last executing test programs: 20m24.434001391s ago: executing program 0 (id=8347): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 20m21.983769817s ago: executing program 0 (id=8373): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c01000010000100000000000000000064010102000000000000000000000000200100000000000000000000000000024e24000000000000000000001f000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac060000000000000000000000000000000000006c000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000400000000008000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000100000003000000fcffffff00000000033500000a0000100000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000000000000000000080016"], 0x14c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000200)={0xafbcb7ab, {{0x2, 0x4e22, @empty}}}, 0x88) write$tcp_mem(r3, 0x0, 0x0) write$input_event(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x14}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r8, 0x0, 0x0) 20m21.028972743s ago: executing program 0 (id=8382): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x16, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 20m20.887372397s ago: executing program 0 (id=8385): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40c0080) syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0xc56, &(0x7f0000002680)="$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") lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x7) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) truncate(&(0x7f00000001c0)='./file1\x00', 0x200) 20m20.339313942s ago: executing program 0 (id=8395): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x88101, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 20m19.888072717s ago: executing program 0 (id=8403): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 20m19.776772488s ago: executing program 32 (id=8403): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 9m49.210642284s ago: executing program 2 (id=13660): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000940)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8884) 9m49.095690515s ago: executing program 2 (id=13662): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x1, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) 9m45.802822496s ago: executing program 2 (id=13671): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac6"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 9m45.180258268s ago: executing program 2 (id=13673): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 9m44.979780698s ago: executing program 2 (id=13675): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 9m44.95629439s ago: executing program 2 (id=13677): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000ff0100005c0000", @ANYBLOB="0400"/14], 0x50) 9m29.893748131s ago: executing program 33 (id=13677): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000ff0100005c0000", @ANYBLOB="0400"/14], 0x50) 11.592995972s ago: executing program 4 (id=17762): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) write(r3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000103010100"/20], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 11.206683322s ago: executing program 4 (id=17766): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = memfd_create(&(0x7f00000002c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\xb4}\x00\x00\x05~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf\x1f~\xf2\xad\xe3\xa9\xea\xd0ua\b\x0f\xf2\xe4uM\xeb\xc4\x88\x17\xa6\xaf\xc2-\xee\x14\x96\x1d\xe1\xbc\x93\fEx\x19\x9eP\x05y\xe6<\xf2\xac\xc1T\x87;\x18\x19kg\r\xf0\xbfr\x0fO\xd8>\xfb\xfe\x0f\xf8\x0f\xf7D3t\xe3\xc0\xf2\xc9\xc8\x1d#N\xfb\xb6\x03\xd2\xfd\xb3\x85\xb5\xd3\x06b\x90\xd6\xb1E^i\xfb\x02\x00\x00', 0x1) r5 = dup(r4) r6 = fanotify_init(0x2, 0x40000) fanotify_mark(r6, 0x1, 0x8000031, r5, 0x0) 11.086200473s ago: executing program 4 (id=17769): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 10.962191976s ago: executing program 4 (id=17772): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) 10.839105508s ago: executing program 4 (id=17774): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='n']) 7.811827163s ago: executing program 4 (id=17809): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0xd9402, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYRESDEC, @ANYBLOB="98914af66851f17e7b955f215be7c6b5b40ae8", @ANYRESHEX=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f0000000200)=""/146, 0x2e, 0x92, 0x1}, 0x28) 5.107438126s ago: executing program 1 (id=17834): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) 4.952043221s ago: executing program 1 (id=17836): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 4.905968176s ago: executing program 1 (id=17838): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000003700)=""/213, 0xd5}], 0x3}, 0x9}], 0x2, 0x40012160, 0x0) 2.079004821s ago: executing program 3 (id=17870): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_clone(0x1102100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x1000000000000c8, 0x0, 0x2, 0x8, 0x0, 0xfffffffffffffffc, 0x5166}) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x2100042, 0x0, 0x1, 0x0, 0x0) 1.59564045s ago: executing program 1 (id=17874): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="57c87f", 0x3}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@init_itable_val}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 1.473050822s ago: executing program 3 (id=17878): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) clock_gettime(0x0, &(0x7f00000000c0)) 1.151996034s ago: executing program 3 (id=17882): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.09749584s ago: executing program 3 (id=17884): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000003700)=""/213, 0xd5}], 0x3}, 0x9}], 0x2, 0x40012160, 0x0) 967.917153ms ago: executing program 3 (id=17886): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 831.700136ms ago: executing program 3 (id=17888): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x1, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x1a, 0x2, 0x53, 0x8, 0x2040, 0xc61a, 0xf496, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x8, 0x10, 0xde, [{{0x9, 0x4, 0xec, 0x0, 0x0, 0x10, 0x9, 0xe0, 0x7d}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 666.849793ms ago: executing program 6 (id=17890): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) socket(0x2f, 0x800, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a0002", @ANYRES32=r7, @ANYRES64=r3], 0x94}}, 0x20008841) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x8201, 0x4) 579.231552ms ago: executing program 5 (id=17891): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200ff0200000000000000000000000000010800080002"], 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 551.530344ms ago: executing program 6 (id=17892): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) clock_gettime(0x0, &(0x7f00000000c0)) 497.07387ms ago: executing program 5 (id=17893): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES64], 0x118) 433.079237ms ago: executing program 6 (id=17894): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='n']) 432.374977ms ago: executing program 5 (id=17895): rt_sigaction(0xd, &(0x7f0000000100)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000005, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) 366.315043ms ago: executing program 6 (id=17896): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 287.428271ms ago: executing program 5 (id=17897): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x2010004, &(0x7f0000000300)={[{@name={'name', 0x3d, './binderfs/binder0\x00'}}]}) 274.891272ms ago: executing program 1 (id=17898): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x2, 0x0) dup2(r4, 0xffffffffffffffff) 196.069281ms ago: executing program 6 (id=17899): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000000b40)=""/161, 0xa1}, {&(0x7f0000000680)=""/111, 0x6f}], 0x5}, 0x9}], 0x1, 0x40012160, 0x0) 167.649303ms ago: executing program 5 (id=17900): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = memfd_create(0x0, 0x1) r5 = dup(r4) r6 = fanotify_init(0x2, 0x40000) fanotify_mark(r6, 0x1, 0x8000031, r5, 0x0) 135.609426ms ago: executing program 1 (id=17901): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20008cd, &(0x7f0000000200)={[{@grpid}, {@resuid}, {@nodelalloc}, {@dioread_nolock}, {@quota}]}, 0x0, 0x557, &(0x7f0000000800)="$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") 111.789489ms ago: executing program 6 (id=17902): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005b9000/0x400000)=nil) 0s ago: executing program 5 (id=17903): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="57c8", 0x2}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0), 0x0, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@init_itable_val}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") kernel console output (not intermixed with test programs): 07.377799][ T9228] netlink: 2088 bytes leftover after parsing attributes in process `syz.5.15715'. [ 1907.882896][ T9230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15708'. [ 1907.902230][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15708'. [ 1907.922703][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15708'. [ 1907.940741][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15708'. [ 1908.023491][ T3622] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1908.150932][ T9237] netlink: 116 bytes leftover after parsing attributes in process `syz.6.15716'. [ 1908.293635][ T3622] usb 4-1: Using ep0 maxpacket: 16 [ 1908.423736][ T3622] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1908.435414][ T3622] usb 4-1: config 0 has no interface number 0 [ 1908.441543][ T3622] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1908.643637][ T3622] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1908.665942][ T3622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.685671][ T3622] usb 4-1: Product: syz [ 1908.694421][ T3622] usb 4-1: Manufacturer: syz [ 1908.711526][ T3622] usb 4-1: SerialNumber: syz [ 1908.742449][ T3622] usb 4-1: config 0 descriptor?? [ 1908.755628][ T9261] loop1: detected capacity change from 0 to 256 [ 1908.795210][ T3622] CoreChips: probe of 4-1:0.41 failed with error -22 [ 1909.039075][ T3622] usb 4-1: USB disconnect, device number 25 [ 1909.094338][ T9274] loop4: detected capacity change from 0 to 512 [ 1909.413018][ T9283] loop6: detected capacity change from 0 to 1024 [ 1909.552627][ T9274] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1909.577622][ T9283] EXT4-fs (loop6): Ignoring removed orlov option [ 1909.766672][ T9283] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1910.085415][ T9274] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1910.941042][ T26] audit: type=1326 audit(1763419836.207:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="syz.3.15748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f322bef96c9 code=0x0 [ 1911.593523][ T4499] Bluetooth: hci2: command 0x0406 tx timeout [ 1911.746601][ T9326] loop4: detected capacity change from 0 to 1024 [ 1911.900734][ T9326] EXT4-fs (loop4): Ignoring removed orlov option [ 1912.156994][ T9326] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1912.524686][ T9335] cgroup: Invalid name [ 1913.602310][ T9362] cgroup: Invalid name [ 1914.320913][ T9385] loop4: detected capacity change from 0 to 1024 [ 1914.492334][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.502053][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.632667][ T9385] EXT4-fs (loop4): Ignoring removed orlov option [ 1914.822999][ T9385] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1916.142727][ T9394] cgroup: Invalid name [ 1916.516529][ T9408] loop6: detected capacity change from 0 to 256 [ 1916.590790][ T9408] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1916.654227][ T26] audit: type=1800 audit(1763419841.927:86): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15793" name="file1" dev="loop6" ino=1048773 res=0 errno=0 [ 1916.742031][ T26] audit: type=1800 audit(1763419841.957:87): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.15793" name="file1" dev="loop6" ino=1048773 res=0 errno=0 [ 1917.017499][ T9418] cgroup: Invalid name [ 1917.292260][ T9426] loop6: detected capacity change from 0 to 512 [ 1917.431507][ T9426] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1917.448955][ T9426] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1917.757156][ T9436] loop6: detected capacity change from 0 to 256 [ 1917.874044][ T9436] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1917.917803][ T26] audit: type=1800 audit(1763419843.187:88): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15807" name="file1" dev="loop6" ino=1048774 res=0 errno=0 [ 1918.051850][ T26] audit: type=1800 audit(1763419843.227:89): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.15807" name="file1" dev="loop6" ino=1048774 res=0 errno=0 [ 1918.420938][ T9452] cgroup: Invalid name [ 1919.725845][ T9476] loop5: detected capacity change from 0 to 1024 [ 1919.826263][ T9476] EXT4-fs (loop5): Ignoring removed orlov option [ 1920.060995][ T9476] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1923.010352][ T9500] loop5: detected capacity change from 0 to 1024 [ 1923.061571][ T9501] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.15827'. [ 1923.111737][ T9500] EXT4-fs (loop5): Ignoring removed orlov option [ 1923.278883][ T9500] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1923.973718][ T9508] loop1: detected capacity change from 0 to 256 [ 1924.290882][ T9514] loop1: detected capacity change from 0 to 512 [ 1924.357082][ T9514] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1924.408663][ T9514] EXT4-fs (loop1): inline encryption not supported [ 1924.446674][ T9514] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1924.496734][ T9514] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1924.532558][ T9514] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1924.596355][ T9514] EXT4-fs (loop1): 1 truncate cleaned up [ 1924.602044][ T9514] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1924.733616][ T4499] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1924.973725][ T4499] usb 5-1: Using ep0 maxpacket: 16 [ 1925.041823][ T9514] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1925.093662][ T4499] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1925.101778][ T4499] usb 5-1: config 0 has no interface number 0 [ 1925.139717][ T4499] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1925.323825][ T4499] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1925.333868][ T4499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.341878][ T4499] usb 5-1: Product: syz [ 1925.377032][ T4499] usb 5-1: Manufacturer: syz [ 1925.381677][ T4499] usb 5-1: SerialNumber: syz [ 1925.420191][ T4499] usb 5-1: config 0 descriptor?? [ 1925.474543][ T4499] CoreChips: probe of 5-1:0.41 failed with error -22 [ 1925.677515][ T4499] usb 5-1: USB disconnect, device number 20 [ 1926.296822][ T9567] loop4: detected capacity change from 0 to 512 [ 1926.424447][ T9567] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1926.439833][ T9567] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1927.069283][ T9590] loop4: detected capacity change from 0 to 512 [ 1927.248163][ T9590] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1927.321564][ T9590] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1927.802849][ T9599] loop4: detected capacity change from 0 to 512 [ 1927.920919][ T9599] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1928.003751][ T9599] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1928.689679][ T9615] loop4: detected capacity change from 0 to 256 [ 1929.470723][ T9634] loop4: detected capacity change from 0 to 512 [ 1929.595813][ T9634] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1929.728064][ T9634] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1930.290689][ T9644] loop4: detected capacity change from 0 to 1024 [ 1930.324769][ T9644] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1930.352832][ T9644] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1930.414329][ T9644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1930.443071][ T9644] System zones: 0-1, 3-36 [ 1930.515406][ T9644] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1931.257932][ T9662] loop4: detected capacity change from 0 to 512 [ 1931.415884][ T9662] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1931.503817][ T9662] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1934.227122][ T9711] loop6: detected capacity change from 0 to 1024 [ 1934.369255][ T9711] EXT4-fs (loop6): Ignoring removed orlov option [ 1934.579070][ T9711] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1935.968421][ T9729] loop3: detected capacity change from 0 to 512 [ 1936.090091][ T9729] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1936.130186][ T9729] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1936.706360][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15931'. [ 1936.861797][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15932'. [ 1937.431115][ T9776] loop5: detected capacity change from 0 to 512 [ 1937.458925][ T9778] loop6: detected capacity change from 0 to 512 [ 1937.561984][ T9776] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1937.650385][ T9778] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1937.693050][ T9776] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1937.730756][ T9778] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1938.029250][ T9790] loop6: detected capacity change from 0 to 128 [ 1938.072311][ T9786] loop5: detected capacity change from 0 to 1024 [ 1938.116331][ T9790] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1938.160727][ T9786] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1938.193578][ T9790] ext4 filesystem being mounted at /500/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1938.224341][ T9786] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1938.314897][ T9790] EXT4-fs (loop6): shut down requested (2) [ 1938.336155][ T9790] fscrypt (loop6, inode 12): Error -5 getting encryption context [ 1938.782057][ T9786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1938.878280][ T9786] System zones: 0-1, 3-36 [ 1939.214870][ T9786] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1939.574783][ T9812] loop6: detected capacity change from 0 to 256 [ 1939.698223][ T9819] loop5: detected capacity change from 0 to 512 [ 1939.853634][ T9819] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1939.943588][ T9819] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1940.828454][ T9843] device syzkaller0 entered promiscuous mode [ 1941.028666][ T9852] cgroup: Invalid name [ 1941.568516][ T9864] netlink: 116 bytes leftover after parsing attributes in process `syz.5.15979'. [ 1942.163508][T19368] Bluetooth: hci3: command 0x0406 tx timeout [ 1943.625926][ T9909] netlink: 2088 bytes leftover after parsing attributes in process `syz.6.16000'. [ 1943.757839][ T9914] loop6: detected capacity change from 0 to 1024 [ 1943.870937][ T9914] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 1943.891822][ T9914] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1943.924281][ T9914] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1943.959404][ T9914] System zones: 0-1, 3-36 [ 1944.047308][ T9914] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1945.761043][ T9951] loop6: detected capacity change from 0 to 1024 [ 1945.914899][ T9951] EXT4-fs (loop6): Ignoring removed orlov option [ 1946.086774][ T9951] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1946.466651][ T9955] cgroup: Invalid name [ 1948.723290][ T9991] loop1: detected capacity change from 0 to 512 [ 1948.793545][ T9991] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1948.810994][ T9991] EXT4-fs (loop1): inline encryption not supported [ 1948.831305][ T9991] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1948.877882][ T9991] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1948.913488][ T9991] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1948.989538][ T9991] EXT4-fs (loop1): 1 truncate cleaned up [ 1949.000238][ T9991] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1949.291474][T10004] cgroup: Invalid name [ 1949.312061][ T9991] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1949.766032][T10022] loop1: detected capacity change from 0 to 1024 [ 1949.801393][T10022] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1949.823512][T10022] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1949.894213][T10022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1949.902621][T10022] System zones: 0-1, 3-36 [ 1949.955702][T10022] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1957.676301][T10107] cgroup: Invalid name [ 1959.178192][T10133] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.16090'. [ 1959.404349][T10137] loop4: detected capacity change from 0 to 1024 [ 1959.579598][T10137] EXT4-fs (loop4): Ignoring removed orlov option [ 1959.802043][T10137] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1960.517728][T10146] loop1: detected capacity change from 0 to 128 [ 1960.649235][ T26] audit: type=1800 audit(1763419885.917:90): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16092" name="bus" dev="loop1" ino=1048775 res=0 errno=0 [ 1962.102711][T10162] loop3: detected capacity change from 0 to 512 [ 1962.274874][T10162] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1962.363571][T10162] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1962.567593][T10176] loop3: detected capacity change from 0 to 1024 [ 1962.600175][T10176] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1962.623443][T10176] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1962.669779][T10176] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1962.701558][T10176] System zones: 0-1, 3-36 [ 1962.742183][T10176] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1963.933864][T10189] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.16110'. [ 1965.331617][T10222] netlink: 116 bytes leftover after parsing attributes in process `syz.1.16124'. [ 1965.599447][T10227] loop5: detected capacity change from 0 to 128 [ 1965.681119][ T26] audit: type=1800 audit(1763419890.947:91): pid=10227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.16123" name="bus" dev="loop5" ino=1048776 res=0 errno=0 [ 1966.352854][T10251] loop1: detected capacity change from 0 to 1024 [ 1966.410166][T10251] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1966.460682][T10251] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1966.531269][T10251] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1966.572388][T10251] System zones: 0-1, 3-36 [ 1966.605172][T10251] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1967.479632][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16146'. [ 1967.805275][T10284] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.16150'. [ 1968.171310][T10294] cgroup: Invalid name [ 1968.736572][T10310] loop3: detected capacity change from 0 to 512 [ 1968.883322][T10310] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1968.952719][T10310] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1968.993208][T10327] loop1: detected capacity change from 0 to 512 [ 1969.188464][T10327] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1969.265460][T10327] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1969.806648][T10349] cgroup: Invalid name [ 1970.589048][T10390] loop3: detected capacity change from 0 to 512 [ 1970.690658][T10390] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1970.760437][T10390] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1971.665562][T10418] loop5: detected capacity change from 0 to 512 [ 1971.770930][T10418] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1971.797528][T10418] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1972.412351][T10443] loop3: detected capacity change from 0 to 1024 [ 1972.533335][T10443] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1972.583445][T10443] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1972.787209][T10443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1972.846351][T10443] System zones: 0-1, 3-36 [ 1973.103928][T10443] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1973.552684][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16225'. [ 1974.820151][T10491] loop3: detected capacity change from 0 to 1024 [ 1974.908112][T10491] EXT4-fs (loop3): Ignoring removed orlov option [ 1975.169342][T10491] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1975.870494][T10501] loop4: detected capacity change from 0 to 512 [ 1975.927801][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.934198][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.023908][T10501] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1976.085477][T10501] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1976.859006][T10515] cgroup: Invalid name [ 1979.198760][T10561] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.16269'. [ 1979.404240][T10568] netlink: 116 bytes leftover after parsing attributes in process `syz.1.16271'. [ 1980.702685][T10603] cgroup: Invalid name [ 1981.106147][T10612] loop4: detected capacity change from 0 to 1024 [ 1981.206009][T10612] EXT4-fs (loop4): Ignoring removed orlov option [ 1981.447274][T10612] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1982.020783][T10619] loop3: detected capacity change from 0 to 1024 [ 1982.111169][T10619] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1982.170780][T10619] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1982.254963][T10619] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1982.263172][T10619] System zones: 0-1, 3-36 [ 1982.323820][T10619] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1983.105134][T10633] loop3: detected capacity change from 0 to 1024 [ 1983.183558][T10633] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1983.221335][T10633] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1983.314093][T10633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1983.358548][T10633] System zones: 0-1, 3-36 [ 1983.386612][T10633] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1983.485693][T10642] cgroup: Invalid name [ 1983.757441][T10650] loop4: detected capacity change from 0 to 1024 [ 1983.803161][T10650] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1983.844376][T10650] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1983.912793][T10650] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1983.967454][T10650] System zones: 0-1, 3-36 [ 1984.028421][T10650] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1984.372938][T10666] loop6: detected capacity change from 0 to 128 [ 1984.394805][ T26] audit: type=1800 audit(1763419909.667:92): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16312" name="bus" dev="loop6" ino=1048777 res=0 errno=0 [ 1984.425639][T10666] attempt to access beyond end of device [ 1984.425639][T10666] loop6: rw=0, want=1041, limit=128 [ 1984.661572][T10675] loop4: detected capacity change from 0 to 1024 [ 1984.800191][T10675] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1984.848491][T10675] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1984.935298][T10675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1985.042598][T10675] System zones: 0-1, 3-36 [ 1985.099105][T10675] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1985.341279][T10698] loop1: detected capacity change from 0 to 1024 [ 1985.533541][T10698] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1985.606343][T10715] loop3: detected capacity change from 0 to 128 [ 1985.924398][T10698] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1986.097417][T10698] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1986.129136][T10698] System zones: 0-1, 3-36 [ 1986.622308][T10739] loop4: detected capacity change from 0 to 128 [ 1986.709511][T10698] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1986.915571][ T26] audit: type=1800 audit(1763419912.187:93): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16328" name="bus" dev="loop3" ino=1048778 res=0 errno=0 [ 1986.966920][T10710] attempt to access beyond end of device [ 1986.966920][T10710] loop3: rw=0, want=1041, limit=128 [ 1988.212734][T10805] netlink: 116 bytes leftover after parsing attributes in process `syz.1.16369'. [ 1988.794919][T10822] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.16378'. [ 1989.455603][T10849] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.16391'. [ 1989.613598][T11964] Bluetooth: hci1: command 0x0405 tx timeout [ 1992.373063][T10896] netlink: 116 bytes leftover after parsing attributes in process `syz.5.16412'. [ 1994.320986][T10962] loop5: detected capacity change from 0 to 1024 [ 1994.377790][T10962] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1994.404806][T10962] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1994.464601][T10962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1994.472786][T10962] System zones: 0-1, 3-36 [ 1994.572389][T10962] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1994.861164][T10978] loop4: detected capacity change from 0 to 512 [ 1994.986653][T10978] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1995.068970][T10978] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1995.441046][T10998] loop4: detected capacity change from 0 to 1024 [ 1995.478538][T11000] loop3: detected capacity change from 0 to 1024 [ 1995.509078][T10998] EXT4-fs (loop4): Ignoring removed nobh option [ 1995.530847][T10998] EXT4-fs (loop4): Ignoring removed bh option [ 1995.553583][T10998] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1995.606758][T11000] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1995.635597][T10998] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 1995.659703][T11000] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1995.818849][T11000] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1995.837653][T11000] System zones: 0-1, 3-36 [ 1995.880553][T11000] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1996.083602][T11007] loop1: detected capacity change from 0 to 128 [ 1996.181314][ T26] audit: type=1800 audit(1763419921.447:94): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16456" name="bus" dev="loop1" ino=1048780 res=0 errno=0 [ 1996.231828][T11007] attempt to access beyond end of device [ 1996.231828][T11007] loop1: rw=0, want=1041, limit=128 [ 1997.018421][T11030] loop1: detected capacity change from 0 to 1024 [ 1997.088273][T11030] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1997.118627][T11030] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1997.169046][T11030] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1997.183476][T11030] System zones: 0-1, 3-36 [ 1997.240800][T11030] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2002.086325][T11114] loop5: detected capacity change from 0 to 1024 [ 2002.172085][T11114] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2002.184387][T11114] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2002.262829][T11114] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2002.292453][T11114] System zones: 0-1, 3-36 [ 2002.339253][T11114] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2002.694258][T11131] loop5: detected capacity change from 0 to 1024 [ 2002.734053][T11131] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2002.759258][T11131] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2002.813790][T11131] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2002.821978][T11131] System zones: 0-1, 3-36 [ 2002.877615][T11131] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2008.729280][T11226] netlink: 116 bytes leftover after parsing attributes in process `syz.5.16559'. [ 2009.701155][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 2009.708504][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.442600][T11238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2010.503291][T11238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2010.685543][T11268] loop3: detected capacity change from 0 to 1024 [ 2010.712595][T11268] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2010.721423][T11268] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2010.761780][T11268] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2010.784799][T11268] System zones: 0-1, 3-36 [ 2010.799609][T11268] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2011.012727][T11238] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.021962][T11238] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.032220][T11238] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.041161][T11238] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.161358][T11272] netlink: 116 bytes leftover after parsing attributes in process `syz.1.16576'. [ 2011.226831][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.305123][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.400960][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.465734][T11245] chnl_net:caif_netlink_parms(): no params data found [ 2011.490949][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.663207][T19368] Bluetooth: hci5: command 0x0409 tx timeout [ 2011.824476][T11299] loop3: detected capacity change from 0 to 1024 [ 2011.905278][T11299] EXT4-fs (loop3): Ignoring removed orlov option [ 2012.267286][T11299] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2012.569150][T11245] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.616569][T11245] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.684362][T11245] device bridge_slave_0 entered promiscuous mode [ 2012.746024][T11245] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.790994][T11245] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.836140][T11245] device bridge_slave_1 entered promiscuous mode [ 2013.084999][T11245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2013.169116][T11245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2013.450695][T11245] team0: Port device team_slave_0 added [ 2013.534466][T11245] team0: Port device team_slave_1 added [ 2013.693680][ T3622] Bluetooth: hci5: command 0x041b tx timeout [ 2013.706750][T11245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2013.739458][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2013.803583][T11245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2013.834385][T11322] netlink: 116 bytes leftover after parsing attributes in process `syz.3.16592'. [ 2013.926555][T11245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2013.936947][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2014.026167][T11245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2014.089498][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16598'. [ 2014.252208][T11245] device hsr_slave_0 entered promiscuous mode [ 2014.294774][T11245] device hsr_slave_1 entered promiscuous mode [ 2014.302722][T11245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2014.340425][T11245] Cannot create hsr debugfs directory [ 2014.470496][T11349] loop4: detected capacity change from 0 to 1024 [ 2014.498233][T11349] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2014.529364][T11349] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2014.565956][T11349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2014.594144][T11349] System zones: 0-1, 3-36 [ 2014.632669][T11349] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2014.846259][T11358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2014.865708][T11358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2014.888308][T11358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2015.000583][ T154] device hsr_slave_0 left promiscuous mode [ 2015.054218][ T154] device hsr_slave_1 left promiscuous mode [ 2015.060799][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2015.071978][T11365] loop1: detected capacity change from 0 to 1024 [ 2015.085813][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2015.112377][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2015.133252][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2015.164404][ T154] device bridge_slave_1 left promiscuous mode [ 2015.165003][T11365] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2015.170655][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.204485][T11365] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2015.247969][ T154] device bridge_slave_0 left promiscuous mode [ 2015.254306][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.267191][T11365] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.16605: inode has both inline data and extents flags [ 2015.289226][ T154] device veth1_macvtap left promiscuous mode [ 2015.313638][ T154] device veth0_macvtap left promiscuous mode [ 2015.332497][T11365] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.16605: inode has both inline data and extents flags [ 2015.355241][ T154] device veth1_vlan left promiscuous mode [ 2015.369406][ T154] device veth0_vlan left promiscuous mode [ 2015.661323][T11379] loop4: detected capacity change from 0 to 128 [ 2015.764388][ T4293] Bluetooth: hci5: command 0x040f tx timeout [ 2015.850825][ T26] audit: type=1800 audit(1763419941.107:95): pid=11379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16607" name="bus" dev="loop4" ino=1048781 res=0 errno=0 [ 2016.881837][ T154] team0 (unregistering): Port device team_slave_1 removed [ 2016.935755][ T154] team0 (unregistering): Port device team_slave_0 removed [ 2016.980040][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2017.030550][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2017.251082][ T154] bond0 (unregistering): Released all slaves [ 2017.853623][T11964] Bluetooth: hci5: command 0x0419 tx timeout [ 2018.226887][T11245] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2018.304530][T11245] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2018.324666][T11245] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2018.367447][T11245] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2018.535172][T11416] netlink: 116 bytes leftover after parsing attributes in process `syz.4.16622'. [ 2018.825993][T11245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2018.888640][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 2018.975724][T18280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2018.977898][T11433] loop5: detected capacity change from 0 to 1024 [ 2019.016507][T18280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2019.346361][T11433] EXT4-fs (loop5): Ignoring removed oldalloc option [ 2019.674130][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2019.726299][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2019.735071][T11433] EXT4-fs (loop5): Ignoring removed bh option [ 2019.741169][T11433] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2019.832893][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 2019.840045][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2019.876701][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2019.932593][T11433] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2020.094191][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2020.124976][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2020.159342][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.166513][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2020.205657][T11456] loop3: detected capacity change from 0 to 1024 [ 2020.243287][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2020.275647][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2020.305099][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2020.323841][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2020.369444][T11456] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2020.386079][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2020.413565][T11456] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2020.429661][T11456] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.16631: inode has both inline data and extents flags [ 2020.455303][T11456] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.16631: inode has both inline data and extents flags [ 2020.481219][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2020.601214][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2020.672491][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2020.713613][T11471] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.16613: Allocating blocks 497-513 which overlap fs metadata [ 2020.782692][T11471] EXT4-fs (loop5): pa ffff888020ef4620: logic 128, phys. 385, len 8 [ 2020.791198][T11471] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 2021.246921][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2021.255528][T11245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2021.280607][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2021.281274][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2021.311213][T11469] loop3: detected capacity change from 0 to 1024 [ 2021.407240][T11469] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2021.407273][T11469] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2021.435890][T11469] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2021.435973][T11469] System zones: 0-1, 3-36 [ 2021.476885][T11469] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2021.701696][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2021.701890][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2021.731541][T11245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2022.373419][T11507] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.16645'. [ 2022.662892][T18280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2022.682041][T18280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2022.784462][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2022.804400][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2022.824807][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2022.883053][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2022.903346][T11245] device veth0_vlan entered promiscuous mode [ 2022.946802][T11245] device veth1_vlan entered promiscuous mode [ 2022.976440][T11535] netlink: 116 bytes leftover after parsing attributes in process `syz.1.16651'. [ 2023.067839][T27236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2023.103366][T11541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16653'. [ 2023.118101][T27236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2023.146168][T27236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2023.173132][T11545] loop1: detected capacity change from 0 to 1024 [ 2023.206041][T27236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2023.241552][T11245] device veth0_macvtap entered promiscuous mode [ 2023.287526][T11245] device veth1_macvtap entered promiscuous mode [ 2023.338013][T11545] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2023.346655][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.423228][T11545] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2023.444714][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.538862][T11545] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.16654: inode has both inline data and extents flags [ 2023.551896][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.623442][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.643326][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2023.703480][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2023.765580][T11245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2023.773220][T27236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2023.820940][T27236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2023.864016][T27236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2023.894018][T27236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2023.928849][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2023.985923][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2024.021116][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2024.043870][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2024.083519][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2024.115828][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2024.134852][T11245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2024.143238][T11571] netlink: 116 bytes leftover after parsing attributes in process `syz.5.16664'. [ 2024.160733][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2024.170122][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2024.192222][T11245] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.237864][T11245] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.265737][T11245] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.293824][T11245] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.505913][T27236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.545718][T27236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.621489][T11589] loop1: detected capacity change from 0 to 1024 [ 2024.631947][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2024.671838][T18280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2024.732959][T18280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2024.798641][T11589] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2024.818741][T19556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2024.841939][T11595] netlink: 116 bytes leftover after parsing attributes in process `syz.5.16676'. [ 2024.852174][T11589] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2024.879803][T11589] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.16672: inode has both inline data and extents flags [ 2026.088362][T11635] loop1: detected capacity change from 0 to 1024 [ 2026.210559][T11635] EXT4-fs (loop1): Ignoring removed orlov option [ 2026.441362][T11635] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2027.663275][T11652] loop6: detected capacity change from 0 to 512 [ 2027.854742][T11652] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2027.934711][T11652] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2028.672050][T11675] netlink: 2088 bytes leftover after parsing attributes in process `syz.6.16707'. [ 2029.028674][T11682] loop4: detected capacity change from 0 to 1024 [ 2029.081602][T11682] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2029.126926][T11682] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2029.204112][T11689] netlink: 'syz.6.16713': attribute type 16 has an invalid length. [ 2029.211394][T11687] loop3: detected capacity change from 0 to 512 [ 2029.214198][T11682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2029.238724][T11689] netlink: 'syz.6.16713': attribute type 17 has an invalid length. [ 2029.257300][T11682] System zones: 0-1, 3-36 [ 2029.284130][T11682] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2029.341010][T11687] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2029.421225][T11687] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2029.702087][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16716'. [ 2030.850349][T11689] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.857816][T11689] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.442365][T11722] loop4: detected capacity change from 0 to 1024 [ 2031.550365][T11722] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2031.569086][T11722] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2031.602596][T11722] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2031.611747][T11722] System zones: 0-1, 3-36 [ 2031.629609][T11722] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2032.495383][T11744] loop1: detected capacity change from 0 to 1024 [ 2033.101837][T11752] loop3: detected capacity change from 0 to 1024 [ 2033.988501][T11744] EXT4-fs (loop1): Ignoring removed orlov option [ 2034.010952][T11752] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2034.035104][T11744] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2034.133639][T11752] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2034.187008][T11752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2034.197490][T11752] System zones: 0-1, 3-36 [ 2034.203942][T11752] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2034.609233][T11760] loop3: detected capacity change from 0 to 512 [ 2034.746738][T11689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2034.775404][T11760] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2034.793243][T11689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2034.797635][T11760] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2035.100547][T11772] loop3: detected capacity change from 0 to 512 [ 2035.151682][T11772] EXT4-fs (loop3): Ignoring removed bh option [ 2035.178729][T11772] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2035.204622][T11772] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 2035.232463][T11772] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 2035.253797][T11772] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 2035.264083][T11772] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 2035.359447][ T26] audit: type=1326 audit(1763419960.627:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.16742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f322bef96c9 code=0x0 [ 2035.532593][T11689] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.547976][T11689] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.558826][T11689] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.576569][T11689] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.706392][T11743] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.16734'. [ 2036.237808][T11794] loop6: detected capacity change from 0 to 1024 [ 2037.369028][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.377409][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.991614][T11794] EXT4-fs (loop6): Ignoring removed orlov option [ 2038.297806][T11794] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2038.618967][T11802] loop4: detected capacity change from 0 to 1024 [ 2038.908124][T11802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2038.998808][T11802] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2039.141805][T11802] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.16752: inode has both inline data and extents flags [ 2039.147577][T11821] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.16757'. [ 2039.876142][T11838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16763'. [ 2040.226640][T11847] loop4: detected capacity change from 0 to 1024 [ 2042.029565][T11847] EXT4-fs (loop4): Ignoring removed orlov option [ 2042.200217][T11856] netlink: 2088 bytes leftover after parsing attributes in process `syz.6.16772'. [ 2042.253330][T11847] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2042.277332][ C1] vkms_vblank_simulate: vblank timer overrun [ 2043.740031][T11881] loop4: detected capacity change from 0 to 512 [ 2043.808100][T11881] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2043.823850][T11881] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2043.851201][T11881] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2044.242155][T11894] loop3: detected capacity change from 0 to 1024 [ 2044.263573][T11894] EXT4-fs (loop3): Ignoring removed orlov option [ 2044.390857][T11894] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2046.771595][T11929] loop3: detected capacity change from 0 to 1024 [ 2046.895120][T11929] EXT4-fs (loop3): Ignoring removed orlov option [ 2047.085976][T11929] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2049.601175][T11963] loop6: detected capacity change from 0 to 1024 [ 2049.653738][T11963] EXT4-fs (loop6): Ignoring removed orlov option [ 2049.675066][T11969] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.16817'. [ 2049.807282][T11963] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2049.855201][T11977] loop1: detected capacity change from 0 to 512 [ 2050.019284][T11977] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2050.034372][T11977] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2050.100652][T11977] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2050.615100][T11995] loop3: detected capacity change from 0 to 1024 [ 2050.759332][T11995] EXT4-fs (loop3): Ignoring removed orlov option [ 2050.954960][T11995] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2051.293507][ T26] audit: type=1326 audit(1763419976.537:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2051.461319][ T26] audit: type=1326 audit(1763419976.537:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2051.633037][ T26] audit: type=1326 audit(1763419976.607:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2051.798144][ T26] audit: type=1326 audit(1763419976.607:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2051.853153][T12007] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.16830'. [ 2051.954695][ T26] audit: type=1326 audit(1763419976.607:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2052.049887][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16831'. [ 2052.093776][ T26] audit: type=1326 audit(1763419976.607:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2052.269309][ T26] audit: type=1326 audit(1763419976.607:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2052.385697][ T26] audit: type=1326 audit(1763419976.607:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2052.450297][ T26] audit: type=1326 audit(1763419976.607:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2052.537537][ T26] audit: type=1326 audit(1763419977.577:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.5.16827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2052.597204][T12018] netlink: 116 bytes leftover after parsing attributes in process `syz.4.16836'. [ 2053.657408][T12047] loop1: detected capacity change from 0 to 1024 [ 2053.728422][T12047] EXT4-fs (loop1): Ignoring removed orlov option [ 2053.996171][T12047] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2055.940309][T12069] loop3: detected capacity change from 0 to 512 [ 2056.039304][T12069] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2056.053707][T12069] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2056.074489][T12071] loop1: detected capacity change from 0 to 1024 [ 2056.104379][T12069] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 2056.155913][T12071] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2056.163273][T12071] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2056.244260][T12071] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2056.259214][T12071] System zones: 0-1, 3-36 [ 2056.305307][T12071] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2056.877798][T12083] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2057.159679][T12085] loop1: detected capacity change from 0 to 8192 [ 2057.171540][T12089] loop4: detected capacity change from 0 to 512 [ 2057.245229][T12089] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2057.246228][ T2061] loop1: p1 p2 [ 2057.287236][ T2061] loop1: partition table partially beyond EOD, truncated [ 2057.294211][T12089] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2057.302996][ T2061] loop1: p1 start 16777216 is beyond EOD, truncated [ 2057.321992][ T2061] loop1: p2 size 515840 extends beyond EOD, truncated [ 2057.338738][T12091] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2057.364655][T12089] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2057.411944][T12085] loop1: p1 p2 [ 2057.461558][T12085] loop1: partition table partially beyond EOD, truncated [ 2057.499539][T12085] loop1: p1 start 16777216 is beyond EOD, truncated [ 2057.539961][T12085] loop1: p2 size 515840 extends beyond EOD, truncated [ 2057.613532][T12097] loop6: detected capacity change from 0 to 128 [ 2058.002339][T12104] loop4: detected capacity change from 0 to 1024 [ 2058.082723][T12106] loop6: detected capacity change from 0 to 256 [ 2060.058540][T12106] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2060.069336][T12106] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 2060.149933][T12106] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2060.726894][T12105] loop5: detected capacity change from 0 to 512 [ 2060.858605][ T2061] udevd[2061]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 2061.013020][T12105] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2061.138293][T12105] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2061.212443][ T2061] udevd[2061]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 2061.321477][T12127] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2061.631792][T12136] loop6: detected capacity change from 0 to 1024 [ 2062.392058][T12136] EXT4-fs (loop6): Ignoring removed oldalloc option [ 2062.509842][T12136] EXT4-fs (loop6): Ignoring removed bh option [ 2062.524504][T12136] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2062.624033][T12136] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2062.977400][T12165] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3871: comm syz.6.16879: Allocating blocks 497-513 which overlap fs metadata [ 2062.997080][T12165] EXT4-fs (loop6): pa ffff88805fd1d7e0: logic 128, phys. 385, len 8 [ 2062.997160][T12165] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 2063.498876][T12167] loop3: detected capacity change from 0 to 512 [ 2063.651101][T12167] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2063.769629][T12167] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2063.839124][T12178] loop6: detected capacity change from 0 to 1024 [ 2063.906082][T12178] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 2063.931485][T12178] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2064.014279][T12178] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2064.036509][T12178] System zones: 0-1, 3-36 [ 2064.062994][T12178] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2064.535301][T12198] loop6: detected capacity change from 0 to 512 [ 2064.612055][T12198] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2064.739931][T12198] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2065.354315][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16910'. [ 2065.739963][T12234] loop1: detected capacity change from 0 to 512 [ 2065.830367][T12234] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2065.900801][T12234] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2066.143846][T12247] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.16922'. [ 2066.877510][T12264] loop4: detected capacity change from 0 to 1024 [ 2066.937813][T12264] EXT4-fs (loop4): Ignoring removed oldalloc option [ 2066.964579][T12264] EXT4-fs (loop4): Ignoring removed bh option [ 2066.984551][T12264] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2067.077227][T12264] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2067.102668][ C0] vkms_vblank_simulate: vblank timer overrun [ 2067.815926][T12269] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.16931: Allocating blocks 497-513 which overlap fs metadata [ 2067.850846][T12269] EXT4-fs (loop4): pa ffff88804a5e9000: logic 176, phys. 449, len 4 [ 2067.858966][T12269] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 2072.683797][T12314] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2072.999928][T12325] loop4: detected capacity change from 0 to 512 [ 2073.121748][T12325] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2073.208976][T12325] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2073.693103][T12345] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2074.067601][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16967'. [ 2074.216983][T12358] loop6: detected capacity change from 0 to 1024 [ 2074.304278][T12358] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2074.332009][T12358] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2074.415600][T12358] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.16969: inode has both inline data and extents flags [ 2074.989611][T12370] loop1: detected capacity change from 0 to 512 [ 2075.135297][T12374] netlink: 84 bytes leftover after parsing attributes in process `syz.5.16968'. [ 2075.180842][T12370] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2075.186241][T12372] loop6: detected capacity change from 0 to 1024 [ 2075.291630][T12370] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2075.323149][T12372] EXT4-fs (loop6): Ignoring removed orlov option [ 2075.364831][T12372] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2075.760200][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 2075.760214][ T26] audit: type=1326 audit(1763420001.027:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.5.16979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2075.869620][ T26] audit: type=1326 audit(1763420001.097:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.5.16979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2075.894497][ T26] audit: type=1326 audit(1763420001.097:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.5.16979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2075.963744][ T26] audit: type=1326 audit(1763420001.097:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.5.16979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2076.153442][ T26] audit: type=1326 audit(1763420001.097:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.5.16979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc00bc66c9 code=0x7ffc0000 [ 2076.193805][T12405] netlink: 84 bytes leftover after parsing attributes in process `syz.6.16984'. [ 2076.554519][T12412] loop1: detected capacity change from 0 to 512 [ 2076.642191][T12412] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2076.695947][T12412] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2077.238052][T12430] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2077.379835][T12434] netlink: 116 bytes leftover after parsing attributes in process `syz.1.17000'. [ 2077.686966][T12443] loop6: detected capacity change from 0 to 1024 [ 2077.719649][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.746784][T12445] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2077.780517][T12443] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 2077.810351][T12443] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2077.991076][T12450] loop3: detected capacity change from 0 to 128 [ 2078.081481][T12443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2078.351499][ T26] audit: type=1800 audit(1763420003.467:116): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16989" name="bus" dev="loop3" ino=1048784 res=0 errno=0 [ 2078.646313][T12443] System zones: 0-1, 3-36 [ 2078.688321][T12443] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2078.745811][T12454] loop4: detected capacity change from 0 to 512 [ 2078.951834][T12454] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2079.097680][T12454] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2079.440461][T12466] netlink: 116 bytes leftover after parsing attributes in process `syz.1.17012'. [ 2080.637822][T12494] loop3: detected capacity change from 0 to 512 [ 2080.834825][T12494] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2080.850458][T12494] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2082.629414][T12525] loop4: detected capacity change from 0 to 1024 [ 2082.715494][T12525] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2082.767352][T12525] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2082.857531][T12525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2082.928373][T12525] System zones: 0-1, 3-36 [ 2082.997855][T12525] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2084.569644][T12558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17049'. [ 2085.501036][T12562] loop4: detected capacity change from 0 to 512 [ 2085.634459][T12562] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2085.706662][T12570] netlink: 2088 bytes leftover after parsing attributes in process `syz.5.17054'. [ 2085.732379][T12562] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2087.177091][T12589] loop4: detected capacity change from 0 to 1024 [ 2087.243565][T12589] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 2087.270885][T12589] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2087.354237][T12589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2087.387065][T12589] System zones: 0-1, 3-36 [ 2087.400516][T12589] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2087.514403][T12598] tmpfs: Unknown parameter 'n' [ 2088.802171][T12620] loop3: detected capacity change from 0 to 512 [ 2088.868951][T12620] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2088.873546][ T4293] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 2088.881291][T12620] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2088.924213][T12620] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2089.245794][ T4293] usb 2-1: config 16 has an invalid interface number: 236 but max is 0 [ 2089.260953][ T4293] usb 2-1: config 16 has no interface number 0 [ 2089.516720][ T4293] usb 2-1: string descriptor 0 read error: -22 [ 2089.527479][ T4293] usb 2-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 2089.552141][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.871636][T11380] usb 2-1: USB disconnect, device number 25 [ 2089.967960][T12630] 9pnet: Insufficient options for proto=fd [ 2090.532993][T12634] loop1: detected capacity change from 0 to 1024 [ 2090.631032][T12634] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2090.693676][T12634] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2090.775792][T12634] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2090.838545][T12634] System zones: 0-1, 3-36 [ 2090.887786][T12634] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2091.000680][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17088'. [ 2091.554493][T12667] loop6: detected capacity change from 0 to 512 [ 2091.683701][T12667] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2091.711746][T12673] tmpfs: Unknown parameter 'n' [ 2091.769261][T12667] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2092.056846][T12679] loop5: detected capacity change from 0 to 1024 [ 2092.123338][T12679] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2092.134463][T12679] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2092.232098][T12679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2092.262430][T12679] System zones: 0-1, 3-36 [ 2092.336890][T12679] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2092.427612][T12692] 9pnet: Insufficient options for proto=fd [ 2092.959200][T12714] loop1: detected capacity change from 0 to 1024 [ 2093.081698][T12714] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2093.105739][T12721] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17120'. [ 2093.134363][T12714] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2093.219144][T12714] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.17117: inode has both inline data and extents flags [ 2093.291802][T12724] 9pnet: Insufficient options for proto=fd [ 2095.154361][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17132'. [ 2095.487029][T12755] 9pnet: Insufficient options for proto=fd [ 2095.763613][ T4293] Bluetooth: hci1: command 0x0406 tx timeout [ 2095.893423][T12759] loop3: detected capacity change from 0 to 128 [ 2096.182360][ T26] audit: type=1800 audit(1763420021.297:117): pid=12759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17136" name="bus" dev="loop3" ino=1048785 res=0 errno=0 [ 2097.728076][T12769] cgroup: Invalid name [ 2097.857248][T12777] loop6: detected capacity change from 0 to 128 [ 2097.908219][T12777] EXT4-fs (loop6): Ignoring removed nobh option [ 2097.946076][T12777] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 2097.960860][T12777] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2098.150137][T12793] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2098.571229][T12821] loop1: detected capacity change from 0 to 1024 [ 2098.575348][T12822] loop5: detected capacity change from 0 to 1024 [ 2098.644756][T12821] EXT4-fs (loop1): Ignoring removed oldalloc option [ 2098.651411][T12821] EXT4-fs (loop1): Ignoring removed bh option [ 2098.686965][T12824] loop3: detected capacity change from 0 to 1024 [ 2098.703474][T12821] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2098.722567][T12822] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2098.817275][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.824322][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.839953][T12824] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2098.864879][T12821] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2098.871349][T12824] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2098.957940][T12824] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.17165: inode has both inline data and extents flags [ 2100.155631][T12852] loop5: detected capacity change from 0 to 512 [ 2100.245953][T12852] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2100.263238][T12852] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2100.334834][T12852] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2100.363457][ C0] vkms_vblank_simulate: vblank timer overrun [ 2101.049434][T12872] netlink: 116 bytes leftover after parsing attributes in process `syz.5.17182'. [ 2101.368987][T12879] loop5: detected capacity change from 0 to 1024 [ 2101.440354][T12879] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2101.471271][T12879] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2101.545800][T12879] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2101.580922][T12879] System zones: 0-1, 3-36 [ 2101.601925][T12879] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2101.691323][T12889] cgroup: Invalid name [ 2101.987128][T12896] netlink: 116 bytes leftover after parsing attributes in process `syz.3.17194'. [ 2102.419405][T12913] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.17201'. [ 2102.629675][T12917] cgroup: Invalid name [ 2103.217457][T12935] loop4: detected capacity change from 0 to 512 [ 2103.271286][T12935] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2103.288751][T12935] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2103.338109][T12935] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2103.366731][ C0] vkms_vblank_simulate: vblank timer overrun [ 2103.504314][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17214'. [ 2104.143760][ T4265] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 2104.553766][ T4265] usb 4-1: config 16 has an invalid interface number: 236 but max is 0 [ 2104.582627][ T4265] usb 4-1: config 16 has no interface number 0 [ 2104.602536][T12969] loop1: detected capacity change from 0 to 512 [ 2104.672968][T12969] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2104.711505][T12969] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2104.781233][T12969] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2104.878925][ T4265] usb 4-1: string descriptor 0 read error: -22 [ 2104.888580][ T4265] usb 4-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 2104.928735][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.263015][ T4257] usb 4-1: USB disconnect, device number 26 [ 2105.408128][T12980] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.17232'. [ 2105.881029][T12998] loop3: detected capacity change from 0 to 1024 [ 2105.954052][T12998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2105.978143][T12998] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2106.025275][T12998] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.17238: inode has both inline data and extents flags [ 2106.262441][T13003] tmpfs: Unknown parameter 'n' [ 2108.498535][T13064] tmpfs: Unknown parameter 'n' [ 2111.394488][T13139] loop4: detected capacity change from 0 to 128 [ 2112.159366][T13157] loop5: detected capacity change from 0 to 1024 [ 2112.279574][T13157] EXT4-fs (loop5): Ignoring removed oldalloc option [ 2112.297884][T13157] EXT4-fs (loop5): Ignoring removed bh option [ 2112.338616][T13157] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2112.492970][T13157] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2112.733610][T13170] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.17306: Allocating blocks 497-513 which overlap fs metadata [ 2112.824987][T13170] EXT4-fs (loop5): pa ffff88804a5e9540: logic 128, phys. 385, len 8 [ 2112.834395][T13170] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 2113.763149][T13179] tmpfs: Unknown parameter 'n' [ 2116.046001][T13239] loop6: detected capacity change from 0 to 1024 [ 2116.111150][T13239] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 2116.169105][T13239] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2116.259901][T13239] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2116.277896][T13239] System zones: 0-1, 3-36 [ 2116.319032][T13245] netlink: 116 bytes leftover after parsing attributes in process `syz.3.17342'. [ 2116.355074][T13239] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2116.390981][T13245] device ip6tnl0 entered promiscuous mode [ 2116.635962][T13251] tmpfs: Unknown parameter 'n' [ 2117.851221][T13281] loop5: detected capacity change from 0 to 1024 [ 2117.938230][T13281] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2117.951341][T13281] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2118.015335][T13281] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2118.062227][T13281] System zones: 0-1, 3-36 [ 2118.138398][T13281] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2118.363614][T30748] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 2118.610275][T13303] loop1: detected capacity change from 0 to 1024 [ 2118.731438][T13303] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2118.775864][T13303] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2118.788319][T30748] usb 4-1: config 16 has an invalid interface number: 236 but max is 0 [ 2118.808268][T30748] usb 4-1: config 16 has no interface number 0 [ 2118.857610][T13303] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2118.934063][T13303] System zones: 0-1, 3-36 [ 2118.967101][T13303] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2119.046916][T13316] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2119.113751][T30748] usb 4-1: string descriptor 0 read error: -22 [ 2119.125733][T30748] usb 4-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 2119.201805][T30748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.300707][T13322] cgroup: Invalid name [ 2119.497791][T30748] usb 4-1: USB disconnect, device number 27 [ 2120.558313][T13348] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2121.084694][T13364] tmpfs: Unknown parameter 'n' [ 2122.035406][T13392] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.17404'. [ 2122.354582][T13401] loop3: detected capacity change from 0 to 512 [ 2122.526523][T13404] loop1: detected capacity change from 0 to 1024 [ 2122.577209][T13401] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2122.692590][T13401] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2122.793461][T13404] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2122.909062][T13412] loop4: detected capacity change from 0 to 1024 [ 2122.968800][T13412] EXT4-fs (loop4): Ignoring removed orlov option [ 2123.101269][T13412] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2123.169663][T13404] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2123.616378][T13404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2123.670287][T13404] System zones: 0-1, 3-36 [ 2123.779452][T13404] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2124.453854][T13423] netlink: 2088 bytes leftover after parsing attributes in process `syz.5.17417'. [ 2126.018878][T13471] tmpfs: Unknown parameter 'n' [ 2126.664147][T13497] loop5: detected capacity change from 0 to 1024 [ 2126.732015][T13497] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2126.760804][T13497] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2126.944816][T13497] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2126.967793][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17451'. [ 2127.000518][T13497] System zones: 0-1, 3-36 [ 2127.076258][T13497] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2127.648572][T13523] loop3: detected capacity change from 0 to 512 [ 2127.662105][T13527] netlink: 2088 bytes leftover after parsing attributes in process `syz.5.17456'. [ 2127.756651][T13523] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2127.775256][T13523] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2127.841018][T13529] loop4: detected capacity change from 0 to 512 [ 2127.900760][T13523] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2128.100526][T13529] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2128.231694][T13529] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2128.585836][T13541] loop3: detected capacity change from 0 to 1024 [ 2128.678738][T13541] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2128.731606][T13541] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2128.854471][T13541] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2128.953876][T13541] System zones: 0-1, 3-36 [ 2129.050215][T13541] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2129.507298][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17472'. [ 2129.764194][T13568] loop5: detected capacity change from 0 to 512 [ 2129.860629][T13568] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2129.913729][T13568] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2130.060284][T13568] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2130.898505][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17486'. [ 2131.603574][T19368] Bluetooth: hci5: command 0x0406 tx timeout [ 2134.691458][T13627] loop6: detected capacity change from 0 to 512 [ 2134.874780][T13627] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2135.043613][T13627] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2135.434017][T13644] loop5: detected capacity change from 0 to 1024 [ 2135.531731][T13644] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2135.561998][T13644] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2135.666811][T13644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2135.723494][T13644] System zones: 0-1, 3-36 [ 2135.809672][T13644] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2137.282965][T13648] loop4: detected capacity change from 0 to 1024 [ 2137.427103][T13648] EXT4-fs (loop4): Ignoring removed oldalloc option [ 2137.443524][T13648] EXT4-fs (loop4): Ignoring removed bh option [ 2137.449762][T13648] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2137.526369][T13648] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2138.265046][T13653] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.17508: Allocating blocks 497-513 which overlap fs metadata [ 2138.280181][T13653] EXT4-fs (loop4): pa ffff88805fd1d1c0: logic 128, phys. 385, len 8 [ 2138.288306][T13653] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 2139.713271][T13688] loop3: detected capacity change from 0 to 1024 [ 2139.782378][T13688] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2139.844740][T13690] binder: BINDER_SET_CONTEXT_MGR already set [ 2139.862268][T13690] binder: 13689:13690 ioctl 4018620d 200000000040 returned -16 [ 2139.864258][T13688] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2139.993092][T13688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2140.063869][T13688] System zones: 0-1, 3-36 [ 2140.137891][T13688] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2140.952754][T13723] loop3: detected capacity change from 0 to 1024 [ 2141.152297][T13723] EXT4-fs (loop3): Ignoring removed orlov option [ 2141.326320][T13723] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2142.652954][T13734] chnl_net:caif_netlink_parms(): no params data found [ 2144.462854][T13208] Bluetooth: hci4: command 0x0409 tx timeout [ 2144.688626][T13755] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2144.879795][T13734] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.903645][T13734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.944977][T13734] device bridge_slave_0 entered promiscuous mode [ 2145.023884][T13734] bridge0: port 2(bridge_slave_1) entered blocking state [ 2145.030979][T13734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2145.099568][T13734] device bridge_slave_1 entered promiscuous mode [ 2145.261254][T13734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2145.301257][T13770] cgroup: Invalid name [ 2145.302256][T13734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2145.522838][T13734] team0: Port device team_slave_0 added [ 2145.569625][T13734] team0: Port device team_slave_1 added [ 2145.671793][T13734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2145.700766][T13734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2145.852488][T13734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2145.889689][T13734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2145.954125][T13734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2146.022404][T13734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2146.042473][T13782] binder: BINDER_SET_CONTEXT_MGR already set [ 2146.059029][T13782] binder: 13781:13782 ioctl 4018620d 200000000040 returned -16 [ 2146.196110][T13734] device hsr_slave_0 entered promiscuous mode [ 2146.220630][T13734] device hsr_slave_1 entered promiscuous mode [ 2146.240470][T13734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2146.263481][T13734] Cannot create hsr debugfs directory [ 2146.483580][T13208] Bluetooth: hci4: command 0x041b tx timeout [ 2146.749680][T13791] loop6: detected capacity change from 0 to 512 [ 2146.814020][T13791] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2146.821367][T13791] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2146.910854][T13791] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,user_xattr,inode_readahead_blks=0x0000000000000800,barrier=0x000000000100000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x00. Quota mode: none. [ 2147.221972][T13797] cgroup: Invalid name [ 2147.241087][T13734] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2147.307114][T13734] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2147.355834][T13734] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2147.395659][T13734] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2147.678476][T13734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2147.734027][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2147.752197][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2147.788681][T13734] 8021q: adding VLAN 0 to HW filter on device team0 [ 2147.825323][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2147.844708][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2147.880132][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 2147.887290][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2147.963932][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2147.983236][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2148.034272][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2148.053792][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.060910][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.099443][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2148.130443][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2148.192344][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2148.247907][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2148.286166][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2148.316712][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2148.352258][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2148.386142][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2148.426493][T13734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2148.483779][T13734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2148.524349][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2148.540373][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2148.563696][T19368] Bluetooth: hci4: command 0x040f tx timeout [ 2148.579650][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2148.961765][T13813] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2149.080882][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2149.092011][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2149.141629][T13734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2149.594335][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2149.607548][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2149.640232][T13734] device veth0_vlan entered promiscuous mode [ 2149.660371][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2149.681341][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2149.712534][T13734] device veth1_vlan entered promiscuous mode [ 2149.765425][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2149.793258][T13841] tmpfs: Unknown parameter 'n' [ 2149.799324][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2149.898550][T18280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2149.915062][T18280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2149.985329][T13734] device veth0_macvtap entered promiscuous mode [ 2150.081962][T13734] device veth1_macvtap entered promiscuous mode [ 2150.149468][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2150.211008][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.254444][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2150.332735][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.363224][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2150.400847][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.427083][T13734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2150.488979][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2150.514650][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2150.550180][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2150.590727][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2150.618447][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2150.635196][T13866] tmpfs: Unknown parameter 'n' [ 2150.643617][T13209] Bluetooth: hci4: command 0x0419 tx timeout [ 2150.653239][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.703485][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2150.759862][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.793454][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2150.852753][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2150.904174][T13734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2150.916839][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2150.936170][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2151.056107][T13734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2151.085739][T13734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2151.131067][T13734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2151.182123][T13734] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2151.342524][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2151.371105][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2151.420734][T18280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2151.433927][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2151.443156][T18280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2151.540405][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2151.773759][T13883] loop5: detected capacity change from 0 to 512 [ 2151.933082][T13883] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2151.980637][T32026] device hsr_slave_0 left promiscuous mode [ 2152.010193][T32026] device hsr_slave_1 left promiscuous mode [ 2152.019375][T13883] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2152.073598][T32026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2152.091570][T32026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2152.134646][T32026] device bridge_slave_1 left promiscuous mode [ 2152.169432][T32026] bridge0: port 2(bridge_slave_1) entered disabled state [ 2152.243771][T32026] device bridge_slave_0 left promiscuous mode [ 2152.250065][T32026] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.762377][T32026] team0 (unregistering): Port device team_slave_1 removed [ 2152.897245][T32026] team0 (unregistering): Port device team_slave_0 removed [ 2152.993927][T32026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2153.127506][T32026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2153.665636][T32026] bond0 (unregistering): Released all slaves [ 2154.935399][T13926] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2155.335922][T13940] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17621'. [ 2158.475692][T14011] loop6: detected capacity change from 0 to 512 [ 2158.588169][T14011] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2158.629014][T14011] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2159.498316][T14030] cgroup: Invalid name [ 2159.934684][T14035] loop6: detected capacity change from 0 to 1024 [ 2160.108308][T14035] EXT4-fs (loop6): Ignoring removed orlov option [ 2160.247956][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.254992][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.302652][T14035] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2160.825161][T14041] loop5: detected capacity change from 0 to 1024 [ 2160.941839][T14041] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2161.063365][T14041] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2161.172269][T14041] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2161.230657][T14041] System zones: 0-1, 3-36 [ 2161.301399][T14041] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2162.641494][T14081] loop6: detected capacity change from 0 to 1024 [ 2162.815002][T14081] EXT4-fs (loop6): Ignoring removed orlov option [ 2163.024575][T14081] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2165.773188][T14111] loop4: detected capacity change from 0 to 1024 [ 2166.035950][T14111] EXT4-fs (loop4): Ignoring removed orlov option [ 2166.296510][T14111] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 2167.186762][T14118] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2167.448397][T14122] loop5: detected capacity change from 0 to 512 [ 2167.654584][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17697'. [ 2167.700107][T14122] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2167.770192][T14122] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2170.868575][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17710'. [ 2171.340231][T14157] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2173.389514][T14210] loop1: detected capacity change from 0 to 1024 [ 2173.453058][T14210] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2173.480887][T14210] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2173.546291][T14210] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2173.563535][T14210] System zones: 0-1, 3-36 [ 2173.590971][T14210] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2174.001998][T14214] loop1: detected capacity change from 0 to 512 [ 2174.089409][T14214] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2174.184036][T14214] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2175.781630][T14226] loop5: detected capacity change from 0 to 1024 [ 2175.871738][T14226] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2175.903475][T14226] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2175.962109][T14226] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2175.984524][T14226] System zones: 0-1, 3-36 [ 2176.029063][T14226] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2176.310991][T14236] netlink: 116 bytes leftover after parsing attributes in process `syz.3.17742'. [ 2176.368189][T14237] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17747'. [ 2176.491141][T14248] cgroup: Invalid name [ 2176.622200][T14253] loop4: detected capacity change from 0 to 1024 [ 2176.718431][T14253] EXT4-fs (loop4): Ignoring removed oldalloc option [ 2176.727297][T14253] EXT4-fs (loop4): Ignoring removed bh option [ 2176.749550][T14253] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2176.884043][T14253] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2176.963852][T14263] loop5: detected capacity change from 0 to 1024 [ 2177.012676][T14267] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.17753: Allocating blocks 497-513 which overlap fs metadata [ 2177.036693][T14267] EXT4-fs (loop4): pa ffff88804a5e9a80: logic 128, phys. 385, len 8 [ 2177.044782][T14267] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 2177.455241][T14263] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2177.538775][T14271] loop3: detected capacity change from 0 to 512 [ 2177.569368][T14263] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2177.647991][T14271] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2177.724781][T14271] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2177.747941][T14263] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2177.813881][T14263] System zones: 0-1, 3-36 [ 2177.882290][T14263] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2177.906260][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17762'. [ 2178.553398][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17777'. [ 2178.924899][T14319] loop3: detected capacity change from 0 to 1024 [ 2179.007396][T14319] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2179.047331][T14319] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2179.099117][T14319] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2179.172595][T14326] loop6: detected capacity change from 0 to 1024 [ 2179.184945][T14319] System zones: 0-1, 3-36 [ 2179.250626][T14319] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2179.479274][T14326] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2179.594588][T14326] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2179.689686][T14326] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.17784: inode has both inline data and extents flags [ 2179.986887][T14349] cgroup: Invalid name [ 2180.908528][T14371] loop1: detected capacity change from 0 to 1024 [ 2181.114240][T14371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2181.183830][T14371] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2181.279261][T14371] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.17804: inode has both inline data and extents flags [ 2182.670128][T14405] tmpfs: Unknown parameter 'n' [ 2182.771932][T14407] loop5: detected capacity change from 0 to 1024 [ 2182.813346][ T26] audit: type=1326 audit(1763420108.077:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.1.17822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa2c1d6c9 code=0x7ffc0000 [ 2182.860168][T14411] loop4: detected capacity change from 0 to 128 [ 2182.903636][T14407] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2182.917695][T14407] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2183.093463][ T26] audit: type=1326 audit(1763420108.107:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.1.17822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa2c1d6c9 code=0x7ffc0000 [ 2183.093539][T14407] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2183.128729][ T26] audit: type=1326 audit(1763420108.107:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.1.17822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fa2c1d6c9 code=0x7ffc0000 [ 2183.157291][ T26] audit: type=1326 audit(1763420108.107:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.1.17822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa2c1d6c9 code=0x7ffc0000 [ 2183.277273][T14407] System zones: 0-1, 3-36 [ 2183.311216][T14407] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2183.325623][ T26] audit: type=1326 audit(1763420108.107:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.1.17822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa2c1d6c9 code=0x7ffc0000 [ 2183.938835][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17832'. [ 2183.965499][T14433] loop1: detected capacity change from 0 to 512 [ 2184.488950][T14445] loop5: detected capacity change from 0 to 1024 [ 2184.532246][T14445] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2184.580028][T14445] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2184.629412][T14445] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2184.648986][T14445] System zones: 0-1, 3-36 [ 2184.736458][T14445] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2185.111250][T14455] loop6: detected capacity change from 0 to 512 [ 2185.237347][T14455] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2185.278752][T14455] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2185.443592][T14462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17844'. [ 2185.584025][T14466] tmpfs: Unknown parameter 'n' [ 2185.868172][T14473] netlink: 72 bytes leftover after parsing attributes in process `syz.6.17850'. [ 2185.985525][T14475] loop5: detected capacity change from 0 to 1024 [ 2186.113309][T14475] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 2186.130941][T14475] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2186.228007][T14475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2186.293636][T14475] System zones: 0-1, 3-36 [ 2186.355319][T14475] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2186.706298][T14503] loop5: detected capacity change from 0 to 512 [ 2186.934103][T14512] loop6: detected capacity change from 0 to 512 [ 2186.974630][T14516] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2187.260414][T14521] loop3: detected capacity change from 0 to 1024 [ 2187.303316][T14521] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 2187.334698][T14521] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2187.353894][T14521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2187.403517][T14521] System zones: 0-1, 3-36 [ 2187.455113][T14521] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 2187.524921][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17872'. [ 2187.885909][T14543] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2188.025430][T14547] tmpfs: Unknown parameter 'n' [ 2188.257340][T14557] netlink: 116 bytes leftover after parsing attributes in process `syz.6.17885'. [ 2188.268514][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17885'. [ 2188.549776][T14566] netlink: 116 bytes leftover after parsing attributes in process `syz.6.17890'. [ 2188.653470][T19368] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 2188.693171][T14572] loop1: detected capacity change from 0 to 512 [ 2188.772516][T14577] tmpfs: Unknown parameter 'n' [ 2188.844514][T14572] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2188.860159][T14572] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2188.977532][T14585] cgroup: Invalid name [ 2189.043757][T19368] usb 4-1: config 16 has an invalid interface number: 236 but max is 0 [ 2189.075499][T19368] usb 4-1: config 16 has no interface number 0 [ 2189.108932][T14593] loop1: detected capacity change from 0 to 512 [ 2189.163806][T14593] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2189.190483][T14593] [ 2189.192848][T14593] ====================================================== [ 2189.199872][T14593] WARNING: possible circular locking dependency detected [ 2189.206910][T14593] syzkaller #0 Not tainted [ 2189.211322][T14593] ------------------------------------------------------ [ 2189.218340][T14593] syz.1.17901/14593 is trying to acquire lock: [ 2189.224486][T14593] ffff88804a4e7020 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x32f/0x1b30 [ 2189.234090][T14593] [ 2189.234090][T14593] but task is already holding lock: [ 2189.241453][T14593] ffff88801f1ac208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 2189.250946][T14593] [ 2189.250946][T14593] which lock already depends on the new lock. [ 2189.250946][T14593] [ 2189.261360][T14593] [ 2189.261360][T14593] the existing dependency chain (in reverse order) is: [ 2189.270374][T14593] [ 2189.270374][T14593] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 2189.278463][T14593] down_read+0x44/0x2e0 [ 2189.283252][T14593] v2_read_dquot+0x4a/0x110 [ 2189.288284][T14593] dquot_acquire+0x152/0x520 [ 2189.293396][T14593] ext4_acquire_dquot+0x2d9/0x4a0 [ 2189.299013][T14593] dqget+0x778/0xeb0 [ 2189.303481][T14593] __dquot_initialize+0x328/0xcb0 [ 2189.305499][T14598] loop5: detected capacity change from 0 to 512 [ 2189.309023][T14593] ext4_process_orphan+0x54/0x300 [ 2189.320799][T14593] ext4_orphan_cleanup+0xaa9/0x12e0 [ 2189.325007][T19368] usb 4-1: string descriptor 0 read error: -22 [ 2189.326519][T14593] ext4_fill_super+0x92f0/0x9a60 [ 2189.326541][T14593] mount_bdev+0x287/0x3c0 [ 2189.332755][T19368] usb 4-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 2189.338123][T14593] legacy_get_tree+0xe6/0x180 [ 2189.357180][T14593] vfs_get_tree+0x88/0x270 [ 2189.362110][T14593] do_new_mount+0x24a/0xa40 [ 2189.367145][T14593] __se_sys_mount+0x2d6/0x3c0 [ 2189.372331][T14593] do_syscall_64+0x4c/0xa0 [ 2189.377264][T14593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2189.383665][T14593] [ 2189.383665][T14593] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 2189.391290][T14593] __mutex_lock_common+0x1eb/0x2390 [ 2189.396997][T14593] mutex_lock_nested+0x17/0x20 [ 2189.402274][T14593] dquot_commit+0x5a/0x410 [ 2189.407192][T14593] ext4_write_dquot+0x1f0/0x360 [ 2189.412548][T14593] mark_all_dquot_dirty+0xf9/0x400 [ 2189.418162][T14593] __dquot_alloc_space+0x5d0/0xe20 [ 2189.423778][T14593] ext4_mb_new_blocks+0xf68/0x4940 [ 2189.429393][T14593] ext4_ext_map_blocks+0x191a/0x6650 [ 2189.435248][T14593] ext4_map_blocks+0x981/0x1b30 [ 2189.440599][T14593] ext4_getblk+0x16d/0x630 [ 2189.445517][T14593] ext4_bread+0x26/0x180 [ 2189.450266][T14593] ext4_append+0x2c3/0x560 [ 2189.455253][T14593] ext4_init_new_dir+0x2a2/0x940 [ 2189.460697][T14593] ext4_mkdir+0x47d/0xc50 [ 2189.465532][T14593] vfs_mkdir+0x387/0x570 [ 2189.470331][T14593] do_mkdirat+0x1d7/0x5a0 [ 2189.475168][T14593] __x64_sys_mkdirat+0x85/0x90 [ 2189.480439][T14593] do_syscall_64+0x4c/0xa0 [ 2189.485362][T14593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2189.491759][T14593] [ 2189.491759][T14593] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 2189.499561][T14593] __lock_acquire+0x2c33/0x7c60 [ 2189.504990][T14593] lock_acquire+0x197/0x3f0 [ 2189.509997][T14593] down_read+0x44/0x2e0 [ 2189.514657][T14593] ext4_map_blocks+0x32f/0x1b30 [ 2189.520012][T14593] ext4_getblk+0x16d/0x630 [ 2189.524929][T14593] ext4_bread+0x26/0x180 [ 2189.529675][T14593] ext4_quota_read+0x1b3/0x3a0 [ 2189.534941][T14593] find_tree_dqentry+0x188/0xb30 [ 2189.540384][T14593] find_tree_dqentry+0x3eb/0xb30 [ 2189.545825][T14593] find_tree_dqentry+0x3eb/0xb30 [ 2189.551270][T14593] find_tree_dqentry+0x3eb/0xb30 [ 2189.556711][T14593] qtree_read_dquot+0x13c/0x680 [ 2189.562064][T14593] v2_read_dquot+0xc0/0x110 [ 2189.567069][T14593] dquot_acquire+0x152/0x520 [ 2189.572182][T14593] ext4_acquire_dquot+0x2d9/0x4a0 [ 2189.577712][T14593] dqget+0x778/0xeb0 [ 2189.582109][T14593] __dquot_initialize+0x328/0xcb0 [ 2189.587639][T14593] ext4_process_orphan+0x54/0x300 [ 2189.593254][T14593] ext4_orphan_cleanup+0xaa9/0x12e0 [ 2189.598963][T14593] ext4_fill_super+0x92f0/0x9a60 [ 2189.604416][T14593] mount_bdev+0x287/0x3c0 [ 2189.609254][T14593] legacy_get_tree+0xe6/0x180 [ 2189.614445][T14593] vfs_get_tree+0x88/0x270 [ 2189.619371][T14593] do_new_mount+0x24a/0xa40 [ 2189.624380][T14593] __se_sys_mount+0x2d6/0x3c0 [ 2189.629565][T14593] do_syscall_64+0x4c/0xa0 [ 2189.634486][T14593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2189.640891][T14593] [ 2189.640891][T14593] other info that might help us debug this: [ 2189.640891][T14593] [ 2189.651095][T14593] Chain exists of: [ 2189.651095][T14593] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 2189.651095][T14593] [ 2189.664722][T14593] Possible unsafe locking scenario: [ 2189.664722][T14593] [ 2189.672147][T14593] CPU0 CPU1 [ 2189.677491][T14593] ---- ---- [ 2189.682837][T14593] lock(&s->s_dquot.dqio_sem); [ 2189.687671][T14593] lock(&dquot->dq_lock); [ 2189.694588][T14593] lock(&s->s_dquot.dqio_sem); [ 2189.702027][T14593] lock(&ei->i_data_sem/2); [ 2189.706617][T14593] [ 2189.706617][T14593] *** DEADLOCK *** [ 2189.706617][T14593] [ 2189.714775][T14593] 3 locks held by syz.1.17901/14593: [ 2189.720041][T14593] #0: ffff88801f1ac0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 2189.730215][T14593] #1: ffff88804a65bca8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 2189.739602][T14593] #2: ffff88801f1ac208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 2189.749423][T14593] [ 2189.749423][T14593] stack backtrace: [ 2189.755301][T14593] CPU: 0 PID: 14593 Comm: syz.1.17901 Not tainted syzkaller #0 [ 2189.762835][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2189.772890][T14593] Call Trace: [ 2189.776161][T14593] [ 2189.779079][T14593] dump_stack_lvl+0x168/0x230 [ 2189.783783][T14593] ? load_image+0x3b0/0x3b0 [ 2189.788271][T14593] ? show_regs_print_info+0x20/0x20 [ 2189.793546][T14593] ? print_circular_bug+0x12b/0x1a0 [ 2189.798731][T14593] check_noncircular+0x274/0x310 [ 2189.803652][T14593] ? add_chain_block+0x940/0x940 [ 2189.808574][T14593] ? lockdep_lock+0xdc/0x1e0 [ 2189.813159][T14593] ? mark_lock+0x94/0x320 [ 2189.817474][T14593] ? mark_lock+0x94/0x320 [ 2189.821786][T14593] ? _find_first_zero_bit+0xce/0xf0 [ 2189.827050][T14593] __lock_acquire+0x2c33/0x7c60 [ 2189.831894][T14593] ? verify_lock_unused+0x140/0x140 [ 2189.837076][T14593] ? verify_lock_unused+0x140/0x140 [ 2189.842266][T14593] lock_acquire+0x197/0x3f0 [ 2189.846759][T14593] ? ext4_map_blocks+0x32f/0x1b30 [ 2189.851769][T14593] ? deref_stack_reg+0xd0/0x120 [ 2189.856663][T14593] ? __might_sleep+0xf0/0xf0 [ 2189.861261][T14593] ? read_lock_is_recursive+0x10/0x10 [ 2189.866616][T14593] ? percpu_counter_add_batch+0x13b/0x160 [ 2189.872379][T14593] ? rcu_is_watching+0x11/0xa0 [ 2189.877157][T14593] down_read+0x44/0x2e0 [ 2189.881299][T14593] ? ext4_map_blocks+0x32f/0x1b30 [ 2189.886307][T14593] ext4_map_blocks+0x32f/0x1b30 [ 2189.891147][T14593] ? ext4_issue_zeroout+0x250/0x250 [ 2189.896331][T14593] ? __kasan_kmalloc+0xcc/0xf0 [ 2189.901126][T14593] ? __kasan_kmalloc+0xb5/0xf0 [ 2189.905872][T14593] ? find_tree_dqentry+0x55/0xb30 [ 2189.910885][T14593] ? find_tree_dqentry+0x3eb/0xb30 [ 2189.915985][T14593] ? find_tree_dqentry+0x3eb/0xb30 [ 2189.921079][T14593] ? find_tree_dqentry+0x3eb/0xb30 [ 2189.926181][T14593] ? qtree_read_dquot+0x13c/0x680 [ 2189.931207][T14593] ? dquot_acquire+0x152/0x520 [ 2189.935958][T14593] ? ext4_acquire_dquot+0x2d9/0x4a0 [ 2189.941145][T14593] ? dqget+0x778/0xeb0 [ 2189.945202][T14593] ext4_getblk+0x16d/0x630 [ 2189.949607][T14593] ? __se_sys_mount+0x2d6/0x3c0 [ 2189.954449][T14593] ? do_syscall_64+0x4c/0xa0 [ 2189.959024][T14593] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2189.965081][T14593] ? ext4_get_block_unwritten+0x30/0x30 [ 2189.970616][T14593] ext4_bread+0x26/0x180 [ 2189.974846][T14593] ext4_quota_read+0x1b3/0x3a0 [ 2189.979598][T14593] ? ext4_show_options+0x50/0x50 [ 2189.984519][T14593] find_tree_dqentry+0x188/0xb30 [ 2189.989447][T14593] find_tree_dqentry+0x3eb/0xb30 [ 2189.994373][T14593] find_tree_dqentry+0x3eb/0xb30 [ 2189.999301][T14593] find_tree_dqentry+0x3eb/0xb30 [ 2190.004232][T14593] qtree_read_dquot+0x13c/0x680 [ 2190.009070][T14593] ? preempt_count_add+0x8d/0x190 [ 2190.014148][T14593] ? down_read+0x1aa/0x2e0 [ 2190.018549][T14593] v2_read_dquot+0xc0/0x110 [ 2190.023040][T14593] dquot_acquire+0x152/0x520 [ 2190.027618][T14593] ext4_acquire_dquot+0x2d9/0x4a0 [ 2190.032654][T14593] dqget+0x778/0xeb0 [ 2190.036535][T14593] __dquot_initialize+0x328/0xcb0 [ 2190.041545][T14593] ? dquot_initialize+0x20/0x20 [ 2190.046380][T14593] ? ext4_get_projid+0x140/0x140 [ 2190.051312][T14593] ext4_process_orphan+0x54/0x300 [ 2190.056334][T14593] ext4_orphan_cleanup+0xaa9/0x12e0 [ 2190.061523][T14593] ? ext4_orphan_del+0xb90/0xb90 [ 2190.066448][T14593] ? errseq_check_and_advance+0x62/0x120 [ 2190.072070][T14593] ext4_fill_super+0x92f0/0x9a60 [ 2190.077017][T14593] ? ext4_mount+0x40/0x40 [ 2190.081343][T14593] ? set_blocksize+0x1f1/0x370 [ 2190.086190][T14593] ? sb_set_blocksize+0xa5/0xe0 [ 2190.091036][T14593] mount_bdev+0x287/0x3c0 [ 2190.095360][T14593] ? ext4_mount+0x40/0x40 [ 2190.099674][T14593] legacy_get_tree+0xe6/0x180 [ 2190.104334][T14593] ? ext4_errno_to_code+0x160/0x160 [ 2190.109516][T14593] vfs_get_tree+0x88/0x270 [ 2190.113919][T14593] do_new_mount+0x24a/0xa40 [ 2190.118410][T14593] __se_sys_mount+0x2d6/0x3c0 [ 2190.123070][T14593] ? __x64_sys_mount+0xc0/0xc0 [ 2190.127819][T14593] ? lockdep_hardirqs_on+0x94/0x140 [ 2190.133006][T14593] ? __x64_sys_mount+0x1c/0xc0 [ 2190.137754][T14593] do_syscall_64+0x4c/0xa0 [ 2190.142152][T14593] ? clear_bhb_loop+0x30/0x80 [ 2190.146812][T14593] ? clear_bhb_loop+0x30/0x80 [ 2190.151475][T14593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2190.157360][T14593] RIP: 0033:0x7f5fa2c1ee6a [ 2190.161761][T14593] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2190.181349][T14593] RSP: 002b:00007f5fa0e83e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2190.189746][T14593] RAX: ffffffffffffffda RBX: 00007f5fa0e83ef0 RCX: 00007f5fa2c1ee6a [ 2190.197788][T14593] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 00007f5fa0e83eb0 [ 2190.205747][T14593] RBP: 0000200000000040 R08: 00007f5fa0e83ef0 R09: 00000000020008cd [ 2190.213704][T14593] R10: 00000000020008cd R11: 0000000000000246 R12: 0000200000000080 [ 2190.221659][T14593] R13: 00007f5fa0e83eb0 R14: 0000000000000557 R15: 0000200000000200 [ 2190.229709][T14593] [ 2190.233513][T19368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.272651][T14593] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 2190.288837][T14593] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2190.291253][T14598] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 2190.301001][T14593] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.17901: Failed to acquire dquot type 1 [ 2190.315854][T14598] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2190.332633][T14593] EXT4-fs (loop1): 1 truncate cleaned up [ 2190.345928][T14593] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,resuid=0x0000000000000000,nodelalloc,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 2190.519334][T13209] usb 4-1: USB disconnect, device number 28