last executing test programs: 16m45.105497542s ago: executing program 32 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r3, 0x0, 0xffffffffffffff87) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r4, &(0x7f0000004140)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 15m22.149321188s ago: executing program 33 (id=172): socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 12m11.499563232s ago: executing program 34 (id=739): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m5.011753898s ago: executing program 35 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x0, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r0, 0xee01}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x54800}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) 8m57.605853909s ago: executing program 36 (id=1338): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000000)) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 8m57.134050544s ago: executing program 37 (id=1343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="4017", 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m55.717377798s ago: executing program 38 (id=1350): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r3, 0x0, 0xffffffffffffff87) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r4, &(0x7f0000004140)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$FUSE_CREATE_OPEN(r5, 0x0, 0x0) 5m44.576865745s ago: executing program 39 (id=2346): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m15.325442452s ago: executing program 3 (id=3162): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000077b59df4a9"], 0x80}}, 0x0) 5m15.315734893s ago: executing program 3 (id=3164): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m15.191968026s ago: executing program 3 (id=3165): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 5m15.07978439s ago: executing program 3 (id=3168): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 5m13.200197288s ago: executing program 3 (id=3186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee", 0x4d}], 0x1) 5m12.620218336s ago: executing program 3 (id=3190): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sync() mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000008800), 0x2000, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x231687f, 0x1000, 0xc, 0x7ff, 0x58, 0x0, 0x0, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x3, 0x3e, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 5m2.694535424s ago: executing program 40 (id=3146): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x58, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x8, 0x0, 0x80000}}, @TCA_CT_LABELS={0x14, 0x7, "c65aed0777e12f50e66c7e67ec216814"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x30004850) 4m57.197806544s ago: executing program 41 (id=3190): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sync() mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000008800), 0x2000, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x231687f, 0x1000, 0xc, 0x7ff, 0x58, 0x0, 0x0, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x3, 0x3e, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 4m28.385347077s ago: executing program 1 (id=3569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) 4m28.242797032s ago: executing program 1 (id=3572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x7, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 4m28.117572396s ago: executing program 1 (id=3573): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c12, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x28) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 4m27.443806037s ago: executing program 1 (id=3575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100dc3ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x1059a, &(0x7f0000010640)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m26.016748361s ago: executing program 1 (id=3586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r0}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) 4m25.06922162s ago: executing program 1 (id=3590): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2000, @none, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = gettid() getpgid(r1) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x0, &(0x7f00000000c0)) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={r2, 0xee01}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES16=r5], 0x15c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4010) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./file7\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x210f40b, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) 4m25.007822213s ago: executing program 42 (id=3590): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2000, @none, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = gettid() getpgid(r1) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x0, &(0x7f00000000c0)) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={r2, 0xee01}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES16=r5], 0x15c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4010) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./file7\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x210f40b, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) 4m20.930010279s ago: executing program 6 (id=3632): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000200)=0xfe) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x7, 0x42, 0x6, 0x9a}, {0x9, 0x10, 0x7, 0x7}, {0x1, 0xff, 0x6, 0x6}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x24040040) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x242c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r7, r6, 0x0, 0x578410eb) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0080ff", @ANYRES16=r5, @ANYBLOB="000829bd7000fddbdf256900000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000000270000000500d2000d0000000a000600ffffffffffff00000a00060008021100000100000600d400020000000a0006000802110000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000005) io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) syz_io_uring_setup(0x4bc5, &(0x7f0000000480)={0x0, 0x1125, 0x20, 0x0, 0x393, 0x0, r10}, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000500)) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={{r4}, 0xdd, 0x9, 0x7964}) 4m20.729289245s ago: executing program 6 (id=3633): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x240001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x12, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 4m19.116140065s ago: executing program 6 (id=3646): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x400000000003ff, 0x7}) 4m19.063005787s ago: executing program 6 (id=3647): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m18.776295326s ago: executing program 6 (id=3649): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f00000034c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 4m18.656988739s ago: executing program 6 (id=3653): socket$netlink(0x10, 0x3, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="100000002500040026bd"], 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0x7}], 0x1, 0x8042, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) getpid() syz_usb_connect(0x3, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x3e, 0xf8, 0x65, 0x10, 0x45e, 0x2ae, 0xe58e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd0, 0x5, 0x80, 0x8, "", [{{0x9, 0x4, 0x25, 0x3, 0x0, 0xf1, 0x77, 0x1, 0x4}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) 4m18.556655042s ago: executing program 43 (id=3653): socket$netlink(0x10, 0x3, 0x5) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="100000002500040026bd"], 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}], 0x2}, 0x7}], 0x1, 0x8042, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) getpid() syz_usb_connect(0x3, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x3e, 0xf8, 0x65, 0x10, 0x45e, 0x2ae, 0xe58e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd0, 0x5, 0x80, 0x8, "", [{{0x9, 0x4, 0x25, 0x3, 0x0, 0xf1, 0x77, 0x1, 0x4}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) 52.054484986s ago: executing program 7 (id=4492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x3fb}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 51.688715057s ago: executing program 4 (id=4497): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x237, &(0x7f0000000280)="$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") r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="0800101d89b5", 0x6}], 0x1}, 0x20010404) fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) r1 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r1, 0x3041}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 51.366125827s ago: executing program 4 (id=4498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x0, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r0, 0xee01}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x54800}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000100), 0x0}, 0x20) 48.357206051s ago: executing program 4 (id=4501): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xe, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r3, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x0, 0xfffffffb}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="190000000400000004000000020000", @ANYRES32, @ANYBLOB="0000000000c848f57bf4d1ad0c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xb, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$RTC_UIE_ON(r0, 0x7003) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) 48.257169334s ago: executing program 7 (id=4502): syz_open_procfs$namespace(0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, 0x0, 0x44000) add_key(&(0x7f0000000440)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf25010000000000000007410000001400180000"], 0x30}, 0x1, 0x0, 0x0, 0x4c801}, 0x10000000) keyctl$revoke(0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nobh}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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") 46.852844797s ago: executing program 7 (id=4506): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x10}}, 0x24, 0x0) 46.75546002s ago: executing program 7 (id=4507): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010052, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x303000, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) 46.209101147s ago: executing program 7 (id=4511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r3, &(0x7f000000cf00), 0x400000000000062, 0x2, 0x0) 46.053428672s ago: executing program 7 (id=4512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x3fb}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 46.008183953s ago: executing program 44 (id=4512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x3fb}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 45.643126915s ago: executing program 4 (id=4517): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010052, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x303000, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) 45.360295804s ago: executing program 4 (id=4518): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x237, &(0x7f0000000280)="$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") r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000080)}, 0x20010404) fsopen(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r1, 0x3041}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 44.420749902s ago: executing program 4 (id=4520): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 44.155429181s ago: executing program 45 (id=4520): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 15.885961687s ago: executing program 2 (id=4592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r2, 0x0, 0xffffffffffffff87) 13.456428423s ago: executing program 9 (id=4598): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af25, &(0x7f00000001c0)={@host}) r2 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc020000000000000000000000000000ff020000000000000000000000000001040090780000000038d0689d4114ee6097436700008800fe88001e000000000000000000000001fe80000ffe4276bcce378a00000000aa00010000000000000106000000", @ANYRES64=r2, @ANYRESDEC=r1], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x1, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab}) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TIOCMBIC(r7, 0x5417, 0x0) close(r6) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6(0xa, 0xa, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) 11.342030248s ago: executing program 2 (id=4605): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 10.832929174s ago: executing program 9 (id=4608): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x77359400}}, 0x0) 10.056269208s ago: executing program 2 (id=4610): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, 0x0, 0x0, 0x0, r2) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) keyctl$session_to_parent(0x12) 9.845394185s ago: executing program 0 (id=4612): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x430, &(0x7f0000000300)={[{@xino_auto}]}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) 8.465441047s ago: executing program 9 (id=4613): r0 = syz_open_dev$evdev(0x0, 0x1, 0x2002) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000000}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 8.409580659s ago: executing program 8 (id=4614): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_settime(0x0, 0x0) io_setup(0x1, &(0x7f00000003c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r3, 0x0, 0x0) truncate(0x0, 0x6) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x10}) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0x1, 0x2aa, &(0x7f0000000840)="$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") syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000700)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid}, {@gid}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 8.38045137s ago: executing program 0 (id=4615): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x18000, &(0x7f00000000c0)={[{@nombcache}, {@bsdgroups}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4eb, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvbHdpAdGKiIIIBTQ2JrZQfsZ4wcTEgyZGPMCxaStBChjagxAiJTGcvJB4NDEejTdNvOrRePIPQBMPJoaEGC6ApzGzO9Nut7vbLi0tZT+fZLvv7bw3771982bfzutsAF1rIPuTRDwVEbci4pladH6CgdrT/btXxx7cvToWM2l68t+kmu5eFs8V+TbnkcFSROmLpGGHNVOXr5wbnZycuJTHh6fPfzo8dfnKG2fPj56ZODNxYeT48cOHDh47OnKk80Y1KS9r172dn1/ctePd0zffHysXr/flz/XtaKncWTUG2mx7tbNdPfa21IWThe/TtVWtDEvWlx/WlWz8X53cd3qtKwSsmjRN097Wm2fSRtcXvAKsW0msdQ2AtVF80Gfff4vHKk09Hgt3TtS+AGXtvp8/alvKUcrTVBq+366kgYg4NfPfN9kj2l2H+OsRVQAA6Dq/nChmgo3zv1Jsr0v3dL6G0h8Rz0bE1oh4LiK2RcTzEdW0L0TEi40FJBFpm/K3NcTnyv8xX0Uo3V52I9vI5n9v5Wtb8+d/xewv+nvy2JaIYsI8cSB/Twaj0vvx2cmJgy32v2GR8uvnf9kjK//UzO43p48WKUq3yw0X6MZHp0cftr2N7lyP2FlubH9SzjquWMZJImJHROzsYL/9deGzr3+3azZSyZ+/rj01b39tLlwnbbKk1/F6XDPptxGv1fp/Jur7P5krMWm5Pnn5y4gjw30xOXFgODsKDjQt47ffb3zQqvxF2//T341Z3jn288llt7uQ9f+muuM/ivXbuUXU/iQimV2vnYpIezor48YfrTMs3v/Nj/8NyUfVcDG+Phudnr50MGJD8t7C10fm8hbxIn3W/sH9zcf/1jxP9k68FBHZQfxyROyOiD153fdGxL6I2N+m/b++/conD9/+Rytr/3jT89+8/p9br28f+DPyQJE529Rzbu+tBy1OHkvr/8PV0GD+SvPzXzLvFLFoTWePZgAAAHjylaL6v/+lodlwqTQ0VLsGtC02lSYvTk3viYgL47V7BPqjUiqudNWuB1eS4vpnf118pCF+KL9u/FXPxmp8aOzi5PhaNx663ObqmE8WjP/MPx1e5wXWoRVYRwPWqcXG//abq1QRYNX5/IfuVTf+Z1okmfGfMvBk8vkP3avZ+L8W37e9d8E5A9a/1FiGrmb8Q/cqx4ez4eptz03vtgWeRD7/oSst8b7+jgLFzzVcOZf2Nk/TFwtzRd8KVyMPbFxQVtKk9FUIZDOrZe1n/o8aVCJiadk3PkyhxRSwZZoodbbD3li4qSfa5Uo6+B2HIlCJSBdNfGb7ih/8xW+irPRh88PcOK3U9UV5sd5ZfmBVT0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPzP8BAAD///pDzmw=") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) close(r0) timerfd_gettime(r0, &(0x7f0000000000)) 8.289020143s ago: executing program 9 (id=4616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r3, 0x0, 0xffffffffffffff87) 8.285587733s ago: executing program 5 (id=4617): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f00000003c0)) 6.831773678s ago: executing program 5 (id=4618): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000014, &(0x7f0000000480)=ANY=[], 0xfe, 0x2e8, &(0x7f0000000580)="$eJzs3U9rE08YwPGnSX9NmtImPxBBQR30opelrS9Ag7QgBpTaiHoQtnajIWtSdkMkIiYX8errKB69Ceob6EW8ePdWBMFLD+JIdvNnkybN9n9rvx9o99mdeZihScMzgZ1dv//2WSHnGjmzLJG4kohIXTZEUo2oaaR5jHjxmATV5crEr2/n7j54eCudycwtKDWfXrw6q5SauvDx+ct3Fz+XJ+69n/oQk7XUo/Wfs9/XxtbOrP9ZfJp3Vd5VxVJZmWqpVCqbS7allvNuwVDqjm2ZrqXyRddyutpzdmllparMYkwSK47lusosVlXBqqpySZWdqjKfmPmiMgxDTSbkZBsN0Se7urBgpgc26+iezgj7brzfRcdJ1/s3ZlcPYE4AAOCI2br+92v9QfV/pzrcTv1/enj9LxKs/+PNQYL1//Ik9f+O1LvOhtT/OJ5q3aeOkzYTzf/fbtT/AAAAAAAAAAAAAAAAAAAAAAAcBxtaJ7UeCV5Kaq2TMRGJ+7eAe+eHN0PsJ//118nWsfXTfv2b5z1p1w5puthjgRv34iL2m0q2kvWPfns6J3mxxZJpScpv7/3Q5MfzNzNz08qTkk92rZKtREUax6jEWvktqX755/+f8fOVn9+6q/A/SQTHn5WknOo/fiOjk+/Nv1bJjsnlS4F8Q5Ly5bGUxJZl733dyX81o9SN25me/HGvHwAAAAAA/wJDtaW617/+OtzwOsRlc7ufH/h+QGtda/xqbxDU8/1Az/p6VM6G2aISAAAAAADsmlt9UTBt23JCBRIJXomJyPAsPbKtIXYTaC1yUGMNDqJymKMPCq6LyBGYxkEFcRHxr6idpP9op4fK0iH6jDafwHE0/j7Dg/6fFzwRBgAAADi+Amv78L6+3scZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw8oTdD6zVf1NTq2GrXQM72D4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9rfAAAA///qDAZN") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x400a}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) sendmmsg$inet(r4, &(0x7f0000002b80)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="140000000000000000000000070000000100a5f5bacb87e4"], 0x18}}], 0x1, 0x4) 6.351141013s ago: executing program 8 (id=4619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300), 0x0) 6.255473346s ago: executing program 0 (id=4620): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af25, &(0x7f00000001c0)={@host}) r2 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc020000000000000000000000000000ff020000000000000000000000000001040090780000000038d0689d4114ee6097436700008800fe88001e000000000000000000000001fe80000ffe4276bcce378a00000000aa00010000000000000106000000", @ANYRES64=r2, @ANYRESDEC=r1], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x1, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab}) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TIOCMBIC(r7, 0x5417, 0x0) close(r6) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6(0xa, 0xa, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) 6.12136137s ago: executing program 2 (id=4621): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 5.45632802s ago: executing program 5 (id=4622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x54800}, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000100), 0x0}, 0x20) 5.411152392s ago: executing program 8 (id=4623): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)) rmdir(&(0x7f0000000200)='./file0/file1\x00') 3.20642304s ago: executing program 2 (id=4624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x9, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r10) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.114718813s ago: executing program 8 (id=4625): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x77359400}}, 0x0) 3.113795643s ago: executing program 5 (id=4626): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000180)=@random={'security.', 'syz\xf6\xa3>NpW\xb9k\\|\xeb|\x01\x00\x00\x00\x00\x00\x00\x00\xac\x81\v\xe1j}\xb7\a}h\xd6;\a\x85i\xa4q\xb7q\x80\xebXk\x96G1\xdcRd\x89\xae\xd0[\xcf\xf3\xb3\xd5*\xd6\x96\x84\xf4\x0e\x1fH/M\a\xcd\x13\'Z\x98~\xf7\xe5\xa0\x80aGG\xd4\xba\x8f\xce\fd@Glj6\x87\xe9\xb8\x8c\xdaR\xee\xb6D\xff\xa1\xbf#\xb0\xd5\xb9w\xf6!R\xdf,\xf9\xc9\xe1\xf0Das(\x061C\xc5\xa1'}, &(0x7f0000000280)=""/198, 0xff71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x430, &(0x7f0000000300)={[{@xino_auto}]}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) 3.027801146s ago: executing program 0 (id=4627): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2.997604207s ago: executing program 2 (id=4628): syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000075c0)={@local, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x409, 0x0, 0xa, 0x1}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'macsec0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x7}}) 2.732333955s ago: executing program 0 (id=4629): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) 2.678790216s ago: executing program 8 (id=4630): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x27, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000200)={0x2, @long}, 0x8) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000014c0), 0x0, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 2.393135836s ago: executing program 9 (id=4631): syz_open_procfs$namespace(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, 0x0, 0x44000) add_key(&(0x7f0000000440)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf250100000000000000074100000014"], 0x30}, 0x1, 0x0, 0x0, 0x4c801}, 0x10000000) keyctl$revoke(0x3, 0x0) 871.504833ms ago: executing program 5 (id=4632): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8=1,nonumtail=0,shortname=mixed,debug,shortname=win95,rodir,shortname=win95,rodir,uni_xlate=1,uni_xlate=0,codepage=737,shortname=win95,rodir,shortname=winnt,allow_utime=00000000000000000101000,uni_xlate=0,shortname=lower,\x00'], 0x1c, 0x35c, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsmount(r0, 0x1, 0xe) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r3, &(0x7f0000002240)=""/131, 0x83, 0xe5d6) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x2390002, 0x0) 765.638316ms ago: executing program 0 (id=4633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300), 0x0) 694.373438ms ago: executing program 9 (id=4634): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 40.810559ms ago: executing program 8 (id=4635): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) 0s ago: executing program 5 (id=4636): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f00000003c0)) kernel console output (not intermixed with test programs): speed USB device number 45 using dummy_hcd [ 924.343333][ T505] usb 5-1: device descriptor read/64, error -71 [ 924.367213][T11734] EXT4-fs (loop8): unmounting filesystem. [ 924.385876][T12896] EXT4-fs (loop4): unmounting filesystem. [ 924.394081][ T8] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 924.650185][ T8] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 924.814491][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 924.986858][T12896] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 925.147634][T12896] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 925.210331][T12896] EXT4-fs error (device loop4): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 925.410001][T13490] device syzkaller0 entered promiscuous mode [ 925.441433][T13494] device syzkaller0 entered promiscuous mode [ 925.449948][T13496] loop8: detected capacity change from 0 to 256 [ 925.481738][T13496] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 925.495310][T13496] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 925.508360][T13496] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 925.660299][T13502] device syzkaller0 entered promiscuous mode [ 927.143058][T13522] usb usb8: check_ctrlrecip: process 13522 (syz.2.4223) requesting ep 01 but needs 81 [ 927.153123][T13522] usb usb8: usbfs: process 13522 (syz.2.4223) did not claim interface 0 before use [ 927.229952][T13526] loop4: detected capacity change from 0 to 256 [ 927.247898][ T28] audit: type=1400 audit(1781065687.645:522): avc: denied { ioctl } for pid=13520 comm="syz.8.4225" path="socket:[64817]" dev="sockfs" ino=64817 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 930.024166][T13526] FAT-fs (loop4): Directory bread(block 64) failed [ 930.031974][T13526] FAT-fs (loop4): Directory bread(block 65) failed [ 930.072111][T13533] loop9: detected capacity change from 0 to 256 [ 930.078955][T13526] FAT-fs (loop4): Directory bread(block 66) failed [ 930.087548][T13534] device syzkaller0 entered promiscuous mode [ 930.117322][T13526] FAT-fs (loop4): Directory bread(block 67) failed [ 930.136814][T13533] FAT-fs (loop9): Directory bread(block 64) failed [ 930.153671][T13526] FAT-fs (loop4): Directory bread(block 68) failed [ 930.161656][T13533] FAT-fs (loop9): Directory bread(block 65) failed [ 930.171014][T13526] FAT-fs (loop4): Directory bread(block 69) failed [ 930.181174][T13533] FAT-fs (loop9): Directory bread(block 66) failed [ 930.191316][T13526] FAT-fs (loop4): Directory bread(block 70) failed [ 930.201538][T13533] FAT-fs (loop9): Directory bread(block 67) failed [ 930.217584][T13526] FAT-fs (loop4): Directory bread(block 71) failed [ 930.224973][T13533] FAT-fs (loop9): Directory bread(block 68) failed [ 930.235196][T13526] FAT-fs (loop4): Directory bread(block 72) failed [ 930.245368][T13533] FAT-fs (loop9): Directory bread(block 69) failed [ 930.257891][T13526] FAT-fs (loop4): Directory bread(block 73) failed [ 930.265830][T13533] FAT-fs (loop9): Directory bread(block 70) failed [ 930.347190][T13536] device syzkaller0 entered promiscuous mode [ 930.355175][T13533] FAT-fs (loop9): Directory bread(block 71) failed [ 930.402462][T13533] FAT-fs (loop9): Directory bread(block 72) failed [ 930.435188][T13538] loop7: detected capacity change from 0 to 4096 [ 930.441984][T13533] FAT-fs (loop9): Directory bread(block 73) failed [ 930.461352][T13538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 930.522324][T13538] EXT4-fs (loop7): Test dummy encryption mode enabled [ 930.570553][T13546] device syzkaller0 entered promiscuous mode [ 930.582719][T13538] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 930.592000][T13538] System zones: 0-5 [ 930.643060][T13538] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 931.015591][T10658] EXT4-fs (loop7): unmounting filesystem. [ 931.026511][T13555] usb usb8: check_ctrlrecip: process 13555 (syz.4.4238) requesting ep 01 but needs 81 [ 931.036711][T13555] usb usb8: usbfs: process 13555 (syz.4.4238) did not claim interface 0 before use [ 931.037058][T13557] loop2: detected capacity change from 0 to 256 [ 931.098943][T13557] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 933.529181][T13567] loop7: detected capacity change from 0 to 512 [ 933.538763][T13567] EXT4-fs: Ignoring removed nobh option [ 933.997922][T13567] EXT4-fs (loop7): orphan cleanup on readonly fs [ 934.006334][T13567] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #11: block 1: comm syz.7.4243: lblock 0 mapped to illegal pblock 1 (length 1) [ 934.026339][T13567] EXT4-fs (loop7): Remounting filesystem read-only [ 934.033808][T13567] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 934.047988][T13567] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:984: inode #11: comm syz.7.4243: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 934.063666][T13567] EXT4-fs (loop7): Remounting filesystem read-only [ 934.070975][T13567] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.7.4243: ea_inode dec ref err=-117 [ 934.085055][T13567] EXT4-fs (loop7): 1 orphan inode deleted [ 934.093816][T13567] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 934.152224][T13573] loop8: detected capacity change from 0 to 4096 [ 934.197526][T13573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 934.258400][T10658] EXT4-fs (loop7): unmounting filesystem. [ 934.303918][T13573] EXT4-fs (loop8): Test dummy encryption mode enabled [ 934.315124][T13573] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 934.339387][T13579] device syzkaller0 entered promiscuous mode [ 934.340570][T13573] System zones: 0-5 [ 934.360568][T13573] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 934.439450][T11734] EXT4-fs (loop8): unmounting filesystem. [ 934.445732][T13588] device syzkaller0 entered promiscuous mode [ 934.765285][T13597] usb usb8: check_ctrlrecip: process 13597 (syz.2.4252) requesting ep 01 but needs 81 [ 934.775267][T13597] usb usb8: usbfs: process 13597 (syz.2.4252) did not claim interface 0 before use [ 934.791525][ T1524] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 934.864741][T13599] loop2: detected capacity change from 0 to 512 [ 934.919489][T13599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 934.932632][T13599] ext4 filesystem being mounted at /129/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.113050][ T1524] usb 9-1: Using ep0 maxpacket: 16 [ 935.122878][ T1524] usb 9-1: unable to get BOS descriptor or descriptor too short [ 935.133683][ T1524] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.370418][T13610] loop4: detected capacity change from 0 to 512 [ 936.387005][ T28] audit: type=1400 audit(1781065695.940:523): avc: denied { append } for pid=13598 comm="syz.2.4253" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 936.399809][ T1524] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.427061][T11577] EXT4-fs (loop2): unmounting filesystem. [ 936.530583][ T1524] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 938.536391][T13613] loop9: detected capacity change from 0 to 512 [ 938.544476][T13613] EXT4-fs: Ignoring removed nobh option [ 938.561485][ T1524] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.572284][ T1524] usb 9-1: Product: syz [ 938.578416][ T1524] usb 9-1: Manufacturer: syz [ 938.585700][ T1524] usb 9-1: SerialNumber: syz [ 938.641427][ T29] INFO: task syz.5.3146:10421 blocked for more than 167 seconds. [ 938.919711][ T29] Not tainted syzkaller #0 [ 938.934353][T13613] EXT4-fs (loop9): orphan cleanup on readonly fs [ 938.945441][T13613] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #11: block 1: comm syz.9.4256: lblock 0 mapped to illegal pblock 1 (length 1) [ 938.963668][T13613] EXT4-fs (loop9): Remounting filesystem read-only [ 938.972697][T13613] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:984: inode #11: comm syz.9.4256: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 938.997525][T13613] EXT4-fs (loop9): Remounting filesystem read-only [ 939.010008][T13613] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.9.4256: ea_inode dec ref err=-117 [ 939.024389][T13613] EXT4-fs (loop9): 1 orphan inode deleted [ 939.030399][T13613] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 939.068169][T13610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 939.294048][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.303951][ T29] task:syz.5.3146 state:D stack:26504 pid:10421 ppid:7839 flags:0x00004004 [ 939.313918][ T29] Call Trace: [ 939.317264][ T29] [ 939.320421][ T29] __schedule+0xba6/0x1500 [ 939.325613][ T29] ? release_firmware_map_entry+0x190/0x190 [ 939.332614][ T29] ? __kasan_check_write+0x14/0x20 [ 939.332629][T13610] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.338592][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 939.338630][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 939.359449][ T1524] usb 9-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 939.362654][ T29] schedule+0xbd/0x170 [ 939.377988][ T29] schedule_preempt_disabled+0x13/0x20 [ 939.383749][ T29] rwsem_down_read_slowpath+0x7f6/0x1580 [ 939.389691][ T29] ? down_write_killable+0x40/0x40 [ 939.395270][ T29] ? __kasan_check_write+0x14/0x20 [ 939.400484][ T29] ? downgrade_write+0x320/0x370 [ 939.405551][ T29] ? preempt_schedule+0xbc/0xd0 [ 939.410431][ T29] ? __cfi_preempt_schedule+0x10/0x10 [ 939.415922][ T29] down_read+0x9c/0xf0 [ 939.420165][ T29] ? __cfi_down_read+0x10/0x10 [ 939.424960][ T29] ? __put_super+0x55/0x2d0 [ 939.429527][ T29] iterate_supers+0xad/0x1f0 [ 939.434206][ T29] ? __cfi_quota_sync_one+0x10/0x10 [ 939.439511][ T29] __se_sys_quotactl+0x370/0x710 [ 939.444454][ T29] ? __kasan_check_read+0x11/0x20 [ 939.449495][ T29] ? preempt_schedule_irq+0xca/0x120 [ 939.455334][ T29] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 939.461945][ T29] ? __x64_sys_quotactl+0xb0/0xb0 [ 939.466990][ T29] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 939.473854][ T29] ? irqentry_exit+0x37/0x40 [ 939.478495][ T29] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 939.484350][ T29] __x64_sys_quotactl+0x9b/0xb0 [ 939.489862][ T29] x64_sys_call+0x8da/0x9a0 [ 939.494374][ T29] do_syscall_64+0x4c/0xa0 [ 939.498804][ T29] ? clear_bhb_loop+0x30/0x80 [ 939.503736][ T29] ? clear_bhb_loop+0x30/0x80 [ 939.508430][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.514327][ T29] RIP: 0033:0x7f098d19ce59 [ 939.519053][ T29] RSP: 002b:00007f098bbf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 939.528025][ T29] RAX: ffffffffffffffda RBX: 00007f098d416180 RCX: 00007f098d19ce59 [ 939.536317][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 939.544531][ T29] RBP: 00007f098d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 939.553277][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.561379][ T29] R13: 00007f098d416218 R14: 00007f098d416180 R15: 00007ffe266a3878 [ 939.569731][ T29] [ 939.573579][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 939.574301][ T29] INFO: task syz.3.3190:10530 blocked for more than 168 seconds. [ 939.587386][ T29] Not tainted syzkaller #0 [ 939.592432][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.601208][ T29] task:syz.3.3190 state:D stack:27808 pid:10530 ppid:5519 flags:0x00004004 [ 939.610604][ T29] Call Trace: [ 939.614241][ T29] [ 939.617184][ T29] __schedule+0xba6/0x1500 [ 939.622165][ T29] ? release_firmware_map_entry+0x190/0x190 [ 939.628894][ T29] ? __kasan_check_write+0x14/0x20 [ 939.634032][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 939.639271][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 939.644834][ T29] ? finish_wait+0x17d/0x1b0 [ 939.649560][ T29] schedule+0xbd/0x170 [ 939.654101][ T29] schedule_preempt_disabled+0x13/0x20 [ 939.659757][ T29] rwsem_down_read_slowpath+0x7f6/0x1580 [ 939.666269][ T29] ? down_write_killable+0x40/0x40 [ 939.671399][ T29] ? iput+0x289/0x670 [ 939.675388][ T29] ? __kasan_check_write+0x14/0x20 [ 939.680527][ T29] ? downgrade_write+0x320/0x370 [ 939.686097][ T29] down_read+0x9c/0xf0 [ 939.690183][ T29] ? __cfi_down_read+0x10/0x10 [ 939.695017][ T29] ? preempt_count_add+0x42/0x1b0 [ 939.700275][ T29] ? __put_super+0x55/0x2d0 [ 939.704888][ T29] iterate_supers+0xad/0x1f0 [ 939.710202][ T29] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 939.717528][ T29] ksys_sync+0x9d/0x170 [ 939.722710][ T29] ? __cfi_ksys_sync+0x10/0x10 [ 939.727514][ T29] ? debug_smp_processor_id+0x17/0x20 [ 939.733136][ T29] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 939.739476][ T29] __ia32_sys_sync+0xe/0x20 [ 939.744022][ T29] x64_sys_call+0x7de/0x9a0 [ 939.748553][ T29] do_syscall_64+0x4c/0xa0 [ 939.753102][ T29] ? clear_bhb_loop+0x30/0x80 [ 939.757896][ T29] ? clear_bhb_loop+0x30/0x80 [ 939.762605][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.769233][ T29] RIP: 0033:0x7fa85499ce59 [ 939.773726][ T29] RSP: 002b:00007fa85580e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 939.783092][ T29] RAX: ffffffffffffffda RBX: 00007fa854c16090 RCX: 00007fa85499ce59 [ 939.791175][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 939.799190][ T29] RBP: 00007fa854c16090 R08: 0000000000000000 R09: 0000000000000000 [ 939.807221][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.815522][ T29] R13: 00007fa854c16128 R14: 00007fa854c16090 R15: 00007ffc0a1c0758 [ 939.823977][ T29] [ 939.833643][ T29] NMI backtrace for cpu 1 [ 939.838026][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 939.846114][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 939.856531][ T29] Call Trace: [ 939.859819][ T29] [ 939.862846][ T29] __dump_stack+0x21/0x24 [ 939.867279][ T29] dump_stack_lvl+0x110/0x170 [ 939.872056][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 939.877373][ T29] dump_stack+0x15/0x24 [ 939.881564][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 939.886569][ T29] ? rcu_read_unlock_special+0xb2/0x440 [ 939.892661][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 939.898231][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 939.904692][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 939.911487][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 939.917569][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 939.923751][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 939.929760][ T29] watchdog+0xd68/0xeb0 [ 939.933955][ T29] ? __cfi_watchdog+0x10/0x10 [ 939.938738][ T29] ? __kasan_check_read+0x11/0x20 [ 939.943783][ T29] ? __kthread_parkme+0x142/0x180 [ 939.948825][ T29] kthread+0x281/0x320 [ 939.953580][ T29] ? __cfi_watchdog+0x10/0x10 [ 939.958326][ T29] ? __cfi_kthread+0x10/0x10 [ 939.962968][ T29] ret_from_fork+0x1f/0x30 [ 939.967409][ T29] [ 939.970691][ T29] Sending NMI from CPU 1 to CPUs 0: [ 939.976286][ C0] NMI backtrace for cpu 0 [ 939.976301][ C0] CPU: 0 PID: 92 Comm: klogd Not tainted syzkaller #0 [ 939.976319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 939.976329][ C0] RIP: 0010:prb_read_valid+0x4c/0x60 [ 939.976444][ C0] Code: e0 e8 08 3f 19 00 4c 89 75 d8 48 8d 75 d8 4c 89 ff 48 89 da 31 c9 e8 23 00 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4d e0 75 0b <48> 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d4 74 a3 03 0f 1f 40 00 55 48 [ 939.976466][ C0] RSP: 0018:ffffc900007bfb68 EFLAGS: 00000246 [ 939.976481][ C0] RAX: 1ffff920000f7f01 RBX: 0000000000000000 RCX: dd7f683cbbedee00 [ 939.976495][ C0] RDX: 0000000000000000 RSI: 00000000000bdf00 RDI: 0000000000000001 [ 939.976505][ C0] RBP: ffffc900007bfb90 R08: ffffc900007bfac7 R09: 1ffff920000f7f58 [ 939.976517][ C0] R10: dffffc0000000000 R11: fffff520000f7f59 R12: ffffc900007bfca0 [ 939.976530][ C0] R13: 0000000000000000 R14: 0000000000002929 R15: ffffffff87139540 [ 939.976542][ C0] FS: 00007fbd84e35c80(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 939.976557][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.976569][ C0] CR2: 00007ffe3ae97028 CR3: 00000001101cc000 CR4: 00000000003506b0 [ 939.976585][ C0] Call Trace: [ 939.976590][ C0] [ 939.976597][ C0] syslog_print+0x24c/0x600 [ 939.976615][ C0] ? do_syslog+0x7a0/0x7a0 [ 939.976631][ C0] ? __cfi_avc_has_perm+0x10/0x10 [ 939.976647][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 939.976708][ C0] ? cap_capable+0x1aa/0x230 [ 939.976754][ C0] ? __cfi_autoremove_wake_function+0x10/0x10 [ 939.976782][ C0] do_syslog+0x6e1/0x7a0 [ 939.976800][ C0] ? __cfi_do_syslog+0x10/0x10 [ 939.976821][ C0] ? debug_smp_processor_id+0x17/0x20 [ 939.976840][ C0] __x64_sys_syslog+0x7c/0x90 [ 939.976858][ C0] x64_sys_call+0x610/0x9a0 [ 939.976876][ C0] do_syscall_64+0x4c/0xa0 [ 939.976895][ C0] ? clear_bhb_loop+0x30/0x80 [ 939.976911][ C0] ? clear_bhb_loop+0x30/0x80 [ 939.976924][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.976948][ C0] RIP: 0033:0x7fbd84fffa37 [ 939.976961][ C0] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 939.976975][ C0] RSP: 002b:00007ffc97c1fdf8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 939.976992][ C0] RAX: ffffffffffffffda RBX: 00007fbd8519f490 RCX: 00007fbd84fffa37 [ 939.977005][ C0] RDX: 00000000000003ff RSI: 00007fbd8519f490 RDI: 0000000000000002 [ 939.977016][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 939.977027][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007fbd8519f490 [ 939.977038][ C0] R13: 00007fbd8517cdfe R14: 00007fbd8519f5c7 R15: 00007fbd8519f5c7 [ 939.977053][ C0] [ 939.987587][T13630] device syzkaller0 entered promiscuous mode [ 940.017815][T12896] EXT4-fs (loop4): unmounting filesystem. [ 940.034282][ T1524] usb 9-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 940.142728][T13626] loop8: detected capacity change from 0 to 1024 [ 940.154827][T13632] device syzkaller0 entered promiscuous mode [ 940.299809][ T1524] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 940.311967][ T1524] usb 9-1: USB disconnect, device number 16 [ 940.327529][T13626] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 2: comm syz.8.4259: lblock 2 mapped to illegal pblock 2 (length 1) [ 940.344715][T13626] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 940.355469][T13626] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 48: comm syz.8.4259: lblock 0 mapped to illegal pblock 48 (length 1) [ 940.373051][T13638] loop2: detected capacity change from 0 to 256 [ 940.418066][T13638] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 940.425951][T13626] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 940.446176][T13626] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.4259: Failed to acquire dquot type 0 [ 940.465861][T13626] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 940.471725][T13644] loop9: detected capacity change from 0 to 256 [ 940.489836][T13643] loop4: detected capacity change from 0 to 256 [ 940.498946][T13626] EXT4-fs error (device loop8): ext4_evict_inode:281: inode #11: comm syz.8.4259: mark_inode_dirty error [ 940.524175][ T1387] udevd[1387]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 940.540360][T13626] EXT4-fs warning (device loop8): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 940.561342][T13643] FAT-fs (loop4): Directory bread(block 64) failed [ 940.568090][T13643] FAT-fs (loop4): Directory bread(block 65) failed [ 940.571814][T13644] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 940.596554][T13644] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 940.607276][T13644] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 940.643461][T13626] EXT4-fs (loop8): 1 orphan inode deleted [ 940.649259][T13626] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 940.664260][T13643] FAT-fs (loop4): Directory bread(block 66) failed [ 940.681599][T13117] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 940.703459][T13643] FAT-fs (loop4): Directory bread(block 67) failed [ 940.710852][T13643] FAT-fs (loop4): Directory bread(block 68) failed [ 940.717606][T13643] FAT-fs (loop4): Directory bread(block 69) failed [ 940.725964][T13643] FAT-fs (loop4): Directory bread(block 70) failed [ 940.732870][T13643] FAT-fs (loop4): Directory bread(block 71) failed [ 940.740359][T13643] FAT-fs (loop4): Directory bread(block 72) failed [ 940.747011][T13643] FAT-fs (loop4): Directory bread(block 73) failed [ 940.759683][T13117] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 940.861993][T13117] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:11: Failed to release dquot type 0 [ 941.256382][ T6395] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 941.330028][T13656] loop9: detected capacity change from 0 to 1024 [ 941.443434][ T6395] usb 9-1: device descriptor read/64, error -71 [ 941.945397][ T6395] usb 9-1: device descriptor read/64, error -71 [ 941.960334][T13656] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 2: comm syz.9.4268: lblock 2 mapped to illegal pblock 2 (length 1) [ 941.987421][T13656] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 941.995611][T13656] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 48: comm syz.9.4268: lblock 0 mapped to illegal pblock 48 (length 1) [ 942.019551][T13656] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 942.028593][T13656] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.4268: Failed to acquire dquot type 0 [ 942.134409][T13656] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 942.149994][T13656] EXT4-fs error (device loop9): ext4_evict_inode:281: inode #11: comm syz.9.4268: mark_inode_dirty error [ 942.188374][T13656] EXT4-fs warning (device loop9): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 942.216726][T13665] usb usb8: check_ctrlrecip: process 13665 (syz.7.4270) requesting ep 01 but needs 81 [ 942.227014][T13665] usb usb8: usbfs: process 13665 (syz.7.4270) did not claim interface 0 before use [ 942.238125][ T3275] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 942.238552][T13656] EXT4-fs (loop9): 1 orphan inode deleted [ 942.258618][ T6395] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 942.267108][ T1524] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 942.270405][ T3275] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 942.286216][T13656] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 942.295908][ T3275] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:8: Failed to release dquot type 0 [ 942.449280][ T6395] usb 9-1: device descriptor read/64, error -71 [ 942.470038][ T1524] usb 3-1: Using ep0 maxpacket: 16 [ 942.477729][ T1524] usb 3-1: unable to get BOS descriptor or descriptor too short [ 942.503022][ T1524] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.535724][ T1524] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 942.568621][ T1524] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 942.598161][ T1524] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.623937][ T1524] usb 3-1: Product: syz [ 942.637719][ T1524] usb 3-1: Manufacturer: syz [ 942.655221][ T1524] usb 3-1: SerialNumber: syz [ 942.722564][ T6396] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 942.733057][ T6395] usb 9-1: device descriptor read/64, error -71 [ 942.860086][ T6395] usb usb9-port1: attempt power cycle [ 943.012269][ T6396] usb 10-1: device descriptor read/64, error -71 [ 943.229689][T11734] EXT4-fs (loop8): unmounting filesystem. [ 943.241027][ T3275] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 945.606562][ T3275] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 945.626521][ T3275] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:8: Failed to release dquot type 0 [ 945.675269][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 945.681418][T11734] EXT4-fs error (device loop8): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 945.694694][ T5491] EXT4-fs error (device loop9): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 945.723235][T11734] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 945.748568][ T5491] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 945.766977][T11734] EXT4-fs error (device loop8): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 945.799149][ T5491] EXT4-fs error (device loop9): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 945.873142][T13680] loop4: detected capacity change from 0 to 256 [ 945.918065][T13680] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 946.002748][T13685] loop9: detected capacity change from 0 to 256 [ 947.973108][T13685] FAT-fs (loop9): Directory bread(block 64) failed [ 947.982156][T13685] FAT-fs (loop9): Directory bread(block 65) failed [ 947.989394][T13685] FAT-fs (loop9): Directory bread(block 66) failed [ 947.997657][T13685] FAT-fs (loop9): Directory bread(block 67) failed [ 948.005560][T13685] FAT-fs (loop9): Directory bread(block 68) failed [ 948.013231][T13685] FAT-fs (loop9): Directory bread(block 69) failed [ 948.020686][T13685] FAT-fs (loop9): Directory bread(block 70) failed [ 948.024062][T13690] device syzkaller0 entered promiscuous mode [ 948.029996][T13685] FAT-fs (loop9): Directory bread(block 71) failed [ 948.043963][T13685] FAT-fs (loop9): Directory bread(block 72) failed [ 948.050973][T13685] FAT-fs (loop9): Directory bread(block 73) failed [ 948.051922][T13689] device syzkaller0 entered promiscuous mode [ 948.075939][ T1524] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 948.092905][ T1524] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 948.109070][ T1524] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 948.125650][ T1524] usb 3-1: USB disconnect, device number 43 [ 948.164059][ T1387] udevd[1387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 948.187127][T13693] loop2: detected capacity change from 0 to 256 [ 948.211369][T13693] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 948.239442][T13693] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 948.258506][T13693] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 948.364880][T13698] loop8: detected capacity change from 0 to 512 [ 948.634843][T13702] loop4: detected capacity change from 0 to 1024 [ 948.775543][T13698] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 948.803023][T13698] ext4 filesystem being mounted at /138/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.805922][T13702] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.4279: lblock 2 mapped to illegal pblock 2 (length 1) [ 948.909150][T13702] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 948.930622][T13702] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.4279: lblock 0 mapped to illegal pblock 48 (length 1) [ 949.472921][T13714] usb usb8: check_ctrlrecip: process 13714 (syz.9.4282) requesting ep 01 but needs 81 [ 949.483151][T13714] usb usb8: usbfs: process 13714 (syz.9.4282) did not claim interface 0 before use [ 949.536096][T13702] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 949.878393][T13702] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.4279: Failed to acquire dquot type 0 [ 950.809016][T13702] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 950.835339][T13702] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.4279: mark_inode_dirty error [ 950.955393][T13702] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 951.051637][T13702] EXT4-fs (loop4): 1 orphan inode deleted [ 951.091918][ T340] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 951.112981][T13702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 951.326301][ T340] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 951.406472][ T340] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 951.546271][ T340] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 952.046590][ T340] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 952.192816][T13728] loop9: detected capacity change from 0 to 256 [ 952.203066][ T340] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 952.279583][T13728] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 952.346870][ T340] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 952.373274][T13728] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 952.403861][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 952.446367][T13728] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 952.472508][ T340] usb 3-1: SerialNumber: syz [ 952.560776][T13720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 952.648260][T13730] device syzkaller0 entered promiscuous mode [ 952.655818][ T3275] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 952.675556][ T3275] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 952.687902][ T3275] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:8: Failed to release dquot type 0 [ 952.701115][T12896] EXT4-fs (loop4): unmounting filesystem. [ 952.707797][T11734] EXT4-fs (loop8): unmounting filesystem. [ 952.736062][T12896] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 952.750212][T12896] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 952.785895][T12896] EXT4-fs error (device loop4): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 952.816914][ T340] usb 3-1: USB disconnect, device number 44 [ 952.888713][T13736] loop7: detected capacity change from 0 to 256 [ 952.920517][T13738] device syzkaller0 entered promiscuous mode [ 952.930920][T13736] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 952.943705][T13739] usb usb8: check_ctrlrecip: process 13739 (syz.9.4290) requesting ep 01 but needs 81 [ 952.954442][T13739] usb usb8: usbfs: process 13739 (syz.9.4290) did not claim interface 0 before use [ 952.988063][T13736] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 953.002487][T13736] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 953.238384][T13743] loop8: detected capacity change from 0 to 256 [ 953.265199][T13743] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 953.298531][T13743] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 953.320327][T13743] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 953.696218][T13753] usb usb8: check_ctrlrecip: process 13753 (syz.8.4294) requesting ep 01 but needs 81 [ 953.733606][T13753] usb usb8: usbfs: process 13753 (syz.8.4294) did not claim interface 0 before use [ 953.889828][T13757] loop9: detected capacity change from 0 to 4096 [ 953.895967][T13751] loop2: detected capacity change from 0 to 40427 [ 953.919973][T13751] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 953.930293][T13757] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 953.945870][T13751] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 953.962613][T13757] EXT4-fs (loop9): Test dummy encryption mode enabled [ 953.969861][T13751] F2FS-fs (loop2): invalid crc value [ 953.994937][T13751] F2FS-fs (loop2): Found nat_bits in checkpoint [ 953.995261][T13757] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 954.027419][T13757] System zones: 0-5 [ 954.051347][T13757] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 954.169881][T13751] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 954.187012][T13751] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 954.245574][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 954.247191][T13755] loop4: detected capacity change from 0 to 40427 [ 954.283502][T13755] F2FS-fs (loop4): Image doesn't support compression [ 954.304825][T13755] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 954.510729][T13771] device syzkaller0 entered promiscuous mode [ 954.575585][T13773] device syzkaller0 entered promiscuous mode [ 954.610783][T13767] loop9: detected capacity change from 0 to 40427 [ 954.625649][T13767] F2FS-fs (loop9): Image doesn't support compression [ 954.675351][T13777] loop8: detected capacity change from 0 to 256 [ 954.685000][T13767] F2FS-fs (loop9): Unrecognized mount option "whint_mode=fs-based" or missing value [ 954.704561][T13777] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 954.843972][T13777] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 954.997552][T13777] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 955.793358][T13784] loop4: detected capacity change from 0 to 1024 [ 955.932110][T13784] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.4305: lblock 2 mapped to illegal pblock 2 (length 1) [ 956.083400][T13784] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 956.159650][T13784] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.4305: lblock 0 mapped to illegal pblock 48 (length 1) [ 956.185305][T13784] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 956.194433][T13784] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.4305: Failed to acquire dquot type 0 [ 956.216035][T13784] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 956.238133][T13784] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.4305: mark_inode_dirty error [ 956.251333][T13784] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 956.283040][T13784] EXT4-fs (loop4): 1 orphan inode deleted [ 956.294003][T13784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 956.304706][ T3275] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 956.342653][ T3275] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 956.350239][T13801] loop9: detected capacity change from 0 to 1024 [ 956.391526][ T3275] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:8: Failed to release dquot type 0 [ 956.399922][T13801] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 2: comm syz.9.4309: lblock 2 mapped to illegal pblock 2 (length 1) [ 956.443798][T13801] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 956.466247][T13801] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 48: comm syz.9.4309: lblock 0 mapped to illegal pblock 48 (length 1) [ 956.481068][T13801] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 956.490715][T13801] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.4309: Failed to acquire dquot type 0 [ 956.502316][T13801] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 956.512263][T13801] EXT4-fs error (device loop9): ext4_evict_inode:281: inode #11: comm syz.9.4309: mark_inode_dirty error [ 956.523987][T13801] EXT4-fs warning (device loop9): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 956.537048][T13801] EXT4-fs (loop9): 1 orphan inode deleted [ 956.544176][T13801] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 956.553780][ T10] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 956.579139][ T10] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 956.602809][ T10] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 0 [ 956.760805][T13811] device syzkaller0 entered promiscuous mode [ 956.791889][ T6303] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 956.954338][ T6303] usb 5-1: device descriptor read/64, error -71 [ 957.268197][ T6303] usb 5-1: device descriptor read/64, error -71 [ 957.494346][T13817] device syzkaller0 entered promiscuous mode [ 957.831058][ T6303] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 957.875901][ T584] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 957.906523][T13821] set_capacity_and_notify: 1 callbacks suppressed [ 957.906542][T13821] loop8: detected capacity change from 0 to 256 [ 957.935007][T13821] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 957.950656][T13821] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 957.985705][T13821] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 958.026000][ T6303] usb 5-1: device descriptor read/64, error -71 [ 958.069861][ T584] usb 10-1: device descriptor read/64, error -71 [ 958.329617][ T6303] usb 5-1: device descriptor read/64, error -71 [ 958.347166][T12896] EXT4-fs (loop4): unmounting filesystem. [ 958.362612][ T10] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 958.394174][ T584] usb 10-1: device descriptor read/64, error -71 [ 958.401126][ T10] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 958.421052][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 0 [ 958.435234][T12896] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 958.465230][T12896] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 958.469918][ T6303] usb usb5-port1: attempt power cycle [ 958.495119][T12896] EXT4-fs error (device loop4): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 958.686562][ T584] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 958.784975][T13845] tipc: Enabling of bearer rejected, failed to enable media [ 958.798494][T13845] device syzkaller0 entered promiscuous mode [ 958.816197][T13847] loop7: detected capacity change from 0 to 256 [ 958.830842][T13847] FAT-fs (loop7): Directory bread(block 64) failed [ 958.837601][T13847] FAT-fs (loop7): Directory bread(block 65) failed [ 958.844312][T13847] FAT-fs (loop7): Directory bread(block 66) failed [ 958.851447][T13847] FAT-fs (loop7): Directory bread(block 67) failed [ 958.858083][T13847] FAT-fs (loop7): Directory bread(block 68) failed [ 958.864841][T13847] FAT-fs (loop7): Directory bread(block 69) failed [ 958.871945][T13847] FAT-fs (loop7): Directory bread(block 70) failed [ 958.878465][T13847] FAT-fs (loop7): Directory bread(block 71) failed [ 958.888198][T13847] FAT-fs (loop7): Directory bread(block 72) failed [ 958.895384][T13847] FAT-fs (loop7): Directory bread(block 73) failed [ 958.904937][ T584] usb 10-1: device descriptor read/64, error -71 [ 958.950624][T13849] loop4: detected capacity change from 0 to 512 [ 959.019633][T13852] device syzkaller0 entered promiscuous mode [ 959.026802][T13849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 959.166042][T13849] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 959.206230][ T584] usb 10-1: device descriptor read/64, error -71 [ 959.357807][ T584] usb usb10-port1: attempt power cycle [ 959.397194][T13863] loop2: detected capacity change from 0 to 256 [ 959.423288][T13863] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 959.441180][T13863] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 959.485749][T13863] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 960.582730][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 960.684419][ T5491] EXT4-fs error (device loop9): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 960.698837][T12896] EXT4-fs (loop4): unmounting filesystem. [ 961.210988][ T5491] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 961.429546][ T5491] EXT4-fs error (device loop9): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 962.065362][ T29] INFO: task syz.5.3146:10421 blocked for more than 189 seconds. [ 962.099861][ T29] Not tainted syzkaller #0 [ 962.272518][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 962.354797][T13883] tipc: Enabling of bearer rejected, failed to enable media [ 962.368433][ T29] task:syz.5.3146 state:D stack:26504 pid:10421 ppid:7839 flags:0x00004004 [ 962.377716][ T29] Call Trace: [ 962.381071][ T29] [ 962.384021][ T29] __schedule+0xba6/0x1500 [ 962.388479][ T29] ? release_firmware_map_entry+0x190/0x190 [ 962.394452][ T29] ? __kasan_check_write+0x14/0x20 [ 962.606096][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 962.610901][T13883] device syzkaller0 entered promiscuous mode [ 962.617620][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 962.623375][ T29] schedule+0xbd/0x170 [ 962.627752][ T29] schedule_preempt_disabled+0x13/0x20 [ 962.633398][ T29] rwsem_down_read_slowpath+0x7f6/0x1580 [ 962.639137][ T29] ? down_write_killable+0x40/0x40 [ 962.645207][ T29] ? __kasan_check_write+0x14/0x20 [ 962.651037][ T29] ? downgrade_write+0x320/0x370 [ 962.656271][ T29] ? preempt_schedule+0xbc/0xd0 [ 962.661755][ T29] ? __cfi_preempt_schedule+0x10/0x10 [ 962.667360][ T29] down_read+0x9c/0xf0 [ 962.671633][ T29] ? __cfi_down_read+0x10/0x10 [ 962.676779][ T29] ? __put_super+0x55/0x2d0 [ 962.681850][ T29] iterate_supers+0xad/0x1f0 [ 962.686840][ T29] ? __cfi_quota_sync_one+0x10/0x10 [ 962.692774][ T29] __se_sys_quotactl+0x370/0x710 [ 962.698150][ T29] ? __kasan_check_read+0x11/0x20 [ 962.703340][ T29] ? preempt_schedule_irq+0xca/0x120 [ 962.708695][ T29] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 962.714508][ T29] ? __x64_sys_quotactl+0xb0/0xb0 [ 962.719601][ T29] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 962.725902][ T29] ? irqentry_exit+0x37/0x40 [ 962.730513][ T29] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 962.736168][ T29] __x64_sys_quotactl+0x9b/0xb0 [ 962.741062][ T29] x64_sys_call+0x8da/0x9a0 [ 962.745571][ T29] do_syscall_64+0x4c/0xa0 [ 962.750022][ T29] ? clear_bhb_loop+0x30/0x80 [ 962.754695][ T29] ? clear_bhb_loop+0x30/0x80 [ 962.759389][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.765378][ T29] RIP: 0033:0x7f098d19ce59 [ 962.769829][ T29] RSP: 002b:00007f098bbf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 962.778244][ T29] RAX: ffffffffffffffda RBX: 00007f098d416180 RCX: 00007f098d19ce59 [ 962.786239][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 962.794321][ T29] RBP: 00007f098d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 962.802401][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.810822][ T29] R13: 00007f098d416218 R14: 00007f098d416180 R15: 00007ffe266a3878 [ 962.818844][ T29] [ 962.822749][ T29] INFO: task syz.3.3190:10530 blocked for more than 190 seconds. [ 962.831121][ T29] Not tainted syzkaller #0 [ 962.836215][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 962.844934][ T29] task:syz.3.3190 state:D stack:27808 pid:10530 ppid:5519 flags:0x00004004 [ 962.856123][ T29] Call Trace: [ 962.859476][ T29] [ 962.862644][ T29] __schedule+0xba6/0x1500 [ 962.867277][ T29] ? release_firmware_map_entry+0x190/0x190 [ 962.873288][ T29] ? __kasan_check_write+0x14/0x20 [ 962.878518][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 962.883562][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 962.889148][ T29] ? finish_wait+0x17d/0x1b0 [ 962.893741][ T29] schedule+0xbd/0x170 [ 962.897833][ T29] schedule_preempt_disabled+0x13/0x20 [ 962.903383][ T29] rwsem_down_read_slowpath+0x7f6/0x1580 [ 962.909038][ T29] ? down_write_killable+0x40/0x40 [ 962.914173][ T29] ? iput+0x289/0x670 [ 962.918161][ T29] ? __kasan_check_write+0x14/0x20 [ 962.923360][ T29] ? downgrade_write+0x320/0x370 [ 962.928309][ T29] down_read+0x9c/0xf0 [ 962.932439][ T29] ? __cfi_down_read+0x10/0x10 [ 962.937295][ T29] ? preempt_count_add+0x42/0x1b0 [ 962.942345][ T29] ? __put_super+0x55/0x2d0 [ 962.946854][ T29] iterate_supers+0xad/0x1f0 [ 962.951445][ T29] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 962.957030][ T29] ksys_sync+0x9d/0x170 [ 962.961195][ T29] ? __cfi_ksys_sync+0x10/0x10 [ 962.965995][ T29] ? debug_smp_processor_id+0x17/0x20 [ 962.971367][ T29] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 962.977544][ T29] __ia32_sys_sync+0xe/0x20 [ 962.982047][ T29] x64_sys_call+0x7de/0x9a0 [ 962.986585][ T29] do_syscall_64+0x4c/0xa0 [ 962.991002][ T29] ? clear_bhb_loop+0x30/0x80 [ 962.995693][ T29] ? clear_bhb_loop+0x30/0x80 [ 963.000428][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.006323][ T29] RIP: 0033:0x7fa85499ce59 [ 963.010756][ T29] RSP: 002b:00007fa85580e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 963.019222][ T29] RAX: ffffffffffffffda RBX: 00007fa854c16090 RCX: 00007fa85499ce59 [ 963.027211][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 963.035304][ T29] RBP: 00007fa854c16090 R08: 0000000000000000 R09: 0000000000000000 [ 963.043309][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.051838][ T29] R13: 00007fa854c16128 R14: 00007fa854c16090 R15: 00007ffc0a1c0758 [ 963.060093][ T29] [ 963.068421][ T29] NMI backtrace for cpu 0 [ 963.073400][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 963.080608][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 963.090681][ T29] Call Trace: [ 963.093968][ T29] [ 963.096900][ T29] __dump_stack+0x21/0x24 [ 963.101240][ T29] dump_stack_lvl+0x110/0x170 [ 963.105927][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 963.110970][ T29] dump_stack+0x15/0x24 [ 963.115133][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 963.120093][ T29] ? rcu_read_unlock_special+0xb2/0x440 [ 963.125660][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 963.131326][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 963.137419][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 963.143411][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 963.149499][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 963.155520][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 963.161539][ T29] watchdog+0xd68/0xeb0 [ 963.165885][ T29] ? __cfi_watchdog+0x10/0x10 [ 963.167093][T13895] loop7: detected capacity change from 0 to 512 [ 963.170579][ T29] ? __kasan_check_read+0x11/0x20 [ 963.170604][ T29] ? __kthread_parkme+0x142/0x180 [ 963.170619][ T29] kthread+0x281/0x320 [ 963.190924][ T29] ? __cfi_watchdog+0x10/0x10 [ 963.195616][ T29] ? __cfi_kthread+0x10/0x10 [ 963.200230][ T29] ret_from_fork+0x1f/0x30 [ 963.204757][ T29] [ 963.208194][ T29] Sending NMI from CPU 0 to CPUs 1: [ 963.213491][ C1] NMI backtrace for cpu 1 [ 963.213507][ C1] CPU: 1 PID: 13880 Comm: syz.2.4337 Not tainted syzkaller #0 [ 963.213527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 963.213537][ C1] RIP: 0010:strscpy+0x6/0x1e0 [ 963.213562][ C1] Code: 5b 41 5c 41 5e 41 5f 5d c3 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 b8 2d 03 27 b6 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 50 49 89 d7 48 c7 c0 f9 ff ff ff 48 85 d2 0f [ 963.213577][ C1] RSP: 0018:ffffc9000ad77340 EFLAGS: 00000293 [ 963.213592][ C1] RAX: ffffffff81bc7e6e RBX: 000000000000000b RCX: ffff8881385c9440 [ 963.213604][ C1] RDX: 000000000000000b RSI: ffff8881385c9c48 RDI: ffff888104cbd1e8 [ 963.213616][ C1] RBP: ffffc9000ad77348 R08: ffffffff87b74048 R09: ffffffff87b74058 [ 963.213629][ C1] R10: ffffffff87b74043 R11: 1ffffffff0f6e808 R12: ffff888104cbd1c0 [ 963.213642][ C1] R13: 000000000000000a R14: ffff8881385c9c48 R15: ffff888104cbd1e8 [ 963.213654][ C1] FS: 000055557b3ba500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 963.213669][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.213681][ C1] CR2: 00007fb7196ded58 CR3: 0000000113021000 CR4: 00000000003526a0 [ 963.213697][ C1] Call Trace: [ 963.213702][ C1] [ 963.213708][ C1] __set_page_owner_handle+0x22c/0x410 [ 963.213808][ C1] __set_page_owner+0x48/0x60 [ 963.213824][ C1] post_alloc_hook+0x1f5/0x210 [ 963.213893][ C1] prep_new_page+0x1c/0x110 [ 963.213916][ C1] get_page_from_freelist+0x2d12/0x2d80 [ 963.213944][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 963.213963][ C1] ? __x64_sys_clone3+0x2ce/0x360 [ 963.213987][ C1] ? x64_sys_call+0x4ce/0x9a0 [ 963.214009][ C1] ? __alloc_pages+0x610/0x610 [ 963.214030][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 963.214050][ C1] __alloc_pages+0x1fa/0x610 [ 963.214072][ C1] ? __cfi___alloc_pages+0x10/0x10 [ 963.214104][ C1] ? __kmalloc_node+0xb2/0x1e0 [ 963.214120][ C1] __vmalloc_node_range+0x8bf/0x1430 [ 963.214142][ C1] ? __cfi___vmalloc_node_range+0x10/0x10 [ 963.214160][ C1] ? arch_dup_task_struct+0x42/0xc0 [ 963.214184][ C1] ? memcpy+0x56/0x70 [ 963.214200][ C1] dup_task_struct+0x3ae/0x7e0 [ 963.214215][ C1] ? copy_process+0x5d6/0x3510 [ 963.214237][ C1] ? __kasan_check_write+0x14/0x20 [ 963.214254][ C1] copy_process+0x5d6/0x3510 [ 963.214280][ C1] ? idle_dummy+0x10/0x10 [ 963.214301][ C1] ? copy_clone_args_from_user+0x5fe/0x6d0 [ 963.214317][ C1] ? cgroup_rstat_updated+0xf5/0x360 [ 963.214366][ C1] ? __cfi_folio_add_lru+0x10/0x10 [ 963.214416][ C1] kernel_clone+0x22f/0x820 [ 963.214439][ C1] ? __cfi_kernel_clone+0x10/0x10 [ 963.214464][ C1] __x64_sys_clone3+0x2ce/0x360 [ 963.214486][ C1] ? __kasan_check_write+0x14/0x20 [ 963.214502][ C1] ? __cfi___x64_sys_clone3+0x10/0x10 [ 963.214531][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 963.214552][ C1] x64_sys_call+0x4ce/0x9a0 [ 963.214570][ C1] do_syscall_64+0x4c/0xa0 [ 963.214589][ C1] ? clear_bhb_loop+0x30/0x80 [ 963.214603][ C1] ? clear_bhb_loop+0x30/0x80 [ 963.214618][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.214642][ C1] RIP: 0033:0x7fb71879dc49 [ 963.214661][ C1] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 963.214675][ C1] RSP: 002b:00007ffd506ee1f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 963.214692][ C1] RAX: ffffffffffffffda RBX: 00007fb7187591e0 RCX: 00007fb71879dc49 [ 963.214704][ C1] RDX: 00007fb7187591e0 RSI: 0000000000000058 RDI: 00007ffd506ee250 [ 963.214716][ C1] RBP: 00007fb7196de6c0 R08: 00007fb7196de6c0 R09: 00007ffd506ee337 [ 963.214728][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 963.214739][ C1] R13: 000000000000006e R14: 00007ffd506ee250 R15: 00007ffd506ee338 [ 963.214754][ C1] [ 963.629167][T13899] device syzkaller0 entered promiscuous mode [ 963.656212][T13895] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 963.665700][T13895] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 963.799595][T13906] loop4: detected capacity change from 0 to 16 [ 963.806586][T13906] erofs: (device loop4): mounted with root inode @ nid 36. [ 963.809990][T13907] loop2: detected capacity change from 0 to 256 [ 963.825849][T13907] FAT-fs (loop2): Directory bread(block 64) failed [ 963.832889][T13907] FAT-fs (loop2): Directory bread(block 65) failed [ 963.839488][T13907] FAT-fs (loop2): Directory bread(block 66) failed [ 963.846499][T13907] FAT-fs (loop2): Directory bread(block 67) failed [ 963.853356][T13907] FAT-fs (loop2): Directory bread(block 68) failed [ 963.859882][T13907] FAT-fs (loop2): Directory bread(block 69) failed [ 963.866476][T13907] FAT-fs (loop2): Directory bread(block 70) failed [ 963.873202][T13907] FAT-fs (loop2): Directory bread(block 71) failed [ 963.879864][T13907] FAT-fs (loop2): Directory bread(block 72) failed [ 963.886568][T13907] FAT-fs (loop2): Directory bread(block 73) failed [ 964.668415][T13906] syz.4.4344: attempt to access beyond end of device [ 964.668415][T13906] loop4: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 964.748683][T10658] EXT4-fs (loop7): unmounting filesystem. [ 964.761658][T13916] loop8: detected capacity change from 0 to 256 [ 964.773277][T13906] syz.4.4344: attempt to access beyond end of device [ 964.773277][T13906] loop4: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 964.773427][T13916] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 964.787245][T13906] syz.4.4344: attempt to access beyond end of device [ 964.787245][T13906] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 964.980480][T13906] syz.4.4344: attempt to access beyond end of device [ 964.980480][T13906] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 965.050831][T13916] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 965.090944][T13916] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 965.147115][T13928] loop4: detected capacity change from 0 to 128 [ 965.212604][T13928] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 965.676436][T13934] loop7: detected capacity change from 0 to 256 [ 965.730254][ T3947] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 965.859006][T13934] FAT-fs (loop7): "posix" option is obsolete, not supported now [ 966.047602][T13936] device syzkaller0 entered promiscuous mode [ 966.191540][T13940] tipc: Enabling of bearer rejected, failed to enable media [ 966.209609][T13944] device syzkaller0 entered promiscuous mode [ 969.087465][T13955] loop7: detected capacity change from 0 to 512 [ 969.113751][T13957] loop9: detected capacity change from 0 to 256 [ 969.128993][T13957] FAT-fs (loop9): "posix" option is obsolete, not supported now [ 969.233479][T13955] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 969.247808][T13955] ext4 filesystem being mounted at /211/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 971.100099][T13972] loop2: detected capacity change from 0 to 256 [ 971.144706][T10658] EXT4-fs (loop7): unmounting filesystem. [ 971.152497][T13972] FAT-fs (loop2): Directory bread(block 64) failed [ 971.159182][T13972] FAT-fs (loop2): Directory bread(block 65) failed [ 971.166417][T13972] FAT-fs (loop2): Directory bread(block 66) failed [ 971.172948][T13972] FAT-fs (loop2): Directory bread(block 67) failed [ 971.179526][T13972] FAT-fs (loop2): Directory bread(block 68) failed [ 971.186074][T13972] FAT-fs (loop2): Directory bread(block 69) failed [ 971.192637][T13972] FAT-fs (loop2): Directory bread(block 70) failed [ 971.199221][T13972] FAT-fs (loop2): Directory bread(block 71) failed [ 971.205875][T13972] FAT-fs (loop2): Directory bread(block 72) failed [ 971.212496][T13972] FAT-fs (loop2): Directory bread(block 73) failed [ 971.218496][T13976] loop8: detected capacity change from 0 to 16 [ 971.267580][T13979] loop7: detected capacity change from 0 to 256 [ 971.282886][T13976] erofs: (device loop8): mounted with root inode @ nid 36. [ 971.294668][T13979] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 971.315930][T13976] syz.8.4362: attempt to access beyond end of device [ 971.315930][T13976] loop8: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 971.326771][T13979] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 971.339661][T13979] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 971.352740][T13976] syz.8.4362: attempt to access beyond end of device [ 971.352740][T13976] loop8: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 971.440646][T13976] syz.8.4362: attempt to access beyond end of device [ 971.440646][T13976] loop8: rw=0, sector=8, nr_sectors = 16 limit=16 [ 971.463656][T13976] syz.8.4362: attempt to access beyond end of device [ 971.463656][T13976] loop8: rw=0, sector=8, nr_sectors = 16 limit=16 [ 971.587163][T13991] loop7: detected capacity change from 0 to 512 [ 971.825602][T13991] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 971.947863][T13991] ext4 filesystem being mounted at /213/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.740634][T14005] device syzkaller0 entered promiscuous mode [ 973.523591][T10658] EXT4-fs (loop7): unmounting filesystem. [ 973.672785][T14016] loop4: detected capacity change from 0 to 256 [ 973.682088][T14017] tipc: Enabling of bearer rejected, failed to enable media [ 973.698321][T14016] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 973.760629][T14017] device syzkaller0 entered promiscuous mode [ 974.210417][T14011] loop9: detected capacity change from 0 to 40427 [ 974.223500][T14011] F2FS-fs (loop9): Image doesn't support compression [ 974.244596][T14011] F2FS-fs (loop9): Unrecognized mount option "whint_mode=fs-based" or missing value [ 974.278478][T14027] loop2: detected capacity change from 0 to 512 [ 974.324874][T14027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 974.333880][T14027] ext4 filesystem being mounted at /155/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.540328][T14034] overlayfs: failed to resolve './bus': -2 [ 978.285826][T11577] EXT4-fs (loop2): unmounting filesystem. [ 978.304980][T14041] loop4: detected capacity change from 0 to 512 [ 978.453043][T14043] loop9: detected capacity change from 0 to 512 [ 978.506353][T14041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 978.534696][T14048] device syzkaller0 entered promiscuous mode [ 978.572378][T14043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 978.597849][T14041] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 978.621315][T14043] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 978.795067][T14043] EXT4-fs (loop9): 1 truncate cleaned up [ 978.802572][T14043] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 981.276401][T12896] EXT4-fs (loop4): unmounting filesystem. [ 981.327252][T14067] tipc: Enabling of bearer rejected, failed to enable media [ 981.395466][T14071] loop4: detected capacity change from 0 to 256 [ 981.427479][T14067] device syzkaller0 entered promiscuous mode [ 981.437749][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 981.447136][T14071] FAT-fs (loop4): Directory bread(block 64) failed [ 981.453699][T14071] FAT-fs (loop4): Directory bread(block 65) failed [ 981.460298][T14071] FAT-fs (loop4): Directory bread(block 66) failed [ 981.466857][T14071] FAT-fs (loop4): Directory bread(block 67) failed [ 981.473399][T14071] FAT-fs (loop4): Directory bread(block 68) failed [ 981.479968][T14071] FAT-fs (loop4): Directory bread(block 69) failed [ 981.486603][T14071] FAT-fs (loop4): Directory bread(block 70) failed [ 981.493166][T14071] FAT-fs (loop4): Directory bread(block 71) failed [ 981.499761][T14071] FAT-fs (loop4): Directory bread(block 72) failed [ 981.506695][T14071] FAT-fs (loop4): Directory bread(block 73) failed [ 981.931396][T14076] loop8: detected capacity change from 0 to 256 [ 982.451710][T14076] FAT-fs (loop8): "posix" option is obsolete, not supported now [ 982.482655][T14082] loop7: detected capacity change from 0 to 512 [ 982.517101][T14084] loop2: detected capacity change from 0 to 512 [ 982.525387][T14086] loop9: detected capacity change from 0 to 256 [ 983.009270][T14086] FAT-fs (loop9): Directory bread(block 64) failed [ 983.020714][T14092] loop4: detected capacity change from 0 to 256 [ 983.058118][T14096] device syzkaller0 entered promiscuous mode [ 983.070851][T14082] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 983.081399][T14084] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 983.082591][T14092] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 983.098166][T14082] ext4 filesystem being mounted at /219/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.102195][T14086] FAT-fs (loop9): Directory bread(block 65) failed [ 983.115358][T14084] ext4 filesystem being mounted at /158/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.193275][T14086] FAT-fs (loop9): Directory bread(block 66) failed [ 983.199879][T14086] FAT-fs (loop9): Directory bread(block 67) failed [ 983.204257][T14096] tipc: Enabling of bearer rejected, failed to enable media [ 983.215365][T14086] FAT-fs (loop9): Directory bread(block 68) failed [ 983.222145][T14086] FAT-fs (loop9): Directory bread(block 69) failed [ 983.228704][T14086] FAT-fs (loop9): Directory bread(block 70) failed [ 983.235519][T14086] FAT-fs (loop9): Directory bread(block 71) failed [ 983.247650][T14086] FAT-fs (loop9): Directory bread(block 72) failed [ 983.271930][T14086] FAT-fs (loop9): Directory bread(block 73) failed [ 984.158596][T11577] EXT4-fs (loop2): unmounting filesystem. [ 984.164840][T10658] EXT4-fs (loop7): unmounting filesystem. [ 984.185904][T14103] loop7: detected capacity change from 0 to 256 [ 984.195376][T14103] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 984.206095][T14103] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 984.240737][T14103] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 984.397469][T14112] loop4: detected capacity change from 0 to 512 [ 984.457250][T14112] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.4399: iget: bad i_size value: 38620345925642 [ 984.474493][T14112] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.4399: couldn't read orphan inode 15 (err -117) [ 984.520176][T14112] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 984.595228][T14118] loop2: detected capacity change from 0 to 512 [ 984.653849][T14118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 984.675197][T14118] ext4 filesystem being mounted at /160/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.732233][T14125] tipc: Enabling of bearer rejected, failed to enable media [ 984.757817][T14127] loop8: detected capacity change from 0 to 256 [ 984.783329][T14125] device syzkaller0 entered promiscuous mode [ 984.809729][T14127] FAT-fs (loop8): "posix" option is obsolete, not supported now [ 985.025915][ T29] INFO: task syz.5.3146:10421 blocked for more than 211 seconds. [ 985.053047][ T29] Not tainted syzkaller #0 [ 985.058286][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 985.067080][ T29] task:syz.5.3146 state:D stack:26504 pid:10421 ppid:7839 flags:0x00004004 [ 985.076475][ T29] Call Trace: [ 985.079868][ T29] [ 985.082948][ T29] __schedule+0xba6/0x1500 [ 985.087534][ T29] ? release_firmware_map_entry+0x190/0x190 [ 985.093535][ T29] ? __kasan_check_write+0x14/0x20 [ 985.098752][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 985.103884][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 985.109520][ T29] schedule+0xbd/0x170 [ 985.113734][ T29] schedule_preempt_disabled+0x13/0x20 [ 985.119288][ T29] rwsem_down_read_slowpath+0x7f6/0x1580 [ 985.125054][ T29] ? down_write_killable+0x40/0x40 [ 985.130240][ T29] ? __kasan_check_write+0x14/0x20 [ 985.135453][ T29] ? downgrade_write+0x320/0x370 [ 985.140481][ T29] ? preempt_schedule+0xbc/0xd0 [ 985.145433][ T29] ? __cfi_preempt_schedule+0x10/0x10 [ 985.150884][ T29] down_read+0x9c/0xf0 [ 985.155110][ T29] ? __cfi_down_read+0x10/0x10 [ 985.159966][ T29] ? __put_super+0x55/0x2d0 [ 985.164591][ T29] iterate_supers+0xad/0x1f0 [ 985.169274][ T29] ? __cfi_quota_sync_one+0x10/0x10 [ 985.174559][ T29] __se_sys_quotactl+0x370/0x710 [ 985.179632][ T29] ? __kasan_check_read+0x11/0x20 [ 985.184730][ T29] ? preempt_schedule_irq+0xca/0x120 [ 985.190121][ T29] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 985.196016][ T29] ? __x64_sys_quotactl+0xb0/0xb0 [ 985.201144][ T29] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 985.207293][ T29] ? irqentry_exit+0x37/0x40 [ 985.211983][ T29] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 985.217732][ T29] __x64_sys_quotactl+0x9b/0xb0 [ 985.222684][ T29] x64_sys_call+0x8da/0x9a0 [ 985.227273][ T29] do_syscall_64+0x4c/0xa0 [ 985.231775][ T29] ? clear_bhb_loop+0x30/0x80 [ 985.236528][ T29] ? clear_bhb_loop+0x30/0x80 [ 985.241273][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.247344][ T29] RIP: 0033:0x7f098d19ce59 [ 985.251869][ T29] RSP: 002b:00007f098bbf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 985.260424][ T29] RAX: ffffffffffffffda RBX: 00007f098d416180 RCX: 00007f098d19ce59 [ 985.268516][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 985.276646][ T29] RBP: 00007f098d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 985.284706][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.292911][ T29] R13: 00007f098d416218 R14: 00007f098d416180 R15: 00007ffe266a3878 [ 985.301035][ T29] [ 985.533502][T11577] EXT4-fs (loop2): unmounting filesystem. [ 985.542711][ T29] INFO: task syz.3.3190:10530 blocked for more than 211 seconds. [ 985.568578][ T29] Not tainted syzkaller #0 [ 985.573598][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 985.582396][ T29] task:syz.3.3190 state:D stack:27808 pid:10530 ppid:5519 flags:0x00004004 [ 985.591721][ T29] Call Trace: [ 985.595042][ T29] [ 985.597998][ T29] __schedule+0xba6/0x1500 [ 985.602567][ T29] ? release_firmware_map_entry+0x190/0x190 [ 985.608485][ T29] ? __kasan_check_write+0x14/0x20 [ 985.613639][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 985.625199][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 985.630878][ T29] ? finish_wait+0x17d/0x1b0 [ 985.635583][ T29] schedule+0xbd/0x170 [ 985.639734][ T29] schedule_preempt_disabled+0x13/0x20 [ 985.645298][ T29] rwsem_down_read_slowpath+0x7f6/0x1580 [ 985.651004][ T29] ? down_write_killable+0x40/0x40 [ 985.656389][ T29] ? iput+0x289/0x670 [ 985.660453][ T29] ? __kasan_check_write+0x14/0x20 [ 985.665658][ T29] ? downgrade_write+0x320/0x370 [ 985.670672][ T29] down_read+0x9c/0xf0 [ 985.674807][ T29] ? __cfi_down_read+0x10/0x10 [ 985.679668][ T29] ? preempt_count_add+0x42/0x1b0 [ 985.684705][ T29] ? __put_super+0x55/0x2d0 [ 985.689270][ T29] iterate_supers+0xad/0x1f0 [ 985.693874][ T29] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 985.699436][ T29] ksys_sync+0x9d/0x170 [ 985.703594][ T29] ? __cfi_ksys_sync+0x10/0x10 [ 985.708375][ T29] ? debug_smp_processor_id+0x17/0x20 [ 985.713743][ T29] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 985.719854][ T29] __ia32_sys_sync+0xe/0x20 [ 985.724352][ T29] x64_sys_call+0x7de/0x9a0 [ 985.728862][ T29] do_syscall_64+0x4c/0xa0 [ 985.733285][ T29] ? clear_bhb_loop+0x30/0x80 [ 985.738105][ T29] ? clear_bhb_loop+0x30/0x80 [ 985.742815][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.748723][ T29] RIP: 0033:0x7fa85499ce59 [ 985.753174][ T29] RSP: 002b:00007fa85580e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 985.761604][ T29] RAX: ffffffffffffffda RBX: 00007fa854c16090 RCX: 00007fa85499ce59 [ 985.769622][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 985.777623][ T29] RBP: 00007fa854c16090 R08: 0000000000000000 R09: 0000000000000000 [ 985.785827][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.793806][ T29] R13: 00007fa854c16128 R14: 00007fa854c16090 R15: 00007ffc0a1c0758 [ 985.801800][ T29] [ 985.846617][T14137] loop7: detected capacity change from 0 to 512 [ 985.870577][ T29] NMI backtrace for cpu 1 [ 985.874950][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 985.882151][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 985.886031][T14112] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.4399: bg 0: block 5: invalid block bitmap [ 985.892322][ T29] Call Trace: [ 985.892332][ T29] [ 985.892339][ T29] __dump_stack+0x21/0x24 [ 985.892362][ T29] dump_stack_lvl+0x110/0x170 [ 985.892378][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 985.924831][ T29] dump_stack+0x15/0x24 [ 985.929006][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 985.933962][ T29] ? rcu_read_unlock_special+0xb2/0x440 [ 985.939614][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 985.945093][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 985.947552][T14137] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 985.951186][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 985.951212][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 985.970267][T14112] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 985.971971][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 985.972001][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 985.986765][T14137] ext4 filesystem being mounted at /221/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.990349][ T29] watchdog+0xd68/0xeb0 [ 985.990373][ T29] ? __cfi_watchdog+0x10/0x10 [ 985.990386][ T29] ? __kasan_check_read+0x11/0x20 [ 985.990403][ T29] ? __kthread_parkme+0x142/0x180 [ 985.990418][ T29] kthread+0x281/0x320 [ 986.029534][ T29] ? __cfi_watchdog+0x10/0x10 [ 986.034216][ T29] ? __cfi_kthread+0x10/0x10 [ 986.036067][T14112] EXT4-fs (loop4): This should not happen!! Data will be lost [ 986.036067][T14112] [ 986.038808][ T29] ret_from_fork+0x1f/0x30 [ 986.052830][ T29] [ 986.056015][ T29] Sending NMI from CPU 1 to CPUs 0: [ 986.061226][ C0] NMI backtrace for cpu 0 [ 986.061238][ C0] CPU: 0 PID: 14144 Comm: syz.8.4406 Not tainted syzkaller #0 [ 986.061256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 986.061265][ C0] RIP: 0010:_raw_spin_lock+0xa1/0xf0 [ 986.061292][ C0] Code: 00 00 00 48 89 df be 04 00 00 00 e8 99 bd b4 fc 4c 89 f7 be 04 00 00 00 e8 8c bd b4 fc 8b 44 24 20 b9 01 00 00 00 f0 0f b1 0b <75> 33 43 c6 44 27 04 f8 48 c7 04 24 0e 36 e0 45 4b c7 04 27 00 00 [ 986.061305][ C0] RSP: 0018:ffffc9000e28f2e0 EFLAGS: 00000046 [ 986.061320][ C0] RAX: 0000000000000000 RBX: ffff8881f6e37d80 RCX: 0000000000000001 [ 986.061332][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc9000e28f300 [ 986.061343][ C0] RBP: ffffc9000e28f370 R08: 0000000000000003 R09: 0000000000000004 [ 986.061354][ C0] R10: dffffc0000000000 R11: fffff52001c51e60 R12: dffffc0000000000 [ 986.061366][ C0] R13: ffff88811ea71440 R14: ffffc9000e28f300 R15: 1ffff92001c51e5c [ 986.061380][ C0] FS: 00007f2bca0106c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 986.061395][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 986.061407][ C0] CR2: 000020000001f030 CR3: 0000000121ccf000 CR4: 00000000003506b0 [ 986.061422][ C0] Call Trace: [ 986.061427][ C0] [ 986.061434][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 986.061454][ C0] ? check_preempt_wakeup+0x5ca/0xbe0 [ 986.061472][ C0] ? preempt_schedule+0xbc/0xd0 [ 986.061493][ C0] __schedule+0x196/0x1500 [ 986.061514][ C0] ? ttwu_do_wakeup+0x468/0x490 [ 986.061540][ C0] ? release_firmware_map_entry+0x190/0x190 [ 986.061561][ C0] ? ttwu_do_activate+0x174/0x280 [ 986.061582][ C0] ? preempt_schedule+0xbc/0xd0 [ 986.061612][ C0] preempt_schedule_common+0x9b/0xf0 [ 986.061633][ C0] preempt_schedule+0xbc/0xd0 [ 986.061653][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 986.061676][ C0] ? autoremove_wake_function+0x37/0x110 [ 986.061700][ C0] preempt_schedule_thunk+0x16/0x18 [ 986.061723][ C0] _raw_spin_unlock_irqrestore+0x6f/0x80 [ 986.061744][ C0] __wake_up_sync_key+0x17b/0x2b0 [ 986.061768][ C0] ? __cfi___wake_up_sync_key+0x10/0x10 [ 986.061791][ C0] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 986.061893][ C0] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 986.061911][ C0] __unix_dgram_recvmsg+0x4c1/0xdc0 [ 986.061983][ C0] ? up_read+0x56/0x1d0 [ 986.062008][ C0] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 986.062029][ C0] ? exc_page_fault+0x5e/0xb0 [ 986.062047][ C0] unix_dgram_recvmsg+0xc7/0xe0 [ 986.062070][ C0] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 986.062093][ C0] ____sys_recvmsg+0x2d9/0x5f0 [ 986.062117][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 986.062141][ C0] ? import_iovec+0x7c/0xb0 [ 986.062157][ C0] ___sys_recvmsg+0x212/0x590 [ 986.062179][ C0] ? __sys_recvmsg+0x280/0x280 [ 986.062199][ C0] ? cgroup_rstat_updated+0xf5/0x360 [ 986.062220][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 986.062245][ C0] ? ___sys_recvmsg+0x221/0x590 [ 986.062266][ C0] do_recvmmsg+0x393/0x840 [ 986.062287][ C0] ? __sys_recvmmsg+0x290/0x290 [ 986.062307][ C0] ? cgroup_freezing+0x86/0xb0 [ 986.062329][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 986.062348][ C0] ? __set_current_blocked+0x204/0x230 [ 986.062373][ C0] ? __fget_files+0x2d5/0x330 [ 986.062392][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 986.062413][ C0] ? __kasan_check_write+0x14/0x20 [ 986.062430][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 986.062451][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 986.062473][ C0] x64_sys_call+0x3e7/0x9a0 [ 986.062492][ C0] do_syscall_64+0x4c/0xa0 [ 986.062511][ C0] ? clear_bhb_loop+0x30/0x80 [ 986.062524][ C0] ? clear_bhb_loop+0x30/0x80 [ 986.062539][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.062562][ C0] RIP: 0033:0x7f2bc919ce59 [ 986.062575][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.062595][ C0] RSP: 002b:00007f2bca010028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 986.062612][ C0] RAX: ffffffffffffffda RBX: 00007f2bc9416180 RCX: 00007f2bc919ce59 [ 986.062624][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 986.062635][ C0] RBP: 00007f2bc9232d6f R08: 0000000000000000 R09: 0000000000000000 [ 986.062646][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 986.062656][ C0] R13: 00007f2bc9416218 R14: 00007f2bc9416180 R15: 00007ffcbcd6b868 [ 986.062672][ C0] [ 986.077485][T14112] EXT4-fs (loop4): Total free blocks count 0 [ 986.511921][T14112] EXT4-fs (loop4): Free/Dirty block details [ 986.517986][T14112] EXT4-fs (loop4): free_blocks=0 [ 986.522964][T14112] EXT4-fs (loop4): dirty_blocks=3140 [ 986.529708][T14112] EXT4-fs (loop4): Block reservation details [ 986.535951][T14112] EXT4-fs (loop4): i_reserved_data_blocks=3140 [ 986.587002][ T458] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1084 with error 28 [ 986.710556][T10658] EXT4-fs (loop7): unmounting filesystem. [ 986.936360][T14161] usb usb8: check_ctrlrecip: process 14161 (syz.7.4411) requesting ep 01 but needs 81 [ 986.946031][T14161] usb usb8: usbfs: process 14161 (syz.7.4411) did not claim interface 0 before use [ 987.250288][T14168] loop9: detected capacity change from 0 to 512 [ 987.279370][T14170] loop4: detected capacity change from 0 to 512 [ 987.326079][T14168] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 987.356139][T14170] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.4416: iget: bad i_size value: 38620345925642 [ 987.370569][T14175] loop8: detected capacity change from 0 to 256 [ 987.377341][T14175] FAT-fs (loop8): "posix" option is obsolete, not supported now [ 987.386771][T14168] ext4 filesystem being mounted at /530/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.441854][T14170] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.4416: couldn't read orphan inode 15 (err -117) [ 987.485402][T14170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 989.196766][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 989.300063][T14182] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.4416: bg 0: block 5: invalid block bitmap [ 989.326872][T14182] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1160 with error 28 [ 989.373682][T14182] EXT4-fs (loop4): This should not happen!! Data will be lost [ 989.373682][T14182] [ 989.400759][T14182] EXT4-fs (loop4): Total free blocks count 0 [ 989.407650][T14182] EXT4-fs (loop4): Free/Dirty block details [ 989.435409][T14182] EXT4-fs (loop4): free_blocks=0 [ 989.440407][T14182] EXT4-fs (loop4): dirty_blocks=1160 [ 989.456856][T14182] EXT4-fs (loop4): Block reservation details [ 989.462925][T14182] EXT4-fs (loop4): i_reserved_data_blocks=1160 [ 989.536407][T14191] loop7: detected capacity change from 0 to 512 [ 989.578252][T14182] EXT4-fs (loop4): shut down requested (0) [ 989.586428][ T28] audit: type=1400 audit(1781065746.928:524): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 989.613872][T14191] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 989.640766][T14191] ext4 filesystem being mounted at /224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.655768][ T28] audit: type=1400 audit(1781065746.928:525): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 989.729048][ T28] audit: type=1400 audit(1781065746.928:526): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.227847][ T28] audit: type=1400 audit(1781065746.928:527): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.666945][T10658] EXT4-fs (loop7): unmounting filesystem. [ 990.871085][ T28] audit: type=1400 audit(1781065746.928:528): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 990.891652][ T28] audit: type=1400 audit(1781065746.955:529): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 990.914696][ T28] audit: type=1400 audit(1781065746.955:530): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 990.927375][T14211] loop4: detected capacity change from 0 to 256 [ 991.060000][T14211] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 991.184586][T14211] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 991.446352][T14211] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 992.214556][T14224] loop4: detected capacity change from 0 to 256 [ 992.231948][T14224] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 993.591846][T14225] loop8: detected capacity change from 0 to 1024 [ 993.671533][T14225] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 993.683970][T14225] EXT4-fs error (device loop8): __ext4_iget:5104: inode #8: block 1803188595: comm syz.8.4428: invalid block [ 993.699038][T14225] EXT4-fs (loop8): no journal found [ 993.704351][T14225] EXT4-fs (loop8): can't get journal size [ 993.965221][T14225] EXT4-fs error (device loop8): __ext4_iget:5104: inode #8: block 1803188595: comm syz.8.4428: invalid block [ 994.024467][T14225] EXT4-fs (loop8): failed to initialize system zone (-117) [ 994.031742][T14225] EXT4-fs (loop8): mount failed [ 994.050136][T14232] fuse: Bad value for 'fd' [ 994.144465][T14234] loop4: detected capacity change from 0 to 512 [ 994.201017][ T1387] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 994.269161][T14234] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 994.281425][T14234] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.480042][T14243] loop8: detected capacity change from 0 to 4096 [ 994.886190][T14243] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 994.970378][T14243] EXT4-fs (loop8): Test dummy encryption mode enabled [ 996.118858][T14243] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 996.127051][T14243] System zones: 0-5 [ 996.172714][T12896] EXT4-fs (loop4): unmounting filesystem. [ 996.193418][T14243] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 996.344645][T14255] loop9: detected capacity change from 0 to 128 [ 996.370143][T11734] EXT4-fs (loop8): unmounting filesystem. [ 996.402974][T14255] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 996.426925][T14255] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.476626][T14258] loop4: detected capacity change from 0 to 1024 [ 996.487101][T14258] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 996.499632][T14258] EXT4-fs error (device loop4): __ext4_iget:5104: inode #8: block 1803188595: comm syz.4.4436: invalid block [ 996.513492][T14258] EXT4-fs (loop4): no journal found [ 996.518734][T14258] EXT4-fs (loop4): can't get journal size [ 996.619455][T14258] EXT4-fs error (device loop4): __ext4_iget:5104: inode #8: block 1803188595: comm syz.4.4436: invalid block [ 996.632986][T14258] EXT4-fs (loop4): failed to initialize system zone (-117) [ 996.640538][T14258] EXT4-fs (loop4): mount failed [ 997.381528][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 997.412259][T14263] loop9: detected capacity change from 0 to 256 [ 997.469529][T14263] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 997.480270][T14263] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 997.496474][T14263] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 997.739915][T14278] loop7: detected capacity change from 0 to 512 [ 997.772985][T14280] loop2: detected capacity change from 0 to 256 [ 997.825251][T14280] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 997.890410][T14284] loop4: detected capacity change from 0 to 1024 [ 997.900758][T14284] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 997.913455][T14284] EXT4-fs error (device loop4): __ext4_iget:5104: inode #8: block 1803188595: comm syz.4.4444: invalid block [ 997.927974][T14284] EXT4-fs (loop4): no journal found [ 997.933287][T14284] EXT4-fs (loop4): can't get journal size [ 998.036081][T14278] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 998.046104][T14284] EXT4-fs error (device loop4): __ext4_iget:5104: inode #8: block 1803188595: comm syz.4.4444: invalid block [ 998.058987][T14284] EXT4-fs (loop4): failed to initialize system zone (-117) [ 998.066445][T14284] EXT4-fs (loop4): mount failed [ 998.142452][T14278] ext4 filesystem being mounted at /230/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.245485][T14280] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 998.558620][T14280] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1001.376939][T14294] loop9: detected capacity change from 0 to 1024 [ 1001.440843][T14294] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1001.455390][T14294] EXT4-fs error (device loop9): __ext4_iget:5104: inode #8: block 1803188595: comm syz.9.4447: invalid block [ 1001.470980][T14294] EXT4-fs (loop9): no journal found [ 1001.476306][T14294] EXT4-fs (loop9): can't get journal size [ 1002.060748][T10658] EXT4-fs (loop7): unmounting filesystem. [ 1002.198071][T14294] EXT4-fs error (device loop9): __ext4_iget:5104: inode #8: block 1803188595: comm syz.9.4447: invalid block [ 1002.210274][T14294] EXT4-fs (loop9): failed to initialize system zone (-117) [ 1002.217750][T14294] EXT4-fs (loop9): mount failed [ 1004.603993][T14309] loop4: detected capacity change from 0 to 1024 [ 1004.629093][T14309] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1004.641263][T14309] EXT4-fs error (device loop4): __ext4_iget:5104: inode #8: block 1803188595: comm syz.4.4448: invalid block [ 1004.655702][T14309] EXT4-fs (loop4): no journal found [ 1004.660967][T14309] EXT4-fs (loop4): can't get journal size [ 1004.796369][T14309] EXT4-fs error (device loop4): __ext4_iget:5104: inode #8: block 1803188595: comm syz.4.4448: invalid block [ 1004.808750][T14309] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1004.816143][T14309] EXT4-fs (loop4): mount failed [ 1004.954160][T14317] loop8: detected capacity change from 0 to 256 [ 1005.866010][T14319] loop9: detected capacity change from 0 to 512 [ 1005.879180][T14319] EXT4-fs: Ignoring removed nobh option [ 1006.251892][T14317] FAT-fs (loop8): Directory bread(block 64) failed [ 1006.327571][T14319] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1006.335986][T14319] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #11: block 1: comm syz.9.4453: lblock 0 mapped to illegal pblock 1 (length 1) [ 1006.351060][T14319] EXT4-fs (loop9): Remounting filesystem read-only [ 1006.358020][T14319] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:984: inode #11: comm syz.9.4453: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1006.373632][T14319] EXT4-fs (loop9): Remounting filesystem read-only [ 1006.380190][T14319] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.9.4453: ea_inode dec ref err=-117 [ 1006.393466][T14319] EXT4-fs (loop9): 1 orphan inode deleted [ 1006.399256][T14319] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1006.491941][T14317] FAT-fs (loop8): Directory bread(block 65) failed [ 1006.568472][T14322] loop4: detected capacity change from 0 to 256 [ 1006.593299][T14317] FAT-fs (loop8): Directory bread(block 66) failed [ 1006.601901][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 1006.616762][T14322] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 1006.650425][T14317] FAT-fs (loop8): Directory bread(block 67) failed [ 1006.726258][T14317] FAT-fs (loop8): Directory bread(block 68) failed [ 1006.761481][T14317] FAT-fs (loop8): Directory bread(block 69) failed [ 1006.785176][T14317] FAT-fs (loop8): Directory bread(block 70) failed [ 1007.188395][T14317] FAT-fs (loop8): Directory bread(block 71) failed [ 1007.252898][T14317] FAT-fs (loop8): Directory bread(block 72) failed [ 1007.280679][T14317] FAT-fs (loop8): Directory bread(block 73) failed [ 1007.569104][T14339] loop4: detected capacity change from 0 to 512 [ 1007.622847][T14339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1007.632041][T14339] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.879888][T12896] EXT4-fs (loop4): unmounting filesystem. [ 1009.032979][T14358] loop8: detected capacity change from 0 to 512 [ 1009.193467][T14358] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1009.319094][T14358] ext4 filesystem being mounted at /181/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.522737][T14365] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1011.118891][T14365] loop9: detected capacity change from 0 to 256 [ 1011.251299][T11734] EXT4-fs (loop8): unmounting filesystem. [ 1011.268324][ T1387] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1011.270923][T14365] loop9: detected capacity change from 0 to 256 [ 1011.277890][ T1387] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.315625][T14373] loop7: detected capacity change from 0 to 512 [ 1011.332722][T14365] exfat: Deprecated parameter 'namecase' [ 1011.384566][ T1387] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.393589][T14373] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.4469: iget: bad i_size value: 38620345925642 [ 1011.508934][T14378] loop8: detected capacity change from 0 to 512 [ 1011.517376][T14378] EXT4-fs: Ignoring removed nobh option [ 1011.584817][T14373] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.4469: couldn't read orphan inode 15 (err -117) [ 1011.739754][T14378] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1011.748479][T14378] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #11: block 1: comm syz.8.4468: lblock 0 mapped to illegal pblock 1 (length 1) [ 1011.763755][T14378] EXT4-fs (loop8): Remounting filesystem read-only [ 1011.770868][T14378] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:984: inode #11: comm syz.8.4468: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1011.787153][T14378] EXT4-fs (loop8): Remounting filesystem read-only [ 1011.793688][T14378] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.8.4468: ea_inode dec ref err=-117 [ 1011.807156][T14378] EXT4-fs (loop8): 1 orphan inode deleted [ 1011.812965][T14378] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1011.899556][T14365] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1011.940419][T14373] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1012.029176][T14380] loop4: detected capacity change from 0 to 16 [ 1012.077546][T14380] erofs: (device loop4): mounted with root inode @ nid 36. [ 1012.328666][T11734] EXT4-fs (loop8): unmounting filesystem. [ 1012.352591][T14382] loop2: detected capacity change from 0 to 256 [ 1012.359286][T14382] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 1012.384255][T14383] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.4469: bg 0: block 5: invalid block bitmap [ 1012.411825][T14383] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1020 with error 28 [ 1012.457912][T14383] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1012.457912][T14383] [ 1012.488122][T14387] loop8: detected capacity change from 0 to 512 [ 1012.550521][T14387] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1012.570500][T14393] loop4: detected capacity change from 0 to 256 [ 1012.574762][T14383] EXT4-fs (loop7): Total free blocks count 0 [ 1012.597537][T14393] FAT-fs (loop4): Directory bread(block 64) failed [ 1012.620223][T14393] FAT-fs (loop4): Directory bread(block 65) failed [ 1012.645317][T14393] FAT-fs (loop4): Directory bread(block 66) failed [ 1012.663786][T14393] FAT-fs (loop4): Directory bread(block 67) failed [ 1012.682749][T14393] FAT-fs (loop4): Directory bread(block 68) failed [ 1012.697006][T14383] EXT4-fs (loop7): Free/Dirty block details [ 1012.704494][T14387] ext4 filesystem being mounted at /184/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.780247][T14383] EXT4-fs (loop7): free_blocks=0 [ 1012.789954][T14383] EXT4-fs (loop7): dirty_blocks=1024 [ 1012.795371][T14383] EXT4-fs (loop7): Block reservation details [ 1012.801446][T14383] EXT4-fs (loop7): i_reserved_data_blocks=1024 [ 1012.818431][T14393] FAT-fs (loop4): Directory bread(block 69) failed [ 1012.832028][T14373] EXT4-fs (loop7): shut down requested (0) [ 1012.888685][T14393] FAT-fs (loop4): Directory bread(block 70) failed [ 1012.905266][T14393] FAT-fs (loop4): Directory bread(block 71) failed [ 1012.924080][T14393] FAT-fs (loop4): Directory bread(block 72) failed [ 1012.944042][T14393] FAT-fs (loop4): Directory bread(block 73) failed [ 1012.951252][T14397] loop7: detected capacity change from 0 to 2048 [ 1013.965395][T14397] loop7: p2 < > p4 [ 1013.981072][T14397] loop7: partition table partially beyond EOD, truncated [ 1013.989004][T11734] EXT4-fs (loop8): unmounting filesystem. [ 1013.996650][T14397] loop7: p2 start 4294901760 is beyond EOD, truncated [ 1014.003536][T14397] loop7: p4 size 8192 extends beyond EOD, truncated [ 1014.025483][T14405] loop8: detected capacity change from 0 to 512 [ 1014.036664][ T103] loop7: p2 < > p4 [ 1014.040504][ T103] loop7: partition table partially beyond EOD, truncated [ 1014.041363][T14405] EXT4-fs: Ignoring removed i_version option [ 1014.069728][ T103] loop7: p2 start 4294901760 is beyond EOD, truncated [ 1014.076619][T14405] EXT4-fs: Ignoring removed bh option [ 1014.091356][ T103] loop7: p4 size 8192 extends beyond EOD, truncated [ 1014.161306][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1014.232774][T14405] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1014.250166][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1014.263922][T14405] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.335541][T14411] EXT4-fs: Ignoring removed orlov option [ 1014.341238][T14411] EXT4-fs: Ignoring removed mblk_io_submit option [ 1014.361223][T14411] EXT4-fs error (device loop7): ext4_iget_extra_inode:4765: inode #15: comm syz.7.4475: corrupted in-inode xattr [ 1014.374168][T14411] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.4475: couldn't read orphan inode 15 (err -117) [ 1014.386478][T14411] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1014.404083][T11734] EXT4-fs (loop8): unmounting filesystem. [ 1014.981081][T14422] FAT-fs (loop4): Directory bread(block 64) failed [ 1014.988483][T14422] FAT-fs (loop4): Directory bread(block 65) failed [ 1014.995201][T14422] FAT-fs (loop4): Directory bread(block 66) failed [ 1015.001731][T14422] FAT-fs (loop4): Directory bread(block 67) failed [ 1015.008291][T14422] FAT-fs (loop4): Directory bread(block 68) failed [ 1015.014791][T14422] FAT-fs (loop4): Directory bread(block 69) failed [ 1015.021342][T14422] FAT-fs (loop4): Directory bread(block 70) failed [ 1015.027866][T14422] FAT-fs (loop4): Directory bread(block 71) failed [ 1015.034399][T14422] FAT-fs (loop4): Directory bread(block 72) failed [ 1015.040947][T14422] FAT-fs (loop4): Directory bread(block 73) failed [ 1015.592342][T14434] EXT4-fs: Ignoring removed nobh option [ 1015.799694][T14434] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1015.809012][T14434] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #11: block 1: comm syz.8.4482: lblock 0 mapped to illegal pblock 1 (length 1) [ 1015.824386][T14434] EXT4-fs (loop8): Remounting filesystem read-only [ 1015.831488][T14434] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:984: inode #11: comm syz.8.4482: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1015.848410][T14434] EXT4-fs (loop8): Remounting filesystem read-only [ 1015.855046][T14434] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.8.4482: ea_inode dec ref err=-117 [ 1015.868509][T14434] EXT4-fs (loop8): 1 orphan inode deleted [ 1015.874288][T14434] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1016.439840][T11734] EXT4-fs (loop8): unmounting filesystem. [ 1016.453953][T14440] erofs: (device loop9): mounted with root inode @ nid 36. [ 1017.016344][T14447] set_capacity_and_notify: 4 callbacks suppressed [ 1017.016362][T14447] loop9: detected capacity change from 0 to 2048 [ 1017.086380][T14447] loop9: p2 < > p4 [ 1017.090267][T14447] loop9: partition table partially beyond EOD, truncated [ 1017.111816][T14447] loop9: p2 start 4294901760 is beyond EOD, truncated [ 1017.135216][T14447] loop9: p4 size 8192 extends beyond EOD, truncated [ 1017.192621][T14447] loop9: detected capacity change from 0 to 512 [ 1017.272586][T10658] EXT4-fs (loop7): unmounting filesystem. [ 1017.292211][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1017.442224][T14452] loop9: detected capacity change from 0 to 512 [ 1017.450379][T14452] EXT4-fs: Ignoring removed orlov option [ 1017.456168][T14452] EXT4-fs: Ignoring removed mblk_io_submit option [ 1017.660175][T14452] EXT4-fs error (device loop9): ext4_iget_extra_inode:4765: inode #15: comm syz.9.4487: corrupted in-inode xattr [ 1017.673181][T14452] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.4487: couldn't read orphan inode 15 (err -117) [ 1017.686884][T14452] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1018.285579][T14459] loop4: detected capacity change from 0 to 512 [ 1018.307424][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 1018.316649][T14456] loop7: detected capacity change from 0 to 2048 [ 1018.390579][T14456] loop7: p2 < > p4 [ 1018.394437][T14456] loop7: partition table partially beyond EOD, truncated [ 1018.437465][T14459] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.4490: iget: bad i_size value: 38620345925642 [ 1018.437533][T14456] loop7: p2 start 4294901760 is beyond EOD, truncated [ 1018.589326][T14456] loop7: p4 size 8192 extends beyond EOD, truncated [ 1018.596814][T14459] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.4490: couldn't read orphan inode 15 (err -117) [ 1018.666493][T14461] loop9: detected capacity change from 0 to 4096 [ 1018.784865][T14461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1019.407048][T14461] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1019.459613][T14459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1019.469755][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1019.501602][T14461] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 1019.538805][T14461] System zones: 0-5 [ 1019.570085][T14461] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1019.672761][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 1019.677449][T14466] EXT4-fs (loop4): shut down requested (1) [ 1019.844555][T12896] EXT4-fs (loop4): unmounting filesystem. [ 1019.870481][T14478] loop8: detected capacity change from 0 to 256 [ 1019.887862][T14478] FAT-fs (loop8): Directory bread(block 64) failed [ 1019.894484][T14478] FAT-fs (loop8): Directory bread(block 65) failed [ 1019.901047][T14478] FAT-fs (loop8): Directory bread(block 66) failed [ 1019.907647][T14478] FAT-fs (loop8): Directory bread(block 67) failed [ 1019.914214][T14478] FAT-fs (loop8): Directory bread(block 68) failed [ 1019.920871][T14478] FAT-fs (loop8): Directory bread(block 69) failed [ 1019.927478][T14478] FAT-fs (loop8): Directory bread(block 70) failed [ 1019.933998][T14478] FAT-fs (loop8): Directory bread(block 71) failed [ 1019.940590][T14478] FAT-fs (loop8): Directory bread(block 72) failed [ 1019.947128][T14478] FAT-fs (loop8): Directory bread(block 73) failed [ 1020.044936][ T505] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1020.153788][T14484] loop4: detected capacity change from 0 to 16 [ 1020.174967][T14484] erofs: (device loop4): mounted with root inode @ nid 36. [ 1020.272469][ T505] usb 3-1: Using ep0 maxpacket: 16 [ 1020.279223][ T505] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1020.294691][ T505] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.315248][ T505] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1020.335895][ T505] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1020.354349][ T505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.372062][ T505] usb 3-1: Product: syz [ 1020.380925][ T505] usb 3-1: Manufacturer: syz [ 1020.391364][ T505] usb 3-1: SerialNumber: syz [ 1023.571516][ T505] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 1023.583692][ T505] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1023.705620][T14512] loop7: detected capacity change from 0 to 512 [ 1023.713874][T14512] EXT4-fs: Ignoring removed nobh option [ 1024.539307][ T505] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1024.565099][T14512] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1024.572983][T14512] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #11: block 1: comm syz.7.4502: lblock 0 mapped to illegal pblock 1 (length 1) [ 1024.587750][T14512] EXT4-fs (loop7): Remounting filesystem read-only [ 1024.594403][T14512] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:984: inode #11: comm syz.7.4502: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1024.610240][T14512] EXT4-fs (loop7): Remounting filesystem read-only [ 1024.616774][T14512] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.7.4502: ea_inode dec ref err=-117 [ 1024.629742][T14512] EXT4-fs (loop7): 1 orphan inode deleted [ 1024.635509][T14512] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1024.676529][ T1387] udevd[1387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1024.722925][ T505] usb 3-1: USB disconnect, device number 45 [ 1024.857696][T10658] EXT4-fs (loop7): unmounting filesystem. [ 1025.008197][T14520] loop7: detected capacity change from 0 to 256 [ 1025.064195][T14520] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1025.102809][T14524] loop2: detected capacity change from 0 to 256 [ 1025.114692][T14524] FAT-fs (loop2): Directory bread(block 64) failed [ 1025.121329][T14524] FAT-fs (loop2): Directory bread(block 65) failed [ 1025.127899][T14524] FAT-fs (loop2): Directory bread(block 66) failed [ 1025.134405][T14524] FAT-fs (loop2): Directory bread(block 67) failed [ 1025.140949][T14524] FAT-fs (loop2): Directory bread(block 68) failed [ 1025.141383][T14520] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1025.147453][T14524] FAT-fs (loop2): Directory bread(block 69) failed [ 1025.162424][T14524] FAT-fs (loop2): Directory bread(block 70) failed [ 1025.168928][T14524] FAT-fs (loop2): Directory bread(block 71) failed [ 1025.175509][T14524] FAT-fs (loop2): Directory bread(block 72) failed [ 1025.182037][T14524] FAT-fs (loop2): Directory bread(block 73) failed [ 1025.183344][T14520] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1025.212468][T14522] loop9: detected capacity change from 0 to 16 [ 1025.259853][T14522] erofs: (device loop9): mounted with root inode @ nid 36. [ 1025.413123][T14520] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 1025.431258][T14520] exFAT-fs (loop7): Filesystem has been set read-only [ 1025.464062][T14520] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 1025.490572][T10658] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 1025.518171][T10658] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 1025.596325][ T503] tipc: Left network mode [ 1025.918419][T14538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.933365][T14538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.948649][T14538] device bridge_slave_0 entered promiscuous mode [ 1025.965453][T14538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.980274][T14538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.996314][T14538] device bridge_slave_1 entered promiscuous mode [ 1026.049022][ T24] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1026.078897][T14545] loop4: detected capacity change from 0 to 256 [ 1026.105498][T14545] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.120585][T14538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.126667][T14545] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1026.127671][T14538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.143340][T14538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.150397][T14538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.160163][T14545] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1026.225655][T14545] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 1026.249428][T14545] exFAT-fs (loop4): Filesystem has been set read-only [ 1026.249985][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1026.265484][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.266353][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1026.274303][T14545] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 1026.288946][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1026.296704][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.307124][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.320861][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1026.340818][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1026.347888][T12896] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 1026.360452][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.367519][T13117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.378246][ T24] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1026.395337][T12896] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 1026.407912][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.431242][ T24] usb 9-1: Product: syz [ 1026.443178][ T24] usb 9-1: Manufacturer: syz [ 1026.464551][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1026.472738][ T24] usb 9-1: SerialNumber: syz [ 1026.482692][T13117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.489759][T13117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.516100][ T503] device bridge_slave_1 left promiscuous mode [ 1026.524457][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.559948][ T503] device bridge_slave_0 left promiscuous mode [ 1026.593161][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.638040][ T503] device veth1_macvtap left promiscuous mode [ 1026.660275][ T503] device veth0_vlan left promiscuous mode [ 1026.727646][ T24] usb 9-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 1026.757797][ T24] usb 9-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1026.790696][ T24] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 1026.812178][ T24] usb 9-1: USB disconnect, device number 20 [ 1027.082015][ T1387] udevd[1387]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1027.233647][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1027.246256][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1027.282185][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1027.317747][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1027.347408][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1027.393321][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1027.438096][T14538] device veth0_vlan entered promiscuous mode [ 1027.449939][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.490625][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.518140][T14538] device veth1_macvtap entered promiscuous mode [ 1027.546559][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.558157][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.620516][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.658711][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.710708][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.853517][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.866173][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.889261][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1027.962372][T14564] overlayfs: missing 'lowerdir' [ 1028.064910][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1028.326730][T14566] hub 8-0:1.0: USB hub found [ 1028.451745][T14566] hub 8-0:1.0: 1 port detected [ 1029.981222][T14560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.013119][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.051459][T14560] device bridge_slave_0 entered promiscuous mode [ 1030.065672][T14560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.067195][T14576] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1030.080590][T14560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.092877][T14560] device bridge_slave_1 entered promiscuous mode [ 1030.170260][T14578] loop8: detected capacity change from 0 to 256 [ 1030.223314][ T503] device bridge_slave_1 left promiscuous mode [ 1030.235825][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.290501][ T503] device bridge_slave_0 left promiscuous mode [ 1030.330669][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.331797][T14578] loop8: detected capacity change from 0 to 256 [ 1030.387966][ T503] device veth1_macvtap left promiscuous mode [ 1030.420421][ T503] device veth0_vlan left promiscuous mode [ 1030.432822][T14578] exfat: Deprecated parameter 'namecase' [ 1030.542873][T14578] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1030.908433][T14586] loop0: detected capacity change from 0 to 2048 [ 1030.966241][T14586] loop0: p2 < > p4 [ 1030.970128][T14586] loop0: partition table partially beyond EOD, truncated [ 1030.992947][T14586] loop0: p2 start 4294901760 is beyond EOD, truncated [ 1031.011805][T14586] loop0: p4 size 8192 extends beyond EOD, truncated [ 1031.072135][ T103] loop0: p2 < > p4 [ 1031.076058][ T103] loop0: partition table partially beyond EOD, truncated [ 1031.094156][ T103] loop0: p2 start 4294901760 is beyond EOD, truncated [ 1031.106514][ T103] loop0: p4 size 8192 extends beyond EOD, truncated [ 1031.113513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1031.124841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1031.141221][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1031.145124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1031.153834][T14586] loop0: detected capacity change from 0 to 512 [ 1031.175038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.242880][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.249944][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.262486][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1031.276220][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1031.289409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1031.301666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1031.392398][T14591] loop0: detected capacity change from 0 to 512 [ 1031.400697][T14591] EXT4-fs: Ignoring removed orlov option [ 1031.406610][T14591] EXT4-fs: Ignoring removed mblk_io_submit option [ 1031.620432][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.627550][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.674032][T14591] EXT4-fs error (device loop0): ext4_iget_extra_inode:4765: inode #15: comm syz.0.4530: corrupted in-inode xattr [ 1031.687041][T14591] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.4530: couldn't read orphan inode 15 (err -117) [ 1031.700900][T14591] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1032.279797][T14538] EXT4-fs (loop0): unmounting filesystem. [ 1032.359388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1032.410893][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1032.447708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1032.475790][T14597] device syzkaller0 entered promiscuous mode [ 1032.557748][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1032.585788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1032.686807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1032.701036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1032.769409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1032.799110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1032.825622][T14560] device veth0_vlan entered promiscuous mode [ 1032.929861][T14607] loop9: detected capacity change from 0 to 512 [ 1032.935778][T14609] loop2: detected capacity change from 0 to 512 [ 1032.943454][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1032.954129][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1032.969206][T14560] device veth1_macvtap entered promiscuous mode [ 1032.992345][T14609] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.4535: iget: bad i_size value: 38620345925642 [ 1033.035261][T14609] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.4535: couldn't read orphan inode 15 (err -117) [ 1033.063291][T14609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1033.081496][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1033.111130][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1033.111396][T14607] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.4536: invalid indirect mapped block 256 (level 2) [ 1033.143840][T14607] EXT4-fs (loop9): 2 truncates cleaned up [ 1033.150699][T14607] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1033.170958][T14612] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.4535: bg 0: block 5: invalid block bitmap [ 1033.181578][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1033.260039][T14612] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 264 with error 28 [ 1033.277559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1033.292473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1033.370169][T14613] EXT4-fs (loop2): shut down requested (1) [ 1033.397513][T14612] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1033.397513][T14612] [ 1033.439113][T14612] EXT4-fs (loop2): Total free blocks count 0 [ 1033.445237][T14612] EXT4-fs (loop2): Free/Dirty block details [ 1033.455595][T14612] EXT4-fs (loop2): free_blocks=0 [ 1033.487180][T14612] EXT4-fs (loop2): dirty_blocks=268 [ 1033.507880][T14612] EXT4-fs (loop2): Block reservation details [ 1033.518215][T14612] EXT4-fs (loop2): i_reserved_data_blocks=268 [ 1033.715685][T14618] loop5: detected capacity change from 0 to 16 [ 1033.740435][T14618] erofs: (device loop5): mounted with root inode @ nid 36. [ 1033.798388][T14621] loop0: detected capacity change from 0 to 256 [ 1033.823851][T14623] loop2: detected capacity change from 0 to 2048 [ 1033.848325][T14621] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 1033.916714][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 1034.029276][T14623] loop2: p2 < > p4 [ 1034.033963][T14623] loop2: partition table partially beyond EOD, truncated [ 1034.041803][T14623] loop2: p2 start 4294901760 is beyond EOD, truncated [ 1034.048625][T14623] loop2: p4 size 8192 extends beyond EOD, truncated [ 1036.231591][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1036.382488][T14645] loop8: detected capacity change from 0 to 512 [ 1036.390975][T14645] EXT4-fs: Ignoring removed nobh option [ 1036.886373][T14647] loop9: detected capacity change from 0 to 2048 [ 1037.992041][T14645] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1037.999226][T14645] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #11: block 1: comm syz.8.4542: lblock 0 mapped to illegal pblock 1 (length 1) [ 1039.365396][T14645] EXT4-fs (loop8): Remounting filesystem read-only [ 1039.372086][T14645] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:984: inode #11: comm syz.8.4542: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1039.390669][T14645] EXT4-fs (loop8): Remounting filesystem read-only [ 1039.397646][T14645] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.8.4542: ea_inode dec ref err=-117 [ 1039.410705][T14645] EXT4-fs (loop8): 1 orphan inode deleted [ 1039.416489][T14645] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1039.492921][T11734] EXT4-fs (loop8): unmounting filesystem. [ 1039.525713][T14647] loop9: p2 < > p4 [ 1039.529570][T14647] loop9: partition table partially beyond EOD, truncated [ 1039.562891][T14647] loop9: p2 start 4294901760 is beyond EOD, truncated [ 1039.571174][T14647] loop9: p4 size 8192 extends beyond EOD, truncated [ 1044.942468][T14665] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4548'. [ 1044.955477][ T28] audit: type=1400 audit(1781067078.827:531): avc: denied { nlmsg_read } for pid=14659 comm="syz.8.4548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1045.012790][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1045.103579][T14674] loop0: detected capacity change from 0 to 2048 [ 1045.176255][ T28] audit: type=1400 audit(1781067079.048:532): avc: denied { read } for pid=14669 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1045.227058][T14674] loop0: p2 < > p4 [ 1045.244208][T14674] loop0: partition table partially beyond EOD, truncated [ 1045.279597][T14682] device syzkaller0 entered promiscuous mode [ 1045.412821][T14674] loop0: p2 start 4294901760 is beyond EOD, truncated [ 1045.419732][T14674] loop0: p4 size 8192 extends beyond EOD, truncated [ 1045.490775][T14674] loop0: detected capacity change from 0 to 512 [ 1045.529376][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1045.550477][ T1387] udevd[1387]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1045.563957][T14693] loop2: detected capacity change from 0 to 512 [ 1045.570573][T14693] EXT4-fs: Ignoring removed nobh option [ 1045.646198][T14693] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1045.655359][T14693] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #11: block 1: comm syz.2.4558: lblock 0 mapped to illegal pblock 1 (length 1) [ 1045.669964][T14693] EXT4-fs (loop2): Remounting filesystem read-only [ 1045.676644][T14693] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.4558: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1045.692387][T14693] EXT4-fs (loop2): Remounting filesystem read-only [ 1045.698928][T14693] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.4558: ea_inode dec ref err=-117 [ 1045.712117][T14693] EXT4-fs (loop2): 1 orphan inode deleted [ 1045.717982][T14693] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1045.749633][T14700] loop0: detected capacity change from 0 to 512 [ 1045.756321][T14700] EXT4-fs: Ignoring removed orlov option [ 1045.762255][T14700] EXT4-fs: Ignoring removed mblk_io_submit option [ 1045.773480][T14698] netem: change failed [ 1045.790721][T14700] EXT4-fs error (device loop0): ext4_iget_extra_inode:4765: inode #15: comm syz.0.4552: corrupted in-inode xattr [ 1045.803334][T14700] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.4552: couldn't read orphan inode 15 (err -117) [ 1045.815716][T14700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1045.831526][T14698] device syzkaller0 entered promiscuous mode [ 1045.940636][T14704] loop8: detected capacity change from 0 to 512 [ 1046.032826][T14710] loop9: detected capacity change from 0 to 16 [ 1046.060196][T14710] erofs: (device loop9): mounted with root inode @ nid 36. [ 1046.138086][T14704] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1046.147174][T14704] ext4 filesystem being mounted at /201/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.318773][T14721] loop5: detected capacity change from 0 to 1024 [ 1046.384049][T14721] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.4565: lblock 2 mapped to illegal pblock 2 (length 1) [ 1046.418666][T14721] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1046.818340][T14721] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.4565: lblock 0 mapped to illegal pblock 48 (length 1) [ 1047.361385][T14721] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1047.378535][T11734] EXT4-fs (loop8): unmounting filesystem. [ 1047.404667][T14721] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.4565: Failed to acquire dquot type 0 [ 1047.417979][T14729] loop9: detected capacity change from 0 to 256 [ 1047.429633][T14729] FAT-fs (loop9): Directory bread(block 64) failed [ 1047.436184][T14729] FAT-fs (loop9): Directory bread(block 65) failed [ 1047.437279][T14721] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 1047.442905][T14729] FAT-fs (loop9): Directory bread(block 66) failed [ 1047.458940][T14729] FAT-fs (loop9): Directory bread(block 67) failed [ 1047.465489][T14729] FAT-fs (loop9): Directory bread(block 68) failed [ 1047.472328][T14729] FAT-fs (loop9): Directory bread(block 69) failed [ 1047.478933][T14729] FAT-fs (loop9): Directory bread(block 70) failed [ 1047.485489][T14729] FAT-fs (loop9): Directory bread(block 71) failed [ 1047.492133][T14729] FAT-fs (loop9): Directory bread(block 72) failed [ 1047.498649][T14729] FAT-fs (loop9): Directory bread(block 73) failed [ 1047.592401][T14721] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.4565: mark_inode_dirty error [ 1047.632286][T14721] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1047.643039][T14721] EXT4-fs (loop5): 1 orphan inode deleted [ 1047.674910][T14721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1047.900950][ T308] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1047.968214][ T308] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1047.976860][ T308] EXT4-fs error (device loop5): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0 [ 1047.985203][T14735] loop8: detected capacity change from 0 to 16 [ 1048.006967][T14735] erofs: (device loop8): mounted with root inode @ nid 36. [ 1048.240482][ T340] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1048.423683][ T340] usb 6-1: device descriptor read/64, error -71 [ 1048.582326][T11577] EXT4-fs (loop2): unmounting filesystem. [ 1048.813518][ T340] usb 6-1: device descriptor read/64, error -71 [ 1049.106199][ T340] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1049.548712][ T340] usb 6-1: device descriptor read/64, error -71 [ 1049.559012][T14560] EXT4-fs (loop5): unmounting filesystem. [ 1049.596584][T14560] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1049.639704][T14538] EXT4-fs (loop0): unmounting filesystem. [ 1049.648215][T14560] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 1049.735695][T14752] loop9: detected capacity change from 0 to 256 [ 1049.802861][T14752] exfat: Deprecated parameter 'namecase' [ 1049.819802][T14752] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1049.908575][T14560] EXT4-fs error (device loop5): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 1050.094287][T14755] netem: change failed [ 1050.180500][T14756] device syzkaller0 entered promiscuous mode [ 1051.450200][T14776] set_capacity_and_notify: 1 callbacks suppressed [ 1051.450229][T14776] loop2: detected capacity change from 0 to 512 [ 1051.464836][T14776] EXT4-fs: Ignoring removed orlov option [ 1051.472164][T14776] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1051.594066][T14776] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz.2.4577: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 1051.611824][T14776] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.4577: couldn't read orphan inode 16 (err -117) [ 1051.624703][T14776] EXT4-fs (loop2): 1 orphan inode deleted [ 1051.630478][T14776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1051.766354][T14779] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.4577: iget: bad extra_isize 46 (inode size 256) [ 1052.400955][T14781] loop0: detected capacity change from 0 to 512 [ 1052.463975][T14781] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.4578: iget: bad i_size value: 38620345925642 [ 1052.488651][T14784] loop5: detected capacity change from 0 to 256 [ 1052.501816][T14784] FAT-fs (loop5): Directory bread(block 64) failed [ 1052.508395][T14784] FAT-fs (loop5): Directory bread(block 65) failed [ 1052.515020][T14784] FAT-fs (loop5): Directory bread(block 66) failed [ 1052.521833][T14784] FAT-fs (loop5): Directory bread(block 67) failed [ 1052.528378][T14784] FAT-fs (loop5): Directory bread(block 68) failed [ 1052.534936][T14784] FAT-fs (loop5): Directory bread(block 69) failed [ 1052.541692][T14784] FAT-fs (loop5): Directory bread(block 70) failed [ 1052.548310][T14784] FAT-fs (loop5): Directory bread(block 71) failed [ 1052.554949][T14784] FAT-fs (loop5): Directory bread(block 72) failed [ 1052.561497][T14784] FAT-fs (loop5): Directory bread(block 73) failed [ 1052.626956][T14788] loop9: detected capacity change from 0 to 512 [ 1052.635282][T14788] EXT4-fs: Ignoring removed nobh option [ 1052.685317][T11577] EXT4-fs (loop2): unmounting filesystem. [ 1052.696022][T14781] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.4578: couldn't read orphan inode 15 (err -117) [ 1052.936806][T14788] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1052.946183][T14788] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #11: block 1: comm syz.9.4580: lblock 0 mapped to illegal pblock 1 (length 1) [ 1053.269341][T14788] EXT4-fs (loop9): Remounting filesystem read-only [ 1053.276400][T14788] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:984: inode #11: comm syz.9.4580: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1053.364572][T14788] EXT4-fs (loop9): Remounting filesystem read-only [ 1053.371310][T14788] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.9.4580: ea_inode dec ref err=-117 [ 1053.388729][T14788] EXT4-fs (loop9): 1 orphan inode deleted [ 1053.394728][T14788] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1053.580819][T14781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1053.651552][T14793] device syzkaller0 entered promiscuous mode [ 1053.732536][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 1053.774994][T14798] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.4578: bg 0: block 5: invalid block bitmap [ 1053.792221][T14804] fuse: Bad value for 'group_id' [ 1054.037062][T14798] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1054.371551][T14807] EXT4-fs (loop0): shut down requested (1) [ 1054.415872][T14798] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1054.415872][T14798] [ 1054.425697][T14798] EXT4-fs (loop0): Total free blocks count 0 [ 1054.431832][T14798] EXT4-fs (loop0): Free/Dirty block details [ 1054.437864][T14798] EXT4-fs (loop0): free_blocks=0 [ 1054.465542][T14812] loop5: detected capacity change from 0 to 256 [ 1054.539826][T14812] loop5: detected capacity change from 0 to 256 [ 1054.547856][T14812] exfat: Deprecated parameter 'namecase' [ 1054.575013][T14812] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1054.868851][T14798] EXT4-fs (loop0): dirty_blocks=3600 [ 1054.886822][T14822] loop8: detected capacity change from 0 to 1024 [ 1054.999565][T14822] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 2: comm syz.8.4588: lblock 2 mapped to illegal pblock 2 (length 1) [ 1055.244651][T14798] EXT4-fs (loop0): Block reservation details [ 1055.250733][T14798] EXT4-fs (loop0): i_reserved_data_blocks=3600 [ 1055.265246][T14822] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1055.273565][T14822] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 48: comm syz.8.4588: lblock 0 mapped to illegal pblock 48 (length 1) [ 1055.289636][T14822] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1055.305497][T14822] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.4588: Failed to acquire dquot type 0 [ 1055.327431][T14822] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 1055.397315][T14822] EXT4-fs error (device loop8): ext4_evict_inode:281: inode #11: comm syz.8.4588: mark_inode_dirty error [ 1055.409373][T14834] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4584'. [ 1055.418977][T14822] EXT4-fs warning (device loop8): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1055.429316][T14822] EXT4-fs (loop8): 1 orphan inode deleted [ 1055.435256][T14822] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1055.447237][ T8] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1055.610046][ T8] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1055.629846][ T8] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 1055.878836][ T24] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1056.053083][ T24] usb 9-1: device descriptor read/64, error -71 [ 1056.345744][ T24] usb 9-1: device descriptor read/64, error -71 [ 1056.742261][ T24] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1056.909339][ T24] usb 9-1: device descriptor read/64, error -71 [ 1057.202125][ T24] usb 9-1: device descriptor read/64, error -71 [ 1057.301963][T14856] loop5: detected capacity change from 0 to 256 [ 1057.317665][T14856] FAT-fs (loop5): Directory bread(block 64) failed [ 1057.324313][T14856] FAT-fs (loop5): Directory bread(block 65) failed [ 1057.330880][T14856] FAT-fs (loop5): Directory bread(block 66) failed [ 1057.338001][T14856] FAT-fs (loop5): Directory bread(block 67) failed [ 1057.344606][T14856] FAT-fs (loop5): Directory bread(block 68) failed [ 1057.351145][T14856] FAT-fs (loop5): Directory bread(block 69) failed [ 1057.357737][T14856] FAT-fs (loop5): Directory bread(block 70) failed [ 1057.364261][T14856] FAT-fs (loop5): Directory bread(block 71) failed [ 1057.371088][T14856] FAT-fs (loop5): Directory bread(block 72) failed [ 1057.377654][T14856] FAT-fs (loop5): Directory bread(block 73) failed [ 1057.387339][ T24] usb usb9-port1: attempt power cycle [ 1057.521730][T14858] loop9: detected capacity change from 0 to 512 [ 1057.536313][T14858] EXT4-fs: Ignoring removed nobh option [ 1057.588977][T14858] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1057.861972][T14858] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #11: block 1: comm syz.9.4595: lblock 0 mapped to illegal pblock 1 (length 1) [ 1057.880183][T14858] EXT4-fs (loop9): Remounting filesystem read-only [ 1057.887645][T14858] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:984: inode #11: comm syz.9.4595: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1057.909641][T14858] EXT4-fs (loop9): Remounting filesystem read-only [ 1057.916283][T14858] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.9.4595: ea_inode dec ref err=-117 [ 1057.929941][T14858] EXT4-fs (loop9): 1 orphan inode deleted [ 1057.936107][T14858] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1058.253887][ T5491] EXT4-fs (loop9): unmounting filesystem. [ 1058.318281][ T24] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1058.500795][T14865] device syzkaller0 entered promiscuous mode [ 1058.523276][T11734] EXT4-fs (loop8): unmounting filesystem. [ 1058.535137][T11734] EXT4-fs error (device loop8): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1058.557490][T11734] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 1058.609669][T11734] EXT4-fs error (device loop8): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 1058.803255][T14873] loop0: detected capacity change from 0 to 256 [ 1059.051922][ T24] usb 9-1: device not accepting address 23, error -71 [ 1059.080125][T14873] loop0: detected capacity change from 0 to 256 [ 1059.088365][T14873] exfat: Deprecated parameter 'namecase' [ 1059.168344][T14873] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1059.669648][T14880] loop5: detected capacity change from 0 to 256 [ 1059.681238][T14881] loop8: detected capacity change from 0 to 512 [ 1059.707998][T14880] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 1059.857499][T14881] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1059.870769][T14881] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.770337][T11734] EXT4-fs (loop8): unmounting filesystem. [ 1061.872067][T14916] device syzkaller0 entered promiscuous mode [ 1063.062203][T14914] loop5: detected capacity change from 0 to 512 [ 1063.069129][T14914] EXT4-fs: Ignoring removed nobh option [ 1063.119541][T14914] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1063.146659][T14914] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #11: block 1: comm syz.5.4609: lblock 0 mapped to illegal pblock 1 (length 1) [ 1063.162317][T14914] EXT4-fs (loop5): Remounting filesystem read-only [ 1063.169460][T14914] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.4609: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1063.188462][T14914] EXT4-fs (loop5): Remounting filesystem read-only [ 1063.195102][T14914] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.5.4609: ea_inode dec ref err=-117 [ 1063.208181][T14914] EXT4-fs (loop5): 1 orphan inode deleted [ 1063.213967][T14914] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1063.234570][T14922] loop2: detected capacity change from 0 to 1024 [ 1063.258504][T14922] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.4610: lblock 2 mapped to illegal pblock 2 (length 1) [ 1063.283123][T14922] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1063.307330][T14922] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.4610: lblock 0 mapped to illegal pblock 48 (length 1) [ 1063.352904][T14939] loop0: detected capacity change from 0 to 512 [ 1063.422172][T14560] EXT4-fs (loop5): unmounting filesystem. [ 1063.429375][T14922] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1063.459074][T14939] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4615: invalid indirect mapped block 256 (level 2) [ 1063.472625][T14922] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.4610: Failed to acquire dquot type 0 [ 1063.503630][T14939] EXT4-fs (loop0): 2 truncates cleaned up [ 1063.524256][T14939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1064.564834][T14949] loop8: detected capacity change from 0 to 256 [ 1064.595290][T14827] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1064.613599][T14922] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 1064.637650][T14949] loop8: detected capacity change from 0 to 256 [ 1064.645980][T14949] exfat: Deprecated parameter 'namecase' [ 1064.839470][T14949] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1065.081710][T14952] loop5: detected capacity change from 0 to 512 [ 1065.088373][T14922] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.4610: mark_inode_dirty error [ 1065.207773][T14922] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1065.234950][T14922] EXT4-fs (loop2): 1 orphan inode deleted [ 1065.307313][T14922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1065.316464][T14296] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1065.412811][T14296] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1065.452055][T14952] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1065.463965][T14296] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:12: Failed to release dquot type 0 [ 1065.586394][T14952] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.634202][T11577] EXT4-fs (loop2): unmounting filesystem. [ 1065.652425][T11577] EXT4-fs error (device loop2): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1065.671504][T14538] EXT4-fs (loop0): unmounting filesystem. [ 1065.691010][T11577] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 1065.737596][T11577] EXT4-fs error (device loop2): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 1066.252644][T14560] EXT4-fs (loop5): unmounting filesystem. [ 1066.588399][T14979] overlayfs: missing 'lowerdir' [ 1068.603162][T14982] device syzkaller0 entered promiscuous mode [ 1069.275749][ T19] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1070.860776][T15007] loop5: detected capacity change from 0 to 256 [ 1070.872498][T15007] FAT-fs (loop5): Directory bread(block 64) failed [ 1070.879104][T15007] FAT-fs (loop5): Directory bread(block 65) failed [ 1070.885670][T15007] FAT-fs (loop5): Directory bread(block 66) failed [ 1070.892296][T15007] FAT-fs (loop5): Directory bread(block 67) failed [ 1070.898876][T15007] FAT-fs (loop5): Directory bread(block 68) failed [ 1070.905521][T15007] FAT-fs (loop5): Directory bread(block 69) failed [ 1070.912078][T15007] FAT-fs (loop5): Directory bread(block 70) failed [ 1070.918629][T15007] FAT-fs (loop5): Directory bread(block 71) failed [ 1070.925404][T15007] FAT-fs (loop5): Directory bread(block 72) failed [ 1070.932034][T15007] FAT-fs (loop5): Directory bread(block 73) failed [ 1070.985146][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 1070.991808][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1071.015156][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.037097][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1071.061123][ T19] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1071.684794][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.693037][ T19] usb 3-1: Product: syz [ 1071.697578][ T19] usb 3-1: Manufacturer: syz [ 1071.702258][ T19] usb 3-1: SerialNumber: syz serialport: VM disconnected.