last executing test programs: 5m49.839106591s ago: executing program 1 (id=107): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, r3) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000700)=""/259, 0x103, &(0x7f0000000400)={0x0}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, &(0x7f0000000280)) 5m48.680660703s ago: executing program 1 (id=110): timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181c82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000001c0)="73479363b5252cd4773a4890213ae2b9e147558b62c3e5ad93e29fd07766c227e164c007a9bd6ffa5b4a4d974112d2d9b92d18422041e10b1325") r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000000}) mount(&(0x7f0000000340)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='btrfs\x00', 0x410, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 5m47.546571065s ago: executing program 1 (id=114): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) userfaultfd(0x801) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) 5m44.447891915s ago: executing program 1 (id=120): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, r3) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000700)=""/259, 0x103, &(0x7f0000000400)={0x0}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can_delroute={0x2c, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "fe93ac5fa2c6d44c"}, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400008c) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, &(0x7f0000000280)) 5m43.499950683s ago: executing program 1 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) close(r1) 5m43.329763997s ago: executing program 1 (id=123): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x9}}, 0x10) 5m28.156646721s ago: executing program 32 (id=123): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x9}}, 0x10) 2m40.9986364s ago: executing program 2 (id=466): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m40.200620926s ago: executing program 2 (id=469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[], 0x14) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) shutdown(r0, 0x1) 2m34.172110523s ago: executing program 2 (id=484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r0, &(0x7f0000000340)="07000000010001", 0x7) 2m32.314209868s ago: executing program 2 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) close(r3) 2m31.253728649s ago: executing program 2 (id=489): msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000000000008209fbe9467848ca4ce075ebd467d9fd0d8f8958c5e40d21e64e98e4d00f7c211afbed070b3357cbab238d86ede9d0e8673f9d6570f3f8a32e8eca103d80240dcd917a31e058f175ca1fdef39e753e9ae784cb91419df064149b5160e6f3bb94e79c890089228a2fc670381abeda8f88aa3a7a79bd09f3caff547f"], 0x4, 0x0) r0 = msgget$private(0x0, 0x420) creat(0x0, 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = dup(0xffffffffffffffff) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRES16=r1, @ANYRES16=r2, @ANYRES32=r3], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x6) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) msgctl$IPC_RMID(r0, 0x0) 2m30.024141043s ago: executing program 2 (id=492): syz_init_net_socket$ax25(0x3, 0x3, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0xc000) r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edbf8aa29a8eeb0bbcefd96b6932ccbd45f07e6a28ba7bf17f79cd24d779cc8af44bdc14cbf1581095048a30e43d0f23c08a94962ae9feb5f2f27cdbb6d6fb1ee379bd19f916712ba3a8c24ea88c661a036b44ce9f4df468e0deacd86693d50f29b11431110386fa19306b4ca0bf3b34cdb3b04ee7824edea802eb01018f8ad63dcf3d0fcef4cbf3430933fd31d83efbc5373e5820cd45470c64021c690cc29fbc3b477576dfafbe9d9782633e54e0f71155ae1f17d36da1eb7f895d833dd23b77f388773fbb0dc92eed05f5aeda31007957e0534d716d0a0c5749490e86dbac57f7f916e84b6978cf701f8dc3dfc8bc4e3259ff577c79d54b77e43aa"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) socket(0x18, 0x5, 0x0) r2 = msgget$private(0x0, 0x23) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000240)=""/38) 2m14.971924685s ago: executing program 33 (id=492): syz_init_net_socket$ax25(0x3, 0x3, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0xc000) r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) socket(0x18, 0x5, 0x0) r2 = msgget$private(0x0, 0x23) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000240)=""/38) 1m12.968174516s ago: executing program 6 (id=638): msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x4, 0x0) r0 = msgget$private(0x0, 0x420) creat(0x0, 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = dup(0xffffffffffffffff) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRES16=r1, @ANYRES16=r2, @ANYRES32=r3], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x6) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) msgctl$IPC_RMID(r0, 0x0) 1m10.580166083s ago: executing program 6 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) 1m8.810584357s ago: executing program 6 (id=650): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x200c, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x8, 0x201, 0x6dc6, 0x7651, 0xa442, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001180)='./file0/../file0/../file0\x00', 0x0) 1m8.457208754s ago: executing program 3 (id=652): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file2\x00', 0x0, &(0x7f0000000580), 0x1, 0xa10, &(0x7f0000001540)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f0008000340000000000800044000000000080005400000000009000200000000000700"], 0x40}}, 0x0) 1m7.666667109s ago: executing program 6 (id=653): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@bh}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r1, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000748000/0x2000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x100) syz_mount_image$exfat(0x0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1880c20, 0x0, 0x3, 0x0, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x5) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) fchown(r0, r5, 0x0) 1m5.672934818s ago: executing program 3 (id=656): msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000000000008209fbe9467848ca4ce075ebd467d9fd0d8f8958c5e40d21e64e98e4d00f7c211afbed070b3357cbab238d86ede9d0e8673f9d6570f3f8a32e8eca103d80240dcd917a31e058f175ca1fdef39e753e9ae784cb91419df064149b5160e6f3bb94e79c890089228a2fc670381abeda8f88aa3a7a79bd09f3caff547f9f0fde6b05e44506d05cabc0418eb89352dd77fe88704b869c1e6b1623f48ea153ffa4dca6af2adc6157788e673bb3da34e3c4ae12b0d1887540c23b7cb46e3a74884aa2660a33bab95f92211100b5fa5919fd1958ff80e81ac35b50f3932af871ee07357c4c3c1ce5da9949ae00e8814e20738392108a8f7cb7"], 0x4, 0x0) r0 = msgget$private(0x0, 0x420) creat(0x0, 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = dup(0xffffffffffffffff) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRES16=r1, @ANYRES16=r2, @ANYRES32=r3], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x6) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) msgctl$IPC_RMID(r0, 0x0) 1m4.54525711s ago: executing program 6 (id=658): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) userfaultfd(0x801) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) 1m3.421895591s ago: executing program 3 (id=659): socket(0xa, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$vim2m(&(0x7f0000000380), 0x100000000, 0x2) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000003c0)="fefc312443f99b5d198a11695c6835652872ae901da3652c9acc564f5ac161d5210131d32b4370949939a49a716c4d163deb611e33c3ed2b5b1876948a2578a1d01a154ba85cd07e7053d1ef3c00f063453ce355abf5df988b31db48186c25e996dc1ab06919ea25ed38e565d11588649e98ef0d34ea060da2749403776e5308278d3223a1060e0a7750bb1c076f2614788dc22b9eae245c4d1e23881c02a9f4b79d551e908d4f1bc6ff21b601662197039c572151128a750ee62b06eab3c9110f60edd0f1e7ac6d860336e9656c603fea1c8933587ea18be81e53907acecc6bff7476a4c1e74024c8f62aea55c98cf58f62bd538f8f9b182c0629e7007cd8c9") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800500140080ff00000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r7 = syz_open_procfs(0x0, 0x0) lseek(r7, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f0000000300)={0x0, 0x0, 0x0}) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x2}, 0x2000000}], 0x1, 0x101, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000300)='./file2\x00', 0x10, &(0x7f0000000440)=ANY=[], 0x3, 0x31d, &(0x7f0000000700)="$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") 1m2.002682159s ago: executing program 6 (id=660): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, 0xffffffffffffffff, 0x0, 0x20}, 0x38) 1m1.891505681s ago: executing program 3 (id=661): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x6, 0x7, 0xfffffffffffffffd}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)={0x20, 0x24, 0x74, {0x74, 0x22, "2bbf1e06f2402ad5af71d0a1b1d943821cf81995c2e6b12284abc5453bee761eb9d955f1993bfff300e3c99c20217e0ddc657f7166b67d184e56a57a021fbfb2ffb3f9d41e1797aa60795cac9203c56cfb7e8afc3b914ccb4a812bf30de9fd754008c5518c752d368463808adcb951e320c3"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, &(0x7f0000000380)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x1, '\x00\x00'}, @global=@item_012={0x0, 0x1, 0x2}, @local=@item_4={0x3, 0x2, 0x9, "a0741e28"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0xba3}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "f6fdbf0c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x1, 0x28, "27fe41715ba58a1ba8e50cfa8c43e9bb202d86dffdc0044a729ec1522668d0822ad03400e115307c"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, 0x0, 0x0, 0x0}, 0x0) 58.33945076s ago: executing program 3 (id=666): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) semget$private(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0x5, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r7, 0x3, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, 0x0, 0x0) 55.069558333s ago: executing program 3 (id=671): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x2000c050) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$eJzs3d9rW+UbAPDnpE33+7sOxvgqIoVdOJlL19YfE7yYl6LDgd7P0mZlNFlGk461Dtwu3I03MgQRB8Nr9d7L4T/gXzHQwZBRFPEmctKTmK3JmnXZmprPB872vjkne8+T9zzv3jcnIQEMrYn0j1zECxHxZRJxsG3faGQ7J9aPW3twdS7dkqjXP/o9iSR7rHl8kv29L6v8PyJ+/jzieG5ju9WV1cXZUqm4lNUna+VLk9WV1RMXyrMLxYXixemZmVNvzEy//dabfYv11bN/fvPhnfdOfXF07esf7x26mcTp2J/ta4/jKVxrr0zERPaa5OP0IwdO9aGxQZJs9wmwJSNZnucjHQMOxkiW9cB/32cRUQeGVCL/YUg15wHNtX2f1sE7xv131xdAG+MfXX9vJHY31kZ715KHVkbpene8D+2nbfz0262b6Rb9ex8CYFPXrkfEydHRjeNfko1/W3eyh2MebcP4B8/PnXT+81qn+U+uNf+JDvOffR1ydys2z//cvT4001U6/3un4/y3ddNqfCSrHWjM+fLJ+QulYjq2/S8ijkV+V1p/3P2cU2t36932tc//0i1tvzkXzM7j3uiuh58zP1ubfZqY292/HvFix/lv0ur/pEP/p6/H2R7bOFK89XK3fZvH/2zVv4t4pWP/51vHJI+/PznZuB4mm1fFRn/cOPJLt/a3O/60//eux/9XtiRs9X9mPGm/X1t98jZu7/672G3fVq//seTjRnkse+zKbK22NBUxlnyw8fHpf5/brDePT+M/dvTx41+n639PRHzSY/w3Dv/w0tbjf7bS+Oc7Xv/d+v/JC3ff//Tbzq3f7rH/X4+k7QZzL+Nfryf4VC8eAAAAAAAADJhcROyPJFdolXO5QmH98x2HY2+uVKnWjp+vLF+cj8Z3Zccjn2ve6T7Y9nmIqezzsM369CP1mYg4FBFfjexp1AtzldL8dgcPAAAAAAAAAAAAAAAAAAAAA2Jfl+//p34d2e6zA545P/kNw2vT/O/HLz0BA8n//zC85D8ML/kPw0v+w/CS/zC85D8ML/kPw0v+AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dPXMm3eprD67OpfX5yyvLi5XLJ+aL1cVCeXmuMFdZulRYqFQWSsXCXKW82b9XqlQuTU3H8pXJWrFam6yurJ4rV5Yv1s5dKH9/IKKYfy5RAQAAAAAAAAAAAAAAAAAAwM5SXVldnC2ViksKjcKuGIjT2EGF0cE4DYU+FzoMFmPbMEABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQET8EwAA//+ndDnV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x115) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 46.825697773s ago: executing program 34 (id=660): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, 0xffffffffffffffff, 0x0, 0x20}, 0x38) 38.406915276s ago: executing program 35 (id=671): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x2000c050) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x115) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 16.209390986s ago: executing program 0 (id=721): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) userfaultfd(0x801) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) 14.197016615s ago: executing program 0 (id=724): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) pivot_root(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13.013014848s ago: executing program 5 (id=727): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@bh}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r1, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000748000/0x2000)=nil) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) r4 = syz_mount_image$exfat(0x0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1880c20, 0x0, 0x3, 0x0, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x5) statx(r4, &(0x7f0000000280)='./file1\x00', 0x2000, 0x1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r6) 12.93703476s ago: executing program 0 (id=728): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file2\x00', 0x0, &(0x7f0000000580), 0x1, 0xa10, &(0x7f0000001540)="$eJzs3U2MG1cdAPBn73rTfJQ4JaFLGtqEQls+uttslvARQVM1F6Km6q1SxSVK0xKRBkQqQasekpy40aoKVz7EqZcKEBK9oKgnLpVoJC49FQ4ciIJUiQMUkkXrfc/r/cfW2Jvser3+/aTZ55n/s98b73g8npn3XgLGVr31d35+upbS5XfePPaPh/6+dXHJ4+0czdbfyY65Rkqplucnw+t9OLGU3vjotVPd0lqaa/0t8+np6+3nbk8pXUj705XUTHsvX33jvbmnTlw8funA+28dubY2aw8AAOPlmStH5vf89c/37fr47fuPpi3t5eX4vJnnd+Tj/qP5wL8c/9fTyvlax9RpKuSbzFM95Jvokq+znEbIN9mj/Knwuo0e+bZUlD/RsazbesMoK9txM9XqMyvm6/WZmaXf5Kn1u36qNnPuzNkXzg+posAd968HUkr7TSbTOE4LO4e9BwJYEq8X3uJCPLNwe9qvNtlf+defqHd/PtwB6739K3+0yv/1RXsc7pzNujWV9Sqfox15Pl5HiPcvDfr5L68Xr0c0+qxnr+sIo3J9oVc9J9a5HqvVq/5xu9isvpnT8j58K8Q7Pz/xfzoq/2Ogu387/28yje20MOwdELBhxfvmFrISj/f1xfiWivhdFfGtFfFtFfHtFXEYZ797+afp9dry7/z4m37Q82HlPNvdOf3EgPWJ5yMHLT/e9zuo2y0/3k8MG9kfTj57+mvPP3d16f7/2uL237rl/2be3vfnfM382bqSN/dyvjCeV1++9/+ZFeXUe+S7J9Tn7i75W493r8xX2738OqljP3NLPaZXPm9nr3z7VuZrhnxb83RXqG88PtkWnleOP8p+tbxfk2F9G2E9pkI9yn5lV05jPWA1yvbY6/7/sn1Op0bthTNnTz+W58t2+qeJxpbF5QfXud7A7eu3/c90Wtn+Z0d7eaPeuV/Yuby81rlfaIblcz2WH8rz5XvuuxNbW8tnTn3/7PN3euVhzJ1/5dXvnTx79vQPPfDAAw/aD4a9ZwLW2uzLL/1g9vwrrz565qWTL55+8fS5Q4cPH5qbO/z1Q/OzreP62c6je2AzWf7SH3ZNAAAAAAAAAAAAgH796Pixq39596sfLLX/X27/V9r/lzt/S/v/n4T2/7GdfGkHX9oB7uoSb+UJHaxOhXyNPH0y1Hd3KGdPeN6nctoexy+3/y/FxX5dS33uDctj/70lX+hO4Jb+UqZCHyRxvMDP5vRSTn+VYIhqW7svzmlV/9ZlWy/9U+iXYjSV/1vZGko/JqX9d69+ncr+f9c61JE7bz2aEw57HYHu/qn/b5NpbKeFBaN4ABvDsMf/LOc9S3ruj9++a3Eq2a4/sXJ/Gfsvhdux0cefVP7mGv+zPf5d3/u/MGJec3Xl/ufn1z7oKDbt7bf8uP6lH+jdg5X/cS6/rM3Dqb/yF34Zyo8XhPr031D+tj7Lv2X9962u/P/l8svb9siD/Za/VONafWU94nnjcv0vnjcuboT1L317Drz+qxyo8WYuH8bZqIwzO6hRGf+3l3gfxlfyfNkRlvsc4ngng9a/3F9Rvgf2hNevVXy/bfbxfy+uY12G4Rs5rfo8lPF/y/bY7DJf75hvdHlvN+u+BkbVh67/mUxjOy0sLKztCa0KQy2cob//w/6dMOzyh/3+V4nj/8Zj+Dj+b4zH8X9jPI7/G+NxfL0Yj+P/xvczjv8b4/eG143jA09XxD9dEd9bEb+vIr6vIv6ZiviBivj9FfEHKuL3VMQfrIh/riL++Yr4QxXxRyriX6iIb3alPcq4rj+Ms9g+z+cfxke5/tPr87+7Ig6Mrp+9ffDJ5377neZS+/+p9vmQch3vaJ7fn387/zjPx+veqWN+MfZunv9biG/08x0wTmL/GfH7/eGKODC6yn1ePt8whmrde+zpt9+qXsf5jJYv5vRLOf1yTh/N6UxOZ3N6MKdz61Q/1saTv/n9kddry7/3d4Z4v/eTx/ZAsZ+oQ33WJ54fGPR+9tiP36But/xVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmnrr7/z8dC2ly++8eezZE2dmF5c83s7RbP2d7JhrtJ+X0mM5ncjpL/KDGx+9dqozvZnTWppLtVRrL09PX2+XtD2ldCHtT1dSM+29fPWN9+aeOnHx+KUD77915NravQMAAACw+f0/AAD//8MLDok=") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x6, 0x8, 0xa, 'syz0\x00', 0x75f}, 0x1, [0x0, 0x5, 0x7, 0x8000, 0x9, 0x8, 0x7ff, 0xfe, 0x5, 0x47f1, 0x2, 0x8, 0x5, 0x7, 0x1, 0x8, 0x0, 0x8000000000000001, 0x81, 0x1, 0x8000000000000000, 0xfff, 0x8, 0x1, 0xbddb, 0xb74, 0xe, 0x14, 0x567, 0x9, 0x0, 0x5, 0xcc, 0x81, 0xea, 0x80000000, 0x8687, 0x0, 0x3, 0x2e, 0x1, 0xab91, 0x2d5, 0xacc5f34, 0x8e, 0x6, 0x800, 0x0, 0x5, 0x2, 0x5, 0x3, 0x3, 0x100000000, 0x9a, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x8, 0xfffffffffffffff2, 0x5, 0x1, 0x0, 0x7fffffff, 0xc, 0x7, 0xb, 0xfffffffffffffffd, 0x2, 0xcb5c, 0x2, 0x2, 0x8, 0x1, 0x80, 0xb1, 0x5, 0x26, 0x3, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x100000000, 0x9, 0x1, 0x2, 0xa9, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x4, 0x0, 0x8, 0x12b, 0x10001, 0x1, 0x6, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x3, 0xfffffffffffffffb, 0x271a, 0x0, 0x8, 0xff, 0x7, 0x4000000000000008, 0xa, 0x33, 0x2, 0x1bde, 0xfff, 0x3, 0x38000000000, 0xfffffffffffffe2d, 0x1, 0x5, 0x66fd]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f0008000340000000000800044000000000080005400000000009000200000000000700"], 0x40}}, 0x0) 10.571477785s ago: executing program 5 (id=729): msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000000000008209fbe9467848ca4ce075ebd467d9fd0d8f8958c5e40d21e64e98e4d00f7c211afbed070b3357cbab238d86ede9d0e8673f9d6570f3f8a32e8eca103d80240dcd917a31e058f175ca1fdef39e753e9ae784cb91419df064149b5160e6f3bb94e79c890089228a2fc670381abeda8f88aa3a7a79bd09f3caff547f9f0fde6b05e44506d05cabc0418eb89352dd77fe88704b869c1e6b1623f48ea153ffa4dca6af2adc6157788e673bb3da34e3c4ae12b0d1887540c23b7cb46e3a74884aa2660a33bab95f92211100b5fa5919fd1958ff80e81ac35b50f3932af871ee"], 0x4, 0x0) r0 = msgget$private(0x0, 0x420) r1 = creat(0x0, 0x24) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = dup(0xffffffffffffffff) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r4, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES16=r2, @ANYRES16=r3, @ANYRES32=r4], 0xfffffeb7) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x6) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000180)=""/81) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$nl_route(r9, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000680010002abd7000ffdbdf250a0000000800000008000100010080000800010000000000060007000a00000008000100010000000100088008000300ac1414aa0800010002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4001) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) msgctl$IPC_RMID(r0, 0x0) 10.570624285s ago: executing program 4 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmmsg(r5, &(0x7f0000004dc0)=[{{&(0x7f00000003c0)=@xdp={0x2c, 0x4, 0x0, 0x15}, 0x80, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00') 10.290772251s ago: executing program 0 (id=731): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x6c, 0xff, 0x4, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0xff, 0x1, 0x0, 0x93}, 0xe) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500)={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x14000000}}, [0xfff, 0x5, 0x200, 0x50820bc5, 0x5, 0x2, 0x2, 0x23, 0x268130c7, 0x8, 0x3, 0x3, 0xe5, 0xb, 0x6]}, &(0x7f0000000040)=0x100) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x29943, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r7, 0x400454cc, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee00) close_range(r6, 0xffffffffffffffff, 0x0) 9.269766421s ago: executing program 4 (id=732): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) userfaultfd(0x801) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) 7.916773807s ago: executing program 5 (id=733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$RTC_PIE_ON(r6, 0x7005) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x300, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x74472084e5f0bdb2}, 0x4000014) 6.839766758s ago: executing program 4 (id=734): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@bh}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r1, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x100) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) r4 = syz_mount_image$exfat(0x0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1880c20, 0x0, 0x3, 0x0, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x5) statx(r4, &(0x7f0000000280)='./file1\x00', 0x2000, 0x1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r6) 4.759175948s ago: executing program 4 (id=735): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 3.426370974s ago: executing program 4 (id=736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.231600218s ago: executing program 5 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 3.027463202s ago: executing program 0 (id=738): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r5, 0xcc6f}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(r1, 0x3, &(0x7f0000000180)={0x108, 0x8000000000000001}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) write(r7, 0x0, 0x0) 2.020713862s ago: executing program 5 (id=739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getrlimit(0x9, &(0x7f0000000080)) r3 = fanotify_init(0x40, 0x80000) fanotify_mark(r3, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x0) syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000015c0)={[{@acl}, {@commit={'commit', 0x3d, 0x7f}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x1}}, {@dir_resv_level}, {@data_writeback}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") 1.690974957s ago: executing program 4 (id=740): socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$key(0xf, 0x3, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 1.477216701s ago: executing program 0 (id=741): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20004040) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$ocfs2(&(0x7f0000000600), &(0x7f0000004780)='./file0\x00', 0x10000, &(0x7f00000006c0)={[{@usrquota}, {@coherency_full}, {@err_ro}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@localalloc}]}, 0x1, 0x4710, &(0x7f0000008f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 0s ago: executing program 5 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmmsg(r5, &(0x7f0000004dc0)=[{{&(0x7f00000003c0)=@xdp={0x2c, 0x4, 0x0, 0x15}, 0x80, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00') kernel console output (not intermixed with test programs): handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.830071][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 181.912557][ T5039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.184215][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 182.451603][ T5039] device hsr_slave_0 entered promiscuous mode [ 182.497032][ T5039] device hsr_slave_1 entered promiscuous mode [ 182.520143][ T5039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.692719][ T5039] Cannot create hsr debugfs directory [ 183.551830][ T46] device hsr_slave_0 left promiscuous mode [ 183.765641][ T46] device hsr_slave_1 left promiscuous mode [ 183.852687][ T5254] Device name cannot be null; rc = [-22] [ 183.875795][ T5254] loop2: detected capacity change from 0 to 64 [ 183.913980][ T5254] hfs: get root inode failed [ 184.668279][ T5257] loop0: detected capacity change from 0 to 512 [ 184.816869][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.869320][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.916582][ T5257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.925734][ T5257] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.937615][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.845365][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.928442][ T46] device bridge_slave_1 left promiscuous mode [ 185.936476][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.001848][ T46] device bridge_slave_0 left promiscuous mode [ 186.008222][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.238445][ T5277] loop2: detected capacity change from 0 to 512 [ 186.413668][ T5277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 186.422800][ T5277] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.513031][ T26] audit: type=1804 audit(1757171390.574:8): pid=5280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.216" name="/newroot/49/file1/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 186.535833][ T5280] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 186.735530][ T46] device veth1_macvtap left promiscuous mode [ 186.752287][ T46] device veth0_macvtap left promiscuous mode [ 186.758483][ T46] device veth1_vlan left promiscuous mode [ 186.778907][ T4347] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.787266][ T46] device veth0_vlan left promiscuous mode [ 186.970938][ T4347] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.998979][ T4347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.005814][ T4347] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 187.038885][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.052049][ T4347] usb 4-1: config 0 descriptor?? [ 187.769682][ T4347] hid-alps 0003:044E:1215.0003: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.3-1/input0 [ 187.969012][ T4384] usb 4-1: USB disconnect, device number 7 [ 187.979601][ T46] team0 (unregistering): Port device team_slave_1 removed [ 188.036798][ T46] team0 (unregistering): Port device team_slave_0 removed [ 188.077718][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.120230][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.601299][ T46] bond0 (unregistering): Released all slaves [ 188.606114][ T5292] loop3: detected capacity change from 0 to 1024 [ 188.683236][ T5292] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 189.200543][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 189.833774][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 190.276084][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 191.272425][ T5330] Device name cannot be null; rc = [-22] [ 191.296733][ T5330] loop4: detected capacity change from 0 to 64 [ 191.659677][ T5330] hfs: get root inode failed [ 191.714846][ T5039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.849903][ T5039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.011942][ T5039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.054864][ T5039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.319011][ T129] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 192.385974][ T5039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.425270][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.443593][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.477218][ T5039] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.502483][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.512844][ T129] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.531132][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.547343][ T129] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.562089][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.569348][ T4665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.584388][ T129] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 192.627526][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.087100][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.095462][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.134053][ T129] usb 5-1: config 0 descriptor?? [ 193.143717][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.152613][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.159779][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.188034][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.198364][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.264705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.287801][ T5361] loop3: detected capacity change from 0 to 2048 [ 193.289907][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.338745][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.365123][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.388438][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.389974][ T5361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 193.398107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.423968][ T5039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.435930][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.450189][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.477668][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.537591][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.557924][ T129] hid-alps 0003:044E:1215.0004: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.4-1/input0 [ 193.716753][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 193.768743][ T129] usb 5-1: USB disconnect, device number 3 [ 193.960456][ T5373] fido_id[5373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 193.997255][ T5377] loop3: detected capacity change from 0 to 1024 [ 194.068217][ T5379] loop0: detected capacity change from 0 to 1024 [ 194.141185][ T5377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.252394][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 195.853258][ T5393] hfsplus: xattr searching failed [ 196.304186][ T26] audit: type=1800 audit(1757171400.364:9): pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.234" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 196.533653][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.569817][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.635323][ T5039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.695492][ T5409] Device name cannot be null; rc = [-22] [ 196.766992][ T5413] loop2: detected capacity change from 0 to 64 [ 196.801495][ T5413] hfs: get root inode failed [ 197.200071][ T5409] Can't find ip_set type ha [ 198.841391][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.858422][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.945386][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.966233][ T5436] loop4: detected capacity change from 0 to 2048 [ 198.971576][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.006829][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.035911][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.106949][ T5039] device veth0_vlan entered promiscuous mode [ 199.140400][ T5436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.161656][ T5039] device veth1_vlan entered promiscuous mode [ 199.469695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.483267][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.493051][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.136657][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 200.149493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.167491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.183981][ T5039] device veth0_macvtap entered promiscuous mode [ 200.232846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.262057][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.488702][ T5457] Bluetooth: MGMT ver 1.22 [ 200.511245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.067503][ T5039] device veth1_macvtap entered promiscuous mode [ 201.087110][ T5458] loop4: detected capacity change from 0 to 1024 [ 201.105528][ T5458] ======================================================= [ 201.105528][ T5458] WARNING: The mand mount option has been deprecated and [ 201.105528][ T5458] and is ignored by this kernel. Remove the mand [ 201.105528][ T5458] option from the mount to silence this warning. [ 201.105528][ T5458] ======================================================= [ 201.158067][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.169020][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.178930][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.189509][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.199420][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.219557][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.239783][ T5458] EXT4-fs: Ignoring removed bh option [ 201.245856][ T5458] EXT4-fs: Ignoring removed nobh option [ 201.263537][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.283528][ T5458] EXT4-fs: Ignoring removed bh option [ 201.296832][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.384209][ T5458] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.417645][ T5039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.483593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.586393][ T5468] Device name cannot be null; rc = [-22] [ 201.658585][ T5469] loop0: detected capacity change from 0 to 64 [ 202.546735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.636100][ T5469] hfs: get root inode failed [ 202.778043][ T5468] Can't find ip_set type ha [ 203.250297][ T5458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 203.310905][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.362805][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.434768][ T5483] loop0: detected capacity change from 0 to 1024 [ 203.448874][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.458743][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.558927][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.607610][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.675762][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.736803][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.788451][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.850584][ T5039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.923484][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 203.943260][ T5039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.009156][ T5039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.158953][ T5039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.276998][ T5039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.306326][ T5490] hfsplus: xattr searching failed [ 204.326307][ T5492] fuse: Bad value for 'fd' [ 204.385189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.408114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.427486][ T26] audit: type=1800 audit(1757171408.484:10): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.250" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 204.880233][ T4726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.905544][ T4726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.937813][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.022123][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.039853][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.063825][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.575276][ T5517] delete_channel: no stack [ 206.991608][ T5521] loop4: detected capacity change from 0 to 32768 [ 207.000510][ T5521] (syz.4.258,5521,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 207.010483][ T5521] (syz.4.258,5521,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 207.047476][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 207.047510][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 207.053588][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 207.053620][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 207.364624][ T4410] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.428671][ T5525] Device name cannot be null; rc = [-22] [ 207.502450][ T5526] loop2: detected capacity change from 0 to 64 [ 207.598368][ T5526] hfs: get root inode failed [ 207.944450][ T4516] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.056569][ T5525] Can't find ip_set type ha [ 210.450714][ T5553] loop5: detected capacity change from 0 to 1024 [ 210.499833][ T5553] EXT4-fs: Ignoring removed bh option [ 210.505372][ T5553] EXT4-fs: Ignoring removed nobh option [ 210.538954][ T5553] EXT4-fs: Ignoring removed bh option [ 210.577662][ T5553] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.678405][ T5553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 212.767277][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 213.649556][ T5579] loop3: detected capacity change from 0 to 32768 [ 213.669112][ T5579] (syz.3.271,5579,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 213.678708][ T5579] (syz.3.271,5579,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 214.075703][ T5587] Device name cannot be null; rc = [-22] [ 214.147911][ T5588] loop0: detected capacity change from 0 to 64 [ 214.326132][ T5586] delete_channel: no stack [ 214.399616][ T5588] hfs: get root inode failed [ 214.792336][ T5587] Can't find ip_set type hash: [ 214.822893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.023753][ T5592] fuse: Bad value for 'fd' [ 216.031352][ T5601] loop0: detected capacity change from 0 to 1024 [ 218.095973][ T5613] loop2: detected capacity change from 0 to 1024 [ 218.218343][ T5613] EXT4-fs: Ignoring removed bh option [ 218.291111][ T5613] EXT4-fs: Ignoring removed nobh option [ 218.337367][ T5613] EXT4-fs: Ignoring removed bh option [ 218.593175][ T5613] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.854226][ T5600] hfsplus: xattr searching failed [ 218.861251][ T26] audit: type=1800 audit(1757171422.924:11): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.275" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 219.193530][ T5613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.740793][ T5633] delete_channel: no stack [ 220.428434][ T5640] loop3: detected capacity change from 0 to 32768 [ 220.437718][ T5640] (syz.3.283,5640,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 220.447366][ T5640] (syz.3.283,5640,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 220.461937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.247093][ T4516] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.520098][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 221.835216][ T5652] fuse: Bad value for 'fd' [ 222.150750][ T5655] Device name cannot be null; rc = [-22] [ 222.958997][ T5656] loop2: detected capacity change from 0 to 64 [ 222.968723][ T5656] hfs: get root inode failed [ 223.247341][ T4517] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.173524][ T5666] loop2: detected capacity change from 0 to 1024 [ 224.259865][ T5666] EXT4-fs: Ignoring removed bh option [ 224.265427][ T5666] EXT4-fs: Ignoring removed nobh option [ 224.428302][ T5666] EXT4-fs: Ignoring removed bh option [ 224.667725][ T5666] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.605431][ T5666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 225.979579][ T5686] loop4: detected capacity change from 0 to 1024 [ 227.225372][ T5686] EXT4-fs: Ignoring removed bh option [ 227.279041][ T5686] EXT4-fs: Ignoring removed nobh option [ 227.328261][ T5686] EXT4-fs: Ignoring removed bh option [ 227.541741][ T5686] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.564701][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 227.584723][ T5697] delete_channel: no stack [ 227.675942][ T5686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 228.174607][ T5703] loop3: detected capacity change from 0 to 32768 [ 228.182318][ T5703] (syz.3.297,5703,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 228.191907][ T5703] (syz.3.297,5703,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 228.279812][ T4517] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.726636][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 231.025319][ T5725] loop2: detected capacity change from 0 to 1024 [ 231.423847][ T5736] Device name cannot be null; rc = [-22] [ 231.622925][ T5735] loop4: detected capacity change from 0 to 64 [ 232.035005][ T5724] loop3: detected capacity change from 0 to 2048 [ 232.107046][ T5735] hfs: get root inode failed [ 232.176813][ T5724] NILFS (loop3): invalid segment: Inconsistency found [ 232.238962][ T5736] Can't find ip_set type hash: [ 232.378968][ T5724] NILFS (loop3): trying rollback from an earlier position [ 232.581557][ T5724] NILFS (loop3): recovery complete [ 233.018932][ T5748] tmpfs: Unknown parameter 'quota' [ 233.133660][ T5747] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.742807][ T5756] hfsplus: xattr searching failed [ 233.858978][ T26] audit: type=1800 audit(1757171437.904:12): pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.303" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 234.431233][ T5753] fuse: Bad value for 'fd' [ 234.994499][ T5766] delete_channel: no stack [ 236.069279][ T5776] loop0: detected capacity change from 0 to 32768 [ 236.077896][ T5776] (syz.0.312,5776,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 236.087518][ T5776] (syz.0.312,5776,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 238.403004][ T5799] Device name cannot be null; rc = [-22] [ 238.474687][ T5800] loop4: detected capacity change from 0 to 64 [ 239.088424][ T5800] hfs: get root inode failed [ 239.176102][ T4410] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.268583][ T5799] Can't find ip_set type hash:i [ 239.620177][ T5809] tmpfs: Unknown parameter 'quota' [ 239.907689][ T5812] loop4: detected capacity change from 0 to 1024 [ 239.986823][ T5812] EXT4-fs: Ignoring removed bh option [ 240.061705][ T5812] EXT4-fs: Ignoring removed nobh option [ 240.189265][ T5812] EXT4-fs: Ignoring removed bh option [ 240.387223][ T5812] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.567154][ T5812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 240.858260][ T5826] binder: BC_ATTEMPT_ACQUIRE not supported [ 240.864469][ T5826] binder: 5818:5826 ioctl c0306201 2000000001c0 returned -22 [ 241.036332][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 241.411077][ T5829] loop0: detected capacity change from 0 to 32768 [ 241.418665][ T5829] (syz.0.325,5829,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 241.428444][ T5829] (syz.0.325,5829,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 241.437815][ T5818] delete_channel: no stack [ 241.625654][ T4516] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.976694][ T5835] loop2: detected capacity change from 0 to 1024 [ 243.726995][ T5850] hfsplus: xattr searching failed [ 243.734579][ T5643] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 243.759476][ T26] audit: type=1800 audit(1757171447.824:13): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.327" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 243.910095][ T5856] loop5: detected capacity change from 0 to 1024 [ 244.021989][ T5856] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 244.048878][ T5643] usb 5-1: Using ep0 maxpacket: 16 [ 244.056651][ T5643] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.078864][ T5643] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.144703][ T5860] Device name cannot be null; rc = [-22] [ 244.217496][ T5862] loop0: detected capacity change from 0 to 64 [ 244.952625][ T5862] hfs: get root inode failed [ 245.147179][ T5643] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.525723][ T5643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.637166][ T5643] usb 5-1: Product: syz [ 245.658982][ T5643] usb 5-1: Manufacturer: syz [ 245.681012][ T5643] usb 5-1: SerialNumber: syz [ 245.720033][ T5643] usb 5-1: can't set config #1, error -71 [ 245.727935][ T5860] Can't find ip_set type hash:i [ 245.863260][ T5643] usb 5-1: USB disconnect, device number 4 [ 246.459017][ T5872] tmpfs: Unknown parameter 'quota' [ 247.243720][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 248.724936][ T5888] loop4: detected capacity change from 0 to 1024 [ 248.875558][ T5893] fuse: Bad value for 'fd' [ 249.707648][ T5888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 251.766296][ T5915] delete_channel: no stack [ 252.724219][ T5918] loop5: detected capacity change from 0 to 1024 [ 252.747529][ T5918] EXT4-fs: Ignoring removed bh option [ 252.771507][ T5918] EXT4-fs: Ignoring removed nobh option [ 252.778021][ T5918] EXT4-fs: Ignoring removed bh option [ 252.839586][ T5918] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.117970][ T5918] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 253.184575][ T5931] Device name cannot be null; rc = [-22] [ 253.255892][ T5932] loop3: detected capacity change from 0 to 64 [ 254.063822][ T5932] hfs: get root inode failed [ 254.265490][ T4341] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 254.273382][ T5643] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 254.762366][ T5931] Can't find ip_set type hash:i [ 254.908657][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 254.929142][ T5643] usb 1-1: Using ep0 maxpacket: 16 [ 254.936964][ T4341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.950113][ T5643] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.997963][ T4341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.028862][ T5643] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.058363][ T4341] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 255.098386][ T5643] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.158922][ T4341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.197685][ T5643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.369748][ T4341] usb 3-1: config 0 descriptor?? [ 255.387944][ T5643] usb 1-1: Product: syz [ 255.405903][ T5643] usb 1-1: Manufacturer: syz [ 255.423040][ T5643] usb 1-1: SerialNumber: syz [ 256.978751][ T5643] usb 1-1: 0:2 : does not exist [ 257.016037][ T5643] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 257.167099][ T5643] usb 1-1: USB disconnect, device number 6 [ 257.268226][ T4341] usbhid 3-1:0.0: can't add hid device: -71 [ 257.280076][ T4341] usbhid: probe of 3-1:0.0 failed with error -71 [ 257.316219][ T4341] usb 3-1: USB disconnect, device number 3 [ 257.475077][ T5957] binder: BC_ATTEMPT_ACQUIRE not supported [ 257.481062][ T5957] binder: 5952:5957 ioctl c0306201 2000000001c0 returned -22 [ 257.493799][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.027899][ T5952] delete_channel: no stack [ 259.607644][ T5990] loop3: detected capacity change from 0 to 1024 [ 259.650934][ T5990] EXT4-fs: Ignoring removed bh option [ 259.687917][ T5990] EXT4-fs: Ignoring removed nobh option [ 259.717630][ T5990] EXT4-fs: Ignoring removed bh option [ 259.748349][ T5990] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.840617][ T5991] delete_channel: no stack [ 259.850521][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 259.862488][ T5990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 259.885653][ T5988] loop2: detected capacity change from 0 to 2048 [ 261.243496][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.250469][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.290894][ T5988] NILFS (loop2): invalid segment: Inconsistency found [ 261.322050][ T5988] NILFS (loop2): trying rollback from an earlier position [ 261.437432][ T5988] NILFS (loop2): recovery complete [ 261.656516][ T6003] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.693145][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 263.696305][ T6011] loop5: detected capacity change from 0 to 1024 [ 263.757568][ T6011] EXT4-fs: Ignoring removed bh option [ 263.792242][ T6011] EXT4-fs: Ignoring removed nobh option [ 263.841211][ T6011] EXT4-fs: Ignoring removed bh option [ 264.018099][ T6011] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 266.512379][ T6011] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 268.953635][ T6043] loop5: detected capacity change from 0 to 512 [ 269.639677][ T6043] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 269.649473][ T6043] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.959030][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 272.325001][ T6066] loop2: detected capacity change from 0 to 2048 [ 272.437284][ T6066] NILFS (loop2): invalid segment: Inconsistency found [ 272.476193][ T6066] NILFS (loop2): trying rollback from an earlier position [ 273.355162][ T6066] NILFS (loop2): recovery complete [ 273.456617][ T6077] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.839175][ T4341] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 274.050015][ T4341] usb 1-1: Using ep0 maxpacket: 16 [ 274.057857][ T4341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.066351][ T6083] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 274.132760][ T4341] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.154437][ T6085] loop3: detected capacity change from 0 to 1024 [ 274.184733][ T4341] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.215613][ T6085] EXT4-fs: Ignoring removed bh option [ 274.244422][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.269026][ T6085] EXT4-fs: Ignoring removed nobh option [ 274.274781][ T4341] usb 1-1: Product: syz [ 274.300043][ T4341] usb 1-1: Manufacturer: syz [ 274.306909][ T6085] EXT4-fs: Ignoring removed bh option [ 274.350022][ T4341] usb 1-1: SerialNumber: syz [ 274.386843][ T6085] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.583882][ T4341] usb 1-1: 0:2 : does not exist [ 274.630576][ T4341] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 274.699903][ T4341] usb 1-1: USB disconnect, device number 7 [ 274.744124][ T6085] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 275.415407][ T6085] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.382: Allocating blocks 497-513 which overlap fs metadata [ 275.532099][ T4410] udevd[4410]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.567068][ T6085] EXT4-fs (loop3): pa ffff8880724cbc40: logic 256, phys. 385, len 8 [ 275.575444][ T6085] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 276.680389][ T6108] loop0: detected capacity change from 0 to 1024 [ 276.687674][ T6108] EXT4-fs: Ignoring removed bh option [ 276.828967][ T6108] EXT4-fs: Ignoring removed nobh option [ 276.834938][ T6108] EXT4-fs: Ignoring removed bh option [ 277.183899][ T6113] loop2: detected capacity change from 0 to 512 [ 277.258680][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 277.771556][ T6108] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.901664][ T6113] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 277.910884][ T6113] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.993335][ T6122] loop3: detected capacity change from 0 to 1024 [ 278.024461][ T6122] EXT4-fs: Ignoring removed bh option [ 278.040152][ T6122] EXT4-fs: Ignoring removed nobh option [ 278.047936][ T6122] EXT4-fs: Ignoring removed bh option [ 278.061417][ T6125] loop5: detected capacity change from 0 to 1024 [ 278.079932][ T6122] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.323316][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 278.826740][ T6108] EXT4-fs: failed to create workqueue [ 278.839850][ T6122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 278.849213][ T6108] EXT4-fs (loop0): mount failed [ 280.488740][ T6141] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.387: Allocating blocks 497-513 which overlap fs metadata [ 280.896750][ T26] audit: type=1800 audit(1757171484.954:14): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.387" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 281.092614][ T6141] EXT4-fs (loop3): pa ffff8880573a4e00: logic 256, phys. 385, len 8 [ 281.100750][ T6141] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 281.440521][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 281.680169][ T4318] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 283.285261][ T4318] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.330847][ T4318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 283.395307][ T4318] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 283.412084][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.422996][ T4318] usb 1-1: config 0 descriptor?? [ 283.886727][ T4318] hid-alps 0003:044E:1215.0005: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 283.987401][ T6177] loop3: detected capacity change from 0 to 1024 [ 284.413064][ T6178] loop2: detected capacity change from 0 to 512 [ 284.495558][ T4318] usb 1-1: USB disconnect, device number 8 [ 284.531899][ T6178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 284.541847][ T6178] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.563210][ T6177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 285.478632][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 285.731964][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 285.801203][ T6179] fido_id[6179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 285.814482][ T6195] loop3: detected capacity change from 0 to 1024 [ 285.863324][ T6195] EXT4-fs: Ignoring removed bh option [ 285.873952][ T6195] EXT4-fs: Ignoring removed nobh option [ 286.952400][ T6195] EXT4-fs: Ignoring removed bh option [ 286.971024][ T6195] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 287.050251][ T6195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.133901][ T6201] loop2: detected capacity change from 0 to 1024 [ 287.354915][ T6203] loop0: detected capacity change from 0 to 1024 [ 287.370503][ T6201] EXT4-fs: Ignoring removed bh option [ 288.639001][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 288.648078][ T6201] EXT4-fs: Ignoring removed nobh option [ 288.687066][ T6201] EXT4-fs: Ignoring removed bh option [ 288.729182][ T6201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.080940][ T6201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 289.093009][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 290.196199][ T6223] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.404: Allocating blocks 497-513 which overlap fs metadata [ 290.655005][ T6223] EXT4-fs (loop2): pa ffff8880724cb2a0: logic 256, phys. 385, len 8 [ 290.663118][ T6223] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 292.662163][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 292.848865][ T6235] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 293.078255][ T6235] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.159289][ T6235] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.221845][ T6235] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 293.243280][ T6246] loop5: detected capacity change from 0 to 1024 [ 293.259369][ T6235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.400847][ T6235] usb 5-1: config 0 descriptor?? [ 293.455631][ T6246] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 294.685748][ T6235] hid-alps 0003:044E:1215.0006: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.4-1/input0 [ 295.235822][ T4341] usb 5-1: USB disconnect, device number 5 [ 295.249511][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 295.467155][ T6263] fido_id[6263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 295.706741][ T129] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 295.835719][ T6274] loop5: detected capacity change from 0 to 2048 [ 295.879875][ T6274] NILFS (loop5): invalid segment: Inconsistency found [ 295.889746][ T6274] NILFS (loop5): trying rollback from an earlier position [ 295.900498][ T129] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 295.921844][ T129] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 295.970907][ T129] usb 1-1: config 8 has no interface number 0 [ 295.993919][ T129] usb 1-1: config 8 interface 223 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 296.019243][ T6274] NILFS (loop5): recovery complete [ 296.034994][ T129] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.068950][ T129] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 296.078073][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.095477][ T6282] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.140668][ T129] usb 1-1: Product: syz [ 296.144918][ T129] usb 1-1: Manufacturer: syz [ 296.158829][ T129] usb 1-1: SerialNumber: syz [ 296.461817][ T129] usb 1-1: USB disconnect, device number 9 [ 297.208283][ T6294] loop4: detected capacity change from 0 to 1024 [ 297.503048][ T6294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 299.227858][ T6310] loop5: detected capacity change from 0 to 512 [ 299.271053][ T6310] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 299.280175][ T6310] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.327774][ T26] audit: type=1804 audit(1757171503.384:15): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.422" name="/newroot/37/file1/file0/file0" dev="loop5" ino=13 res=1 errno=0 [ 299.328314][ T6310] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 299.404500][ T6314] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 300.804746][ T6333] loop3: detected capacity change from 0 to 1024 [ 300.966317][ T6334] loop0: detected capacity change from 0 to 512 [ 302.567294][ T6333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 306.351347][ T6334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 306.360565][ T6334] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.520649][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 306.528253][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 306.557748][ T6350] loop2: detected capacity change from 0 to 2048 [ 306.678467][ T6350] NILFS (loop2): invalid segment: Inconsistency found [ 306.709667][ T6350] NILFS (loop2): trying rollback from an earlier position [ 306.913094][ T6350] NILFS (loop2): recovery complete [ 306.987327][ T6357] loop3: detected capacity change from 0 to 1024 [ 306.998469][ T6360] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.043412][ T6357] EXT4-fs: Ignoring removed bh option [ 307.060099][ T6357] EXT4-fs: Ignoring removed nobh option [ 307.065831][ T6357] EXT4-fs: Ignoring removed bh option [ 307.284376][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 307.315336][ T6357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 307.728067][ T6357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 308.338854][ T6235] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 308.401708][ T26] audit: type=1800 audit(1757171512.464:16): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.434" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 308.856368][ T6235] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 308.884908][ T6235] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 309.059125][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 309.257407][ T6235] usb 5-1: config 8 has no interface number 0 [ 309.416635][ T6235] usb 5-1: config 8 interface 223 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 309.478721][ T6235] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.603757][ T6235] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 309.625579][ T6235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.646244][ T6235] usb 5-1: Product: syz [ 309.651451][ T6235] usb 5-1: Manufacturer: syz [ 309.656101][ T6235] usb 5-1: SerialNumber: syz [ 309.861492][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 310.119129][ T6235] usb 5-1: USB disconnect, device number 6 [ 311.622026][ T6412] loop5: detected capacity change from 0 to 512 [ 311.993499][ T6412] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 312.003021][ T6412] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.099463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.179594][ T6408] loop4: detected capacity change from 0 to 1024 [ 312.180951][ T6411] loop3: detected capacity change from 0 to 1024 [ 312.199705][ T6408] EXT4-fs: Ignoring removed bh option [ 312.211595][ T6408] EXT4-fs: Ignoring removed nobh option [ 312.278949][ T6408] EXT4-fs: Ignoring removed bh option [ 312.285900][ T6408] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 312.416585][ T6418] loop0: detected capacity change from 0 to 2048 [ 312.429481][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 312.447428][ T6408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 312.500245][ T6411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 312.527238][ T6418] NILFS (loop0): invalid segment: Inconsistency found [ 312.578919][ T6418] NILFS (loop0): trying rollback from an earlier position [ 312.679227][ T6418] NILFS (loop0): recovery complete [ 312.787181][ T6427] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.200800][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 313.292426][ T6431] loop5: detected capacity change from 0 to 1024 [ 313.697047][ T6431] EXT4-fs: Ignoring removed bh option [ 313.809097][ T6431] EXT4-fs: Ignoring removed nobh option [ 313.818388][ T6431] EXT4-fs: Ignoring removed bh option [ 313.869993][ T6431] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.140879][ T6431] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 314.154506][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 315.017485][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 315.240442][ T6446] loop0: detected capacity change from 0 to 512 [ 316.051196][ T6446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 316.060273][ T6446] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.081623][ T26] audit: type=1804 audit(1757171520.144:17): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.449" name="/newroot/95/file1/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 316.108048][ T6446] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 316.757380][ T6469] loop2: detected capacity change from 0 to 1024 [ 316.769999][ T6469] EXT4-fs: Ignoring removed bh option [ 316.775546][ T6469] EXT4-fs: Ignoring removed nobh option [ 316.850414][ T6469] EXT4-fs: Ignoring removed bh option [ 316.894030][ T6469] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.086463][ T6469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 317.278338][ T6475] loop5: detected capacity change from 0 to 32768 [ 318.869004][ T26] audit: type=1800 audit(1757171522.924:18): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.454" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 318.987099][ T6475] XFS (loop5): Mounting V5 Filesystem [ 318.995309][ T26] audit: type=1800 audit(1757171522.934:19): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.454" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 319.028580][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 319.204604][ T6475] XFS (loop5): Ending clean mount [ 319.221226][ T6475] XFS (loop5): Quotacheck needed: Please wait. [ 319.307601][ T6475] XFS (loop5): Quotacheck: Done. [ 320.327311][ T5039] XFS (loop5): Unmounting Filesystem [ 321.231949][ T6503] loop3: detected capacity change from 0 to 2048 [ 321.278442][ T6503] NILFS (loop3): invalid segment: Inconsistency found [ 321.301686][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 321.319836][ T6503] NILFS (loop3): trying rollback from an earlier position [ 321.366244][ T6503] NILFS (loop3): recovery complete [ 321.447335][ T6509] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.548060][ T6511] delete_channel: no stack [ 322.239282][ T4341] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 322.341596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.363935][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.377819][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.672395][ T6515] loop0: detected capacity change from 0 to 1024 [ 322.708921][ T4341] usb 5-1: Using ep0 maxpacket: 16 [ 322.717252][ T4341] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 322.729517][ T4341] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 322.767784][ T4341] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.896287][ T6515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 322.998993][ T4341] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.008126][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.116610][ T6524] Device name cannot be null; rc = [-22] [ 323.139970][ T6524] loop5: detected capacity change from 0 to 64 [ 323.512654][ T6524] hfs: get root inode failed [ 323.753581][ T4341] usb 5-1: Product: syz [ 323.769719][ T4341] usb 5-1: Manufacturer: syz [ 323.775791][ T4341] usb 5-1: SerialNumber: syz [ 324.029222][ T4341] usb 5-1: 0:2 : does not exist [ 324.216314][ T4341] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 324.497305][ T4341] usb 5-1: USB disconnect, device number 7 [ 324.724835][ T4410] udevd[4410]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.738447][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 326.138911][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 326.338996][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 326.346172][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.402279][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.472287][ T27] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 326.548158][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.859151][ T27] usb 6-1: config 0 descriptor?? [ 327.452814][ T6574] loop4: detected capacity change from 0 to 2048 [ 327.536994][ T6575] Device name cannot be null; rc = [-22] [ 327.560657][ T6575] loop3: detected capacity change from 0 to 64 [ 327.596187][ T6575] hfs: get root inode failed [ 327.628493][ T6574] NILFS (loop4): invalid segment: Inconsistency found [ 327.937591][ T6574] NILFS (loop4): trying rollback from an earlier position [ 328.082977][ T27] letsketch 0003:6161:4D15.0007: Device info:   [ 328.168869][ T6574] NILFS (loop4): recovery complete [ 328.241174][ T6576] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.460836][ T27] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 328.548407][ T27] letsketch: probe of 0003:6161:4D15.0007 failed with error -71 [ 329.200139][ T27] usb 6-1: USB disconnect, device number 2 [ 329.562845][ T6589] loop3: detected capacity change from 0 to 8 [ 329.921014][ T6589] SQUASHFS error: Failed to read block 0x4e8: -5 [ 329.928045][ T6589] SQUASHFS error: Failed to read block 0x4de: -5 [ 330.007607][ T6589] SQUASHFS error: Failed to read block 0x4de: -5 [ 330.035021][ T6589] SQUASHFS error: Failed to read block 0x4de: -5 [ 330.205312][ T26] audit: type=1800 audit(1757171534.164:20): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.478" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 330.491593][ T6601] loop4: detected capacity change from 0 to 1024 [ 331.351056][ T6601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 332.910581][ T6630] Device name cannot be null; rc = [-22] [ 332.932131][ T6630] loop3: detected capacity change from 0 to 64 [ 333.189502][ T6630] hfs: get root inode failed [ 334.680020][ T4410] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 334.747955][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 334.895595][ T6643] loop5: detected capacity change from 0 to 2048 [ 335.273037][ T6643] NILFS (loop5): invalid segment: Inconsistency found [ 335.482361][ T6643] NILFS (loop5): trying rollback from an earlier position [ 335.774872][ T6643] NILFS (loop5): recovery complete [ 335.862596][ T6648] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.007216][ T6654] loop4: detected capacity change from 0 to 1024 [ 336.037570][ T6654] EXT4-fs: Ignoring removed bh option [ 336.096587][ T6654] EXT4-fs: Ignoring removed nobh option [ 336.129960][ T6654] EXT4-fs: Ignoring removed bh option [ 336.136577][ T6654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 336.241217][ T6654] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 337.468275][ T26] audit: type=1800 audit(1757171541.524:21): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.490" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 337.590168][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 337.641313][ T26] audit: type=1800 audit(1757171541.524:22): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.490" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 338.906124][ T6673] delete_channel: no stack [ 340.798605][ T6710] Device name cannot be null; rc = [-22] [ 340.821588][ T6710] loop4: detected capacity change from 0 to 64 [ 340.847602][ T6710] hfs: get root inode failed [ 342.093352][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 342.444004][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 342.454091][ T7] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 342.819261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.527734][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 345.825746][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.943821][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.967948][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.026986][ T7] usb 1-1: can't set config #1, error -71 [ 346.078143][ T7] usb 1-1: USB disconnect, device number 10 [ 346.310386][ T6731] loop4: detected capacity change from 0 to 32768 [ 346.519213][ T6731] XFS (loop4): Mounting V5 Filesystem [ 346.547238][ T6737] loop0: detected capacity change from 0 to 1024 [ 346.579962][ T6737] EXT4-fs: Ignoring removed bh option [ 346.585490][ T6737] EXT4-fs: Ignoring removed nobh option [ 346.605581][ T6737] EXT4-fs: Ignoring removed bh option [ 346.616689][ T6737] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.765846][ T6731] XFS (loop4): Ending clean mount [ 346.791153][ T6731] XFS (loop4): Quotacheck needed: Please wait. [ 346.835827][ T6737] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 347.897139][ T6749] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.506: Allocating blocks 497-513 which overlap fs metadata [ 347.948001][ T6749] EXT4-fs (loop0): pa ffff8880573a40e0: logic 256, phys. 385, len 8 [ 347.956303][ T6749] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 349.019967][ T6731] XFS (loop4): Quotacheck: Done. [ 350.920446][ T4264] XFS (loop4): Unmounting Filesystem [ 351.918989][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 352.109597][ T6768] delete_channel: no stack [ 353.868932][ T4341] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 354.309968][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.427951][ T6787] loop4: detected capacity change from 0 to 64 [ 354.462379][ T6786] Device name cannot be null; rc = [-22] [ 355.771089][ T4341] usb 6-1: Using ep0 maxpacket: 16 [ 355.823962][ T6787] hfs: get root inode failed [ 355.831897][ T4341] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 355.857610][ T4341] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 355.872145][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.880622][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.889900][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.897796][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 355.907907][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.958288][ T4341] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.987690][ T4341] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.012646][ T4341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.043234][ T4341] usb 6-1: Product: syz [ 356.047498][ T4341] usb 6-1: Manufacturer: syz [ 356.069961][ T4341] usb 6-1: SerialNumber: syz [ 356.310082][ T6728] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.353790][ T4341] usb 6-1: 0:2 : does not exist [ 356.393123][ T4341] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 356.620493][ T4341] usb 6-1: USB disconnect, device number 3 [ 357.859553][ T4400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.901752][ T6728] udevd[6728]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.000131][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 358.448828][ T4400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.738818][ T14] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 358.790918][ T4400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.920774][ T4400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.947904][ T14] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 358.966501][ T14] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 359.018993][ T14] usb 5-1: config 8 has no interface number 0 [ 359.037665][ T14] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 359.051220][ T14] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.087325][ T14] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 359.106739][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.127002][ T14] usb 5-1: Product: syz [ 359.131360][ T14] usb 5-1: Manufacturer: syz [ 359.135998][ T14] usb 5-1: SerialNumber: syz [ 359.198941][ T6776] chnl_net:caif_netlink_parms(): no params data found [ 359.415801][ T14] usb 5-1: USB disconnect, device number 8 [ 360.029097][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 360.454431][ T6827] loop0: detected capacity change from 0 to 1024 [ 360.513379][ T6827] EXT4-fs: Ignoring removed bh option [ 360.545609][ T6827] EXT4-fs: Ignoring removed nobh option [ 360.564761][ T6827] EXT4-fs: Ignoring removed bh option [ 360.588282][ T6827] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 360.606521][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.621880][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.635982][ T6776] device bridge_slave_0 entered promiscuous mode [ 360.797558][ T6827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 361.013929][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.057359][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.283746][ T6776] device bridge_slave_1 entered promiscuous mode [ 361.754671][ T6837] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.527: Allocating blocks 497-513 which overlap fs metadata [ 361.820463][ T6837] EXT4-fs (loop0): pa ffff8880724cb1c0: logic 256, phys. 385, len 8 [ 361.829460][ T6837] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 362.137886][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 362.326933][ T6776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.552430][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 362.574323][ T6776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.693954][ T6846] Device name cannot be null; rc = [-22] [ 362.826037][ T6846] loop5: detected capacity change from 0 to 64 [ 363.008480][ T6847] binder: BC_ATTEMPT_ACQUIRE not supported [ 363.014485][ T6847] binder: 6842:6847 ioctl c0306201 2000000001c0 returned -22 [ 363.073351][ T6846] hfs: get root inode failed [ 363.300205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.309154][ T6842] delete_channel: no stack [ 363.546322][ T6851] loop4: detected capacity change from 0 to 8 [ 363.745788][ T6851] SQUASHFS error: Failed to read block 0x4e8: -5 [ 363.774083][ T6851] SQUASHFS error: Failed to read block 0x4de: -5 [ 363.798323][ T6851] SQUASHFS error: Failed to read block 0x4de: -5 [ 363.806374][ T6851] SQUASHFS error: Failed to read block 0x4de: -5 [ 363.828927][ T26] audit: type=1800 audit(1757171567.884:23): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.533" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 363.939169][ T4383] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 364.067669][ T6776] team0: Port device team_slave_0 added [ 364.180248][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 364.219123][ T4383] usb 6-1: Using ep0 maxpacket: 16 [ 364.238432][ T4383] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 364.481227][ T6776] team0: Port device team_slave_1 added [ 364.498876][ T4383] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 364.575907][ T4383] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.682806][ T4383] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.726090][ T4383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.754196][ T4383] usb 6-1: Product: syz [ 364.762718][ T4383] usb 6-1: Manufacturer: syz [ 364.767588][ T4383] usb 6-1: SerialNumber: syz [ 364.821459][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.833308][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.939223][ T6776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.008659][ T4383] usb 6-1: 0:2 : does not exist [ 365.057560][ T4383] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 365.419568][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.445544][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.536805][ T4383] usb 6-1: USB disconnect, device number 4 [ 365.931746][ T6776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.101196][ T6729] udevd[6729]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.392000][ T6776] device hsr_slave_0 entered promiscuous mode [ 367.440392][ T6776] device hsr_slave_1 entered promiscuous mode [ 367.449737][ T6776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.480192][ T6776] Cannot create hsr debugfs directory [ 367.609380][ T4400] IPVS: stopping backup sync thread 4821 ... [ 367.992362][ T6904] Device name cannot be null; rc = [-22] [ 368.015538][ T6904] loop3: detected capacity change from 0 to 64 [ 368.046405][ T6904] hfs: get root inode failed [ 369.102942][ T4400] device hsr_slave_0 left promiscuous mode [ 369.122587][ T4400] device hsr_slave_1 left promiscuous mode [ 369.141992][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.214874][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.238626][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.264688][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.294798][ T4400] device bridge_slave_1 left promiscuous mode [ 369.317816][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.375908][ T4400] device bridge_slave_0 left promiscuous mode [ 369.392346][ T6917] binder: BC_ATTEMPT_ACQUIRE not supported [ 369.398311][ T6917] binder: 6912:6917 ioctl c0306201 2000000001c0 returned -22 [ 369.417160][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.505116][ T4400] device veth1_macvtap left promiscuous mode [ 369.540203][ T4400] device veth0_macvtap left promiscuous mode [ 369.556666][ T4400] device veth1_vlan left promiscuous mode [ 369.563266][ T4400] device veth0_vlan left promiscuous mode [ 369.945168][ T6912] delete_channel: no stack [ 372.615053][ T6953] Device name cannot be null; rc = [-22] [ 372.637717][ T6953] loop4: detected capacity change from 0 to 64 [ 372.678600][ T6953] hfs: get root inode failed [ 373.411543][ T6729] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 373.776673][ T6959] loop4: detected capacity change from 0 to 1024 [ 373.805091][ T6959] EXT4-fs: Ignoring removed bh option [ 373.833846][ T6959] EXT4-fs: Ignoring removed nobh option [ 373.845290][ T6959] EXT4-fs: Ignoring removed bh option [ 373.889977][ T6959] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 373.979773][ T6959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 375.277028][ T6971] loop0: detected capacity change from 0 to 512 [ 375.361303][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 375.544161][ T6971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 375.553576][ T6971] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.638701][ T6971] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 375.638953][ T26] audit: type=1804 audit(1757171579.694:24): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.558" name="/newroot/118/file1/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 375.799859][ T4400] team0 (unregistering): Port device team_slave_1 removed [ 375.914149][ T4400] team0 (unregistering): Port device team_slave_0 removed [ 375.970475][ T4400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.063407][ T4400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.170259][ T6235] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 376.377739][ T6235] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.413452][ T6235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 376.422193][ T6235] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 376.431648][ T6235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.450889][ T6235] usb 6-1: config 0 descriptor?? [ 376.822931][ T4400] bond0 (unregistering): Released all slaves [ 376.876588][ T6235] hid-alps 0003:044E:1215.0008: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.5-1/input0 [ 377.119653][ T4332] usb 6-1: USB disconnect, device number 5 [ 377.191828][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 378.262777][ T6776] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.273234][ T6776] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.379820][ T6776] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.416424][ T6996] binder: BC_ATTEMPT_ACQUIRE not supported [ 378.422490][ T6996] binder: 6994:6996 ioctl c0306201 2000000001c0 returned -22 [ 378.440346][ T6776] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.460957][ T6999] loop4: detected capacity change from 0 to 1024 [ 378.492747][ T6999] EXT4-fs: Ignoring removed bh option [ 378.513702][ T6999] EXT4-fs: Ignoring removed nobh option [ 378.573212][ T6999] EXT4-fs: Ignoring removed bh option [ 378.626012][ T6999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 378.895612][ T6999] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 379.085364][ T7018] loop3: detected capacity change from 0 to 1024 [ 379.110534][ T6994] delete_channel: no stack [ 379.172839][ T7012] Device name cannot be null; rc = [-22] [ 379.184567][ T7012] loop5: detected capacity change from 0 to 64 [ 379.195270][ T7012] hfs: get root inode failed [ 379.288178][ T7018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 379.457121][ T6776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.547369][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.565699][ T6860] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.582116][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.615143][ T6776] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.681298][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.740483][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 379.741038][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.809469][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.816658][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.842950][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 379.889502][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 379.909718][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 379.956029][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.988010][ T7032] loop0: detected capacity change from 0 to 1024 [ 380.017652][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.024886][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.034612][ T7032] EXT4-fs: Ignoring removed bh option [ 380.066425][ T7032] EXT4-fs: Ignoring removed nobh option [ 380.088895][ T7032] EXT4-fs: Ignoring removed bh option [ 380.106530][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.187787][ T7034] loop5: detected capacity change from 0 to 2048 [ 380.396055][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.424505][ T7032] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 380.436246][ T7034] NILFS (loop5): invalid segment: Inconsistency found [ 381.758644][ T7040] loop3: detected capacity change from 0 to 512 [ 381.979652][ T7034] NILFS (loop5): trying rollback from an earlier position [ 382.081725][ T7034] NILFS (loop5): recovery complete [ 382.152794][ T7047] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.429455][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.443250][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.454615][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 382.464100][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 382.468454][ T7032] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 382.485691][ T7040] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 382.495832][ T7040] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.658181][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.696569][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.705629][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.714501][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.726487][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.784512][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.791050][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.813713][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 384.170505][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 384.203154][ T7065] loop5: detected capacity change from 0 to 512 [ 384.313222][ T7065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 384.322452][ T7065] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.345777][ T7065] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 384.379026][ T26] audit: type=1804 audit(1757171588.404:25): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.572" name="/newroot/71/file1/file0/file0" dev="loop5" ino=13 res=1 errno=0 [ 384.868447][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 385.495236][ T7083] loop5: detected capacity change from 0 to 1024 [ 385.600100][ T7083] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 385.739246][ T7092] binder: BC_ATTEMPT_ACQUIRE not supported [ 385.745100][ T7092] binder: 7084:7092 ioctl c0306201 2000000001c0 returned -22 [ 385.990682][ T7097] loop4: detected capacity change from 0 to 1024 [ 386.028484][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.037375][ T7097] EXT4-fs: Ignoring removed bh option [ 386.069158][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.094398][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 386.119043][ T7097] EXT4-fs: Ignoring removed nobh option [ 386.151753][ T6776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.170357][ T7097] EXT4-fs: Ignoring removed bh option [ 386.208867][ T7097] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 386.264796][ T7097] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 386.282571][ T7084] delete_channel: no stack [ 386.332131][ T7105] fuse: Unknown parameter 'default_permissio' [ 386.554540][ T7097] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.579: Allocating blocks 497-513 which overlap fs metadata [ 386.662078][ T7097] EXT4-fs (loop4): pa ffff8880573a4460: logic 256, phys. 385, len 8 [ 386.670479][ T7097] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 386.932090][ T7116] loop5: detected capacity change from 0 to 2048 [ 387.039728][ T7116] NILFS (loop5): invalid segment: Inconsistency found [ 387.118828][ T7116] NILFS (loop5): trying rollback from an earlier position [ 387.147741][ T7116] NILFS (loop5): recovery complete [ 387.182490][ T7123] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.197413][ T7125] loop3: detected capacity change from 0 to 1024 [ 387.205247][ T4408] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 387.217348][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 387.299528][ T7125] EXT4-fs: Ignoring removed bh option [ 387.305690][ T7125] EXT4-fs: Ignoring removed nobh option [ 387.415057][ T7125] EXT4-fs: Ignoring removed bh option [ 387.424174][ T7125] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 387.481667][ T7125] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 388.279465][ T4408] usb 1-1: Using ep0 maxpacket: 16 [ 389.361019][ T4408] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 389.411116][ T4408] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 389.503077][ T4408] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.666630][ T4408] usb 1-1: string descriptor 0 read error: -71 [ 389.676869][ T4408] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.718175][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 389.763934][ T4408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.809572][ T4408] usb 1-1: can't set config #1, error -71 [ 389.823316][ T7144] loop5: detected capacity change from 0 to 512 [ 389.834431][ T4408] usb 1-1: USB disconnect, device number 11 [ 389.882009][ T7144] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 389.891209][ T7144] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.909128][ T26] audit: type=1804 audit(1757171593.974:26): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.585" name="/newroot/75/file1/file0/file0" dev="loop5" ino=13 res=1 errno=0 [ 389.909241][ T7144] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 390.078050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.091390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.130942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 390.146672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.167296][ T6776] device veth0_vlan entered promiscuous mode [ 390.203327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.243139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 390.285575][ T6776] device veth1_vlan entered promiscuous mode [ 390.631336][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 390.708805][ T4408] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 390.988816][ T4408] usb 1-1: Using ep0 maxpacket: 8 [ 391.013374][ T4408] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.058156][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 391.088060][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 391.107698][ T4408] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.146822][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 391.176133][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 391.205624][ T4408] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.232706][ T6776] device veth0_macvtap entered promiscuous mode [ 391.284047][ T4408] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.296555][ T6776] device veth1_macvtap entered promiscuous mode [ 391.334312][ T4408] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 391.343788][ T4408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.367756][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.379722][ T7162] fuse: Unknown parameter 'default_permissio' [ 391.399826][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.432493][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.483211][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.513680][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.525855][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.547176][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.563460][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.653395][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.673449][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 391.684679][ T4408] usb 1-1: GET_CAPABILITIES returned 0 [ 391.686338][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 391.708668][ T4408] usbtmc 1-1:16.0: can't read capabilities [ 391.711886][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.777616][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.334064][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.378824][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.407697][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.418299][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.419348][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.432717][ T7170] binder: BC_ATTEMPT_ACQUIRE not supported [ 392.449336][ T7170] binder: 7157:7170 ioctl c0306201 2000000001c0 returned -22 [ 392.456870][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.459181][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.475962][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.485068][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.494173][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.520200][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.529399][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.601677][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.610841][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.619960][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.629050][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.638120][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.655861][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.665018][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.674136][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 392.678831][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.698684][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.702125][ T4409] usb 1-1: USB disconnect, device number 12 [ 392.727235][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.739981][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.751218][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.759906][ T7157] delete_channel: no stack [ 392.771404][ T6776] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.806254][ T6776] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.845049][ T6776] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.868976][ T6776] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.309418][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.317782][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.341096][ T7178] loop4: detected capacity change from 0 to 2048 [ 393.365793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 393.402885][ T7178] NILFS (loop4): invalid segment: Inconsistency found [ 393.421343][ T7180] fuse: Bad value for 'fd' [ 393.440990][ T7178] NILFS (loop4): trying rollback from an earlier position [ 393.480794][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.503053][ T7178] NILFS (loop4): recovery complete [ 393.524312][ T7182] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.547557][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.916931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 395.505131][ T7201] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 395.830672][ T6235] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 396.613851][ T6235] usb 4-1: Using ep0 maxpacket: 16 [ 396.621040][ T6235] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 396.669458][ T7212] fuse: Unknown parameter 'default_permissio' [ 396.678323][ T6235] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 396.736689][ T6235] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.756040][ T7213] loop4: detected capacity change from 0 to 1024 [ 396.784516][ T6235] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.809626][ T7213] EXT4-fs: Ignoring removed bh option [ 396.822791][ T7213] EXT4-fs: Ignoring removed nobh option [ 396.837488][ T6235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.850170][ T7213] EXT4-fs: Ignoring removed bh option [ 396.861851][ T7213] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 396.880507][ T6235] usb 4-1: Product: syz [ 396.884791][ T6235] usb 4-1: Manufacturer: syz [ 396.899167][ T6235] usb 4-1: SerialNumber: syz [ 397.190807][ T6235] usb 4-1: 0:2 : does not exist [ 397.317587][ T7213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 397.355640][ T6235] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 397.706702][ T7227] loop5: detected capacity change from 0 to 1024 [ 397.770238][ T6235] usb 4-1: USB disconnect, device number 8 [ 398.008664][ T7227] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 398.254390][ T6818] udevd[6818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.351040][ T4332] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 398.668984][ T4332] usb 7-1: Using ep0 maxpacket: 8 [ 398.689153][ T4332] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.697407][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 398.705203][ T4332] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.735634][ T4332] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.767807][ T4332] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.816302][ T4332] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.853903][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.112123][ T4332] usb 7-1: GET_CAPABILITIES returned 0 [ 399.117694][ T4332] usbtmc 7-1:16.0: can't read capabilities [ 399.348258][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.357423][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.366544][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.375667][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.384820][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.398991][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.408136][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.417249][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.426369][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.435448][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.544826][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 399.559392][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.568559][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.577780][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.586939][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.598692][ T7242] binder: BC_ATTEMPT_ACQUIRE not supported [ 399.604928][ T7242] binder: 7215:7242 ioctl c0306201 2000000001c0 returned -22 [ 399.615462][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.619221][ T7246] loop4: detected capacity change from 0 to 2048 [ 399.624582][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 399.712109][ T7246] NILFS (loop4): invalid segment: Inconsistency found [ 399.743699][ T7215] delete_channel: no stack [ 399.748548][ T7246] NILFS (loop4): trying rollback from an earlier position [ 399.768581][ T4332] usb 7-1: USB disconnect, device number 2 [ 399.795337][ T7246] NILFS (loop4): recovery complete [ 399.834053][ T7248] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.619210][ T7269] loop6: detected capacity change from 0 to 512 [ 402.171441][ T7274] fuse: Unknown parameter 'default_permission' [ 402.347657][ T7269] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 402.357465][ T7269] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.386585][ T7281] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 402.399219][ T26] audit: type=1804 audit(1757171606.464:27): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.613" name="/newroot/3/file1/file0/file0" dev="loop6" ino=13 res=1 errno=0 [ 402.399557][ T7267] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 403.495408][ T6776] EXT4-fs (loop6): unmounting filesystem. [ 403.694663][ T7292] loop6: detected capacity change from 0 to 1024 [ 403.744830][ T7292] EXT4-fs: Ignoring removed bh option [ 403.789001][ T7292] EXT4-fs: Ignoring removed nobh option [ 403.799733][ T7292] EXT4-fs: Ignoring removed bh option [ 403.824284][ T7292] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 403.914121][ T7292] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 403.928440][ T7294] loop4: detected capacity change from 0 to 2048 [ 403.996813][ T7294] NILFS (loop4): invalid segment: Inconsistency found [ 404.153859][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 404.158685][ T7294] NILFS (loop4): trying rollback from an earlier position [ 404.995101][ T6776] EXT4-fs (loop6): unmounting filesystem. [ 405.086484][ T7294] NILFS (loop4): recovery complete [ 405.408213][ T7309] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.558846][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 405.574963][ T7] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 405.604749][ T7] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 405.655713][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.693917][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.734143][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 405.916920][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.987616][ T7] usb 1-1: Product: syz [ 406.028407][ T7] usb 1-1: Manufacturer: syz [ 406.058960][ T7] usb 1-1: SerialNumber: syz [ 406.132080][ T7318] loop6: detected capacity change from 0 to 1024 [ 406.286607][ T7320] fuse: Unknown parameter 'default_permission' [ 406.354957][ T7] usb 1-1: 0:2 : does not exist [ 406.364422][ T7318] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 406.562859][ T7] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 406.665065][ T7330] loop3: detected capacity change from 0 to 512 [ 406.675700][ T7] usb 1-1: USB disconnect, device number 13 [ 406.740373][ T7330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 406.749486][ T7330] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.837952][ T26] audit: type=1804 audit(1757171610.894:28): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.627" name="/newroot/133/file1/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 406.872222][ T7335] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 407.620623][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 407.675391][ T6729] udevd[6729]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.882998][ T7357] loop0: detected capacity change from 0 to 64 [ 409.922061][ T7357] hfs: get root inode failed [ 410.019073][ T6235] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 410.779154][ T6235] usb 6-1: Using ep0 maxpacket: 8 [ 410.788024][ T6235] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.805713][ T6235] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.823628][ T6235] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.842133][ T6235] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.481315][ T7371] fuse: Bad value for 'fd' [ 411.506463][ T6235] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.541309][ T6235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.949118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.110916][ T6235] usb 6-1: GET_CAPABILITIES returned 0 [ 412.116821][ T6235] usbtmc 6-1:16.0: can't read capabilities [ 412.327698][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.336873][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.345985][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.355064][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.364150][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.399416][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.408578][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.417724][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.426861][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.436058][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.688357][ T7381] fuse: Unknown parameter 'default_permission' [ 412.755265][ T7383] loop3: detected capacity change from 0 to 2048 [ 412.810367][ T7383] NILFS (loop3): invalid segment: Inconsistency found [ 412.817239][ T7383] NILFS (loop3): trying rollback from an earlier position [ 412.829154][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.838342][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.847485][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.856679][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.881289][ T6776] EXT4-fs (loop6): unmounting filesystem. [ 412.891704][ T7383] NILFS (loop3): recovery complete [ 412.895857][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.906124][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 412.927046][ T6235] usb 6-1: USB disconnect, device number 6 [ 412.943422][ T7386] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.591468][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 413.728511][ T7402] loop4: detected capacity change from 0 to 1024 [ 413.987780][ T7402] EXT4-fs: Ignoring removed bh option [ 414.048972][ T7402] EXT4-fs: Ignoring removed nobh option [ 414.119008][ T7402] EXT4-fs: Ignoring removed bh option [ 414.196222][ T7402] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 414.370504][ T7402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 414.748032][ T7419] binder: BC_ATTEMPT_ACQUIRE not supported [ 414.754207][ T7419] binder: 7409:7419 ioctl c0306201 2000000001c0 returned -22 [ 414.788502][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 415.127890][ T7409] delete_channel: no stack [ 415.306262][ T7424] Device name cannot be null; rc = [-22] [ 415.328551][ T7424] loop4: detected capacity change from 0 to 64 [ 416.006295][ T7424] hfs: get root inode failed [ 417.309566][ T7445] fuse: Bad value for 'fd' [ 417.674073][ T7447] loop4: detected capacity change from 0 to 512 [ 418.010648][ T7447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 418.020667][ T7447] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.327728][ T7455] loop3: detected capacity change from 0 to 2048 [ 418.475108][ T7460] loop0: detected capacity change from 0 to 512 [ 418.928554][ T7455] NILFS (loop3): invalid segment: Inconsistency found [ 418.984130][ T7460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 418.993338][ T7460] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.014714][ T7460] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 419.038846][ T26] audit: type=1804 audit(1757171623.074:29): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.651" name="/newroot/134/file1/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 419.059624][ T7455] NILFS (loop3): trying rollback from an earlier position [ 419.078336][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 419.095551][ T7455] NILFS (loop3): recovery complete [ 419.111549][ T7464] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.125569][ T7458] loop6: detected capacity change from 0 to 1024 [ 419.243035][ T7458] EXT4-fs: Ignoring removed bh option [ 419.250665][ T7458] EXT4-fs: Ignoring removed nobh option [ 419.260867][ T7458] EXT4-fs: Ignoring removed bh option [ 419.272108][ T7458] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 419.314396][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 419.592286][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 419.652646][ T7458] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 420.952140][ T7475] tmpfs: Unknown parameter 'quota' [ 421.019960][ T7477] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3836: comm syz.6.653: Allocating blocks 497-513 which overlap fs metadata [ 421.035648][ T7477] EXT4-fs (loop6): pa ffff8880724cbb60: logic 256, phys. 385, len 8 [ 421.044310][ T7477] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 422.278868][ T6776] EXT4-fs (loop6): unmounting filesystem. [ 422.866613][ T7502] Device name cannot be null; rc = [-22] [ 422.889364][ T7502] loop3: detected capacity change from 0 to 64 [ 423.707982][ T7502] hfs: get root inode failed [ 424.259217][ T6235] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 424.450840][ T6235] usb 4-1: Using ep0 maxpacket: 16 [ 424.460801][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.516124][ T6235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.497839][ T6235] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 425.534415][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.571423][ T6235] usb 4-1: config 0 descriptor?? [ 425.577857][ T7526] fuse: Bad value for 'group_id' [ 426.067592][ T7531] loop5: detected capacity change from 0 to 512 [ 427.375769][ T7531] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 427.385057][ T7531] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.482308][ T6235] usb 4-1: string descriptor 0 read error: -71 [ 427.652927][ T6235] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 427.684823][ T7539] loop0: detected capacity change from 0 to 1024 [ 427.700053][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 427.724307][ T7539] EXT4-fs: Ignoring removed bh option [ 427.763342][ T7539] EXT4-fs: Ignoring removed nobh option [ 427.768932][ T6235] letsketch: probe of 0003:6161:4D15.0009 failed with error -32 [ 427.800043][ T6235] usb 4-1: USB disconnect, device number 9 [ 427.928874][ T7539] EXT4-fs: Ignoring removed bh option [ 427.973428][ T7539] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.184866][ T7550] loop3: detected capacity change from 0 to 512 [ 428.920565][ T7539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 428.941982][ T7550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 428.951301][ T7550] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.016779][ T26] audit: type=1804 audit(1757171633.074:30): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.666" name="/newroot/144/file1/file0/file0" dev="loop3" ino=13 res=1 errno=0 [ 429.052512][ T7544] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 429.354159][ T7558] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 430.478187][ T7561] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.665: Allocating blocks 497-513 which overlap fs metadata [ 430.550038][ T7561] EXT4-fs (loop0): pa ffff8880573a4000: logic 256, phys. 385, len 8 [ 430.558114][ T7561] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 430.757139][ T7559] tmpfs: Unknown parameter 'quota' [ 430.831418][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 430.896576][ T7565] loop4: detected capacity change from 0 to 1024 [ 430.968022][ T7565] EXT4-fs: Ignoring removed bh option [ 431.049029][ T7565] EXT4-fs: Ignoring removed nobh option [ 431.054663][ T7565] EXT4-fs: Ignoring removed bh option [ 431.073881][ T7565] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 431.144322][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 431.246900][ T7565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 431.274309][ T7568] loop3: detected capacity change from 0 to 1024 [ 431.372025][ T7568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 431.562581][ T7577] loop0: detected capacity change from 0 to 1024 [ 433.509945][ T7577] EXT4-fs: Ignoring removed bh option [ 433.534682][ T7580] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.669: Allocating blocks 497-513 which overlap fs metadata [ 434.283627][ T26] audit: type=1800 audit(1757171638.344:31): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.669" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 434.303802][ T7580] EXT4-fs (loop4): pa ffff8880573a47e0: logic 256, phys. 385, len 8 [ 434.311853][ T7580] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 434.439616][ T7577] EXT4-fs: Ignoring removed nobh option [ 434.448886][ T7577] EXT4-fs: Ignoring removed bh option [ 434.474292][ T7577] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 434.535280][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 434.622778][ T7577] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 435.674375][ T7591] fuse: Bad value for 'group_id' [ 435.811629][ T7593] fuse: Bad value for 'fd' [ 436.190805][ T7601] loop5: detected capacity change from 0 to 512 [ 437.627130][ T7601] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 437.636315][ T7601] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.406385][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 439.067502][ T7622] loop5: detected capacity change from 0 to 512 [ 439.989979][ T7622] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 439.999242][ T7622] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.027901][ T7620] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 440.043590][ T26] audit: type=1804 audit(1757171644.084:32): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.682" name="/newroot/95/file1/file0/file0" dev="loop5" ino=13 res=1 errno=0 [ 440.288651][ T7630] tmpfs: Unknown parameter 'quota' [ 440.672787][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 442.226498][ T7644] loop4: detected capacity change from 0 to 1024 [ 442.234908][ T7645] loop0: detected capacity change from 0 to 1024 [ 442.290563][ T7644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 442.319706][ T7645] EXT4-fs: Ignoring removed bh option [ 442.325253][ T7645] EXT4-fs: Ignoring removed nobh option [ 442.369162][ T7645] EXT4-fs: Ignoring removed bh option [ 442.424990][ T7645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 443.765535][ T7645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 443.938949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.023921][ T7645] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.689: Allocating blocks 497-513 which overlap fs metadata [ 444.038909][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 444.046441][ T7645] EXT4-fs (loop0): pa ffff8880724cb2a0: logic 256, phys. 385, len 8 [ 444.054676][ T7645] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 445.198611][ T7667] loop5: detected capacity change from 0 to 1024 [ 445.234479][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.241006][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.249992][ T7667] EXT4-fs: Ignoring removed bh option [ 445.277959][ T7667] EXT4-fs: Ignoring removed nobh option [ 445.317585][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 445.325336][ T7667] EXT4-fs: Ignoring removed bh option [ 445.500263][ T7667] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 445.683768][ T7672] loop4: detected capacity change from 0 to 512 [ 446.125082][ T7667] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 446.198228][ T7672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 446.207670][ T7672] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.370381][ T7684] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.692: Allocating blocks 497-513 which overlap fs metadata [ 448.465609][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 449.220045][ T7684] EXT4-fs (loop5): pa ffff8880724f2620: logic 256, phys. 385, len 8 [ 449.228126][ T7684] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 449.392754][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.403046][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.412471][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.421449][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.430445][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 449.437852][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.816672][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 450.329306][ T7702] tmpfs: Unknown parameter 'quota' [ 450.337318][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 450.348548][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 450.357776][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 450.367277][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 450.376242][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 450.384817][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 451.590346][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 452.345442][ T4400] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.375882][ T7723] loop0: detected capacity change from 0 to 1024 [ 452.418919][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 452.507367][ T7725] loop4: detected capacity change from 0 to 1024 [ 452.514781][ T7723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 452.615626][ T7725] EXT4-fs: Ignoring removed bh option [ 452.729183][ T7725] EXT4-fs: Ignoring removed nobh option [ 453.090553][ T7725] EXT4-fs: Ignoring removed bh option [ 453.100207][ T4400] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.125008][ T7725] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 453.210515][ T7725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 453.629034][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 454.498905][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 454.705312][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 454.733692][ T4400] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.035438][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 455.224844][ T4400] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.459314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.698827][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 456.375992][ T7685] chnl_net:caif_netlink_parms(): no params data found [ 456.457631][ T7704] chnl_net:caif_netlink_parms(): no params data found [ 456.578805][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 457.457553][ T7755] loop0: detected capacity change from 0 to 1024 [ 457.487575][ T7755] EXT4-fs: Ignoring removed bh option [ 457.563706][ T7755] EXT4-fs: Ignoring removed nobh option [ 457.701690][ T7755] EXT4-fs: Ignoring removed bh option [ 457.707715][ T7755] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 457.779163][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 457.818600][ T7755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 458.896246][ T7775] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.703: Allocating blocks 497-513 which overlap fs metadata [ 458.959639][ T7774] loop4: detected capacity change from 0 to 512 [ 459.462742][ T26] audit: type=1800 audit(1757171663.434:33): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.703" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 459.487049][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 459.513514][ T7775] EXT4-fs (loop0): pa ffff8880724cb620: logic 256, phys. 385, len 8 [ 459.521673][ T7775] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 459.634176][ T7774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 459.643574][ T7774] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.737839][ T7568] EXT4-fs (loop3): unmounting filesystem. [ 459.854435][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 461.168104][ T7796] tmpfs: Unknown parameter 'quota' [ 461.915322][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.922659][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.936821][ T7704] device bridge_slave_0 entered promiscuous mode [ 461.957762][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.967212][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.169348][ T7685] device bridge_slave_0 entered promiscuous mode [ 462.413483][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.504491][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 462.544426][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.712826][ T7704] device bridge_slave_1 entered promiscuous mode [ 462.833832][ T7685] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.842671][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.870185][ T7685] device bridge_slave_1 entered promiscuous mode [ 463.020407][ T7685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.030320][ T7808] fuse: Bad value for 'fd' [ 463.076890][ T7704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.102063][ T7685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.114606][ T7704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.163116][ T7685] team0: Port device team_slave_0 added [ 464.180847][ T7823] loop0: detected capacity change from 0 to 1024 [ 464.279020][ T7823] EXT4-fs: Ignoring removed bh option [ 464.292650][ T7823] EXT4-fs: Ignoring removed nobh option [ 464.303381][ T7704] team0: Port device team_slave_0 added [ 464.312600][ T7823] EXT4-fs: Ignoring removed bh option [ 464.359118][ T7823] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 464.363068][ T7685] team0: Port device team_slave_1 added [ 464.576722][ T7829] loop5: detected capacity change from 0 to 1024 [ 464.614955][ T7829] EXT4-fs: Ignoring removed bh option [ 464.624418][ T7829] EXT4-fs: Ignoring removed nobh option [ 464.631553][ T7829] EXT4-fs: Ignoring removed bh option [ 464.665436][ T7704] team0: Port device team_slave_1 added [ 464.672450][ T7823] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 464.752576][ T7829] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 464.967687][ T7829] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 465.743716][ T7838] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.712: Allocating blocks 497-513 which overlap fs metadata [ 466.183962][ T7838] EXT4-fs (loop0): pa ffff8880724cb1c0: logic 256, phys. 385, len 8 [ 466.192255][ T7838] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 466.237955][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.268809][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.333520][ T7704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.384930][ T7840] device ip6gretap0 entered promiscuous mode [ 466.407425][ T7840] device vlan2 entered promiscuous mode [ 466.426913][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 466.455611][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 466.569584][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.576606][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.591960][ T7850] loop5: detected capacity change from 0 to 2048 [ 466.676207][ T7850] NILFS (loop5): invalid segment: Inconsistency found [ 466.686512][ T7704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.713623][ T7850] NILFS (loop5): trying rollback from an earlier position [ 466.926807][ T7850] NILFS (loop5): recovery complete [ 466.932957][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.955939][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.008903][ T7857] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.109192][ T7865] loop4: detected capacity change from 0 to 512 [ 469.173536][ T7866] tmpfs: Unknown parameter 'quota' [ 469.460929][ T7685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.543148][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.582253][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.214888][ T7685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.491656][ T7865] EXT4-fs: error -4 creating inode table initialization thread [ 470.501579][ T7865] EXT4-fs (loop4): mount failed [ 470.579475][ T4400] IPVS: stopping backup sync thread 7281 ... [ 470.806325][ T7704] device hsr_slave_0 entered promiscuous mode [ 471.572113][ T7704] device hsr_slave_1 entered promiscuous mode [ 471.595793][ T7704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.612287][ T7704] Cannot create hsr debugfs directory [ 471.629602][ T7889] fuse: Bad value for 'fd' [ 472.412781][ T7685] device hsr_slave_0 entered promiscuous mode [ 472.526371][ T7685] device hsr_slave_1 entered promiscuous mode [ 472.596399][ T7685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.665825][ T7685] Cannot create hsr debugfs directory [ 472.822943][ T7901] loop4: detected capacity change from 0 to 1024 [ 472.830420][ T7901] EXT4-fs: Ignoring removed bh option [ 472.835910][ T7901] EXT4-fs: Ignoring removed nobh option [ 472.841678][ T7901] EXT4-fs: Ignoring removed bh option [ 472.867274][ T7901] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 472.979969][ T7901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 472.993490][ T7906] loop5: detected capacity change from 0 to 1024 [ 473.005830][ T7906] EXT4-fs: Ignoring removed bh option [ 473.018095][ T7906] EXT4-fs: Ignoring removed nobh option [ 473.025010][ T7906] EXT4-fs: Ignoring removed bh option [ 473.038276][ T7906] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 473.176076][ T7906] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 473.187463][ T7909] loop0: detected capacity change from 0 to 2048 [ 473.204932][ T7901] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.726: Allocating blocks 497-513 which overlap fs metadata [ 473.215935][ T7909] NILFS (loop0): invalid segment: Inconsistency found [ 473.261068][ T7909] NILFS (loop0): trying rollback from an earlier position [ 473.287659][ T7909] NILFS (loop0): recovery complete [ 473.297764][ T7901] EXT4-fs (loop4): pa ffff8880724cb9a0: logic 256, phys. 385, len 8 [ 473.306260][ T7901] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 473.318918][ T4400] device hsr_slave_0 left promiscuous mode [ 473.496994][ T4400] device hsr_slave_1 left promiscuous mode [ 473.515324][ T7914] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 473.560587][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.390163][ T7916] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.727: Allocating blocks 497-513 which overlap fs metadata [ 474.458130][ T7916] EXT4-fs (loop5): pa ffff8880573a4700: logic 256, phys. 385, len 8 [ 474.466303][ T7916] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 475.003345][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.239456][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.309050][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.366929][ T5039] EXT4-fs (loop5): unmounting filesystem. [ 475.379405][ T4400] device bridge_slave_1 left promiscuous mode [ 475.413460][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 475.426634][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.552119][ T4400] device bridge_slave_0 left promiscuous mode [ 475.558608][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.529243][ T4400] device veth1_macvtap left promiscuous mode [ 476.545039][ T4400] device veth0_macvtap left promiscuous mode [ 476.635663][ T7933] tmpfs: Unknown parameter 'quota' [ 477.150687][ T7935] loop0: detected capacity change from 0 to 512 [ 477.789224][ T4400] device veth1_vlan left promiscuous mode [ 477.838970][ T4400] device veth0_vlan left promiscuous mode [ 477.850248][ T7935] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 477.859354][ T7935] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.097243][ T7955] loop4: detected capacity change from 0 to 1024 [ 479.129563][ T7955] EXT4-fs: Ignoring removed bh option [ 479.135392][ T7955] EXT4-fs: Ignoring removed nobh option [ 479.159492][ T7955] EXT4-fs: Ignoring removed bh option [ 479.175857][ T7955] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 479.241507][ T7955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 480.378334][ T7962] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.734: Allocating blocks 497-513 which overlap fs metadata [ 480.786019][ T7962] EXT4-fs (loop4): pa ffff8880573a4460: logic 256, phys. 385, len 8 [ 480.794202][ T7962] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 480.806308][ T7962] syz.4.734 (7962) used greatest stack depth: 20176 bytes left [ 481.145664][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 481.482396][ T4400] team0 (unregistering): Port device team_slave_1 removed [ 481.543088][ T4400] team0 (unregistering): Port device team_slave_0 removed [ 481.602103][ T4400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.665678][ T4400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.356726][ T4400] bond0 (unregistering): Released all slaves [ 482.811786][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 483.046490][ T7685] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 484.091663][ T7685] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 484.132020][ T7685] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 484.397952][ T7685] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 485.365395][ T8005] loop5: detected capacity change from 0 to 32768 [ 485.373038][ T8005] (syz.5.739,8005,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 485.382650][ T8005] (syz.5.739,8005,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 485.564075][ T8003] loop0: detected capacity change from 0 to 32768 [ 485.584981][ T8003] (syz.0.741,8003,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 485.602383][ T8003] (syz.0.741,8003,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 485.669065][ T8003] JBD2: Ignoring recovery information on journal [ 485.678818][ T5643] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 485.711863][ T8003] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 485.731345][ T8003] (syz.0.741,8003,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 485.824055][ T7704] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 485.844611][ T7704] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 485.882479][ T7704] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 485.899064][ T5643] usb 5-1: Using ep0 maxpacket: 16 [ 485.928255][ T8003] [ 485.930654][ T8003] ====================================================== [ 485.937699][ T8003] WARNING: possible circular locking dependency detected [ 485.944759][ T8003] syzkaller #0 Not tainted [ 485.949205][ T8003] ------------------------------------------------------ [ 485.956247][ T8003] syz.0.741/8003 is trying to acquire lock: [ 485.962162][ T8003] ffff888026100650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_extend_allocation+0x6c8/0x1840 [ 485.972079][ T8003] [ 485.972079][ T8003] but task is already holding lock: [ 485.979476][ T8003] ffff8880530d5108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 485.992771][ T8003] [ 485.992771][ T8003] which lock already depends on the new lock. [ 485.992771][ T8003] [ 486.003212][ T8003] [ 486.003212][ T8003] the existing dependency chain (in reverse order) is: [ 486.012276][ T8003] [ 486.012276][ T8003] -> #7 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 486.022838][ T8003] down_write+0x36/0x60 [ 486.027574][ T8003] ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 486.034043][ T8003] ocfs2_reserve_clusters_with_limit+0x2f8/0xba0 [ 486.040940][ T8003] ocfs2_lock_allocators+0x2f7/0x5b0 [ 486.046841][ T8003] ocfs2_extend_allocation+0x394/0x1840 [ 486.052954][ T8003] ocfs2_extend_no_holes+0x20b/0x490 [ 486.058844][ T8003] ocfs2_acquire_dquot+0x5e8/0xb10 [ 486.064517][ T8003] dqget+0x778/0xeb0 [ 486.068972][ T8003] ocfs2_setattr+0xf16/0x1cf0 [ 486.074218][ T8003] notify_change+0xc74/0xf40 [ 486.079412][ T8003] chown_common+0x486/0x620 [ 486.084473][ T8003] ksys_fchown+0xe2/0x150 [ 486.089363][ T8003] __x64_sys_fchown+0x76/0x80 [ 486.094681][ T8003] do_syscall_64+0x4c/0xa0 [ 486.099661][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.106124][ T8003] [ 486.106124][ T8003] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 486.115029][ T8003] down_write+0x36/0x60 [ 486.119752][ T8003] ocfs2_lock_global_qf+0x1e5/0x270 [ 486.125519][ T8003] ocfs2_acquire_dquot+0x2a0/0xb10 [ 486.131189][ T8003] dqget+0x778/0xeb0 [ 486.135648][ T8003] ocfs2_setattr+0xf16/0x1cf0 [ 486.140981][ T8003] notify_change+0xc74/0xf40 [ 486.146136][ T8003] chown_common+0x486/0x620 [ 486.151292][ T8003] ksys_fchown+0xe2/0x150 [ 486.156183][ T8003] __x64_sys_fchown+0x76/0x80 [ 486.161421][ T8003] do_syscall_64+0x4c/0xa0 [ 486.166398][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.172985][ T8003] [ 486.172985][ T8003] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 486.183567][ T8003] down_write+0x36/0x60 [ 486.188287][ T8003] ocfs2_lock_global_qf+0x1c7/0x270 [ 486.194058][ T8003] ocfs2_acquire_dquot+0x2a0/0xb10 [ 486.199729][ T8003] dqget+0x778/0xeb0 [ 486.204192][ T8003] ocfs2_setattr+0xf16/0x1cf0 [ 486.209445][ T8003] notify_change+0xc74/0xf40 [ 486.214637][ T8003] chown_common+0x486/0x620 [ 486.219707][ T8003] ksys_fchown+0xe2/0x150 [ 486.224607][ T8003] __x64_sys_fchown+0x76/0x80 [ 486.229868][ T8003] do_syscall_64+0x4c/0xa0 [ 486.234851][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.241321][ T8003] [ 486.241321][ T8003] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 486.249010][ T8003] __mutex_lock+0x120/0xaf0 [ 486.254088][ T8003] dquot_commit+0x5a/0x410 [ 486.259068][ T8003] ext4_write_dquot+0x1f0/0x360 [ 486.264484][ T8003] mark_all_dquot_dirty+0xf9/0x400 [ 486.270248][ T8003] __dquot_free_space+0x7ec/0xbc0 [ 486.275838][ T8003] ext4_free_blocks+0x1bab/0x2640 [ 486.281523][ T8003] ext4_ext_remove_space+0x1f0d/0x4490 [ 486.287545][ T8003] ext4_ext_truncate+0x211/0x370 [ 486.293048][ T8003] ext4_truncate+0xa0b/0x1230 [ 486.298294][ T8003] ext4_setattr+0x10cb/0x19f0 [ 486.303581][ T8003] notify_change+0xc74/0xf40 [ 486.308771][ T8003] do_truncate+0x197/0x220 [ 486.313752][ T8003] path_openat+0x27f2/0x2e70 [ 486.318959][ T8003] do_filp_open+0x1c1/0x3c0 [ 486.324041][ T8003] do_sys_openat2+0x142/0x490 [ 486.329281][ T8003] __x64_sys_creat+0x8c/0xb0 [ 486.334433][ T8003] do_syscall_64+0x4c/0xa0 [ 486.339413][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.345886][ T8003] [ 486.345886][ T8003] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 486.353662][ T8003] down_write+0x36/0x60 [ 486.358376][ T8003] ext4_truncate+0x987/0x1230 [ 486.363621][ T8003] ext4_setattr+0x10cb/0x19f0 [ 486.368865][ T8003] notify_change+0xc74/0xf40 [ 486.374011][ T8003] do_truncate+0x197/0x220 [ 486.378990][ T8003] do_sys_ftruncate+0x312/0x3c0 [ 486.384396][ T8003] do_syscall_64+0x4c/0xa0 [ 486.389373][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.395835][ T8003] [ 486.395835][ T8003] -> #2 (jbd2_handle){++++}-{0:0}: [ 486.403169][ T8003] start_this_handle+0x1f49/0x2150 [ 486.408818][ T8003] jbd2__journal_start+0x2b7/0x5a0 [ 486.414495][ T8003] jbd2_journal_start+0x26/0x30 [ 486.419881][ T8003] ocfs2_start_trans+0x372/0x6c0 [ 486.425354][ T8003] ocfs2_modify_bh+0xe5/0x460 [ 486.430571][ T8003] ocfs2_local_read_info+0x13b1/0x16e0 [ 486.436556][ T8003] dquot_load_quota_sb+0x756/0xac0 [ 486.442230][ T8003] dquot_load_quota_inode+0x2d8/0x5d0 [ 486.448138][ T8003] ocfs2_enable_quotas+0x1c3/0x440 [ 486.453799][ T8003] ocfs2_fill_super+0x409f/0x4d00 [ 486.459379][ T8003] mount_bdev+0x287/0x3c0 [ 486.464284][ T8003] legacy_get_tree+0xe6/0x180 [ 486.469846][ T8003] vfs_get_tree+0x88/0x270 [ 486.474865][ T8003] do_new_mount+0x24a/0xa40 [ 486.479916][ T8003] __se_sys_mount+0x2d6/0x3c0 [ 486.485226][ T8003] do_syscall_64+0x4c/0xa0 [ 486.490185][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.496625][ T8003] [ 486.496625][ T8003] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 486.505152][ T8003] down_read+0x42/0x2d0 [ 486.509846][ T8003] ocfs2_start_trans+0x366/0x6c0 [ 486.515324][ T8003] ocfs2_modify_bh+0xe5/0x460 [ 486.520635][ T8003] ocfs2_local_read_info+0x13b1/0x16e0 [ 486.526644][ T8003] dquot_load_quota_sb+0x756/0xac0 [ 486.532389][ T8003] dquot_load_quota_inode+0x2d8/0x5d0 [ 486.538391][ T8003] ocfs2_enable_quotas+0x1c3/0x440 [ 486.544377][ T8003] ocfs2_fill_super+0x409f/0x4d00 [ 486.549964][ T8003] mount_bdev+0x287/0x3c0 [ 486.554842][ T8003] legacy_get_tree+0xe6/0x180 [ 486.560073][ T8003] vfs_get_tree+0x88/0x270 [ 486.565081][ T8003] do_new_mount+0x24a/0xa40 [ 486.570117][ T8003] __se_sys_mount+0x2d6/0x3c0 [ 486.575339][ T8003] do_syscall_64+0x4c/0xa0 [ 486.580298][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.586769][ T8003] [ 486.586769][ T8003] -> #0 (sb_internal#4){.+.+}-{0:0}: [ 486.594300][ T8003] __lock_acquire+0x2cf8/0x7c50 [ 486.599687][ T8003] lock_acquire+0x1b4/0x490 [ 486.604726][ T8003] ocfs2_start_trans+0x267/0x6c0 [ 486.610197][ T8003] ocfs2_extend_allocation+0x6c8/0x1840 [ 486.616378][ T8003] ocfs2_extend_no_holes+0x20b/0x490 [ 486.622211][ T8003] ocfs2_acquire_dquot+0x5e8/0xb10 [ 486.627859][ T8003] dqget+0x778/0xeb0 [ 486.632306][ T8003] ocfs2_setattr+0xf16/0x1cf0 [ 486.637546][ T8003] notify_change+0xc74/0xf40 [ 486.642673][ T8003] chown_common+0x486/0x620 [ 486.647709][ T8003] ksys_fchown+0xe2/0x150 [ 486.652574][ T8003] __x64_sys_fchown+0x76/0x80 [ 486.657781][ T8003] do_syscall_64+0x4c/0xa0 [ 486.662729][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.669157][ T8003] [ 486.669157][ T8003] other info that might help us debug this: [ 486.669157][ T8003] [ 486.679408][ T8003] Chain exists of: [ 486.679408][ T8003] sb_internal#4 --> &ocfs2_quota_ip_alloc_sem_key --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 [ 486.679408][ T8003] [ 486.696423][ T8003] Possible unsafe locking scenario: [ 486.696423][ T8003] [ 486.703889][ T8003] CPU0 CPU1 [ 486.709271][ T8003] ---- ---- [ 486.714635][ T8003] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 486.721931][ T8003] lock(&ocfs2_quota_ip_alloc_sem_key); [ 486.730096][ T8003] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 486.739925][ T8003] lock(sb_internal#4); [ 486.744195][ T8003] [ 486.744195][ T8003] *** DEADLOCK *** [ 486.744195][ T8003] [ 486.752344][ T8003] 6 locks held by syz.0.741/8003: [ 486.757403][ T8003] #0: ffff888026100460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 486.767200][ T8003] #1: ffff8880530d09c8 (&type->i_mutex_dir_key#11){+.+.}-{3:3}, at: chown_common+0x320/0x620 [ 486.777510][ T8003] #2: ffff8880532360a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 486.787548][ T8003] #3: ffff8880530d5f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 486.800535][ T8003] #4: ffff8880530d5be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 486.811877][ T8003] #5: ffff8880530d5108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 486.825559][ T8003] [ 486.825559][ T8003] stack backtrace: [ 486.831461][ T8003] CPU: 0 PID: 8003 Comm: syz.0.741 Not tainted syzkaller #0 [ 486.838763][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.848871][ T8003] Call Trace: [ 486.852169][ T8003] [ 486.855123][ T8003] dump_stack_lvl+0x168/0x22e [ 486.859814][ T8003] ? load_image+0x3b0/0x3b0 [ 486.864418][ T8003] ? show_regs_print_info+0x12/0x12 [ 486.869649][ T8003] ? print_circular_bug+0x12b/0x1a0 [ 486.874874][ T8003] check_noncircular+0x274/0x310 [ 486.879840][ T8003] ? add_chain_block+0x940/0x940 [ 486.884812][ T8003] ? lockdep_lock+0xdc/0x1e0 [ 486.890025][ T8003] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 486.895501][ T8003] ? mark_lock+0x94/0x320 [ 486.899840][ T8003] ? _find_first_zero_bit+0xcf/0x100 [ 486.905140][ T8003] __lock_acquire+0x2cf8/0x7c50 [ 486.910018][ T8003] ? verify_lock_unused+0x140/0x140 [ 486.915250][ T8003] ? verify_lock_unused+0x140/0x140 [ 486.920471][ T8003] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 486.926563][ T8003] ? ocfs2_reserve_clusters_with_limit+0x594/0xba0 [ 486.933102][ T8003] lock_acquire+0x1b4/0x490 [ 486.937639][ T8003] ? ocfs2_extend_allocation+0x6c8/0x1840 [ 486.943496][ T8003] ? __might_sleep+0xd0/0xd0 [ 486.948205][ T8003] ? do_raw_spin_lock+0x11d/0x280 [ 486.953273][ T8003] ? read_lock_is_recursive+0x10/0x10 [ 486.958663][ T8003] ? __rwlock_init+0x140/0x140 [ 486.963478][ T8003] ? stack_trace_save+0x98/0xe0 [ 486.968428][ T8003] ? do_raw_spin_unlock+0x11d/0x230 [ 486.973728][ T8003] ocfs2_start_trans+0x267/0x6c0 [ 486.978740][ T8003] ? ocfs2_extend_allocation+0x6c8/0x1840 [ 486.984603][ T8003] ? ocfs2_recovery_exit+0x50/0x50 [ 486.989753][ T8003] ? ocfs2_acquire_dquot+0x2e8/0xb10 [ 486.995069][ T8003] ? ocfs2_setattr+0xf16/0x1cf0 [ 486.999934][ T8003] ? notify_change+0xc74/0xf40 [ 487.004711][ T8003] ? chown_common+0x486/0x620 [ 487.009399][ T8003] ? __x64_sys_fchown+0x76/0x80 [ 487.014263][ T8003] ? do_syscall_64+0x4c/0xa0 [ 487.018858][ T8003] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.024972][ T8003] ocfs2_extend_allocation+0x6c8/0x1840 [ 487.030990][ T8003] ? __lock_acquire+0x13c0/0x7c50 [ 487.036044][ T8003] ? ocfs2_extend_no_holes+0x490/0x490 [ 487.041541][ T8003] ? kasan_quarantine_put+0xd4/0x220 [ 487.046866][ T8003] ? lockdep_hardirqs_on+0x94/0x140 [ 487.052615][ T8003] ? slab_free_freelist_hook+0x131/0x1a0 [ 487.058282][ T8003] ? ocfs2_allocate_extend_trans+0x640/0x640 [ 487.064495][ T8003] ? find_tree_dqentry+0xbb1/0xf30 [ 487.069647][ T8003] ? ocfs2_qinfo_unlock+0xa4/0x140 [ 487.074781][ T8003] ocfs2_extend_no_holes+0x20b/0x490 [ 487.080101][ T8003] ? ocfs2_zero_extend+0x2950/0x2950 [ 487.085438][ T8003] ? do_raw_spin_unlock+0x11d/0x230 [ 487.090657][ T8003] ? _raw_spin_unlock+0x24/0x40 [ 487.095530][ T8003] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 487.100789][ T8003] ocfs2_acquire_dquot+0x5e8/0xb10 [ 487.105935][ T8003] ? ocfs2_destroy_dquot+0x40/0x40 [ 487.111078][ T8003] ? percpu_counter_add_batch+0x13b/0x160 [ 487.116815][ T8003] dqget+0x778/0xeb0 [ 487.120724][ T8003] ocfs2_setattr+0xf16/0x1cf0 [ 487.125423][ T8003] ? ocfs2_extend_allocation+0x1840/0x1840 [ 487.131260][ T8003] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 487.137078][ T8003] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 487.143343][ T8003] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 487.149277][ T8003] ? current_time+0x197/0x2b0 [ 487.153966][ T8003] ? atime_needs_update+0x780/0x780 [ 487.159173][ T8003] ? common_perm_cond+0x2ad/0x340 [ 487.164243][ T8003] ? evm_inode_setattr+0x91/0x790 [ 487.169280][ T8003] ? bpf_lsm_inode_setattr+0x5/0x10 [ 487.174490][ T8003] ? security_inode_setattr+0xd8/0x140 [ 487.179973][ T8003] ? try_break_deleg+0x79/0x120 [ 487.184854][ T8003] ? ocfs2_extend_allocation+0x1840/0x1840 [ 487.190692][ T8003] notify_change+0xc74/0xf40 [ 487.195310][ T8003] chown_common+0x486/0x620 [ 487.199826][ T8003] ? __ia32_sys_chmod+0x70/0x70 [ 487.204687][ T8003] ? rcu_read_lock_any_held+0xb0/0x120 [ 487.210163][ T8003] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 487.215465][ T8003] ? __mnt_want_write+0x21f/0x2a0 [ 487.220517][ T8003] ? mnt_want_write_file+0x16e/0x200 [ 487.225839][ T8003] ksys_fchown+0xe2/0x150 [ 487.230194][ T8003] __x64_sys_fchown+0x76/0x80 [ 487.234902][ T8003] do_syscall_64+0x4c/0xa0 [ 487.239344][ T8003] ? clear_bhb_loop+0x60/0xb0 [ 487.244026][ T8003] ? clear_bhb_loop+0x60/0xb0 [ 487.248719][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.254634][ T8003] RIP: 0033:0x7ff5a758ebe9 [ 487.259064][ T8003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.278700][ T8003] RSP: 002b:00007ff5a84b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 487.287167][ T8003] RAX: ffffffffffffffda RBX: 00007ff5a77c5fa0 RCX: 00007ff5a758ebe9 [ 487.295157][ T8003] RDX: 000000000000200a RSI: 000000003a736e6f RDI: 0000000000000004 [ 487.303136][ T8003] RBP: 00007ff5a7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 487.311122][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.319189][ T8003] R13: 00007ff5a77c6038 R14: 00007ff5a77c5fa0 R15: 00007ffd5964d7a8 [ 487.327193][ T8003] [ 487.335714][ T7704] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 487.343290][ T5643] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 487.362576][ T5643] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 487.373971][ T5643] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.404938][ T8003] (syz.0.741,8003,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 487.418710][ T8003] (syz.0.741,8003,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 487.431297][ T8003] (syz.0.741,8003,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 487.439817][ T8003] (syz.0.741,8003,1):ocfs2_quota_read:201 ERROR: status = -5 [ 487.447916][ T8003] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 487.459339][ T8003] (syz.0.741,8003,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 487.755382][ T5643] usb 5-1: string descriptor 0 read error: -71 [ 487.763092][ T5643] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.772388][ T5643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.782636][ T5643] usb 5-1: can't set config #1, error -71 [ 487.795030][ T4266] ocfs2: Unmounting device (7,0) on (node local) [ 487.802532][ T5643] usb 5-1: USB disconnect, device number 9 [ 487.937500][ T7685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.970768][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.988868][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.000918][ T7685] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.014082][ T4450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.042007][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.053060][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.062715][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.069886][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.086035][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 488.095880][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.106429][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.113609][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.131844][ T4450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.154436][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.162341][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.172973][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.185487][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.197498][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.209444][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.218165][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.230694][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.242677][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.262234][ T7704] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.274533][ T4450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.291451][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.305250][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.313732][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.326495][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.340747][ T7685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.364590][ T7685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.376730][ T4450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.400021][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.411642][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.420641][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.427894][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.438469][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.447132][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.456560][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 488.465627][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.475418][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.482686][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.491878][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.501004][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.533798][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.546068][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.556289][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.567921][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.578338][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.590812][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.600639][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.627479][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.638366][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.647135][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.671757][ T7704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.843165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 488.859141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.875877][ T7685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.084029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 489.094736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 489.115711][ T7704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.149113][ T4450] IPVS: stopping backup sync thread 7558 ... [ 489.336658][ T4450] device hsr_slave_0 left promiscuous mode [ 489.352492][ T4450] device hsr_slave_1 left promiscuous mode [ 489.369138][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.376629][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.393486][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.421341][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.431921][ T4450] device bridge_slave_1 left promiscuous mode [ 489.438164][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.468051][ T4450] device bridge_slave_0 left promiscuous mode [ 489.474536][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.486263][ T4450] device veth1_macvtap left promiscuous mode [ 489.492750][ T4450] device veth0_macvtap left promiscuous mode [ 489.499159][ T4450] device veth1_vlan left promiscuous mode [ 489.505049][ T4450] device veth0_vlan left promiscuous mode [ 489.654310][ T4450] team0 (unregistering): Port device team_slave_1 removed [ 489.678988][ T4450] team0 (unregistering): Port device team_slave_0 removed [ 489.705916][ T4450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.732242][ T4450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.791377][ T4450] bond0 (unregistering): Released all slaves [ 489.864393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 489.876689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 489.959284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 489.968164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 489.983661][ T7685] device veth0_vlan entered promiscuous mode [ 489.995263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.004362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.022928][ T7685] device veth1_vlan entered promiscuous mode [ 490.054996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.064745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.096196][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 490.105669][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.115344][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.124885][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.146816][ T7685] device veth0_macvtap entered promiscuous mode [ 490.162329][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.181687][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.191484][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 490.202839][ T7704] device veth0_vlan entered promiscuous mode [ 490.211996][ T7685] device veth1_macvtap entered promiscuous mode [ 490.234251][ T7704] device veth1_vlan entered promiscuous mode [ 490.253596][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.266155][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.289338][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.300065][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.309976][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.321508][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.333055][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.378867][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 490.387065][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 490.405313][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 490.415794][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 490.432023][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 490.441205][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.452736][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.465082][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.476573][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.486552][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.500589][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.512371][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.524644][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.538080][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.547676][ T7704] device veth0_macvtap entered promiscuous mode [ 490.561771][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 490.578285][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 490.587974][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 490.599381][ T7685] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.608116][ T7685] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.617786][ T7685] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.627866][ T7685] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.639423][ T7704] device veth1_macvtap entered promiscuous mode [ 490.680527][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.692880][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.702880][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.713587][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.723589][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.734346][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.744509][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.755025][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.765955][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.782889][ T7685] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 490.793575][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 490.804048][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 490.812768][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 490.828600][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.840032][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.850570][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.861760][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.871648][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.882098][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.892703][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.903836][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.914931][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.928447][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 490.938416][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 490.949567][ T7704] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.958298][ T7704] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.967266][ T7704] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.976558][ T7704] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.992840][ T4450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.001909][ T4450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.012985][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 491.021128][ T7685] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 491.058317][ T7704] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 491.068422][ T4450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.086401][ T4450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.093416][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.101594][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 491.118409][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.124580][ T7704] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 491.137842][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 491.177558][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.186224][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.197183][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready