last executing test programs:

1m3.035889199s ago: executing program 2 (id=720):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
r3 = syz_io_uring_setup(0x5f38, 0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000000))
io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, 0x0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0)

1m1.901984565s ago: executing program 2 (id=728):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x28, r0, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x28}}, 0x44042)

1m1.616040182s ago: executing program 2 (id=731):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x40800)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r1 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x1c3)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r3, 0x2007ffb)
sendfile(r3, r3, 0x0, 0x1000000201005)
copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x2000000000000000)
syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0)

57.350455221s ago: executing program 2 (id=750):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

56.629977218s ago: executing program 2 (id=756):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000600), &(0x7f0000000800)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0)
add_key$fscrypt_provisioning(&(0x7f0000000480), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)={0x2, 0x0, @c}, 0x29, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "f3d3f9d3fa10455e8715d686f2bc4cf25fb5470030c31ea33fc311b7e243b3271233d09280034d79951833626e64d6be2bb93e60f072f62ac11ef42d8be6f2b0", 0x16}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x33, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x61, 0x65, 0x30, 0x30, 0x38, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
r1 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
keyctl$assume_authority(0x10, r1)

53.207816727s ago: executing program 2 (id=770):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = io_uring_setup(0x664b, &(0x7f0000000500))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000001b00)="a6", 0x1, 0x20000045, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r7}, 0x20)
sendmmsg$inet6(r7, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='PU', 0x2}], 0x1}}], 0x1, 0x20004810)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248)
r9 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10)

52.135152202s ago: executing program 32 (id=770):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = io_uring_setup(0x664b, &(0x7f0000000500))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000001b00)="a6", 0x1, 0x20000045, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r7}, 0x20)
sendmmsg$inet6(r7, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='PU', 0x2}], 0x1}}], 0x1, 0x20004810)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248)
r9 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10)

9.48764041s ago: executing program 1 (id=923):
r0 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x8}, 0xc)
close(r0)

9.254609296s ago: executing program 1 (id=925):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000300)={[{@shortname_win95}, {@shortname_win95}, {@utf8}, {}, {@shortname_mixed}, {@shortname_mixed}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8no}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@numtail}, {@rodir}]}, 0x3, 0x2ae, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)

9.06407897s ago: executing program 1 (id=927):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885)

8.502296803s ago: executing program 5 (id=931):
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0xfc}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/146)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x2047fc1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @remote, 0xffff0001}, 0x1c)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b80)="ddab", 0x2}], 0x1}}], 0x1, 0x40000)

7.996213045s ago: executing program 5 (id=932):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18)

7.256082122s ago: executing program 3 (id=934):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x48880)

6.8999273s ago: executing program 5 (id=935):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001280)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdff, {0x0, 0x0, 0x0, r4, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x7, 0x2, 0x1000, 0x9, 0xc, 0x701c, 0x0, 0x0, 0x243c, 0x8, 0x6, 0x8e06, 0x400, 0x1, 0x5, 0x3, 0x8, 0x8, 0x3, 0xc, 0x5, 0x3, 0x100, 0x110, 0x10000, 0x5, 0xe, 0x0, 0x9, 0x4, 0xb5, 0x5, 0x6, 0x79ac22ea, 0x1, 0x8ec0, 0x8, 0x7142, 0x2c6, 0x1, 0x2, 0x2, 0x1, 0xffffffea, 0x80, 0xf, 0x2, 0x5, 0x27c3, 0x80, 0xc8ee, 0x101, 0xffff8001, 0x0, 0x5, 0x8, 0x8, 0x8000, 0xd5f8, 0x4, 0x6, 0x23ab187b, 0x4, 0x1a5f, 0x3, 0x0, 0x177, 0x60000, 0x0, 0x3, 0xffffffff, 0x1ce3, 0xfffffffa, 0x2, 0x1b7, 0x7ff, 0x5, 0xa644, 0x1, 0xd8, 0x6, 0x3, 0x3, 0x800, 0x0, 0xfffffffe, 0x5, 0x3, 0x3, 0x5, 0x3, 0x0, 0x1a08000, 0x1, 0x10001, 0x300, 0x8000, 0x7, 0x6, 0x6, 0x1, 0xc, 0x8001, 0x4, 0x1, 0x0, 0x6e5, 0x9, 0x7, 0x4, 0x5, 0x9, 0x5, 0xfe18, 0xb, 0x7, 0x5, 0x1, 0x4, 0x8, 0x8, 0x8001, 0x3, 0x1, 0x2, 0x2, 0x6, 0x0, 0x7f, 0x8, 0xabc7, 0x7, 0x5, 0x6, 0x0, 0x138b, 0xcf, 0x23b7, 0x7, 0x5, 0x7fffffff, 0x5e33, 0x9, 0x3, 0x7, 0xf, 0x4, 0xffffffff, 0x50ad, 0x1, 0x6, 0xc, 0x2, 0xd5, 0x1000, 0x8, 0x8, 0xfffffffd, 0x6, 0x4, 0x1, 0x0, 0x7, 0x7, 0x0, 0xfffffffa, 0x8, 0x68, 0x100, 0x2, 0x4, 0x6, 0x2, 0x7, 0xfffffffa, 0x5, 0x8, 0x1, 0x94, 0x3b54000, 0x8688, 0x0, 0x53, 0xef3d8f2, 0x10, 0xffffffff, 0x8, 0x81, 0x5, 0x401, 0x6, 0x400, 0x4, 0x6, 0x9, 0x3, 0x7ff, 0x7, 0x9a, 0x6, 0x1123, 0xd, 0x10, 0x8, 0x10, 0x5, 0x5, 0x80000000, 0xfffffbff, 0xe, 0x5, 0x7f, 0x7, 0xedf, 0x3, 0x80000000, 0x6, 0x7, 0x8, 0x1, 0x2, 0x1, 0x5, 0x5, 0x0, 0x4, 0x1000, 0x80000000, 0x8, 0x7, 0x0, 0xe02, 0xa4, 0x1, 0x847a, 0x9, 0x0, 0x100, 0x9, 0x9, 0x7f, 0x0, 0x6, 0x9, 0x6, 0x6, 0x229, 0x756, 0xb5d, 0x4, 0x6, 0x0, 0x7f, 0x904a, 0x100]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0)

6.231109986s ago: executing program 4 (id=937):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x8}, {}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)

4.482332616s ago: executing program 3 (id=938):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r2=>0x0})
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)

4.477750076s ago: executing program 0 (id=939):
setreuid(0x0, 0xee00)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60)

4.440453787s ago: executing program 1 (id=940):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='mountaddr\x00', 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r6, 0x84, 0x14, &(0x7f0000000040)="020000000980ff", 0x7)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x22000081)
read$alg(0xffffffffffffffff, &(0x7f0000002600)=""/4119, 0x1022)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r7 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x62040, 0x20)
r8 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r8, r7, 0x0, 0x7ffff088)

4.288549531s ago: executing program 5 (id=941):
r0 = socket(0x3, 0x4, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind(r2, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x2}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1})
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000070601030000000000000000010000050900020073797a3100000000050001000700dd89baea3ed8c1"], 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x20000080)
recvmsg(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x8}, 0x8)

4.203718453s ago: executing program 3 (id=942):
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0xfc}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/146)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x2047fc1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @remote, 0xffff0001}, 0x1c)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
sendmmsg(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b80)="ddab", 0x2}], 0x1}}], 0x1, 0x40000)

4.145499714s ago: executing program 4 (id=943):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100))

2.854965454s ago: executing program 0 (id=944):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r2, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x42644a6)
write$ppp(r1, &(0x7f0000000200)="1503", 0x2)

2.078345502s ago: executing program 1 (id=945):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x20048850)

2.063571502s ago: executing program 3 (id=946):
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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")
read$FUSE(r0, 0x0, 0x0)

1.959866534s ago: executing program 4 (id=947):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x9, 0x20a, &(0x7f0000000900)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r3, 0x6000000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)

1.930531606s ago: executing program 0 (id=948):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r0], 0x18}, 0x0)

1.705025491s ago: executing program 0 (id=949):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000440)={{0x6, 0x1, 0x0, 0x780, 0x7fff}})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
bind$bt_hci(r0, &(0x7f0000000540)={0x1f, 0x4, 0x2}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

1.685251301s ago: executing program 1 (id=950):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885)

1.682600201s ago: executing program 4 (id=951):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001280)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdff, {0x0, 0x0, 0x0, r5, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x7, 0x2, 0x1000, 0x9, 0xc, 0x701c, 0x0, 0x0, 0x243c, 0x8, 0x6, 0x8e06, 0x400, 0x1, 0x5, 0x3, 0x8, 0x8, 0x3, 0xc, 0x5, 0x3, 0x100, 0x110, 0x10000, 0x5, 0xe, 0x0, 0x9, 0x4, 0xb5, 0x5, 0x6, 0x79ac22ea, 0x1, 0x8ec0, 0x8, 0x7142, 0x2c6, 0x1, 0x2, 0x2, 0x1, 0xffffffea, 0x80, 0xf, 0x2, 0x5, 0x27c3, 0x80, 0xc8ee, 0x101, 0xffff8001, 0x0, 0x5, 0x8, 0x8, 0x8000, 0xd5f8, 0x4, 0x6, 0x23ab187b, 0x4, 0x1a5f, 0x3, 0x0, 0x177, 0x60000, 0x0, 0x3, 0xffffffff, 0x1ce3, 0xfffffffa, 0x2, 0x1b7, 0x7ff, 0x5, 0xa644, 0x1, 0xd8, 0x6, 0x3, 0x3, 0x800, 0x0, 0xfffffffe, 0x5, 0x3, 0x3, 0x5, 0x3, 0x0, 0x1a08000, 0x1, 0x10001, 0x300, 0x8000, 0x7, 0x6, 0x6, 0x1, 0xc, 0x8001, 0x4, 0x1, 0x0, 0x6e5, 0x9, 0x7, 0x4, 0x5, 0x9, 0x5, 0xfe18, 0xb, 0x7, 0x5, 0x1, 0x4, 0x8, 0x8, 0x8001, 0x3, 0x1, 0x2, 0x2, 0x6, 0x0, 0x7f, 0x8, 0xabc7, 0x7, 0x5, 0x6, 0x0, 0x138b, 0xcf, 0x23b7, 0x7, 0x5, 0x7fffffff, 0x5e33, 0x9, 0x3, 0x7, 0xf, 0x4, 0xffffffff, 0x50ad, 0x1, 0x6, 0xc, 0x2, 0xd5, 0x1000, 0x8, 0x8, 0xfffffffd, 0x6, 0x4, 0x1, 0x0, 0x7, 0x7, 0x0, 0xfffffffa, 0x8, 0x68, 0x100, 0x2, 0x4, 0x6, 0x2, 0x7, 0xfffffffa, 0x5, 0x8, 0x1, 0x94, 0x3b54000, 0x8688, 0x0, 0x53, 0xef3d8f2, 0x10, 0xffffffff, 0x8, 0x81, 0x5, 0x401, 0x6, 0x400, 0x4, 0x6, 0x9, 0x3, 0x7ff, 0x7, 0x9a, 0x6, 0x1123, 0xd, 0x10, 0x8, 0x10, 0x5, 0x5, 0x80000000, 0xfffffbff, 0xe, 0x5, 0x7f, 0x7, 0xedf, 0x3, 0x80000000, 0x6, 0x7, 0x8, 0x1, 0x2, 0x1, 0x5, 0x5, 0x0, 0x4, 0x1000, 0x80000000, 0x8, 0x7, 0x0, 0xe02, 0xa4, 0x1, 0x847a, 0x9, 0x0, 0x100, 0x9, 0x9, 0x7f, 0x0, 0x6, 0x9, 0x6, 0x6, 0x229, 0x756, 0xb5d, 0x4, 0x6, 0x0, 0x7f, 0x904a, 0x100]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0)

1.559916764s ago: executing program 3 (id=952):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, <r4=>r2, 0x80000})
ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1)

1.3118787s ago: executing program 5 (id=953):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//QJCYyw==")
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_by_handle_at(r3, 0x0, 0x3414c0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
r4 = syz_io_uring_setup(0x5f38, 0x0, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1})
io_uring_enter(r4, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x83)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0)

1.262214761s ago: executing program 3 (id=954):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x17, &(0x7f0000000200)=""/23, 0x41000, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10003}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x11, 0x4)

1.159752183s ago: executing program 4 (id=955):
r0 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x3, 0x7}, {0x4, 0x3, 0x2}}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0x0, 0xff0000ff], 'veth1_to_hsr\x00', 'veth0_to_team\x00', {}, {0xff}, 0x84, 0xe4, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff000000, 0x75940ffac9cf7a97], [0xff000000, 0x0, 0x0, 0xffffffff], 'veth0_to_hsr\x00', 'macvtap0\x00', {}, {}, 0x3b, 0x1, 0x51fff8b7a8e059ed, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)

487.917599ms ago: executing program 0 (id=956):
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0xfc}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/146)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x2047fc1, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @remote, 0xffff0001}, 0x1c)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
sendmmsg(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b80)="ddab", 0x2}], 0x1}}], 0x1, 0x40000)

487.536349ms ago: executing program 4 (id=957):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})

293.326284ms ago: executing program 5 (id=958):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0xb}, 0x0)

0s ago: executing program 0 (id=959):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@usrjquota}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r0, 0x402, 0x4000003e)
chdir(&(0x7f0000000240)='./file0\x00')
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

v2 capabilities in a way that may be insecure
[   81.294686][    C0] sched: RT throttling activated
[   81.294691][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   81.314702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   81.334698][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[   81.404701][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   81.434696][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   81.754705][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   81.774699][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   82.013790][ T4442] Zero length message leads to an empty skb
[   82.267093][ T4448] loop1: detected capacity change from 0 to 1024
[   82.327172][ T4448] =======================================================
[   82.327172][ T4448] WARNING: The mand mount option has been deprecated and
[   82.327172][ T4448]          and is ignored by this kernel. Remove the mand
[   82.327172][ T4448]          option from the mount to silence this warning.
[   82.327172][ T4448] =======================================================
[   82.362291][    C1] vkms_vblank_simulate: vblank timer overrun
[   82.374520][ T4450] xt_CONNSECMARK: invalid mode: 0
[   82.926137][ T4448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   82.966183][ T4448] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.286258][ T4448] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.28: lblock 0 mapped to illegal pblock 0 (length 1)
[   84.168899][ T4273] EXT4-fs (loop1): unmounting filesystem.
[   84.547514][ T4487] xt_CONNSECMARK: invalid mode: 0
[   84.770850][ T4495] Bluetooth: MGMT ver 1.22
[   84.771917][ T4497] mmap: syz.3.46 (4497) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   84.922357][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.930616][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.719049][ T4505] loop3: detected capacity change from 0 to 256
[   85.882275][ T4509] loop4: detected capacity change from 0 to 8
[   86.083866][ T4511] loop4: detected capacity change from 0 to 128
[   86.086261][ T4513] random: crng reseeded on system resumption
[   86.134776][ T4511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[   86.157583][ T4511] System zones: 1-3, 19-19, 35-36
[   86.234021][ T4511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   86.282874][ T4511] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.383155][ T4283] EXT4-fs (loop4): unmounting filesystem.
[   86.391775][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.486251][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.561025][ T4522] xt_CONNSECMARK: invalid mode: 0
[   86.649279][   T14] cfg80211: failed to load regulatory.db
[   86.896617][ T4526] loop3: detected capacity change from 0 to 8
[   87.586994][ T4473] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.598093][ T4473] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.608296][ T4473] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.617997][ T4473] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.705966][ T4507] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.49'.
[   87.923871][ T4536] loop1: detected capacity change from 0 to 1024
[   87.927595][ T4533] device syzkaller0 entered promiscuous mode
[   87.956513][ T4537] loop0: detected capacity change from 0 to 8
[   88.029076][ T4536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   88.129869][ T4546] loop2: detected capacity change from 0 to 1024
[   88.158377][ T4546] EXT4-fs: inline encryption not supported
[   88.245348][ T4546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   88.305971][ T4546] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.348053][ T4553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'.
[   88.447242][ T4546] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.64: lblock 0 mapped to illegal pblock 0 (length 6)
[   88.495434][ T4546] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[   88.498439][ T4273] EXT4-fs (loop1): unmounting filesystem.
[   88.509623][ T4546] EXT4-fs (loop2): This should not happen!! Data will be lost
[   88.509623][ T4546] 
[   88.676940][ T4381] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 1)
[   88.733947][ T4381] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[   88.770601][ T4381] EXT4-fs (loop2): This should not happen!! Data will be lost
[   88.770601][ T4381] 
[   88.806754][ T4282] EXT4-fs (loop2): unmounting filesystem.
[   88.900757][ T4567] loop1: detected capacity change from 0 to 1024
[   88.992667][ T4567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   89.080587][ T4557] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.088106][ T4557] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.130331][ T4273] EXT4-fs (loop1): unmounting filesystem.
[   89.211066][ T4573] ip_tables: iptables: counters copy to user failed while replacing table
[   89.312468][ T4575] loop1: detected capacity change from 0 to 8
[   89.650508][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.694557][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.070063][ T4557] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.079081][ T4557] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.090430][ T4557] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.103322][ T4557] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.222802][ T4559] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.71'.
[   90.391998][ T4602] loop0: detected capacity change from 0 to 512
[   90.402560][ T4601] Console: switching to colour VGA+ 80x25
[   90.638281][ T4602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   90.651176][ T4607] loop3: detected capacity change from 0 to 128
[   90.678280][ T4611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.88'.
[   90.699231][ T4602] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.766478][ T4615] ip_tables: iptables: counters copy to user failed while replacing table
[   90.868713][ T4279] EXT4-fs (loop0): unmounting filesystem.
[   92.099399][ T4647] netlink: 'syz.1.100': attribute type 1 has an invalid length.
[   92.165121][ T4640] netlink: 'syz.1.100': attribute type 1 has an invalid length.
[   92.530066][ T4657] ip_tables: iptables: counters copy to user failed while replacing table
[   92.857307][ T4662] loop1: detected capacity change from 0 to 1024
[   92.912237][ T4662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   92.927218][ T4662] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   92.937241][ T4662] EXT4-fs (loop1): orphan cleanup on readonly fs
[   92.956722][ T4662] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 3: comm syz.1.108: lblock 3 mapped to illegal pblock 3 (length 1)
[   92.977674][ T4662] Quota error (device loop1): write_blk: dquota write failed
[   92.987834][ T4662] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3
[   93.001739][ T4662] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   93.012652][ T4662] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.108: Failed to acquire dquot type 0
[   93.029389][ T4662] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 3: comm syz.1.108: lblock 3 mapped to illegal pblock 3 (length 1)
[   93.054249][ T4662] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   93.070961][ T4662] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.108: Failed to acquire dquot type 0
[   93.083375][ T4662] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.108: Freeing blocks not in datazone - block = 0, count = 4096
[   93.107976][ T4662] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 3: comm syz.1.108: lblock 3 mapped to illegal pblock 3 (length 1)
[   93.146062][ T4662] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   93.161354][ T4662] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.108: Failed to acquire dquot type 0
[   93.182993][ T4662] EXT4-fs (loop1): 1 orphan inode deleted
[   93.190724][ T4662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   93.241678][ T4662] EXT4-fs (loop1): shut down requested (1)
[   93.331807][ T4273] EXT4-fs (loop1): unmounting filesystem.
[   93.557560][ T4686] loop4: detected capacity change from 0 to 512
[   93.567150][ T4686] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   93.584826][ T4686] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   93.632231][ T4686] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   93.643327][ T4686] EXT4-fs (loop4): orphan cleanup on readonly fs
[   93.658396][ T4686] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5
[   93.674042][ T4686] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   93.685569][ T4686] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.118: Failed to acquire dquot type 1
[   93.702584][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   93.733863][ T4686] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.118: corrupted inode contents
[   93.789335][ T4695] loop1: detected capacity change from 0 to 8192
[   93.813476][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   93.830423][ T4686] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #16: comm syz.4.118: mark_inode_dirty error
[   93.859713][ T4695] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   93.876205][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   93.888018][ T4686] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.118: corrupted inode contents
[   93.925886][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   93.937972][ T4686] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.118: mark_inode_dirty error
[   93.972020][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   94.000735][ T4695] process 'syz.1.120' launched '/dev/fd/4/./file2' with NULL argv: empty string added
[   94.038898][ T4686] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.118: corrupted inode contents
[   94.063308][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.073291][ T4695] FAT-fs (loop1): Filesystem has been set read-only
[   94.080179][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.089790][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.101025][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   94.108210][ T4686] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   94.175494][ T4702] ip_tables: iptables: counters copy to user failed while replacing table
[   94.255025][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.274962][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   94.296746][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.328845][ T4686] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.118: corrupted inode contents
[   94.359319][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.409351][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   94.422649][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.492788][ T4686] EXT4-fs error (device loop4): ext4_truncate:4325: inode #16: comm syz.4.118: mark_inode_dirty error
[   94.515295][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.568757][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   94.575436][ T4686] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   94.585617][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.594490][ T4686] EXT4-fs (loop4): Remounting filesystem read-only
[   94.601626][ T4695] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   94.615745][ T4686] EXT4-fs (loop4): 1 truncate cleaned up
[   94.621699][ T4686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   94.640567][   T26] audit: type=1800 audit(1786529160.589:2): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.120" name="file2" dev="loop1" ino=1048599 res=0 errno=0
[   95.087898][ T4718] netlink: 'syz.4.118': attribute type 13 has an invalid length.
[   95.441398][ T4715] syz.0.127 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[   95.468955][ T4715] CPU: 0 PID: 4715 Comm: syz.0.127 Not tainted syzkaller #0
[   95.474548][ T4283] EXT4-fs (loop4): unmounting filesystem.
[   95.476275][ T4715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   95.476365][ T4715] Call Trace:
[   95.476373][ T4715]  <TASK>
[   95.476381][ T4715]  dump_stack_lvl+0x188/0x24e
[   95.476419][ T4715]  ? ___ratelimit+0x14e/0x610
[   95.507857][ T4715]  ? show_regs_print_info+0x12/0x12
[   95.513157][ T4715]  ? load_image+0x410/0x410
[   95.517749][ T4715]  ? ___ratelimit+0x474/0x610
[   95.522433][ T4715]  ? radix_tree_cpu_dead+0x160/0x160
[   95.527727][ T4715]  dump_header+0xd8/0x820
[   95.532063][ T4715]  oom_kill_process+0x361/0x550
[   95.537025][ T4715]  out_of_memory+0xe25/0x1220
[   95.541700][ T4715]  ? mutex_lock_nested+0x10/0x10
[   95.546660][ T4715]  ? unregister_oom_notifier+0x20/0x20
[   95.552120][ T4715]  mem_cgroup_out_of_memory+0x2c0/0x390
[   95.557671][ T4715]  ? mem_cgroup_oom_trylock+0x210/0x210
[   95.563223][ T4715]  ? do_raw_spin_unlock+0x11d/0x230
[   95.568424][ T4715]  try_charge_memcg+0xc9d/0x17c0
[   95.573363][ T4715]  ? __lock_acquire+0x7c40/0x7c40
[   95.578400][ T4715]  ? percpu_ref_put+0x180/0x180
[   95.583246][ T4715]  ? get_mem_cgroup_from_objcg+0x19/0x150
[   95.588970][ T4715]  ? get_mem_cgroup_from_objcg+0x19/0x150
[   95.594775][ T4715]  ? get_mem_cgroup_from_objcg+0x19/0x150
[   95.600509][ T4715]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[   95.606325][ T4715]  __memcg_kmem_charge_page+0x220/0x380
[   95.612214][ T4715]  __alloc_pages+0x21e/0x4f0
[   95.616804][ T4715]  ? zone_statistics+0x170/0x170
[   95.621744][ T4715]  ? __lock_acquire+0x7c40/0x7c40
[   95.626773][ T4715]  pte_alloc_one+0x7b/0x310
[   95.631272][ T4715]  ? pfn_modify_allowed+0x560/0x560
[   95.636467][ T4715]  ? count_memcg_event_mm+0x36b/0x3c0
[   95.641834][ T4715]  ? __lock_acquire+0x7c40/0x7c40
[   95.646869][ T4715]  ? count_memcg_event_mm+0x8a/0x3c0
[   95.652145][ T4715]  ? put_page+0x270/0x270
[   95.656471][ T4715]  __pte_alloc+0x21/0x150
[   95.660800][ T4715]  handle_mm_fault+0x34b1/0x3d40
[   95.665731][ T4715]  ? mt_find+0x157/0x830
[   95.669982][ T4715]  ? numa_migrate_prep+0x250/0x250
[   95.675091][ T4715]  ? lock_chain_count+0x20/0x20
[   95.679942][ T4715]  ? lock_mm_and_find_vma+0xae/0x2f0
[   95.685242][ T4715]  do_user_addr_fault+0x58e/0xb20
[   95.690271][ T4715]  exc_page_fault+0x60/0x100
[   95.694853][ T4715]  ? clear_bhb_loop+0x60/0xb0
[   95.699532][ T4715]  asm_exc_page_fault+0x22/0x30
[   95.704386][ T4715] RIP: 0033:0x7f045345524e
[   95.708802][ T4715] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[   95.728484][ T4715] RSP: 002b:00007f04543a3470 EFLAGS: 00010246
[   95.734542][ T4715] RAX: 0000000000000001 RBX: 00007f04543a3530 RCX: 0000000000000101
[   95.742502][ T4715] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f04543a35d0
[   95.750474][ T4715] RBP: 0000000000000102 R08: 00007f04493f7000 R09: 0000000000000000
[   95.758435][ T4715] R10: 0000000000000000 R11: 00007f04543a3540 R12: 0000000000000001
[   95.766402][ T4715] R13: 00007f0453654fa0 R14: 0000000000000000 R15: 00007f04543a35d0
[   95.774495][ T4715]  </TASK>
[   95.777571][    C0] vkms_vblank_simulate: vblank timer overrun
[   95.815387][ T4715] memory: usage 8kB, limit 8kB, failcnt 25
[   95.851859][ T4715] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0
[   95.868847][ T4715] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0
[   95.878343][ T4715] Memory cgroup stats for /syz0/test:
[   95.878884][ T4715] anon 0
[   95.878884][ T4715] file 0
[   95.878884][ T4715] kernel 8192
[   95.878884][ T4715] kernel_stack 0
[   95.878884][ T4715] pagetables 0
[   95.878884][ T4715] sec_pagetables 0
[   95.878884][ T4715] percpu 0
[   95.878884][ T4715] sock 0
[   95.878884][ T4715] vmalloc 0
[   95.878884][ T4715] shmem 0
[   95.878884][ T4715] zswap 0
[   95.878884][ T4715] zswapped 0
[   95.878884][ T4715] file_mapped 0
[   95.878884][ T4715] file_dirty 0
[   95.878884][ T4715] file_writeback 0
[   95.878884][ T4715] swapcached 4096
[   95.878884][ T4715] anon_thp 0
[   95.878884][ T4715] file_thp 0
[   95.878884][ T4715] shmem_thp 0
[   95.878884][ T4715] inactive_anon 0
[   95.878884][ T4715] active_anon 0
[   95.878884][ T4715] inactive_file 0
[   95.878884][ T4715] active_file 0
[   95.878884][ T4715] unevictable 0
[   95.878884][ T4715] slab_reclaimable 2312
[   95.878884][ T4715] slab_unreclaimable 3144
[   95.878884][ T4715] slab 5456
[   95.878884][ T4715] workingset_refault_anon 0
[   96.040853][ T4715] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.127,pid=4713,uid=0
[   96.064124][ T4715] Memory cgroup out of memory: Killed process 4713 (syz.0.127) total-vm:237544kB, anon-rss:1396kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[   96.204569][ T4738] loop0: detected capacity change from 0 to 8
[   96.238489][ T4738] SQUASHFS error: Failed to read block 0x4de: -5
[   96.257638][ T4738] SQUASHFS error: Failed to read block 0x4de: -5
[   96.272004][   T26] audit: type=1800 audit(1786529162.219:3): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.136" name="file1" dev="loop0" ino=5 res=0 errno=0
[   96.432204][ T4734] loop2: detected capacity change from 0 to 32768
[   96.462658][ T4734] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.134 (4734)
[   96.540045][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.546955][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.553352][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.559838][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.566317][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.572712][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.579160][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.585582][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.604427][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.611205][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.617785][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.811338][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.817875][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.824302][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.830911][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.837427][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.843932][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.850452][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.856943][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.863388][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.870630][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.877104][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.883521][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.889968][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.897132][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.903576][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.910043][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.916521][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.922939][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.924486][ T4734] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   96.929420][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.946339][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.952762][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.959212][ T4740] SQUASHFS error: Failed to read block 0x4de: -5
[   96.989284][ T4734] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   97.013821][ T4734] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   97.045025][ T4734] BTRFS info (device loop2): use zstd compression, level 3
[   97.084324][ T4734] BTRFS info (device loop2): using free space tree
[   97.388135][ T4734] BTRFS info (device loop2): enabling ssd optimizations
[   97.463431][   T26] audit: type=1800 audit(1786529163.409:4): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.134" name="bus" dev="loop2" ino=263 res=0 errno=0
[   97.706672][ T4777] loop3: detected capacity change from 0 to 2048
[   97.853372][ T4777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   98.046833][ T4272] EXT4-fs (loop3): unmounting filesystem.
[   98.093091][ T4789] loop0: detected capacity change from 0 to 1024
[   98.140976][ T4282] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   98.184446][ T4382] kworker/u4:10 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0
[   98.199299][ T4382] CPU: 1 PID: 4382 Comm: kworker/u4:10 Not tainted syzkaller #0
[   98.206975][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.217069][ T4382] Workqueue: loop0 loop_rootcg_workfn
[   98.222485][ T4382] Call Trace:
[   98.225874][ T4382]  <TASK>
[   98.228820][ T4382]  dump_stack_lvl+0x188/0x24e
[   98.233529][ T4382]  ? ___ratelimit+0x14e/0x610
[   98.238243][ T4382]  ? show_regs_print_info+0x12/0x12
[   98.243481][ T4382]  ? load_image+0x410/0x410
[   98.248003][ T4382]  ? ___ratelimit+0x474/0x610
[   98.252721][ T4382]  ? radix_tree_cpu_dead+0x160/0x160
[   98.258120][ T4382]  dump_header+0xd8/0x820
[   98.262467][ T4382]  oom_kill_process+0x361/0x550
[   98.267314][ T4382]  out_of_memory+0xe25/0x1220
[   98.271990][ T4382]  ? mutex_lock_nested+0x10/0x10
[   98.276927][ T4382]  ? unregister_oom_notifier+0x20/0x20
[   98.282391][ T4382]  mem_cgroup_out_of_memory+0x2c0/0x390
[   98.287931][ T4382]  ? mem_cgroup_oom_trylock+0x210/0x210
[   98.293476][ T4382]  ? do_raw_spin_unlock+0x11d/0x230
[   98.298674][ T4382]  try_charge_memcg+0xc9d/0x17c0
[   98.303783][ T4382]  ? verify_lock_unused+0x140/0x140
[   98.308986][ T4382]  ? verify_lock_unused+0x140/0x140
[   98.314186][ T4382]  ? percpu_ref_put+0x180/0x180
[   98.319051][ T4382]  charge_memcg+0x117/0x3b0
[   98.323589][ T4382]  ? __mem_cgroup_charge+0x80/0x80
[   98.328704][ T4382]  ? mem_cgroup_swapin_charge_folio+0x2f/0x380
[   98.334864][ T4382]  mem_cgroup_swapin_charge_folio+0x25e/0x380
[   98.340930][ T4382]  __read_swap_cache_async+0x3ea/0x9a0
[   98.346392][ T4382]  swap_cluster_readahead+0x553/0x690
[   98.351756][ T4382]  ? put_swap_device+0x1e/0x230
[   98.356604][ T4382]  ? read_swap_cache_async+0xa0/0xa0
[   98.361886][ T4382]  ? put_swap_device+0x1e/0x230
[   98.366746][ T4382]  ? swap_cache_get_folio+0x137/0x5d0
[   98.372139][ T4382]  ? mpol_shared_policy_lookup+0x147/0x1e0
[   98.377942][ T4382]  shmem_swapin_folio+0x651/0x1600
[   98.383058][ T4382]  ? folio_lock+0x190/0x190
[   98.387592][ T4382]  ? xas_load+0x127/0x140
[   98.391935][ T4382]  ? page_cache_prev_miss+0x380/0x380
[   98.397315][ T4382]  ? __lock_acquire+0x7c40/0x7c40
[   98.402363][ T4382]  shmem_get_folio_gfp+0x3f7/0x35e0
[   98.407569][ T4382]  ? aa_file_perm+0x3ea/0xf00
[   98.412261][ T4382]  shmem_file_read_iter+0x1f1/0x980
[   98.417492][ T4382]  do_iter_read+0x629/0xb10
[   98.422001][ T4382]  ? vfs_iter_read+0xa0/0xa0
[   98.426592][ T4382]  ? _raw_spin_lock_irqsave+0x100/0x100
[   98.432134][ T4382]  ? kthread_associate_blkcg+0x355/0x5f0
[   98.437775][ T4382]  ? vfs_iter_read+0x67/0xa0
[   98.442367][ T4382]  loop_process_work+0x95d/0x1eb0
[   98.447417][ T4382]  ? loop_workfn+0x50/0x50
[   98.451857][ T4382]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   98.457879][ T4382]  ? __lock_acquire+0x7c40/0x7c40
[   98.462915][ T4382]  ? read_lock_is_recursive+0x10/0x10
[   98.468283][ T4382]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[   98.474177][ T4382]  ? _raw_spin_unlock+0x40/0x40
[   98.479024][ T4382]  ? _raw_spin_unlock_irq+0x1f/0x40
[   98.484221][ T4382]  ? process_one_work+0x7b4/0x1160
[   98.489327][ T4382]  process_one_work+0x8ab/0x1160
[   98.494273][ T4382]  ? worker_detach_from_pool+0x240/0x240
[   98.499906][ T4382]  ? _raw_spin_lock_irq+0xb7/0xf0
[   98.504930][ T4382]  ? _raw_spin_lock_irqsave+0x100/0x100
[   98.510485][ T4382]  ? wq_worker_running+0x97/0x190
[   98.515598][ T4382]  worker_thread+0xaf5/0x12a0
[   98.520284][ T4382]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[   98.526181][ T4382]  kthread+0x29d/0x330
[   98.530241][ T4382]  ? worker_clr_flags+0x1a0/0x1a0
[   98.535265][ T4382]  ? kthread_blkcg+0xd0/0xd0
[   98.539850][ T4382]  ret_from_fork+0x1f/0x30
[   98.544310][ T4382]  </TASK>
[   98.652372][ T4382] memory: usage 96kB, limit 96kB, failcnt 232
[   98.659419][ T4382] memory+swap: usage 576kB, limit 9007199254740988kB, failcnt 0
[   98.667207][ T4382] kmem: usage 12kB, limit 9007199254740988kB, failcnt 0
[   98.688518][ T4382] Memory cgroup stats for /syz0/test:
[   98.688838][ T4382] anon 0
[   98.688838][ T4382] file 81920
[   98.688838][ T4382] kernel 12288
[   98.688838][ T4382] kernel_stack 0
[   98.688838][ T4382] pagetables 0
[   98.688838][ T4382] sec_pagetables 0
[   98.688838][ T4382] percpu 0
[   98.688838][ T4382] sock 0
[   98.688838][ T4382] vmalloc 0
[   98.688838][ T4382] shmem 81920
[   98.688838][ T4382] zswap 0
[   98.688838][ T4382] zswapped 0
[   98.688838][ T4382] file_mapped 0
[   98.688838][ T4382] file_dirty 0
[   98.688838][ T4382] file_writeback 0
[   98.688838][ T4382] swapcached 569344
[   98.688838][ T4382] anon_thp 0
[   98.688838][ T4382] file_thp 0
[   98.688838][ T4382] shmem_thp 0
[   98.688838][ T4382] inactive_anon 81920
[   98.688838][ T4382] active_anon 4096
[   98.688838][ T4382] inactive_file 0
[   98.688838][ T4382] active_file 0
[   98.688838][ T4382] unevictable 0
[   98.688838][ T4382] slab_reclaimable 4832
[   98.688838][ T4382] slab_unreclaimable 5648
[   98.688838][ T4382] slab 10480
[   98.785796][ T4382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.146,pid=4788,uid=0
[   98.966566][ T4382] Memory cgroup out of memory: Killed process 4788 (syz.0.146) total-vm:102244kB, anon-rss:1396kB, file-rss:22088kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[   99.700400][ T4814] loop1: detected capacity change from 0 to 128
[  100.596385][ T4824] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.159'.
[  100.968854][ T4830] loop2: detected capacity change from 0 to 128
[  101.061265][ T4830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  101.145076][ T4830] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  101.314927][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  101.369567][   T29] oom_reaper: reaped process 4788 (syz.0.146), now anon-rss:0kB, file-rss:21384kB, shmem-rss:0kB
[  101.437336][ T4382] kworker/u4:10 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0
[  101.527057][ T4382] CPU: 0 PID: 4382 Comm: kworker/u4:10 Not tainted syzkaller #0
[  101.534781][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  101.544856][ T4382] Workqueue: loop0 loop_rootcg_workfn
[  101.550257][ T4382] Call Trace:
[  101.553553][ T4382]  <TASK>
[  101.556495][ T4382]  dump_stack_lvl+0x188/0x24e
[  101.561204][ T4382]  ? show_regs_print_info+0x12/0x12
[  101.566527][ T4382]  ? load_image+0x410/0x410
[  101.571058][ T4382]  dump_header+0xd8/0x820
[  101.575439][ T4382]  out_of_memory+0xe9a/0x1220
[  101.580132][ T4382]  ? print_unlock_imbalance_bug+0x160/0x160
[  101.586056][ T4382]  ? mutex_lock_nested+0x10/0x10
[  101.591017][ T4382]  ? unregister_oom_notifier+0x20/0x20
[  101.596590][ T4382]  mem_cgroup_out_of_memory+0x2c0/0x390
[  101.602292][ T4382]  ? mem_cgroup_oom_trylock+0x210/0x210
[  101.607958][ T4382]  ? do_raw_spin_unlock+0x11d/0x230
[  101.613180][ T4382]  try_charge_memcg+0xc9d/0x17c0
[  101.618140][ T4382]  ? verify_lock_unused+0x140/0x140
[  101.623366][ T4382]  ? verify_lock_unused+0x140/0x140
[  101.628634][ T4382]  ? percpu_ref_put+0x180/0x180
[  101.633623][ T4382]  charge_memcg+0x117/0x3b0
[  101.638155][ T4382]  ? __mem_cgroup_charge+0x80/0x80
[  101.643306][ T4382]  ? mem_cgroup_swapin_charge_folio+0x2f/0x380
[  101.649474][ T4382]  mem_cgroup_swapin_charge_folio+0x25e/0x380
[  101.655555][ T4382]  __read_swap_cache_async+0x3ea/0x9a0
[  101.661026][ T4382]  swap_cluster_readahead+0x553/0x690
[  101.666398][ T4382]  ? put_swap_device+0x1e/0x230
[  101.671348][ T4382]  ? read_swap_cache_async+0xa0/0xa0
[  101.676642][ T4382]  ? put_swap_device+0x1e/0x230
[  101.681525][ T4382]  ? swap_cache_get_folio+0x137/0x5d0
[  101.687523][ T4382]  ? mpol_shared_policy_lookup+0x147/0x1e0
[  101.693351][ T4382]  shmem_swapin_folio+0x651/0x1600
[  101.698476][ T4382]  ? folio_lock+0x190/0x190
[  101.703042][ T4382]  ? xas_load+0x127/0x140
[  101.707469][ T4382]  ? page_cache_prev_miss+0x380/0x380
[  101.712883][ T4382]  ? __lock_acquire+0x7c40/0x7c40
[  101.717914][ T4382]  shmem_get_folio_gfp+0x3f7/0x35e0
[  101.723115][ T4382]  ? aa_file_perm+0x3ea/0xf00
[  101.727845][ T4382]  shmem_file_read_iter+0x1f1/0x980
[  101.733081][ T4382]  do_iter_read+0x629/0xb10
[  101.737612][ T4382]  ? vfs_iter_read+0xa0/0xa0
[  101.742202][ T4382]  ? _raw_spin_lock_irqsave+0x100/0x100
[  101.747746][ T4382]  ? kthread_associate_blkcg+0x355/0x5f0
[  101.753387][ T4382]  ? vfs_iter_read+0x67/0xa0
[  101.758003][ T4382]  loop_process_work+0x95d/0x1eb0
[  101.763133][ T4382]  ? loop_workfn+0x50/0x50
[  101.767575][ T4382]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  101.773561][ T4382]  ? __lock_acquire+0x7c40/0x7c40
[  101.778625][ T4382]  ? read_lock_is_recursive+0x10/0x10
[  101.784009][ T4382]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  101.790003][ T4382]  ? _raw_spin_unlock+0x40/0x40
[  101.794852][ T4382]  ? _raw_spin_unlock_irq+0x1f/0x40
[  101.800046][ T4382]  ? process_one_work+0x7b4/0x1160
[  101.805152][ T4382]  process_one_work+0x8ab/0x1160
[  101.810097][ T4382]  ? worker_detach_from_pool+0x240/0x240
[  101.815744][ T4382]  ? _raw_spin_lock_irq+0xb7/0xf0
[  101.820769][ T4382]  ? _raw_spin_lock_irqsave+0x100/0x100
[  101.826329][ T4382]  ? wq_worker_running+0x97/0x190
[  101.831459][ T4382]  worker_thread+0xaf5/0x12a0
[  101.836157][ T4382]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  101.842059][ T4382]  kthread+0x29d/0x330
[  101.846120][ T4382]  ? worker_clr_flags+0x1a0/0x1a0
[  101.851248][ T4382]  ? kthread_blkcg+0xd0/0xd0
[  101.855946][ T4382]  ret_from_fork+0x1f/0x30
[  101.860379][ T4382]  </TASK>
[  101.903964][ T4382] memory: usage 96kB, limit 96kB, failcnt 1167
[  101.912045][ T4822] loop3: detected capacity change from 0 to 32768
[  102.088705][ T4845] loop2: detected capacity change from 0 to 256
[  102.431726][ T4382] memory+swap: usage 576kB, limit 9007199254740988kB, failcnt 0
[  102.467893][ T4822] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.158 (4822)
[  102.588611][ T4382] kmem: usage 12kB, limit 9007199254740988kB, failcnt 0
[  102.751277][ T4382] Memory cgroup stats for /syz0/test:
[  102.755667][ T4382] anon 0
[  102.755667][ T4382] file 81920
[  102.755667][ T4382] kernel 12288
[  102.755667][ T4382] kernel_stack 0
[  102.755667][ T4382] pagetables 0
[  102.755667][ T4382] sec_pagetables 0
[  102.755667][ T4382] percpu 0
[  102.755667][ T4382] sock 0
[  102.755667][ T4382] vmalloc 0
[  102.755667][ T4382] shmem 81920
[  102.755667][ T4382] zswap 0
[  102.755667][ T4382] zswapped 0
[  102.755667][ T4382] file_mapped 0
[  102.755667][ T4382] file_dirty 0
[  102.755667][ T4382] file_writeback 0
[  102.755667][ T4382] swapcached 569344
[  102.755667][ T4382] anon_thp 0
[  102.755667][ T4382] file_thp 0
[  102.755667][ T4382] shmem_thp 0
[  102.755667][ T4382] inactive_anon 81920
[  102.755667][ T4382] active_anon 4096
[  102.755667][ T4382] inactive_file 0
[  102.755667][ T4382] active_file 0
[  102.755667][ T4382] unevictable 0
[  102.755667][ T4382] slab_reclaimable 4832
[  102.755667][ T4382] slab_unreclaimable 5648
[  102.755667][ T4382] slab 10480
[  102.849652][    C1] vkms_vblank_simulate: vblank timer overrun
[  104.220728][ T4382] Out of memory and no killable processes...
[  104.281684][    C1] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  104.374156][ T4382] kworker/u4:10 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=0
[  104.423487][ T4382] CPU: 1 PID: 4382 Comm: kworker/u4:10 Not tainted syzkaller #0
[  104.431177][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  104.441254][ T4382] Workqueue: loop0 loop_rootcg_workfn
[  104.446669][ T4382] Call Trace:
[  104.449954][ T4382]  <TASK>
[  104.452973][ T4382]  dump_stack_lvl+0x188/0x24e
[  104.457765][ T4382]  ? show_regs_print_info+0x12/0x12
[  104.462960][ T4382]  ? load_image+0x410/0x410
[  104.467456][ T4382]  ? preempt_schedule+0xbc/0xd0
[  104.472325][ T4382]  dump_header+0xd8/0x820
[  104.476677][ T4382]  out_of_memory+0xe9a/0x1220
[  104.481379][ T4382]  ? mutex_lock_nested+0x10/0x10
[  104.486332][ T4382]  ? unregister_oom_notifier+0x20/0x20
[  104.491810][ T4382]  mem_cgroup_out_of_memory+0x2c0/0x390
[  104.497371][ T4382]  ? mem_cgroup_oom_trylock+0x210/0x210
[  104.502919][ T4382]  ? do_raw_spin_unlock+0x11d/0x230
[  104.508118][ T4382]  try_charge_memcg+0xc9d/0x17c0
[  104.513071][ T4382]  ? percpu_ref_put+0x180/0x180
[  104.517919][ T4382]  ? rcu_read_unlock_special+0x510/0x510
[  104.523544][ T4382]  ? mark_lock+0x94/0x320
[  104.527881][ T4382]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  104.533514][ T4382]  charge_memcg+0x117/0x3b0
[  104.538017][ T4382]  ? __mem_cgroup_charge+0x80/0x80
[  104.543132][ T4382]  ? mem_cgroup_swapin_charge_folio+0x2f/0x380
[  104.549280][ T4382]  mem_cgroup_swapin_charge_folio+0x25e/0x380
[  104.555346][ T4382]  __read_swap_cache_async+0x3ea/0x9a0
[  104.560810][ T4382]  swap_cluster_readahead+0x553/0x690
[  104.566190][ T4382]  ? lock_chain_count+0x20/0x20
[  104.571054][ T4382]  ? read_swap_cache_async+0xa0/0xa0
[  104.576334][ T4382]  ? lockdep_hardirqs_on+0x94/0x140
[  104.581623][ T4382]  ? mpol_shared_policy_lookup+0x147/0x1e0
[  104.587429][ T4382]  shmem_swapin_folio+0x651/0x1600
[  104.592570][ T4382]  ? folio_lock+0x190/0x190
[  104.597111][ T4382]  ? page_cache_prev_miss+0x380/0x380
[  104.602523][ T4382]  shmem_get_folio_gfp+0x3f7/0x35e0
[  104.608082][ T4382]  ? __sched_text_start+0x8/0x8
[  104.612988][ T4382]  shmem_file_read_iter+0x1f1/0x980
[  104.618200][ T4382]  do_iter_read+0x629/0xb10
[  104.622709][ T4382]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  104.628438][ T4382]  ? vfs_iter_read+0xa0/0xa0
[  104.633053][ T4382]  ? vfs_iter_read+0x67/0xa0
[  104.637649][ T4382]  loop_process_work+0x95d/0x1eb0
[  104.642687][ T4382]  ? loop_workfn+0x50/0x50
[  104.647108][ T4382]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  104.653089][ T4382]  ? __lock_acquire+0x7c40/0x7c40
[  104.658141][ T4382]  ? read_lock_is_recursive+0x10/0x10
[  104.663508][ T4382]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  104.669399][ T4382]  ? _raw_spin_unlock+0x40/0x40
[  104.674261][ T4382]  ? _raw_spin_unlock_irq+0x1f/0x40
[  104.679476][ T4382]  ? process_one_work+0x7b4/0x1160
[  104.684587][ T4382]  process_one_work+0x8ab/0x1160
[  104.689536][ T4382]  ? worker_detach_from_pool+0x240/0x240
[  104.695520][ T4382]  ? _raw_spin_lock_irq+0xb7/0xf0
[  104.700560][ T4382]  ? _raw_spin_lock_irqsave+0x100/0x100
[  104.706106][ T4382]  ? wq_worker_running+0x97/0x190
[  104.711130][ T4382]  worker_thread+0xaf5/0x12a0
[  104.715837][ T4382]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  104.721820][ T4382]  kthread+0x29d/0x330
[  104.725884][ T4382]  ? worker_clr_flags+0x1a0/0x1a0
[  104.730905][ T4382]  ? kthread_blkcg+0xd0/0xd0
[  104.735857][ T4382]  ret_from_fork+0x1f/0x30
[  104.740631][ T4382]  </TASK>
[  104.743801][    C1] vkms_vblank_simulate: vblank timer overrun
[  104.840009][ T4828] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.847856][ T4828] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.861148][ T4822] BTRFS error (device loop3): open_ctree failed: -4
[  104.962377][ T4382] memory: usage 96kB, limit 96kB, failcnt 1186
[  104.981366][ T4382] memory+swap: usage 576kB, limit 9007199254740988kB, failcnt 0
[  105.145907][ T4382] kmem: usage 12kB, limit 9007199254740988kB, failcnt 0
[  105.153018][ T4382] Memory cgroup stats for /syz0/test:
[  105.153184][ T4382] anon 0
[  105.153184][ T4382] file 81920
[  105.153184][ T4382] kernel 12288
[  105.153184][ T4382] kernel_stack 0
[  105.153184][ T4382] pagetables 0
[  105.153184][ T4382] sec_pagetables 0
[  105.153184][ T4382] percpu 0
[  105.153184][ T4382] sock 0
[  105.153184][ T4382] vmalloc 0
[  105.153184][ T4382] shmem 81920
[  105.153184][ T4382] zswap 0
[  105.153184][ T4382] zswapped 0
[  105.153184][ T4382] file_mapped 0
[  105.153184][ T4382] file_dirty 0
[  105.153184][ T4382] file_writeback 0
[  105.153184][ T4382] swapcached 569344
[  105.153184][ T4382] anon_thp 0
[  105.153184][ T4382] file_thp 0
[  105.153184][ T4382] shmem_thp 0
[  105.153184][ T4382] inactive_anon 81920
[  105.153184][ T4382] active_anon 4096
[  105.153184][ T4382] inactive_file 0
[  105.153184][ T4382] active_file 0
[  105.153184][ T4382] unevictable 0
[  105.153184][ T4382] slab_reclaimable 4832
[  105.153184][ T4382] slab_unreclaimable 5648
[  105.153184][ T4382] slab 10480
[  105.259444][ T4382] Out of memory and no killable processes...
[  105.265682][    C0] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  105.275059][    C0] Buffer I/O error on dev loop0, logical block 1, async page read
[  106.208250][ T4868] loop0: detected capacity change from 0 to 1024
[  106.293257][ T4868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  106.342502][ T4868] overlayfs: failed to resolve './bus': -2
[  106.434996][ T4873] xt_CONNSECMARK: invalid mode: 0
[  107.322967][ T4879] loop3: detected capacity change from 0 to 512
[  107.353774][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  107.368047][ T4828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.477079][ T4828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.604015][ T4879] EXT4-fs (loop3): Test dummy encryption mode enabled
[  107.624387][ T4879] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.171: inode has both inline data and extents flags
[  107.639050][ T4879] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.171: couldn't read orphan inode 15 (err -117)
[  107.653568][ T4879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  107.688106][ T4879] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.171: invalid size
[  107.773409][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  107.976338][ T4828] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.985684][ T4828] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.994577][ T4828] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.003850][ T4828] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.138049][ T4897] netlink: 'syz.3.174': attribute type 13 has an invalid length.
[  109.029248][ T4911] netlink: 'syz.1.178': attribute type 29 has an invalid length.
[  109.037976][ T4911] netlink: 'syz.1.178': attribute type 29 has an invalid length.
[  109.116098][ T4908] loop3: detected capacity change from 0 to 1024
[  109.212460][ T4913] loop4: detected capacity change from 0 to 128
[  109.256240][ T4913] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  109.270374][ T4913] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  109.413028][ T4905] loop2: detected capacity change from 0 to 32768
[  109.528121][ T4905] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.176 (4905)
[  109.551729][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  109.590803][ T4905] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  109.601454][ T4905] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  109.612744][ T4921] loop1: detected capacity change from 0 to 512
[  109.624525][ T4905] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  109.685458][ T4924] xt_CONNSECMARK: invalid mode: 0
[  109.745621][ T4905] BTRFS info (device loop2): use zstd compression, level 3
[  109.778545][ T4921] EXT4-fs: inline encryption not supported
[  109.831589][ T4905] BTRFS info (device loop2): using free space tree
[  109.949008][ T4921] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  110.275140][ T4921] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  110.321081][ T4921] EXT4-fs (loop1): 1 truncate cleaned up
[  110.351626][ T4921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  110.535015][ T4939] loop4: detected capacity change from 0 to 128
[  111.012238][ T4905] BTRFS info (device loop2): enabling ssd optimizations
[  111.045279][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  111.045292][   T26] audit: type=1800 audit(1786529176.999:6): pid=4905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.176" name="bus" dev="loop2" ino=263 res=0 errno=0
[  111.388417][ T4969] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  111.446998][ T4282] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  111.667984][ T4976] loop3: detected capacity change from 0 to 128
[  111.723036][ T4976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  111.785170][ T4976] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  111.943159][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  112.003341][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  112.730206][ T5004] loop3: detected capacity change from 0 to 128
[  112.998412][ T4999] loop4: detected capacity change from 0 to 512
[  113.048846][ T4999] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  113.131198][ T4999] EXT4-fs (loop4): 1 truncate cleaned up
[  113.137639][ T4999] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  113.357318][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  113.789442][ T5013] loop0: detected capacity change from 0 to 8
[  114.023830][ T5013] SQUASHFS error: Failed to read block 0x6e6: -5
[  114.175024][ T5013] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  114.219136][ T5013] SQUASHFS error: Unable to read directory block [6e4:0]
[  114.702613][ T5023] loop3: detected capacity change from 0 to 128
[  114.970051][ T5026] loop0: detected capacity change from 0 to 256
[  114.978807][ T5023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  115.012221][ T5023] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  115.214296][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  115.348966][ T5038] netlink: 76 bytes leftover after parsing attributes in process `syz.3.212'.
[  116.915425][ T5073] loop4: detected capacity change from 0 to 256
[  118.603140][ T5112] loop4: detected capacity change from 0 to 8
[  120.031262][ T5122] loop4: detected capacity change from 0 to 4096
[  120.211239][ T5122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  120.505134][   T22] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  120.839692][   T22] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  120.881883][   T22] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  120.969007][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  120.986537][   T22] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  121.045284][   T22] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  121.077722][   T22] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  121.101789][   T22] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  121.166888][ T5145] loop4: detected capacity change from 0 to 128
[  121.426772][ T5151] fuse: Bad value for 'fd'
[  121.991448][ T5164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.256'.
[  122.400084][   T22] usb 2-1: string descriptor 0 read error: -22
[  122.406986][   T22] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  122.416289][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.545426][ T5164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.256'.
[  122.680331][ T5133] netlink: 56 bytes leftover after parsing attributes in process `syz.1.244'.
[  123.478716][ T5178] loop3: detected capacity change from 0 to 512
[  123.498364][ T4885] usb 2-1: USB disconnect, device number 2
[  123.547204][ T5178] EXT4-fs (loop3): Test dummy encryption mode enabled
[  123.642666][ T5178] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.259: inode has both inline data and extents flags
[  123.653541][ T5188] fuse: Bad value for 'fd'
[  123.713114][ T5178] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.259: couldn't read orphan inode 15 (err -117)
[  123.793510][ T5178] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  123.970987][ T5194] loop0: detected capacity change from 0 to 8
[  124.580132][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  124.780311][ T5202] loop4: detected capacity change from 0 to 8
[  124.812768][ T5204] loop2: detected capacity change from 0 to 1024
[  124.935685][ T5204] EXT4-fs: inline encryption not supported
[  125.010097][ T5204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  125.023681][ T5202] SQUASHFS error: Failed to read block 0x6e6: -5
[  125.042354][ T5205] xt_CONNSECMARK: invalid mode: 0
[  125.044410][ T5204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  125.048063][ T5202] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  125.097200][ T5202] SQUASHFS error: Unable to read directory block [6e4:0]
[  125.143036][ T5208] loop0: detected capacity change from 0 to 128
[  126.174218][ T5215] loop3: detected capacity change from 0 to 1024
[  126.324250][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  127.259122][ T5229] loop1: detected capacity change from 0 to 512
[  127.328902][ T5229] EXT4-fs (loop1): Test dummy encryption mode enabled
[  127.430126][ T5232] netlink: 'syz.2.278': attribute type 29 has an invalid length.
[  127.442595][ T5229] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.277: inode has both inline data and extents flags
[  127.456374][ T5232] netlink: 'syz.2.278': attribute type 29 has an invalid length.
[  127.606267][ T5235] netlink: 'syz.2.278': attribute type 29 has an invalid length.
[  127.628364][ T5229] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.277: couldn't read orphan inode 15 (err -117)
[  127.799408][ T5229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  128.410208][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  129.511173][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[  131.629447][ T4287] Bluetooth: hci4: link tx timeout
[  131.643910][ T4287] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.363189][ T5292] loop4: detected capacity change from 0 to 1024
[  132.613465][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'.
[  132.728431][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.734935][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  132.753889][ T5307] netlink: 'syz.1.302': attribute type 29 has an invalid length.
[  132.979799][ T5307] netlink: 'syz.1.302': attribute type 29 has an invalid length.
[  133.001851][ T5311] netlink: 'syz.1.302': attribute type 29 has an invalid length.
[  133.704873][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  133.847610][ T4281] Bluetooth: hci1: link tx timeout
[  133.853157][ T4281] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.184841][ T4322] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  134.376761][ T4322] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  134.412944][ T4322] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  134.424307][ T5340] xt_CONNSECMARK: invalid mode: 0
[  134.447670][ T4322] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  134.460460][ T4322] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  134.471266][ T5343] loop4: detected capacity change from 0 to 512
[  134.472668][ T5344] netlink: 'syz.0.317': attribute type 29 has an invalid length.
[  134.482291][ T4322] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  134.491337][ T5344] netlink: 'syz.0.317': attribute type 29 has an invalid length.
[  134.500248][ T5343] EXT4-fs: Ignoring removed bh option
[  134.509392][ T5344] netlink: 'syz.0.317': attribute type 29 has an invalid length.
[  134.511067][ T4322] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  134.536676][ T4322] usb 2-1: string descriptor 0 read error: -22
[  134.543692][ T4322] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  134.555003][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.619380][ T5343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  134.628785][ T4281] Bluetooth: hci2: link tx timeout
[  134.635577][ T4281] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.648122][ T5343] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.747135][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  134.799103][ T5326] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'.
[  135.647641][ T5380] loop3: detected capacity change from 0 to 512
[  135.674159][ T4351] usb 2-1: USB disconnect, device number 3
[  135.781608][ T5380] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  135.925478][ T4281] Bluetooth: hci1: command 0x0406 tx timeout
[  136.189517][ T5380] EXT4-fs (loop3): 1 truncate cleaned up
[  136.264814][ T5380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  136.475772][ T5391] loop4: detected capacity change from 0 to 1024
[  136.488982][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  136.535165][ T5391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  136.724849][ T4287] Bluetooth: hci2: command 0x0406 tx timeout
[  137.153549][   T26] audit: type=1800 audit(1786529203.009:7): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.333" name="file1" dev="overlay" ino=15 res=0 errno=0
[  137.540013][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  139.408918][ T5416] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.416439][ T5416] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.048786][ T5446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'.
[  140.237576][ T5453] loop2: detected capacity change from 0 to 512
[  140.292198][ T5456] netlink: 'syz.3.351': attribute type 29 has an invalid length.
[  140.329281][ T5453] EXT4-fs (loop2): 1 truncate cleaned up
[  140.336056][ T5453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  140.385902][   T26] audit: type=1800 audit(1786529206.339:8): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.350" name="file0" dev="loop2" ino=13 res=0 errno=0
[  140.427099][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  140.545315][ T5416] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.609904][ T5416] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.916782][ T5416] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.923306][ T5469] fuse: Invalid rootmode
[  140.934465][ T5416] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.948639][ T5416] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.958122][ T5416] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.089882][ T5456] netlink: 'syz.3.351': attribute type 29 has an invalid length.
[  141.116954][ T5458] netlink: 'syz.3.351': attribute type 29 has an invalid length.
[  141.262160][ T5476] loop1: detected capacity change from 0 to 1024
[  141.490220][ T5480] ip_tables: iptables: counters copy to user failed while replacing table
[  141.624011][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'.
[  142.162407][ T5496] loop4: detected capacity change from 0 to 8
[  142.793681][ T5499] loop1: detected capacity change from 0 to 128
[  142.924038][ T5499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  142.952422][ T5499] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  143.257714][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  143.637236][ T5521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'.
[  143.666744][ T5520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.373'.
[  143.714609][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[  143.759832][ T5520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.373'.
[  143.785116][ T5525] netlink: 60 bytes leftover after parsing attributes in process `syz.2.373'.
[  143.983905][ T5515] loop3: detected capacity change from 0 to 32768
[  144.021962][ T5515] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.371 (5515)
[  144.060498][ T5530] loop4: detected capacity change from 0 to 512
[  144.130024][ T5530] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  144.174829][ T5515] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  144.203785][ T5515] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  144.251826][ T5515] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  144.355397][ T5515] BTRFS info (device loop3): use zstd compression, level 3
[  144.362671][ T5515] BTRFS info (device loop3): using free space tree
[  144.379991][ T5530] EXT4-fs (loop4): 1 truncate cleaned up
[  144.453538][ T5542] loop1: detected capacity change from 0 to 8
[  144.681876][ T5530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  145.164384][ T5515] BTRFS info (device loop3): enabling ssd optimizations
[  145.233846][   T26] audit: type=1800 audit(1786529211.179:9): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.371" name="bus" dev="loop3" ino=263 res=0 errno=0
[  145.274553][ T5530] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 49 (only 1 groups)
[  145.323214][   T26] audit: type=1800 audit(1786529211.219:10): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.371" name="bus" dev="loop3" ino=263 res=0 errno=0
[  145.330635][ T5563] loop2: detected capacity change from 0 to 1024
[  145.442496][ T5569] loop0: detected capacity change from 0 to 128
[  145.581998][ T5569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  145.661360][ T5569] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.798692][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  145.903969][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  146.710179][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'.
[  146.830091][ T5588] loop1: detected capacity change from 0 to 512
[  146.892175][ T4272] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  146.898987][ T5591] device syzkaller0 entered promiscuous mode
[  146.926416][ T5588] EXT4-fs (loop1): Test dummy encryption mode enabled
[  146.964879][ T5588] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.389: inode has both inline data and extents flags
[  147.115232][ T5588] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.389: couldn't read orphan inode 15 (err -117)
[  147.171805][ T5588] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  147.321324][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  147.666599][ T5614] loop3: detected capacity change from 0 to 1024
[  147.670208][ T5617] loop2: detected capacity change from 0 to 128
[  147.780004][ T5617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  147.818735][ T5621] loop1: detected capacity change from 0 to 512
[  147.838118][ T5617] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  147.856170][ T5621] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  148.031805][ T5621] EXT4-fs (loop1): 1 truncate cleaned up
[  148.053825][ T5621] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  148.082188][ T5621] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 2147500033 (only 1 groups)
[  148.110141][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  148.868718][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  149.194457][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[  149.436699][ T5626] loop3: detected capacity change from 0 to 32768
[  149.475825][ T5626] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.401 (5626)
[  149.542840][ T5626] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  149.578315][ T5626] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  149.619800][ T5626] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  149.660592][ T5658] fuse: Unknown parameter 'use00000000000000000000'
[  149.661299][ T5626] BTRFS info (device loop3): use zstd compression, level 3
[  149.696842][ T5626] BTRFS info (device loop3): using free space tree
[  149.834971][ T5626] BTRFS info (device loop3): enabling ssd optimizations
[  149.884810][   T26] audit: type=1800 audit(1786529215.829:11): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.401" name="bus" dev="loop3" ino=263 res=0 errno=0
[  150.007335][   T26] audit: type=1800 audit(1786529215.869:12): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.401" name="bus" dev="loop3" ino=263 res=0 errno=0
[  150.081464][   T26] audit: type=1800 audit(1786529215.869:13): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.401" name="bus" dev="loop3" ino=263 res=0 errno=0
[  150.526398][ T4272] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  151.440114][ T5710] fuse: Unknown parameter 'use00000000000000000000'
[  151.613353][ T5712] xt_CONNSECMARK: invalid mode: 0
[  151.949212][ T5729] loop0: detected capacity change from 0 to 128
[  152.033909][ T5729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  152.115681][ T5729] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  152.201383][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  152.326192][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'.
[  153.748470][ T5759] netlink: 'syz.2.441': attribute type 29 has an invalid length.
[  153.762258][ T5759] netlink: 'syz.2.441': attribute type 29 has an invalid length.
[  153.812408][ T5761] netlink: 'syz.2.441': attribute type 29 has an invalid length.
[  154.370600][ T5778] loop1: detected capacity change from 0 to 128
[  154.405991][ T5778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  154.439797][ T5778] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.614151][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  154.905144][ T4287] Bluetooth: hci4: link tx timeout
[  154.912488][ T4287] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  155.163142][ T5792] loop2: detected capacity change from 0 to 128
[  156.208961][ T5821] netlink: 'syz.3.464': attribute type 1 has an invalid length.
[  158.091118][ T5863] netlink: 'syz.4.477': attribute type 1 has an invalid length.
[  158.331552][ T5869] xt_CONNSECMARK: invalid mode: 0
[  159.814645][ T5885] loop3: detected capacity change from 0 to 8
[  160.856491][ T5868] loop1: detected capacity change from 0 to 32768
[  160.915123][ T5868] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.479 (5868)
[  160.965373][ T5868] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  160.987649][ T5868] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  161.010668][ T5868] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  161.054978][ T5868] BTRFS info (device loop1): use zstd compression, level 3
[  161.062286][ T5868] BTRFS info (device loop1): using free space tree
[  161.275390][ T5868] BTRFS info (device loop1): enabling ssd optimizations
[  161.407791][ T4273] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  163.526539][ T5954] loop1: detected capacity change from 0 to 8
[  163.651054][ T5940] loop4: detected capacity change from 0 to 32768
[  163.708941][ T5940] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.492 (5940)
[  163.726605][ T5954] SQUASHFS error: Failed to read block 0x6e6: -5
[  163.743212][ T5954] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  163.761401][ T5954] SQUASHFS error: Unable to read directory block [6e4:0]
[  163.895616][ T5940] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  163.925908][ T5940] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  164.046089][ T5940] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  164.131048][ T5940] BTRFS info (device loop4): use zstd compression, level 3
[  164.327887][ T5940] BTRFS info (device loop4): using free space tree
[  164.727190][ T5940] BTRFS info (device loop4): enabling ssd optimizations
[  164.852632][   T26] audit: type=1800 audit(1786529230.799:14): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.492" name="bus" dev="loop4" ino=263 res=0 errno=0
[  164.934764][   T26] audit: type=1800 audit(1786529230.799:15): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.492" name="bus" dev="loop4" ino=263 res=0 errno=0
[  165.024768][   T26] audit: type=1800 audit(1786529230.799:16): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.492" name="bus" dev="loop4" ino=263 res=0 errno=0
[  165.185988][ T5995] netlink: 'syz.3.506': attribute type 1 has an invalid length.
[  165.350845][ T5956] loop2: detected capacity change from 0 to 32768
[  165.381155][ T5956] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.499 (5956)
[  165.575678][ T4283] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  165.653075][ T6003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.510'.
[  166.465951][ T6009] loop0: detected capacity change from 0 to 128
[  166.518904][ T4264] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4264)
[  166.642862][ T6017] device syzkaller0 entered promiscuous mode
[  167.237140][ T6030] netlink: 'syz.4.517': attribute type 29 has an invalid length.
[  170.020485][ T6030] netlink: 'syz.4.517': attribute type 29 has an invalid length.
[  170.044897][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'.
[  170.578123][ T6047] loop4: detected capacity change from 0 to 512
[  170.773939][ T6047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  170.927836][ T6047] EXT4-fs (loop4): 1 truncate cleaned up
[  170.933851][ T6047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  171.209444][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  171.246478][ T6057] loop2: detected capacity change from 0 to 8
[  171.319409][ T6057] SQUASHFS error: Failed to read block 0x6e6: -5
[  171.334943][ T6061] netlink: 'syz.4.526': attribute type 29 has an invalid length.
[  171.375046][ T6057] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  171.392439][ T6061] netlink: 'syz.4.526': attribute type 29 has an invalid length.
[  171.414191][ T6057] SQUASHFS error: Unable to read directory block [6e4:0]
[  171.423441][ T6062] netlink: 'syz.4.526': attribute type 29 has an invalid length.
[  171.474894][ T4316] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[  171.615363][ T6071] netlink: 'syz.1.531': attribute type 29 has an invalid length.
[  171.631180][ T6071] netlink: 'syz.1.531': attribute type 29 has an invalid length.
[  171.658212][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'.
[  171.670142][ T6075] netlink: 'syz.1.531': attribute type 29 has an invalid length.
[  171.680200][ T4316] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  171.696108][ T4316] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  171.716047][ T4316] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  171.734817][ T4316] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  171.763577][ T4316] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  171.800978][ T4316] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  171.827292][ T4316] usb 1-1: string descriptor 0 read error: -22
[  171.899737][ T4316] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  171.969258][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.346926][ T6055] netlink: 56 bytes leftover after parsing attributes in process `syz.0.524'.
[  172.570665][ T6086] tipc: Started in network mode
[  172.694380][ T6086] tipc: Node identity 36f49d902f28, cluster identity 4711
[  173.260510][ T6086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.539145][ T6089] syzkaller0: MTU too low for tipc bearer
[  173.600572][ T6095] loop3: detected capacity change from 0 to 1024
[  173.614410][ T6089] tipc: Disabling bearer <eth:syzkaller0>
[  173.696113][ T6095] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  173.717383][ T6100] fuse: Bad value for 'fd'
[  173.883825][ T6107] netlink: 'syz.4.541': attribute type 29 has an invalid length.
[  173.898772][ T6107] netlink: 'syz.4.541': attribute type 29 has an invalid length.
[  173.907936][ T6107] netlink: 'syz.4.541': attribute type 29 has an invalid length.
[  174.000501][ T6110] loop2: detected capacity change from 0 to 512
[  174.221056][ T6110] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  174.378701][ T6114] syz.3.538 (6114) used greatest stack depth: 18848 bytes left
[  174.461492][ T6110] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002]
[  174.627989][ T6110] EXT4-fs (loop2): orphan cleanup on readonly fs
[  174.680764][ T6110] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.544: bg 0: block 15: invalid block bitmap
[  174.714099][ T5603] usb 1-1: USB disconnect, device number 2
[  174.777858][ T6120] ip_tables: iptables: counters copy to user failed while replacing table
[  174.821854][ T6110] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  174.923841][ T6110] EXT4-fs (loop2): 1 truncate cleaned up
[  174.979518][ T6110] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  175.411168][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  175.895404][ T6127] loop4: detected capacity change from 0 to 128
[  176.315818][ T6127] FAT-fs (loop4): Directory bread(block 414) failed
[  176.322737][ T6127] FAT-fs (loop4): Directory bread(block 415) failed
[  176.329895][ T6127] FAT-fs (loop4): Directory bread(block 416) failed
[  176.336624][ T6127] FAT-fs (loop4): Directory bread(block 417) failed
[  176.343353][ T6127] FAT-fs (loop4): Directory bread(block 418) failed
[  176.343936][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  176.350250][ T6127] FAT-fs (loop4): Directory bread(block 419) failed
[  176.363017][ T6127] FAT-fs (loop4): Directory bread(block 420) failed
[  176.369756][ T6127] FAT-fs (loop4): Directory bread(block 421) failed
[  176.620439][ T6136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'.
[  176.634269][ T6136] netlink: 'syz.4.553': attribute type 7 has an invalid length.
[  176.685101][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'.
[  177.281067][ T6136] device gretap0 entered promiscuous mode
[  177.326430][ T6136] device gretap0 left promiscuous mode
[  177.573548][ T6148] fuse: Unknown parameter '0x0000000000000003'
[  178.426648][ T6174] loop2: detected capacity change from 0 to 8
[  178.441114][ T6165] loop0: detected capacity change from 0 to 128
[  178.481146][ T6165] FAT-fs (loop0): Directory bread(block 414) failed
[  178.488078][ T6165] FAT-fs (loop0): Directory bread(block 415) failed
[  178.494755][ T6165] FAT-fs (loop0): Directory bread(block 416) failed
[  178.501560][ T6165] FAT-fs (loop0): Directory bread(block 417) failed
[  178.508531][ T6165] FAT-fs (loop0): Directory bread(block 418) failed
[  178.515331][ T6165] FAT-fs (loop0): Directory bread(block 419) failed
[  178.521948][ T6165] FAT-fs (loop0): Directory bread(block 420) failed
[  178.528614][ T6165] FAT-fs (loop0): Directory bread(block 421) failed
[  179.077336][   T27] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  179.395078][   T27] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  179.424791][   T27] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  179.445733][   T27] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  179.474740][   T27] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  179.500341][   T27] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  179.534744][   T27] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  179.557284][   T27] usb 4-1: string descriptor 0 read error: -22
[  179.563563][   T27] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  179.609696][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.715735][ T6190] fuse: Unknown parameter '0x0000000000000003'
[  179.859008][ T6166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.562'.
[  180.290103][ T6206] loop4: detected capacity change from 0 to 128
[  180.309981][ T6206] FAT-fs (loop4): Directory bread(block 414) failed
[  180.316829][ T6206] FAT-fs (loop4): Directory bread(block 415) failed
[  180.323547][ T6206] FAT-fs (loop4): Directory bread(block 416) failed
[  180.330513][ T6206] FAT-fs (loop4): Directory bread(block 417) failed
[  180.337301][ T6206] FAT-fs (loop4): Directory bread(block 418) failed
[  180.344005][ T6206] FAT-fs (loop4): Directory bread(block 419) failed
[  180.350905][ T6206] FAT-fs (loop4): Directory bread(block 420) failed
[  180.357779][ T6206] FAT-fs (loop4): Directory bread(block 421) failed
[  181.083851][   T27] usb 4-1: USB disconnect, device number 2
[  181.383215][ T6220] netlink: 'syz.4.584': attribute type 29 has an invalid length.
[  181.405101][ T6220] netlink: 'syz.4.584': attribute type 29 has an invalid length.
[  181.428556][ T6221] netlink: 'syz.4.584': attribute type 29 has an invalid length.
[  181.605561][ T6225] loop2: detected capacity change from 0 to 128
[  181.639678][ T6223] netlink: 'syz.2.581': attribute type 5 has an invalid length.
[  181.808500][ T6225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  181.818452][ T6225] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  181.896360][ T6223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.581'.
[  182.556084][ T6229] fuse: Bad value for 'fd'
[  182.587061][ T6233] fuse: Unknown parameter '0xffffffffffffffff'
[  183.378229][ T6242] loop0: detected capacity change from 0 to 128
[  183.749972][ T6242] FAT-fs (loop0): Directory bread(block 414) failed
[  183.756866][ T6242] FAT-fs (loop0): Directory bread(block 415) failed
[  183.763702][ T6242] FAT-fs (loop0): Directory bread(block 416) failed
[  183.770508][ T6242] FAT-fs (loop0): Directory bread(block 417) failed
[  183.777336][ T6242] FAT-fs (loop0): Directory bread(block 418) failed
[  183.784067][ T6242] FAT-fs (loop0): Directory bread(block 419) failed
[  183.790826][ T6242] FAT-fs (loop0): Directory bread(block 420) failed
[  183.797665][ T6242] FAT-fs (loop0): Directory bread(block 421) failed
[  183.883658][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  184.708382][ T6265] loop3: detected capacity change from 0 to 512
[  184.893055][ T6268] ip_tables: iptables: counters copy to user failed while replacing table
[  184.902919][ T4373] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  184.957636][ T6265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  185.107291][ T6265] EXT4-fs (loop3): 1 truncate cleaned up
[  185.113221][ T6265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  185.319796][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  185.351135][ T4373] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  185.410230][ T4373] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  185.555192][ T4373] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  185.585695][ T4373] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  185.658155][ T4373] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  185.909399][ T4373] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  186.181397][ T4373] usb 2-1: string descriptor 0 read error: -22
[  186.195132][ T4373] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  186.212236][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.606587][ T6253] netlink: 56 bytes leftover after parsing attributes in process `syz.1.595'.
[  186.919153][ T5603] usb 2-1: USB disconnect, device number 4
[  187.185248][ T6305] ip_tables: iptables: counters copy to user failed while replacing table
[  187.806393][ T6308] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request
[  188.154276][ T6321] fuse: Unknown parameter '0x0000000000000003'
[  188.640571][ T6336] Bluetooth: MGMT ver 1.22
[  188.949911][ T6349] ip_tables: iptables: counters copy to user failed while replacing table
[  189.385062][ T6352] random: crng reseeded on system resumption
[  190.650825][ T4281] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  190.659590][ T4281] Bluetooth: hci2: Injecting HCI hardware error event
[  190.668359][ T4287] Bluetooth: hci2: hardware error 0x00
[  190.702656][ T4373] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[  191.215048][ T4281] Bluetooth: hci1: command 0x0406 tx timeout
[  191.221322][ T4288] Bluetooth: hci3: command 0x0406 tx timeout
[  191.496750][ T4373] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  191.545349][ T4373] usb 3-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  191.576487][ T4373] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  191.617955][ T4373] usb 3-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  191.635785][ T4373] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  191.697271][ T4373] usb 3-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  191.779352][ T4373] usb 3-1: string descriptor 0 read error: -22
[  191.827418][ T4373] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  191.884189][ T6403] loop3: detected capacity change from 0 to 512
[  191.900295][ T6403] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  192.075155][ T6403] EXT4-fs (loop3): 1 truncate cleaned up
[  192.080962][ T6403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  192.189045][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.484801][ T4281] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  192.485646][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  192.493535][ T4281] Bluetooth: hci0: Injecting HCI hardware error event
[  192.495902][ T4288] Bluetooth: hci0: hardware error 0x00
[  192.575329][ T6377] netlink: 56 bytes leftover after parsing attributes in process `syz.2.633'.
[  192.815260][ T4287] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  192.954614][ T6422] loop1: detected capacity change from 0 to 8
[  194.168102][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.176200][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.533982][ T4373] usb 3-1: USB disconnect, device number 2
[  194.564939][ T4288] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  196.906723][ T6478] loop3: detected capacity change from 0 to 512
[  196.965331][ T6478] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  197.032560][ T6478] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002]
[  197.102080][ T6478] EXT4-fs (loop3): orphan cleanup on readonly fs
[  197.156633][ T6478] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.655: bg 0: block 15: invalid block bitmap
[  197.251569][ T6478] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  197.295870][ T6478] EXT4-fs (loop3): 1 truncate cleaned up
[  197.301583][ T6478] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  198.186300][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  199.320775][ T6522] loop2: detected capacity change from 0 to 1024
[  199.452865][ T6522] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  199.844753][   T26] audit: type=1800 audit(1786529265.759:17): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.666" name="file1" dev="overlay" ino=15 res=0 errno=0
[  200.141483][ T6546] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  200.496258][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  200.685669][ T6555] xt_CONNSECMARK: invalid mode: 0
[  201.818391][ T6574] loop0: detected capacity change from 0 to 8
[  202.833331][ T6560] loop2: detected capacity change from 0 to 32768
[  202.878083][ T6560] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  202.901406][ T6560] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  202.921816][ T6560] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  202.962302][ T6560] BTRFS info (device loop2): use zstd compression, level 3
[  202.993185][ T6560] BTRFS info (device loop2): using free space tree
[  203.814564][ T6560] BTRFS info (device loop2): enabling ssd optimizations
[  203.913811][   T26] audit: type=1800 audit(1786529269.859:18): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.673" name="bus" dev="loop2" ino=263 res=0 errno=0
[  204.018517][   T26] audit: type=1800 audit(1786529269.929:19): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.673" name="bus" dev="loop2" ino=263 res=0 errno=0
[  204.085159][   T26] audit: type=1800 audit(1786529269.929:20): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.673" name="bus" dev="loop2" ino=263 res=0 errno=0
[  204.336370][ T6634] netlink: 'syz.3.690': attribute type 5 has an invalid length.
[  204.358566][ T6634] loop3: detected capacity change from 0 to 128
[  206.204148][ T6634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  206.214280][ T6634] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  206.258790][ T6634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.690'.
[  207.826842][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  207.885666][ T4282] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  208.321863][ T4264] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 11 /dev/loop2 scanned by udevd (4264)
[  208.476681][ T6666] loop0: detected capacity change from 0 to 8
[  210.864466][ T6698] loop1: detected capacity change from 0 to 8
[  211.953199][ T4288] Bluetooth: hci4: link tx timeout
[  211.958664][ T4288] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.966710][ T4288] Bluetooth: hci4: link tx timeout
[  211.972194][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  213.083090][ T6690] loop3: detected capacity change from 0 to 32768
[  213.189884][ T6690] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11
[  214.004907][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  214.049958][ T4264] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11
[  214.220350][ T6748] loop3: detected capacity change from 0 to 1024
[  214.315285][ T6748] EXT4-fs: Ignoring removed bh option
[  214.840493][ T6756] loop2: detected capacity change from 0 to 8
[  214.907675][ T6748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  214.947296][ T6748] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.721: bg 0: block 280: padding at end of block bitmap is not set
[  214.970174][ T6748] EXT4-fs (loop3): Remounting filesystem read-only
[  215.232702][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  215.309709][ T6772] loop1: detected capacity change from 0 to 8
[  215.682345][ T6788] loop3: detected capacity change from 0 to 512
[  215.772539][ T6788] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  215.854888][ T6788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002]
[  215.872272][ T6788] EXT4-fs (loop3): orphan cleanup on readonly fs
[  215.886229][ T6788] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.734: bg 0: block 15: invalid block bitmap
[  215.945225][ T6788] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  215.958667][ T6788] EXT4-fs (loop3): 1 truncate cleaned up
[  215.974639][ T6788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  216.730565][ T6779] loop2: detected capacity change from 0 to 32768
[  216.744445][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  216.782903][ T6779] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  216.804944][ T6779] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  216.823876][ T6779] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  216.839983][ T6811] loop0: detected capacity change from 0 to 1024
[  216.874793][ T6779] BTRFS info (device loop2): use zstd compression, level 3
[  216.914911][ T6779] BTRFS info (device loop2): using free space tree
[  217.047464][ T6811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  217.725928][   T26] audit: type=1800 audit(1786529283.639:21): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.739" name="file1" dev="overlay" ino=15 res=0 errno=0
[  218.740023][ T6779] BTRFS error (device loop2): open_ctree failed: -22
[  218.961325][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  219.844946][ T6876] netlink: 'syz.0.745': attribute type 29 has an invalid length.
[  219.879154][ T6884] loop2: detected capacity change from 0 to 512
[  219.945633][ T6876] netlink: 'syz.0.745': attribute type 29 has an invalid length.
[  219.980081][ T6885] netlink: 'syz.0.745': attribute type 29 has an invalid length.
[  220.017249][ T6884] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  220.045983][ T6884] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.239967][ T6894] loop0: detected capacity change from 0 to 512
[  220.285578][ T6894] EXT4-fs: Ignoring removed nomblk_io_submit option
[  220.343454][ T6894] EXT4-fs: Ignoring removed mblk_io_submit option
[  220.345978][ T4282] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[  220.432430][ T6900] loop4: detected capacity change from 0 to 8
[  220.636153][ T6894] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  220.834288][ T6894] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  221.026233][ T4282] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[  221.048502][ T6894] EXT4-fs (loop0): 1 truncate cleaned up
[  221.129207][ T6894] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  221.289734][ T6905] binder: BINDER_SET_CONTEXT_MGR already set
[  221.336561][ T6905] binder: 6904:6905 ioctl 4018620d 200000000040 returned -16
[  221.394099][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  221.693204][ T6918] loop1: detected capacity change from 0 to 512
[  221.769825][ T6918] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  221.845622][ T6918] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002]
[  221.899516][ T6918] EXT4-fs (loop1): orphan cleanup on readonly fs
[  221.962210][ T6918] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.762: bg 0: block 15: invalid block bitmap
[  222.066962][ T6918] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  222.212011][ T6918] EXT4-fs (loop1): 1 truncate cleaned up
[  222.253221][ T6918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  223.163521][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  223.275991][ T6912] loop0: detected capacity change from 0 to 32768
[  223.318355][ T6944] netlink: 'syz.1.767': attribute type 29 has an invalid length.
[  223.327019][ T6912] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.760 (6912)
[  223.390452][ T6912] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.422878][ T6912] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  223.446878][ T6944] netlink: 'syz.1.767': attribute type 29 has an invalid length.
[  223.463524][ T6947] netlink: 'syz.1.767': attribute type 29 has an invalid length.
[  223.474651][ T6912] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  223.551429][ T6912] BTRFS info (device loop0): use zstd compression, level 3
[  223.558225][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  223.582242][ T6912] BTRFS info (device loop0): using free space tree
[  223.831376][ T6962] loop3: detected capacity change from 0 to 8
[  224.549345][ T6912] BTRFS error (device loop0): open_ctree failed: -22
[  225.809407][ T6997] loop1: detected capacity change from 0 to 1024
[  225.972469][ T6997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  226.300633][   T26] audit: type=1800 audit(1786529292.249:22): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.775" name="file1" dev="overlay" ino=15 res=0 errno=0
[  226.398032][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  226.408370][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  226.425420][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  226.558404][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  226.566047][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  226.574478][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  226.669181][ T7019] loop0: detected capacity change from 0 to 512
[  226.698406][ T7019] EXT4-fs: Ignoring removed oldalloc option
[  226.715105][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  226.724346][ T7019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  226.792168][ T7019] EXT4-fs (loop0): 1 orphan inode deleted
[  226.834066][ T7019] EXT4-fs (loop0): 1 truncate cleaned up
[  226.860410][ T7019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  226.935479][ T7026] xt_CONNSECMARK: invalid mode: 0
[  227.069330][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  227.225039][ T4433] device hsr_slave_0 left promiscuous mode
[  227.259864][ T4433] device hsr_slave_1 left promiscuous mode
[  227.305422][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.356272][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.405737][ T4433] device bridge_slave_1 left promiscuous mode
[  227.417305][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.445143][ T4433] device bridge_slave_0 left promiscuous mode
[  227.452574][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.686623][ T7033] loop0: detected capacity change from 0 to 32768
[  227.711928][ T7033] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.781 (7033)
[  227.759084][ T7033] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  227.774469][ T7033] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  227.784646][ T7033] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  227.794598][ T7033] BTRFS info (device loop0): use zstd compression, level 3
[  227.802178][ T7033] BTRFS info (device loop0): using free space tree
[  227.985776][ T7033] BTRFS info (device loop0): enabling ssd optimizations
[  228.024447][   T26] audit: type=1800 audit(1786529293.979:23): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="bus" dev="loop0" ino=263 res=0 errno=0
[  228.079236][   T26] audit: type=1800 audit(1786529294.019:24): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="bus" dev="loop0" ino=263 res=0 errno=0
[  228.510200][ T4279] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  228.648591][ T4288] Bluetooth: hci3: command 0x0409 tx timeout
[  228.844953][ T4433] team0 (unregistering): Port device team_slave_1 removed
[  228.938927][ T4433] team0 (unregistering): Port device team_slave_0 removed
[  229.543706][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.661976][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.414557][ T4433] bond0 (unregistering): Released all slaves
[  230.734791][ T4288] Bluetooth: hci3: command 0x041b tx timeout
[  230.822399][ T7087] loop0: detected capacity change from 0 to 512
[  230.855680][ T7087] EXT4-fs: Ignoring removed nomblk_io_submit option
[  230.935716][ T7087] EXT4-fs: Ignoring removed mblk_io_submit option
[  230.940940][ T7012] chnl_net:caif_netlink_parms(): no params data found
[  231.071558][ T7087] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  231.130450][ T7087] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  231.175125][ T7087] EXT4-fs (loop0): 1 truncate cleaned up
[  231.180828][ T7087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  231.304520][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  231.368604][ T7111] Invalid option length (1048488) for dns_resolver key
[  231.445287][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.496731][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.505373][ T7012] device bridge_slave_0 entered promiscuous mode
[  231.515231][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.522506][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.530833][ T7012] device bridge_slave_1 entered promiscuous mode
[  231.589249][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.614015][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.716892][ T7012] team0: Port device team_slave_0 added
[  231.831373][ T7012] team0: Port device team_slave_1 added
[  231.898131][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.905267][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.950637][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.065092][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.150442][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.176528][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.493547][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.805881][ T4288] Bluetooth: hci3: command 0x040f tx timeout
[  233.055303][ T7140] loop3: detected capacity change from 0 to 512
[  233.216689][ T7142] loop0: detected capacity change from 0 to 8
[  233.259900][ T7140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  233.535745][ T7140] EXT4-fs (loop3): 1 truncate cleaned up
[  233.541561][ T7140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  233.587348][ T7012] device hsr_slave_0 entered promiscuous mode
[  233.617346][ T7012] device hsr_slave_1 entered promiscuous mode
[  233.652939][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  233.754916][ T7012] Cannot create hsr debugfs directory
[  233.841199][ T7147] capability: warning: `syz.1.804' uses 32-bit capabilities (legacy support in use)
[  233.869544][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  234.838329][ T7012] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  234.894948][ T4288] Bluetooth: hci3: command 0x0419 tx timeout
[  234.914477][ T7012] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  234.976856][ T7012] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  235.016558][ T7012] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  235.591737][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.903490][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  235.919068][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  236.063728][ T7012] 8021q: adding VLAN 0 to HW filter on device team0
[  236.123938][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  236.417435][ T7189] loop3: detected capacity change from 0 to 8
[  236.914078][ T7190] loop0: detected capacity change from 0 to 128
[  237.069141][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  237.268409][ T7190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  237.278486][ T7190] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  237.310189][    C0] vkms_vblank_simulate: vblank timer overrun
[  237.520028][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.527253][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.874280][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  237.997291][ T7200] loop1: detected capacity change from 0 to 512
[  238.173630][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  238.295095][ T7200] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  238.514034][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.521299][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.568787][ T7200] EXT4-fs (loop1): 1 truncate cleaned up
[  238.574609][ T7200] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  238.593336][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  238.623560][ T7188] netlink: 'syz.0.813': attribute type 5 has an invalid length.
[  238.648971][ T7190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.813'.
[  238.856330][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  238.888284][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  238.916179][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  238.986357][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  239.032039][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  239.033227][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  239.050675][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  239.074114][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  239.083843][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  239.105439][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.152914][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.521993][ T7217] loop4: detected capacity change from 0 to 128
[  239.714805][ T7217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  239.724654][ T7217] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  241.199581][ T7215] netlink: 'syz.4.820': attribute type 5 has an invalid length.
[  241.288624][ T7012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  241.315456][ T7012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  241.336072][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  241.360193][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  241.391628][ T7217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.820'.
[  241.411969][ T7233] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  241.773752][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  241.779967][ T7238] netlink: 'syz.3.825': attribute type 29 has an invalid length.
[  241.845648][ T7238] netlink: 'syz.3.825': attribute type 29 has an invalid length.
[  241.890673][ T7242] netlink: 'syz.3.825': attribute type 29 has an invalid length.
[  241.963502][ T7250] loop4: detected capacity change from 0 to 1024
[  242.042028][ T7253] loop1: detected capacity change from 0 to 256
[  242.061406][ T7250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  242.334405][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'.
[  242.556809][   T26] audit: type=1800 audit(1786529308.509:25): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.827" name="file1" dev="overlay" ino=15 res=0 errno=0
[  242.582601][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  242.596463][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  242.684230][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.027890][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  243.730910][ T7297] netlink: 'syz.1.836': attribute type 5 has an invalid length.
[  243.751233][ T7297] loop1: detected capacity change from 0 to 128
[  243.998062][ T7297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  244.008225][ T7297] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  244.050135][ T7297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.836'.
[  245.183830][ T7301] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  245.644163][ T7312] loop4: detected capacity change from 0 to 128
[  246.193684][ T7312] FAT-fs (loop4): Directory bread(block 414) failed
[  246.201820][ T7312] FAT-fs (loop4): Directory bread(block 415) failed
[  246.208519][ T7312] FAT-fs (loop4): Directory bread(block 416) failed
[  246.215160][ T7312] FAT-fs (loop4): Directory bread(block 417) failed
[  246.221795][ T7312] FAT-fs (loop4): Directory bread(block 418) failed
[  246.228457][ T7312] FAT-fs (loop4): Directory bread(block 419) failed
[  246.235100][ T7312] FAT-fs (loop4): Directory bread(block 420) failed
[  246.241710][ T7312] FAT-fs (loop4): Directory bread(block 421) failed
[  246.425570][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  246.772718][ T7326] loop3: detected capacity change from 0 to 512
[  246.784931][ T7326] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  246.853476][ T7326] EXT4-fs (loop3): 1 truncate cleaned up
[  246.859499][ T7326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  247.436520][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  247.719098][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  247.735983][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  247.794192][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  247.823460][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  247.883080][ T7012] device veth0_vlan entered promiscuous mode
[  247.893076][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  247.920396][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  248.019349][ T7012] device veth1_vlan entered promiscuous mode
[  248.182226][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  248.201945][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  248.231874][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  248.241398][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  248.253080][ T7012] device veth0_macvtap entered promiscuous mode
[  248.285485][ T7012] device veth1_macvtap entered promiscuous mode
[  248.374928][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.400428][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.419472][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.427625][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  248.442834][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  248.520243][ T7360] xt_CONNSECMARK: invalid mode: 0
[  249.050214][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  249.076652][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  249.176451][ T7362] loop4: detected capacity change from 0 to 8
[  249.536831][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.564730][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.584922][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.597944][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.615355][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  249.626945][ T7012] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.683264][ T7012] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.703194][ T7372] loop0: detected capacity change from 0 to 128
[  249.713110][ T7372] FAT-fs (loop0): Directory bread(block 414) failed
[  249.719890][ T7372] FAT-fs (loop0): Directory bread(block 415) failed
[  249.726606][ T7372] FAT-fs (loop0): Directory bread(block 416) failed
[  249.733245][ T7372] FAT-fs (loop0): Directory bread(block 417) failed
[  249.740028][ T7372] FAT-fs (loop0): Directory bread(block 418) failed
[  249.746797][ T7372] FAT-fs (loop0): Directory bread(block 419) failed
[  249.753446][ T7372] FAT-fs (loop0): Directory bread(block 420) failed
[  249.760212][ T7372] FAT-fs (loop0): Directory bread(block 421) failed
[  249.765944][ T7012] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.804175][ T7012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.991945][ T4451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.012880][ T4451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.026535][ T7382] loop3: detected capacity change from 0 to 8
[  250.046269][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  250.111301][ T7382] SQUASHFS error: zlib decompression failed, data probably corrupt
[  250.130576][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.145336][ T7382] SQUASHFS error: Failed to read block 0x9b: -5
[  250.157043][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.174590][ T7382] SQUASHFS error: Unable to read metadata cache entry [99]
[  250.196992][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  250.207413][ T7382] SQUASHFS error: Unable to read inode 0x127
[  250.231736][ T7385] loop4: detected capacity change from 0 to 512
[  250.358875][ T7382] loop3: detected capacity change from 0 to 256
[  250.387288][ T7385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002]
[  250.405680][ T7385] System zones: 1-12
[  250.453385][ T7385] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.859: error while reading EA inode 32 err=-116
[  250.688449][ T7385] EXT4-fs (loop4): Remounting filesystem read-only
[  250.706315][ T7385] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.859: error while reading EA inode 32 err=-116
[  250.885051][ T7385] EXT4-fs (loop4): Remounting filesystem read-only
[  250.914574][ T7385] EXT4-fs (loop4): 1 orphan inode deleted
[  251.085091][ T7385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  251.781129][ T7401] loop3: detected capacity change from 0 to 4096
[  251.798958][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  252.017198][ T7401] EXT4-fs: inline encryption not supported
[  252.117971][ T7401] ext4: Unknown parameter 'smackfsroot'
[  252.146482][ T7410] loop1: detected capacity change from 0 to 512
[  252.275858][ T7410] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  252.283851][ T7410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002]
[  252.313680][ T7417] netlink: 896 bytes leftover after parsing attributes in process `syz.5.867'.
[  252.335889][ T7410] EXT4-fs (loop1): orphan cleanup on readonly fs
[  252.353457][ T7418] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  252.362957][ T7410] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.865: bg 0: block 15: invalid block bitmap
[  252.435085][ T7410] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  252.515722][ T7410] EXT4-fs (loop1): 1 truncate cleaned up
[  252.534822][ T7410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  252.886675][ T7432] netlink: 'syz.5.870': attribute type 5 has an invalid length.
[  252.912295][ T7432] loop5: detected capacity change from 0 to 128
[  253.205415][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  253.318558][ T7432] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  253.329855][ T7432] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  253.375182][ T7432] netlink: 32 bytes leftover after parsing attributes in process `syz.5.870'.
[  253.889964][ T7437] loop3: detected capacity change from 0 to 128
[  253.949301][ T7437] FAT-fs (loop3): Directory bread(block 414) failed
[  253.956037][ T7437] FAT-fs (loop3): Directory bread(block 415) failed
[  253.962839][ T7437] FAT-fs (loop3): Directory bread(block 416) failed
[  253.969524][ T7437] FAT-fs (loop3): Directory bread(block 417) failed
[  253.976496][ T7437] FAT-fs (loop3): Directory bread(block 418) failed
[  253.983168][ T7437] FAT-fs (loop3): Directory bread(block 419) failed
[  253.989818][ T7437] FAT-fs (loop3): Directory bread(block 420) failed
[  253.996493][ T7437] FAT-fs (loop3): Directory bread(block 421) failed
[  254.225710][ T7442] loop1: detected capacity change from 0 to 512
[  254.232873][ T7442] EXT4-fs: Ignoring removed nomblk_io_submit option
[  254.432589][ T7442] EXT4-fs: Ignoring removed mblk_io_submit option
[  254.600731][ T7442] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  254.622214][ T7442] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  254.637576][ T7012] EXT4-fs (loop5): unmounting filesystem.
[  254.711498][ T7442] EXT4-fs (loop1): 1 truncate cleaned up
[  254.750414][ T7442] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  255.581633][ T7461] loop5: detected capacity change from 0 to 1024
[  255.625136][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.631512][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.667777][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  255.749728][ T7467] xt_CONNSECMARK: invalid mode: 0
[  255.835858][ T6012] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  255.992382][ T7461] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  256.071289][ T6012] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  256.207533][ T6012] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  256.345619][ T6012] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  256.439417][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.880'.
[  256.467567][ T7476] loop3: detected capacity change from 0 to 1024
[  256.478273][ T7476] EXT4-fs: inline encryption not supported
[  256.538050][ T6012] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  256.548758][ T6012] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  256.568196][ T6012] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  256.597053][ T7476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  256.722499][ T7476] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.742552][   T26] audit: type=1800 audit(1786529322.689:26): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.876" name="file1" dev="overlay" ino=15 res=0 errno=0
[  257.007728][ T6012] usb 5-1: string descriptor 0 read error: -22
[  257.014206][ T6012] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  257.044050][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.669098][ T7436] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  257.855305][ T7012] EXT4-fs (loop5): unmounting filesystem.
[  258.191356][ T7510] loop0: detected capacity change from 0 to 512
[  258.319102][ T7510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  258.379096][ T7510] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.421426][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  258.626993][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  258.840876][ T7527] loop3: detected capacity change from 0 to 128
[  258.849925][ T7527] FAT-fs (loop3): Directory bread(block 414) failed
[  258.856710][ T7527] FAT-fs (loop3): Directory bread(block 415) failed
[  258.863621][ T7527] FAT-fs (loop3): Directory bread(block 416) failed
[  258.870724][ T7527] FAT-fs (loop3): Directory bread(block 417) failed
[  258.877470][ T7527] FAT-fs (loop3): Directory bread(block 418) failed
[  258.884282][ T7527] FAT-fs (loop3): Directory bread(block 419) failed
[  258.891276][ T7527] FAT-fs (loop3): Directory bread(block 420) failed
[  258.897981][ T7527] FAT-fs (loop3): Directory bread(block 421) failed
[  259.012563][ T4351] usb 5-1: USB disconnect, device number 2
[  260.000090][ T7551] device syzkaller0 entered promiscuous mode
[  260.050510][ T7551] tipc: Started in network mode
[  260.063099][ T7551] tipc: Node identity 5672f92833af, cluster identity 4711
[  260.121328][ T7551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.173377][ T7551] tipc: Resetting bearer <eth:syzkaller0>
[  260.232927][ T7550] tipc: Resetting bearer <eth:syzkaller0>
[  260.293686][ T7550] tipc: Disabling bearer <eth:syzkaller0>
[  260.352961][ T7570] loop5: detected capacity change from 0 to 512
[  260.403874][ T7570] EXT4-fs: Ignoring removed nomblk_io_submit option
[  260.450089][ T7570] EXT4-fs: Ignoring removed mblk_io_submit option
[  260.484007][ T7570] EXT4-fs: journaled quota format not specified
[  260.579353][ T7575] loop4: detected capacity change from 0 to 2048
[  260.620447][ T7575] EXT4-fs: Ignoring removed i_version option
[  260.834778][ T7575] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  260.874949][ T7575] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.931366][ T7586] loop1: detected capacity change from 0 to 128
[  260.995109][ T7586] FAT-fs (loop1): Directory bread(block 414) failed
[  261.001951][ T7586] FAT-fs (loop1): Directory bread(block 415) failed
[  261.008772][ T7586] FAT-fs (loop1): Directory bread(block 416) failed
[  261.015633][ T7586] FAT-fs (loop1): Directory bread(block 417) failed
[  261.022397][ T7586] FAT-fs (loop1): Directory bread(block 418) failed
[  261.029186][ T7586] FAT-fs (loop1): Directory bread(block 419) failed
[  261.036200][ T7586] FAT-fs (loop1): Directory bread(block 420) failed
[  261.043119][ T7586] FAT-fs (loop1): Directory bread(block 421) failed
[  261.103943][ T7575] fs-verity: sha512 using implementation "sha512-avx2"
[  261.261719][ T7598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  261.269647][ T7598] IPv6: NLM_F_CREATE should be set when creating new route
[  261.292873][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  261.404888][ T6012] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  261.601341][ T6012] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  261.617989][ T6012] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  261.648718][ T6012] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  261.670816][ T6012] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  261.713800][ T6012] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  261.733427][ T6012] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  261.780938][ T6012] usb 1-1: string descriptor 0 read error: -22
[  261.792013][ T6012] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  261.809403][ T6012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.009045][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.016671][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.219698][ T7623] loop1: detected capacity change from 0 to 512
[  262.318394][ T7623] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  262.417067][ T7623] EXT4-fs (loop1): 1 truncate cleaned up
[  262.423006][ T7623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  262.879609][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  263.209862][ T4351] usb 1-1: USB disconnect, device number 3
[  263.342547][ T7598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.375628][ T7598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.645020][ T7598] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.653922][ T7598] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.663000][ T7598] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.672247][ T7598] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.759043][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'.
[  263.860173][ T7631] bridge1: port 1(erspan0) entered blocking state
[  263.934981][ T7631] bridge1: port 1(erspan0) entered disabled state
[  263.995694][ T7631] device erspan0 entered promiscuous mode
[  264.430000][ T7644] loop4: detected capacity change from 0 to 128
[  264.520658][ T7644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  264.530899][ T7644] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  264.877765][ T7643] netlink: 'syz.4.914': attribute type 5 has an invalid length.
[  264.949472][ T7644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.914'.
[  266.050058][ T7653] loop1: detected capacity change from 0 to 512
[  266.165722][ T7653] EXT4-fs: inline encryption not supported
[  266.177720][ T7653] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  266.714457][ T7653] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.915: bad orphan inode 15
[  266.814887][ T7653] ext4_test_bit(bit=14, block=5) = 0
[  266.851132][ T7653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  266.953067][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  267.053192][ T7653] EXT4-fs error (device loop1): __ext4_new_inode:1081: comm syz.1.915: reserved inode found cleared - inode=1
[  267.265580][ T7670] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  267.362423][ T7670] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  267.451922][ T7676] loop3: detected capacity change from 0 to 128
[  267.466746][ T7676] FAT-fs (loop3): Directory bread(block 414) failed
[  267.473411][ T7676] FAT-fs (loop3): Directory bread(block 415) failed
[  267.480130][ T7676] FAT-fs (loop3): Directory bread(block 416) failed
[  267.486876][ T7676] FAT-fs (loop3): Directory bread(block 417) failed
[  267.493675][ T7676] FAT-fs (loop3): Directory bread(block 418) failed
[  267.500464][ T7676] FAT-fs (loop3): Directory bread(block 419) failed
[  267.507195][ T7676] FAT-fs (loop3): Directory bread(block 420) failed
[  267.513914][ T7676] FAT-fs (loop3): Directory bread(block 421) failed
[  267.551579][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  267.797542][ T7690] loop1: detected capacity change from 0 to 256
[  268.134057][ T7696] device syzkaller0 entered promiscuous mode
[  268.950368][ T7717] loop0: detected capacity change from 0 to 128
[  269.156708][ T7717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  269.166722][ T7717] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  269.946233][ T7726] loop4: detected capacity change from 0 to 512
[  270.034547][ T7726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  270.101821][ T7726] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.520779][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  272.378293][ T7716] netlink: 'syz.0.930': attribute type 5 has an invalid length.
[  272.386153][ T7717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.930'.
[  272.491309][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  275.012037][ T7778] loop3: detected capacity change from 0 to 512
[  275.067402][ T7781] loop4: detected capacity change from 0 to 1024
[  275.085829][ T7778] EXT4-fs: Ignoring removed nomblk_io_submit option
[  275.102776][ T7778] EXT4-fs: Ignoring removed mblk_io_submit option
[  275.136511][ T7778] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  275.155912][ T7781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  275.171431][ T7778] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  275.186002][ T7778] EXT4-fs (loop3): 1 truncate cleaned up
[  275.191813][ T7778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  275.231274][   T26] audit: type=1800 audit(1786529341.179:27): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.947" name="file1" dev="overlay" ino=15 res=0 errno=0
[  275.404497][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  275.419777][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  275.498115][ T7794] loop0: detected capacity change from 0 to 128
[  275.590898][ T7794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  275.623825][ T7791] device syzkaller0 entered promiscuous mode
[  275.625114][ T7794] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  276.090743][ T7810] loop5: detected capacity change from 0 to 8
[  276.440972][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  277.134414][ T7829] loop0: detected capacity change from 0 to 4096
[  277.174742][ T7829] EXT4-fs: inline encryption not supported
[  277.206180][ T7829] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  277.235616][ T7829] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  277.276314][ T7829] System zones: 0-5
[  277.297299][ T7829] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  277.423827][ T7829] 
[  277.426217][ T7829] ======================================================
[  277.433330][ T7829] WARNING: possible circular locking dependency detected
[  277.440384][ T7829] syzkaller #0 Not tainted
[  277.444816][ T7829] ------------------------------------------------------
[  277.451841][ T7829] syz.0.959/7829 is trying to acquire lock:
[  277.457739][ T7829] ffff8880753d2428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  277.466665][ T7829] 
[  277.466665][ T7829] but task is already holding lock:
[  277.474035][ T7829] ffff88807304b4b0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[  277.483550][ T7829] 
[  277.483550][ T7829] which lock already depends on the new lock.
[  277.483550][ T7829] 
[  277.493972][ T7829] 
[  277.493972][ T7829] the existing dependency chain (in reverse order) is:
[  277.502998][ T7829] 
[  277.502998][ T7829] -> #2 (&ei->i_data_sem/2){++++}-{3:3}:
[  277.510846][ T7829]        down_write+0x36/0x60
[  277.515540][ T7829]        ext4_map_blocks+0x914/0x1a90
[  277.520928][ T7829]        ext4_getblk+0x1c5/0x720
[  277.525878][ T7829]        ext4_bread+0x26/0x170
[  277.530665][ T7829]        ext4_quota_write+0x237/0x580
[  277.536059][ T7829]        find_free_dqentry+0x68c/0xc30
[  277.541534][ T7829]        do_insert_tree+0x717/0x1060
[  277.546837][ T7829]        do_insert_tree+0x9f5/0x1060
[  277.552149][ T7829]        do_insert_tree+0x9f5/0x1060
[  277.557453][ T7829]        do_insert_tree+0x9f5/0x1060
[  277.562750][ T7829]        qtree_write_dquot+0x49b/0x5d0
[  277.568228][ T7829]        v2_write_dquot+0x108/0x190
[  277.573461][ T7829]        dquot_acquire+0x2d5/0x520
[  277.578753][ T7829]        ext4_acquire_dquot+0x2e3/0x4a0
[  277.584311][ T7829]        dqget+0x713/0xbb0
[  277.588756][ T7829]        __dquot_initialize+0x3a9/0xd00
[  277.594348][ T7829]        ext4_process_orphan+0x4c/0x2e0
[  277.599919][ T7829]        ext4_orphan_cleanup+0xc32/0x1470
[  277.605642][ T7829]        ext4_fill_super+0x6f0c/0x78f0
[  277.611094][ T7829]        get_tree_bdev+0x3e6/0x610
[  277.616202][ T7829]        vfs_get_tree+0x88/0x270
[  277.621132][ T7829]        do_new_mount+0x247/0xa40
[  277.626150][ T7829]        __se_sys_mount+0x2e3/0x3d0
[  277.631350][ T7829]        do_syscall_64+0x4c/0xa0
[  277.636387][ T7829]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  277.642811][ T7829] 
[  277.642811][ T7829] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  277.651072][ T7829]        down_read+0x42/0x2d0
[  277.655777][ T7829]        v2_read_dquot+0x4a/0x110
[  277.660838][ T7829]        dquot_acquire+0x152/0x520
[  277.666287][ T7829]        ext4_acquire_dquot+0x2e3/0x4a0
[  277.671869][ T7829]        dqget+0x713/0xbb0
[  277.676311][ T7829]        __dquot_initialize+0x3a9/0xd00
[  277.681878][ T7829]        ext4_symlink+0x1c6/0x940
[  277.686929][ T7829]        vfs_symlink+0x245/0x3d0
[  277.691887][ T7829]        do_symlinkat+0x1b6/0x400
[  277.696939][ T7829]        __x64_sys_symlinkat+0x95/0xa0
[  277.702422][ T7829]        do_syscall_64+0x4c/0xa0
[  277.707384][ T7829]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  277.713834][ T7829] 
[  277.713834][ T7829] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  277.721500][ T7829]        __lock_acquire+0x2d18/0x7c40
[  277.726971][ T7829]        lock_acquire+0x1bb/0x4a0
[  277.732020][ T7829]        __mutex_lock+0x12d/0xae0
[  277.737077][ T7829]        dquot_commit+0x5a/0x410
[  277.742027][ T7829]        ext4_write_dquot+0x1f0/0x360
[  277.747422][ T7829]        mark_all_dquot_dirty+0xf9/0x400
[  277.753428][ T7829]        __dquot_alloc_space+0x5f6/0xe50
[  277.759080][ T7829]        ext4_mb_new_blocks+0xf55/0x44d0
[  277.764738][ T7829]        ext4_ext_map_blocks+0x18d1/0x6640
[  277.770562][ T7829]        ext4_map_blocks+0x9d7/0x1a90
[  277.775955][ T7829]        _ext4_get_block+0x1e7/0x540
[  277.781256][ T7829]        ext4_get_block_unwritten+0x2a/0x100
[  277.787257][ T7829]        ext4_block_write_begin+0x63b/0x12f0
[  277.793259][ T7829]        ext4_write_begin+0x623/0xf40
[  277.798649][ T7829]        ext4_da_write_begin+0x408/0x920
[  277.804301][ T7829]        pagecache_write+0x20a/0x380
[  277.809599][ T7829]        ext4_end_enable_verity+0x1b6/0x590
[  277.815507][ T7829]        enable_verity+0x19e3/0x1f70
[  277.820817][ T7829]        fsverity_ioctl_enable+0x40c/0x4b0
[  277.826654][ T7829]        ext4_ioctl+0x1aab/0x4120
[  277.831697][ T7829]        __se_sys_ioctl+0xfa/0x170
[  277.836840][ T7829]        do_syscall_64+0x4c/0xa0
[  277.841798][ T7829]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  277.848284][ T7829] 
[  277.848284][ T7829] other info that might help us debug this:
[  277.848284][ T7829] 
[  277.858523][ T7829] Chain exists of:
[  277.858523][ T7829]   &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2
[  277.858523][ T7829] 
[  277.872194][ T7829]  Possible unsafe locking scenario:
[  277.872194][ T7829] 
[  277.874558][ T7844] loop5: detected capacity change from 0 to 1024
[  277.879639][ T7829]        CPU0                    CPU1
[  277.879648][ T7829]        ----                    ----
[  277.879652][ T7829]   lock(&ei->i_data_sem/2);
[  277.879671][ T7829]                                lock(&s->s_dquot.dqio_sem);
[  277.879681][ T7829]                                lock(&ei->i_data_sem/2);
[  277.879694][ T7829]   lock(&dquot->dq_lock);
[  277.879704][ T7829] 
[  277.879704][ T7829]  *** DEADLOCK ***
[  277.879704][ T7829] 
[  277.879707][ T7829] 4 locks held by syz.0.959/7829:
[  277.879715][ T7829]  #0: ffff88814c13c460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200
[  277.879760][ T7829]  #1: ffff88807304b628 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: enable_verity+0x19a1/0x1f70
[  277.953695][ T7829]  #2: ffff88807304b4b0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[  277.963611][ T7829]  #3: ffffffff8cc750a8 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x16e/0xe50
[  277.973173][ T7829] 
[  277.973173][ T7829] stack backtrace:
[  277.979057][ T7829] CPU: 1 PID: 7829 Comm: syz.0.959 Not tainted syzkaller #0
[  277.986329][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  277.996373][ T7829] Call Trace:
[  277.999644][ T7829]  <TASK>
[  278.002565][ T7829]  dump_stack_lvl+0x188/0x24e
[  278.007251][ T7829]  ? load_image+0x410/0x410
[  278.011744][ T7829]  ? show_regs_print_info+0x12/0x12
[  278.016936][ T7829]  ? print_circular_bug+0x12b/0x1a0
[  278.022129][ T7829]  check_noncircular+0x296/0x330
[  278.027070][ T7829]  ? add_chain_block+0x9b0/0x9b0
[  278.032000][ T7829]  ? lockdep_lock+0xf1/0x1f0
[  278.036588][ T7829]  ? _find_first_zero_bit+0xd2/0x100
[  278.041867][ T7829]  __lock_acquire+0x2d18/0x7c40
[  278.046720][ T7829]  ? verify_lock_unused+0x140/0x140
[  278.052011][ T7829]  ? mark_lock+0x94/0x320
[  278.056339][ T7829]  lock_acquire+0x1bb/0x4a0
[  278.060857][ T7829]  ? dquot_commit+0x5a/0x410
[  278.065458][ T7829]  ? finish_task_switch+0x262/0x8e0
[  278.070647][ T7829]  ? __might_sleep+0xd0/0xd0
[  278.075225][ T7829]  ? read_lock_is_recursive+0x10/0x10
[  278.080595][ T7829]  __mutex_lock+0x12d/0xae0
[  278.085092][ T7829]  ? dquot_commit+0x5a/0x410
[  278.089676][ T7829]  ? __might_sleep+0xd0/0xd0
[  278.094259][ T7829]  ? dquot_commit+0x5a/0x410
[  278.098840][ T7829]  ? __sched_text_start+0x8/0x8
[  278.103692][ T7829]  ? mutex_lock_nested+0x10/0x10
[  278.108625][ T7829]  ? ext4_journal_check_start+0x17d/0x240
[  278.114341][ T7829]  dquot_commit+0x5a/0x410
[  278.118751][ T7829]  ext4_write_dquot+0x1f0/0x360
[  278.123596][ T7829]  mark_all_dquot_dirty+0xf9/0x400
[  278.128963][ T7829]  __dquot_alloc_space+0x5f6/0xe50
[  278.134068][ T7829]  ? __dquot_alloc_space+0x16e/0xe50
[  278.139348][ T7829]  ext4_mb_new_blocks+0xf55/0x44d0
[  278.144454][ T7829]  ? ext4_find_extent+0x372/0xde0
[  278.149474][ T7829]  ? rcu_is_watching+0x11/0xa0
[  278.154231][ T7829]  ? memset+0x1e/0x40
[  278.158203][ T7829]  ? ext4_mb_pa_callback+0xd0/0xd0
[  278.163308][ T7829]  ? ext4_ext_find_goal+0xed/0x1d0
[  278.168411][ T7829]  ext4_ext_map_blocks+0x18d1/0x6640
[  278.173693][ T7829]  ? ext4_ext_release+0x10/0x10
[  278.178536][ T7829]  ? rwsem_write_trylock+0x135/0x1c0
[  278.183820][ T7829]  ext4_map_blocks+0x9d7/0x1a90
[  278.188662][ T7829]  ? ext4_issue_zeroout+0x250/0x250
[  278.193858][ T7829]  ? verify_lock_unused+0x140/0x140
[  278.199057][ T7829]  _ext4_get_block+0x1e7/0x540
[  278.203809][ T7829]  ? ext4_get_block+0x40/0x40
[  278.208479][ T7829]  ext4_get_block_unwritten+0x2a/0x100
[  278.213933][ T7829]  ext4_block_write_begin+0x63b/0x12f0
[  278.219390][ T7829]  ? ext4_write_begin+0x410/0xf40
[  278.224406][ T7829]  ? _ext4_get_block+0x540/0x540
[  278.229359][ T7829]  ? ext4_print_free_blocks+0x380/0x380
[  278.234898][ T7829]  ? folio_mapping+0x1b9/0x4f0
[  278.239672][ T7829]  ? ext4_inode_journal_mode+0x189/0x460
[  278.245302][ T7829]  ext4_write_begin+0x623/0xf40
[  278.250142][ T7829]  ? fsverity_ioctl_enable+0x40c/0x4b0
[  278.255602][ T7829]  ? ext4_readahead+0x110/0x110
[  278.260456][ T7829]  ? __lock_acquire+0x1465/0x7c40
[  278.265473][ T7829]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  278.271451][ T7829]  ext4_da_write_begin+0x408/0x920
[  278.276560][ T7829]  ? lockdep_hardirqs_on+0x94/0x140
[  278.281756][ T7829]  ? ext4_dirty_folio+0x320/0x320
[  278.286781][ T7829]  ? slab_free_freelist_hook+0x133/0x1b0
[  278.292408][ T7829]  pagecache_write+0x20a/0x380
[  278.297252][ T7829]  ? ext4_write_merkle_tree_block+0xe0/0xe0
[  278.303148][ T7829]  ext4_end_enable_verity+0x1b6/0x590
[  278.308687][ T7829]  ? ext4_begin_enable_verity+0x330/0x330
[  278.314404][ T7829]  ? rwsem_write_trylock+0x135/0x1c0
[  278.319709][ T7829]  enable_verity+0x19e3/0x1f70
[  278.324472][ T7829]  ? verify_lock_unused+0x140/0x140
[  278.329675][ T7829]  ? deny_write_access+0xe0/0xe0
[  278.334640][ T7829]  ? rcu_read_lock_any_held+0xb0/0x130
[  278.340124][ T7829]  fsverity_ioctl_enable+0x40c/0x4b0
[  278.345431][ T7829]  ? fscrypt_zeroout_range+0x7f0/0x7f0
[  278.350899][ T7829]  ? kasan_set_track+0x4b/0x70
[  278.356005][ T7829]  ? kasan_save_free_info+0x27/0x40
[  278.361195][ T7829]  ? ____kasan_slab_free+0x126/0x1f0
[  278.366568][ T7829]  ? slab_free_freelist_hook+0x133/0x1b0
[  278.372196][ T7829]  ? tomoyo_path_number_perm+0x4fb/0x650
[  278.377819][ T7829]  ? security_file_ioctl+0x6c/0xa0
[  278.382949][ T7829]  ? __se_sys_ioctl+0x48/0x170
[  278.387708][ T7829]  ? do_syscall_64+0x4c/0xa0
[  278.392295][ T7829]  ext4_ioctl+0x1aab/0x4120
[  278.396800][ T7829]  ? ext4_fileattr_set+0x1770/0x1770
[  278.402082][ T7829]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  278.408057][ T7829]  ? do_vfs_ioctl+0x1be3/0x1d40
[  278.412903][ T7829]  ? __ia32_compat_sys_ioctl+0x850/0x850
[  278.418564][ T7829]  ? tomoyo_path_number_perm+0x205/0x650
[  278.424191][ T7829]  ? __lock_acquire+0x7c40/0x7c40
[  278.429209][ T7829]  ? slab_free_freelist_hook+0x133/0x1b0
[  278.434849][ T7829]  ? tomoyo_path_number_perm+0x4fb/0x650
[  278.440472][ T7829]  ? __kmem_cache_free+0xb6/0x200
[  278.445492][ T7829]  ? tomoyo_path_number_perm+0x205/0x650
[  278.451142][ T7829]  ? tomoyo_path_number_perm+0x5a4/0x650
[  278.456769][ T7829]  ? tomoyo_path_number_perm+0x205/0x650
[  278.462396][ T7829]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  278.467883][ T7829]  ? __fget_files+0x28/0x460
[  278.472483][ T7829]  ? bpf_lsm_file_ioctl+0x5/0x10
[  278.477423][ T7829]  ? security_file_ioctl+0x7c/0xa0
[  278.482536][ T7829]  ? ext4_fileattr_set+0x1770/0x1770
[  278.487816][ T7829]  __se_sys_ioctl+0xfa/0x170
[  278.492404][ T7829]  do_syscall_64+0x4c/0xa0
[  278.496819][ T7829]  ? clear_bhb_loop+0x60/0xb0
[  278.501489][ T7829]  ? clear_bhb_loop+0x60/0xb0
[  278.506166][ T7829]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.512058][ T7829] RIP: 0033:0x7f045359e0d9
[  278.516473][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.536076][ T7829] RSP: 002b:00007f04543a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  278.544490][ T7829] RAX: ffffffffffffffda RBX: 00007f0453825fa0 RCX: 00007f045359e0d9
[  278.552454][ T7829] RDX: 0000200000000a80 RSI: 0000000040806685 RDI: 0000000000000000
[  278.560429][ T7829] RBP: 00007f0453635024 R08: 0000000000000000 R09: 0000000000000000
[  278.568434][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.576393][ T7829] R13: 00007f0453826038 R14: 00007f0453825fa0 R15: 00007ffc94c396c8
[  278.584364][ T7829]  </TASK>
[  278.623954][ T7844] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  278.667887][ T4279] EXT4-fs (loop0): unmounting filesystem.
[  278.676973][   T26] audit: type=1800 audit(1786529344.629:28): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.962" name="file1" dev="overlay" ino=15 res=0 errno=0
[  278.764534][ T7012] EXT4-fs (loop5): unmounting filesystem.
[  280.081800][ T7822] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media