 (id=937): socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) close(r3) r5 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0xffffffff, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 1.103724307s ago: executing program 1 (id=938): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x138, 0xfffffe65, 0x0, 0x0, 0xd800, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x1, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x800, 0x0, 0x78, 'snapshot-merge\x00', {@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'P', 0x20, '256', ' 1 discard_zeroes_cow'}}]}) 282.865681ms ago: executing program 3 (id=939): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0xce24, 0x8, @mcast2, 0x5}, {0xa, 0x4e23, 0xff, @mcast2, 0x200}, r1, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x10, 0x0, @in={0x2, 0x4621, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 64.527314ms ago: executing program 1 (id=940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x18}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="11223344556677889900aabbccdd", 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 63.148474ms ago: executing program 3 (id=950): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000004c0)=0x15) writev(r0, &(0x7f0000000500)=[{&(0x7f0000001c80)="bfae7330e1ec347e62c10c87374876dc9611", 0x12}], 0x1) 0s ago: executing program 1 (id=941): socket$kcm(0x21, 0x2, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000480)={0x0, 0xff, 0x2, 0x1, 0xfc}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400f9ff00fff5000000000000000000000000000100000000120002000a000600"/72], 0x6c}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) kernel console output (not intermixed with test programs): =60 fake=0 [ 236.526633][ T6165] loop3: detected capacity change from 0 to 128 [ 236.544647][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 236.601110][ T4191] EXT4-fs error (device loop0): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 236.730351][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 236.767555][ T4191] EXT4-fs warning (device loop0): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 236.812950][ T4191] EXT4-fs error (device loop0): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /85/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 236.834896][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.421917][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 237.437928][ T4191] EXT4-fs error (device loop0): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /85/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 237.651063][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 237.671005][ T4191] EXT4-fs error (device loop0): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 237.795061][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 237.930264][ T4191] EXT4-fs warning (device loop0): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 238.029541][ T6182] loop3: detected capacity change from 0 to 512 [ 238.372950][ T4191] EXT4-fs error (device loop0): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /85/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 238.489366][ T6182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 238.515048][ T6182] System zones: 1-12 [ 238.555922][ T6191] loop5: detected capacity change from 0 to 512 [ 238.588562][ T6182] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.403: missing EA_INODE flag [ 238.635909][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 238.656055][ T6191] EXT4-fs (loop5): Test dummy encryption mode enabled [ 238.711000][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 238.724699][ T6191] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.756253][ T6182] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.403: error while reading EA inode 12 err=-117 [ 239.224629][ T6182] EXT4-fs (loop3): 1 orphan inode deleted [ 239.242254][ T6182] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 239.485736][ T6191] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.405: invalid indirect mapped block 4294967295 (level 0) [ 239.540946][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 239.547561][ T4191] EXT4-fs warning (device loop0): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 239.583327][ T6191] EXT4-fs (loop5): Remounting filesystem read-only [ 239.655599][ T6191] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.405: invalid indirect mapped block 4294967295 (level 1) [ 239.702979][ T6191] EXT4-fs (loop5): Remounting filesystem read-only [ 239.709983][ T6191] EXT4-fs (loop5): 1 orphan inode deleted [ 239.727594][ T6191] EXT4-fs (loop5): 1 truncate cleaned up [ 239.780193][ T6191] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,test_dummy_encryption,block_validity,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 239.836200][ T6182] fscrypt (loop3, inode 18): Direct key flag not allowed with different contents and filenames modes [ 241.678712][ T4372] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.734835][ T4191] syz-executor (4191) used greatest stack depth: 19712 bytes left [ 241.827311][ T4372] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.937538][ T4372] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.059032][ T4372] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.330209][ T6253] loop2: detected capacity change from 0 to 1024 [ 243.380723][ T6254] rxe_eth0 speed is unknown, defaulting to 1000 [ 243.547000][ T6253] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c01c, mo2=0002] [ 243.589261][ T6253] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,debug,,errors=continue. Quota mode: none. [ 244.358117][ T6253] netlink: 56 bytes leftover after parsing attributes in process `syz.2.417'. [ 244.498010][ T6267] loop5: detected capacity change from 0 to 512 [ 244.634066][ T6254] lo speed is unknown, defaulting to 1000 [ 244.650288][ T6267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 244.705256][ T6270] loop1: detected capacity change from 0 to 512 [ 244.733844][ T6267] System zones: 1-12 [ 244.789433][ T6267] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.419: missing EA_INODE flag [ 244.851586][ T6270] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 244.874990][ T6267] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.419: error while reading EA inode 12 err=-117 [ 244.971997][ T6281] loop3: detected capacity change from 0 to 512 [ 244.979607][ T6267] EXT4-fs (loop5): 1 orphan inode deleted [ 244.985780][ T6267] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 245.003923][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.006979][ T6270] EXT4-fs (loop1): 1 truncate cleaned up [ 245.024704][ T6281] EXT4-fs (loop3): Ignoring removed oldalloc option [ 245.032078][ T6270] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.284728][ T6281] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.423: corrupted in-inode xattr [ 245.344669][ T6265] fscrypt (loop5, inode 15): Direct key flag not allowed with different contents and filenames modes [ 245.375455][ T4301] Bluetooth: hci1: command 0x0409 tx timeout [ 245.524147][ T6281] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.423: couldn't read orphan inode 15 (err -117) [ 245.917087][ T6254] chnl_net:caif_netlink_parms(): no params data found [ 246.107481][ T6281] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 246.221571][ T6295] netlink: 'syz.2.425': attribute type 14 has an invalid length. [ 246.434574][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.523910][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.613101][ T6254] device bridge_slave_0 entered promiscuous mode [ 246.714648][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.737207][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.749876][ T6254] device bridge_slave_1 entered promiscuous mode [ 246.897174][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.064506][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.298774][ T6254] team0: Port device team_slave_0 added [ 247.327659][ T6254] team0: Port device team_slave_1 added [ 247.476355][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.485112][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.528277][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.560399][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.568157][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.645871][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.691746][ T4301] Bluetooth: hci1: command 0x041b tx timeout [ 248.012062][ T6254] device hsr_slave_0 entered promiscuous mode [ 248.037040][ T6254] device hsr_slave_1 entered promiscuous mode [ 248.072461][ T6254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.102874][ T6254] Cannot create hsr debugfs directory [ 248.754862][ T6254] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.814931][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.433'. [ 248.846060][ T4372] device hsr_slave_0 left promiscuous mode [ 248.871356][ T4372] device hsr_slave_1 left promiscuous mode [ 248.933179][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.960751][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.969583][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.978080][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.987224][ T4372] device bridge_slave_1 left promiscuous mode [ 248.997373][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.026787][ T4372] device bridge_slave_0 left promiscuous mode [ 249.034669][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.258109][ T4372] device veth1_macvtap left promiscuous mode [ 249.285391][ T4372] device veth0_macvtap left promiscuous mode [ 249.322974][ T4372] device veth1_vlan left promiscuous mode [ 249.331215][ T4372] device veth0_vlan left promiscuous mode [ 249.670517][ T4301] Bluetooth: hci1: command 0x040f tx timeout [ 249.906819][ T6355] loop1: detected capacity change from 0 to 512 [ 249.934074][ T6355] EXT4-fs (loop1): Ignoring removed oldalloc option [ 249.944149][ T6356] FAULT_INJECTION: forcing a failure. [ 249.944149][ T6356] name failslab, interval 1, probability 0, space 0, times 0 [ 249.968769][ T6355] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.437: corrupted in-inode xattr [ 249.981836][ T6355] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.437: couldn't read orphan inode 15 (err -117) [ 249.995072][ T6355] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 250.036120][ T6355] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.437: corrupted in-inode xattr [ 250.100375][ T6356] CPU: 0 PID: 6356 Comm: syz.2.435 Not tainted syzkaller #0 [ 250.107743][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 250.118037][ T6356] Call Trace: [ 250.121356][ T6356] [ 250.124338][ T6356] dump_stack_lvl+0x188/0x250 [ 250.130022][ T6356] ? show_regs_print_info+0x20/0x20 [ 250.135484][ T6356] ? load_image+0x410/0x410 [ 250.140431][ T6356] ? __might_sleep+0xf0/0xf0 [ 250.145163][ T6356] ? __lock_acquire+0x7d40/0x7d40 [ 250.150925][ T6356] should_fail+0x383/0x4b0 [ 250.155768][ T6356] should_failslab+0x5/0x20 [ 250.160307][ T6356] slab_pre_alloc_hook+0x51/0xc0 [ 250.165303][ T6356] ? ptlock_alloc+0x1c/0x60 [ 250.169879][ T6356] kmem_cache_alloc+0x3d/0x280 [ 250.174728][ T6356] ptlock_alloc+0x1c/0x60 [ 250.179093][ T6356] pte_alloc_one+0xc0/0x310 [ 250.183747][ T6356] ? rcu_lock_release+0x20/0x20 [ 250.188654][ T6356] ? __lock_acquire+0x13b3/0x7d40 [ 250.193741][ T6356] handle_mm_fault+0x2553/0x4440 [ 250.198912][ T6356] ? get_page+0xe0/0xe0 [ 250.203101][ T6356] ? __kasan_slab_alloc+0xa9/0xc0 [ 250.208502][ T6356] ? vmacache_find+0x4f0/0x590 [ 250.213311][ T6356] ? vmacache_update+0xa0/0x100 [ 250.218208][ T6356] ? find_vma+0x1df/0x230 [ 250.222691][ T6356] do_user_addr_fault+0x494/0xc90 [ 250.227890][ T6356] exc_page_fault+0x60/0x100 [ 250.232526][ T6356] ? __might_fault+0xb7/0x110 [ 250.237246][ T6356] asm_exc_page_fault+0x22/0x30 [ 250.242156][ T6356] RIP: 0010:strncpy_from_user+0x160/0x350 [ 250.248017][ T6356] Code: 00 00 00 4c 89 e6 e8 ff 61 70 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 250.267683][ T6356] RSP: 0018:ffffc9000344fe58 EFLAGS: 00050246 [ 250.273843][ T6356] RAX: ffffffff8408c541 RBX: ffff8880604e6620 RCX: ffff88807d688000 [ 250.281855][ T6356] RDX: 0000000000000002 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 250.289950][ T6356] RBP: 0000000000000fe0 R08: 0000000000000fe0 R09: 0000000000000020 [ 250.298064][ T6356] R10: dffffc0000000000 R11: fffff94000302701 R12: 0000000000000fe0 [ 250.306075][ T6356] R13: 0000000000000000 R14: 0000000000000fe0 R15: 0000000000000000 [ 250.314106][ T6356] ? strncpy_from_user+0x141/0x350 [ 250.319266][ T6356] ? strncpy_from_user+0x141/0x350 [ 250.324428][ T6356] getname_flags+0xf2/0x4f0 [ 250.329019][ T6356] __x64_sys_mkdirat+0x78/0x90 [ 250.334073][ T6356] do_syscall_64+0x4c/0xa0 [ 250.338657][ T6356] ? clear_bhb_loop+0x30/0x80 [ 250.343444][ T6356] ? clear_bhb_loop+0x30/0x80 [ 250.348167][ T6356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.354485][ T6356] RIP: 0033:0x7f97f1767559 [ 250.359290][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.380046][ T6356] RSP: 002b:00007f97ef97c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 250.388538][ T6356] RAX: ffffffffffffffda RBX: 00007f97f19ee180 RCX: 00007f97f1767559 [ 250.396652][ T6356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 250.404669][ T6356] RBP: 00007f97f17feb20 R08: 0000000000000000 R09: 0000000000000000 [ 250.412693][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.420935][ T6356] R13: 00007f97f19ee218 R14: 00007f97f19ee180 R15: 00007ffebbd5f0b8 [ 250.428993][ T6356] [ 250.551744][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 250.570122][ T4372] team0 (unregistering): Port device team_slave_0 removed [ 250.585604][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.602951][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.666132][ T6360] loop5: detected capacity change from 0 to 512 [ 250.848290][ T4372] bond0 (unregistering): Released all slaves [ 250.934630][ T6254] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 250.958746][ T4268] lo speed is unknown, defaulting to 1000 [ 250.966238][ T6254] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.065975][ T6360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 251.194246][ T6360] System zones: 1-12 [ 251.519382][ T6360] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.438: missing EA_INODE flag [ 251.615032][ T6254] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.735973][ T6360] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.438: error while reading EA inode 12 err=-117 [ 251.780617][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 251.854876][ T6360] EXT4-fs (loop5): 1 orphan inode deleted [ 251.861349][ T6360] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 252.145663][ T6360] fscrypt (loop5, inode 15): Direct key flag not allowed with different contents and filenames modes [ 252.272338][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.312713][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.336423][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.570080][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.669322][ T6254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.758653][ T6254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.829036][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.856903][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.882257][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.889473][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.948101][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.972443][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.999614][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.006871][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.052124][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.084699][ T6378] device-mapper: table: 248:3: crypt: Error decoding and setting key [ 253.091069][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.102584][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.113040][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.121260][ T6378] device-mapper: ioctl: error adding target to table [ 253.135211][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.155298][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.187018][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.231128][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.267836][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.319372][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.492170][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.536931][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.603773][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.634735][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.641161][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.669982][ T6430] loop5: detected capacity change from 0 to 512 [ 254.763196][ T6433] loop3: detected capacity change from 0 to 512 [ 254.780540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.793182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.832971][ T6430] EXT4-fs (loop5): Ignoring removed oldalloc option [ 254.886653][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.891332][ T6430] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.449: corrupted in-inode xattr [ 255.063688][ T6430] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.449: couldn't read orphan inode 15 (err -117) [ 255.171007][ T6430] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 255.213212][ T6430] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.449: corrupted in-inode xattr [ 255.630181][ T6433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 255.659042][ T6433] System zones: 1-12 [ 255.664457][ T6433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.451: missing EA_INODE flag [ 255.706474][ T6444] loop1: detected capacity change from 0 to 512 [ 255.857453][ T6433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.451: error while reading EA inode 12 err=-117 [ 255.913892][ T6444] EXT4-fs (loop1): Test dummy encryption mode enabled [ 255.920742][ T6444] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 255.920742][ T6444] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 255.920742][ T6444] [ 255.943228][ T6433] EXT4-fs (loop3): 1 orphan inode deleted [ 255.949145][ T6433] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 256.088921][ T6444] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.454: inode has both inline data and extents flags [ 256.221193][ T6455] fscrypt (loop3, inode 18): Direct key flag not allowed with different contents and filenames modes [ 256.322867][ T6444] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.454: couldn't read orphan inode 15 (err -117) [ 256.426180][ T6444] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 257.902569][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.926399][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.148632][ T6254] device veth0_vlan entered promiscuous mode [ 258.301717][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.409000][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.637425][ T6254] device veth1_vlan entered promiscuous mode [ 258.686141][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.714942][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.797857][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.955254][ T6254] device veth0_macvtap entered promiscuous mode [ 259.202930][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.237916][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.272745][ T6499] loop2: detected capacity change from 0 to 512 [ 259.300478][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.337836][ T6499] EXT4-fs (loop2): Ignoring removed oldalloc option [ 259.405308][ T6499] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.465: corrupted in-inode xattr [ 259.426202][ T6499] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.465: couldn't read orphan inode 15 (err -117) [ 259.440547][ T6499] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 259.480973][ T6499] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.465: corrupted in-inode xattr [ 259.540864][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.612209][ T6254] device veth1_macvtap entered promiscuous mode [ 259.773822][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.797681][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.873004][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.886557][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.897583][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.918069][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.928081][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.947690][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.969271][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.999138][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.012849][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.077128][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.111363][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.134989][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.163831][ T6511] loop5: detected capacity change from 0 to 512 [ 260.182087][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.300616][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.341902][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.376943][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.421480][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.443815][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.492928][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.505485][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.522738][ T6511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 260.537732][ T6511] System zones: 1-12 [ 260.549753][ T6511] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.468: missing EA_INODE flag [ 260.571768][ T6254] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.593599][ T6254] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.614145][ T6511] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.468: error while reading EA inode 12 err=-117 [ 260.641826][ T6511] EXT4-fs (loop5): 1 orphan inode deleted [ 260.656626][ T6254] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.676696][ T6511] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 260.696656][ T6254] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.863006][ T6521] fscrypt (loop5, inode 15): Direct key flag not allowed with different contents and filenames modes [ 262.051407][ T6531] loop3: detected capacity change from 0 to 512 [ 262.261980][ T6536] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 262.531252][ T6531] EXT4-fs (loop3): Test dummy encryption mode enabled [ 262.639246][ T6531] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 262.639246][ T6531] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 262.639246][ T6531] [ 262.981548][ T6531] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.475: inode has both inline data and extents flags [ 263.044062][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.052323][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.117271][ T6531] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.475: couldn't read orphan inode 15 (err -117) [ 263.133925][ T6543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 263.183882][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.223887][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.259166][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.276528][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.284387][ T6531] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 263.463293][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.414'. [ 263.635374][ T6557] loop2: detected capacity change from 0 to 512 [ 263.706565][ T6557] EXT4-fs (loop2): Ignoring removed oldalloc option [ 263.771557][ T6557] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.478: corrupted in-inode xattr [ 263.785688][ T6557] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.478: couldn't read orphan inode 15 (err -117) [ 263.799057][ T6557] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 263.831261][ T6557] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.478: corrupted in-inode xattr [ 264.593988][ T6571] loop5: detected capacity change from 0 to 512 [ 264.665584][ T6571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 264.705096][ T6571] System zones: 1-12 [ 264.745487][ T6571] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.482: missing EA_INODE flag [ 264.794505][ T6571] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.482: error while reading EA inode 12 err=-117 [ 264.834912][ T6571] EXT4-fs (loop5): 1 orphan inode deleted [ 264.865174][ T6571] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 265.040599][ T6581] fscrypt (loop5, inode 15): Direct key flag not allowed with different contents and filenames modes [ 265.747727][ T6585] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 267.996429][ T6614] futex_wake_op: syz.1.491 tries to shift op by 144; fix this program [ 268.005356][ T6614] futex_wake_op: syz.1.491 tries to shift op by 144; fix this program [ 268.013665][ T6614] FAULT_INJECTION: forcing a failure. [ 268.013665][ T6614] name fail_futex, interval 1, probability 0, space 0, times 1 [ 268.037451][ T6614] CPU: 0 PID: 6614 Comm: syz.1.491 Not tainted syzkaller #0 [ 268.044806][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 268.054890][ T6614] Call Trace: [ 268.058202][ T6614] [ 268.061157][ T6614] dump_stack_lvl+0x188/0x250 [ 268.065878][ T6614] ? show_regs_print_info+0x20/0x20 [ 268.071123][ T6614] ? load_image+0x410/0x410 [ 268.075661][ T6614] ? mark_lock+0x94/0x320 [ 268.080023][ T6614] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 268.086062][ T6614] should_fail+0x383/0x4b0 [ 268.090519][ T6614] get_futex_key+0x1a1/0x12d0 [ 268.095251][ T6614] ? __lock_acquire+0x13b3/0x7d40 [ 268.100324][ T6614] ? futex_wait_restart+0x250/0x250 [ 268.105574][ T6614] futex_wake+0x101/0x540 [ 268.109944][ T6614] ? futex_wait+0x680/0x680 [ 268.114477][ T6614] ? verify_lock_unused+0x140/0x140 [ 268.119722][ T6614] ? verify_lock_unused+0x140/0x140 [ 268.124975][ T6614] do_futex+0xd83/0x12b0 [ 268.129265][ T6614] ? futex_exit_release+0x1c0/0x1c0 [ 268.134501][ T6614] ? __context_tracking_exit+0x4c/0x80 [ 268.140001][ T6614] __se_sys_futex+0x389/0x420 [ 268.144719][ T6614] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 268.150737][ T6614] ? __x64_sys_futex+0xf0/0xf0 [ 268.155539][ T6614] ? __x64_sys_futex+0x1d/0xf0 [ 268.160348][ T6614] do_syscall_64+0x4c/0xa0 [ 268.164796][ T6614] ? clear_bhb_loop+0x30/0x80 [ 268.169515][ T6614] ? clear_bhb_loop+0x30/0x80 [ 268.174255][ T6614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.180203][ T6614] RIP: 0033:0x7fe3c2edb559 [ 268.184681][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.204472][ T6614] RSP: 002b:00007fe3c11320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 268.212938][ T6614] RAX: ffffffffffffffda RBX: 00007fe3c3161fa8 RCX: 00007fe3c2edb559 [ 268.220973][ T6614] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3c3161fac [ 268.229163][ T6614] RBP: 00007fe3c3161fa0 R08: 000fa42b31ab12f1 R09: 0000000000000000 [ 268.237274][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.245290][ T6614] R13: 00007fe3c3162038 R14: 00007fff0943b830 R15: 00007fff0943b918 [ 268.253424][ T6614] [ 268.375743][ T6625] loop3: detected capacity change from 0 to 512 [ 268.468043][ T6630] loop6: detected capacity change from 0 to 512 [ 268.505144][ T6625] EXT4-fs (loop3): Ignoring removed oldalloc option [ 268.608655][ T6632] loop2: detected capacity change from 0 to 512 [ 268.633727][ T6625] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.493: corrupted in-inode xattr [ 268.662013][ T6625] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.493: couldn't read orphan inode 15 (err -117) [ 268.694374][ T6632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 268.718599][ T6630] EXT4-fs (loop6): Test dummy encryption mode enabled [ 268.725912][ T6630] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 268.725912][ T6630] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 268.725912][ T6630] [ 268.757742][ T6630] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.494: inode has both inline data and extents flags [ 268.786960][ T6625] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 268.836219][ T6632] System zones: 1-12 [ 268.861877][ T6625] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.493: corrupted in-inode xattr [ 268.873848][ T6632] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.496: missing EA_INODE flag [ 268.886400][ T6630] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.494: couldn't read orphan inode 15 (err -117) [ 268.936240][ T6632] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.496: error while reading EA inode 12 err=-117 [ 268.989627][ T6630] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 269.086560][ T6632] EXT4-fs (loop2): 1 orphan inode deleted [ 269.110468][ T6632] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 269.350783][ T6646] loop1: detected capacity change from 0 to 512 [ 269.514097][ T6646] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 269.584597][ T6646] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 269.692489][ T6646] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.498: Corrupt directory, running e2fsck is recommended [ 269.725224][ T6646] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 269.734979][ T6655] fscrypt (loop2, inode 15): Direct key flag not allowed with different contents and filenames modes [ 269.759968][ T6646] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.498: corrupted in-inode xattr [ 269.797668][ T6646] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.498: couldn't read orphan inode 15 (err -117) [ 269.849630][ T6660] loop3: detected capacity change from 0 to 512 [ 269.866658][ T6646] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.norecovery,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv1,max_batch_time=0x0000000000000008,,,errors=continue. Quota mode: writeback. [ 269.960153][ T6660] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 270.073883][ T6646] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.132538][ T6660] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.181154][ T6646] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 270.216850][ T6646] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.498: Corrupt directory, running e2fsck is recommended [ 270.316889][ T6666] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.394619][ T6666] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 270.469819][ T6666] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.498: Corrupt directory, running e2fsck is recommended [ 270.543219][ T6668] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.649757][ T6668] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 270.727981][ T6668] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.498: Corrupt directory, running e2fsck is recommended [ 273.437554][ T6720] xt_TCPMSS: Only works on TCP SYN packets [ 273.480529][ T6722] loop5: detected capacity change from 0 to 512 [ 273.573615][ T6722] EXT4-fs (loop5): Ignoring removed oldalloc option [ 273.693745][ T6722] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.508: corrupted in-inode xattr [ 273.706438][ T6722] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.508: couldn't read orphan inode 15 (err -117) [ 273.722186][ T6722] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 273.751110][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.761195][ T6722] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.508: corrupted in-inode xattr [ 274.762620][ T6734] loop5: detected capacity change from 0 to 512 [ 274.843683][ T6734] EXT4-fs (loop5): Test dummy encryption mode enabled [ 274.867473][ T6734] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 274.867473][ T6734] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 274.867473][ T6734] [ 275.017202][ T6734] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.511: inode has both inline data and extents flags [ 275.080028][ T6734] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.511: couldn't read orphan inode 15 (err -117) [ 275.150065][ T6734] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 275.231399][ T6747] loop1: detected capacity change from 0 to 1024 [ 276.283250][ T6762] loop6: detected capacity change from 0 to 512 [ 276.438455][ T6762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 276.651555][ T6762] System zones: 1-12 [ 276.984663][ T6762] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.517: missing EA_INODE flag [ 277.068470][ T6762] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.517: error while reading EA inode 12 err=-117 [ 277.153474][ T6762] EXT4-fs (loop6): 1 orphan inode deleted [ 277.159537][ T6762] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 277.487826][ T6786] loop1: detected capacity change from 0 to 512 [ 277.589058][ T6786] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 277.598236][ T6786] FAT-fs (loop1): Filesystem has been set read-only [ 280.857927][ T6833] loop5: detected capacity change from 0 to 512 [ 280.874970][ T6830] loop3: detected capacity change from 0 to 512 [ 281.025571][ T6833] EXT4-fs (loop5): Test dummy encryption mode enabled [ 281.032433][ T6833] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 281.032433][ T6833] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 281.032433][ T6833] [ 281.121125][ T6830] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 281.129971][ T6830] FAT-fs (loop3): Filesystem has been set read-only [ 281.504850][ T6833] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.536: inode has both inline data and extents flags [ 281.904980][ T6833] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.536: couldn't read orphan inode 15 (err -117) [ 281.996904][ T6843] netlink: 'syz.6.538': attribute type 10 has an invalid length. [ 282.019108][ T6833] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 282.043990][ T6843] device syz_tun entered promiscuous mode [ 282.155474][ T6843] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 282.301035][ T3081] bond0: (slave bond_slave_0): interface is now down [ 282.319970][ T3081] bond0: (slave bond_slave_1): interface is now down [ 282.336934][ T3081] bond0: (slave syz_tun): interface is now down [ 282.361440][ T3081] bond0: now running without any active interface! [ 283.896984][ T6877] FAULT_INJECTION: forcing a failure. [ 283.896984][ T6877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.911879][ T6877] CPU: 0 PID: 6877 Comm: syz.6.546 Not tainted syzkaller #0 [ 283.919220][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 283.929322][ T6877] Call Trace: [ 283.932643][ T6877] [ 283.935612][ T6877] dump_stack_lvl+0x188/0x250 [ 283.940339][ T6877] ? show_regs_print_info+0x20/0x20 [ 283.945586][ T6877] ? load_image+0x410/0x410 [ 283.950151][ T6877] should_fail+0x383/0x4b0 [ 283.954798][ T6877] prepare_alloc_pages+0x1e3/0x5b0 [ 283.960056][ T6877] __alloc_pages+0x11b/0x480 [ 283.964708][ T6877] ? zone_statistics+0x170/0x170 [ 283.969750][ T6877] ? rcu_lock_acquire+0x30/0x30 [ 283.974646][ T6877] ? alloc_pages+0x452/0x560 [ 283.979282][ T6877] __get_free_pages+0x8/0x30 [ 283.983903][ T6877] __tlb_remove_page_size+0x1f2/0x3f0 [ 283.989333][ T6877] unmap_page_range+0xfcf/0x2410 [ 283.994355][ T6877] unmap_vmas+0x131/0x250 [ 283.998743][ T6877] ? unmap_page_range+0x2410/0x2410 [ 284.003989][ T6877] ? __mutex_lock_common+0x435/0x2400 [ 284.009422][ T6877] ? exit_mm_release+0x16/0x30 [ 284.014246][ T6877] exit_mmap+0x3b9/0x640 [ 284.018537][ T6877] ? vm_brk+0x20/0x20 [ 284.022572][ T6877] ? uprobe_clear_state+0x2f6/0x460 [ 284.027835][ T6877] __mmput+0x115/0x390 [ 284.031973][ T6877] exit_mm+0x632/0x7b0 [ 284.036388][ T6877] ? perf_pmu_migrate_context+0xb70/0xb70 [ 284.042166][ T6877] ? do_exit+0x2110/0x2110 [ 284.047844][ T6877] ? __ia32_sys_timer_delete+0x40/0x40 [ 284.053380][ T6877] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 284.058889][ T6877] ? tty_audit_exit+0x149/0x1f0 [ 284.063789][ T6877] do_exit+0x5b8/0x2110 [ 284.067995][ T6877] ? put_task_struct+0x80/0x80 [ 284.072793][ T6877] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 284.078827][ T6877] ? _raw_spin_lock_irq+0xb7/0xf0 [ 284.083892][ T6877] do_group_exit+0x12c/0x2f0 [ 284.088522][ T6877] ? lockdep_hardirqs_on+0x94/0x140 [ 284.093761][ T6877] get_signal+0x7eb/0x12e0 [ 284.098232][ T6877] arch_do_signal_or_restart+0xe6/0x12a0 [ 284.103924][ T6877] ? futex_exit_release+0x1c0/0x1c0 [ 284.109192][ T6877] ? get_sigframe_size+0x10/0x10 [ 284.114169][ T6877] ? __context_tracking_exit+0x4c/0x80 [ 284.119717][ T6877] ? exit_to_user_mode_loop+0x3b/0x130 [ 284.125226][ T6877] exit_to_user_mode_loop+0x9e/0x130 [ 284.130556][ T6877] exit_to_user_mode_prepare+0xee/0x180 [ 284.136141][ T6877] syscall_exit_to_user_mode+0x16/0x40 [ 284.141648][ T6877] do_syscall_64+0x58/0xa0 [ 284.146110][ T6877] ? clear_bhb_loop+0x30/0x80 [ 284.150833][ T6877] ? clear_bhb_loop+0x30/0x80 [ 284.155552][ T6877] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.161875][ T6877] RIP: 0033:0x7f7e27b11559 [ 284.166332][ T6877] Code: Unable to access opcode bytes at RIP 0x7f7e27b1152f. [ 284.173820][ T6877] RSP: 002b:00007f7e25d680e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 284.182301][ T6877] RAX: 0000000000000001 RBX: 00007f7e27d97fa8 RCX: 00007f7e27b11559 [ 284.190798][ T6877] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e27d97fac [ 284.199107][ T6877] RBP: 00007f7e27d97fa0 R08: 00202b18591aed4b R09: 0000000000000000 [ 284.207417][ T6877] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 284.215436][ T6877] R13: 00007f7e27d98038 R14: 00007fffefe9e840 R15: 00007fffefe9e928 [ 284.223470][ T6877] [ 284.335589][ T6885] loop5: detected capacity change from 0 to 512 [ 284.448919][ T6885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 284.474712][ T6889] loop2: detected capacity change from 0 to 512 [ 284.483759][ T6885] System zones: 1-12 [ 284.500890][ T6885] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.548: missing EA_INODE flag [ 284.513704][ T6885] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.548: error while reading EA inode 12 err=-117 [ 284.563674][ T6885] EXT4-fs (loop5): 1 orphan inode deleted [ 284.601058][ T6889] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 284.609815][ T6889] FAT-fs (loop2): Filesystem has been set read-only [ 284.816556][ T6885] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 285.359728][ T6906] fscrypt (loop5, inode 15): Direct key flag not allowed with different contents and filenames modes [ 286.039364][ T6922] sctp: [Deprecated]: syz.3.557 (pid 6922) Use of int in max_burst socket option deprecated. [ 286.039364][ T6922] Use struct sctp_assoc_value instead [ 286.606505][ T6926] loop2: detected capacity change from 0 to 512 [ 286.752452][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 286.862520][ T4268] Bluetooth: hci5: command 0x0406 tx timeout [ 286.888598][ T6926] EXT4-fs (loop2): Test dummy encryption mode enabled [ 286.956695][ T6926] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 286.956695][ T6926] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 286.956695][ T6926] [ 287.100822][ T6926] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.558: inode has both inline data and extents flags [ 287.163823][ T6926] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.558: couldn't read orphan inode 15 (err -117) [ 287.256518][ T6926] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 287.443990][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.561'. [ 287.751612][ T6942] loop3: detected capacity change from 0 to 256 [ 288.119331][ T6955] loop1: detected capacity change from 0 to 512 [ 288.181513][ T6955] EXT4-fs (loop1): Ignoring removed oldalloc option [ 288.202631][ T6955] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.565: corrupted in-inode xattr [ 288.219292][ T6955] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.565: couldn't read orphan inode 15 (err -117) [ 288.239846][ T6955] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 288.279916][ T6955] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.565: corrupted in-inode xattr [ 288.800753][ T6967] netlink: 'syz.1.568': attribute type 12 has an invalid length. [ 289.783754][ T6991] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.205973][ T7001] loop5: detected capacity change from 0 to 1024 [ 290.335917][ T7001] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 290.387551][ T7001] EXT4-fs (loop5): Test dummy encryption mode enabled [ 290.424949][ T7001] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.522959][ T7001] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 290.591131][ T7001] System zones: 0-1, 3-36 [ 290.647977][ T7001] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 290.750519][ T7017] loop2: detected capacity change from 0 to 512 [ 290.815985][ T7022] loop3: detected capacity change from 0 to 512 [ 290.828902][ T7017] EXT4-fs (loop2): Ignoring removed oldalloc option [ 290.874530][ T7017] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.578: corrupted in-inode xattr [ 290.905724][ T7017] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.578: couldn't read orphan inode 15 (err -117) [ 290.933963][ T7017] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 290.974960][ T7017] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.578: corrupted in-inode xattr [ 291.086788][ T7022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 291.152165][ T7022] System zones: 1-12 [ 291.211841][ T7022] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.579: missing EA_INODE flag [ 291.251673][ T7001] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 291.281465][ T7022] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.579: error while reading EA inode 12 err=-117 [ 291.379457][ T7022] EXT4-fs (loop3): 1 orphan inode deleted [ 291.385268][ T7022] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 291.610946][ T7034] loop2: detected capacity change from 0 to 512 [ 291.683191][ T7034] EXT4-fs (loop2): Test dummy encryption mode enabled [ 291.690037][ T7034] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 291.690037][ T7034] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 291.690037][ T7034] [ 291.781467][ T7040] fscrypt (loop3, inode 15): Direct key flag not allowed with different contents and filenames modes [ 291.932416][ T7034] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.580: inode has both inline data and extents flags [ 291.977938][ T7034] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.580: couldn't read orphan inode 15 (err -117) [ 292.004255][ T7034] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 292.656068][ T7057] capability: warning: `syz.1.583' uses deprecated v2 capabilities in a way that may be insecure [ 293.839123][ T7081] FAULT_INJECTION: forcing a failure. [ 293.839123][ T7081] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 293.853054][ T7081] CPU: 0 PID: 7081 Comm: syz.1.589 Not tainted syzkaller #0 [ 293.860429][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 293.870642][ T7081] Call Trace: [ 293.873950][ T7081] [ 293.876913][ T7081] dump_stack_lvl+0x188/0x250 [ 293.881662][ T7081] ? show_regs_print_info+0x20/0x20 [ 293.886940][ T7081] ? load_image+0x410/0x410 [ 293.891497][ T7081] ? __lock_acquire+0x7d40/0x7d40 [ 293.896658][ T7081] should_fail+0x383/0x4b0 [ 293.901121][ T7081] _copy_from_user+0x2e/0x170 [ 293.905958][ T7081] do_seccomp+0x4b2/0x16a0 [ 293.910420][ T7081] ? __lock_acquire+0x7d40/0x7d40 [ 293.915494][ T7081] ? prctl_set_seccomp+0x60/0x60 [ 293.920476][ T7081] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 293.926519][ T7081] ? lockdep_hardirqs_on+0x94/0x140 [ 293.931765][ T7081] do_syscall_64+0x4c/0xa0 [ 293.936232][ T7081] ? clear_bhb_loop+0x30/0x80 [ 293.941471][ T7081] ? clear_bhb_loop+0x30/0x80 [ 293.946191][ T7081] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.952159][ T7081] RIP: 0033:0x7fe3c2edb559 [ 293.956620][ T7081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.976281][ T7081] RSP: 002b:00007fe3c1132028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 293.984746][ T7081] RAX: ffffffffffffffda RBX: 00007fe3c3161fa0 RCX: 00007fe3c2edb559 [ 293.992850][ T7081] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 294.000879][ T7081] RBP: 00007fe3c2f72b20 R08: 0000000000000000 R09: 0000000000000000 [ 294.008881][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.016906][ T7081] R13: 00007fe3c3162038 R14: 00007fe3c3161fa0 R15: 00007fff0943b918 [ 294.025046][ T7081] [ 294.115421][ T7089] loop5: detected capacity change from 0 to 512 [ 294.205295][ T7089] EXT4-fs (loop5): Ignoring removed oldalloc option [ 294.230111][ T7089] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.590: corrupted in-inode xattr [ 294.245575][ T7089] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.590: couldn't read orphan inode 15 (err -117) [ 294.285119][ T7089] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 294.325326][ T7089] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.590: corrupted in-inode xattr [ 294.944538][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.593'. [ 295.702968][ T7112] loop3: detected capacity change from 0 to 512 [ 295.726124][ T7112] EXT4-fs (loop3): Test dummy encryption mode enabled [ 295.733084][ T7112] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 295.733084][ T7112] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 295.733084][ T7112] [ 295.776876][ T7112] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.595: inode has both inline data and extents flags [ 295.847873][ T7112] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.595: couldn't read orphan inode 15 (err -117) [ 295.974065][ T7112] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 296.455210][ T7121] sctp: failed to load transform for md5: -2 [ 297.649353][ T7158] loop1: detected capacity change from 0 to 512 [ 297.954189][ T7158] EXT4-fs (loop1): Ignoring removed oldalloc option [ 297.974445][ T7158] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.603: corrupted in-inode xattr [ 297.987034][ T7158] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.603: couldn't read orphan inode 15 (err -117) [ 298.001096][ T7158] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 298.041332][ T7158] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.603: corrupted in-inode xattr [ 298.279414][ T7173] loop3: detected capacity change from 0 to 512 [ 298.606047][ T7173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 298.627019][ T7173] System zones: 1-12 [ 299.013205][ T7173] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.607: missing EA_INODE flag [ 299.034582][ T7173] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.607: error while reading EA inode 12 err=-117 [ 299.041141][ T7173] EXT4-fs (loop3): 1 orphan inode deleted [ 299.041455][ T7173] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 299.541735][ T7195] fscrypt (loop3, inode 15): Direct key flag not allowed with different contents and filenames modes [ 302.332203][ T7237] loop6: detected capacity change from 0 to 512 [ 302.667839][ T7245] loop1: detected capacity change from 0 to 512 [ 302.709739][ T7237] EXT4-fs (loop6): Test dummy encryption mode enabled [ 302.724138][ T7245] EXT4-fs (loop1): Ignoring removed oldalloc option [ 302.768394][ T7245] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.620: corrupted in-inode xattr [ 302.781060][ T7245] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.620: couldn't read orphan inode 15 (err -117) [ 302.795517][ T7245] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 302.836102][ T7245] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.620: corrupted in-inode xattr [ 303.155005][ T7237] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 303.155005][ T7237] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 303.155005][ T7237] [ 303.270133][ T7237] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.617: inode has both inline data and extents flags [ 303.312097][ T7237] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.617: couldn't read orphan inode 15 (err -117) [ 303.324545][ T7237] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 303.614750][ T7263] vcan0: tx address claim with dest, not broadcast [ 303.857631][ T7270] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 305.373237][ T7295] loop3: detected capacity change from 0 to 512 [ 305.396742][ T7297] loop1: detected capacity change from 0 to 512 [ 305.408950][ T7295] EXT4-fs (loop3): Ignoring removed oldalloc option [ 305.427760][ T7295] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.632: corrupted in-inode xattr [ 305.440781][ T7295] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.632: couldn't read orphan inode 15 (err -117) [ 305.453531][ T7295] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 305.493822][ T7295] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.632: corrupted in-inode xattr [ 305.649866][ T7297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 305.673066][ T7297] System zones: 1-12 [ 305.740685][ T7297] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.633: missing EA_INODE flag [ 305.804044][ T7297] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.633: error while reading EA inode 12 err=-117 [ 305.836964][ T7307] loop5: detected capacity change from 0 to 128 [ 305.852788][ T7297] EXT4-fs (loop1): 1 orphan inode deleted [ 305.858789][ T7297] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 305.909824][ T7307] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 305.955730][ T7307] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 306.311139][ T7317] fscrypt (loop1, inode 15): Direct key flag not allowed with different contents and filenames modes [ 307.198121][ T7326] loop5: detected capacity change from 0 to 512 [ 307.322587][ T7326] EXT4-fs (loop5): Test dummy encryption mode enabled [ 307.355369][ T7326] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 307.355369][ T7326] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 307.355369][ T7326] [ 307.443153][ T7326] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.639: inode has both inline data and extents flags [ 307.500210][ T7326] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.639: couldn't read orphan inode 15 (err -117) [ 307.587527][ T7326] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 308.627931][ T7348] loop3: detected capacity change from 0 to 512 [ 308.678612][ T7348] EXT4-fs (loop3): Ignoring removed oldalloc option [ 308.723336][ T7348] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.648: corrupted in-inode xattr [ 308.735780][ T7348] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.648: couldn't read orphan inode 15 (err -117) [ 308.749223][ T7348] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 308.805615][ T7348] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.648: corrupted in-inode xattr [ 309.503424][ T7361] loop1: detected capacity change from 0 to 512 [ 309.585055][ T7363] Zero length message leads to an empty skb [ 309.652519][ T7361] EXT4-fs (loop1): Test dummy encryption mode enabled [ 309.666432][ T7361] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 309.666432][ T7361] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 309.666432][ T7361] [ 309.689138][ T7361] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.654: inode has both inline data and extents flags [ 309.795838][ T7361] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.654: couldn't read orphan inode 15 (err -117) [ 309.808324][ T7361] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 310.314276][ T7379] FAULT_INJECTION: forcing a failure. [ 310.314276][ T7379] name failslab, interval 1, probability 0, space 0, times 0 [ 310.328181][ T7379] CPU: 1 PID: 7379 Comm: syz.6.660 Not tainted syzkaller #0 [ 310.335525][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 310.345797][ T7379] Call Trace: [ 310.349117][ T7379] [ 310.352079][ T7379] dump_stack_lvl+0x188/0x250 [ 310.356825][ T7379] ? show_regs_print_info+0x20/0x20 [ 310.362064][ T7379] ? load_image+0x410/0x410 [ 310.366615][ T7379] ? __might_sleep+0xf0/0xf0 [ 310.371248][ T7379] ? __lock_acquire+0x7d40/0x7d40 [ 310.376321][ T7379] should_fail+0x383/0x4b0 [ 310.380797][ T7379] should_failslab+0x5/0x20 [ 310.385338][ T7379] slab_pre_alloc_hook+0x51/0xc0 [ 310.390320][ T7379] ? __kernfs_new_node+0xe3/0x6b0 [ 310.395509][ T7379] kmem_cache_alloc+0x3d/0x280 [ 310.400324][ T7379] __kernfs_new_node+0xe3/0x6b0 [ 310.405247][ T7379] ? widen_string+0x3b/0x320 [ 310.409886][ T7379] ? kernfs_new_node+0x250/0x250 [ 310.414880][ T7379] ? snprintf+0xe5/0x140 [ 310.419178][ T7379] kernfs_new_node+0x148/0x250 [ 310.423982][ T7379] __kernfs_create_file+0x47/0x2e0 [ 310.429136][ T7379] cgroup_addrm_files+0xac3/0x1020 [ 310.434302][ T7379] ? rcu_lock_release+0x20/0x20 [ 310.439282][ T7379] ? vfs_mkdir+0x386/0x570 [ 310.443738][ T7379] ? __x64_sys_mkdirat+0x85/0x90 [ 310.448725][ T7379] ? do_syscall_64+0x4c/0xa0 [ 310.453375][ T7379] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.459491][ T7379] ? mark_lock+0x94/0x320 [ 310.463864][ T7379] ? mark_lock+0x94/0x320 [ 310.468268][ T7379] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 310.474314][ T7379] ? __local_bh_enable_ip+0x136/0x1c0 [ 310.479731][ T7379] ? lockdep_hardirqs_on+0x94/0x140 [ 310.484982][ T7379] css_populate_dir+0x155/0x350 [ 310.489873][ T7379] cgroup_apply_control_enable+0x641/0xb00 [ 310.495743][ T7379] cgroup_mkdir+0xcbd/0xeb0 [ 310.500387][ T7379] ? css_task_iter_end+0x280/0x280 [ 310.505576][ T7379] ? do_raw_spin_unlock+0x11d/0x230 [ 310.510823][ T7379] ? kernfs_iop_permission+0x22d/0x310 [ 310.516345][ T7379] ? css_task_iter_end+0x280/0x280 [ 310.521527][ T7379] kernfs_iop_mkdir+0x23d/0x3d0 [ 310.525086][ T7384] loop3: detected capacity change from 0 to 512 [ 310.526424][ T7379] vfs_mkdir+0x386/0x570 [ 310.526507][ T7379] do_mkdirat+0x1dd/0x5c0 [ 310.526533][ T7379] ? vfs_mkdir+0x570/0x570 [ 310.526568][ T7379] __x64_sys_mkdirat+0x85/0x90 [ 310.526594][ T7379] do_syscall_64+0x4c/0xa0 [ 310.526614][ T7379] ? clear_bhb_loop+0x30/0x80 [ 310.526636][ T7379] ? clear_bhb_loop+0x30/0x80 [ 310.526659][ T7379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.526682][ T7379] RIP: 0033:0x7f7e27b11559 [ 310.526702][ T7379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.526721][ T7379] RSP: 002b:00007f7e25d68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 310.526746][ T7379] RAX: ffffffffffffffda RBX: 00007f7e27d97fa0 RCX: 00007f7e27b11559 [ 310.526763][ T7379] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 310.526779][ T7379] RBP: 00007f7e27ba8b20 R08: 0000000000000000 R09: 0000000000000000 [ 310.526794][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.526807][ T7379] R13: 00007f7e27d98038 R14: 00007f7e27d97fa0 R15: 00007fffefe9e928 [ 310.526838][ T7379] [ 310.563491][ T7379] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 310.853624][ T7384] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 310.879473][ T7384] System zones: 1-12 [ 310.991018][ T26] audit: type=1326 audit(1792845351.357:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d6d82559 code=0x7ffc0000 [ 311.366255][ T7384] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.661: missing EA_INODE flag [ 311.435462][ T26] audit: type=1326 audit(1792845351.357:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92d6d82559 code=0x7ffc0000 [ 311.532477][ T7384] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.661: error while reading EA inode 12 err=-117 [ 311.597343][ T7384] EXT4-fs (loop3): 1 orphan inode deleted [ 311.675363][ T26] audit: type=1326 audit(1792845351.357:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d6d82559 code=0x7ffc0000 [ 311.684584][ T7384] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 311.701400][ T26] audit: type=1326 audit(1792845351.357:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92d6d42d8e code=0x7ffc0000 [ 311.827235][ T26] audit: type=1326 audit(1792845351.357:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f92d6d83857 code=0x7ffc0000 [ 311.875749][ T7401] loop5: detected capacity change from 0 to 512 [ 311.926014][ T7401] EXT4-fs (loop5): Ignoring removed oldalloc option [ 311.966641][ T7401] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.666: corrupted in-inode xattr [ 311.979451][ T7401] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.666: couldn't read orphan inode 15 (err -117) [ 311.992686][ T7401] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 312.034808][ T7401] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.666: corrupted in-inode xattr [ 312.349568][ T26] audit: type=1326 audit(1792845351.367:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92d6d82559 code=0x7ffc0000 [ 312.373530][ T26] audit: type=1326 audit(1792845351.367:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f92d6d83857 code=0x7ffc0000 [ 312.444646][ T26] audit: type=1326 audit(1792845351.367:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f92d6d42d8e code=0x7ffc0000 [ 312.531417][ T26] audit: type=1326 audit(1792845351.367:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d6d82559 code=0x7ffc0000 [ 312.717211][ T26] audit: type=1326 audit(1792845351.367:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92d6d42d8e code=0x7ffc0000 [ 313.628106][ T7412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.676624][ T7414] loop5: detected capacity change from 0 to 512 [ 313.770307][ T7414] EXT4-fs (loop5): Test dummy encryption mode enabled [ 313.803979][ T7414] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 313.803979][ T7414] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 313.803979][ T7414] [ 313.890859][ T7414] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.668: inode has both inline data and extents flags [ 313.927974][ T7414] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.668: couldn't read orphan inode 15 (err -117) [ 313.941776][ T7414] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 314.481638][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.488257][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.969090][ T7444] loop3: detected capacity change from 0 to 512 [ 314.985427][ T7441] loop6: detected capacity change from 0 to 512 [ 315.005461][ T7444] EXT4-fs (loop3): Ignoring removed oldalloc option [ 315.037578][ T7444] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.679: corrupted in-inode xattr [ 315.055879][ T7444] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.679: couldn't read orphan inode 15 (err -117) [ 315.073415][ T7444] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 315.115414][ T7444] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.679: corrupted in-inode xattr [ 316.236529][ T7456] loop6: detected capacity change from 0 to 512 [ 316.340838][ T7456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 316.396046][ T7456] System zones: 1-12 [ 316.412173][ T7456] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.681: missing EA_INODE flag [ 316.525977][ T7462] loop3: detected capacity change from 0 to 512 [ 316.571241][ T7462] EXT4-fs (loop3): Test dummy encryption mode enabled [ 316.587837][ T7456] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.681: error while reading EA inode 12 err=-117 [ 316.601907][ T7462] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 316.601907][ T7462] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 316.601907][ T7462] [ 316.627709][ T7456] EXT4-fs (loop6): 1 orphan inode deleted [ 316.644601][ T7456] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 316.684632][ T7462] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.684: inode has both inline data and extents flags [ 316.866227][ T7462] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.684: couldn't read orphan inode 15 (err -117) [ 316.912216][ T7462] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 316.950654][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 316.950669][ T26] audit: type=1326 audit(1792845357.538:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 317.231643][ T26] audit: type=1326 audit(1792845357.578:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 317.256039][ T26] audit: type=1326 audit(1792845357.578:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 317.281437][ T26] audit: type=1326 audit(1792845357.588:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 317.314937][ T26] audit: type=1326 audit(1792845357.588:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 317.413698][ T26] audit: type=1326 audit(1792845357.609:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 317.442541][ T26] audit: type=1326 audit(1792845357.609:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 317.482763][ T26] audit: type=1326 audit(1792845357.609:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 317.537003][ T26] audit: type=1326 audit(1792845357.609:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 317.665111][ T26] audit: type=1326 audit(1792845357.609:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.1.687" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3c2edb559 code=0x7ffc0000 [ 318.090159][ T7487] fscrypt (loop6, inode 15): Direct key flag not allowed with different contents and filenames modes [ 318.314028][ T7490] loop1: detected capacity change from 0 to 512 [ 318.369019][ T7490] EXT4-fs (loop1): Ignoring removed oldalloc option [ 318.490715][ T7490] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.695: corrupted in-inode xattr [ 318.506625][ T7490] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.695: couldn't read orphan inode 15 (err -117) [ 318.527630][ T7490] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 318.728474][ T7490] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.695: corrupted in-inode xattr [ 320.206397][ T7509] loop1: detected capacity change from 0 to 512 [ 320.281078][ T7509] EXT4-fs (loop1): Test dummy encryption mode enabled [ 320.319631][ T7509] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 320.319631][ T7509] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 320.319631][ T7509] [ 320.369959][ T7509] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.700: inode has both inline data and extents flags [ 320.398751][ T7509] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.700: couldn't read orphan inode 15 (err -117) [ 320.424097][ T7509] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 320.960643][ T4192] Bluetooth: hci3: hcon ffff88814ce66000 sent 1 < count 3 [ 320.969484][ T4192] Bluetooth: hci3: hcon ffff88801c822000 sent 1 < count 406 [ 320.976832][ T4192] Bluetooth: hci3: hcon ffff88814ce66000 sent 0 < count 65535 [ 320.985083][ T4192] Bluetooth: hci3: hcon ffff88801c822000 sent 0 < count 3 [ 321.069268][ T7524] loop2: detected capacity change from 0 to 512 [ 321.606787][ T7524] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 321.831699][ T7524] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.093943][ T7534] loop6: detected capacity change from 0 to 512 [ 322.314170][ T7534] EXT4-fs (loop6): Ignoring removed oldalloc option [ 322.336993][ T7534] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.708: corrupted in-inode xattr [ 322.357033][ T7534] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.708: couldn't read orphan inode 15 (err -117) [ 322.369906][ T7534] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 322.410185][ T7534] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.708: corrupted in-inode xattr [ 323.515823][ T7561] loop6: detected capacity change from 0 to 512 [ 323.564448][ T7561] EXT4-fs (loop6): Test dummy encryption mode enabled [ 323.584574][ T7561] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 323.584574][ T7561] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 323.584574][ T7561] [ 323.653843][ T7561] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.714: inode has both inline data and extents flags [ 323.784872][ T7561] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.714: couldn't read orphan inode 15 (err -117) [ 323.876813][ T7561] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 323.915187][ T7566] loop2: detected capacity change from 0 to 512 [ 324.228465][ T7566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 324.255462][ T7566] System zones: 1-12 [ 324.273998][ T7571] loop1: detected capacity change from 0 to 256 [ 324.293822][ T7566] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.715: missing EA_INODE flag [ 324.332673][ T7566] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.715: error while reading EA inode 12 err=-117 [ 324.397883][ T7566] EXT4-fs (loop2): 1 orphan inode deleted [ 324.436516][ T7566] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 324.839695][ T7580] loop1: detected capacity change from 0 to 512 [ 325.120771][ T7580] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 325.291415][ T7580] EXT4-fs (loop1): 1 truncate cleaned up [ 325.335285][ T7580] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none. [ 325.604278][ T7588] 9pnet_virtio: no channels available for device ./proc/file0 [ 325.612849][ T7588] FAULT_INJECTION: forcing a failure. [ 325.612849][ T7588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.626349][ T7588] CPU: 0 PID: 7588 Comm: syz.5.717 Not tainted syzkaller #0 [ 325.633682][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 325.643798][ T7588] Call Trace: [ 325.647142][ T7588] [ 325.650111][ T7588] dump_stack_lvl+0x188/0x250 [ 325.654837][ T7588] ? show_regs_print_info+0x20/0x20 [ 325.660084][ T7588] ? load_image+0x410/0x410 [ 325.664647][ T7588] ? __lock_acquire+0x7d40/0x7d40 [ 325.669751][ T7588] ? do_futex+0xdc2/0x12b0 [ 325.674222][ T7588] ? __lock_acquire+0x7d40/0x7d40 [ 325.679302][ T7588] should_fail+0x383/0x4b0 [ 325.683781][ T7588] prepare_alloc_pages+0x1e3/0x5b0 [ 325.688948][ T7588] __alloc_pages+0x11b/0x480 [ 325.693591][ T7588] ? zone_statistics+0x170/0x170 [ 325.698579][ T7588] ? alloc_pages+0x452/0x560 [ 325.703218][ T7588] __get_free_pages+0x8/0x30 [ 325.707851][ T7588] __se_sys_mincore+0x1d8/0x720 [ 325.712751][ T7588] ? lockdep_hardirqs_on+0x94/0x140 [ 325.718006][ T7588] do_syscall_64+0x4c/0xa0 [ 325.722466][ T7588] ? clear_bhb_loop+0x30/0x80 [ 325.723271][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 325.723311][ T26] audit: type=1800 audit(1792845366.540:34): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.720" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 325.727186][ T7588] ? clear_bhb_loop+0x30/0x80 [ 325.727217][ T7588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.763397][ T7588] RIP: 0033:0x7f92d6d82559 [ 325.767855][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.787509][ T7588] RSP: 002b:00007f92d4fb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 325.795971][ T7588] RAX: ffffffffffffffda RBX: 00007f92d7009090 RCX: 00007f92d6d82559 [ 325.803988][ T7588] RDX: 00002000000005c0 RSI: 0000000000001000 RDI: 000020000052e000 [ 325.812201][ T7588] RBP: 00007f92d6e19b20 R08: 0000000000000000 R09: 0000000000000000 [ 325.820210][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.828254][ T7588] R13: 00007f92d7009128 R14: 00007f92d7009090 R15: 00007fff07d50c98 [ 325.836283][ T7588] [ 325.888072][ T7592] device syzkaller0 entered promiscuous mode [ 326.203872][ T7605] loop5: detected capacity change from 0 to 512 [ 326.639670][ T7605] EXT4-fs (loop5): Ignoring removed oldalloc option [ 326.699235][ T7605] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.726: corrupted in-inode xattr [ 326.711865][ T7605] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.726: couldn't read orphan inode 15 (err -117) [ 326.725095][ T7605] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 326.775608][ T7605] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.726: corrupted in-inode xattr [ 327.405679][ T7617] loop2: detected capacity change from 0 to 512 [ 327.535119][ T7617] EXT4-fs (loop2): Test dummy encryption mode enabled [ 327.541965][ T7617] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 327.541965][ T7617] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 327.541965][ T7617] [ 327.730249][ T7617] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.729: inode has both inline data and extents flags [ 327.749625][ T7617] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.729: couldn't read orphan inode 15 (err -117) [ 327.761965][ T7617] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 329.231670][ T7634] FAULT_INJECTION: forcing a failure. [ 329.231670][ T7634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.254865][ T7634] CPU: 0 PID: 7634 Comm: syz.3.733 Not tainted syzkaller #0 [ 329.262225][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 329.272318][ T7634] Call Trace: [ 329.275642][ T7634] [ 329.278711][ T7634] dump_stack_lvl+0x188/0x250 [ 329.283433][ T7634] ? show_regs_print_info+0x20/0x20 [ 329.288789][ T7634] ? load_image+0x410/0x410 [ 329.293342][ T7634] ? __lock_acquire+0x7d40/0x7d40 [ 329.298506][ T7634] should_fail+0x383/0x4b0 [ 329.302973][ T7634] _copy_to_user+0x2e/0x130 [ 329.308223][ T7634] xt_target_to_user+0x152/0x260 [ 329.313203][ T7634] do_ipt_get_ctl+0xd05/0x1110 [ 329.318106][ T7634] ? do_ipt_set_ctl+0xd70/0xd70 [ 329.323016][ T7634] ? nf_getsockopt+0x21b/0x280 [ 329.327819][ T7634] ? __lock_acquire+0x7d40/0x7d40 [ 329.332882][ T7634] ? __mutex_lock_common+0x435/0x2400 [ 329.338311][ T7634] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 329.344026][ T7634] ? mutex_unlock+0x10/0x10 [ 329.348581][ T7634] ? __might_fault+0xb7/0x110 [ 329.353305][ T7634] ? __lock_acquire+0x7d40/0x7d40 [ 329.358381][ T7634] ? __local_bh_enable_ip+0x136/0x1c0 [ 329.363816][ T7634] nf_getsockopt+0x25e/0x280 [ 329.368453][ T7634] ip_getsockopt+0x1219/0x1660 [ 329.373263][ T7634] ? ip_setsockopt+0x31e0/0x31e0 [ 329.378247][ T7634] ? __might_sleep+0xf0/0xf0 [ 329.382915][ T7634] ? rcu_lock_release+0x9/0x20 [ 329.387724][ T7634] ? __lock_acquire+0x7d40/0x7d40 [ 329.392794][ T7634] ? aa_sk_perm+0x7dc/0x910 [ 329.397349][ T7634] ? aa_af_perm+0x340/0x340 [ 329.401892][ T7634] ? __fget_files+0x402/0x470 [ 329.406702][ T7634] ? aa_sock_opt_perm+0x74/0x100 [ 329.411706][ T7634] ? sock_recv_errqueue+0x580/0x580 [ 329.416954][ T7634] __sys_getsockopt+0x1b0/0x230 [ 329.421847][ T7634] __x64_sys_getsockopt+0xb1/0xc0 [ 329.426910][ T7634] do_syscall_64+0x4c/0xa0 [ 329.431361][ T7634] ? clear_bhb_loop+0x30/0x80 [ 329.436075][ T7634] ? clear_bhb_loop+0x30/0x80 [ 329.440795][ T7634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.445008][ T4192] Bluetooth: Unexpected start frame (len 14) [ 329.446726][ T7634] RIP: 0033:0x7f5cf84ea559 [ 329.457732][ T7634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.477384][ T7634] RSP: 002b:00007f5cf6741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 329.485848][ T7634] RAX: ffffffffffffffda RBX: 00007f5cf8770fa0 RCX: 00007f5cf84ea559 [ 329.493859][ T7634] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000004 [ 329.501872][ T7634] RBP: 00007f5cf8581b20 R08: 00002000000001c0 R09: 0000000000000000 [ 329.509891][ T7634] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 329.517907][ T7634] R13: 00007f5cf8771038 R14: 00007f5cf8770fa0 R15: 00007ffc4c2893c8 [ 329.525936][ T7634] [ 330.196547][ T7641] loop3: detected capacity change from 0 to 2048 [ 330.244320][ T7647] loop6: detected capacity change from 0 to 512 [ 330.629400][ T7653] loop5: detected capacity change from 0 to 512 [ 330.643067][ T7647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 330.653704][ T7647] System zones: 1-12 [ 330.659528][ T7647] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.739: missing EA_INODE flag [ 330.672109][ T7647] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.739: error while reading EA inode 12 err=-117 [ 330.693863][ T7653] EXT4-fs (loop5): Ignoring removed oldalloc option [ 330.706555][ T7641] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 330.718042][ T7647] EXT4-fs (loop6): 1 orphan inode deleted [ 330.724047][ T7647] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 330.745063][ T7653] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.741: corrupted in-inode xattr [ 330.769267][ T7641] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.736: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 330.775606][ T7653] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.741: couldn't read orphan inode 15 (err -117) [ 330.807890][ T7653] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 330.855499][ T7653] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.741: corrupted in-inode xattr [ 330.946719][ T7659] loop1: detected capacity change from 0 to 512 [ 331.059582][ T7659] EXT4-fs (loop1): Test dummy encryption mode enabled [ 331.066575][ T7659] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 331.066575][ T7659] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 331.066575][ T7659] [ 331.163416][ T7659] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.742: inode has both inline data and extents flags [ 331.188450][ T7659] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.742: couldn't read orphan inode 15 (err -117) [ 331.201654][ T7659] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 332.145655][ T7670] mmap: syz.1.745 (7670) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 333.323807][ T7679] fscrypt (loop6, inode 15): Direct key flag not allowed with different contents and filenames modes [ 334.048856][ T7699] FAULT_INJECTION: forcing a failure. [ 334.048856][ T7699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.062463][ T7699] CPU: 0 PID: 7699 Comm: syz.5.753 Not tainted syzkaller #0 [ 334.069790][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 334.079882][ T7699] Call Trace: [ 334.083194][ T7699] [ 334.086147][ T7699] dump_stack_lvl+0x188/0x250 [ 334.090867][ T7699] ? show_regs_print_info+0x20/0x20 [ 334.096107][ T7699] ? load_image+0x410/0x410 [ 334.100687][ T7699] should_fail+0x383/0x4b0 [ 334.105174][ T7699] prepare_alloc_pages+0x1e3/0x5b0 [ 334.110351][ T7699] __alloc_pages+0x11b/0x480 [ 334.114995][ T7699] ? zone_statistics+0x170/0x170 [ 334.119978][ T7699] ? rcu_lock_acquire+0x30/0x30 [ 334.124863][ T7699] ? alloc_pages+0x452/0x560 [ 334.129497][ T7699] __get_free_pages+0x8/0x30 [ 334.134116][ T7699] __tlb_remove_page_size+0x1f2/0x3f0 [ 334.139528][ T7699] unmap_page_range+0xfcf/0x2410 [ 334.144542][ T7699] unmap_vmas+0x131/0x250 [ 334.148907][ T7699] ? unmap_page_range+0x2410/0x2410 [ 334.154137][ T7699] ? __mutex_lock_common+0x435/0x2400 [ 334.159551][ T7699] ? exit_mm_release+0x16/0x30 [ 334.164376][ T7699] exit_mmap+0x3b9/0x640 [ 334.168665][ T7699] ? vm_brk+0x20/0x20 [ 334.172709][ T7699] ? uprobe_clear_state+0x2f6/0x460 [ 334.177951][ T7699] __mmput+0x115/0x390 [ 334.182074][ T7699] exit_mm+0x632/0x7b0 [ 334.186173][ T7699] ? perf_pmu_migrate_context+0xb70/0xb70 [ 334.191937][ T7699] ? do_exit+0x2110/0x2110 [ 334.196394][ T7699] ? __ia32_sys_timer_delete+0x40/0x40 [ 334.202058][ T7699] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 334.207558][ T7699] ? tty_audit_exit+0x149/0x1f0 [ 334.212453][ T7699] do_exit+0x5b8/0x2110 [ 334.216649][ T7699] ? put_task_struct+0x80/0x80 [ 334.221537][ T7699] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 334.227563][ T7699] ? _raw_spin_lock_irq+0xb7/0xf0 [ 334.232631][ T7699] do_group_exit+0x12c/0x2f0 [ 334.237276][ T7699] ? lockdep_hardirqs_on+0x94/0x140 [ 334.242519][ T7699] get_signal+0x7eb/0x12e0 [ 334.246994][ T7699] arch_do_signal_or_restart+0xe6/0x12a0 [ 334.252676][ T7699] ? futex_exit_release+0x1c0/0x1c0 [ 334.257915][ T7699] ? get_sigframe_size+0x10/0x10 [ 334.262891][ T7699] ? __context_tracking_exit+0x4c/0x80 [ 334.268426][ T7699] ? exit_to_user_mode_loop+0x3b/0x130 [ 334.273933][ T7699] exit_to_user_mode_loop+0x9e/0x130 [ 334.279371][ T7699] exit_to_user_mode_prepare+0xee/0x180 [ 334.284966][ T7699] syscall_exit_to_user_mode+0x16/0x40 [ 334.290464][ T7699] do_syscall_64+0x58/0xa0 [ 334.294909][ T7699] ? clear_bhb_loop+0x30/0x80 [ 334.299665][ T7699] ? clear_bhb_loop+0x30/0x80 [ 334.304384][ T7699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.310308][ T7699] RIP: 0033:0x7f92d6d82559 [ 334.314759][ T7699] Code: Unable to access opcode bytes at RIP 0x7f92d6d8252f. [ 334.322152][ T7699] RSP: 002b:00007f92d4fd90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.330624][ T7699] RAX: 0000000000000001 RBX: 00007f92d7008fa8 RCX: 00007f92d6d82559 [ 334.338631][ T7699] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f92d7008fac [ 334.346638][ T7699] RBP: 00007f92d7008fa0 R08: 0001acd99ba9a2b6 R09: 0000000000000000 [ 334.354650][ T7699] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 334.362658][ T7699] R13: 00007f92d7009038 R14: 00007fff07d50bb0 R15: 00007fff07d50c98 [ 334.370728][ T7699] [ 334.899596][ T7706] loop5: detected capacity change from 0 to 512 [ 335.019476][ T7706] EXT4-fs (loop5): Test dummy encryption mode enabled [ 335.031224][ T7706] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 335.031224][ T7706] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 335.031224][ T7706] [ 335.165698][ T7706] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.755: inode has both inline data and extents flags [ 335.235276][ T7706] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.755: couldn't read orphan inode 15 (err -117) [ 335.307983][ T7706] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 336.356739][ T7718] loop5: detected capacity change from 0 to 512 [ 336.387478][ T7718] EXT4-fs (loop5): Ignoring removed oldalloc option [ 336.577468][ T7718] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.759: corrupted in-inode xattr [ 336.611279][ T7718] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.759: couldn't read orphan inode 15 (err -117) [ 336.635747][ T7718] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 337.351104][ T7718] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.759: corrupted in-inode xattr [ 337.517598][ T7727] loop2: detected capacity change from 0 to 7 [ 337.570683][ T4183] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 337.591020][ T4183] loop2: partition table partially beyond EOD, truncated [ 337.663475][ T4183] loop2: p1 size 2237250284 extends beyond EOD, truncated [ 337.805328][ T7727] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 337.850386][ T7727] loop2: partition table partially beyond EOD, truncated [ 337.877757][ T7727] loop2: p1 size 2237250284 extends beyond EOD, truncated [ 337.942142][ T7743] loop3: detected capacity change from 0 to 512 [ 337.992296][ T7745] loop6: detected capacity change from 0 to 512 [ 338.017767][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 338.031303][ T7743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 338.110316][ T7745] EXT4-fs (loop6): Test dummy encryption mode enabled [ 338.117158][ T7745] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 338.117158][ T7745] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 338.117158][ T7745] [ 338.148278][ T7743] System zones: 1-12 [ 338.244186][ T7745] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.767: inode has both inline data and extents flags [ 338.320832][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 338.351962][ T7743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.766: missing EA_INODE flag [ 338.366073][ T7743] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.766: error while reading EA inode 12 err=-117 [ 338.375168][ T7745] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.767: couldn't read orphan inode 15 (err -117) [ 338.389018][ T7743] EXT4-fs (loop3): 1 orphan inode deleted [ 338.396159][ T7743] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 338.595780][ T7745] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 340.513193][ T7770] fscrypt (loop3, inode 15): Direct key flag not allowed with different contents and filenames modes [ 341.626521][ T7784] loop6: detected capacity change from 0 to 512 [ 341.707944][ T7784] EXT4-fs (loop6): Ignoring removed oldalloc option [ 341.805306][ T7784] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.776: corrupted in-inode xattr [ 341.838682][ T7784] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.776: couldn't read orphan inode 15 (err -117) [ 341.878899][ T7784] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 341.918205][ T7792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.778'. [ 341.994007][ T7784] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.776: corrupted in-inode xattr [ 343.011362][ T7800] loop3: detected capacity change from 0 to 512 [ 343.113049][ T7800] EXT4-fs (loop3): Test dummy encryption mode enabled [ 343.146018][ T7800] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 343.146018][ T7800] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 343.146018][ T7800] [ 343.209700][ T7800] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.781: inode has both inline data and extents flags [ 343.253471][ T7800] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.781: couldn't read orphan inode 15 (err -117) [ 343.281457][ T7800] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 345.813345][ T7829] sch_tbf: peakrate 6 is lower than or equals to rate 3604916063403629709 ! [ 345.851840][ T7827] loop1: detected capacity change from 0 to 2048 [ 345.975863][ T7827] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.063886][ T7838] loop2: detected capacity change from 0 to 512 [ 346.083060][ T7827] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 346.117150][ T7827] EXT4-fs error (device loop1) in ext4_setattr:5645: error 28 [ 346.176187][ T7827] FAULT_INJECTION: forcing a failure. [ 346.176187][ T7827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.191237][ T7827] CPU: 1 PID: 7827 Comm: syz.1.789 Not tainted syzkaller #0 [ 346.198751][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 346.208968][ T7827] Call Trace: [ 346.212283][ T7827] [ 346.215248][ T7827] dump_stack_lvl+0x188/0x250 [ 346.219966][ T7827] ? show_regs_print_info+0x20/0x20 [ 346.225213][ T7827] ? load_image+0x410/0x410 [ 346.229765][ T7827] ? uncharge_page+0x490/0x490 [ 346.234610][ T7827] should_fail+0x383/0x4b0 [ 346.239079][ T7827] prepare_alloc_pages+0x1e3/0x5b0 [ 346.244239][ T7827] __alloc_pages+0x11b/0x480 [ 346.249501][ T7827] ? zone_statistics+0x170/0x170 [ 346.254487][ T7827] ? rcu_lock_acquire+0x30/0x30 [ 346.259380][ T7827] ? alloc_pages+0x452/0x560 [ 346.264095][ T7827] __get_free_pages+0x8/0x30 [ 346.268726][ T7827] __tlb_remove_page_size+0x1f2/0x3f0 [ 346.274141][ T7827] unmap_page_range+0xfcf/0x2410 [ 346.279181][ T7827] unmap_vmas+0x131/0x250 [ 346.283554][ T7827] ? unmap_page_range+0x2410/0x2410 [ 346.288785][ T7827] ? __mutex_lock_common+0x435/0x2400 [ 346.294206][ T7827] ? exit_mm_release+0x16/0x30 [ 346.299453][ T7827] exit_mmap+0x3b9/0x640 [ 346.303750][ T7827] ? vm_brk+0x20/0x20 [ 346.307830][ T7827] ? uprobe_clear_state+0x2f6/0x460 [ 346.313080][ T7827] __mmput+0x115/0x390 [ 346.317199][ T7827] exit_mm+0x632/0x7b0 [ 346.321306][ T7827] ? perf_pmu_migrate_context+0xb70/0xb70 [ 346.327086][ T7827] ? do_exit+0x2110/0x2110 [ 346.331647][ T7827] ? __ia32_sys_timer_delete+0x40/0x40 [ 346.335989][ T7842] loop5: detected capacity change from 0 to 256 [ 346.337266][ T7827] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 346.349097][ T7827] ? tty_audit_exit+0x149/0x1f0 [ 346.354084][ T7827] do_exit+0x5b8/0x2110 [ 346.358283][ T7827] ? put_task_struct+0x80/0x80 [ 346.363095][ T7827] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 346.369130][ T7827] ? _raw_spin_lock_irq+0xb7/0xf0 [ 346.374199][ T7827] do_group_exit+0x12c/0x2f0 [ 346.378829][ T7827] ? lockdep_hardirqs_on+0x94/0x140 [ 346.384071][ T7827] get_signal+0x7eb/0x12e0 [ 346.388546][ T7827] arch_do_signal_or_restart+0xe6/0x12a0 [ 346.394226][ T7827] ? __lock_acquire+0x7d40/0x7d40 [ 346.399416][ T7827] ? futex_exit_release+0x1c0/0x1c0 [ 346.404657][ T7827] ? get_sigframe_size+0x10/0x10 [ 346.409637][ T7827] ? __context_tracking_exit+0x4c/0x80 [ 346.415149][ T7827] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 346.421178][ T7827] ? exit_to_user_mode_loop+0x3b/0x130 [ 346.426680][ T7827] exit_to_user_mode_loop+0x9e/0x130 [ 346.432181][ T7827] exit_to_user_mode_prepare+0xee/0x180 [ 346.437770][ T7827] syscall_exit_to_user_mode+0x16/0x40 [ 346.443272][ T7827] do_syscall_64+0x58/0xa0 [ 346.447910][ T7827] ? clear_bhb_loop+0x30/0x80 [ 346.452622][ T7827] ? clear_bhb_loop+0x30/0x80 [ 346.457330][ T7827] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.463345][ T7827] RIP: 0033:0x7fe3c2edb559 [ 346.467889][ T7827] Code: Unable to access opcode bytes at RIP 0x7fe3c2edb52f. [ 346.475281][ T7827] RSP: 002b:00007fe3c11320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 346.483736][ T7827] RAX: fffffffffffffe00 RBX: 00007fe3c3161fa8 RCX: 00007fe3c2edb559 [ 346.491748][ T7827] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3c3161fa8 [ 346.499777][ T7827] RBP: 00007fe3c3161fa0 R08: 0000000000000000 R09: 0000000000000000 [ 346.507787][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.515801][ T7827] R13: 00007fe3c3162038 R14: 00007fff0943b830 R15: 00007fff0943b918 [ 346.523860][ T7827] [ 346.575697][ T4196] EXT4-fs warning (device loop1): ext4_rmdir:3245: inode #11: comm syz-executor: empty directory 'lost+found' has too many links (1024) [ 346.985313][ T7842] FAT-fs (loop5): Directory bread(block 64) failed [ 346.998781][ T7842] FAT-fs (loop5): Directory bread(block 65) failed [ 347.005948][ T7842] FAT-fs (loop5): Directory bread(block 66) failed [ 347.018761][ T7842] FAT-fs (loop5): Directory bread(block 67) failed [ 347.025928][ T7842] FAT-fs (loop5): Directory bread(block 68) failed [ 347.043333][ T7842] FAT-fs (loop5): Directory bread(block 69) failed [ 347.054158][ T7842] FAT-fs (loop5): Directory bread(block 70) failed [ 347.063532][ T7842] FAT-fs (loop5): Directory bread(block 71) failed [ 347.075857][ T7842] FAT-fs (loop5): Directory bread(block 72) failed [ 347.086809][ T7842] FAT-fs (loop5): Directory bread(block 73) failed [ 347.126504][ T7849] loop3: detected capacity change from 0 to 512 [ 347.166889][ T7849] EXT4-fs (loop3): Ignoring removed oldalloc option [ 347.214134][ T7849] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.796: corrupted in-inode xattr [ 347.229316][ T7838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 347.241025][ T7849] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.796: couldn't read orphan inode 15 (err -117) [ 347.245006][ T7852] loop6: detected capacity change from 0 to 512 [ 347.259621][ T7849] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 347.292267][ T7838] System zones: 1-12 [ 347.299865][ T7838] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.791: missing EA_INODE flag [ 347.331586][ T7838] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.791: error while reading EA inode 12 err=-117 [ 347.355303][ T7852] EXT4-fs (loop6): Test dummy encryption mode enabled [ 347.362136][ T7852] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 347.362136][ T7852] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 347.362136][ T7852] [ 347.409057][ T7848] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.796: corrupted in-inode xattr [ 347.422619][ T7852] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.797: inode has both inline data and extents flags [ 347.439734][ T7852] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.797: couldn't read orphan inode 15 (err -117) [ 347.452650][ T7838] EXT4-fs (loop2): 1 orphan inode deleted [ 347.462282][ T7838] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 347.503170][ T7852] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 349.098029][ T7870] fscrypt (loop2, inode 15): Direct key flag not allowed with different contents and filenames modes [ 351.246820][ T7894] loop6: detected capacity change from 0 to 512 [ 351.350541][ T7894] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000001,usrjquota=,noauto_da_alloc,journal_dev=0x0000000000000090,,errors=continue. Quota mode: writeback. [ 351.391448][ T7894] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.791337][ T7913] ip_tables: iptables: counters copy to user failed while replacing table [ 353.342365][ T7923] loop3: detected capacity change from 0 to 512 [ 353.374049][ T7922] loop1: detected capacity change from 0 to 512 [ 353.396411][ T7923] EXT4-fs (loop3): Test dummy encryption mode enabled [ 353.428778][ T7923] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 353.428778][ T7923] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 353.428778][ T7923] [ 353.460234][ T7922] EXT4-fs (loop1): Ignoring removed oldalloc option [ 353.501870][ T7923] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.816: inode has both inline data and extents flags [ 353.542149][ T7922] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.815: corrupted in-inode xattr [ 353.607453][ T7922] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.815: couldn't read orphan inode 15 (err -117) [ 353.633181][ T7923] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.816: couldn't read orphan inode 15 (err -117) [ 353.645641][ T7922] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 353.695219][ T7923] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 353.697249][ T7934] loop5: detected capacity change from 0 to 512 [ 353.815215][ T7922] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.815: corrupted in-inode xattr [ 353.881882][ T7934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 353.904465][ T7934] System zones: 1-12 [ 353.971293][ T7934] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.819: missing EA_INODE flag [ 354.010087][ T7934] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.819: error while reading EA inode 12 err=-117 [ 354.067247][ T7934] EXT4-fs (loop5): 1 orphan inode deleted [ 354.081748][ T7934] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 355.845603][ T7953] loop1: detected capacity change from 0 to 512 [ 355.919058][ T7953] EXT4-fs (loop1): Test dummy encryption mode enabled [ 355.961506][ T7953] EXT4-fs (loop1): Ignoring removed oldalloc option [ 356.058397][ T7953] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,grpjquota=,test_dummy_encryption=v1,noload,noload,oldalloc,grpid,,errors=continue. Quota mode: writeback. [ 357.600709][ T7978] loop2: detected capacity change from 0 to 512 [ 357.626341][ T7979] loop3: detected capacity change from 0 to 512 [ 357.692012][ T7979] EXT4-fs (loop3): Test dummy encryption mode enabled [ 357.709462][ T7979] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 357.709462][ T7979] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 357.709462][ T7979] [ 357.742791][ T7978] EXT4-fs (loop2): Ignoring removed oldalloc option [ 357.771009][ T7978] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.831: corrupted in-inode xattr [ 357.898873][ T7978] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.831: couldn't read orphan inode 15 (err -117) [ 357.945711][ T7979] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.830: inode has both inline data and extents flags [ 358.000581][ T7978] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 358.039658][ T7979] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.830: couldn't read orphan inode 15 (err -117) [ 358.060314][ T7983] loop5: detected capacity change from 0 to 256 [ 358.087320][ T7979] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 358.367283][ T7978] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.831: corrupted in-inode xattr [ 358.463330][ T7987] loop5: detected capacity change from 0 to 512 [ 358.625521][ T7987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 358.639053][ T7987] System zones: 1-12 [ 358.690364][ T7987] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.833: missing EA_INODE flag [ 358.728203][ T7987] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.833: error while reading EA inode 12 err=-117 [ 358.908607][ T7987] EXT4-fs (loop5): 1 orphan inode deleted [ 358.926103][ T7987] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 361.351973][ T8011] loop5: detected capacity change from 0 to 512 [ 361.586555][ T8011] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,acl,usrquota,errors=remount-ro,. Quota mode: writeback. [ 362.023629][ T8011] EXT4-fs (loop5): shut down requested (2) [ 363.261113][ T8032] loop2: detected capacity change from 0 to 512 [ 363.330213][ T8032] EXT4-fs (loop2): Test dummy encryption mode enabled [ 363.358671][ T8032] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 363.358671][ T8032] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 363.358671][ T8032] [ 363.429129][ T8032] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.845: inode has both inline data and extents flags [ 363.460812][ T8032] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.845: couldn't read orphan inode 15 (err -117) [ 363.504225][ T8032] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,noacl,minixdf,,errors=continue. Quota mode: writeback. [ 363.548406][ T8039] loop1: detected capacity change from 0 to 512 [ 364.005587][ T8039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 364.032616][ T8039] System zones: 1-12 [ 364.065034][ T8039] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.848: missing EA_INODE flag [ 364.202808][ T8039] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.848: error while reading EA inode 12 err=-117 [ 364.242520][ T8039] EXT4-fs (loop1): 1 orphan inode deleted [ 364.255660][ T8039] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 364.283565][ T8047] loop3: detected capacity change from 0 to 512 [ 364.329291][ T8047] EXT4-fs (loop3): Ignoring removed oldalloc option [ 364.367875][ T8047] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.850: corrupted in-inode xattr [ 364.388745][ T8047] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.850: couldn't read orphan inode 15 (err -117) [ 364.408564][ T8047] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 364.515807][ T8047] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.850: corrupted in-inode xattr [ 364.567387][ T8050] TC_ACT_REPEAT abuse ? [ 366.282793][ T8076] loop1: detected capacity change from 0 to 128 [ 367.081546][ T8076] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 367.119583][ T8076] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.101596][ T8117] loop6: detected capacity change from 0 to 512 [ 369.375252][ T8117] EXT4-fs (loop6): Ignoring removed oldalloc option [ 369.546936][ T8117] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.870: corrupted in-inode xattr [ 369.561249][ T8117] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.870: couldn't read orphan inode 15 (err -117) [ 369.578180][ T8117] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 369.766496][ T8117] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.870: corrupted in-inode xattr [ 370.733446][ T8133] FAULT_INJECTION: forcing a failure. [ 370.733446][ T8133] name failslab, interval 1, probability 0, space 0, times 0 [ 370.770145][ T8133] CPU: 0 PID: 8133 Comm: syz.1.873 Not tainted syzkaller #0 [ 370.777507][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 370.787626][ T8133] Call Trace: [ 370.791004][ T8133] [ 370.794042][ T8133] dump_stack_lvl+0x188/0x250 [ 370.798818][ T8133] ? show_regs_print_info+0x20/0x20 [ 370.804116][ T8133] ? load_image+0x410/0x410 [ 370.808680][ T8133] ? __might_sleep+0xf0/0xf0 [ 370.813420][ T8133] ? __lock_acquire+0x7d40/0x7d40 [ 370.818547][ T8133] should_fail+0x383/0x4b0 [ 370.823088][ T8133] should_failslab+0x5/0x20 [ 370.827685][ T8133] slab_pre_alloc_hook+0x51/0xc0 [ 370.832705][ T8133] ? copy_utsname+0x117/0x430 [ 370.837491][ T8133] kmem_cache_alloc+0x3d/0x280 [ 370.842299][ T8133] copy_utsname+0x117/0x430 [ 370.846842][ T8133] create_new_namespaces+0x17b/0x700 [ 370.852269][ T8133] ? bpf_lsm_capable+0x5/0x10 [ 370.857058][ T8133] unshare_nsproxy_namespaces+0x116/0x160 [ 370.862817][ T8133] ksys_unshare+0x4f6/0x8e0 [ 370.867442][ T8133] ? __lock_acquire+0x7d40/0x7d40 [ 370.872514][ T8133] ? sighand_ctor+0x40/0x40 [ 370.877053][ T8133] ? lock_chain_count+0x20/0x20 [ 370.881952][ T8133] ? syscall_enter_from_user_mode+0x21/0x70 [ 370.887970][ T8133] __x64_sys_unshare+0x34/0x40 [ 370.892772][ T8133] do_syscall_64+0x4c/0xa0 [ 370.897221][ T8133] ? clear_bhb_loop+0x30/0x80 [ 370.902030][ T8133] ? clear_bhb_loop+0x30/0x80 [ 370.906756][ T8133] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.912746][ T8133] RIP: 0033:0x7fe3c2edb559 [ 370.917261][ T8133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.936987][ T8133] RSP: 002b:00007fe3c1132028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 370.945550][ T8133] RAX: ffffffffffffffda RBX: 00007fe3c3161fa0 RCX: 00007fe3c2edb559 [ 370.953576][ T8133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480 [ 370.961611][ T8133] RBP: 00007fe3c2f72b20 R08: 0000000000000000 R09: 0000000000000000 [ 370.969619][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.977634][ T8133] R13: 00007fe3c3162038 R14: 00007fe3c3161fa0 R15: 00007fff0943b918 [ 370.985665][ T8133] [ 371.025199][ T8135] loop2: detected capacity change from 0 to 512 [ 371.172036][ T8135] EXT4-fs (loop2): Mount option "journal_dev=0x0000000000000001" incompatible with ext2 [ 372.074247][ T8151] netlink: 32 bytes leftover after parsing attributes in process `syz.5.879'. [ 372.116449][ T8151] netlink: 32 bytes leftover after parsing attributes in process `syz.5.879'. [ 372.252594][ T8149] loop1: detected capacity change from 0 to 8192 [ 372.319364][ T4183] loop1: p1 < > p3 p4 < > [ 372.330821][ T4183] loop1: p3 start 852736 is beyond EOD, truncated [ 372.932935][ T8149] loop1: p1 < > p3 p4 < > [ 372.964335][ T8149] loop1: p3 start 852736 is beyond EOD, truncated [ 373.410475][ T8168] capability: warning: `syz.1.883' uses 32-bit capabilities (legacy support in use) [ 373.646237][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 373.667066][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 373.738027][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 373.744885][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 373.765374][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 373.775783][ T8175] ip_tables: iptables: counters copy to user failed while replacing table [ 373.918152][ T4264] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 373.943295][ T4264] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 374.133331][ T8186] loop1: detected capacity change from 0 to 512 [ 374.219520][ T8186] EXT4-fs (loop1): Ignoring removed oldalloc option [ 374.505360][ T8181] fido_id[8181]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 374.528594][ T8186] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.891: corrupted in-inode xattr [ 374.697228][ T8186] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.891: couldn't read orphan inode 15 (err -117) [ 374.777367][ T8186] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 374.988217][ T8186] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.891: corrupted in-inode xattr [ 375.478243][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.484773][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.497411][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 376.834656][ T8229] loop2: detected capacity change from 0 to 512 [ 376.888753][ T8231] loop5: detected capacity change from 0 to 2048 [ 376.975531][ T8229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 377.018157][ T8229] System zones: 1-12 [ 377.024390][ T8231] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 377.065902][ T8229] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.903: missing EA_INODE flag [ 377.082596][ T8231] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks [ 377.096860][ T8229] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.903: error while reading EA inode 12 err=-117 [ 377.111676][ T8231] EXT4-fs warning (device loop5): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 377.139238][ T8229] EXT4-fs (loop2): 1 orphan inode deleted [ 377.145258][ T8229] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 377.601902][ T8240] fscrypt (loop2, inode 15): Direct key flag not allowed with different contents and filenames modes [ 378.162912][ T8247] netlink: 44 bytes leftover after parsing attributes in process `syz.1.905'. [ 380.434210][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 380.944434][ T8277] loop1: detected capacity change from 0 to 512 [ 381.011489][ T8282] loop6: detected capacity change from 0 to 512 [ 381.039152][ T8277] EXT4-fs (loop1): Ignoring removed oldalloc option [ 381.075156][ T8277] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.916: corrupted in-inode xattr [ 381.123770][ T8277] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.916: couldn't read orphan inode 15 (err -117) [ 381.208306][ T8282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 381.226229][ T8282] System zones: 1-12 [ 381.230535][ T8277] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,oldalloc,noload,user_xattr,errors=continue,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 381.280289][ T8282] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.918: missing EA_INODE flag [ 381.357251][ T8282] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.918: error while reading EA inode 12 err=-117 [ 381.398726][ T8277] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.916: corrupted in-inode xattr [ 381.412615][ T8282] EXT4-fs (loop6): 1 orphan inode deleted [ 381.459561][ T8282] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 383.450839][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'. [ 383.466043][ T8319] No such timeout policy "syz1" [ 384.385237][ T8330] loop1: detected capacity change from 0 to 512 [ 384.512827][ T8330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 384.633281][ T8330] System zones: 1-12 [ 384.838294][ T8330] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.931: missing EA_INODE flag [ 385.096175][ T8330] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.931: error while reading EA inode 12 err=-117 [ 385.272936][ T8330] EXT4-fs (loop1): 1 orphan inode deleted [ 385.308965][ T8330] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 385.633241][ T8348] fscrypt (loop1, inode 15): Direct key flag not allowed with different contents and filenames modes [ 387.312034][ T8381] INFO: trying to register non-static key. [ 387.317909][ T8381] The code is fine but needs lockdep annotation, or maybe [ 387.325173][ T8381] you didn't initialize this object before use? [ 387.331437][ T8381] turning off the locking correctness validator. [ 387.337794][ T8381] CPU: 0 PID: 8381 Comm: syz.3.950 Not tainted syzkaller #0 [ 387.345111][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 387.355225][ T8381] Call Trace: [ 387.358545][ T8381] [ 387.361504][ T8381] dump_stack_lvl+0x188/0x250 [ 387.366220][ T8381] ? show_regs_print_info+0x20/0x20 [ 387.371510][ T8381] ? load_image+0x410/0x410 [ 387.376054][ T8381] ? __lock_acquire+0x13b3/0x7d40 [ 387.381132][ T8381] ? cpumask_next+0xb3/0xd0 [ 387.385678][ T8381] assign_lock_key+0x1ec/0x200 [ 387.390480][ T8381] ? SOFTIRQ_verbose+0x10/0x10 [ 387.395292][ T8381] ? mark_lock+0x94/0x320 [ 387.399763][ T8381] register_lock_class+0x21d/0x880 [ 387.404962][ T8381] ? is_dynamic_key+0x1f0/0x1f0 [ 387.409856][ T8381] ? rcu_lock_release+0x5/0x20 [ 387.414746][ T8381] __lock_acquire+0x265/0x7d40 [ 387.419553][ T8381] ? __lock_acquire+0x12df/0x7d40 [ 387.424629][ T8381] ? __rwlock_init+0x140/0x140 [ 387.429436][ T8381] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 387.435366][ T8381] ? verify_lock_unused+0x140/0x140 [ 387.440618][ T8381] ? __might_sleep+0xf0/0xf0 [ 387.445245][ T8381] ? __might_fault+0xb7/0x110 [ 387.450042][ T8381] lock_acquire+0x19f/0x400 [ 387.454597][ T8381] ? gsmld_write+0x57/0x120 [ 387.459244][ T8381] ? __might_fault+0xb3/0x110 [ 387.463964][ T8381] ? read_lock_is_recursive+0x10/0x10 [ 387.469383][ T8381] ? _copy_from_iter+0x5bf/0x1160 [ 387.474481][ T8381] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 387.480011][ T8381] ? lockdep_hardirqs_off+0x70/0x100 [ 387.485347][ T8381] _raw_spin_lock_irqsave+0xb0/0x100 [ 387.490815][ T8381] ? gsmld_write+0x57/0x120 [ 387.495361][ T8381] ? _raw_spin_lock+0x40/0x40 [ 387.500083][ T8381] ? __virt_addr_valid+0x3c6/0x470 [ 387.505320][ T8381] gsmld_write+0x57/0x120 [ 387.509697][ T8381] file_tty_write+0x50c/0x8a0 [ 387.514418][ T8381] ? gsmld_read+0x10/0x10 [ 387.518787][ T8381] do_iter_readv_writev+0x47d/0x5f0 [ 387.524106][ T8381] ? aa_path_link+0x8a0/0x8a0 [ 387.528916][ T8381] ? generic_file_rw_checks+0x280/0x280 [ 387.534509][ T8381] ? common_file_perm+0x171/0x1c0 [ 387.539570][ T8381] ? fsnotify_perm+0x5d/0x560 [ 387.544363][ T8381] ? security_file_permission+0x75/0xa0 [ 387.549942][ T8381] do_iter_write+0x1f8/0x7a0 [ 387.554580][ T8381] ? import_iovec+0x6f/0xa0 [ 387.559126][ T8381] do_writev+0x281/0x480 [ 387.563414][ T8381] ? do_readv+0x460/0x460 [ 387.567790][ T8381] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 387.573816][ T8381] ? lock_chain_count+0x20/0x20 [ 387.578718][ T8381] ? lockdep_hardirqs_on+0x94/0x140 [ 387.583962][ T8381] do_syscall_64+0x4c/0xa0 [ 387.588410][ T8381] ? clear_bhb_loop+0x30/0x80 [ 387.593151][ T8381] ? clear_bhb_loop+0x30/0x80 [ 387.597890][ T8381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.603857][ T8381] RIP: 0033:0x7f5cf84ea559 [ 387.608309][ T8381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.627947][ T8381] RSP: 002b:00007f5cf6741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 387.636409][ T8381] RAX: ffffffffffffffda RBX: 00007f5cf8770fa0 RCX: 00007f5cf84ea559 [ 387.644421][ T8381] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 387.652433][ T8381] RBP: 00007f5cf8581b20 R08: 0000000000000000 R09: 0000000000000000 [ 387.660445][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.668451][ T8381] R13: 00007f5cf8771038 R14: 00007f5cf8770fa0 R15: 00007ffc4c2893c8 [ 387.676472][ T8381] [ 387.685494][ T4252] Bluetooth: hci1: command 0x0406 tx timeout [ 387.882134][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.941'. [ 387.892531][ T8386] No such timeout policy "syz1"