last executing test programs: 3m4.500360646s ago: executing program 1 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x18, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "244c4eea3074ac5b1b85747ac0fb97f1"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x124}}, 0x0) 3m4.062896479s ago: executing program 1 (id=385): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1}}, {@nogrpid}, {@quota}, {@nobh}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}, 0x1, 0x52e, &(0x7f0000000cc0)="$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") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x5}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a000010000280"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) 2m59.040292128s ago: executing program 1 (id=402): r0 = socket(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000"/52], 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0) 2m57.824383234s ago: executing program 1 (id=404): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f0000000380)) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bind$can_raw(r4, &(0x7f00000005c0), 0x10) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, r5, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) sendmsg$can_raw(r4, 0x0, 0x4000040) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 2m41.415122429s ago: executing program 32 (id=411): r0 = socket$inet6(0xa, 0x1, 0x400000f) bind$inet6(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f0000000380)) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bind$can_raw(r4, &(0x7f00000005c0), 0x10) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, r5, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) sendmsg$can_raw(r4, 0x0, 0x4000040) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 13.149171292s ago: executing program 3 (id=945): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xf, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r5, &(0x7f00000014c0), 0x0}, 0x20) close(r1) r6 = socket$inet6(0x10, 0x3, 0x0) read(r6, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000480)={{r0}, 0x0, 0x1e, @unused=[0x5a, 0x8000000000000001, 0x7, 0x100000000], @name="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"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@data_err_ignore}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") 10.636628496s ago: executing program 3 (id=949): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @local, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0) 10.309911246s ago: executing program 3 (id=952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x94}}}]}, 0x3c}}, 0x20048884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xa, 0xc}, {0xfff2, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 9.060766652s ago: executing program 2 (id=958): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd29, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8553}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xfff, 0x0, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 8.987490815s ago: executing program 3 (id=960): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x1, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000600)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000045c0)='^', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}], 0x1}}], 0x3, 0x448c0) close(0x3) 8.241359187s ago: executing program 2 (id=965): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000038c0)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000036c0)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x2}, &(0x7f0000002ec0)=0xd3a6, 0x0, 0x1, 0x1, 0x8, 0x8000, 0x95, 0x80}}], 0x68, 0x4}, 0x40) 7.989417985s ago: executing program 2 (id=967): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x2044d0, &(0x7f0000000040)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@bh}]}, 0x3, 0x4b5, &(0x7f0000000d00)="$eJzs3E9oHNUfAPDvbDZNf/2X/Gr901o1WsXin6RNq+1BEAXBg4qgh3pc07TUbhtpIpgSbBSpF0EL4lUUL6JnD548iXoSvPSgdykUyaW1B1mZ3dl0d5PdbJNtNn8+H9jsezsz+953Zt7Om3mZCWDDGkz/JBHbIuKPiOiPiFzjDIOVt+uz06P/zE6PJlEqvfZ3ki4W12anR6uzJtn71komX/9F9Samzp8uFItj57L88OSZt4cnps4/eepM4eTYybGzI0ePHj508MjTI091JM7/p3Xd89743t0vvnHp5dFjl9785bukptK1cUSriretN2Zq1kmjRzpQwmqyvSad5Bunbq7NdGLl0iF9EZEv761p+++Png93zE3rjxc+6GrlgNuqVCqVRppPnikB61gS3a4B0B3VA/212c9H03Pg+vPg9e/qc5UToDTu69mrctJz8/JFb8P5bSdNR8SxmRtfpK+Ydx0CAKDzfkz7P09U+h31/b9c3FUz345sbGggG0vZGRF3RMSuiLgzojzv3RFxzy2WP9iQn9//yV1ZUmBtSvt/z2RjW9VXVm51loGeLLe9HH9vcuJUcexAtk72R29fmj+44LcnUR4Eit8/aVb+YE3/L32l5Vf7glk9ruT76pc5XpgsLDvwzNX3I/bkF4o/ifzNKGJ3ROxZYhmnHvtmb/0nPXOpxeNvYd44060rfRnxaGX7z0RD/FVJ6/HJ4c1RHDswXN0r5vv1t4uvNit/WfF3QLr9tyy4/8/FP5DUjtdOzPuKTYuVcfHPj5qe0wxGPBtL2P83Ja/XFf5uYXLyRiliU/LSvM/P1VzgrubL7wcr8e/ft3D73xk318S9EZHuxPdFxP0R8UC27R6MiIciYl+L+H9+/uG3WsTf1e0f31Z+odra/tXtUNkR5vaIxRI9p3/6oVnxjfEnWT6ddrk8R7r9D5dT+7Nl2vn9a7eCy1hzAAAAsGbkImJbJLmhuXQuNzRU+R/+XbElVxyfmHz8xPg7Z49X7hEYiN5c9UpXf5aP7PrnQCVfPvseKb9HXMiulx7Krht/1vO/cn5odLx4vNvBwwa3tUn7T/3V0+3aAbddB8bRgDWqVfv/6sgKVgRYcUs//us5wFq3SCv2wAZYxxzFYeNaqP1f6EI9gJXX/Pg/pmsA69xcI/+0jZlrbvdqvHkTWHsc5GHjWrz9v3K7nn8FdE/7d/GvlkSS1H0SX0e0Xirpfp2XkPh4Bcv6dylLRa7ZpL5bfUBEVxKF1VGNxRLVhjp1/nS+7adaTJUuFIrFy98vp/Tu/i4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0yn8BAAD//44C3qk=") 6.79465265s ago: executing program 2 (id=969): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x0, 0xd14f, 0x1000, 0x2, 0x2b1}, &(0x7f0000001600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa205, 0x4, 0x0, 0x226}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c2b, 0x4, 0x1, 0xd4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1236, 0x14a28, 0x0, 0xf7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3070, 0x2000, 0x1, 0x2a5}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000002880)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x0, 0xe6d, 0x0, 0x0}}, &(0x7f0000002900)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000029c0)=0x4) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x800000000000072, 0x101202) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000040)={0x51, 0xfffc, 0x0, {0x7, 0x15}, {}, @cond=[{0x3, 0xe, 0x8, 0x8, 0x2, 0x1}, {0x8, 0x7, 0x0, 0x5, 0x4, 0xa122}]}) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0x400, 0x5, 0x50}, 0x0, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r3, 0x0) 6.301905604s ago: executing program 5 (id=970): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x3204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030300400000000000000312c6d61703d6f66662c63727566742c696f636861727365743d6d6163677265656b416d61703d61636f726e2c676f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666642c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c00"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 6.026230333s ago: executing program 5 (id=971): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xaa94, 0x200, 0x8, 0xc1}) r0 = socket(0x11, 0x3, 0xc0000001) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'sit0\x00', 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 5.667137073s ago: executing program 5 (id=975): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd29, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8553}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xfff, 0x0, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 5.032714442s ago: executing program 4 (id=976): unshare(0x20000400) r0 = socket$kcm(0x29, 0x5, 0x0) fcntl$getownex(r0, 0x10, 0x0) 4.840933517s ago: executing program 2 (id=978): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/218, 0xda}], 0x1}, 0xffffffff}], 0x1, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, 0x0) 4.690075732s ago: executing program 0 (id=979): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff001, {0x0, 0x0, 0x0, r5, {0xf000, 0x7}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.597308904s ago: executing program 4 (id=980): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x200, 0x1) getdents64(r0, 0x0, 0x0) 4.328822623s ago: executing program 0 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0x3, 0x6371, 0x335, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.272709294s ago: executing program 5 (id=982): pipe(&(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xf, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r3}, 0x38) 4.209421916s ago: executing program 4 (id=983): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 3.951625564s ago: executing program 4 (id=984): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@flushpolicy={0x10, 0x1d, 0x200, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40081) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000440), 0x0}, 0x20) 2.809265777s ago: executing program 0 (id=985): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000500)=""/194, 0xc2}], 0x1}, 0x9}], 0x2, 0x10100, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 2.808205197s ago: executing program 3 (id=986): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xf, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r3, &(0x7f00000014c0), 0x0}, 0x20) close(r1) r4 = socket$inet6(0x10, 0x3, 0x0) read(r4, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000480)={{r0}, 0x0, 0x1e, @unused=[0x5a, 0x8000000000000001, 0x7, 0x100000000], @name="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"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@data_err_ignore}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") 2.597430264s ago: executing program 0 (id=987): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x2) creat(0x0, 0xd931d3864d39dcdb) r3 = memfd_create(0x0, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.424385449s ago: executing program 4 (id=988): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x0, 0xd14f, 0x1000, 0x2, 0x2b1}, &(0x7f0000001600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa205, 0x4, 0x0, 0x226}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c2b, 0x4, 0x1, 0xd4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1236, 0x14a28, 0x0, 0xf7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3070, 0x2000, 0x1, 0x2a5}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000002880)={0x2e, 0x28, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x0, 0xe6d, 0x0, 0x0}}, &(0x7f0000002900)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000029c0)=0x4) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x800000000000072, 0x101202) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, 0x0) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0x400, 0x5, 0x50}, 0x0, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r3, 0x0) 2.139344097s ago: executing program 3 (id=989): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x3, 0xc, 0x6, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9a007a, 0x0, 0x3, 0x0, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r0, 0xee01, 0x0) 1.843675266s ago: executing program 5 (id=990): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2cf, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2a042, 0x113) fstatfs(r1, &(0x7f00000001c0)=""/131) 1.248367454s ago: executing program 0 (id=991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x24001000}, 0x0) 1.142864377s ago: executing program 4 (id=992): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff001, {0x0, 0x0, 0x0, r5, {0xf000, 0x7}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.129468017s ago: executing program 2 (id=993): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(0x0, 0x0) write$binfmt_aout(r3, 0x0, 0x20) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xfffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, 0x0, 0x10) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/..\x00', &(0x7f0000000300)={0x200200, 0xe8, 0x17}, 0x22) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40900) recvmsg$can_j1939(r7, &(0x7f00000005c0)={&(0x7f0000000140)=@caif, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000340)=""/34, 0x22}, {0x0}, {&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/53, 0x35}], 0x5}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r9, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x20024090) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f00000001c0)={0x6, 'gretap0\x00', {}, 0x80}) fchdir(r6) 817.207296ms ago: executing program 0 (id=994): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(0x0, 0x0) write$binfmt_aout(r3, 0x0, 0x20) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xfffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, &(0x7f00000013c0)={&(0x7f0000000080)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001280)=[{&(0x7f00000000c0)="3a498e6f", 0x4}], 0x1, &(0x7f0000001300)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @init={0x18, 0x84, 0x0, {0x2, 0x26, 0x7, 0x7}}], 0x30, 0x8000}, 0x10) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/..\x00', &(0x7f0000000300)={0x200200, 0xe8, 0x17}, 0x22) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40900) recvmsg$can_j1939(r7, &(0x7f00000005c0)={&(0x7f0000000140)=@caif, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/53, 0x35}], 0x5}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x20024090) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f00000001c0)={0x6, 'gretap0\x00', {}, 0x80}) fchdir(r6) 0s ago: executing program 5 (id=995): creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): [ 86.302335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.311997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.322163][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.331153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.340706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.352070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.361937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.371282][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.378465][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.405848][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.416437][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.438919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.447880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.458343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.466967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.475705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.486065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.495666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.504712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.514788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.524963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.534257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.543831][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.551037][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.574683][ T4286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.585720][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.624436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.637697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.668864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.697961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.727920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.745627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.829241][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.836870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.845975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.890241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.909695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.934547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.952389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.965235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.994597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.022895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.059737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.078068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.086857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.117819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.148785][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.168163][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.212489][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.228624][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.254167][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.282674][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.308493][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.343463][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.366544][ T4277] device veth0_vlan entered promiscuous mode [ 87.402939][ T4277] device veth1_vlan entered promiscuous mode [ 87.465044][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.477508][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.536284][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.597890][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.633202][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.665300][ T4277] device veth0_macvtap entered promiscuous mode [ 87.681047][ T4277] device veth1_macvtap entered promiscuous mode [ 87.731111][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.759878][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.774020][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.785975][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.801891][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.811493][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.823819][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.851882][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.875952][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.885066][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.896589][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.908624][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.919128][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.934467][ T4286] device veth0_vlan entered promiscuous mode [ 87.951159][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.960422][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.974976][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.984796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.000686][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.049748][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.068220][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.090363][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.107050][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.117237][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 88.123571][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 88.130058][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 88.130080][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 88.136242][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 88.171749][ T4286] device veth1_vlan entered promiscuous mode [ 88.215707][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.235820][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.268402][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.281311][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.291479][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.343396][ T4275] device veth0_vlan entered promiscuous mode [ 88.353099][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.362660][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.373711][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.382290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.391037][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.399382][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.420952][ T4275] device veth1_vlan entered promiscuous mode [ 88.448457][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.586056][ T4286] device veth0_macvtap entered promiscuous mode [ 88.614059][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.622653][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.637306][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.643882][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.671604][ T4275] device veth0_macvtap entered promiscuous mode [ 88.690084][ T4286] device veth1_macvtap entered promiscuous mode [ 88.729281][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.748715][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.763742][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.772101][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.781192][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.791923][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.801300][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.817281][ T4275] device veth1_macvtap entered promiscuous mode [ 88.830819][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.840704][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.852875][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.861768][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.871098][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.879641][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.889374][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.900020][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.910928][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.942232][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.967433][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.989089][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.998447][ T4276] device veth0_vlan entered promiscuous mode [ 89.025064][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.050433][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.060819][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.071722][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.096351][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.118075][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.130214][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.141867][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.163767][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.176815][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.188680][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.200759][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.213065][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.224414][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.235005][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.247474][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.259357][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.271823][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.284479][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.295878][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.310911][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.325705][ T4276] device veth1_vlan entered promiscuous mode [ 89.353799][ T4286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.379249][ T4286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.388198][ T4286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.402093][ T4286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.424301][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.436447][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.446723][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.458198][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.562971][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.592100][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.674068][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.682570][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.197785][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 90.198200][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 90.210891][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 90.218166][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 90.435110][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 90.480884][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.637075][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.671786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.688066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.703974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.757913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.767677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.779169][ T4376] loop2: detected capacity change from 0 to 1024 [ 90.797746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.805743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.816092][ T4376] ======================================================= [ 90.816092][ T4376] WARNING: The mand mount option has been deprecated and [ 90.816092][ T4376] and is ignored by this kernel. Remove the mand [ 90.816092][ T4376] option from the mount to silence this warning. [ 90.816092][ T4376] ======================================================= [ 90.891367][ T4274] device veth0_vlan entered promiscuous mode [ 90.945764][ T4276] device veth0_macvtap entered promiscuous mode [ 90.965578][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.992088][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.018404][ T4376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.023557][ T4276] device veth1_macvtap entered promiscuous mode [ 91.052793][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.092655][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.163672][ T4274] device veth1_vlan entered promiscuous mode [ 91.210066][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.242906][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.253830][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.264822][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.275337][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.307141][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.320534][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.331212][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.355729][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.375158][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 91.388773][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.403647][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.415529][ T4387] loop1: detected capacity change from 0 to 512 [ 91.428261][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.454881][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.495846][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.514707][ T4387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.538421][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.548994][ T4387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.583598][ T4387] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.603220][ T4390] loop2: detected capacity change from 0 to 512 [ 91.605256][ T4387] EXT4-fs (loop1): 1 truncate cleaned up [ 91.610881][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.615544][ T4387] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.639866][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.666594][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.678611][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.678918][ T4387] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 91.706197][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.715737][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.728457][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.738206][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.742754][ T4390] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 3: comm syz.2.9: lblock 0 mapped to illegal pblock 3 (length 1) [ 91.747965][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.770478][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.802835][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.820855][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.840158][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.853378][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.863113][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.876937][ T4274] device veth0_macvtap entered promiscuous mode [ 91.885432][ T4390] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.9: error -117 reading directory block [ 91.921042][ T7] cfg80211: failed to load regulatory.db [ 91.928146][ T4390] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 91.953845][ T4390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.973658][ T4274] device veth1_macvtap entered promiscuous mode [ 92.029676][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 92.104052][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 92.211427][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.237785][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.255819][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.275897][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.315686][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.330756][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.364184][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.435073][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.456963][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.477203][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.503016][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.529571][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.542639][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.554331][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.564334][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.578146][ T4404] loop1: detected capacity change from 0 to 512 [ 92.586801][ T4404] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.617126][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.628974][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.665545][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.702256][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.713038][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.725280][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.735646][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.748022][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.761042][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.772038][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.784441][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.808869][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.825404][ T4318] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 92.832557][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.844197][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.844249][ T4318] usb 3-1: Product: syz [ 92.844268][ T4318] usb 3-1: Manufacturer: syz [ 92.844286][ T4318] usb 3-1: SerialNumber: syz [ 92.880918][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.909413][ T4318] usb 3-1: config 0 descriptor?? [ 92.931945][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.950603][ T4318] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 92.957716][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.966504][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.010067][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.040018][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.066218][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.297202][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.305449][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.360711][ T4411] loop3: detected capacity change from 0 to 512 [ 93.394851][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.422044][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.452859][ T4411] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.485224][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.493504][ T4318] gspca_sunplus: reg_r err -110 [ 93.519263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.592881][ T4411] EXT4-fs (loop3): 1 truncate cleaned up [ 93.611707][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.763523][ T4422] loop4: detected capacity change from 0 to 512 [ 93.826748][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 94.072587][ T27] audit: type=1326 audit(1781400896.627:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.19" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399ce59 code=0x7ffc0000 [ 94.157855][ T27] audit: type=1326 audit(1781400896.677:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.19" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399ce59 code=0x7ffc0000 [ 94.187894][ T27] audit: type=1326 audit(1781400896.677:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.19" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399ce59 code=0x7ffc0000 [ 94.228234][ T4428] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 94.273234][ T27] audit: type=1326 audit(1781400896.677:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.19" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f7f9399ce59 code=0x7ffc0000 [ 94.282254][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 94.322108][ T27] audit: type=1326 audit(1781400896.677:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.19" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399ce59 code=0x7ffc0000 [ 94.510186][ T27] audit: type=1326 audit(1781400896.677:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.19" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399ce59 code=0x7ffc0000 [ 94.574743][ T27] audit: type=1326 audit(1781400896.677:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.19" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7f9399ce59 code=0x7ffc0000 [ 94.707092][ T27] audit: type=1326 audit(1781400896.677:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.1.19" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7f9399ce59 code=0x7ffc0000 [ 94.845600][ T4326] usb 3-1: USB disconnect, device number 2 [ 95.195882][ T4447] loop3: detected capacity change from 0 to 1024 [ 95.246560][ T4447] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 95.256562][ T4447] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 95.267916][ T4447] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 96.185516][ T4460] loop1: detected capacity change from 0 to 256 [ 96.252689][ T4460] FAT-fs (loop1): Directory bread(block 64) failed [ 96.272055][ T4460] FAT-fs (loop1): Directory bread(block 65) failed [ 96.302940][ T4460] FAT-fs (loop1): Directory bread(block 66) failed [ 96.335065][ T4460] FAT-fs (loop1): Directory bread(block 67) failed [ 96.362984][ T4460] FAT-fs (loop1): Directory bread(block 68) failed [ 96.382371][ T4460] FAT-fs (loop1): Directory bread(block 69) failed [ 96.395823][ T27] audit: type=1804 audit(1781400898.947:10): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.36" name="bus" dev="ramfs" ino=33923 res=1 errno=0 [ 96.411931][ T4460] FAT-fs (loop1): Directory bread(block 70) failed [ 96.435131][ T4460] FAT-fs (loop1): Directory bread(block 71) failed [ 96.452044][ T4467] capability: warning: `syz.2.38' uses 32-bit capabilities (legacy support in use) [ 96.470863][ T4460] FAT-fs (loop1): Directory bread(block 72) failed [ 96.491304][ T4460] FAT-fs (loop1): Directory bread(block 73) failed [ 97.002212][ T4479] loop2: detected capacity change from 0 to 256 [ 97.232124][ T4484] loop4: detected capacity change from 0 to 1024 [ 97.256342][ T4484] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 97.266511][ T4484] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 97.276530][ T4484] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 98.135102][ T4494] loop3: detected capacity change from 0 to 512 [ 98.172391][ T4494] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.263747][ T4494] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.50: bg 0: block 393: padding at end of block bitmap is not set [ 98.312921][ T4494] EXT4-fs (loop3): Remounting filesystem read-only [ 98.355097][ T4494] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 98.366381][ T4494] EXT4-fs (loop3): Remounting filesystem read-only [ 98.373693][ T4494] EXT4-fs (loop3): 2 truncates cleaned up [ 98.379830][ T4494] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.398364][ T4494] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.3.50: path /9/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 98.422067][ T4494] EXT4-fs (loop3): Remounting filesystem read-only [ 98.434257][ T4503] loop0: detected capacity change from 0 to 256 [ 98.566846][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 98.575968][ T4503] FAT-fs (loop0): Directory bread(block 64) failed [ 98.593477][ T4503] FAT-fs (loop0): Directory bread(block 65) failed [ 98.656484][ T4503] FAT-fs (loop0): Directory bread(block 66) failed [ 98.709513][ T4503] FAT-fs (loop0): Directory bread(block 67) failed [ 98.716217][ T4503] FAT-fs (loop0): Directory bread(block 68) failed [ 98.750567][ T4503] FAT-fs (loop0): Directory bread(block 69) failed [ 98.780444][ T4508] process 'syz.3.54' launched './file0' with NULL argv: empty string added [ 98.800849][ T4503] FAT-fs (loop0): Directory bread(block 70) failed [ 98.820379][ T4503] FAT-fs (loop0): Directory bread(block 71) failed [ 98.853699][ T4512] loop2: detected capacity change from 0 to 512 [ 98.871203][ T4503] FAT-fs (loop0): Directory bread(block 72) failed [ 98.887071][ T4503] FAT-fs (loop0): Directory bread(block 73) failed [ 98.973741][ T4512] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 98.995716][ T4512] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.006295][ T4512] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 99.035621][ T4512] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.56: Failed to acquire dquot type 1 [ 99.048609][ T4514] loop1: detected capacity change from 0 to 128 [ 99.118116][ T4512] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.56: bg 0: block 40: padding at end of block bitmap is not set [ 99.218622][ T4518] syz.1.57: attempt to access beyond end of device [ 99.218622][ T4518] loop1: rw=2049, sector=145, nr_sectors = 264 limit=128 [ 99.237367][ T4512] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 99.257842][ T4512] EXT4-fs (loop2): 1 truncate cleaned up [ 99.264032][ T4512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.326473][ T4512] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.56: bad symlink. [ 99.400101][ T4512] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.56: bad symlink. [ 99.579441][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 100.004059][ T4539] loop4: detected capacity change from 0 to 128 [ 100.046458][ T4539] EXT4-fs: Ignoring removed bh option [ 100.085794][ T4539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.292133][ T4539] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.411211][ T4547] input: syz1 as /devices/virtual/input/input5 [ 101.179156][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 101.231076][ T4553] loop0: detected capacity change from 0 to 1024 [ 101.365147][ T4553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.389452][ T14] kernel write not supported for file /38/net/ip6_tables_matches (pid: 14 comm: kworker/0:1) [ 101.592309][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 101.650703][ T4566] loop3: detected capacity change from 0 to 512 [ 101.732569][ T4566] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.844576][ T4566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.872526][ T4566] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.901268][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 102.221214][ T4582] loop1: detected capacity change from 0 to 8 [ 102.385610][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 102.658305][ T4586] loop2: detected capacity change from 0 to 256 [ 102.665895][ T4586] FAT-fs (loop2): Unrecognized mount option "shortname=win95" or missing value [ 102.821849][ T4590] loop3: detected capacity change from 0 to 256 [ 102.912542][ T4590] FAT-fs (loop3): Directory bread(block 64) failed [ 102.934325][ T4590] FAT-fs (loop3): Directory bread(block 65) failed [ 102.972783][ T4590] FAT-fs (loop3): Directory bread(block 66) failed [ 102.996039][ T4590] FAT-fs (loop3): Directory bread(block 67) failed [ 103.047769][ T4590] FAT-fs (loop3): Directory bread(block 68) failed [ 103.054478][ T4590] FAT-fs (loop3): Directory bread(block 69) failed [ 103.082494][ T4590] FAT-fs (loop3): Directory bread(block 70) failed [ 103.104294][ T4590] FAT-fs (loop3): Directory bread(block 71) failed [ 103.122424][ T4590] FAT-fs (loop3): Directory bread(block 72) failed [ 103.139648][ T4590] FAT-fs (loop3): Directory bread(block 73) failed [ 103.255337][ T4598] input: syz1 as /devices/virtual/input/input6 [ 103.373516][ T4603] loop0: detected capacity change from 0 to 512 [ 103.382140][ T4600] loop2: detected capacity change from 0 to 512 [ 103.427110][ T4600] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 103.438114][ T4600] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.448867][ T4600] __quota_error: 1 callbacks suppressed [ 103.448884][ T4600] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 103.464007][ T4600] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 103.476085][ T4600] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.90: Failed to acquire dquot type 1 [ 103.491329][ T4600] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.90: bg 0: block 40: padding at end of block bitmap is not set [ 103.506267][ T4600] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 103.516781][ T4600] EXT4-fs (loop2): 1 truncate cleaned up [ 103.524538][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.540701][ T4600] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.90: bad symlink. [ 103.781837][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 103.952923][ T4613] loop2: detected capacity change from 0 to 512 [ 104.005614][ T4613] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.142082][ T4613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.182720][ T4613] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.516327][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 104.890209][ T4630] loop0: detected capacity change from 0 to 8 [ 105.427606][ T4632] loop3: detected capacity change from 0 to 256 [ 105.471114][ T4632] FAT-fs (loop3): Directory bread(block 64) failed [ 105.486427][ T4632] FAT-fs (loop3): Directory bread(block 65) failed [ 105.500489][ T4632] FAT-fs (loop3): Directory bread(block 66) failed [ 105.513883][ T4632] FAT-fs (loop3): Directory bread(block 67) failed [ 105.522826][ T4632] FAT-fs (loop3): Directory bread(block 68) failed [ 105.536378][ T4632] FAT-fs (loop3): Directory bread(block 69) failed [ 105.543610][ T4632] FAT-fs (loop3): Directory bread(block 70) failed [ 105.610342][ T4632] FAT-fs (loop3): Directory bread(block 71) failed [ 105.637190][ T4632] FAT-fs (loop3): Directory bread(block 72) failed [ 105.694420][ T4632] FAT-fs (loop3): Directory bread(block 73) failed [ 105.702172][ T4638] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 105.784430][ T4638] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.825687][ T4638] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 105.884106][ T4638] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 105.934895][ T4638] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.105: Failed to acquire dquot type 1 [ 105.978324][ T4638] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.105: bg 0: block 40: padding at end of block bitmap is not set [ 106.024404][ T4638] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 106.080926][ T4638] EXT4-fs (loop4): 1 truncate cleaned up [ 106.086784][ T4638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.205146][ T4638] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.105: bad symlink. [ 106.443873][ T4658] set_capacity_and_notify: 1 callbacks suppressed [ 106.443911][ T4658] loop1: detected capacity change from 0 to 1024 [ 106.475054][ T4658] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 106.484983][ T4658] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 106.494976][ T4658] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 107.334909][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 107.550862][ T4667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 107.780439][ T4670] loop0: detected capacity change from 0 to 8 [ 108.366164][ T4678] loop1: detected capacity change from 0 to 256 [ 108.502863][ T4678] FAT-fs (loop1): Directory bread(block 64) failed [ 108.561688][ T4678] FAT-fs (loop1): Directory bread(block 65) failed [ 108.592667][ T4678] FAT-fs (loop1): Directory bread(block 66) failed [ 108.648460][ T4678] FAT-fs (loop1): Directory bread(block 67) failed [ 108.655567][ T4678] FAT-fs (loop1): Directory bread(block 68) failed [ 108.670823][ T4685] input: syz1 as /devices/virtual/input/input7 [ 108.686293][ T4678] FAT-fs (loop1): Directory bread(block 69) failed [ 108.706669][ T4678] FAT-fs (loop1): Directory bread(block 70) failed [ 108.729008][ T4678] FAT-fs (loop1): Directory bread(block 71) failed [ 108.735701][ T4678] FAT-fs (loop1): Directory bread(block 72) failed [ 108.748484][ T4678] FAT-fs (loop1): Directory bread(block 73) failed [ 109.036649][ T4696] loop2: detected capacity change from 0 to 512 [ 109.130072][ T4696] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 109.180070][ T4696] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.244047][ T4696] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 109.318544][ T4703] loop3: detected capacity change from 0 to 1024 [ 109.351843][ T4703] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 109.361711][ T4703] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 109.371778][ T4703] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 109.506571][ T4696] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 109.745368][ T4696] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.126: Failed to acquire dquot type 1 [ 110.054583][ T4696] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.126: bg 0: block 40: padding at end of block bitmap is not set [ 110.093490][ T4696] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 110.104203][ T4696] EXT4-fs (loop2): 1 truncate cleaned up [ 110.110220][ T4696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.125361][ T4696] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.126: bad symlink. [ 110.331366][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 110.429293][ T4710] loop1: detected capacity change from 0 to 512 [ 110.474974][ T4710] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.739843][ T4710] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.760859][ T4710] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.961925][ T4722] loop2: detected capacity change from 0 to 8 [ 111.282917][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 111.449737][ T4731] loop1: detected capacity change from 0 to 256 [ 111.526564][ T4731] FAT-fs (loop1): Directory bread(block 64) failed [ 111.553764][ T4731] FAT-fs (loop1): Directory bread(block 65) failed [ 111.581338][ T4731] FAT-fs (loop1): Directory bread(block 66) failed [ 111.608591][ T4731] FAT-fs (loop1): Directory bread(block 67) failed [ 111.615302][ T4731] FAT-fs (loop1): Directory bread(block 68) failed [ 111.661896][ T4731] FAT-fs (loop1): Directory bread(block 69) failed [ 111.678971][ T4731] FAT-fs (loop1): Directory bread(block 70) failed [ 111.702710][ T4731] FAT-fs (loop1): Directory bread(block 71) failed [ 111.739903][ T4731] FAT-fs (loop1): Directory bread(block 72) failed [ 111.777722][ T4731] FAT-fs (loop1): Directory bread(block 73) failed [ 112.140881][ T4746] loop4: detected capacity change from 0 to 1024 [ 112.207359][ T4746] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 112.217271][ T4746] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 112.227309][ T4746] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 113.578398][ T4762] loop3: detected capacity change from 0 to 512 [ 113.631821][ T4762] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.674933][ T4766] loop1: detected capacity change from 0 to 512 [ 113.695380][ T4766] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.772734][ T4766] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.787709][ T4766] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.812035][ T4762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.870320][ T4762] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.931177][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 114.161020][ T4782] loop2: detected capacity change from 0 to 512 [ 114.174472][ T4781] loop4: detected capacity change from 0 to 128 [ 114.183199][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 114.217279][ T4782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.274410][ T27] audit: type=1804 audit(1781400916.827:11): pid=4781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.156" name="/newroot/24/file0/bus" dev="loop4" ino=1048600 res=1 errno=0 [ 114.332512][ T4782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.458433][ T4765] input: syz1 as /devices/virtual/input/input8 [ 114.510943][ T4782] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.602094][ T27] audit: type=1800 audit(1781400917.157:12): pid=4782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.157" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 115.671183][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 115.925671][ T4806] loop4: detected capacity change from 0 to 512 [ 115.957817][ T4806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.993632][ T4806] EXT4-fs (loop4): 1 truncate cleaned up [ 115.999730][ T4806] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 116.008706][ T4322] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.022649][ T4806] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 116.113080][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 116.205226][ T4322] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 116.527207][ T4815] loop2: detected capacity change from 0 to 1024 [ 118.061059][ T4810] sched: RT throttling activated [ 118.096990][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.154152][ T4815] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 118.164011][ T4815] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 118.174215][ T4815] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 118.380189][ T4322] usb 4-1: Product: syz [ 118.448741][ T4322] usb 4-1: Manufacturer: syz [ 118.473872][ T4322] usb 4-1: SerialNumber: syz [ 118.487983][ T4322] usb 4-1: config 0 descriptor?? [ 118.556111][ T4322] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 118.732939][ T4322] gspca_sunplus: reg_r err -71 [ 118.746753][ T4322] usb 4-1: USB disconnect, device number 2 [ 118.890599][ T4834] loop4: detected capacity change from 0 to 8 [ 119.282314][ T4840] Zero length message leads to an empty skb [ 120.544243][ T4853] loop3: detected capacity change from 0 to 512 [ 120.657260][ T4853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.691125][ T4855] loop2: detected capacity change from 0 to 512 [ 120.788754][ T4855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.118052][ T4853] EXT4-fs (loop3): 1 truncate cleaned up [ 121.201926][ T4853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.358007][ T4855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.413016][ T4855] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.441710][ T4853] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 121.629128][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 121.822892][ T4869] loop0: detected capacity change from 0 to 1024 [ 121.844576][ T4869] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 121.854514][ T4869] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 121.864484][ T4869] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 122.600442][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 123.243358][ T4889] input: syz1 as /devices/virtual/input/input9 [ 123.436958][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.660444][ T7] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 124.417236][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.425369][ T7] usb 1-1: Product: syz [ 124.430396][ T7] usb 1-1: Manufacturer: syz [ 124.435386][ T7] usb 1-1: SerialNumber: syz [ 124.459173][ T7] usb 1-1: config 0 descriptor?? [ 124.481181][ T7] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 124.580764][ T4901] loop1: detected capacity change from 0 to 512 [ 124.615782][ T4901] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.718640][ T4901] EXT4-fs (loop1): 1 truncate cleaned up [ 124.727082][ T4901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 124.884299][ T4909] loop3: detected capacity change from 0 to 512 [ 124.905253][ T4909] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.923869][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 125.017367][ T7] gspca_sunplus: reg_r err -110 [ 125.048142][ T4909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.086430][ T4909] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.293906][ T4915] loop1: detected capacity change from 0 to 1024 [ 125.324531][ T4915] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 125.334474][ T4915] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 125.344483][ T4915] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 126.108836][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 126.403009][ T4351] usb 1-1: USB disconnect, device number 2 [ 127.034089][ T4937] loop0: detected capacity change from 0 to 8 [ 127.904610][ T4944] loop2: detected capacity change from 0 to 512 [ 127.912467][ T4944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.958560][ T4942] loop4: detected capacity change from 0 to 512 [ 127.986573][ T4942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.005262][ T4944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.027104][ T4944] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.054020][ T4942] EXT4-fs (loop4): 1 truncate cleaned up [ 128.180770][ T4953] loop3: detected capacity change from 0 to 1024 [ 128.237044][ T4942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.304084][ T4953] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 128.314011][ T4953] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 128.324009][ T4953] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 129.058198][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 129.142952][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 129.702161][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.768565][ T4972] input: syz1 as /devices/virtual/input/input10 [ 129.912416][ T7] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 129.932671][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.956462][ T7] usb 5-1: Product: syz [ 129.976428][ T7] usb 5-1: Manufacturer: syz [ 129.993129][ T7] usb 5-1: SerialNumber: syz [ 130.026311][ T7] usb 5-1: config 0 descriptor?? [ 130.077494][ T7] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 130.604422][ T7] gspca_sunplus: reg_r err -110 [ 131.482437][ T4985] loop2: detected capacity change from 0 to 512 [ 131.494687][ T4985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.547571][ T4985] EXT4-fs (loop2): 1 truncate cleaned up [ 131.555507][ T4985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.683893][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 131.742951][ T4992] loop3: detected capacity change from 0 to 256 [ 131.784016][ T4994] loop1: detected capacity change from 0 to 512 [ 131.804475][ T4994] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.836434][ T4994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.853207][ T4992] FAT-fs (loop3): Directory bread(block 64) failed [ 131.862365][ T4994] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.877204][ T4992] FAT-fs (loop3): Directory bread(block 65) failed [ 131.894020][ T4992] FAT-fs (loop3): Directory bread(block 66) failed [ 131.922889][ T4992] FAT-fs (loop3): Directory bread(block 67) failed [ 131.955234][ T4992] FAT-fs (loop3): Directory bread(block 68) failed [ 131.974264][ T4992] FAT-fs (loop3): Directory bread(block 69) failed [ 131.986633][ T4992] FAT-fs (loop3): Directory bread(block 70) failed [ 132.007109][ T4992] FAT-fs (loop3): Directory bread(block 71) failed [ 132.043865][ T4992] FAT-fs (loop3): Directory bread(block 72) failed [ 132.050880][ T4992] FAT-fs (loop3): Directory bread(block 73) failed [ 132.061683][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 132.268093][ T5002] loop2: detected capacity change from 0 to 1024 [ 132.291805][ T5002] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 132.301672][ T5002] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 132.311718][ T5002] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 134.058521][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.065342][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.729055][ T4326] usb 5-1: USB disconnect, device number 2 [ 135.044498][ T5008] loop1: detected capacity change from 0 to 8 [ 136.016801][ T5028] loop3: detected capacity change from 0 to 512 [ 136.044966][ T5028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.124163][ T5028] EXT4-fs (loop3): 1 truncate cleaned up [ 136.135093][ T5028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.228122][ T5034] input: syz1 as /devices/virtual/input/input11 [ 136.255393][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 136.449718][ T5040] loop0: detected capacity change from 0 to 256 [ 136.517794][ T5040] FAT-fs (loop0): Directory bread(block 64) failed [ 136.535749][ T5040] FAT-fs (loop0): Directory bread(block 65) failed [ 136.560916][ T5040] FAT-fs (loop0): Directory bread(block 66) failed [ 136.604172][ T5040] FAT-fs (loop0): Directory bread(block 67) failed [ 136.617641][ T5040] FAT-fs (loop0): Directory bread(block 68) failed [ 136.624335][ T5040] FAT-fs (loop0): Directory bread(block 69) failed [ 136.664865][ T5040] FAT-fs (loop0): Directory bread(block 70) failed [ 136.695152][ T5040] FAT-fs (loop0): Directory bread(block 71) failed [ 136.705326][ T5040] FAT-fs (loop0): Directory bread(block 72) failed [ 136.732095][ T5040] FAT-fs (loop0): Directory bread(block 73) failed [ 137.010623][ T5047] loop4: detected capacity change from 0 to 256 [ 137.063269][ T5047] FAT-fs (loop4): Unrecognized mount option "shortname=win95" or missing value [ 137.245979][ T5051] loop2: detected capacity change from 0 to 1024 [ 137.263952][ T5051] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 137.273790][ T5051] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 137.283861][ T5051] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 138.347040][ T5059] loop4: detected capacity change from 0 to 8 [ 138.608822][ T4322] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.811387][ T4322] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 138.836723][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.868091][ T4322] usb 4-1: Product: syz [ 138.872344][ T4322] usb 4-1: Manufacturer: syz [ 138.885892][ T4322] usb 4-1: SerialNumber: syz [ 138.894206][ T4322] usb 4-1: config 0 descriptor?? [ 138.913214][ T4322] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 139.305248][ T4322] gspca_sunplus: reg_r err -71 [ 139.369477][ T4322] usb 4-1: USB disconnect, device number 3 [ 139.848421][ T5073] loop0: detected capacity change from 0 to 512 [ 139.868065][ T5073] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.948954][ T5073] EXT4-fs (loop0): 1 truncate cleaned up [ 139.969492][ T5073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 140.192440][ T5088] loop4: detected capacity change from 0 to 256 [ 140.217286][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 140.255357][ T5088] FAT-fs (loop4): Directory bread(block 64) failed [ 140.304099][ T5088] FAT-fs (loop4): Directory bread(block 65) failed [ 140.335755][ T5088] FAT-fs (loop4): Directory bread(block 66) failed [ 140.352734][ T5088] FAT-fs (loop4): Directory bread(block 67) failed [ 140.371645][ T5088] FAT-fs (loop4): Directory bread(block 68) failed [ 140.383694][ T5090] loop0: detected capacity change from 0 to 256 [ 140.384565][ T5088] FAT-fs (loop4): Directory bread(block 69) failed [ 140.398589][ T5088] FAT-fs (loop4): Directory bread(block 70) failed [ 140.405311][ T5088] FAT-fs (loop4): Directory bread(block 71) failed [ 140.418593][ T5090] FAT-fs (loop0): Unrecognized mount option "shortname=win95" or missing value [ 140.427575][ T5088] FAT-fs (loop4): Directory bread(block 72) failed [ 140.453367][ T5088] FAT-fs (loop4): Directory bread(block 73) failed [ 140.862522][ T5096] loop0: detected capacity change from 0 to 8 [ 141.000927][ T5098] fuse: Unknown parameter 'grou00000000000000000000' [ 142.177028][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.385496][ T7] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 142.399623][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.417603][ T5121] input: syz1 as /devices/virtual/input/input12 [ 142.426501][ T7] usb 4-1: Product: syz [ 142.442176][ T7] usb 4-1: Manufacturer: syz [ 142.509608][ T7] usb 4-1: SerialNumber: syz [ 142.598970][ T7] usb 4-1: config 0 descriptor?? [ 142.799052][ T7] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 142.855840][ T5127] loop2: detected capacity change from 0 to 256 [ 142.871703][ T5123] loop4: detected capacity change from 0 to 256 [ 142.881802][ T5123] FAT-fs (loop4): Unrecognized mount option "shortname=win95" or missing value [ 142.908821][ T5127] FAT-fs (loop2): Directory bread(block 64) failed [ 142.915683][ T5127] FAT-fs (loop2): Directory bread(block 65) failed [ 142.942031][ T5127] FAT-fs (loop2): Directory bread(block 66) failed [ 142.969246][ T5127] FAT-fs (loop2): Directory bread(block 67) failed [ 142.975945][ T5127] FAT-fs (loop2): Directory bread(block 68) failed [ 143.054015][ T5127] FAT-fs (loop2): Directory bread(block 69) failed [ 143.106831][ T5127] FAT-fs (loop2): Directory bread(block 70) failed [ 143.116772][ T5127] FAT-fs (loop2): Directory bread(block 71) failed [ 143.166251][ T5127] FAT-fs (loop2): Directory bread(block 72) failed [ 143.223316][ T5127] FAT-fs (loop2): Directory bread(block 73) failed [ 143.447549][ T7] gspca_sunplus: reg_r err -110 [ 143.562060][ T5137] loop4: detected capacity change from 0 to 8 [ 144.967274][ T5142] fuse: Unknown parameter 'grou00000000000000000000' [ 145.866741][ T5155] loop4: detected capacity change from 0 to 512 [ 145.901324][ T5155] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.016507][ T5155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.044197][ T7] usb 4-1: USB disconnect, device number 4 [ 146.061573][ T5155] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.270484][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 146.378100][ T5167] loop4: detected capacity change from 0 to 256 [ 146.399806][ T5167] FAT-fs (loop4): Unrecognized mount option "shortname=win95" or missing value [ 146.614646][ T5171] loop2: detected capacity change from 0 to 256 [ 146.830295][ T5171] FAT-fs (loop2): Directory bread(block 64) failed [ 146.847561][ T5171] FAT-fs (loop2): Directory bread(block 65) failed [ 146.854264][ T5171] FAT-fs (loop2): Directory bread(block 66) failed [ 146.903612][ T5171] FAT-fs (loop2): Directory bread(block 67) failed [ 146.936492][ T5171] FAT-fs (loop2): Directory bread(block 68) failed [ 146.962105][ T5171] FAT-fs (loop2): Directory bread(block 69) failed [ 146.983423][ T5171] FAT-fs (loop2): Directory bread(block 70) failed [ 147.006245][ T5171] FAT-fs (loop2): Directory bread(block 71) failed [ 147.027120][ T5171] FAT-fs (loop2): Directory bread(block 72) failed [ 147.059282][ T5171] FAT-fs (loop2): Directory bread(block 73) failed [ 147.207767][ T5181] loop0: detected capacity change from 0 to 8 [ 147.576431][ T5183] fuse: Unknown parameter 'grou00000000000000000000' [ 148.688554][ T5194] input: syz1 as /devices/virtual/input/input13 [ 148.907041][ T4322] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.525341][ T4322] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 149.585459][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.634084][ T4322] usb 5-1: Product: syz [ 149.667001][ T4322] usb 5-1: Manufacturer: syz [ 149.689610][ T4322] usb 5-1: SerialNumber: syz [ 149.747905][ T4322] usb 5-1: config 0 descriptor?? [ 149.792560][ T4322] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 150.462057][ T4322] gspca_sunplus: reg_r err -110 [ 151.098876][ T5215] loop2: detected capacity change from 0 to 256 [ 151.159811][ T5215] FAT-fs (loop2): Directory bread(block 64) failed [ 151.257482][ T5215] FAT-fs (loop2): Directory bread(block 65) failed [ 151.279293][ T5215] FAT-fs (loop2): Directory bread(block 66) failed [ 151.311293][ T5215] FAT-fs (loop2): Directory bread(block 67) failed [ 151.399404][ T5215] FAT-fs (loop2): Directory bread(block 68) failed [ 151.407184][ T5215] FAT-fs (loop2): Directory bread(block 69) failed [ 151.413885][ T5215] FAT-fs (loop2): Directory bread(block 70) failed [ 151.478835][ T5219] loop3: detected capacity change from 0 to 8 [ 151.605041][ T5215] FAT-fs (loop2): Directory bread(block 71) failed [ 151.676640][ T5215] FAT-fs (loop2): Directory bread(block 72) failed [ 151.749235][ T5215] FAT-fs (loop2): Directory bread(block 73) failed [ 152.165960][ T4351] usb 5-1: USB disconnect, device number 3 [ 152.582662][ T5238] loop4: detected capacity change from 0 to 1024 [ 152.598559][ T5238] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 152.608574][ T5238] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 152.618611][ T5238] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 161.257556][ T4357] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.827097][ T4326] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.039862][ T4326] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 162.059483][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.079186][ T4326] usb 4-1: Product: syz [ 162.083482][ T4326] usb 4-1: Manufacturer: syz [ 162.099425][ T4326] usb 4-1: SerialNumber: syz [ 162.127773][ T4326] usb 4-1: config 0 descriptor?? [ 162.155565][ T4326] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 162.758854][ T4326] gspca_sunplus: reg_r err -110 [ 164.796046][ T5277] loop2: detected capacity change from 0 to 1024 [ 164.850139][ T5277] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 164.860024][ T5277] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 164.870106][ T5277] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 165.457470][ T4356] usb 4-1: USB disconnect, device number 5 [ 165.785934][ T5285] input: syz1 as /devices/virtual/input/input14 [ 166.915648][ T5319] loop1: detected capacity change from 0 to 1024 [ 167.647066][ T5319] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 167.656939][ T5319] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 167.666914][ T5319] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 168.582472][ T5328] loop0: detected capacity change from 0 to 512 [ 168.589764][ T5328] EXT4-fs: Ignoring removed oldalloc option [ 168.816100][ T5324] input: syz1 as /devices/virtual/input/input15 [ 169.068112][ T5328] EXT4-fs error (device loop0): ext4_xattr_inode_iget:397: comm syz.0.336: Parent and EA inode have the same ino 15 [ 169.085529][ T5328] EXT4-fs (loop0): 1 orphan inode deleted [ 169.091554][ T5328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.865281][ T5351] loop3: detected capacity change from 0 to 8 [ 169.916311][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 171.572604][ T5373] input: syz1 as /devices/virtual/input/input16 [ 172.627917][ T5398] loop4: detected capacity change from 0 to 512 [ 172.662170][ T5398] EXT4-fs: Ignoring removed oldalloc option [ 172.681450][ T5403] loop2: detected capacity change from 0 to 8 [ 172.787001][ T5398] EXT4-fs error (device loop4): ext4_xattr_inode_iget:397: comm syz.4.355: Parent and EA inode have the same ino 15 [ 172.852699][ T5398] EXT4-fs (loop4): 1 orphan inode deleted [ 172.922825][ T5398] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.149661][ T5424] input: syz1 as /devices/virtual/input/input17 [ 175.695915][ T5452] loop3: detected capacity change from 0 to 8 [ 177.023966][ T5467] loop0: detected capacity change from 0 to 512 [ 177.216340][ T5472] input: syz1 as /devices/virtual/input/input18 [ 177.308414][ T5467] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 177.353918][ T5467] EXT4-fs (loop0): orphan cleanup on readonly fs [ 177.427805][ T5467] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 177.497367][ T5467] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 177.562674][ T5467] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.382: Failed to acquire dquot type 1 [ 177.576686][ T5475] loop1: detected capacity change from 0 to 512 [ 177.603950][ T5475] EXT4-fs: Invalid want_extra_isize 1 [ 177.620868][ T5467] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.382: bg 0: block 40: padding at end of block bitmap is not set [ 177.691768][ T5475] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 177.700207][ T5467] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 177.729855][ T5475] netlink: 'syz.1.385': attribute type 2 has an invalid length. [ 177.797448][ T5467] EXT4-fs (loop0): 1 truncate cleaned up [ 177.803318][ T5467] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 177.982821][ T5467] EXT4-fs error (device loop0): ext4_get_link:104: inode #16: comm syz.0.382: bad symlink. [ 178.799093][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 179.787797][ T5490] loop0: detected capacity change from 0 to 8 [ 181.471948][ T5521] input: syz1 as /devices/virtual/input/input19 [ 181.897034][ T4326] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.211955][ T4326] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 182.227109][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.255609][ T4326] usb 4-1: Product: syz [ 182.272902][ T4326] usb 4-1: Manufacturer: syz [ 182.286914][ T4326] usb 4-1: SerialNumber: syz [ 182.335415][ T4326] usb 4-1: config 0 descriptor?? [ 182.369140][ T4326] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 182.381770][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 183.417881][ T4326] gspca_sunplus: reg_r err -110 [ 184.693565][ T4351] usb 4-1: USB disconnect, device number 6 [ 185.076758][ T5560] input: syz1 as /devices/virtual/input/input20 [ 187.063175][ T5588] loop1: detected capacity change from 0 to 512 [ 187.110710][ T5588] EXT4-fs: Ignoring removed oldalloc option [ 187.212383][ T5588] EXT4-fs error (device loop1): ext4_xattr_inode_iget:397: comm syz.1.411: Parent and EA inode have the same ino 15 [ 187.275691][ T5597] loop2: detected capacity change from 0 to 256 [ 187.315214][ T5597] FAT-fs (loop2): Unrecognized mount option "shortname=win95" or missing value [ 187.365239][ T5588] EXT4-fs (loop1): 1 orphan inode deleted [ 187.418813][ T5588] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 188.123844][ T5614] input: syz1 as /devices/virtual/input/input21 [ 190.674686][ T5645] loop4: detected capacity change from 0 to 256 [ 190.709356][ T5645] FAT-fs (loop4): Unrecognized mount option "shortname=win95" or missing value [ 191.356297][ T5660] input: syz1 as /devices/virtual/input/input22 [ 194.367966][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.374435][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.436476][ T5692] loop0: detected capacity change from 0 to 256 [ 194.481963][ T5692] FAT-fs (loop0): Unrecognized mount option "shortname=win95" or missing value [ 195.152006][ T5700] loop4: detected capacity change from 0 to 512 [ 196.099334][ T5707] loop0: detected capacity change from 0 to 8 [ 197.897103][ T5700] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 197.906287][ T5700] EXT4-fs (loop4): orphan cleanup on readonly fs [ 197.972325][ T5700] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 197.982062][ T5700] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 197.993120][ T5700] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.453: Failed to acquire dquot type 1 [ 198.137623][ T5700] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.453: bg 0: block 40: padding at end of block bitmap is not set [ 198.256961][ T5700] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 198.268145][ T5725] input: syz1 as /devices/virtual/input/input23 [ 198.319551][ T5700] EXT4-fs (loop4): 1 truncate cleaned up [ 198.364515][ T5700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.834339][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 199.434073][ T5741] loop2: detected capacity change from 0 to 256 [ 199.469671][ T5741] FAT-fs (loop2): Unrecognized mount option "shortname=win95" or missing value [ 201.536401][ T5763] loop0: detected capacity change from 0 to 512 [ 201.656295][ T5763] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 201.708135][ T5763] EXT4-fs (loop0): orphan cleanup on readonly fs [ 201.987552][ T5763] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 202.011235][ T5763] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 202.024013][ T5770] input: syz1 as /devices/virtual/input/input24 [ 202.101914][ T5763] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.470: Failed to acquire dquot type 1 [ 202.199031][ T5763] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.470: bg 0: block 40: padding at end of block bitmap is not set [ 202.322221][ T5763] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 202.385078][ T5763] EXT4-fs (loop0): 1 truncate cleaned up [ 202.570618][ T5763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 202.740644][ T5763] EXT4-fs error (device loop0): ext4_get_link:104: inode #16: comm syz.0.470: bad symlink. [ 203.611727][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 204.111434][ T5787] loop2: detected capacity change from 0 to 256 [ 204.183281][ T5787] FAT-fs (loop2): Unrecognized mount option "shortname=win95" or missing value [ 204.424496][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.629211][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.808779][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.673428][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.681395][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.690927][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.177999][ T5814] input: syz1 as /devices/virtual/input/input25 [ 207.295644][ T5559] EXT4-fs (loop1): unmounting filesystem. [ 207.820227][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 207.820248][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 207.820330][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 207.826346][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 207.833114][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 207.946503][ T5821] loop4: detected capacity change from 0 to 512 [ 208.195010][ T5821] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 208.235428][ T5821] EXT4-fs (loop4): orphan cleanup on readonly fs [ 208.261965][ T5821] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 208.377516][ T5821] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 208.758245][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 208.887375][ T5821] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.485: Failed to acquire dquot type 1 [ 208.952528][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 209.005171][ T5821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.485: bg 0: block 40: padding at end of block bitmap is not set [ 209.063372][ T5821] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 209.073600][ T5821] EXT4-fs (loop4): 1 truncate cleaned up [ 209.080435][ T5821] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 209.188784][ T5821] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.485: bad symlink. [ 209.328109][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.335788][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.359421][ T5791] device bridge_slave_0 entered promiscuous mode [ 209.502901][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.511521][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.103047][ T5791] device bridge_slave_1 entered promiscuous mode [ 210.486319][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 210.626096][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.790656][ T5873] input: syz1 as /devices/virtual/input/input26 [ 210.851665][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 211.679736][ T4483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.874790][ T5883] loop2: detected capacity change from 0 to 1024 [ 211.882347][ T5883] EXT4-fs: Ignoring removed orlov option [ 212.142996][ T5883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 213.058473][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 213.070904][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.435781][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 213.494856][ T4483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.633976][ T5791] team0: Port device team_slave_0 added [ 213.707620][ T5902] loop3: detected capacity change from 0 to 2048 [ 213.760504][ T4483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.786752][ T5902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 213.853399][ T5791] team0: Port device team_slave_1 added [ 213.952324][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 213.976150][ T4483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.089551][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.115243][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.170320][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.206713][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.231549][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.309787][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.381867][ T5909] device syzkaller1 entered promiscuous mode [ 215.077036][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 215.216509][ T5935] loop4: detected capacity change from 0 to 512 [ 215.261360][ T5791] device hsr_slave_0 entered promiscuous mode [ 215.290477][ T5935] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 215.324029][ T5791] device hsr_slave_1 entered promiscuous mode [ 215.433794][ T5935] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.467149][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.507836][ T5935] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 215.517359][ T5791] Cannot create hsr debugfs directory [ 215.566396][ T5942] input: syz1 as /devices/virtual/input/input27 [ 215.678660][ T5935] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 216.311063][ T5935] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.508: Failed to acquire dquot type 1 [ 216.339016][ T5935] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.508: bg 0: block 40: padding at end of block bitmap is not set [ 216.362153][ T5935] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 216.375785][ T5935] EXT4-fs (loop4): 1 truncate cleaned up [ 216.386377][ T5935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.472038][ T5935] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.508: bad symlink. [ 216.597219][ T5950] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.508: bad symlink. [ 221.234527][ T5959] loop2: detected capacity change from 0 to 1024 [ 221.242011][ T5959] EXT4-fs: Ignoring removed orlov option [ 221.301551][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 221.352162][ T5959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 221.798013][ T5969] Illegal XDP return value 4294967289 on prog (id 16) dev N/A, expect packet loss! [ 221.809445][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 223.321107][ T6011] input: syz1 as /devices/virtual/input/input28 [ 224.266734][ T6016] loop2: detected capacity change from 0 to 512 [ 224.282746][ T5791] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.346099][ T6016] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.525: invalid indirect mapped block 11 (level 0) [ 224.414979][ T5791] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.442419][ T6016] EXT4-fs (loop2): Remounting filesystem read-only [ 224.454944][ T5791] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.492342][ T6016] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.525: attempt to clear invalid blocks 1024 len 1 [ 224.601574][ T6016] EXT4-fs (loop2): Remounting filesystem read-only [ 224.645515][ T6016] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 224.694980][ T5791] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.772287][ T6016] EXT4-fs (loop2): Remounting filesystem read-only [ 224.895849][ T6016] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.525: invalid indirect mapped block 1819239214 (level 0) [ 225.363284][ T6016] EXT4-fs (loop2): Remounting filesystem read-only [ 225.417034][ T6016] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.525: invalid indirect mapped block 33554432 (level 2) [ 225.539408][ T6016] EXT4-fs (loop2): Remounting filesystem read-only [ 225.547192][ T6016] EXT4-fs (loop2): 1 truncate cleaned up [ 225.552929][ T6016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 225.952887][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 226.836564][ T6044] loop4: detected capacity change from 0 to 8192 [ 226.940200][ T6044] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.070034][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.176394][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.246695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.268694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.643725][ T6082] input: syz1 as /devices/virtual/input/input29 [ 228.299582][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.377338][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.469077][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.488185][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.557008][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.564210][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.781250][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.790319][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.799032][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.806212][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.476364][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.531040][ T6104] loop2: detected capacity change from 0 to 512 [ 229.575641][ T6104] EXT4-fs: Ignoring removed oldalloc option [ 229.596132][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.646071][ T6104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.664955][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.729656][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.761734][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.772946][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.878987][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.985290][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.009238][ T6104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.091649][ T6104] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.122735][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.422793][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.487530][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.545347][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.611386][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.785640][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 230.844864][ T4483] device hsr_slave_0 left promiscuous mode [ 230.907177][ T4483] device hsr_slave_1 left promiscuous mode [ 230.917463][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.925044][ T4483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.047034][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.325251][ T4483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.667418][ T4483] device bridge_slave_1 left promiscuous mode [ 231.762267][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.890859][ T4483] device bridge_slave_0 left promiscuous mode [ 231.900852][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.107277][ T4483] device veth1_macvtap left promiscuous mode [ 232.156575][ T4483] device veth0_macvtap left promiscuous mode [ 232.175039][ T4483] device veth1_vlan left promiscuous mode [ 232.211356][ T4483] device veth0_vlan left promiscuous mode [ 232.899644][ T6155] input: syz1 as /devices/virtual/input/input30 [ 234.464716][ T4483] team0 (unregistering): Port device team_slave_1 removed [ 234.544128][ T4483] team0 (unregistering): Port device team_slave_0 removed [ 234.609957][ T4483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.671638][ T4483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.163213][ T4483] bond0 (unregistering): Released all slaves [ 236.937576][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.945310][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.098555][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.481048][ T6215] input: syz1 as /devices/virtual/input/input31 [ 239.473132][ T6225] loop3: detected capacity change from 0 to 512 [ 239.542982][ T6225] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.252827][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.270641][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.358973][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.374820][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.404692][ T5791] device veth0_vlan entered promiscuous mode [ 241.440129][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.466122][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.523447][ T5791] device veth1_vlan entered promiscuous mode [ 242.266477][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.276070][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.335983][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.411933][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.428839][ T5791] device veth0_macvtap entered promiscuous mode [ 242.510886][ T5791] device veth1_macvtap entered promiscuous mode [ 242.563160][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.586264][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.608754][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.649417][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.670497][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.699140][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.724346][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.735947][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.748614][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.761080][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.773638][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.811614][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.861915][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.883225][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.906958][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.930721][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.954078][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.976940][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.998179][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.021532][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.061586][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.081919][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.097426][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.148814][ T5791] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.163090][ T5791] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.174478][ T5791] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.183774][ T5791] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.431318][ T4548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.473964][ T4548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.560685][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.623914][ T4488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.655631][ T4488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.165393][ T6302] loop2: detected capacity change from 0 to 1024 [ 245.172911][ T6302] EXT4-fs: Ignoring removed orlov option [ 246.335114][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.497395][ T6302] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.176950][ T4351] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 247.381288][ T4351] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 247.421319][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.640115][ T4351] usb 1-1: Product: syz [ 247.644736][ T4351] usb 1-1: Manufacturer: syz [ 247.674061][ T4351] usb 1-1: SerialNumber: syz [ 247.742959][ T6323] loop5: detected capacity change from 0 to 8 [ 247.923873][ T4351] usb 1-1: config 0 descriptor?? [ 248.266266][ T4351] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 248.331567][ T4351] gspca_sunplus: reg_r err -71 [ 248.338709][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 248.412812][ T4351] usb 1-1: USB disconnect, device number 3 [ 253.644500][ T6361] netlink: 'syz.2.599': attribute type 4 has an invalid length. [ 253.693750][ T6366] loop5: detected capacity change from 0 to 128 [ 253.744872][ T6367] netlink: 'syz.2.599': attribute type 4 has an invalid length. [ 254.124840][ T6377] syz.5.600: attempt to access beyond end of device [ 254.124840][ T6377] loop5: rw=2049, sector=145, nr_sectors = 536 limit=128 [ 254.884761][ T6366] syz.5.600: attempt to access beyond end of device [ 254.884761][ T6366] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 254.914669][ T6383] loop3: detected capacity change from 0 to 128 [ 255.030599][ T6366] syz.5.600: attempt to access beyond end of device [ 255.030599][ T6366] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 255.095583][ T6376] syz.5.600: attempt to access beyond end of device [ 255.095583][ T6376] loop5: rw=0, sector=150, nr_sectors = 1 limit=128 [ 255.124895][ T6389] syz.3.603: attempt to access beyond end of device [ 255.124895][ T6389] loop3: rw=2049, sector=145, nr_sectors = 296 limit=128 [ 255.431312][ T6395] loop4: detected capacity change from 0 to 512 [ 255.437320][ T4351] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 255.555077][ T6395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 255.647376][ T4351] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 255.683111][ T27] audit: type=1800 audit(1781401058.237:13): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.607" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 255.683437][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.719558][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.726059][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.788972][ T6405] loop2: detected capacity change from 0 to 512 [ 255.932792][ T4351] usb 1-1: Product: syz [ 255.948629][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 255.957229][ T4351] usb 1-1: Manufacturer: syz [ 255.961912][ T4351] usb 1-1: SerialNumber: syz [ 256.211587][ T6405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.400680][ T6405] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.754864][ T4351] usb 1-1: config 0 descriptor?? [ 256.764676][ T4351] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 256.973070][ T4351] gspca_sunplus: reg_r err -71 [ 256.988845][ T4351] usb 1-1: USB disconnect, device number 4 [ 257.097556][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 257.363442][ T6434] loop5: detected capacity change from 0 to 512 [ 257.504226][ T6434] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 257.555031][ T6426] loop4: detected capacity change from 0 to 8192 [ 257.650335][ T6426] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.666901][ T6434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 257.727004][ T6434] System zones: 1-12 [ 257.756602][ T6434] EXT4-fs (loop5): 1 truncate cleaned up [ 257.836943][ T6434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 257.927629][ T6445] loop0: detected capacity change from 0 to 1024 [ 258.049101][ T6445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 258.086949][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 258.151859][ T6453] loop2: detected capacity change from 0 to 128 [ 258.281373][ T6453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 258.320871][ T6453] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.383287][ T6457] loop5: detected capacity change from 0 to 512 [ 258.514061][ T6457] EXT4-fs (loop5): 1 truncate cleaned up [ 258.540966][ T6457] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 258.558082][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 258.651746][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 258.697797][ T27] audit: type=1800 audit(1781401061.257:14): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.622" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 258.718951][ T6457] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.622: invalid indirect mapped block 234881024 (level 0) [ 259.296727][ T6471] bridge0: port 1(bridge_slave_0) entered listening state [ 259.974170][ T6474] loop3: detected capacity change from 0 to 8192 [ 259.981789][ T6474] FAT-fs (loop3): Unrecognized mount option "00000000000000000000000ÿÿÿÿ18446744073709551615" or missing value [ 260.057541][ T6481] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 260.069287][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 260.148427][ T6481] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.271012][ T6481] bond0: (slave team0): Enslaving as an active interface with an up link [ 260.471893][ T6487] input: syz1 as /devices/virtual/input/input32 [ 261.493419][ T6504] loop4: detected capacity change from 0 to 512 [ 261.576668][ T6504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 261.675606][ T6504] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.637: bg 0: block 393: padding at end of block bitmap is not set [ 261.850631][ T6504] EXT4-fs (loop4): Remounting filesystem read-only [ 261.867681][ T6504] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 262.196676][ T6504] EXT4-fs (loop4): Remounting filesystem read-only [ 262.274472][ T6504] EXT4-fs (loop4): 2 truncates cleaned up [ 262.354229][ T6504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.272161][ T6527] loop5: detected capacity change from 0 to 128 [ 263.323616][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 263.894987][ T6545] loop5: detected capacity change from 0 to 512 [ 263.904541][ T6544] loop2: detected capacity change from 0 to 128 [ 263.976033][ T6546] input: syz1 as /devices/virtual/input/input33 [ 264.077990][ T6545] EXT4-fs: inline encryption not supported [ 264.143944][ T6545] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 264.565782][ T6545] EXT4-fs (loop5): orphan cleanup on readonly fs [ 264.584099][ T6544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 264.616950][ T6545] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.647: inode #15: comm syz.5.647: iget: illegal inode # [ 264.711364][ T6544] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.773743][ T6545] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.647: couldn't read orphan inode 15 (err -117) [ 264.814400][ T27] audit: type=1800 audit(1781401067.367:15): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.649" name="file0" dev="loop2" ino=12 res=0 errno=0 [ 265.056608][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 265.094303][ T6545] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 265.121499][ T6545] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 265.326422][ T6545] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 265.764034][ T6562] loop4: detected capacity change from 0 to 512 [ 265.860633][ T6562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 265.926163][ T6566] loop2: detected capacity change from 0 to 128 [ 265.948940][ T6562] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.653: bg 0: block 393: padding at end of block bitmap is not set [ 265.968570][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 266.008039][ T6562] EXT4-fs (loop4): Remounting filesystem read-only [ 266.014648][ T6562] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 266.027354][ T6562] EXT4-fs (loop4): Remounting filesystem read-only [ 266.034357][ T6562] EXT4-fs (loop4): 2 truncates cleaned up [ 266.130379][ T6562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 266.444470][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 266.880221][ T6586] input: syz1 as /devices/virtual/input/input34 [ 267.406421][ T6589] netlink: 'syz.4.660': attribute type 32 has an invalid length. [ 269.412820][ T6610] loop5: detected capacity change from 0 to 512 [ 269.528812][ T6610] EXT4-fs (loop5): 1 truncate cleaned up [ 269.536052][ T6610] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 269.682760][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 269.987021][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 270.057048][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 270.070138][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 270.226313][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 270.772550][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 270.867068][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 270.962201][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 271.033083][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 271.085802][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 271.167320][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 271.367375][ T6647] loop4: detected capacity change from 0 to 764 [ 271.489956][ T6647] rock: directory entry would overflow storage [ 271.496494][ T6647] rock: sig=0x4654, size=5, remaining=4 [ 271.545366][ T6653] loop5: detected capacity change from 0 to 736 [ 272.031715][ T6660] loop3: detected capacity change from 0 to 1024 [ 272.182949][ T6664] device syzkaller0 entered promiscuous mode [ 272.259357][ T6660] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 272.714026][ T6678] input: syz1 as /devices/virtual/input/input35 [ 273.340682][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 273.497451][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.567772][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.608269][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.700943][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.709442][ T6717] loop2: detected capacity change from 0 to 512 [ 274.812719][ T6712] device syzkaller0 entered promiscuous mode [ 276.853808][ T6732] input: syz1 as /devices/virtual/input/input36 [ 277.603080][ T6739] loop3: detected capacity change from 0 to 1024 [ 278.564591][ T6739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 279.033709][ T6761] __nla_validate_parse: 44 callbacks suppressed [ 279.033730][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 279.361957][ T6769] loop2: detected capacity change from 0 to 512 [ 279.553760][ T27] audit: type=1326 audit(1781401082.107:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1d9ce59 code=0x7ffc0000 [ 279.615507][ T27] audit: type=1326 audit(1781401082.107:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1d9ce59 code=0x7ffc0000 [ 279.671196][ T27] audit: type=1326 audit(1781401082.107:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1d9ce59 code=0x7ffc0000 [ 279.704850][ T27] audit: type=1326 audit(1781401082.107:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1d9ce59 code=0x7ffc0000 [ 279.742171][ T27] audit: type=1326 audit(1781401082.107:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d1d5d68e code=0x7ffc0000 [ 279.796092][ T27] audit: type=1326 audit(1781401082.107:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1d9ce59 code=0x7ffc0000 [ 279.831175][ T27] audit: type=1326 audit(1781401082.107:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1d9ce59 code=0x7ffc0000 [ 279.866641][ T27] audit: type=1326 audit(1781401082.107:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1d9ce59 code=0x7ffc0000 [ 279.898862][ T27] audit: type=1326 audit(1781401082.107:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d1d9ce59 code=0x7ffc0000 [ 279.938696][ T27] audit: type=1326 audit(1781401082.107:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb6d1d9ce59 code=0x7ffc0000 [ 281.326717][ T6789] input: syz1 as /devices/virtual/input/input37 [ 283.070381][ T6752] netlink: 45 bytes leftover after parsing attributes in process `syz.4.703'. [ 283.464104][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 283.771505][ T6817] loop2: detected capacity change from 0 to 512 [ 284.569872][ T6838] input: syz1 as /devices/virtual/input/input38 [ 285.467045][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 285.476492][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.726'. [ 285.587056][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.726'. [ 286.853988][ T6861] loop5: detected capacity change from 0 to 512 [ 287.018790][ T6861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 287.059094][ T6861] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.136044][ T6876] loop4: detected capacity change from 0 to 256 [ 287.156775][ T6876] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.256361][ T6876] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.292803][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 287.913710][ T6891] input: syz1 as /devices/virtual/input/input39 [ 288.762496][ T6899] loop0: detected capacity change from 0 to 512 [ 288.815271][ T6901] tipc: Failed to remove unknown binding: 66,0,0/0:2875146502/2875146503 [ 288.824318][ T6901] tipc: Failed to remove unknown binding: 66,0,0/0:2875146502/2875146503 [ 288.833874][ T6904] tipc: Failed to remove unknown binding: 66,0,0/0:2918967083/2918967085 [ 289.028641][ T6899] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 289.057126][ T6899] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.004357][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 290.283045][ T6917] loop4: detected capacity change from 0 to 8192 [ 290.301868][ T6927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 290.354782][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 290.354797][ T27] audit: type=1800 audit(1781401092.907:36): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.745" name="file2" dev="loop4" ino=1048610 res=0 errno=0 [ 290.379732][ T6917] syz.4.745: attempt to access beyond end of device [ 290.379732][ T6917] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 292.264715][ T6953] loop2: detected capacity change from 0 to 512 [ 292.283806][ T6953] EXT4-fs: Invalid want_extra_isize 1 [ 292.441812][ T6953] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 292.701018][ T6953] netlink: 'syz.2.757': attribute type 2 has an invalid length. [ 297.219016][ T7037] loop5: detected capacity change from 0 to 512 [ 297.372554][ T7037] EXT4-fs (loop5): 1 truncate cleaned up [ 297.388261][ T7037] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 297.481179][ T7037] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.777: bg 0: block 465: padding at end of block bitmap is not set [ 297.710721][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 298.959347][ T7066] netlink: 108 bytes leftover after parsing attributes in process `syz.2.786'. [ 298.991591][ T7067] sg_write: data in/out 168924/146 bytes for SCSI command 0x0-- guessing data in; [ 298.991591][ T7067] program syz.4.785 not setting count and/or reply_len properly [ 302.191042][ T5278] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 302.206633][ T7113] loop3: detected capacity change from 0 to 512 [ 302.263997][ T5278] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 302.590716][ T7113] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 302.758748][ T7113] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.797: inode #15: comm syz.3.797: iget: illegal inode # [ 302.997751][ T7113] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.797: couldn't read orphan inode 15 (err -117) [ 303.056909][ T7113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 303.392481][ T7130] loop5: detected capacity change from 0 to 256 [ 303.534630][ T7130] FAT-fs (loop5): Directory bread(block 64) failed [ 303.555730][ T7130] FAT-fs (loop5): Directory bread(block 65) failed [ 303.571731][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 303.598270][ T7130] FAT-fs (loop5): Directory bread(block 66) failed [ 303.604950][ T7130] FAT-fs (loop5): Directory bread(block 67) failed [ 303.674072][ T7120] fido_id[7120]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 303.697012][ T7130] FAT-fs (loop5): Directory bread(block 68) failed [ 303.731842][ T7130] FAT-fs (loop5): Directory bread(block 69) failed [ 303.746001][ T7130] FAT-fs (loop5): Directory bread(block 70) failed [ 303.792591][ T7130] FAT-fs (loop5): Directory bread(block 71) failed [ 303.947006][ T7130] FAT-fs (loop5): Directory bread(block 72) failed [ 303.963943][ T7130] FAT-fs (loop5): Directory bread(block 73) failed [ 308.065263][ T7180] loop2: detected capacity change from 0 to 1764 [ 311.262391][ T7222] loop3: detected capacity change from 0 to 512 [ 311.559014][ T7222] EXT4-fs (loop3): 1 truncate cleaned up [ 311.590405][ T7222] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.688873][ T7222] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.836: bg 0: block 465: padding at end of block bitmap is not set [ 311.880937][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 311.945439][ T7230] loop2: detected capacity change from 0 to 4096 [ 312.403586][ T7230] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0002] [ 312.412954][ T7230] System zones: 0-5 [ 312.463186][ T7230] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 312.474732][ T7243] loop0: detected capacity change from 0 to 512 [ 312.533464][ T7243] EXT4-fs: Invalid want_extra_isize 1 [ 313.130638][ T7230] x_tables: duplicate underflow at hook 1 [ 313.753455][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 313.947990][ T7243] netlink: 'syz.0.841': attribute type 1 has an invalid length. [ 313.955793][ T7243] netlink: 'syz.0.841': attribute type 2 has an invalid length. [ 315.894608][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 316.533282][ T7281] loop5: detected capacity change from 0 to 4096 [ 317.033231][ T7287] loop2: detected capacity change from 0 to 512 [ 317.148254][ T7293] loop3: detected capacity change from 0 to 256 [ 317.164304][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.171151][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.265838][ T7281] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 317.294407][ T7287] EXT4-fs (loop2): 1 truncate cleaned up [ 317.313248][ T7293] FAT-fs (loop3): Directory bread(block 64) failed [ 317.347404][ T7287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 317.356170][ T7293] FAT-fs (loop3): Directory bread(block 65) failed [ 317.393312][ T7293] FAT-fs (loop3): Directory bread(block 66) failed [ 317.474384][ T7293] FAT-fs (loop3): Directory bread(block 67) failed [ 317.497089][ T7293] FAT-fs (loop3): Directory bread(block 68) failed [ 317.518765][ T7287] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.851: bg 0: block 465: padding at end of block bitmap is not set [ 317.591291][ T7293] FAT-fs (loop3): Directory bread(block 69) failed [ 317.619575][ T7293] FAT-fs (loop3): Directory bread(block 70) failed [ 317.646417][ T7293] FAT-fs (loop3): Directory bread(block 71) failed [ 317.696631][ T7293] FAT-fs (loop3): Directory bread(block 72) failed [ 317.726476][ T7293] FAT-fs (loop3): Directory bread(block 73) failed [ 317.761300][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 317.774178][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 319.383652][ T7322] loop5: detected capacity change from 0 to 512 [ 319.821803][ T7322] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 321.015119][ T7337] loop2: detected capacity change from 0 to 1024 [ 321.053927][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 321.211843][ T7337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 321.305494][ T7349] loop4: detected capacity change from 0 to 512 [ 321.324603][ T7349] EXT4-fs (loop4): 1 truncate cleaned up [ 321.330447][ T7349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 321.360253][ T7349] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.866: bg 0: block 465: padding at end of block bitmap is not set [ 321.575721][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 321.614407][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 323.241424][ T7378] loop2: detected capacity change from 0 to 512 [ 323.411096][ T7378] EXT4-fs: Invalid want_extra_isize 1 [ 323.968140][ T7378] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 323.975898][ T7378] netlink: 'syz.2.874': attribute type 2 has an invalid length. [ 324.014485][ T7385] loop3: detected capacity change from 0 to 1024 [ 324.119131][ T7385] EXT4-fs: inline encryption not supported [ 324.533304][ T7385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.758783][ T7385] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 324.855671][ T7385] System zones: 0-1, 3-36 [ 324.889794][ T7397] loop5: detected capacity change from 0 to 128 [ 325.047984][ T7397] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 325.102212][ T7397] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 325.187076][ T7385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 325.311662][ T7397] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 63: comm syz.5.878: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 325.335357][ T7397] EXT4-fs error (device loop5) in do_split:2095: Corrupt filesystem [ 326.216510][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 326.388301][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 326.451794][ T7419] loop5: detected capacity change from 0 to 128 [ 326.579431][ T7419] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 326.729801][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.885'. [ 327.666220][ T7438] loop3: detected capacity change from 0 to 4096 [ 328.004900][ T7438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 328.207442][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.217826][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.385574][ T7446] loop0: detected capacity change from 0 to 512 [ 328.458820][ T7446] EXT4-fs: Invalid want_extra_isize 1 [ 328.516307][ T7446] netlink: 'syz.0.890': attribute type 1 has an invalid length. [ 328.555660][ T7446] netlink: 'syz.0.890': attribute type 2 has an invalid length. [ 328.657430][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 328.946248][ T7451] loop3: detected capacity change from 0 to 1024 [ 329.051925][ T7451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 329.077380][ T7451] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.277767][ T7451] xt_hashlimit: size too large, truncated to 1048576 [ 329.476899][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 330.872825][ T7427] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.886867][ T7427] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.896600][ T7427] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.913367][ T7427] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.342063][ T4488] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 332.198340][ T7443] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 333.548404][ T7487] Invalid argument reading file caps for ./file0 [ 334.603964][ T7508] loop5: detected capacity change from 0 to 4096 [ 334.824200][ T7508] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 335.226368][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 335.789697][ T7524] device syzkaller0 entered promiscuous mode [ 336.204856][ T7530] loop5: detected capacity change from 0 to 1024 [ 336.212313][ T7530] EXT4-fs: Ignoring removed orlov option [ 336.362413][ T7530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 337.455594][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 337.779812][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 338.320872][ T7557] loop4: detected capacity change from 0 to 4096 [ 338.394390][ T7557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 338.575252][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 338.994378][ T7571] loop4: detected capacity change from 0 to 512 [ 339.052427][ T7571] EXT4-fs: Invalid want_extra_isize 1 [ 339.092674][ T7571] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 339.131655][ T7571] netlink: 'syz.4.921': attribute type 2 has an invalid length. [ 339.236990][ T4284] Bluetooth: hci1: command 0x1003 tx timeout [ 339.242132][ T4283] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 339.401945][ T7576] tipc: Started in network mode [ 339.435770][ T7576] tipc: Node identity b61b871399d6, cluster identity 4711 [ 339.455120][ T7576] tipc: Enabled bearer , priority 0 [ 339.647216][ T7581] device syzkaller0 entered promiscuous mode [ 339.667747][ T7581] tipc: Resetting bearer [ 339.964199][ T4488] tipc: Resetting bearer [ 339.986603][ T7574] tipc: Resetting bearer [ 340.361475][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 341.903828][ T7601] loop4: detected capacity change from 0 to 1024 [ 341.911355][ T7601] EXT4-fs: Ignoring removed orlov option [ 342.017966][ T7601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 343.897812][ T7616] loop2: detected capacity change from 0 to 1024 [ 344.000291][ T7616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 344.683583][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 346.039601][ T7574] tipc: Disabling bearer [ 346.050154][ T7] tipc: Node number set to 801998611 [ 346.213656][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 346.266205][ T7633] loop0: detected capacity change from 0 to 2048 [ 346.358236][ T7633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 346.440275][ T7633] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.453387][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 346.676631][ T4488] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:13: bg 0: block 345: padding at end of block bitmap is not set [ 346.752200][ T4488] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 346.811309][ T4488] EXT4-fs (loop0): This should not happen!! Data will be lost [ 346.811309][ T4488] [ 346.831886][ T4488] EXT4-fs (loop0): Total free blocks count 0 [ 346.843040][ T4488] EXT4-fs (loop0): Free/Dirty block details [ 346.853443][ T4488] EXT4-fs (loop0): free_blocks=0 [ 346.884718][ T4488] EXT4-fs (loop0): dirty_blocks=16 [ 346.911192][ T4488] EXT4-fs (loop0): Block reservation details [ 346.949199][ T4488] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 346.984188][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 347.137316][ T7656] input: syz1 as /devices/virtual/input/input40 [ 350.248173][ T7671] loop3: detected capacity change from 0 to 1024 [ 350.256309][ T7671] EXT4-fs: Ignoring removed orlov option [ 350.426967][ T7671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 350.711356][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 350.830530][ T7685] device syzkaller0 entered promiscuous mode [ 351.243036][ T7692] block device autoloading is deprecated and will be removed. [ 351.259044][ T7699] loop4: detected capacity change from 0 to 512 [ 352.493160][ T7715] loop5: detected capacity change from 0 to 512 [ 352.752624][ T7715] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 352.788695][ T7715] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.812786][ T7720] loop0: detected capacity change from 0 to 1024 [ 352.820368][ T7720] EXT4-fs: Ignoring removed orlov option [ 352.881278][ T7720] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 353.028003][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 353.277746][ T5791] EXT4-fs (loop5): unmounting filesystem. [ 354.088956][ T7742] loop2: detected capacity change from 0 to 512 [ 354.121811][ T7742] EXT4-fs: Ignoring removed bh option [ 354.153785][ T7742] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 354.243707][ T7742] EXT4-fs (loop2): 1 truncate cleaned up [ 354.286546][ T7742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 354.504718][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 354.961697][ T7751] loop5: detected capacity change from 0 to 164 [ 355.957419][ T7762] loop4: detected capacity change from 0 to 1024 [ 355.964855][ T7762] EXT4-fs: Ignoring removed orlov option [ 355.973148][ T7764] input: syz1 as /devices/virtual/input/input41 [ 356.190315][ T7762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 356.335716][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 356.823054][ T7784] loop4: detected capacity change from 0 to 512 [ 356.872617][ T7784] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.980: inode has both inline data and extents flags [ 356.902076][ T7784] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.980: couldn't read orphan inode 15 (err -117) [ 356.930456][ T7784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 357.090888][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 357.176575][ T7788] device syzkaller0 entered promiscuous mode [ 358.970850][ T7798] loop3: detected capacity change from 0 to 1024 [ 358.978363][ T7798] EXT4-fs: Ignoring removed orlov option [ 359.084556][ T7798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 359.253958][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 359.572787][ T7810] input: syz1 as /devices/virtual/input/input42 [ 360.020721][ T7812] loop5: detected capacity change from 0 to 256 [ 360.140734][ T7814] loop3: detected capacity change from 0 to 512 [ 360.210525][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.261773][ T7815] FAT-fs (loop5): Filesystem has been set read-only [ 360.298162][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.341640][ T7814] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 360.345567][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.361886][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.372241][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.382526][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.393481][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.403876][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.414724][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.425014][ T7815] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 360.435505][ T27] audit: type=1800 audit(1781401162.987:37): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.990" name="file2" dev="loop5" ino=1048615 res=0 errno=0 [ 360.446525][ T7814] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.292988][ T7814] [ 361.295434][ T7814] ====================================================== [ 361.302505][ T7814] WARNING: possible circular locking dependency detected [ 361.309577][ T7814] syzkaller #0 Not tainted [ 361.314049][ T7814] ------------------------------------------------------ [ 361.321107][ T7814] syz.3.989/7814 is trying to acquire lock: [ 361.327047][ T7814] ffff8880741b5cd0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x323/0x1b70 [ 361.336799][ T7814] [ 361.336799][ T7814] but task is already holding lock: [ 361.344211][ T7814] ffff888055b16208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 361.354072][ T7814] [ 361.354072][ T7814] which lock already depends on the new lock. [ 361.354072][ T7814] [ 361.364530][ T7814] [ 361.364530][ T7814] the existing dependency chain (in reverse order) is: [ 361.373777][ T7814] [ 361.373777][ T7814] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 361.381987][ T7814] down_read+0x42/0x2d0 [ 361.386779][ T7814] v2_read_dquot+0x4a/0x110 [ 361.391856][ T7814] dquot_acquire+0x152/0x520 [ 361.397022][ T7814] ext4_acquire_dquot+0x2d9/0x4a0 [ 361.402722][ T7814] dqget+0x72b/0xc30 [ 361.407216][ T7814] __dquot_initialize+0x333/0xcd0 [ 361.412837][ T7814] ext4_process_orphan+0x54/0x300 [ 361.418598][ T7814] ext4_orphan_cleanup+0xbeb/0x1420 [ 361.424409][ T7814] ext4_fill_super+0x6ee3/0x78c0 [ 361.429938][ T7814] get_tree_bdev+0x3f1/0x610 [ 361.435205][ T7814] vfs_get_tree+0x88/0x270 [ 361.440206][ T7814] do_new_mount+0x24a/0xa40 [ 361.445312][ T7814] __se_sys_mount+0x2e3/0x3d0 [ 361.450572][ T7814] do_syscall_64+0x4c/0xa0 [ 361.455626][ T7814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.462189][ T7814] [ 361.462189][ T7814] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 361.469983][ T7814] __mutex_lock+0x12d/0xaf0 [ 361.475074][ T7814] dquot_commit+0x5a/0x410 [ 361.480073][ T7814] ext4_write_dquot+0x1f0/0x360 [ 361.485518][ T7814] mark_all_dquot_dirty+0xf9/0x400 [ 361.491220][ T7814] __dquot_free_space+0x7ec/0xbc0 [ 361.496834][ T7814] ext4_free_blocks+0x1bf3/0x26a0 [ 361.502450][ T7814] ext4_ext_remove_space+0x23fd/0x44c0 [ 361.508490][ T7814] ext4_ext_truncate+0x211/0x370 [ 361.514024][ T7814] ext4_truncate+0xa23/0x1240 [ 361.519292][ T7814] ext4_evict_inode+0xb41/0x1110 [ 361.524909][ T7814] evict+0x4c9/0x8d0 [ 361.529404][ T7814] vfs_rmdir+0x397/0x4d0 [ 361.534187][ T7814] do_rmdir+0x29a/0x5c0 [ 361.538913][ T7814] __x64_sys_unlinkat+0xc0/0xe0 [ 361.544327][ T7814] do_syscall_64+0x4c/0xa0 [ 361.549286][ T7814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.555757][ T7814] [ 361.555757][ T7814] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 361.563616][ T7814] __lock_acquire+0x2d07/0x7d10 [ 361.569112][ T7814] lock_acquire+0x1bb/0x4a0 [ 361.574171][ T7814] down_read+0x42/0x2d0 [ 361.578863][ T7814] ext4_map_blocks+0x323/0x1b70 [ 361.584307][ T7814] ext4_getblk+0x1cc/0x6f0 [ 361.589281][ T7814] ext4_bread+0x26/0x170 [ 361.594080][ T7814] ext4_quota_write+0x236/0x580 [ 361.599494][ T7814] get_free_dqblk+0x312/0x660 [ 361.604771][ T7814] do_insert_tree+0x22b/0x1040 [ 361.610371][ T7814] do_insert_tree+0x9eb/0x1040 [ 361.615796][ T7814] do_insert_tree+0x9ae/0x1040 [ 361.621128][ T7814] do_insert_tree+0x9ae/0x1040 [ 361.626446][ T7814] qtree_write_dquot+0x49d/0x5d0 [ 361.631950][ T7814] v2_write_dquot+0x108/0x190 [ 361.637173][ T7814] dquot_acquire+0x2d5/0x520 [ 361.642322][ T7814] ext4_acquire_dquot+0x2d9/0x4a0 [ 361.647897][ T7814] dqget+0x72b/0xc30 [ 361.652352][ T7814] dquot_transfer+0x37c/0x7e0 [ 361.657577][ T7814] ext4_setattr+0x939/0x1b50 [ 361.662760][ T7814] notify_change+0xc74/0xf40 [ 361.667892][ T7814] chown_common+0x4a0/0x660 [ 361.673037][ T7814] ksys_fchown+0xe2/0x150 [ 361.677906][ T7814] __x64_sys_fchown+0x76/0x80 [ 361.683120][ T7814] do_syscall_64+0x4c/0xa0 [ 361.688080][ T7814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.694540][ T7814] [ 361.694540][ T7814] other info that might help us debug this: [ 361.694540][ T7814] [ 361.704775][ T7814] Chain exists of: [ 361.704775][ T7814] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 361.704775][ T7814] [ 361.718439][ T7814] Possible unsafe locking scenario: [ 361.718439][ T7814] [ 361.725901][ T7814] CPU0 CPU1 [ 361.731299][ T7814] ---- ---- [ 361.736785][ T7814] lock(&s->s_dquot.dqio_sem); [ 361.741683][ T7814] lock(&dquot->dq_lock); [ 361.748638][ T7814] lock(&s->s_dquot.dqio_sem); [ 361.756018][ T7814] lock(&ei->i_data_sem/2); [ 361.760630][ T7814] [ 361.760630][ T7814] *** DEADLOCK *** [ 361.760630][ T7814] [ 361.768806][ T7814] 5 locks held by syz.3.989/7814: [ 361.773836][ T7814] #0: ffff888055b16460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 361.783517][ T7814] #1: ffff88807209f258 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: chown_common+0x33a/0x660 [ 361.793756][ T7814] #2: ffff88807209ef20 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x926/0x1b50 [ 361.803186][ T7814] #3: ffff888054530968 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 361.812606][ T7814] #4: ffff888055b16208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 361.822643][ T7814] [ 361.822643][ T7814] stack backtrace: [ 361.828572][ T7814] CPU: 1 PID: 7814 Comm: syz.3.989 Not tainted syzkaller #0 [ 361.835863][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.845937][ T7814] Call Trace: [ 361.849301][ T7814] [ 361.852312][ T7814] dump_stack_lvl+0x188/0x24e [ 361.857074][ T7814] ? load_image+0x400/0x400 [ 361.861649][ T7814] ? show_regs_print_info+0x12/0x12 [ 361.866865][ T7814] ? print_circular_bug+0x12b/0x1a0 [ 361.872087][ T7814] check_noncircular+0x296/0x330 [ 361.877069][ T7814] ? add_chain_block+0x940/0x940 [ 361.882028][ T7814] ? lockdep_lock+0xf1/0x1f0 [ 361.886657][ T7814] ? mark_lock+0x94/0x320 [ 361.891115][ T7814] ? _find_first_zero_bit+0xcf/0x100 [ 361.896444][ T7814] __lock_acquire+0x2d07/0x7d10 [ 361.901438][ T7814] ? verify_lock_unused+0x140/0x140 [ 361.906700][ T7814] ? verify_lock_unused+0x140/0x140 [ 361.911927][ T7814] ? verify_lock_unused+0x140/0x140 [ 361.917177][ T7814] lock_acquire+0x1bb/0x4a0 [ 361.921723][ T7814] ? ext4_map_blocks+0x323/0x1b70 [ 361.926830][ T7814] ? mark_lock+0x94/0x320 [ 361.931233][ T7814] ? __might_sleep+0xd0/0xd0 [ 361.935905][ T7814] ? read_lock_is_recursive+0x10/0x10 [ 361.941317][ T7814] ? rcu_is_watching+0x11/0xa0 [ 361.946215][ T7814] down_read+0x42/0x2d0 [ 361.950412][ T7814] ? ext4_map_blocks+0x323/0x1b70 [ 361.955523][ T7814] ext4_map_blocks+0x323/0x1b70 [ 361.960426][ T7814] ? ext4_issue_zeroout+0x250/0x250 [ 361.965686][ T7814] ? kasan_set_track+0x60/0x70 [ 361.970536][ T7814] ? kasan_set_track+0x4b/0x70 [ 361.975319][ T7814] ? __kasan_kmalloc+0x8e/0xa0 [ 361.980109][ T7814] ? __kmalloc+0xb0/0x240 [ 361.984559][ T7814] ? get_free_dqblk+0x45/0x660 [ 361.989370][ T7814] ? do_insert_tree+0x22b/0x1040 [ 361.994354][ T7814] ? do_insert_tree+0x9eb/0x1040 [ 361.999313][ T7814] ? do_insert_tree+0x9ae/0x1040 [ 362.004270][ T7814] ext4_getblk+0x1cc/0x6f0 [ 362.008701][ T7814] ? __x64_sys_fchown+0x76/0x80 [ 362.013569][ T7814] ? do_syscall_64+0x4c/0xa0 [ 362.018177][ T7814] ? ext4_get_block_unwritten+0x100/0x100 [ 362.023928][ T7814] ext4_bread+0x26/0x170 [ 362.028283][ T7814] ext4_quota_write+0x236/0x580 [ 362.033187][ T7814] ? ext4_quota_read+0x380/0x380 [ 362.038154][ T7814] ? rcu_is_watching+0x11/0xa0 [ 362.042991][ T7814] get_free_dqblk+0x312/0x660 [ 362.047692][ T7814] ? ext4_quota_read+0x380/0x380 [ 362.052646][ T7814] do_insert_tree+0x22b/0x1040 [ 362.057542][ T7814] ? ext4_quota_read+0x305/0x380 [ 362.062498][ T7814] do_insert_tree+0x9eb/0x1040 [ 362.067282][ T7814] do_insert_tree+0x9ae/0x1040 [ 362.072079][ T7814] do_insert_tree+0x9ae/0x1040 [ 362.076878][ T7814] qtree_write_dquot+0x49d/0x5d0 [ 362.081847][ T7814] ? qtree_entry_unused+0xe0/0xe0 [ 362.086914][ T7814] v2_write_dquot+0x108/0x190 [ 362.091629][ T7814] dquot_acquire+0x2d5/0x520 [ 362.096237][ T7814] ext4_acquire_dquot+0x2d9/0x4a0 [ 362.101280][ T7814] dqget+0x72b/0xc30 [ 362.105194][ T7814] dquot_transfer+0x37c/0x7e0 [ 362.109887][ T7814] ? __dquot_transfer+0x22e0/0x22e0 [ 362.115102][ T7814] ? down_read+0x1a8/0x2d0 [ 362.119710][ T7814] ext4_setattr+0x939/0x1b50 [ 362.124315][ T7814] ? atime_needs_update+0x780/0x780 [ 362.129532][ T7814] ? evm_inode_setattr+0x91/0x790 [ 362.134689][ T7814] ? bpf_lsm_inode_setattr+0x5/0x10 [ 362.140010][ T7814] ? security_inode_setattr+0xd8/0x140 [ 362.145859][ T7814] ? try_break_deleg+0x79/0x120 [ 362.150771][ T7814] ? ext4_write_inode+0x5e0/0x5e0 [ 362.155820][ T7814] notify_change+0xc74/0xf40 [ 362.160439][ T7814] chown_common+0x4a0/0x660 [ 362.164965][ T7814] ? __ia32_sys_chmod+0x70/0x70 [ 362.169834][ T7814] ? rcu_read_lock_any_held+0xb0/0x130 [ 362.175310][ T7814] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 362.180630][ T7814] ? __fget_files+0x28/0x4b0 [ 362.185273][ T7814] ? __mnt_want_write+0x21f/0x2a0 [ 362.190346][ T7814] ? mnt_want_write_file+0x16e/0x200 [ 362.195654][ T7814] ksys_fchown+0xe2/0x150 [ 362.200012][ T7814] __x64_sys_fchown+0x76/0x80 [ 362.204744][ T7814] do_syscall_64+0x4c/0xa0 [ 362.209180][ T7814] ? clear_bhb_loop+0x60/0xb0 [ 362.213875][ T7814] ? clear_bhb_loop+0x60/0xb0 [ 362.218574][ T7814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.224493][ T7814] RIP: 0033:0x7f17ffb9ce59 [ 362.229004][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.248691][ T7814] RSP: 002b:00007f18009d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 362.257197][ T7814] RAX: ffffffffffffffda RBX: 00007f17ffe15fa0 RCX: 00007f17ffb9ce59 [ 362.265214][ T7814] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000004 [ 362.273198][ T7814] RBP: 00007f17ffc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 362.281181][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.289187][ T7814] R13: 00007f17ffe16038 R14: 00007f17ffe15fa0 R15: 00007ffc622ea4f8 [ 362.297231][ T7814] [ 362.426358][ T4286] EXT4-fs (loop3): unmounting filesystem.