last executing test programs: 4m19.888939624s ago: executing program 2 (id=668): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000200)='7', 0x1) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000018c0)=0x7) 4m19.305289237s ago: executing program 2 (id=672): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 4m19.093552173s ago: executing program 2 (id=674): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) setxattr$security_capability(&(0x7f0000000440)='./file0/file1\x00', &(0x7f0000000480), 0x0, 0x0, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0/file1\x00', &(0x7f0000000600), 0x0, 0x0, 0x0) 4m18.704983112s ago: executing program 2 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0) setitimer(0x1, &(0x7f0000000940)={{}, {0x8000000005, 0x5}}, 0x0) getitimer(0x1, &(0x7f0000000980)) mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x8008af26, &(0x7f0000000a00)=0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x200) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x3c5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f00001e6000/0x3000)=nil, &(0x7f00008f1000/0x1000)=nil, 0x3000, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x781eece4fc9ea1c5, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x3, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x7ff, 0x918a, 0x10000, 'snmp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800010, 0x0) 4m18.556868256s ago: executing program 2 (id=683): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xe0}}}}}, 0x0) 4m18.176415745s ago: executing program 2 (id=688): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = userfaultfd(0x801) socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000a00)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000a40)={&(0x7f00008a0000/0x2000)=nil, 0x2000}) 4m17.815683994s ago: executing program 32 (id=688): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = userfaultfd(0x801) socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000a00)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000a40)={&(0x7f00008a0000/0x2000)=nil, 0x2000}) 4m8.44450662s ago: executing program 0 (id=758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000240)=0x1, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x3c, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0xa5, 0x3, 0xd}]}}, {{0x4e23, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff}, {'AB'}}}}}}, 0x0) 4m8.118662537s ago: executing program 0 (id=761): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000680)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000006c0)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000700)=0x2002, 0x4) connect$inet(r0, &(0x7f0000002f80)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000002fc0)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendto$inet(r0, &(0x7f0000003000)="1655e937c6ecdc4612564c146aead4abd800720d2d343b0056", 0x19, 0x8004, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000003100)='<', 0x381, 0x805, 0x0, 0x0) 4m7.974293721s ago: executing program 0 (id=762): set_mempolicy(0x3, &(0x7f0000000000)=0x7effffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) 4m7.821679635s ago: executing program 0 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0) setitimer(0x1, &(0x7f0000000940)={{}, {0x8000000005, 0x5}}, 0x0) getitimer(0x1, &(0x7f0000000980)) mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x8008af26, &(0x7f0000000a00)=0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x200) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x3c5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f00001e6000/0x3000)=nil, &(0x7f00008f1000/0x1000)=nil, 0x3000, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x781eece4fc9ea1c5, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x3, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x7ff, 0x918a, 0x10000, 'snmp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800010, 0x0) 4m7.482904503s ago: executing program 0 (id=768): r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/net/syz_tun/napi_defer_hard_irqs\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='1', 0x1) 4m7.112290082s ago: executing program 0 (id=770): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x56) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49915, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000280)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f00000002c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 4m6.734806551s ago: executing program 33 (id=770): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x56) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49915, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000280)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f00000002c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 18.128371582s ago: executing program 1 (id=2374): syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000800)={0x2080}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x2) 17.866492128s ago: executing program 1 (id=2377): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x401, &(0x7f0000000380)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000002680)="$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") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16.500941611s ago: executing program 1 (id=2385): r0 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004800}, 0x4800) 16.173592109s ago: executing program 1 (id=2387): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) epoll_create1(0x80000) getsockopt$SO_NETNS_COOKIE(r2, 0x1, 0x47, 0x0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x3c4c) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xfe) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x2000008, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file2\x00', 0x400) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file2\x00', 0x20402, 0xb6) 15.691008071s ago: executing program 1 (id=2391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0xffff0000, r1, 0x4}, 0x38) 15.467325896s ago: executing program 1 (id=2393): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 6.498908903s ago: executing program 4 (id=2423): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x46951}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x6f) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f00000002c0)={{}, 0x1, 0x6f, 0x1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.896923018s ago: executing program 4 (id=2425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001380)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4010) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e628}, @TCA_FLOW_DIVISOR={0x6, 0x8, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.78474012s ago: executing program 3 (id=2427): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) getsockopt$SO_NETNS_COOKIE(r2, 0x1, 0x47, 0x0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x3c4c) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xfe) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x2000008, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file2\x00', 0x400) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file2\x00', 0x20402, 0xb6) 5.458930298s ago: executing program 3 (id=2429): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0x28ea00c3b4872574, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0xd}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r0, @ANYBLOB="080005", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 5.296879102s ago: executing program 5 (id=2430): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r1, 0xffffffffffffffff}, &(0x7f0000001e40), &(0x7f0000001e80)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f80)={0x11, 0x17, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x73}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000001c00)='syzkaller\x00', 0x10, 0xc1, &(0x7f0000001c40)=""/193, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001d80)={0x2, 0x5, 0x0, 0x10000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001ec0)=[r1], &(0x7f0000001a00)=[{0x3, 0x5, 0x0, 0xa}, {0x2, 0x5, 0x8, 0xd}, {0x3, 0x1, 0x7, 0x4}, {0x3, 0x1, 0xe, 0x7}, {0x5, 0x1, 0x9}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@arena={0x21, 0x0, 0x0, 0x33, 0x60000, r2, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xfffffffa, 0x802a, 0x0, 0x8, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xa}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00') syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f6e75027461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d6c6f7765722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c636865636b3d6e6f726d616c2c636f6465706167653d3836322c756e695f786c6174653d302c696f636861727365743d6370313235302c757466383d312c696f636861727365743d63703835322c696f636861727365743d63703935302c756e695f786c6174653d312c00"], 0x3, 0x281, &(0x7f00000015c0)="$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") fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001880)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000018c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001900)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001980)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001a00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001a40), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) 3.671872251s ago: executing program 5 (id=2431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x0, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x5, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 2.419121292s ago: executing program 3 (id=2432): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000840), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000940)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000980)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) 2.379501733s ago: executing program 4 (id=2433): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x409, &(0x7f00000002c0)={0x0}) 2.249679776s ago: executing program 5 (id=2434): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x4, 0xffffffff}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001d40)={r2, &(0x7f0000001d80)}, 0x20) 2.184791067s ago: executing program 4 (id=2435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000018c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb, [{0x5, 0x2, 0x0, 0x0, 0x4, 0x800}]}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0xcfc}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0xc, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x8, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x2}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x9}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0xffffff7f, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0x7fffffff, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x10001, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000017c0)=@xdp={0x2c, 0x8, r4, 0x1109}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="37d55af2", 0x4}], 0x1}, 0x20000885) 2.171249458s ago: executing program 3 (id=2436): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f00000002c0)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000380)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000280)={0x0, 0x400}, 0x8) 2.000649812s ago: executing program 5 (id=2437): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, 0xfffffffffffffffe) 1.840288626s ago: executing program 3 (id=2438): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r1, 0xffffffffffffffff}, &(0x7f0000001e40), &(0x7f0000001e80)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f80)={0x11, 0x17, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x73}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000001c00)='syzkaller\x00', 0x10, 0xc1, &(0x7f0000001c40)=""/193, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001d80)={0x2, 0x5, 0x0, 0x10000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001ec0)=[r1], &(0x7f0000001a00)=[{0x3, 0x5, 0x0, 0xa}, {0x2, 0x5, 0x8, 0xd}, {0x3, 0x1, 0x7, 0x4}, {0x3, 0x1, 0xe, 0x7}, {0x5, 0x1, 0x9}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@arena={0x21, 0x0, 0x0, 0x33, 0x60000, r2, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xfffffffa, 0x802a, 0x0, 0x8, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xa}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00') syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f6e75027461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d6c6f7765722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c636865636b3d6e6f726d616c2c636f6465706167653d3836322c756e695f786c6174653d302c696f636861727365743d6370313235302c757466383d312c696f636861727365743d63703835322c696f636861727365743d63703935302c756e695f786c6174653d312c00"], 0x3, 0x281, &(0x7f00000015c0)="$eJzs3c9qY1UYAPDv5k+TKJgsXInQC7pwVVqfoEUqiAVByUJdaLEpSBMKLRSqYnTlE/gEPo+bYV5gHmCG2U0Xw9zh9uZfy01KO21TZn6/TT++c76c7+Rc2tU9/fnjwcHe4fH+3388iWYzicpmbMZZEp2oxNhfUerxs/I8APDAnWVZPM8KjSJ1enFGfU5lrXLnzQEAd2L27/+yewEA7sd33//w9dbOzva3adqMGPxz0k2i+FmMb+3Hr9GPXqxHO15GZBNF/OVXO9tRS3Od+HQwPOnmlYOf/h99/tbTiPP6jWhHp7x+Iy3M1A9PuvV4b7T+Zj963/wX7fiwvP7zkvrorsRnn8z0vxbtePRLHEY/9ka9jev/3EjTL7J/X/z+Y57N65PheP9TWfX+TgUAAAAAAAAAAAAAAAAAAAAAgLfdWjrRuXj/zvji/wXjC+4HGs7cz7OepmmW5LM/iGl9LT6qRW25uwcAAAAAAAAAAAAAAAAAAICH4fj0t4Pdfr93dKvB+LX+kqF4dTHTiIibr7V6KZM1ShedBlEdtdZPIq63Vj0a55VXT65ecxetvJ/eUVKL2zuCZJJpzQ6tRrFWnmkVwUzmjVdvxnkwfroOdpOrDre5+LxuHGQlj191btXK5UxrtIOSya0Fq6+8f6Oes/acoSQi6pMvc/Hn1G/pq2vd328fAAAAAAAAAAAAAAAAAABg1vTt30sDlSU1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABLMP3//9cIhqPieXOyah7UYpRZ8hYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4B7wOAAD//45WYzw=") fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001880)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000018c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001900)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001980)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001a00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001a40), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) 1.701696579s ago: executing program 5 (id=2439): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0x28ea00c3b4872574, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0xd}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r0, @ANYBLOB="080005", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 717.720353ms ago: executing program 4 (id=2440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001380)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4010) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e628}, @TCA_FLOW_DIVISOR={0x6, 0x8, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 699.960673ms ago: executing program 5 (id=2441): prctl$PR_SET_PTRACER(0x1c, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000300)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000c80)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000d00)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 388.379301ms ago: executing program 3 (id=2442): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x0, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x5, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 0s ago: executing program 4 (id=2443): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2, &(0x7f0000000240)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000440)="$eJzs3M9vFFUcAPDvTH+BCEXEHyBqlZg0GltaUDl4UKOJMRiNesBjbRfSsFBDqxEkUozxZGJI9Ew8Gv0LvBkTop5MuBoPngwJUS6Ap5qZnaHLsgvUbtnS/XySad+bebPzvju/3ry3uwF0raGImI+IuyPi94gYjIikscBQ7d/liycmr1w8MZnEwsLbfyd5uUsXT0yWRfP1eiM2FJnhNCL9LKmt3GD22PFDE9Vq5WiRH507/P7o7LHjT394eOJg5WDlyPjevXt2jz337PgzbYkzi+vS9k9mdmx79d3Tr0/uP/3eL98nRdzREEe7DGWB/7OQa1z2RLs31mEb69JJbwcrwpL01E7Z6MvP/8HoicWdNxivfNrRygErKrs3DbRePL8ArGHJW2cXLwVAFylv9NnzbzndjnbHanHhxdoDUBb35WKqLemNtCjT1/B8205DEbF//t8z2RQr1A8BAFDvi8mv9/VHxMdXvnsta3sMRkTZH3R//vfP/O+mYgxlc0TcExFbIuLeiNgaEfcVZR+IiAeXWZ/r2z/p+WW+5A1l7b/ni7Gta9t/ZesvNvcUuY15/H3JgelqZVcM5O/JcPQNZPmxG2zjx5fPfdlqWX37L5uy7ZdtwaIe53sbOuimJuYm8kZpG1w4FbG9t1n8ydWRgCQitkXE9qW99KYyMf3ktztaFWoe/6Uzt7SFNowzLXyThTefxT8fDfGXkvrxyenrxidH10W1smu0dlQ08+tvn7/Zavs33/8r60Kl9r9u/zcW2ZzUj9fOtnf7//P4T/uTd/Jx5v5i3kcTc3NHxyL6k315/pr544vrlvmyfHb8D+9sfv5vKdbJ4n8oIrKD+OGIeCQiHi3q/lhEPB4RO28Q488v3Tz+SDu0/09FTDW9/l09/hv2/9ITPYfO/tBq+7e2//fkqeFiTn79u4lm1ckuF40VXM57BwAAAHeKNP8MfJKOXE2n6chI7TP8W+OutDozO/fUgZkPjkzFuU21/s+07OkaLPpDq9PVylgyX7xirX90vOgrLvtLdxf9xl/1rM/zI5Mz1akOxw7dbkOL8z/zV0+nawessPVN54733/aKAB3QOI6eLiYHIuLkG+FiAGuV72tD9yrP/xbP+/XfgwHWGPd/6F7Nzv+TDXljAbA2uf9D93L+Q5dKf1rGyp4K4E7n/g9daTnf61/BxLrVUY3OJFbrTskTEWUibVnmj+KXGlZLnZeaeKH4cczVUp+OJDp9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiP/wIAAP//TR7jdg==") ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='.\x00', 0x80000, 0x1) open_by_handle_at(r1, &(0x7f00000013c0)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) kernel console output (not intermixed with test programs): .880168][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 288.885555][ T51] kobject_add_internal+0x617/0xc90 [ 288.890816][ T51] kobject_add+0x164/0x240 [ 288.895305][ T51] ? kobject_init+0x1d0/0x1d0 [ 288.900017][ T51] ? get_device_parent+0x366/0x390 [ 288.905195][ T51] device_add+0x3fa/0xc40 [ 288.909600][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 288.914595][ T51] le_conn_complete_evt+0xe9a/0x1480 [ 288.920122][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 288.926585][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 288.932459][ T51] ? mutex_unlock+0x10/0x10 [ 288.937118][ T51] ? skb_pull_data+0xf0/0x1f0 [ 288.941925][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 288.947865][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 288.954389][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 288.960484][ T51] hci_event_packet+0x7b4/0x1280 [ 288.965449][ T51] ? __lock_acquire+0x7eb0/0x7eb0 [ 288.970581][ T51] ? lock_chain_count+0x20/0x20 [ 288.975562][ T51] ? bis_list+0x290/0x290 [ 288.979936][ T51] ? kcov_remote_start+0x513/0x810 [ 288.985078][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 288.990380][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 288.995759][ T51] hci_rx_work+0x43a/0xd60 [ 289.000228][ T51] ? process_scheduled_works+0x975/0x1600 [ 289.006326][ T51] process_scheduled_works+0xa60/0x1600 [ 289.011970][ T51] ? worker_attach_to_pool+0x370/0x370 [ 289.017862][ T51] ? assign_work+0x3cc/0x5d0 [ 289.022509][ T51] worker_thread+0xa5e/0xfe0 [ 289.027156][ T51] kthread+0x2fa/0x390 [ 289.031487][ T51] ? pr_cont_work+0x550/0x550 [ 289.036213][ T51] ? kthread_blkcg+0xd0/0xd0 [ 289.040823][ T51] ret_from_fork+0x48/0x80 [ 289.045260][ T51] ? kthread_blkcg+0xd0/0xd0 [ 289.049874][ T51] ret_from_fork_asm+0x11/0x20 [ 289.054700][ T51] [ 289.100543][ T51] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 289.115654][ T51] Bluetooth: hci2: failed to register connection device [ 289.127067][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 289.143242][ T6872] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.547020][ T5781] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 290.973700][T10870] loop1: detected capacity change from 0 to 1024 [ 290.996440][T10870] journal_path: Lookup failure for './file1' [ 291.003045][T10870] EXT4-fs: error: could not find journal device path [ 292.313321][T10891] 0: reclassify loop, rule prio 0, protocol 800 [ 292.337482][T10894] overlayfs: failed to clone upperpath [ 292.534502][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 292.544249][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 292.556669][ T51] Bluetooth: hci0: hardware error 0x00 [ 292.620450][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 294.018393][T10936] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1792'. [ 294.053174][T10938] loop1: detected capacity change from 0 to 512 [ 294.407378][T10938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.745731][T10938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.775775][T10938] ext4 filesystem being mounted at /446/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.808142][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 295.112703][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.382602][T10961] overlayfs: failed to clone upperpath [ 295.470906][T10966] overlayfs: missing 'lowerdir' [ 295.788419][T10978] loop5: detected capacity change from 0 to 128 [ 295.883005][T10978] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.902136][T10978] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 296.717520][ T7827] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.139802][T10997] overlayfs: failed to clone upperpath [ 297.164332][T10997] overlayfs: missing 'lowerdir' [ 297.633502][T11015] fuse: Bad value for 'fd' [ 297.822773][T11020] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1818'. [ 298.845379][T11031] overlayfs: failed to clone upperpath [ 298.905156][T11031] overlayfs: missing 'lowerdir' [ 299.556075][T11065] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.835629][T11068] overlayfs: missing 'lowerdir' [ 300.033648][T11076] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1835'. [ 301.018616][T11099] overlayfs: failed to clone upperpath [ 301.029164][T11099] overlayfs: missing 'lowerdir' [ 301.855461][T11131] overlayfs: missing 'lowerdir' [ 301.902725][T11133] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1853'. [ 302.825005][T11164] overlayfs: failed to clone upperpath [ 302.841344][T11164] overlayfs: failed to clone upperpath [ 302.982801][T11169] fuse: Bad value for 'fd' [ 302.983656][T11170] loop1: detected capacity change from 0 to 16 [ 303.014242][T11170] erofs: Unknown parameter 'xYo@8"P"I' [ 303.468238][T11186] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1873'. [ 303.534116][T11188] overlayfs: refusing to follow metacopy origin for (/file1) [ 303.917946][T11202] loop1: detected capacity change from 0 to 16 [ 303.926793][T11202] erofs: Unknown parameter 'xYo@8"P"I' [ 303.987535][T11202] loop1: detected capacity change from 0 to 512 [ 303.997413][T11202] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 304.196099][T11207] loop1: detected capacity change from 0 to 1024 [ 304.208982][T11207] EXT4-fs: Ignoring removed nobh option [ 304.238877][T11207] EXT4-fs: Ignoring removed bh option [ 304.265766][T11207] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 304.350564][T11207] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 304.359442][T11207] System zones: 0-1, 3-12 [ 304.392441][T11207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.120068][T11221] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 305.182086][T11221] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 305.407080][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.809927][T11245] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1890'. [ 306.435144][T11250] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.777563][T11256] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 306.788424][T11256] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 307.002792][T11264] loop1: detected capacity change from 0 to 16 [ 307.019910][T11264] erofs: Unknown parameter 'xYo@8"P"I' [ 307.078532][T11264] loop1: detected capacity change from 0 to 512 [ 307.096259][T11264] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 307.819601][T11279] loop1: detected capacity change from 0 to 1024 [ 307.836166][T11279] journal_path: Lookup failure for './file1' [ 307.842475][T11279] EXT4-fs: error: could not find journal device path [ 308.459372][T11281] loop1: detected capacity change from 0 to 128 [ 308.539220][T11281] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.571912][T11290] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1905'. [ 308.591705][T11281] ext4 filesystem being mounted at /473/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.745939][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.801721][T11289] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 308.840768][T11289] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 310.321475][T11318] loop5: detected capacity change from 0 to 128 [ 310.355570][T11318] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.387724][T11318] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 311.189485][ T7827] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.456891][T11327] overlayfs: missing 'lowerdir' [ 311.814845][T11343] loop1: detected capacity change from 0 to 512 [ 311.823007][T11343] EXT4-fs: Ignoring removed oldalloc option [ 311.946936][T11343] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 312.027814][T11343] EXT4-fs (loop1): 1 truncate cleaned up [ 312.086732][T11343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.253784][T11343] overlayfs: missing 'lowerdir' [ 312.327013][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.422967][T11353] loop1: detected capacity change from 0 to 128 [ 312.459910][T11350] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.505355][T11353] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.545699][T11353] ext4 filesystem being mounted at /478/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.679431][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.118735][T11366] overlayfs: missing 'lowerdir' [ 313.296012][T11374] loop1: detected capacity change from 0 to 512 [ 313.304907][T11374] EXT4-fs: Ignoring removed oldalloc option [ 313.323050][T11375] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1933'. [ 313.337953][T11374] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 313.534905][T11379] loop5: detected capacity change from 0 to 128 [ 313.552126][T11374] EXT4-fs (loop1): 1 truncate cleaned up [ 313.601144][T11374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.657128][T11379] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.674958][T11374] overlayfs: missing 'lowerdir' [ 313.765913][T11379] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 313.924919][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.012742][ T7827] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.395022][T11393] loop5: detected capacity change from 0 to 1024 [ 314.413550][T11393] EXT4-fs: Ignoring removed nobh option [ 314.419301][T11393] EXT4-fs: Ignoring removed bh option [ 314.431339][T11393] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 314.496825][T11393] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 314.544495][T11393] System zones: 0-1, 3-12 [ 314.569495][T11393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.604120][T11397] FAULT_INJECTION: forcing a failure. [ 314.604120][T11397] name fail_futex, interval 1, probability 0, space 0, times 0 [ 314.730655][T11397] CPU: 0 PID: 11397 Comm: syz.1.1941 Not tainted syzkaller #0 [ 314.738478][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 314.748664][T11397] Call Trace: [ 314.752133][T11397] [ 314.755104][T11397] dump_stack_lvl+0x18c/0x250 [ 314.759924][T11397] ? show_regs_print_info+0x20/0x20 [ 314.765163][T11397] ? load_image+0x420/0x420 [ 314.769901][T11397] ? rcu_read_lock_sched_held+0x8a/0x110 [ 314.775582][T11397] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 314.781886][T11397] should_fail_ex+0x394/0x4c0 [ 314.786818][T11397] get_futex_key+0x136/0x1030 [ 314.791582][T11397] ? futex_setup_timer+0xc0/0xc0 [ 314.796654][T11397] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 314.802704][T11397] ? __lock_acquire+0x7eb0/0x7eb0 [ 314.807799][T11397] ? lock_chain_count+0x20/0x20 [ 314.812708][T11397] futex_wait_setup+0xbc/0x270 [ 314.817529][T11397] ? futex_wait_multiple+0x920/0x920 [ 314.823135][T11397] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 314.829348][T11397] ? _raw_spin_unlock+0x40/0x40 [ 314.834613][T11397] futex_wait+0x1bc/0x5c0 [ 314.839003][T11397] ? futex_wait_setup+0x270/0x270 [ 314.844095][T11397] ? file_end_write+0x159/0x250 [ 314.849003][T11397] ? vfs_write+0x5de/0x9a0 [ 314.853503][T11397] do_futex+0x2ff/0x3e0 [ 314.857803][T11397] ? __ia32_sys_get_robust_list+0x110/0x110 [ 314.863752][T11397] __se_sys_futex+0x3a9/0x440 [ 314.868474][T11397] ? __x64_sys_futex+0xf0/0xf0 [ 314.873460][T11397] ? __x64_sys_futex+0x21/0xf0 [ 314.878355][T11397] do_syscall_64+0x55/0xb0 [ 314.882895][T11397] ? clear_bhb_loop+0x40/0x90 [ 314.887707][T11397] ? clear_bhb_loop+0x40/0x90 [ 314.892421][T11397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.898451][T11397] RIP: 0033:0x7f67e7d9e559 [ 314.903078][T11397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.923172][T11397] RSP: 002b:00007f67e8cf70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 314.931730][T11397] RAX: ffffffffffffffda RBX: 00007f67e8025fa8 RCX: 00007f67e7d9e559 [ 314.939843][T11397] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f67e8025fa8 [ 314.948114][T11397] RBP: 00007f67e8025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 314.956131][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.964237][T11397] R13: 00007f67e8026038 R14: 00007ffc4a0e8780 R15: 00007ffc4a0e8868 [ 314.972542][T11397] [ 315.227799][T11401] overlayfs: missing 'lowerdir' [ 315.396224][T11397] rxe_eth0 speed is unknown, defaulting to 1000 [ 315.744080][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.769446][T11408] fuse: Bad value for 'fd' [ 315.900349][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 316.035815][T11416] loop4: detected capacity change from 0 to 128 [ 316.118071][T11416] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.198191][T11416] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 316.303421][T11427] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1948'. [ 316.319014][ T7568] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.617180][T11432] overlayfs: failed to clone upperpath [ 316.704212][T11432] overlayfs: missing 'workdir' [ 317.496765][T11458] overlayfs: missing 'workdir' [ 317.586003][T11466] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1962'. [ 317.697689][T11468] loop4: detected capacity change from 0 to 256 [ 317.707406][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.714289][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.735131][T11468] FAT-fs (loop4): Unrecognized mount option "nonutail=0" or missing value [ 317.875770][ T6872] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.349059][ T5781] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 318.649884][T11477] loop5: detected capacity change from 0 to 128 [ 318.877862][T11477] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.972726][T11477] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.152212][ T7827] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.773393][T11500] overlayfs: missing 'workdir' [ 319.781308][T11504] fuse: Bad value for 'fd' [ 319.937480][T11510] loop5: detected capacity change from 0 to 1024 [ 319.948469][T11510] EXT4-fs: Ignoring removed nobh option [ 319.954915][T11510] EXT4-fs: Ignoring removed bh option [ 320.064192][T11510] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 320.219885][T11514] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1977'. [ 320.276831][T11510] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 320.414283][T11510] System zones: 0-1, 3-12 [ 320.462997][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 320.608376][T11510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.423478][T11532] loop4: detected capacity change from 0 to 1024 [ 321.442252][T11532] EXT4-fs: Ignoring removed bh option [ 321.453029][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.460163][T11532] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 321.555641][T11532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.581035][T11535] netlink: 'syz.1.1982': attribute type 8 has an invalid length. [ 322.333031][T11549] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 322.365383][T11549] overlayfs: failed to set xattr on upper [ 322.406815][T11549] overlayfs: ...falling back to redirect_dir=nofollow. [ 322.427760][T11549] overlayfs: ...falling back to index=off. [ 322.450857][T11549] overlayfs: ...falling back to uuid=null. [ 322.664729][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.885405][T11559] loop1: detected capacity change from 0 to 1024 [ 322.904472][T11563] loop4: detected capacity change from 0 to 256 [ 322.932142][T11559] journal_path: Lookup failure for './file1' [ 322.942392][T11563] FAT-fs (loop4): Unrecognized mount option "nonutail=0" or missing value [ 322.997416][T11559] EXT4-fs: error: could not find journal device path [ 323.370078][ T5781] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 323.444790][T11573] loop5: detected capacity change from 0 to 1024 [ 323.462839][T11573] EXT4-fs: Ignoring removed nobh option [ 323.478243][T11573] EXT4-fs: Ignoring removed bh option [ 323.499348][T11573] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 323.596887][T11573] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 323.624877][T11573] System zones: 0-1, 3-12 [ 323.655747][T11573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.102039][T11585] overlayfs: failed to clone upperpath [ 324.112285][T11585] overlayfs: failed to clone upperpath [ 324.385621][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.420477][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 325.440512][T11593] fuse: Bad value for 'fd' [ 325.549054][T11597] loop5: detected capacity change from 0 to 512 [ 325.662861][T11597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.728885][T11597] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.939925][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.019174][T11608] loop1: detected capacity change from 0 to 1024 [ 326.051356][T11608] EXT4-fs: Ignoring removed bh option [ 326.079547][T11608] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 326.158280][T11608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.044793][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2007'. [ 327.189065][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.559465][T11635] fuse: Bad value for 'fd' [ 328.611368][T11648] loop1: detected capacity change from 0 to 1024 [ 328.624350][T11648] journal_path: Lookup failure for './file1' [ 328.630552][T11648] EXT4-fs: error: could not find journal device path [ 329.429493][T11658] loop1: detected capacity change from 0 to 128 [ 329.444631][T11659] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 329.545769][T11658] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 329.564263][T11658] ext4 filesystem being mounted at /498/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.640789][ T51] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 329.862169][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.145445][T11673] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2021'. [ 331.525559][T11716] loop4: detected capacity change from 0 to 1024 [ 331.550065][T11716] EXT4-fs: Ignoring removed nobh option [ 331.560653][T11716] EXT4-fs: Ignoring removed bh option [ 331.583391][T11716] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 331.639843][T11716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 331.665443][T11716] System zones: 0-1, 3-12 [ 331.680613][T11716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.729989][ T28] audit: type=1326 audit(1792219675.513:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.5.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f319e559 code=0x7ffc0000 [ 331.760775][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 331.817220][ T28] audit: type=1326 audit(1792219675.513:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.5.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f319e559 code=0x7ffc0000 [ 331.877106][ T28] audit: type=1326 audit(1792219675.513:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.5.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f319e559 code=0x7ffc0000 [ 331.916120][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.947748][ T28] audit: type=1326 audit(1792219675.513:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.5.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f42f319e559 code=0x7ffc0000 [ 331.987490][T11735] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2042'. [ 332.036489][ T28] audit: type=1326 audit(1792219675.513:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.5.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f319e559 code=0x7ffc0000 [ 332.115527][ T28] audit: type=1326 audit(1792219675.513:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.5.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f319e559 code=0x7ffc0000 [ 332.260640][ T28] audit: type=1326 audit(1792219675.513:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.5.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f319e559 code=0x7ffc0000 [ 332.362700][T11743] loop5: detected capacity change from 0 to 1024 [ 332.379820][ T28] audit: type=1326 audit(1792219675.513:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.5.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f42f319e559 code=0x7ffc0000 [ 332.405924][ T28] audit: type=1326 audit(1792219675.513:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11722 comm="syz.5.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f42f319e559 code=0x7ffc0000 [ 332.436863][T11743] EXT4-fs: Ignoring removed nobh option [ 332.475067][T11743] EXT4-fs: Ignoring removed bh option [ 332.547044][T11743] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 332.649331][T11743] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 332.713969][T11743] System zones: 0-1, 3-12 [ 332.782401][T11743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.866745][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.633776][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 334.767821][T11785] loop4: detected capacity change from 0 to 512 [ 334.791725][T11785] EXT4-fs: Ignoring removed oldalloc option [ 334.827229][T11785] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 334.910736][T11785] EXT4-fs (loop4): 1 truncate cleaned up [ 334.927331][T11785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.049886][T11785] overlayfs: missing 'workdir' [ 335.236893][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.656495][T11812] ip_tables: iptables: counters copy to user failed while replacing table [ 335.739456][T11812] syz.4.2073 uses obsolete (PF_INET,SOCK_PACKET) [ 335.861781][T11818] loop1: detected capacity change from 0 to 1024 [ 335.894565][T11818] EXT4-fs: Ignoring removed bh option [ 335.925969][T11818] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 336.002344][T11818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.049008][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.190638][ T28] audit: type=1326 audit(1792219680.973:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.3.2085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7d39e559 code=0x7ffc0000 [ 337.269479][ T28] audit: type=1326 audit(1792219681.003:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.3.2085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7d39e559 code=0x7ffc0000 [ 337.344639][ T28] audit: type=1326 audit(1792219681.003:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.3.2085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7d39e559 code=0x7ffc0000 [ 337.450476][ T28] audit: type=1326 audit(1792219681.013:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.3.2085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7d39e559 code=0x7ffc0000 [ 337.857257][ T28] audit: type=1326 audit(1792219681.013:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.3.2085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b7d39e559 code=0x7ffc0000 [ 338.167501][ T28] audit: type=1326 audit(1792219681.013:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.3.2085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7d39e559 code=0x7ffc0000 [ 338.301286][ T28] audit: type=1326 audit(1792219681.013:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.3.2085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7d39e559 code=0x7ffc0000 [ 338.599340][ T28] audit: type=1326 audit(1792219681.013:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.3.2085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b7d39e559 code=0x7ffc0000 [ 338.676558][T11862] loop1: detected capacity change from 0 to 1024 [ 338.685143][ T28] audit: type=1326 audit(1792219681.013:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.3.2085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7b7d39e559 code=0x7ffc0000 [ 338.699721][T11862] EXT4-fs: Ignoring removed nobh option [ 338.716617][T11862] EXT4-fs: Ignoring removed bh option [ 338.723139][T11862] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 338.780749][T11862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 338.806167][T11862] System zones: 0-1, 3-12 [ 338.831942][T11862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.929319][T11867] loop4: detected capacity change from 0 to 1024 [ 338.955465][T11867] journal_path: Lookup failure for './file1' [ 338.999273][T11867] EXT4-fs: error: could not find journal device path [ 339.089824][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.247210][T11878] loop1: detected capacity change from 0 to 1024 [ 340.285598][T11878] EXT4-fs: Ignoring removed nobh option [ 340.301964][T11878] EXT4-fs: Ignoring removed bh option [ 340.370026][T11878] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 340.435770][T11878] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 340.496577][T11878] System zones: 0-1, 3-12 [ 340.515598][T11878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.283183][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.788074][T11897] loop1: detected capacity change from 0 to 512 [ 341.868561][T11897] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2100: inode has both inline data and extents flags [ 341.922057][T11897] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2100: couldn't read orphan inode 15 (err -117) [ 341.942143][T11897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.001835][T11904] loop4: detected capacity change from 0 to 1024 [ 342.009640][T11904] EXT4-fs: Ignoring removed bh option [ 342.043791][T11904] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 342.108908][T11904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.178177][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.240527][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.402738][T11920] loop1: detected capacity change from 0 to 1024 [ 343.427644][T11920] EXT4-fs: Ignoring removed nobh option [ 343.455024][T11920] EXT4-fs: Ignoring removed bh option [ 343.471778][T11920] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 343.499277][T11920] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 343.508504][T11920] System zones: 0-1, 3-12 [ 343.545420][T11920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.563840][T11926] xt_hashlimit: size too large, truncated to 1048576 [ 344.068130][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.591609][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.620660][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.629685][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.652503][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.667726][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.676099][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.828235][T11939] loop1: detected capacity change from 0 to 1024 [ 344.918185][T11939] journal_path: Lookup failure for './file1' [ 344.954845][T11935] rxe_eth0 speed is unknown, defaulting to 1000 [ 344.967410][T11939] EXT4-fs: error: could not find journal device path [ 345.300954][T11943] loop4: detected capacity change from 0 to 512 [ 345.347982][T11943] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.2115: inode has both inline data and extents flags [ 345.373128][T11943] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2115: couldn't read orphan inode 15 (err -117) [ 345.394738][T11943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.607673][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.256165][T11935] chnl_net:caif_netlink_parms(): no params data found [ 346.782965][ T5781] Bluetooth: hci4: command tx timeout [ 346.787510][T11958] loop4: detected capacity change from 0 to 1024 [ 346.802677][T11958] EXT4-fs: Ignoring removed nobh option [ 346.831044][T11958] EXT4-fs: Ignoring removed bh option [ 346.879921][T11958] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 346.947957][T11958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 346.961024][T11958] System zones: 0-1, 3-12 [ 346.986554][T11958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.105361][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.260887][T11935] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.287877][T11935] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.330668][T11935] bridge_slave_0: entered allmulticast mode [ 347.366860][T11935] bridge_slave_0: entered promiscuous mode [ 347.543142][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.551743][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.570505][T11935] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.577795][T11935] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.601381][T11935] bridge_slave_1: entered allmulticast mode [ 347.625430][T11935] bridge_slave_1: entered promiscuous mode [ 347.763339][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.846605][T11935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.929400][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.969614][T11935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.137665][T11972] loop4: detected capacity change from 0 to 512 [ 348.216100][T11972] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.2123: inode has both inline data and extents flags [ 348.225777][T11935] team0: Port device team_slave_0 added [ 348.242996][T11935] team0: Port device team_slave_1 added [ 348.290583][T11972] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2123: couldn't read orphan inode 15 (err -117) [ 348.304570][T11972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.423225][T11935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.441002][T11935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.501108][T11935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.517182][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.641324][T11935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.660387][T11935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.716869][T11935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.860982][ T5781] Bluetooth: hci4: command tx timeout [ 348.941600][T11935] hsr_slave_0: entered promiscuous mode [ 348.962812][T11935] hsr_slave_1: entered promiscuous mode [ 348.969444][T11935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.977648][T11935] Cannot create hsr debugfs directory [ 349.106085][ T12] bond2: (slave ip6gretap1): Releasing active interface [ 349.117808][ T12] ip6gretap1 (unregistering): left allmulticast mode [ 350.139647][T12001] loop4: detected capacity change from 0 to 1024 [ 350.178348][T12001] journal_path: Lookup failure for './file1' [ 350.235198][T12001] EXT4-fs: error: could not find journal device path [ 350.941367][ T5781] Bluetooth: hci4: command tx timeout [ 351.160979][T12014] loop1: detected capacity change from 0 to 512 [ 351.250973][T12014] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2133: inode has both inline data and extents flags [ 351.312981][T12014] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2133: couldn't read orphan inode 15 (err -117) [ 351.426021][T12014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.427291][T11935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.603505][T11935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.632919][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.674101][T11935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.797730][ T12] hsr_slave_0: left promiscuous mode [ 351.848933][ T12] hsr_slave_1: left promiscuous mode [ 351.895030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.914555][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.974667][ T12] bridge_slave_1: left allmulticast mode [ 351.991648][ T12] bridge_slave_1: left promiscuous mode [ 352.006592][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.053024][ T12] bridge_slave_0: left allmulticast mode [ 352.075117][ T12] bridge_slave_0: left promiscuous mode [ 352.101747][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.206250][ T12] veth1_macvtap: left promiscuous mode [ 352.229133][ T12] veth0_macvtap: left promiscuous mode [ 352.247243][ T12] veth1_vlan: left promiscuous mode [ 352.264975][ T12] veth0_vlan: left promiscuous mode [ 353.023606][ T5781] Bluetooth: hci4: command tx timeout [ 353.079705][ T12] bond2 (unregistering): Released all slaves [ 353.100747][ T12] bond1 (unregistering): Released all slaves [ 353.895961][ T12] team0 (unregistering): Port device team_slave_1 removed [ 353.988240][ T12] team0 (unregistering): Port device team_slave_0 removed [ 354.078852][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.138927][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.764747][ T12] bond0 (unregistering): Released all slaves [ 354.899648][T11935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.914776][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2135'. [ 355.028717][T12046] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2141'. [ 355.276546][T12059] loop4: detected capacity change from 0 to 512 [ 355.333362][T12059] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.2143: inode has both inline data and extents flags [ 355.344955][T11935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.389741][T11935] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.411405][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.418617][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.433457][T12059] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2143: couldn't read orphan inode 15 (err -117) [ 355.512326][T12059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.533664][ T9400] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.541056][ T9400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.700202][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.925565][T12073] loop4: detected capacity change from 0 to 1024 [ 355.952005][T12073] EXT4-fs: Ignoring removed bh option [ 356.003888][T12073] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 356.077913][T12073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.786497][T11935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.036781][T11935] veth0_vlan: entered promiscuous mode [ 357.109271][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.124425][T11935] veth1_vlan: entered promiscuous mode [ 357.305208][T11935] veth0_macvtap: entered promiscuous mode [ 357.327866][T11935] veth1_macvtap: entered promiscuous mode [ 357.375965][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.395201][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.430586][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.441473][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.457252][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.480345][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.498838][T12100] loop5: detected capacity change from 0 to 512 [ 357.502245][T11935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.595967][T12100] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.2154: inode has both inline data and extents flags [ 357.645975][T12100] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2154: couldn't read orphan inode 15 (err -117) [ 357.672225][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.720832][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.746564][T12100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.759207][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.759232][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.759249][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.759262][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.764062][T11935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.883691][T11935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.892891][T12103] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 357.930408][T11935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.939368][T11935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.976963][T11935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.996306][T12112] loop4: detected capacity change from 0 to 512 [ 358.002839][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.078922][T12112] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 358.119109][T12112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.148222][T12112] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.168452][T12119] loop5: detected capacity change from 0 to 512 [ 358.316159][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.329772][T12119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.352017][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.842142][T12119] EXT4-fs error (device loop5): ext4_readdir:223: inode #2: comm syz.5.2160: path /320/file0: directory fails checksum at offset 0 [ 358.928548][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.947528][T12119] EXT4-fs (loop5): Remounting filesystem read-only [ 358.996081][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.203901][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.224953][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.407119][T12136] xt_hashlimit: size too large, truncated to 1048576 [ 359.768581][T12143] loop1: detected capacity change from 0 to 512 [ 359.819802][T12143] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2168: inode has both inline data and extents flags [ 359.908824][T12143] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2168: couldn't read orphan inode 15 (err -117) [ 359.959053][T12143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.091086][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.212551][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 360.462750][T12158] loop3: detected capacity change from 0 to 1024 [ 360.490508][T12158] EXT4-fs: Ignoring removed nobh option [ 360.500912][T12158] EXT4-fs: Ignoring removed bh option [ 360.520506][T12158] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 360.582962][T12158] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 360.600377][T12158] System zones: 0-1, 3-12 [ 360.612237][T12158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.719472][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.816432][T12162] loop1: detected capacity change from 0 to 1024 [ 360.824391][T12162] journal_path: Lookup failure for './file1' [ 360.830505][T12162] EXT4-fs: error: could not find journal device path [ 361.793738][T12176] FAULT_INJECTION: forcing a failure. [ 361.793738][T12176] name failslab, interval 1, probability 0, space 0, times 0 [ 361.849555][T12176] CPU: 0 PID: 12176 Comm: syz.3.2181 Not tainted syzkaller #0 [ 361.854017][T12179] loop5: detected capacity change from 0 to 512 [ 361.857092][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 361.857212][T12176] Call Trace: [ 361.857287][T12176] [ 361.857330][T12176] dump_stack_lvl+0x18c/0x250 [ 361.857483][T12176] ? show_regs_print_info+0x20/0x20 [ 361.857529][T12176] ? load_image+0x420/0x420 [ 361.857579][T12176] ? __might_sleep+0xe0/0xe0 [ 361.857699][T12176] ? __lock_acquire+0x7eb0/0x7eb0 [ 361.857744][T12176] ? percpu_ref_put+0x12/0x100 [ 361.857798][T12176] should_fail_ex+0x394/0x4c0 [ 361.857867][T12176] should_failslab+0x9/0x20 [ 361.857919][T12176] slab_pre_alloc_hook+0x59/0x300 [ 361.857949][T12176] kmem_cache_alloc+0x5a/0x2c0 [ 361.857981][T12176] ? vm_area_dup+0x61/0x270 [ 361.858019][T12176] vm_area_dup+0x61/0x270 [ 361.858045][T12176] copy_mm+0x11a6/0x1e30 [ 361.858091][T12176] ? copy_signal+0x640/0x640 [ 361.858158][T12176] ? __init_rwsem+0x122/0x160 [ 361.858182][T12176] ? copy_signal+0x51f/0x640 [ 361.858207][T12176] copy_process+0x16c9/0x3da0 [ 361.858229][T12176] ? plist_add+0x3db/0x490 [ 361.858278][T12176] ? copy_process+0x98e/0x3da0 [ 361.858308][T12176] ? futex_wait+0x4a7/0x5c0 [ 361.858348][T12176] ? __pidfd_prepare+0x140/0x140 [ 361.858390][T12176] kernel_clone+0x24b/0x8a0 [ 361.858422][T12176] ? create_io_thread+0x190/0x190 [ 361.990396][T12176] ? do_futex+0x2ff/0x3e0 [ 361.994812][T12176] __x64_sys_clone+0x1b7/0x230 [ 361.999729][T12176] ? __ia32_sys_vfork+0x140/0x140 [ 362.004823][T12176] ? lock_chain_count+0x20/0x20 [ 362.009906][T12176] ? lockdep_hardirqs_on+0x98/0x150 [ 362.015150][T12176] do_syscall_64+0x55/0xb0 [ 362.019693][T12176] ? clear_bhb_loop+0x40/0x90 [ 362.024518][T12176] ? clear_bhb_loop+0x40/0x90 [ 362.029250][T12176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.035252][T12176] RIP: 0033:0x7f114479e559 [ 362.039754][T12176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.059436][T12176] RSP: 002b:00007f11455c1fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 362.068212][T12176] RAX: ffffffffffffffda RBX: 00007f1144a25fa0 RCX: 00007f114479e559 [ 362.076221][T12176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.084231][T12176] RBP: 00007f1144835ab8 R08: 0000200000000300 R09: 0000200000000300 [ 362.092328][T12176] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 362.100509][T12176] R13: 00007f1144a26038 R14: 00007f1144a25fa0 R15: 00007ffda5579248 [ 362.108566][T12176] [ 362.124802][T12179] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.2182: inode has both inline data and extents flags [ 362.176461][T12179] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2182: couldn't read orphan inode 15 (err -117) [ 362.218135][T12179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.355726][T12184] loop1: detected capacity change from 0 to 1024 [ 362.411382][T12184] EXT4-fs: Ignoring removed nobh option [ 362.437219][T12184] EXT4-fs: Ignoring removed bh option [ 362.497805][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.507919][T12184] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 362.584978][T12184] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 362.625779][T12184] System zones: 0-1, 3-12 [ 362.644308][T12184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.748187][T12194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2186'. [ 362.836030][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.923754][T12196] loop5: detected capacity change from 0 to 256 [ 363.026432][T12196] overlayfs: failed to resolve './bus': -2 [ 363.186232][T12203] loop4: detected capacity change from 0 to 1024 [ 363.194411][T12203] journal_path: Lookup failure for './file1' [ 363.200569][T12203] EXT4-fs: error: could not find journal device path [ 363.256424][T12115] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 363.964560][T12208] 0: reclassify loop, rule prio 0, protocol 800 [ 364.106593][T12212] loop3: detected capacity change from 0 to 512 [ 364.161685][T12212] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.2193: inode has both inline data and extents flags [ 364.255799][T12212] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2193: couldn't read orphan inode 15 (err -117) [ 364.326507][T12212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.441534][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.499361][T12224] loop1: detected capacity change from 0 to 1024 [ 364.542089][T12224] EXT4-fs: Ignoring removed nobh option [ 364.554089][T12224] EXT4-fs: Ignoring removed bh option [ 364.582622][T12224] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 364.629557][T12224] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 364.660666][T12224] System zones: 0-1, 3-12 [ 364.669861][T12224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.680958][T12233] loop3: detected capacity change from 0 to 256 [ 364.762496][T12235] loop5: detected capacity change from 0 to 1024 [ 364.772460][T12235] EXT4-fs: Ignoring removed bh option [ 364.790550][T12235] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 364.802947][T12233] overlayfs: failed to resolve './bus': -2 [ 364.852209][T12235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.961538][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.948937][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.998184][T12252] loop1: detected capacity change from 0 to 512 [ 366.083607][T12252] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2208: inode has both inline data and extents flags [ 366.170711][T12252] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2208: couldn't read orphan inode 15 (err -117) [ 366.203644][T12252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.289431][T12261] FAULT_INJECTION: forcing a failure. [ 366.289431][T12261] name failslab, interval 1, probability 0, space 0, times 0 [ 366.317238][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.331111][T12261] CPU: 0 PID: 12261 Comm: syz.5.2209 Not tainted syzkaller #0 [ 366.338657][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 366.348856][T12261] Call Trace: [ 366.352185][T12261] [ 366.355159][T12261] dump_stack_lvl+0x18c/0x250 [ 366.359896][T12261] ? show_regs_print_info+0x20/0x20 [ 366.365229][T12261] ? load_image+0x420/0x420 [ 366.370059][T12261] ? __lock_acquire+0x7eb0/0x7eb0 [ 366.375146][T12261] should_fail_ex+0x394/0x4c0 [ 366.379884][T12261] should_failslab+0x9/0x20 [ 366.384489][T12261] slab_pre_alloc_hook+0x59/0x300 [ 366.389648][T12261] ? __up_read+0x2b8/0x6b0 [ 366.394196][T12261] ? crypto_create_tfm_node+0x77/0x380 [ 366.400192][T12261] ? crypto_create_tfm_node+0x77/0x380 [ 366.405870][T12261] __kmem_cache_alloc_node+0x53/0x250 [ 366.411513][T12261] ? crypto_create_tfm_node+0x77/0x380 [ 366.416989][T12261] __kmalloc_node+0xa6/0x240 [ 366.421611][T12261] crypto_create_tfm_node+0x77/0x380 [ 366.427186][T12261] ? crypto_alg_mod_lookup+0x1ad/0x570 [ 366.432845][T12261] crypto_alloc_tfm_node+0x17b/0x360 [ 366.438233][T12261] ? __kmem_cache_free+0xba/0x1f0 [ 366.443289][T12261] pkcs7_digest+0xfb/0x8a0 [ 366.447816][T12261] ? pkcs7_get_digest+0x200/0x200 [ 366.452863][T12261] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 366.458871][T12261] pkcs7_verify+0x1df/0x1340 [ 366.463488][T12261] ? kasan_quarantine_put+0xd8/0x220 [ 366.468885][T12261] ? lockdep_hardirqs_on+0x98/0x150 [ 366.474110][T12261] verify_pkcs7_message_sig+0xf8/0x2b0 [ 366.479591][T12261] ? pkcs7_preparse+0xc0/0xc0 [ 366.484282][T12261] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 366.491851][T12261] ? pkcs7_parse_message+0x4c6/0x520 [ 366.497241][T12261] ? pkcs7_parse_message+0x4c6/0x520 [ 366.502630][T12261] ? pkcs7_preparse+0xc0/0xc0 [ 366.507342][T12261] verify_pkcs7_signature+0x6a/0x90 [ 366.512622][T12261] pkcs7_preparse+0x8b/0xc0 [ 366.517184][T12261] ? pkcs7_preparse+0xc0/0xc0 [ 366.521897][T12261] __key_create_or_update+0x3a6/0xa60 [ 366.527762][T12261] ? key_create_or_update+0x60/0x60 [ 366.532980][T12261] ? bpf_lsm_key_permission+0x9/0x10 [ 366.538397][T12261] ? lookup_user_key+0xb66/0x1140 [ 366.543718][T12261] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 366.549734][T12261] key_create_or_update+0x42/0x60 [ 366.554798][T12261] __se_sys_add_key+0x34f/0x410 [ 366.559754][T12261] ? __x64_sys_add_key+0xc0/0xc0 [ 366.564714][T12261] ? lockdep_hardirqs_on+0x98/0x150 [ 366.570152][T12261] ? __x64_sys_add_key+0x20/0xc0 [ 366.575203][T12261] do_syscall_64+0x55/0xb0 [ 366.579734][T12261] ? clear_bhb_loop+0x40/0x90 [ 366.584522][T12261] ? clear_bhb_loop+0x40/0x90 [ 366.589211][T12261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.595384][T12261] RIP: 0033:0x7f42f319e559 [ 366.599938][T12261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.619648][T12261] RSP: 002b:00007f42f40e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 366.628168][T12261] RAX: ffffffffffffffda RBX: 00007f42f3425fa0 RCX: 00007f42f319e559 [ 366.636332][T12261] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 366.644498][T12261] RBP: 00007f42f3235ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 366.652481][T12261] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 366.660517][T12261] R13: 00007f42f3426038 R14: 00007f42f3425fa0 R15: 00007fffa28167b8 [ 366.668543][T12261] [ 366.828479][T12268] loop3: detected capacity change from 0 to 1024 [ 366.861921][T12268] journal_path: Lookup failure for './file1' [ 366.868096][T12268] EXT4-fs: error: could not find journal device path [ 366.966036][T12270] loop4: detected capacity change from 0 to 1024 [ 366.986371][T12270] EXT4-fs: Ignoring removed nobh option [ 367.008791][T12270] EXT4-fs: Ignoring removed bh option [ 367.046178][T12270] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 367.073620][T12270] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 367.090584][T12270] System zones: 0-1, 3-12 [ 367.097579][T12270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.129437][T12274] loop1: detected capacity change from 0 to 512 [ 367.216527][T12278] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2218'. [ 367.274709][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.308143][T12274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.446754][T12274] EXT4-fs error (device loop1): ext4_readdir:223: inode #2: comm syz.1.2217: path /553/file0: directory fails checksum at offset 0 [ 367.475251][T12274] EXT4-fs (loop1): Remounting filesystem read-only [ 367.619962][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.643404][T12283] loop4: detected capacity change from 0 to 1024 [ 367.672022][T12283] EXT4-fs: Ignoring removed bh option [ 367.708574][T12283] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 367.792373][T12283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.889635][T12288] loop1: detected capacity change from 0 to 512 [ 367.944701][T12288] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 368.151870][T12288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.210980][T12288] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.071636][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.344450][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.497970][T12297] loop4: detected capacity change from 0 to 512 [ 369.580580][T12297] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.2221: inode has both inline data and extents flags [ 369.635055][T12297] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2221: couldn't read orphan inode 15 (err -117) [ 369.658932][T12297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.740020][T12306] FAULT_INJECTION: forcing a failure. [ 369.740020][T12306] name failslab, interval 1, probability 0, space 0, times 0 [ 369.754599][T12306] CPU: 1 PID: 12306 Comm: syz.1.2225 Not tainted syzkaller #0 [ 369.762146][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 369.772234][T12306] Call Trace: [ 369.775624][T12306] [ 369.778565][T12306] dump_stack_lvl+0x18c/0x250 [ 369.783440][T12306] ? show_regs_print_info+0x20/0x20 [ 369.788651][T12306] ? load_image+0x420/0x420 [ 369.793352][T12306] ? __lock_acquire+0x7eb0/0x7eb0 [ 369.798405][T12306] should_fail_ex+0x394/0x4c0 [ 369.803112][T12306] should_failslab+0x9/0x20 [ 369.807633][T12306] slab_pre_alloc_hook+0x59/0x300 [ 369.812675][T12306] ? __up_read+0x2b8/0x6b0 [ 369.817290][T12306] ? crypto_create_tfm_node+0x77/0x380 [ 369.822937][T12306] ? crypto_create_tfm_node+0x77/0x380 [ 369.828450][T12306] __kmem_cache_alloc_node+0x53/0x250 [ 369.833846][T12306] ? crypto_create_tfm_node+0x77/0x380 [ 369.839316][T12306] __kmalloc_node+0xa6/0x240 [ 369.843973][T12306] crypto_create_tfm_node+0x77/0x380 [ 369.849419][T12306] ? crypto_alg_mod_lookup+0x1ad/0x570 [ 369.854908][T12306] crypto_alloc_tfm_node+0x17b/0x360 [ 369.860248][T12306] ? __kmem_cache_free+0xba/0x1f0 [ 369.865365][T12306] pkcs7_digest+0xfb/0x8a0 [ 369.869847][T12306] ? pkcs7_get_digest+0x200/0x200 [ 369.874888][T12306] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 369.880895][T12306] pkcs7_verify+0x1df/0x1340 [ 369.885537][T12306] ? kasan_quarantine_put+0xd8/0x220 [ 369.890870][T12306] ? lockdep_hardirqs_on+0x98/0x150 [ 369.896101][T12306] verify_pkcs7_message_sig+0xf8/0x2b0 [ 369.901611][T12306] ? pkcs7_preparse+0xc0/0xc0 [ 369.906350][T12306] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 369.913800][T12306] ? pkcs7_parse_message+0x4c6/0x520 [ 369.919137][T12306] ? pkcs7_parse_message+0x4c6/0x520 [ 369.924454][T12306] ? pkcs7_preparse+0xc0/0xc0 [ 369.929150][T12306] verify_pkcs7_signature+0x6a/0x90 [ 369.934689][T12306] pkcs7_preparse+0x8b/0xc0 [ 369.939313][T12306] ? pkcs7_preparse+0xc0/0xc0 [ 369.944105][T12306] __key_create_or_update+0x3a6/0xa60 [ 369.949604][T12306] ? key_create_or_update+0x60/0x60 [ 369.954827][T12306] ? bpf_lsm_key_permission+0x9/0x10 [ 369.960148][T12306] ? lookup_user_key+0xb66/0x1140 [ 369.965287][T12306] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 369.971383][T12306] key_create_or_update+0x42/0x60 [ 369.976719][T12306] __se_sys_add_key+0x34f/0x410 [ 369.981598][T12306] ? __x64_sys_add_key+0xc0/0xc0 [ 369.986561][T12306] ? lockdep_hardirqs_on+0x98/0x150 [ 369.991779][T12306] ? __x64_sys_add_key+0x20/0xc0 [ 369.996743][T12306] do_syscall_64+0x55/0xb0 [ 370.001260][T12306] ? clear_bhb_loop+0x40/0x90 [ 370.005950][T12306] ? clear_bhb_loop+0x40/0x90 [ 370.010646][T12306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.016568][T12306] RIP: 0033:0x7f67e7d9e559 [ 370.021085][T12306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.041166][T12306] RSP: 002b:00007f67e8cf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 370.049614][T12306] RAX: ffffffffffffffda RBX: 00007f67e8025fa0 RCX: 00007f67e7d9e559 [ 370.057609][T12306] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 370.065738][T12306] RBP: 00007f67e7e35ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 370.073724][T12306] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 370.081802][T12306] R13: 00007f67e8026038 R14: 00007f67e8025fa0 R15: 00007ffc4a0e8868 [ 370.089977][T12306] [ 370.193065][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.367964][T12312] FAULT_INJECTION: forcing a failure. [ 370.367964][T12312] name failslab, interval 1, probability 0, space 0, times 0 [ 370.381551][T12310] loop4: detected capacity change from 0 to 1024 [ 370.391933][T12310] EXT4-fs: Ignoring removed nobh option [ 370.401303][T12312] CPU: 0 PID: 12312 Comm: syz.1.2228 Not tainted syzkaller #0 [ 370.408901][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 370.419003][T12312] Call Trace: [ 370.422321][T12312] [ 370.425292][T12312] dump_stack_lvl+0x18c/0x250 [ 370.430025][T12312] ? show_regs_print_info+0x20/0x20 [ 370.435348][T12312] ? load_image+0x420/0x420 [ 370.439902][T12312] ? __might_sleep+0xe0/0xe0 [ 370.444547][T12312] ? __lock_acquire+0x7eb0/0x7eb0 [ 370.449718][T12312] should_fail_ex+0x394/0x4c0 [ 370.454456][T12312] should_failslab+0x9/0x20 [ 370.459016][T12312] slab_pre_alloc_hook+0x59/0x300 [ 370.464096][T12312] kmem_cache_alloc+0x5a/0x2c0 [ 370.468925][T12312] ? copy_sighand+0x50/0x220 [ 370.473575][T12312] copy_sighand+0x50/0x220 [ 370.478043][T12312] copy_process+0x1629/0x3da0 [ 370.483036][T12312] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 370.489178][T12312] ? copy_process+0x98e/0x3da0 [ 370.494008][T12312] ? __pidfd_prepare+0x140/0x140 [ 370.499025][T12312] ? wake_up_q+0xca/0x100 [ 370.499685][T12310] EXT4-fs: Ignoring removed bh option [ 370.503560][T12312] kernel_clone+0x24b/0x8a0 [ 370.503596][T12312] ? futex_wake_mark+0x150/0x150 [ 370.503623][T12312] ? create_io_thread+0x190/0x190 [ 370.503657][T12312] ? do_futex+0x35d/0x3e0 [ 370.503684][T12312] __x64_sys_clone+0x1b7/0x230 [ 370.503713][T12312] ? __ia32_sys_vfork+0x140/0x140 [ 370.521220][T12314] loop3: detected capacity change from 0 to 1024 [ 370.524530][T12312] ? lock_chain_count+0x20/0x20 [ 370.549926][T12312] ? lockdep_hardirqs_on+0x98/0x150 [ 370.555260][T12312] do_syscall_64+0x55/0xb0 [ 370.559707][T12312] ? clear_bhb_loop+0x40/0x90 [ 370.564414][T12312] ? clear_bhb_loop+0x40/0x90 [ 370.569294][T12312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.575299][T12312] RIP: 0033:0x7f67e7d9e559 [ 370.579831][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.599478][T12312] RSP: 002b:00007f67e8cf6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 370.608004][T12312] RAX: ffffffffffffffda RBX: 00007f67e8025fa0 RCX: 00007f67e7d9e559 [ 370.616104][T12312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.624169][T12312] RBP: 00007f67e7e35ab8 R08: 0000200000000300 R09: 0000200000000300 [ 370.632489][T12312] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 370.640617][T12312] R13: 00007f67e8026038 R14: 00007f67e8025fa0 R15: 00007ffc4a0e8868 [ 370.648728][T12312] [ 370.663824][T12314] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 370.672090][T12310] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 370.718518][T12319] loop5: detected capacity change from 0 to 512 [ 370.745382][T12314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.795679][T12319] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2230: invalid indirect mapped block 11 (level 0) [ 370.830491][T12310] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 370.838796][T12310] System zones: 0-1, 3-12 [ 370.846388][T12310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.910982][T12319] EXT4-fs (loop5): Remounting filesystem read-only [ 370.951342][T12319] EXT4-fs (loop5): 1 truncate cleaned up [ 370.956077][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.959350][T12319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.987467][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.141012][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.233750][T12330] FAULT_INJECTION: forcing a failure. [ 371.233750][T12330] name failslab, interval 1, probability 0, space 0, times 0 [ 371.280679][T12330] CPU: 1 PID: 12330 Comm: syz.1.2234 Not tainted syzkaller #0 [ 371.288290][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 371.298397][T12330] Call Trace: [ 371.301813][T12330] [ 371.304806][T12330] dump_stack_lvl+0x18c/0x250 [ 371.309730][T12330] ? show_regs_print_info+0x20/0x20 [ 371.315073][T12330] ? load_image+0x420/0x420 [ 371.319847][T12330] ? __lock_acquire+0x7eb0/0x7eb0 [ 371.325219][T12330] should_fail_ex+0x394/0x4c0 [ 371.330135][T12330] should_failslab+0x9/0x20 [ 371.334777][T12330] slab_pre_alloc_hook+0x59/0x300 [ 371.339896][T12330] ? __up_read+0x2b8/0x6b0 [ 371.344447][T12330] ? crypto_create_tfm_node+0x77/0x380 [ 371.350032][T12330] ? crypto_create_tfm_node+0x77/0x380 [ 371.355549][T12330] __kmem_cache_alloc_node+0x53/0x250 [ 371.361008][T12330] ? crypto_create_tfm_node+0x77/0x380 [ 371.366513][T12330] __kmalloc_node+0xa6/0x240 [ 371.371249][T12330] crypto_create_tfm_node+0x77/0x380 [ 371.376866][T12330] ? crypto_alg_mod_lookup+0x1ad/0x570 [ 371.382477][T12330] crypto_alloc_tfm_node+0x17b/0x360 [ 371.387834][T12330] ? __kmem_cache_free+0xba/0x1f0 [ 371.392920][T12330] pkcs7_digest+0xfb/0x8a0 [ 371.397673][T12330] ? pkcs7_get_digest+0x200/0x200 [ 371.402718][T12330] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 371.408982][T12330] pkcs7_verify+0x1df/0x1340 [ 371.413586][T12330] ? kasan_quarantine_put+0xd8/0x220 [ 371.418990][T12330] ? lockdep_hardirqs_on+0x98/0x150 [ 371.424330][T12330] verify_pkcs7_message_sig+0xf8/0x2b0 [ 371.431036][T12330] ? pkcs7_preparse+0xc0/0xc0 [ 371.435729][T12330] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 371.443131][T12330] ? pkcs7_parse_message+0x4c6/0x520 [ 371.448523][T12330] ? pkcs7_parse_message+0x4c6/0x520 [ 371.453914][T12330] ? pkcs7_preparse+0xc0/0xc0 [ 371.458883][T12330] verify_pkcs7_signature+0x6a/0x90 [ 371.464123][T12330] pkcs7_preparse+0x8b/0xc0 [ 371.468637][T12330] ? pkcs7_preparse+0xc0/0xc0 [ 371.473388][T12330] __key_create_or_update+0x3a6/0xa60 [ 371.478876][T12330] ? key_create_or_update+0x60/0x60 [ 371.484262][T12330] ? bpf_lsm_key_permission+0x9/0x10 [ 371.489578][T12330] ? lookup_user_key+0xb66/0x1140 [ 371.494733][T12330] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 371.501392][T12330] key_create_or_update+0x42/0x60 [ 371.507171][T12330] __se_sys_add_key+0x34f/0x410 [ 371.512248][T12330] ? __x64_sys_add_key+0xc0/0xc0 [ 371.517312][T12330] ? lockdep_hardirqs_on+0x98/0x150 [ 371.522617][T12330] ? __x64_sys_add_key+0x20/0xc0 [ 371.527581][T12330] do_syscall_64+0x55/0xb0 [ 371.532014][T12330] ? clear_bhb_loop+0x40/0x90 [ 371.537256][T12330] ? clear_bhb_loop+0x40/0x90 [ 371.541955][T12330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.547878][T12330] RIP: 0033:0x7f67e7d9e559 [ 371.552396][T12330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.572130][T12330] RSP: 002b:00007f67e8cf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 371.580658][T12330] RAX: ffffffffffffffda RBX: 00007f67e8025fa0 RCX: 00007f67e7d9e559 [ 371.589000][T12330] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 371.597189][T12330] RBP: 00007f67e7e35ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 371.605178][T12330] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 371.613251][T12330] R13: 00007f67e8026038 R14: 00007f67e8025fa0 R15: 00007ffc4a0e8868 [ 371.621276][T12330] [ 371.677288][T12337] warning: `syz.3.2237' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 371.694941][T12335] loop5: detected capacity change from 0 to 512 [ 371.740639][T12337] FAULT_INJECTION: forcing a failure. [ 371.740639][T12337] name failslab, interval 1, probability 0, space 0, times 0 [ 371.755313][T12337] CPU: 0 PID: 12337 Comm: syz.3.2237 Not tainted syzkaller #0 [ 371.763017][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 371.773285][T12337] Call Trace: [ 371.776586][T12337] [ 371.779537][T12337] dump_stack_lvl+0x18c/0x250 [ 371.784257][T12337] ? show_regs_print_info+0x20/0x20 [ 371.789837][T12337] ? load_image+0x420/0x420 [ 371.794470][T12337] ? __might_sleep+0xe0/0xe0 [ 371.799097][T12337] ? __lock_acquire+0x7eb0/0x7eb0 [ 371.804231][T12337] ? llist_add_batch+0x10f/0x1f0 [ 371.809190][T12337] should_fail_ex+0x394/0x4c0 [ 371.813910][T12337] should_failslab+0x9/0x20 [ 371.818520][T12337] slab_pre_alloc_hook+0x59/0x300 [ 371.823569][T12337] ? ioctl_standard_iw_point+0x52d/0xd50 [ 371.829309][T12337] ? ioctl_standard_iw_point+0x52d/0xd50 [ 371.834959][T12337] __kmem_cache_alloc_node+0x53/0x250 [ 371.840539][T12337] ? ioctl_standard_iw_point+0x52d/0xd50 [ 371.846190][T12337] __kmalloc+0xa7/0x240 [ 371.850383][T12337] ioctl_standard_iw_point+0x52d/0xd50 [ 371.855876][T12337] ? cfg80211_wext_giwap+0x120/0x120 [ 371.861180][T12337] ? iw_handler_get_iwstats+0x110/0x110 [ 371.866931][T12337] ? _printk+0xde/0x130 [ 371.871196][T12337] ? __lock_acquire+0x7eb0/0x7eb0 [ 371.876340][T12337] ? load_image+0x420/0x420 [ 371.880870][T12337] ioctl_standard_call+0xae/0x250 [ 371.885941][T12337] ? cfg80211_wext_giwap+0x120/0x120 [ 371.891248][T12337] ? cfg80211_wext_giwap+0x120/0x120 [ 371.896569][T12337] wext_ioctl_dispatch+0x51a/0x650 [ 371.901800][T12337] ? __lock_acquire+0x7eb0/0x7eb0 [ 371.906958][T12337] ? wext_ioctl_dispatch+0x650/0x650 [ 371.912260][T12337] ? iw_handler_get_private+0x1f0/0x1f0 [ 371.917856][T12337] ? wext_handle_ioctl+0x1e0/0x1e0 [ 371.923162][T12337] ? __might_fault+0xaa/0x120 [ 371.928050][T12337] ? __might_fault+0xc6/0x120 [ 371.932836][T12337] ? __might_fault+0xaa/0x120 [ 371.937533][T12337] wext_handle_ioctl+0x118/0x1e0 [ 371.942594][T12337] ? call_commit_handler+0xf0/0xf0 [ 371.947827][T12337] sock_ioctl+0x15d/0x7e0 [ 371.952597][T12337] ? sock_poll+0x3e0/0x3e0 [ 371.957041][T12337] ? bpf_lsm_file_ioctl+0x9/0x10 [ 371.962170][T12337] ? security_file_ioctl+0x80/0xa0 [ 371.967577][T12337] ? sock_poll+0x3e0/0x3e0 [ 371.972014][T12337] __se_sys_ioctl+0xfd/0x170 [ 371.976744][T12337] do_syscall_64+0x55/0xb0 [ 371.981268][T12337] ? clear_bhb_loop+0x40/0x90 [ 371.986048][T12337] ? clear_bhb_loop+0x40/0x90 [ 371.990921][T12337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.996924][T12337] RIP: 0033:0x7f114479e559 [ 372.001444][T12337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.021499][T12337] RSP: 002b:00007f11455c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.030123][T12337] RAX: ffffffffffffffda RBX: 00007f1144a25fa0 RCX: 00007f114479e559 [ 372.038106][T12337] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003 [ 372.046091][T12337] RBP: 00007f1144835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 372.054073][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.062064][T12337] R13: 00007f1144a26038 R14: 00007f1144a25fa0 R15: 00007ffda5579248 [ 372.070069][T12337] [ 372.107029][T12335] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.2235: inode has both inline data and extents flags [ 372.121801][T12335] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2235: couldn't read orphan inode 15 (err -117) [ 372.142036][T12335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.243549][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.311170][T12343] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2238'. [ 372.450842][T12349] loop5: detected capacity change from 0 to 1024 [ 372.477609][T12349] EXT4-fs: Ignoring removed nobh option [ 372.498539][T12349] EXT4-fs: Ignoring removed bh option [ 372.535763][T12349] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 372.590180][T12349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 372.598787][T12349] System zones: 0-1, 3-12 [ 372.613220][T12349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.797018][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.921711][T12363] FAULT_INJECTION: forcing a failure. [ 372.921711][T12363] name failslab, interval 1, probability 0, space 0, times 0 [ 372.930427][T12361] loop3: detected capacity change from 0 to 512 [ 372.960995][T12363] CPU: 0 PID: 12363 Comm: syz.1.2247 Not tainted syzkaller #0 [ 372.968560][T12363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 372.979015][T12363] Call Trace: [ 372.982617][T12363] [ 372.985678][T12363] dump_stack_lvl+0x18c/0x250 [ 372.990425][T12363] ? show_regs_print_info+0x20/0x20 [ 372.996290][T12363] ? load_image+0x420/0x420 [ 373.000861][T12363] ? __might_sleep+0xe0/0xe0 [ 373.006660][T12363] ? __lock_acquire+0x7eb0/0x7eb0 [ 373.012414][T12363] should_fail_ex+0x394/0x4c0 [ 373.017346][T12363] should_failslab+0x9/0x20 [ 373.022003][T12363] slab_pre_alloc_hook+0x59/0x300 [ 373.027283][T12363] ? pkcs7_digest+0x1c7/0x8a0 [ 373.032199][T12363] ? pkcs7_digest+0x1c7/0x8a0 [ 373.036923][T12363] __kmem_cache_alloc_node+0x53/0x250 [ 373.042380][T12363] ? pkcs7_digest+0x1c7/0x8a0 [ 373.047128][T12363] __kmalloc+0xa7/0x240 [ 373.051355][T12363] pkcs7_digest+0x1c7/0x8a0 [ 373.056010][T12363] ? mark_lock+0x94/0x320 [ 373.060396][T12363] ? pkcs7_get_digest+0x200/0x200 [ 373.065482][T12363] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 373.071538][T12363] pkcs7_verify+0x1df/0x1340 [ 373.076189][T12363] ? kasan_quarantine_put+0xd8/0x220 [ 373.081886][T12363] ? lockdep_hardirqs_on+0x98/0x150 [ 373.087134][T12363] verify_pkcs7_message_sig+0xf8/0x2b0 [ 373.092629][T12363] ? pkcs7_preparse+0xc0/0xc0 [ 373.097538][T12363] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 373.105209][T12363] ? pkcs7_parse_message+0x4c6/0x520 [ 373.110811][T12363] ? pkcs7_parse_message+0x4c6/0x520 [ 373.116410][T12363] ? pkcs7_preparse+0xc0/0xc0 [ 373.121193][T12363] verify_pkcs7_signature+0x6a/0x90 [ 373.126449][T12363] pkcs7_preparse+0x8b/0xc0 [ 373.130976][T12363] ? pkcs7_preparse+0xc0/0xc0 [ 373.135774][T12363] __key_create_or_update+0x3a6/0xa60 [ 373.141242][T12363] ? key_create_or_update+0x60/0x60 [ 373.146577][T12363] ? bpf_lsm_key_permission+0x9/0x10 [ 373.151926][T12363] ? lookup_user_key+0xb66/0x1140 [ 373.157115][T12363] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 373.163220][T12363] key_create_or_update+0x42/0x60 [ 373.168449][T12363] __se_sys_add_key+0x34f/0x410 [ 373.173370][T12363] ? __x64_sys_add_key+0xc0/0xc0 [ 373.178362][T12363] ? lockdep_hardirqs_on+0x98/0x150 [ 373.183583][T12363] ? __x64_sys_add_key+0x20/0xc0 [ 373.188596][T12363] do_syscall_64+0x55/0xb0 [ 373.193063][T12363] ? clear_bhb_loop+0x40/0x90 [ 373.197768][T12363] ? clear_bhb_loop+0x40/0x90 [ 373.202492][T12363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.208530][T12363] RIP: 0033:0x7f67e7d9e559 [ 373.213010][T12363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.232787][T12363] RSP: 002b:00007f67e8cf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 373.241257][T12363] RAX: ffffffffffffffda RBX: 00007f67e8025fa0 RCX: 00007f67e7d9e559 [ 373.249315][T12363] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 373.257324][T12363] RBP: 00007f67e7e35ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 373.265433][T12363] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 373.273546][T12363] R13: 00007f67e8026038 R14: 00007f67e8025fa0 R15: 00007ffc4a0e8868 [ 373.281911][T12363] [ 373.358630][T12361] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.2248: inode has both inline data and extents flags [ 373.430535][T12361] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2248: couldn't read orphan inode 15 (err -117) [ 373.464761][T12361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.592671][T12370] loop5: detected capacity change from 0 to 1024 [ 373.598531][T12372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2250'. [ 373.615084][T12370] EXT4-fs: Ignoring removed bh option [ 373.616237][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.631388][T12370] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 373.702228][T12370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.928674][T12377] FAULT_INJECTION: forcing a failure. [ 373.928674][T12377] name failslab, interval 1, probability 0, space 0, times 0 [ 373.965710][T12377] CPU: 1 PID: 12377 Comm: syz.1.2251 Not tainted syzkaller #0 [ 373.973362][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 373.984025][T12377] Call Trace: [ 373.987345][T12377] [ 373.990315][T12377] dump_stack_lvl+0x18c/0x250 [ 373.995054][T12377] ? show_regs_print_info+0x20/0x20 [ 374.000384][T12377] ? load_image+0x420/0x420 [ 374.005159][T12377] ? __might_sleep+0xe0/0xe0 [ 374.009908][T12377] ? __lock_acquire+0x7eb0/0x7eb0 [ 374.014984][T12377] ? __kasan_kmalloc+0x8f/0xa0 [ 374.019902][T12377] should_fail_ex+0x394/0x4c0 [ 374.024654][T12377] should_failslab+0x9/0x20 [ 374.029215][T12377] slab_pre_alloc_hook+0x59/0x300 [ 374.034390][T12377] kmem_cache_alloc_node+0x5e/0x310 [ 374.039646][T12377] ? __alloc_skb+0x103/0x2c0 [ 374.044318][T12377] __alloc_skb+0x103/0x2c0 [ 374.049085][T12377] cfg80211_del_sta_sinfo+0x1d1/0x560 [ 374.054605][T12377] ? nl80211_send_station+0x36b0/0x36b0 [ 374.060235][T12377] ? trace_drv_return_int+0x7e/0x1c0 [ 374.065662][T12377] ? drv_sta_state+0x29e/0x1280 [ 374.070568][T12377] __sta_info_destroy_part2+0x30b/0x410 [ 374.076263][T12377] __sta_info_flush+0x3e6/0x4f0 [ 374.081195][T12377] ? sta_info_stop+0x40/0x40 [ 374.085808][T12377] ? __local_bh_enable_ip+0x13a/0x1c0 [ 374.091250][T12377] ? _local_bh_enable+0xa0/0xa0 [ 374.096177][T12377] ? do_raw_spin_unlock+0x121/0x230 [ 374.101535][T12377] ieee80211_ibss_disconnect+0x25a/0x6f0 [ 374.107273][T12377] ieee80211_ibss_leave+0x25/0x140 [ 374.112513][T12377] __cfg80211_leave_ibss+0x1d2/0x400 [ 374.117917][T12377] cfg80211_ibss_wext_siwessid+0x163/0x390 [ 374.123943][T12377] cfg80211_wext_siwessid+0xd8/0x120 [ 374.129288][T12377] ioctl_standard_iw_point+0x827/0xd50 [ 374.134823][T12377] ? cfg80211_wext_giwap+0x120/0x120 [ 374.140249][T12377] ? iw_handler_get_iwstats+0x110/0x110 [ 374.145858][T12377] ? wext_ioctl_dispatch+0x106/0x650 [ 374.151199][T12377] ? mutex_lock_nested+0x20/0x20 [ 374.156302][T12377] ? apparmor_capable+0x137/0x1a0 [ 374.161415][T12377] ioctl_standard_call+0xae/0x250 [ 374.166512][T12377] ? cfg80211_wext_giwap+0x120/0x120 [ 374.171861][T12377] ? cfg80211_wext_giwap+0x120/0x120 [ 374.177215][T12377] wext_ioctl_dispatch+0x51a/0x650 [ 374.182398][T12377] ? __lock_acquire+0x7eb0/0x7eb0 [ 374.187570][T12377] ? wext_ioctl_dispatch+0x650/0x650 [ 374.192906][T12377] ? iw_handler_get_private+0x1f0/0x1f0 [ 374.198523][T12377] ? wext_handle_ioctl+0x1e0/0x1e0 [ 374.203697][T12377] ? __might_fault+0xaa/0x120 [ 374.208439][T12377] ? __might_fault+0xc6/0x120 [ 374.213250][T12377] ? __might_fault+0xaa/0x120 [ 374.218035][T12377] wext_handle_ioctl+0x118/0x1e0 [ 374.223059][T12377] ? call_commit_handler+0xf0/0xf0 [ 374.228257][T12377] sock_ioctl+0x15d/0x7e0 [ 374.232648][T12377] ? sock_poll+0x3e0/0x3e0 [ 374.237135][T12377] ? bpf_lsm_file_ioctl+0x9/0x10 [ 374.242142][T12377] ? security_file_ioctl+0x80/0xa0 [ 374.247313][T12377] ? sock_poll+0x3e0/0x3e0 [ 374.251894][T12377] __se_sys_ioctl+0xfd/0x170 [ 374.256567][T12377] do_syscall_64+0x55/0xb0 [ 374.261035][T12377] ? clear_bhb_loop+0x40/0x90 [ 374.265894][T12377] ? clear_bhb_loop+0x40/0x90 [ 374.270719][T12377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.276678][T12377] RIP: 0033:0x7f67e7d9e559 [ 374.281152][T12377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.300999][T12377] RSP: 002b:00007f67e8cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.309568][T12377] RAX: ffffffffffffffda RBX: 00007f67e8025fa0 RCX: 00007f67e7d9e559 [ 374.317592][T12377] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003 [ 374.325625][T12377] RBP: 00007f67e7e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 374.333662][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.341869][T12377] R13: 00007f67e8026038 R14: 00007f67e8025fa0 R15: 00007ffc4a0e8868 [ 374.349925][T12377] [ 374.690747][T12388] loop3: detected capacity change from 0 to 1024 [ 374.711689][T12388] EXT4-fs: Ignoring removed nobh option [ 374.763777][T12388] EXT4-fs: Ignoring removed bh option [ 374.848628][T12388] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 374.929958][T12388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 374.959684][T12388] System zones: 0-1, 3-12 [ 375.006266][T12388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.054386][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.147841][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.191105][T12396] FAULT_INJECTION: forcing a failure. [ 375.191105][T12396] name failslab, interval 1, probability 0, space 0, times 0 [ 375.219021][T12396] CPU: 1 PID: 12396 Comm: syz.4.2258 Not tainted syzkaller #0 [ 375.226573][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 375.236849][T12396] Call Trace: [ 375.240176][T12396] [ 375.243156][T12396] dump_stack_lvl+0x18c/0x250 [ 375.247894][T12396] ? show_regs_print_info+0x20/0x20 [ 375.253146][T12396] ? load_image+0x420/0x420 [ 375.257721][T12396] ? __might_sleep+0xe0/0xe0 [ 375.262462][T12396] ? __lock_acquire+0x7eb0/0x7eb0 [ 375.267717][T12396] should_fail_ex+0x394/0x4c0 [ 375.272543][T12396] should_failslab+0x9/0x20 [ 375.277108][T12396] slab_pre_alloc_hook+0x59/0x300 [ 375.282186][T12396] ? pkcs7_digest+0x1c7/0x8a0 [ 375.286915][T12396] ? pkcs7_digest+0x1c7/0x8a0 [ 375.291729][T12396] __kmem_cache_alloc_node+0x53/0x250 [ 375.297276][T12396] ? pkcs7_digest+0x1c7/0x8a0 [ 375.301998][T12396] __kmalloc+0xa7/0x240 [ 375.306399][T12396] pkcs7_digest+0x1c7/0x8a0 [ 375.311131][T12396] ? mark_lock+0x94/0x320 [ 375.315642][T12396] ? pkcs7_get_digest+0x200/0x200 [ 375.320717][T12396] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 375.325845][T12402] loop3: detected capacity change from 0 to 512 [ 375.326741][T12396] pkcs7_verify+0x1df/0x1340 [ 375.337646][T12396] ? kasan_quarantine_put+0xd8/0x220 [ 375.337713][T12404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2260'. [ 375.342970][T12396] ? lockdep_hardirqs_on+0x98/0x150 [ 375.343008][T12396] verify_pkcs7_message_sig+0xf8/0x2b0 [ 375.343044][T12396] ? pkcs7_preparse+0xc0/0xc0 [ 375.367570][T12396] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 375.375010][T12396] ? pkcs7_parse_message+0x4c6/0x520 [ 375.380450][T12396] ? pkcs7_parse_message+0x4c6/0x520 [ 375.385884][T12396] ? pkcs7_preparse+0xc0/0xc0 [ 375.390608][T12396] verify_pkcs7_signature+0x6a/0x90 [ 375.395871][T12396] pkcs7_preparse+0x8b/0xc0 [ 375.400436][T12396] ? pkcs7_preparse+0xc0/0xc0 [ 375.405196][T12396] __key_create_or_update+0x3a6/0xa60 [ 375.410649][T12396] ? key_create_or_update+0x60/0x60 [ 375.415996][T12396] ? bpf_lsm_key_permission+0x9/0x10 [ 375.421429][T12396] ? lookup_user_key+0xb66/0x1140 [ 375.426518][T12396] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 375.432555][T12396] key_create_or_update+0x42/0x60 [ 375.437652][T12396] __se_sys_add_key+0x34f/0x410 [ 375.442566][T12396] ? __x64_sys_add_key+0xc0/0xc0 [ 375.447561][T12396] ? lockdep_hardirqs_on+0x98/0x150 [ 375.452804][T12396] ? __x64_sys_add_key+0x20/0xc0 [ 375.457793][T12396] do_syscall_64+0x55/0xb0 [ 375.462275][T12396] ? clear_bhb_loop+0x40/0x90 [ 375.466996][T12396] ? clear_bhb_loop+0x40/0x90 [ 375.471741][T12396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.477864][T12396] RIP: 0033:0x7feac5d9e559 [ 375.482316][T12396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.502541][T12396] RSP: 002b:00007feac6d14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 375.511114][T12396] RAX: ffffffffffffffda RBX: 00007feac6025fa0 RCX: 00007feac5d9e559 [ 375.519145][T12396] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 375.527329][T12396] RBP: 00007feac5e35ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 375.535449][T12396] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 375.543731][T12396] R13: 00007feac6026038 R14: 00007feac6025fa0 R15: 00007ffcff6b5bc8 [ 375.551874][T12396] [ 375.566196][T12402] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.2259: inode has both inline data and extents flags [ 375.584209][T12402] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2259: couldn't read orphan inode 15 (err -117) [ 375.617252][T12413] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2261'. [ 375.639250][T12402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.743611][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.802513][T12417] loop4: detected capacity change from 0 to 1024 [ 375.848947][T12417] EXT4-fs: Ignoring removed nobh option [ 375.871204][T12417] EXT4-fs: Ignoring removed bh option [ 375.908093][T12417] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 375.978354][T12417] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 376.007075][T12417] System zones: 0-1, 3-12 [ 376.022142][T12417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.026984][T12424] loop3: detected capacity change from 0 to 1024 [ 376.046916][T12424] EXT4-fs: Ignoring removed bh option [ 376.084396][T12424] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 376.140382][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 376.269178][T12424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.269509][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.748680][T12439] loop5: detected capacity change from 0 to 1024 [ 377.792538][T12439] journal_path: Lookup failure for './file1' [ 377.811586][T12439] EXT4-fs: error: could not find journal device path [ 378.399686][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.422435][T12449] FAULT_INJECTION: forcing a failure. [ 378.422435][T12449] name failslab, interval 1, probability 0, space 0, times 0 [ 378.450333][T12449] CPU: 0 PID: 12449 Comm: syz.1.2271 Not tainted syzkaller #0 [ 378.457980][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 378.468096][T12449] Call Trace: [ 378.471462][T12449] [ 378.474429][T12449] dump_stack_lvl+0x18c/0x250 [ 378.479156][T12449] ? show_regs_print_info+0x20/0x20 [ 378.484494][T12449] ? load_image+0x420/0x420 [ 378.489066][T12449] ? __might_sleep+0xe0/0xe0 [ 378.493992][T12449] ? __lock_acquire+0x7eb0/0x7eb0 [ 378.499165][T12449] should_fail_ex+0x394/0x4c0 [ 378.503922][T12449] should_failslab+0x9/0x20 [ 378.508573][T12449] slab_pre_alloc_hook+0x59/0x300 [ 378.513691][T12449] ? pkcs7_digest+0x1c7/0x8a0 [ 378.518411][T12449] ? pkcs7_digest+0x1c7/0x8a0 [ 378.523427][T12449] __kmem_cache_alloc_node+0x53/0x250 [ 378.528870][T12449] ? pkcs7_digest+0x1c7/0x8a0 [ 378.533600][T12449] __kmalloc+0xa7/0x240 [ 378.537823][T12449] pkcs7_digest+0x1c7/0x8a0 [ 378.542393][T12449] ? pkcs7_get_digest+0x200/0x200 [ 378.545264][T12454] loop4: detected capacity change from 0 to 512 [ 378.547449][T12449] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 378.547490][T12449] pkcs7_verify+0x1df/0x1340 [ 378.547516][T12449] ? kasan_quarantine_put+0xd8/0x220 [ 378.547547][T12449] ? lockdep_hardirqs_on+0x98/0x150 [ 378.547580][T12449] verify_pkcs7_message_sig+0xf8/0x2b0 [ 378.547614][T12449] ? pkcs7_preparse+0xc0/0xc0 [ 378.547636][T12449] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 378.547670][T12449] ? pkcs7_parse_message+0x4c6/0x520 [ 378.547701][T12449] ? pkcs7_parse_message+0x4c6/0x520 [ 378.547729][T12449] ? pkcs7_preparse+0xc0/0xc0 [ 378.547749][T12449] verify_pkcs7_signature+0x6a/0x90 [ 378.547787][T12449] pkcs7_preparse+0x8b/0xc0 [ 378.547807][T12449] ? pkcs7_preparse+0xc0/0xc0 [ 378.547832][T12449] __key_create_or_update+0x3a6/0xa60 [ 378.547870][T12449] ? key_create_or_update+0x60/0x60 [ 378.547892][T12449] ? bpf_lsm_key_permission+0x9/0x10 [ 378.547928][T12449] ? lookup_user_key+0xb66/0x1140 [ 378.547967][T12449] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 378.548001][T12449] key_create_or_update+0x42/0x60 [ 378.548037][T12449] __se_sys_add_key+0x34f/0x410 [ 378.548073][T12449] ? __x64_sys_add_key+0xc0/0xc0 [ 378.548113][T12449] ? lockdep_hardirqs_on+0x98/0x150 [ 378.548137][T12449] ? __x64_sys_add_key+0x20/0xc0 [ 378.548172][T12449] do_syscall_64+0x55/0xb0 [ 378.548191][T12449] ? clear_bhb_loop+0x40/0x90 [ 378.548214][T12449] ? clear_bhb_loop+0x40/0x90 [ 378.548238][T12449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.548269][T12449] RIP: 0033:0x7f67e7d9e559 [ 378.548291][T12449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.548310][T12449] RSP: 002b:00007f67e8cf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 378.548337][T12449] RAX: ffffffffffffffda RBX: 00007f67e8025fa0 RCX: 00007f67e7d9e559 [ 378.548363][T12449] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 378.548379][T12449] RBP: 00007f67e7e35ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 378.548394][T12449] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 378.548407][T12449] R13: 00007f67e8026038 R14: 00007f67e8025fa0 R15: 00007ffc4a0e8868 [ 378.548440][T12449] [ 378.819520][T12454] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.2273: inode has both inline data and extents flags [ 378.886307][T12454] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2273: couldn't read orphan inode 15 (err -117) [ 378.954056][T12454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.111037][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.117432][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.163521][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.301986][T12471] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2279'. [ 379.551626][T12479] FAULT_INJECTION: forcing a failure. [ 379.551626][T12479] name failslab, interval 1, probability 0, space 0, times 0 [ 379.600427][T12479] CPU: 1 PID: 12479 Comm: syz.5.2283 Not tainted syzkaller #0 [ 379.607979][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 379.618178][T12479] Call Trace: [ 379.621512][T12479] [ 379.624493][T12479] dump_stack_lvl+0x18c/0x250 [ 379.629354][T12479] ? show_regs_print_info+0x20/0x20 [ 379.634695][T12479] ? load_image+0x420/0x420 [ 379.639355][T12479] ? __might_sleep+0xe0/0xe0 [ 379.644003][T12479] ? __lock_acquire+0x7eb0/0x7eb0 [ 379.649081][T12479] should_fail_ex+0x394/0x4c0 [ 379.653822][T12479] should_failslab+0x9/0x20 [ 379.658371][T12479] slab_pre_alloc_hook+0x59/0x300 [ 379.663418][T12479] ? pkcs7_digest+0x1c7/0x8a0 [ 379.668110][T12479] ? pkcs7_digest+0x1c7/0x8a0 [ 379.672802][T12479] __kmem_cache_alloc_node+0x53/0x250 [ 379.678201][T12479] ? pkcs7_digest+0x1c7/0x8a0 [ 379.682986][T12479] __kmalloc+0xa7/0x240 [ 379.687170][T12479] pkcs7_digest+0x1c7/0x8a0 [ 379.691786][T12479] ? mark_lock+0x94/0x320 [ 379.696135][T12479] ? pkcs7_get_digest+0x200/0x200 [ 379.701262][T12479] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 379.707299][T12479] pkcs7_verify+0x1df/0x1340 [ 379.712194][T12479] ? kasan_quarantine_put+0xd8/0x220 [ 379.717607][T12479] ? lockdep_hardirqs_on+0x98/0x150 [ 379.723093][T12479] verify_pkcs7_message_sig+0xf8/0x2b0 [ 379.728666][T12479] ? pkcs7_preparse+0xc0/0xc0 [ 379.733447][T12479] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 379.741015][T12479] ? pkcs7_parse_message+0x4c6/0x520 [ 379.746339][T12479] ? pkcs7_parse_message+0x4c6/0x520 [ 379.751646][T12479] ? pkcs7_preparse+0xc0/0xc0 [ 379.756337][T12479] verify_pkcs7_signature+0x6a/0x90 [ 379.761564][T12479] pkcs7_preparse+0x8b/0xc0 [ 379.766086][T12479] ? pkcs7_preparse+0xc0/0xc0 [ 379.770794][T12479] __key_create_or_update+0x3a6/0xa60 [ 379.776347][T12479] ? key_create_or_update+0x60/0x60 [ 379.781564][T12479] ? bpf_lsm_key_permission+0x9/0x10 [ 379.786969][T12479] ? lookup_user_key+0xb66/0x1140 [ 379.792017][T12479] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 379.798106][T12479] key_create_or_update+0x42/0x60 [ 379.803156][T12479] __se_sys_add_key+0x34f/0x410 [ 379.808041][T12479] ? __x64_sys_add_key+0xc0/0xc0 [ 379.813093][T12479] ? lockdep_hardirqs_on+0x98/0x150 [ 379.818310][T12479] ? __x64_sys_add_key+0x20/0xc0 [ 379.823268][T12479] do_syscall_64+0x55/0xb0 [ 379.827863][T12479] ? clear_bhb_loop+0x40/0x90 [ 379.832586][T12479] ? clear_bhb_loop+0x40/0x90 [ 379.837388][T12479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.843322][T12479] RIP: 0033:0x7f42f319e559 [ 379.847874][T12479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.867515][T12479] RSP: 002b:00007f42f40e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 379.875957][T12479] RAX: ffffffffffffffda RBX: 00007f42f3425fa0 RCX: 00007f42f319e559 [ 379.884213][T12479] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 379.892231][T12479] RBP: 00007f42f3235ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 379.900417][T12479] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 379.908416][T12479] R13: 00007f42f3426038 R14: 00007f42f3425fa0 R15: 00007fffa28167b8 [ 379.916506][T12479] [ 380.234659][T12489] loop3: detected capacity change from 0 to 512 [ 380.289069][T12489] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.2287: inode has both inline data and extents flags [ 380.304742][T12489] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2287: couldn't read orphan inode 15 (err -117) [ 380.319008][T12489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.485092][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.307165][T12503] loop4: detected capacity change from 0 to 1024 [ 381.539260][T12503] journal_path: Lookup failure for './file1' [ 381.586853][T12503] EXT4-fs: error: could not find journal device path [ 381.997947][T12516] FAULT_INJECTION: forcing a failure. [ 381.997947][T12516] name failslab, interval 1, probability 0, space 0, times 0 [ 382.016619][T12516] CPU: 1 PID: 12516 Comm: syz.5.2296 Not tainted syzkaller #0 [ 382.024371][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 382.034477][T12516] Call Trace: [ 382.037806][T12516] [ 382.040786][T12516] dump_stack_lvl+0x18c/0x250 [ 382.045538][T12516] ? show_regs_print_info+0x20/0x20 [ 382.051044][T12516] ? load_image+0x420/0x420 [ 382.055605][T12516] ? __might_sleep+0xe0/0xe0 [ 382.060434][T12516] ? __lock_acquire+0x7eb0/0x7eb0 [ 382.065619][T12516] should_fail_ex+0x394/0x4c0 [ 382.070364][T12516] should_failslab+0x9/0x20 [ 382.074929][T12516] slab_pre_alloc_hook+0x59/0x300 [ 382.080101][T12516] ? pkcs7_digest+0x1c7/0x8a0 [ 382.084833][T12516] ? pkcs7_digest+0x1c7/0x8a0 [ 382.089575][T12516] __kmem_cache_alloc_node+0x53/0x250 [ 382.095032][T12516] ? pkcs7_digest+0x1c7/0x8a0 [ 382.099763][T12516] __kmalloc+0xa7/0x240 [ 382.103989][T12516] pkcs7_digest+0x1c7/0x8a0 [ 382.108820][T12516] ? mark_lock+0x94/0x320 [ 382.113312][T12516] ? pkcs7_get_digest+0x200/0x200 [ 382.118472][T12516] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 382.124513][T12516] pkcs7_verify+0x1df/0x1340 [ 382.129251][T12516] ? kasan_quarantine_put+0xd8/0x220 [ 382.135112][T12516] ? lockdep_hardirqs_on+0x98/0x150 [ 382.140393][T12516] verify_pkcs7_message_sig+0xf8/0x2b0 [ 382.145925][T12516] ? pkcs7_preparse+0xc0/0xc0 [ 382.150808][T12516] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 382.158288][T12516] ? pkcs7_parse_message+0x4c6/0x520 [ 382.163634][T12516] ? pkcs7_parse_message+0x4c6/0x520 [ 382.169074][T12516] ? pkcs7_preparse+0xc0/0xc0 [ 382.173810][T12516] verify_pkcs7_signature+0x6a/0x90 [ 382.179070][T12516] pkcs7_preparse+0x8b/0xc0 [ 382.183614][T12516] ? pkcs7_preparse+0xc0/0xc0 [ 382.188342][T12516] __key_create_or_update+0x3a6/0xa60 [ 382.193860][T12516] ? key_create_or_update+0x60/0x60 [ 382.199106][T12516] ? bpf_lsm_key_permission+0x9/0x10 [ 382.204449][T12516] ? lookup_user_key+0xb66/0x1140 [ 382.209529][T12516] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 382.215572][T12516] key_create_or_update+0x42/0x60 [ 382.220654][T12516] __se_sys_add_key+0x34f/0x410 [ 382.225555][T12516] ? __x64_sys_add_key+0xc0/0xc0 [ 382.230646][T12516] ? lockdep_hardirqs_on+0x98/0x150 [ 382.236074][T12516] ? __x64_sys_add_key+0x20/0xc0 [ 382.241164][T12516] do_syscall_64+0x55/0xb0 [ 382.245620][T12516] ? clear_bhb_loop+0x40/0x90 [ 382.250329][T12516] ? clear_bhb_loop+0x40/0x90 [ 382.255045][T12516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.261171][T12516] RIP: 0033:0x7f42f319e559 [ 382.265712][T12516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.285454][T12516] RSP: 002b:00007f42f40e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 382.294097][T12516] RAX: ffffffffffffffda RBX: 00007f42f3425fa0 RCX: 00007f42f319e559 [ 382.302112][T12516] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 382.310134][T12516] RBP: 00007f42f3235ab8 R08: ffffffffffffffff R09: 0000000000000000 [ 382.318149][T12516] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 382.326254][T12516] R13: 00007f42f3426038 R14: 00007f42f3425fa0 R15: 00007fffa28167b8 [ 382.334296][T12516] [ 382.364324][T12521] loop3: detected capacity change from 0 to 1024 [ 382.376137][T12521] EXT4-fs: Ignoring removed nobh option [ 382.415475][T12522] loop4: detected capacity change from 0 to 512 [ 382.416545][T12521] EXT4-fs: Ignoring removed bh option [ 382.430123][T12521] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 382.493303][T12522] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.2299: inode has both inline data and extents flags [ 382.514879][T12521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 382.529816][T12521] System zones: 0-1, 3-12 [ 382.558873][T12522] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2299: couldn't read orphan inode 15 (err -117) [ 382.592170][T12521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.607320][T12522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.742301][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.762924][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.933612][T12534] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 382.940862][T12534] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 382.954055][T12539] vhci_hcd: xmit failed -107 [ 382.967947][T12534] vhci_hcd vhci_hcd.0: Device attached [ 382.978503][ T12] vhci_hcd: stop threads [ 382.995209][ T12] vhci_hcd: release socket [ 382.999806][ T12] vhci_hcd: disconnect device [ 383.168482][T12548] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2309'. [ 384.172333][T12563] loop1: detected capacity change from 0 to 512 [ 384.234665][T12563] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2312: inode has both inline data and extents flags [ 384.315606][T12563] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2312: couldn't read orphan inode 15 (err -117) [ 384.374212][T12563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.394833][T12567] loop3: detected capacity change from 0 to 1024 [ 384.451711][T12567] EXT4-fs: Ignoring removed nobh option [ 384.457470][T12567] EXT4-fs: Ignoring removed bh option [ 384.559129][T12567] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 384.685621][T12567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 384.697806][T12567] System zones: 0-1, 3-12 [ 384.712466][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.733380][T12567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.869921][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.072751][T12588] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2322'. [ 385.368618][T12593] loop1: detected capacity change from 0 to 512 [ 385.390372][T12593] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2325: inode has both inline data and extents flags [ 385.466608][T12593] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2325: couldn't read orphan inode 15 (err -117) [ 385.771998][T12593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.194940][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.360200][T12606] ip_tables: iptables: counters copy to user failed while replacing table [ 386.397178][T12607] loop3: detected capacity change from 0 to 1024 [ 386.456344][T12607] EXT4-fs: Ignoring removed nobh option [ 386.520892][T12607] EXT4-fs: Ignoring removed bh option [ 386.597619][T12607] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 386.645220][T12614] loop4: detected capacity change from 0 to 1024 [ 386.650497][T12607] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 386.658361][T12614] EXT4-fs: Ignoring removed bh option [ 386.711384][T12607] System zones: 0-1, 3-12 [ 386.717630][T12607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.765183][T12614] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 386.838205][T12614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.842829][T12621] loop5: detected capacity change from 0 to 1024 [ 386.858754][T12621] EXT4-fs: Ignoring removed bh option [ 386.916661][T12621] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 386.985403][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.027124][T12621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.878864][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.937816][T12640] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2335'. [ 389.526284][T12658] loop1: detected capacity change from 0 to 1024 [ 389.552968][T12658] EXT4-fs: Ignoring removed nobh option [ 389.569515][T12658] EXT4-fs: Ignoring removed bh option [ 389.599625][T12658] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 389.717477][T12658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 389.741162][T12658] System zones: 0-1, 3-12 [ 389.751753][T12658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.935934][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.873209][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.014301][T12667] loop5: detected capacity change from 0 to 1024 [ 391.032160][T12667] EXT4-fs: Ignoring removed bh option [ 391.076147][T12667] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 391.115494][T12667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.172421][T12665] loop3: detected capacity change from 0 to 1024 [ 391.192371][T12665] journal_path: Lookup failure for './file1' [ 391.198783][T12665] EXT4-fs: error: could not find journal device path [ 391.513649][T12678] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2348'. [ 392.263658][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.290420][T12115] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 393.179704][T12695] loop5: detected capacity change from 0 to 1024 [ 393.223505][T12695] EXT4-fs: Ignoring removed nobh option [ 393.261295][T12695] EXT4-fs: Ignoring removed bh option [ 393.308001][T12695] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 393.353883][T12695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 393.367261][T12702] loop3: detected capacity change from 0 to 256 [ 393.378059][T12695] System zones: 0-1, 3-12 [ 393.407319][T12695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.453722][T12702] overlayfs: failed to resolve './bus': -2 [ 393.744620][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.795490][T12708] loop3: detected capacity change from 0 to 1024 [ 393.848431][T12708] EXT4-fs: Ignoring removed bh option [ 393.897494][T12708] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 394.016546][T12708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.553592][T11935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.930056][T12726] loop5: detected capacity change from 0 to 1024 [ 394.975715][T12726] EXT4-fs: Ignoring removed bh option [ 394.994592][T12728] loop3: detected capacity change from 0 to 256 [ 395.024591][T12726] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 395.053639][T12730] loop1: detected capacity change from 0 to 256 [ 395.106436][T12726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.141208][T12730] overlayfs: failed to resolve './bus': -2 [ 395.196134][T12734] loop4: detected capacity change from 0 to 1024 [ 395.211385][T12734] EXT4-fs: Ignoring removed nobh option [ 395.227840][T12734] EXT4-fs: Ignoring removed bh option [ 395.309411][T12734] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 395.463492][T12734] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 395.648256][T12734] System zones: 0-1, 3-12 [ 395.760162][T12734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.002472][T12743] (null): rxe_set_mtu: Set mtu to 1024 [ 396.194476][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.220730][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.468516][ T5781] Bluetooth: hci1: unexpected event for opcode 0x202d [ 396.682623][T12743] infiniband syz0: set active [ 396.687222][T12752] loop4: detected capacity change from 0 to 1024 [ 396.687583][T12743] infiniband syz0: added veth0_vlan [ 396.716488][T12752] EXT4-fs: Ignoring removed bh option [ 396.728511][T12752] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 396.783954][T12752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.842452][T12743] RDS/IB: syz0: added [ 397.027039][T12743] smc: adding ib device syz0 with port count 1 [ 397.034324][T12743] smc: ib device syz0 port 1 has pnetid [ 397.182691][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.621368][T12766] loop4: detected capacity change from 0 to 256 [ 397.715758][T12766] overlayfs: failed to resolve './bus': -2 [ 397.999861][T12764] loop1: detected capacity change from 0 to 512 [ 398.069449][T12764] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.160535][T12764] EXT4-fs (loop1): orphan cleanup on readonly fs [ 398.170509][T12764] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 398.212053][T12764] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2377: attempt to clear invalid blocks 2 len 1 [ 398.332982][T12764] EXT4-fs (loop1): Remounting filesystem read-only [ 398.355776][T12764] EXT4-fs (loop1): 1 truncate cleaned up [ 398.387453][T12764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.621395][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.632077][T12782] loop5: detected capacity change from 0 to 1024 [ 398.658828][T12782] EXT4-fs: Ignoring removed bh option [ 398.717608][T12782] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 398.796078][T12782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.254397][T12790] loop1: detected capacity change from 0 to 256 [ 399.263926][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.351374][T12790] overlayfs: failed to resolve './bus': -2 [ 399.595269][T12802] loop4: detected capacity change from 0 to 1024 [ 399.623606][T12802] EXT4-fs: Ignoring removed bh option [ 399.676258][T12802] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 399.753620][T12802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.799868][ T7568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.191263][T12823] loop5: detected capacity change from 0 to 256 [ 401.270984][T12823] overlayfs: failed to resolve './bus': -2 [ 401.538550][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.553478][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.562478][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.571609][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.579577][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 401.588350][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.653973][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.348961][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.398911][T12828] rxe_eth0 speed is unknown, defaulting to 1000 [ 402.559542][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.587865][T12842] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 402.594043][T12841] loop5: detected capacity change from 0 to 1024 [ 402.631895][T12841] EXT4-fs: Ignoring removed bh option [ 402.679158][T12841] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 402.706339][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.742048][T12841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.667979][ T51] Bluetooth: hci0: command tx timeout [ 403.809949][T12852] loop3: detected capacity change from 0 to 256 [ 403.828022][ T7827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.848037][T12852] FAT-fs (loop3): Unrecognized mount option "nonutail=0" or missing value [ 404.803772][T12872] loop4: detected capacity change from 0 to 256 [ 404.888927][T12872] overlayfs: failed to resolve './bus': -2 [ 405.102389][T12828] chnl_net:caif_netlink_parms(): no params data found [ 405.540428][ T5799] IPVS: starting estimator thread 0... [ 405.637124][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.658119][T12828] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.670479][T12894] IPVS: using max 17 ests per chain, 40800 per kthread [ 405.680535][T12828] bridge_slave_0: entered allmulticast mode [ 405.688458][T12828] bridge_slave_0: entered promiscuous mode [ 405.750459][ T51] Bluetooth: hci0: command tx timeout [ 405.798245][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.822219][T12828] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.829624][T12828] bridge_slave_1: entered allmulticast mode [ 406.079998][T12828] bridge_slave_1: entered promiscuous mode [ 406.385519][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 406.868950][T12828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.966544][T12828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.967957][T12916] loop5: detected capacity change from 0 to 256 [ 407.089710][T12916] overlayfs: failed to resolve './bus': -2 [ 407.117459][T12828] team0: Port device team_slave_0 added [ 407.227064][T12828] team0: Port device team_slave_1 added [ 407.231191][T12921] loop4: detected capacity change from 0 to 256 [ 407.256830][T12921] FAT-fs (loop4): Unrecognized mount option "nonutail=0" or missing value [ 407.731640][ T51] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 407.799797][T12828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.832493][ T5781] Bluetooth: hci0: command tx timeout [ 408.122187][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.388860][T12828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.430461][T12828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.437588][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.540441][T12828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.910843][T12953] input: syz0 as /devices/virtual/input/input9 [ 409.155488][T12958] netlink: 'syz.5.2424': attribute type 4 has an invalid length. [ 409.307011][T12828] hsr_slave_0: entered promiscuous mode [ 409.329979][T12828] hsr_slave_1: entered promiscuous mode [ 409.389179][ T12] hsr_slave_0: left promiscuous mode [ 409.399429][ T12] hsr_slave_1: left promiscuous mode [ 409.456026][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.481804][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.495268][T12970] loop3: detected capacity change from 0 to 256 [ 409.516641][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.540462][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.561664][ T12] bridge_slave_1: left allmulticast mode [ 409.567442][ T12] bridge_slave_1: left promiscuous mode [ 409.597092][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.605241][T12970] overlayfs: failed to resolve './bus': -2 [ 409.642331][ T12] bridge_slave_0: left allmulticast mode [ 409.656368][ T12] bridge_slave_0: left promiscuous mode [ 409.681057][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.805682][ T12] veth1_macvtap: left promiscuous mode [ 409.817987][ T12] veth0_macvtap: left promiscuous mode [ 409.832164][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 409.835204][ T12] veth1_vlan: left promiscuous mode [ 409.844109][ T12] veth0_vlan: left promiscuous mode [ 409.900562][ T51] Bluetooth: hci0: command tx timeout [ 410.000132][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 410.014495][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 410.022199][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 410.032591][ T51] Workqueue: hci1 hci_rx_work [ 410.037336][T12983] loop5: detected capacity change from 0 to 256 [ 410.037595][ T51] Call Trace: [ 410.047633][ T51] [ 410.050718][ T51] dump_stack_lvl+0x18c/0x250 [ 410.055547][ T51] ? show_regs_print_info+0x20/0x20 [ 410.060977][ T51] ? load_image+0x420/0x420 [ 410.065564][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 410.070732][ T51] ? __lock_acquire+0x7eb0/0x7eb0 [ 410.075999][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 410.080710][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 410.086108][ T51] kobject_add_internal+0x617/0xc90 [ 410.091397][ T51] kobject_add+0x164/0x240 [ 410.095855][ T51] ? kobject_init+0x1d0/0x1d0 [ 410.100558][ T51] ? get_device_parent+0x366/0x390 [ 410.105735][ T51] device_add+0x3fa/0xc40 [ 410.110082][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 410.115109][ T51] le_conn_complete_evt+0xe9a/0x1480 [ 410.120568][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 410.126927][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 410.132584][ T51] ? mutex_unlock+0x10/0x10 [ 410.137104][ T51] ? skb_pull_data+0xf0/0x1f0 [ 410.141895][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 410.147816][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 410.154281][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 410.160839][ T51] hci_event_packet+0x7b4/0x1280 [ 410.165816][ T51] ? __lock_acquire+0x7eb0/0x7eb0 [ 410.170864][ T51] ? lock_chain_count+0x20/0x20 [ 410.175735][ T51] ? bis_list+0x290/0x290 [ 410.180091][ T51] ? kcov_remote_start+0x513/0x810 [ 410.185222][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 410.190541][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 410.195931][ T51] hci_rx_work+0x43a/0xd60 [ 410.200390][ T51] ? process_scheduled_works+0x975/0x1600 [ 410.206157][ T51] process_scheduled_works+0xa60/0x1600 [ 410.211749][ T51] ? worker_attach_to_pool+0x370/0x370 [ 410.217234][ T51] ? assign_work+0x3cc/0x5d0 [ 410.222480][ T51] worker_thread+0xa5e/0xfe0 [ 410.227122][ T51] kthread+0x2fa/0x390 [ 410.231297][ T51] ? pr_cont_work+0x550/0x550 [ 410.235989][ T51] ? kthread_blkcg+0xd0/0xd0 [ 410.240595][ T51] ret_from_fork+0x48/0x80 [ 410.245151][ T51] ? kthread_blkcg+0xd0/0xd0 [ 410.249763][ T51] ret_from_fork_asm+0x11/0x20 [ 410.254579][ T51] [ 410.262652][ T51] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 410.276659][ T51] Bluetooth: hci1: failed to register connection device [ 410.281758][T12983] FAT-fs (loop5): Unrecognized mount option "nonutail=0" or missing value [ 410.363585][T12121] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 410.741176][ T51] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 411.993699][ T12] team0 (unregistering): Port device team_slave_1 removed [ 412.045728][ T12] team0 (unregistering): Port device team_slave_0 removed [ 412.099243][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.154494][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.576491][ T12] bond0 (unregistering): Released all slaves [ 413.178296][ T12] IPVS: stop unused estimator thread 0... [ 413.180936][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 413.324458][T13016] loop3: detected capacity change from 0 to 256 [ 413.333157][T13016] FAT-fs (loop3): Unrecognized mount option "nonutail=0" or missing value [ 413.684303][ T51] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 415.289081][T13054] loop4: detected capacity change from 0 to 512 [ 415.381577][T12828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 415.397082][T13054] ------------[ cut here ]------------ [ 415.403156][T13054] EA inode 11 i_nlink=0 [ 415.419407][T13054] WARNING: CPU: 1 PID: 13054 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 415.434356][T13054] Modules linked in: [ 415.438311][T13054] CPU: 1 PID: 13054 Comm: syz.4.2443 Not tainted syzkaller #0 [ 415.445975][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 415.456192][T13054] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 415.463149][T13054] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 20 ef de 8a 44 89 fa e8 6e cb 09 ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 18 86 4b 08 [ 415.483013][T13054] RSP: 0018:ffffc90003867360 EFLAGS: 00010246 [ 415.489134][T13054] RAX: 8e9845d7cabc1900 RBX: ffff8880531898a8 RCX: 0000000000080000 [ 415.497228][T13054] RDX: ffffc90004b29000 RSI: 0000000000014f4e RDI: 0000000000014f4f [ 415.505445][T13054] RBP: ffffc90003867450 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 415.509083][T12828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 415.515168][T13054] R10: dffffc0000000000 R11: ffffed101718518b R12: ffff888053189700 [ 415.530714][T13054] R13: ffffc900038673c0 R14: dffffc0000000000 R15: 0000000000000000 [ 415.538741][T13054] FS: 00007feac6d146c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 415.547995][T13054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.554676][T13054] CR2: 0000001b2d120ff8 CR3: 00000000668dc000 CR4: 00000000003506e0 [ 415.562806][T13054] Call Trace: [ 415.566788][T13054] [ 415.569773][T13054] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 415.575568][T13054] ? __ext4_journal_ensure_credits+0x30/0x450 [ 415.582231][T13054] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 415.588401][T13054] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 415.594388][T13054] ? __ext4_journal_ensure_credits+0x450/0x450 [ 415.600740][T13054] ext4_xattr_delete_inode+0xb3b/0xd00 [ 415.606380][T13054] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 415.612732][T13054] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 415.619199][T13054] ext4_evict_inode+0xa88/0xe70 [ 415.624276][T13054] ? evict+0x482/0x8a0 [ 415.628421][T13054] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 415.634560][T13054] ? do_raw_spin_unlock+0x121/0x230 [ 415.639818][T13054] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 415.645839][T13054] evict+0x4b7/0x8a0 [ 415.649891][T13054] ? __lock_acquire+0x7eb0/0x7eb0 [ 415.655036][T13054] ? proc_nr_inodes+0x230/0x230 [ 415.659937][T13054] ? do_raw_spin_unlock+0x121/0x230 [ 415.665585][T13054] ? _raw_spin_unlock+0x28/0x40 [ 415.670602][T13054] ext4_orphan_cleanup+0xdff/0x1650 [ 415.676119][T13054] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 415.682553][T13054] ? ext4_orphan_del+0xc90/0xc90 [ 415.687548][T13054] ? ext4_register_li_request+0x182/0x930 [ 415.693375][T13054] ? errseq_check_and_advance+0x66/0x120 [ 415.699061][T13054] ext4_fill_super+0x5fb5/0x6870 [ 415.704163][T13054] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 415.710650][T13054] ? __might_sleep+0xe0/0xe0 [ 415.715289][T13054] ? read_lock_is_recursive+0x20/0x20 [ 415.721534][T13054] ? snprintf+0xe9/0x140 [ 415.725864][T13054] ? down_read_killable+0x340/0x340 [ 415.731823][T13054] ? setup_bdev_super+0x56b/0x660 [ 415.736914][T13054] get_tree_bdev+0x3e5/0x520 [ 415.741620][T13054] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 415.747908][T13054] ? setup_bdev_super+0x660/0x660 [ 415.751480][ T5781] Bluetooth: hci4: command 0x0406 tx timeout [ 415.752993][T13054] ? apparmor_capable+0x137/0x1a0 [ 415.764066][T13054] ? bpf_lsm_capable+0x9/0x10 [ 415.768957][T13054] ? security_capable+0x89/0xb0 [ 415.774022][T13054] vfs_get_tree+0x8c/0x280 [ 415.778488][T13054] do_new_mount+0x24a/0xa40 [ 415.783136][T13054] __se_sys_mount+0x2e7/0x3d0 [ 415.787886][T13054] ? __x64_sys_mount+0xc0/0xc0 [ 415.792847][T13054] ? lockdep_hardirqs_on+0x98/0x150 [ 415.798104][T13054] ? __x64_sys_mount+0x20/0xc0 [ 415.803058][T13054] do_syscall_64+0x55/0xb0 [ 415.807530][T13054] ? clear_bhb_loop+0x40/0x90 [ 415.812284][T13054] ? clear_bhb_loop+0x40/0x90 [ 415.816989][T13054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.823931][T13054] RIP: 0033:0x7feac5d9f7ca [ 415.828408][T13054] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.848311][T13054] RSP: 002b:00007feac6d13e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 415.857036][T13054] RAX: ffffffffffffffda RBX: 00007feac6d13ee0 RCX: 00007feac5d9f7ca [ 415.865144][T13054] RDX: 00002000000001c0 RSI: 0000200000000200 RDI: 00007feac6d13ea0 [ 415.873324][T13054] RBP: 00002000000001c0 R08: 00007feac6d13ee0 R09: 0000000000000002 [ 415.881415][T13054] R10: 0000000000000002 R11: 0000000000000246 R12: 0000200000000200 [ 415.889433][T13054] R13: 00007feac6d13ea0 R14: 000000000000048d R15: 000000000000002c [ 415.897576][T13054] [ 415.900767][T13054] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 415.908183][T13054] CPU: 1 PID: 13054 Comm: syz.4.2443 Not tainted syzkaller #0 [ 415.915761][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 415.926006][T13054] Call Trace: [ 415.929476][T13054] [ 415.932509][T13054] dump_stack_lvl+0x18c/0x250 [ 415.937312][T13054] ? show_regs_print_info+0x20/0x20 [ 415.942611][T13054] ? load_image+0x420/0x420 [ 415.947140][T13054] panic+0x2ca/0x720 [ 415.951069][T13054] ? bpf_jit_dump+0xd0/0xd0 [ 415.955602][T13054] __warn+0x2e0/0x470 [ 415.959635][T13054] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 415.965637][T13054] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 415.971752][T13054] report_bug+0x2be/0x4f0 [ 415.976105][T13054] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 415.982182][T13054] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 415.988170][T13054] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 415.994168][T13054] handle_bug+0xcf/0x120 [ 415.998431][T13054] exc_invalid_op+0x1a/0x50 [ 416.002963][T13054] asm_exc_invalid_op+0x1a/0x20 [ 416.007826][T13054] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 416.014434][T13054] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 20 ef de 8a 44 89 fa e8 6e cb 09 ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 18 86 4b 08 [ 416.034143][T13054] RSP: 0018:ffffc90003867360 EFLAGS: 00010246 [ 416.040228][T13054] RAX: 8e9845d7cabc1900 RBX: ffff8880531898a8 RCX: 0000000000080000 [ 416.048562][T13054] RDX: ffffc90004b29000 RSI: 0000000000014f4e RDI: 0000000000014f4f [ 416.056852][T13054] RBP: ffffc90003867450 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 416.064857][T13054] R10: dffffc0000000000 R11: ffffed101718518b R12: ffff888053189700 [ 416.073323][T13054] R13: ffffc900038673c0 R14: dffffc0000000000 R15: 0000000000000000 [ 416.081628][T13054] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 416.087302][T13054] ? __ext4_journal_ensure_credits+0x30/0x450 [ 416.093597][T13054] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 416.099814][T13054] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 416.105479][T13054] ? __ext4_journal_ensure_credits+0x450/0x450 [ 416.111745][T13054] ext4_xattr_delete_inode+0xb3b/0xd00 [ 416.117239][T13054] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 416.123335][T13054] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 416.128999][T13054] ext4_evict_inode+0xa88/0xe70 [ 416.133872][T13054] ? evict+0x482/0x8a0 [ 416.137962][T13054] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 416.143944][T13054] ? do_raw_spin_unlock+0x121/0x230 [ 416.149160][T13054] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 416.155100][T13054] evict+0x4b7/0x8a0 [ 416.159013][T13054] ? __lock_acquire+0x7eb0/0x7eb0 [ 416.164067][T13054] ? proc_nr_inodes+0x230/0x230 [ 416.168940][T13054] ? do_raw_spin_unlock+0x121/0x230 [ 416.174158][T13054] ? _raw_spin_unlock+0x28/0x40 [ 416.179120][T13054] ext4_orphan_cleanup+0xdff/0x1650 [ 416.184346][T13054] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 416.190601][T13054] ? ext4_orphan_del+0xc90/0xc90 [ 416.195578][T13054] ? ext4_register_li_request+0x182/0x930 [ 416.201309][T13054] ? errseq_check_and_advance+0x66/0x120 [ 416.206962][T13054] ext4_fill_super+0x5fb5/0x6870 [ 416.211953][T13054] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 416.218212][T13054] ? __might_sleep+0xe0/0xe0 [ 416.222816][T13054] ? read_lock_is_recursive+0x20/0x20 [ 416.228283][T13054] ? snprintf+0xe9/0x140 [ 416.232565][T13054] ? down_read_killable+0x340/0x340 [ 416.237779][T13054] ? setup_bdev_super+0x56b/0x660 [ 416.242830][T13054] get_tree_bdev+0x3e5/0x520 [ 416.247440][T13054] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 416.253696][T13054] ? setup_bdev_super+0x660/0x660 [ 416.258731][T13054] ? apparmor_capable+0x137/0x1a0 [ 416.263776][T13054] ? bpf_lsm_capable+0x9/0x10 [ 416.268489][T13054] ? security_capable+0x89/0xb0 [ 416.273385][T13054] vfs_get_tree+0x8c/0x280 [ 416.277833][T13054] do_new_mount+0x24a/0xa40 [ 416.282366][T13054] __se_sys_mount+0x2e7/0x3d0 [ 416.287080][T13054] ? __x64_sys_mount+0xc0/0xc0 [ 416.291862][T13054] ? lockdep_hardirqs_on+0x98/0x150 [ 416.297201][T13054] ? __x64_sys_mount+0x20/0xc0 [ 416.301990][T13054] do_syscall_64+0x55/0xb0 [ 416.306417][T13054] ? clear_bhb_loop+0x40/0x90 [ 416.311279][T13054] ? clear_bhb_loop+0x40/0x90 [ 416.315975][T13054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.321894][T13054] RIP: 0033:0x7feac5d9f7ca [ 416.326323][T13054] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.346029][T13054] RSP: 002b:00007feac6d13e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 416.354546][T13054] RAX: ffffffffffffffda RBX: 00007feac6d13ee0 RCX: 00007feac5d9f7ca [ 416.362532][T13054] RDX: 00002000000001c0 RSI: 0000200000000200 RDI: 00007feac6d13ea0 [ 416.370539][T13054] RBP: 00002000000001c0 R08: 00007feac6d13ee0 R09: 0000000000000002 [ 416.378697][T13054] R10: 0000000000000002 R11: 0000000000000246 R12: 0000200000000200 [ 416.386681][T13054] R13: 00007feac6d13ea0 R14: 000000000000048d R15: 000000000000002c [ 416.394683][T13054] [ 416.398074][T13054] Kernel Offset: disabled [ 416.402460][T13054] Rebooting in 86400 seconds..