2c0)=ANY=[]) [ 594.438995][T25832] loop0: detected capacity change from 0 to 32000 [ 594.449105][T25832] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 594.550487][T25838] input: syz0 as /devices/virtual/input/input4555 [ 594.553565][T25839] loop0: detected capacity change from 0 to 32256 [ 594.554730][T25840] input: syz0 as /devices/virtual/input/input4556 [ 594.571010][T25839] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x7f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5aa8) 04:46:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x3fc0) 04:46:50 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 04:46:50 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x700) 04:46:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5ac0) [ 595.090280][T25846] input: syz0 as /devices/virtual/input/input4557 [ 595.116526][T25852] input: syz0 as /devices/virtual/input/input4558 04:46:50 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3d21, &(0x7f0000000300)={0x0, 0xa6c5, 0x0, 0x3, 0x13d, 0x0, r0}, &(0x7f00006d6000/0x3000)=nil, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r6 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x800000, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r6, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r6, 0x10000000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r9, 0x545d, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r9, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r10}}, 0x4769) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd=r5, 0x5, 0x0, 0x0, 0x6, 0x0, {0x2, r10}}, 0x1f) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r11}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) syz_io_uring_setup(0x713c, &(0x7f0000000180)={0x0, 0xe79e, 0x2, 0x3, 0x279, 0x0, r11}, &(0x7f0000003000/0x6000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r12 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r12}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:46:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x3fd8) [ 595.165408][T25849] loop0: detected capacity change from 0 to 32512 [ 595.184074][T25849] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x800000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5ad8) [ 595.229346][T25860] input: syz0 as /devices/virtual/input/input4559 [ 595.274023][T25863] loop0: detected capacity change from 0 to 32768 04:46:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x810000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 595.290197][T25863] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 595.314225][T25865] input: syz0 as /devices/virtual/input/input4560 04:46:50 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x3d21, &(0x7f0000000300)={0x0, 0xa6c5, 0x0, 0x3, 0x13d, 0x0, r0}, &(0x7f00006d6000/0x3000)=nil, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) r6 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x800000, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r6, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r6, 0x10000000) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r9, 0x545d, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r9, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r10}}, 0x4769) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd=r5, 0x5, 0x0, 0x0, 0x6, 0x0, {0x2, r10}}, 0x1f) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r11}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x713c, &(0x7f0000000180)={0x0, 0xe79e, 0x2, 0x3, 0x279, 0x0, r11}, &(0x7f0000003000/0x6000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) r12 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r12}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:46:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5af0) 04:46:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x3ff0) [ 595.347326][T25868] input: syz0 as /devices/virtual/input/input4561 04:46:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x820000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 595.392894][T25872] loop0: detected capacity change from 0 to 33024 [ 595.397065][T25872] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 595.449050][T25874] input: syz0 as /devices/virtual/input/input4562 [ 595.475514][T25877] input: syz0 as /devices/virtual/input/input4563 [ 595.520326][T25883] loop0: detected capacity change from 0 to 33280 [ 595.522927][T25883] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 595.552380][ T3652] I/O error, dev loop0, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:46:50 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 04:46:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5b08) 04:46:50 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x3d21, &(0x7f0000000300)={0x0, 0xa6c5, 0x0, 0x3, 0x13d, 0x0, r0}, &(0x7f00006d6000/0x3000)=nil, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r6 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x800000, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r6, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r6, 0x10000000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r9, 0x545d, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r9, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r10}}, 0x4769) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd=r5, 0x5, 0x0, 0x0, 0x6, 0x0, {0x2, r10}}, 0x1f) (async, rerun: 32) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (rerun: 32) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r11}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x713c, &(0x7f0000000180)={0x0, 0xe79e, 0x2, 0x3, 0x279, 0x0, r11}, &(0x7f0000003000/0x6000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r12 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r12}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:46:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4008) 04:46:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x830000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:50 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1f00) [ 595.810310][T25892] loop0: detected capacity change from 0 to 33536 [ 595.816555][T25888] input: syz0 as /devices/virtual/input/input4565 04:46:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5b20) 04:46:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x840000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4020) [ 595.816971][T25894] input: syz0 as /devices/virtual/input/input4564 04:46:51 executing program 2: syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) syz_io_uring_setup(0x374d, &(0x7f0000000180)={0x0, 0xc5f, 0xe02239724b7ef8c0, 0x3, 0xaa}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = pidfd_open(r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) io_uring_enter(r4, 0x67ef, 0x4ad6, 0x84658feb205ee0f6, 0x0, 0xbeadea65) 04:46:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5b38) [ 595.840255][T25892] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:51 executing program 2: syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) syz_io_uring_setup(0x374d, &(0x7f0000000180)={0x0, 0xc5f, 0xe02239724b7ef8c0, 0x3, 0xaa}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = pidfd_open(r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) io_uring_enter(r4, 0x67ef, 0x4ad6, 0x84658feb205ee0f6, 0x0, 0xbeadea65) [ 595.935509][T25907] input: syz0 as /devices/virtual/input/input4566 [ 595.990103][T25909] loop0: detected capacity change from 0 to 33792 [ 596.002747][T25909] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 596.023243][T25915] input: syz0 as /devices/virtual/input/input4567 [ 596.081099][T25916] input: syz0 as /devices/virtual/input/input4568 04:46:51 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 04:46:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x850000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4038) 04:46:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5b50) 04:46:51 executing program 2: syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) syz_io_uring_setup(0x374d, &(0x7f0000000180)={0x0, 0xc5f, 0xe02239724b7ef8c0, 0x3, 0xaa}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = pidfd_open(r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) io_uring_enter(r4, 0x67ef, 0x4ad6, 0x84658feb205ee0f6, 0x0, 0xbeadea65) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) syz_io_uring_setup(0x374d, &(0x7f0000000180)={0x0, 0xc5f, 0xe02239724b7ef8c0, 0x3, 0xaa}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r2, 0x0) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) (async) io_uring_enter(r4, 0x67ef, 0x4ad6, 0x84658feb205ee0f6, 0x0, 0xbeadea65) (async) [ 596.337620][T25926] input: syz0 as /devices/virtual/input/input4569 [ 596.361930][T25932] input: syz0 as /devices/virtual/input/input4570 04:46:51 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2000) 04:46:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5b68) 04:46:51 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180), 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r8 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r8, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r8, 0x10000000) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r12, 0x545d, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r12, 0x7, 0x6, 0x22d, 0x3, 0x0, {0x41, r13}}, 0x4769) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r13}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x6, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x3) [ 596.412645][T25940] loop0: detected capacity change from 0 to 34048 [ 596.441782][T25940] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x860000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4050) [ 596.460873][T25943] input: syz0 as /devices/virtual/input/input4571 04:46:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5b80) [ 596.564655][T25952] loop0: detected capacity change from 0 to 34304 [ 596.583047][T25952] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x870000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 596.630008][T25957] input: syz0 as /devices/virtual/input/input4572 [ 596.665713][T25958] input: syz0 as /devices/virtual/input/input4573 [ 596.722944][T25962] loop0: detected capacity change from 0 to 34560 [ 596.733016][T25962] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 596.779147][ T3646] I/O error, dev loop0, sector 34432 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:46:52 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 04:46:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5b98) 04:46:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4068) 04:46:52 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x880000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:52 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180), 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r8 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r8, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r8, 0x10000000) (async) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r12, 0x545d, 0x0) (async) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r12, 0x7, 0x6, 0x22d, 0x3, 0x0, {0x41, r13}}, 0x4769) (async) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r13}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x6, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x3) [ 597.079966][T25966] loop0: detected capacity change from 0 to 34816 [ 597.097385][T25965] input: syz0 as /devices/virtual/input/input4574 04:46:52 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x200000) 04:46:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5bb0) [ 597.098627][T25966] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4080) 04:46:52 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x890000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 597.110347][T25968] input: syz0 as /devices/virtual/input/input4575 04:46:52 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180), 0x1) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) r8 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r8, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r8, 0x10000000) (async) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r12, 0x545d, 0x0) (async) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r12, 0x7, 0x6, 0x22d, 0x3, 0x0, {0x41, r13}}, 0x4769) (async) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r13}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x6, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x3) 04:46:52 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x8a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 597.284709][T25982] loop0: detected capacity change from 0 to 35072 [ 597.300867][T25982] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 597.307702][T25985] input: syz0 as /devices/virtual/input/input4576 04:46:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5bc8) [ 597.362692][T25988] input: syz0 as /devices/virtual/input/input4577 [ 597.429614][T25995] loop0: detected capacity change from 0 to 35328 [ 597.431440][T25995] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 597.470295][ T3646] I/O error, dev loop0, sector 35200 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 597.472409][T25998] input: syz0 as /devices/virtual/input/input4578 04:46:52 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 04:46:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4098) 04:46:52 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x8b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5be0) 04:46:52 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) r1 = syz_io_uring_setup(0x15fc, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffd}}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) getpid() syz_clone(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000002c0)="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") 04:46:52 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1000000) [ 597.773044][T26005] input: syz0 as /devices/virtual/input/input4579 [ 597.774678][T26006] loop0: detected capacity change from 0 to 35584 [ 597.778551][T26006] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x8c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5bf8) 04:46:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x40b0) 04:46:53 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) r1 = syz_io_uring_setup(0x15fc, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffd}}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) getpid() syz_clone(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000002c0)="f7303bfccc4cd9c6ca03b5793116bf3dd6b68a04cd822c00a0231505bf63b80da5e0e630fda7d7b80e1117538461bfc3ac35a2921a080ffe376deadf037a6a5b5417b96839fa830c9d1f3835c2b83fc73197fdc8f7694c7c385fb272089954ec6a25c03bb241cc57d43ed259916bbd85da851c8f3e1fa88268363c20e29004ae1b7d12df89f5a091df5cce272241c67e798209e00b1a2237087892e9e4f5d9d13718fdfb950105bb0e3e41116f2acc4f4e6155bfb550b7ecb8e0580c9586818691c1608268fb8997feb3e1d97f849345f2621a80c957d6ad7bd9489d6e0512319d01492b7f01870dbf771da74e8d1afa8086ea4bcb0b968c4ce8848883ecd4f9331c1b2aceb522e5458d0237f65bbba925787bef610e9e0fd0eccff4916646bffc171b7a0c9ef11fad0385ea65bc852058dd127be47ea56c32dc79b365aa7fb1a79e47eafcda83edfee4fc46c099f2d5047e586461ec00a6f9221eb0c7fdb591e7c3e28836918835efcd9a53b30a740845e0c13e4aae719217f2c099d0927c87c6057707c37db961e3f7f4aa770776aa9132a4885b3399dced05659ad2368a18b6d63e35b17df05871104711f1e87e7de867aea18eef85a5d474936a5dbe5214aa90893ffb8f65c310a2e3f947198fa8e2955bc27be01d574e6059130473cdb083881631eda92ecb48373ed09386945ecf0e78be322bb6b9110f1ff9c3e60db5d2e2ecd36569551bf077ebc16790ad5c3948e64d07f7c3d16b507fc9e9983a84c52c6e6410c582ae84f92ba6ecf021b7781a7e15088d3160bd9f5737ac2b15fd6be3a72c693a5fb5154d99756bd4808eec706bd8cff9ca1d81d31c6d713f34ea063f7a25b13bb3caaaae9c4fc6863a8b4872c8b00a6392285904d359b66b1819e82b11bfe622667fa42e4645fa905628bc69979110d27bf1cfcdd6f825e262cac14b9add82df3f37fc263a285212fdbcafb49f369efdf928b723824fab46d4e8a2a8a361e35a4659e3a7ce25d51a442c99c620c85fa312cdfa4dc3c68a4bc8ab26f475e5b71b71fcb41c887b55cbf247338d68214c10e03743da2123c56c58cb76cd090ebf38e7c4f853208f248f355b1628a2a1231d560dfb48838047e8173e1e99cb4f49918fc1844d29ff4e7ddd2ce6dfad38bbe672fe87cd979aacfe21beb8c245fd168f9af1d7db47a6c4c6259683562e7237ffc7ac9e99d61d613fcdb4ab079a398df2de10aa830b12c92de95a62822edc33504a84b67aa32db60c4637a363ecd54ffc823f2cdeef39153b8c71f6fba6f63d8b8e995c1ee2abef7a41fdc70453946c93c07ad6cb13969117b7674919b0fcca8386385a1ad6012508a3e580923dd6c72733e8f65276355a1f4f19c963e7ee1054ed5d4ca4419fb752a10a3210cee3451805f5c4eff73acd00f559ddca7dd11951f85f0219b75ab2e0e3a91e72c21a9f3c6951478bec130c44ea4032256f98fd45ddbb388bbd7d4d76a3e0eca0679d3088e166b0df41ca9ad791f9d47a5c462f66e8dd22de602e731b2e60b5fd109be1eab2ba36c69d2a21405df1cd31817828cc48ac00f6d50a8cd17bf7796f2994dc8c1bb7238a5b3dad0f9c06fc9155a23150c34a602a4cf5aa04b1ae87d0e63fa1b6ffce7de2208f1ed7c3bf512178f562815c40df84169b642b38f8549d2710319c41a4e6f5934d7f6f092e6e32dd238d37b1414ef23985d6c601bda7c43e62377d4d30e7f76a9d885f93eb58484347395a508dedcaab2ca172383745da23cd1076d4928c92e93c2f0d7b5e74caa2dfb5c10ad4c29be71c1c30cab7a478a7ffb05889f4853d420a6cb09c935ebda8611898652174c9da9759e02c8ce9d58752f3449fc16306b1939891a33da60c68c7414256dbb374a5cb166282b7ee4a5f1362a0639cf9aa5ab6f9656361ed1d1f5cabc121f69557ea6397790bd3bed63f41b00f9041ff2186f99ac22d92201c104cb2329a16ffa60aa225c54ebaa0c8e09e34c01247978a299a728730988d3409a22514b5879c147ccd8e3f967c81961e8f84fd72331b262ada6289c2bc4e83105e0ff848e03ebc12f58d4d23b435096c6b156c475bc45a0402b2bf20643fd6a072b2810104aa8a2420a9cf97364f441d9343bb997c6cdc03c1682de32e33ecd060599f1030b16e3ed8b6700b4262c75f0f73753be09fd5327933d49713d1547471833791e30f5b3e681210951c269b9370884b815c73ebff35b6a9faf5f0d0c497a6e0a1eb65a5a568e5399cd54d75f0ade046371acbabae73cb0cbc60816b1b78655a0065b6b1050c96dc0f81d3b037be9914126881826af6a781b93ef92d6f3c868ecbc9ccbc9fd3703ea31a3287ba41d593994bf64171a57ab6be2334fc0e0f041d9d3425f8b99cb6a0e8e6969ecfea8cd8cfeb4d393f9d0deb3063ad030e475bcda9732af131b7acdd813c2b7717edeb2aaf6c6a99f9c0052a5420458aab9dbcd8b7a885104faf07646da73526154229b1507fe6cb1943f86d8ee857c73a8014a0fc7901827868eda02537cc5bfc02fd9b43f62645bcbe48bf9f79743febec4624b689d3d95b083f35923ed710b6acefd06778da7af8c7c8a5fbed656ae3cdcad9d96e271e17a1a7efe140d0149ed40e7a732e7e4fe1d476609810a0f054a56eea1afab6b2c7cba396c460d9296bccd1ee4f85a2f9bb72bc32706d3e7c115057ff3587325c19c4d7d30ea314807f628025502fcf7e4f3764147b49279b4ffb842b6f4dbf9c0d8807fc6dad6d941071b067ba97df80aeb2021902d603b5fb7aabaece6443389cd61619bfef3aed44bf57ec0ea894b0eacc7ada70a1583cc4c91f8641af13753c1f8554e5f5e82528e05ece204e33afabc13738fdfbdb3ec93b56df38ec936298a7828eea107f7657be7d87d317a02c5ddaf2af5c74baddba0cfa467c81b3383a490c6c73d482e1ab00598e807be3d8dc0ec86099d2157883692ef0d41103ff9ba2965fdc4b3283fd26896456454b2ae07fce8b1e142ca174f8731eab259cbc28974581a2fbd8ffffc71baacbbad0e82bfb9f3ba995b54d9aee0363d25ee1e162cd82524f9608d1ed9a9cd85ca8733291d06dd1c9ff73d81826432211b5d474e7357101eac9bf17492f42bc463af86e0fd994c35def19890d76cbb0cc7148e48c448f129ad6863b74958fbe1750e7ad2e4457cf57b91da929ca4e23b5db6533845b0b1df4a329127e9a5db9d138f0841ab6d5447719f2f7352dfdfc024647ec4c62621f1e9399ab28561325cb8626d200a593b3f198138ebeb28c27fafe08d1e409b873eb88ecd2caa536a9b2e61aacf94074608db95f2e7f67d91036058c3287e3723607cef82abaac1b7e6fbbdc1c429310244734136c0312c685dd57c7c393cd20f4c2ea7029a37293b615d16a587a7157e4fb173bc3ec45ebd2339e932bf16b30317a80a56cf989bf6bdbadd9daa82a737e3fb400ec9eb873754783c78ad339bf4e12991312ac27a1b6509005b5495d9509118ab913bdb7195db6fdedc039b36f582436188455de641a366e6a04574877ff7fd953988bcb94c44649ac0072051865736c3a9c0baaf09e528459b56ae96f87671b3e780e02c5cc0691d4fe0c22b343f2e5ae0268e594b794e1c6f59f4f7c65f521489426d404e28a0ebfc3a916bf53a32c85574d159f9acf8faff39e5ee3281544c5b19cea2b7859c55c57cc7f94595676de880edd35fa5f6ab537f4be1b6f31e30cc166118c546b031e75c4c522fb35c7ab6a2b819a9a9c7d83249e857d7c697dc72a359db80f37c80aa5a286ddcbb97df8e6c445d46c4d17766f3abacbc9038ff829d5277a947cdeac747d3f8a4fc97237fd12271cc9ba93aea70aa2c4dd633f3b880a1f454cdced4c2d4d8edf3804e98ab9dbd962e51886e518bbd9ef18eed984b373594137791850ccd1da9ac69588aa403227a4f06db97b3ed0dfd7e164e64552c34ecd025426f941eadbea5a50263387a750be0c07ffffe4d7a1e610330b6ebb7834966129ddc6533a2e61163b7c5dbd29b5931b3271bced0700e6170cc0d5af229b39547635c2334fa97cd7cb3f56434bf9a3fdb0494a770da1c40b72486e14b50cda3841a656019a57de3903cb8e3517793757db91d61e1b587914934855691db7a89499a54f672e56f96905555092d06c476bf6527504e516e76b8418ac774d9d550b71d94afe53acf0d398fcbab3d6f1a6ea4f59fbef088d64d184dcdf3b10d9adfa21825641752b9787c8d368defa9dd65a1d4646c79fa573db503fad76ffc7ab9683abb2d784eb0b699894467e3c32c41de452f3f8f74559da7b967549f8a59deb7435444e77902ee97b78f9f17964051e9259dc429f80e5fce40a3af03fc1ae7509f4bf389846fa0a474b8fc499dd4fcccf93e11e9cb12de1ef8e14e988be7ad965de722ef31f655983465de15a13398bd9d0ea2d1cbe30e4f30ab8644611c6aa8e85475799c1e5b6f1214bd7f949c46e1a089bf55116bcd45b4b5fb5091c5bc1659a557f35daab1c4019a0a27fbc5278234999edc6117f0eadca06ec7cfbe5a03152a941837a6f3ee163a0bb558298b47527113fbc6e1c21b6a4be20c4624512ed6dcfc0b42a8999992f470abdaa744a77a4a6f5c6f2a8000590fd9e7cb3ad0d2328ebe84e7c702c59492571bbd333f9adfa1bec914fb40ff891bd1ca6b7c641fc90c670388194224cb2938771156f577e22dc4ff13c6e9129b6000311bfb0e10bdf8729d17fb8e9e56ec315c9a1a6c6fbef0d7a12875ee8e4cbfe031ddb14c8e52060b3f83677c36a9ace47112dafe893e01d430ecb00ca40c899203027158db1d311d4090718810a269260b5051dcda98d691ef880d218c15fdcc40b90aaed4be05bd524b22cf750b909896a9c388e3322875c7f1cf1b8dd16c8c23eb811c9aee67ce89742e94b4e040e52e61ff995ea7bcab6e34786e2864f7755c72fbbda5bcc28ab969aa720ec45dad69afbb920a4c48cea182e3e1ce1ee9964c2663f0eefc60cd44cc05bad555522cd0bc41ea35f982cd1ff36e8f44505c1720f11dea4d2f8f86e9981234d0bb244930d4ca1159bf77fcefe9c5319ff2beea4611e0f90d9d564517a88c336659195faa1e71ace2851a626ce455a092993e5c3dc75372a72adc691661df0f77c2b493b35e2f8f81ad81957f85111f259dfe4c7edae18231dd72f95d33db57c4239ba12843645a7e78d15b055ee03fd8b4517d121647a27c169c60265f28b1964512476a15a5d7a802cfef78652941c8665a29148e5769d6da6507b7be57575fe3af822d57844ea99981399a7c826dd5506695463acca871b32d26378c8fe7703d226719f8b9ed5e2f7c179c1526e036c4cfae4f2f5bd1fbaf943c2c4c34b7e368190192015de635789b4d2e6cbcf09775c429fc9f0654ff609d9af4b6e74c958e5c017f5a7c653cce437b5ddb6a3d9f2cad308f5525f8e836ab734f88735ec484736ab4ed668863580cb2b442288c8c7633012ad4ef53df6133af5a33e71b3524e04a1960f6ee5248d9a58e11b2ce9893947eff2fb23f589e14951d98d745da5ed6756dc5c059746fa2720d141cfde33423dccd2351751876eb7e72f0dd8e96c4f5ae173c82a7616cee4d989c3db6fe562544251b622429ae1e0f72efe15feb755acb4bef7cd0a7e8ae95f467cb0b63d975a284aeb05f5bdaa6d1ca1c0493104e7671f59817973158551cbe44ae1bfd7e09632014a78eab63ecce62cee4abfbc75d665812a84f1414255c3deb57b2895ff44cfd131de8c49d4714b15d0171d0d86") openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x15fc, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffd}}, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) getpid() (async) syz_clone(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000002c0)="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") (async) [ 597.783059][T26007] input: syz0 as /devices/virtual/input/input4580 04:46:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5c10) [ 597.947201][T26023] input: syz0 as /devices/virtual/input/input4581 [ 597.962316][T26025] input: syz0 as /devices/virtual/input/input4582 [ 597.962827][T26024] loop0: detected capacity change from 0 to 35840 04:46:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x8d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 597.986980][T26024] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:53 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:46:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x40c8) [ 598.062931][T26033] loop0: detected capacity change from 0 to 36096 [ 598.087402][T26034] input: syz0 as /devices/virtual/input/input4583 04:46:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5c28) 04:46:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x8e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 598.091961][T26033] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:53 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) r1 = syz_io_uring_setup(0x15fc, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffd}}, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) getpid() (async, rerun: 64) syz_clone(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000002c0)="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") [ 598.110694][T26041] input: syz0 as /devices/virtual/input/input4584 [ 598.171696][T26048] loop0: detected capacity change from 0 to 36352 [ 598.172946][T26047] input: syz0 as /devices/virtual/input/input4585 [ 598.178638][T26048] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:53 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x7000000) 04:46:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x40e0) 04:46:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5c40) 04:46:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x8f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5c58) 04:46:53 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x200000) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20000001f5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000100000006000c00e000020004", 0x1d}], 0x0, &(0x7f0000000140)=ANY=[]) process_vm_readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/95, 0x5f}, {&(0x7f0000001440)=""/230, 0xe6}, {&(0x7f0000001540)=""/111, 0x6f}, {&(0x7f00000015c0)=""/127, 0x7f}], 0x6, &(0x7f00000001c0)=[{&(0x7f00000016c0)=""/208, 0xd0}, {&(0x7f00000017c0)=""/153, 0x99}, {&(0x7f0000001880)=""/226, 0xe2}, {&(0x7f0000001980)=""/94, 0x5e}], 0x4, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4}, 0x3) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 598.511427][T26061] input: syz0 as /devices/virtual/input/input4586 [ 598.517949][T26063] loop0: detected capacity change from 0 to 36608 04:46:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x40f8) [ 598.524806][T26062] input: syz0 as /devices/virtual/input/input4587 [ 598.540054][T26063] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 598.620091][ T3646] I/O error, dev loop0, sector 36480 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 598.649312][T26070] input: syz0 as /devices/virtual/input/input4588 [ 598.745540][T26071] loop2: detected capacity change from 0 to 264192 [ 598.790975][T26074] input: syz0 as /devices/virtual/input/input4589 [ 598.843620][T26071] SQUASHFS error: Failed to read block 0x0: -5 [ 598.843657][T26071] unable to read xattr id index table 04:46:54 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:46:54 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x900000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5c70) 04:46:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4110) 04:46:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5c88) [ 599.012477][T26079] loop0: detected capacity change from 0 to 36864 [ 599.035311][T26082] input: syz0 as /devices/virtual/input/input4590 [ 599.035311][T26079] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 599.039295][T26081] input: syz0 as /devices/virtual/input/input4591 [ 599.194976][T26089] input: syz0 as /devices/virtual/input/input4592 04:46:54 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1f000000) 04:46:54 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x910000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4128) 04:46:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5ca0) 04:46:54 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x200000) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20000001f5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000100000006000c00e000020004", 0x1d}], 0x0, &(0x7f0000000140)=ANY=[]) process_vm_readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/95, 0x5f}, {&(0x7f0000001440)=""/230, 0xe6}, {&(0x7f0000001540)=""/111, 0x6f}, {&(0x7f00000015c0)=""/127, 0x7f}], 0x6, &(0x7f00000001c0)=[{&(0x7f00000016c0)=""/208, 0xd0}, {&(0x7f00000017c0)=""/153, 0x99}, {&(0x7f0000001880)=""/226, 0xe2}, {&(0x7f0000001980)=""/94, 0x5e}], 0x4, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4}, 0x3) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x200000) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20000001f5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000100000006000c00e000020004", 0x1d}], 0x0, &(0x7f0000000140)=ANY=[]) (async) process_vm_readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/95, 0x5f}, {&(0x7f0000001440)=""/230, 0xe6}, {&(0x7f0000001540)=""/111, 0x6f}, {&(0x7f00000015c0)=""/127, 0x7f}], 0x6, &(0x7f00000001c0)=[{&(0x7f00000016c0)=""/208, 0xd0}, {&(0x7f00000017c0)=""/153, 0x99}, {&(0x7f0000001880)=""/226, 0xe2}, {&(0x7f0000001980)=""/94, 0x5e}], 0x4, 0x0) (async) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4}, 0x3) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:46:54 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x7, 0x0, 0x0, 0x0) [ 599.336155][T26093] input: syz0 as /devices/virtual/input/input4593 [ 599.365857][T26096] input: syz0 as /devices/virtual/input/input4594 04:46:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5cb8) 04:46:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4140) 04:46:54 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x920000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 599.373215][T26099] loop0: detected capacity change from 0 to 37120 [ 599.395904][T26097] loop2: detected capacity change from 0 to 264192 [ 599.397342][T26099] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5cd0) [ 599.467464][T26097] SQUASHFS error: Failed to read block 0x0: -5 [ 599.467496][T26097] unable to read xattr id index table [ 599.517926][T26108] input: syz0 as /devices/virtual/input/input4595 [ 599.521999][T26110] input: syz0 as /devices/virtual/input/input4596 04:46:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4158) 04:46:54 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x930000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 599.596281][T26126] loop0: detected capacity change from 0 to 37376 [ 599.605373][T26126] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 599.617679][T26128] input: syz0 as /devices/virtual/input/input4597 [ 599.670372][T26130] input: syz0 as /devices/virtual/input/input4598 [ 599.701410][T26132] loop0: detected capacity change from 0 to 37632 [ 599.705989][T26132] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:55 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x20000000) 04:46:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5ce8) 04:46:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4170) 04:46:55 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x940000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:55 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x200000) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20000001f5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000100000006000c00e000020004", 0x1d}], 0x0, &(0x7f0000000140)=ANY=[]) process_vm_readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/95, 0x5f}, {&(0x7f0000001440)=""/230, 0xe6}, {&(0x7f0000001540)=""/111, 0x6f}, {&(0x7f00000015c0)=""/127, 0x7f}], 0x6, &(0x7f00000001c0)=[{&(0x7f00000016c0)=""/208, 0xd0}, {&(0x7f00000017c0)=""/153, 0x99}, {&(0x7f0000001880)=""/226, 0xe2}, {&(0x7f0000001980)=""/94, 0x5e}], 0x4, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4}, 0x3) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x200000) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20000001f5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000100000006000c00e000020004", 0x1d}], 0x0, &(0x7f0000000140)=ANY=[]) (async) process_vm_readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/95, 0x5f}, {&(0x7f0000001440)=""/230, 0xe6}, {&(0x7f0000001540)=""/111, 0x6f}, {&(0x7f00000015c0)=""/127, 0x7f}], 0x6, &(0x7f00000001c0)=[{&(0x7f00000016c0)=""/208, 0xd0}, {&(0x7f00000017c0)=""/153, 0x99}, {&(0x7f0000001880)=""/226, 0xe2}, {&(0x7f0000001980)=""/94, 0x5e}], 0x4, 0x0) (async) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4}, 0x3) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:46:55 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x8, 0x0, 0x0, 0x0) 04:46:55 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x950000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 600.110490][T26137] loop0: detected capacity change from 0 to 37888 [ 600.135437][T26137] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5d00) 04:46:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4188) [ 600.137159][T26139] input: syz0 as /devices/virtual/input/input4600 [ 600.149473][T26141] input: syz0 as /devices/virtual/input/input4599 [ 600.260423][T26153] loop0: detected capacity change from 0 to 38144 [ 600.268611][T26140] loop2: detected capacity change from 0 to 264192 04:46:55 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x960000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5d18) [ 600.272137][T26153] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 600.272208][T26140] SQUASHFS error: Failed to read block 0x0: -5 04:46:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x41a0) [ 600.272237][T26140] unable to read xattr id index table [ 600.291611][T26156] input: syz0 as /devices/virtual/input/input4601 [ 600.310653][T26157] input: syz0 as /devices/virtual/input/input4602 [ 600.383078][T26164] loop0: detected capacity change from 0 to 38400 [ 600.395010][T26174] input: syz0 as /devices/virtual/input/input4603 [ 600.402354][T26164] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 600.426966][T26176] input: syz0 as /devices/virtual/input/input4604 04:46:55 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x20000000000000) 04:46:55 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x700, 0x0, 0x0, 0x0) 04:46:55 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x970000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5d30) 04:46:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x41b8) 04:46:55 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 600.729531][T26183] loop0: detected capacity change from 0 to 38656 [ 600.734016][T26185] input: syz0 as /devices/virtual/input/input4605 04:46:56 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x980000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x41d0) [ 600.782775][T26186] input: syz0 as /devices/virtual/input/input4606 [ 600.791695][T26183] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5d48) [ 600.953824][T26197] input: syz0 as /devices/virtual/input/input4607 [ 600.972170][T26200] loop0: detected capacity change from 0 to 38912 04:46:56 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x1f00, 0x0, 0x0, 0x0) 04:46:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5d60) [ 600.992228][T26200] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:56 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x990000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 600.999117][T26201] input: syz0 as /devices/virtual/input/input4608 [ 601.116330][T26208] input: syz0 as /devices/virtual/input/input4609 [ 601.119982][T26209] loop0: detected capacity change from 0 to 39168 [ 601.127244][T26209] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 601.186423][ T3652] I/O error, dev loop0, sector 39040 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:46:56 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x100000000000000) 04:46:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x41e8) 04:46:56 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x9a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5d78) 04:46:56 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x2000, 0x0, 0x0, 0x0) 04:46:56 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 601.523293][T26213] input: syz0 as /devices/virtual/input/input4610 [ 601.524158][T26215] loop0: detected capacity change from 0 to 39424 04:46:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5d90) [ 601.563742][T26216] input: syz0 as /devices/virtual/input/input4611 04:46:56 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x9b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4200) [ 601.575174][T26215] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5da8) [ 601.649476][T26222] input: syz0 as /devices/virtual/input/input4612 [ 601.691144][T26227] loop0: detected capacity change from 0 to 39680 04:46:56 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x9c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5dc0) [ 601.716637][T26227] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 601.720345][T26232] input: syz0 as /devices/virtual/input/input4613 [ 601.745523][T26234] input: syz0 as /devices/virtual/input/input4614 [ 601.763283][ T8317] I/O error, dev loop0, sector 39552 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 601.853637][T26238] loop0: detected capacity change from 0 to 39936 [ 601.862636][T26239] input: syz0 as /devices/virtual/input/input4615 [ 601.865274][T26238] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 601.921901][ T3652] I/O error, dev loop0, sector 39808 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:46:57 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x700000000000000) 04:46:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4218) 04:46:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5dd8) 04:46:57 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x200000, 0x0, 0x0, 0x0) 04:46:57 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x9d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:57 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 602.205901][T26243] input: syz0 as /devices/virtual/input/input4616 [ 602.216185][T26245] loop0: detected capacity change from 0 to 40192 04:46:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4230) 04:46:57 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x9e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5df0) [ 602.218066][T26245] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 602.325932][T26256] input: syz0 as /devices/virtual/input/input4618 04:46:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4248) [ 602.380572][T26258] loop0: detected capacity change from 0 to 40448 [ 602.389251][T26258] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5e08) 04:46:57 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x9f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 602.416960][T26264] input: syz0 as /devices/virtual/input/input4619 [ 602.463423][T26266] input: syz0 as /devices/virtual/input/input4620 [ 602.512998][T26268] input: syz0 as /devices/virtual/input/input4621 [ 602.540173][T26271] loop0: detected capacity change from 0 to 40704 [ 602.545852][T26271] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:58 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xbc0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4260) 04:46:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5e20) [ 602.919064][T26275] input: syz0 as /devices/virtual/input/input4622 [ 602.921703][T26277] loop0: detected capacity change from 0 to 48129 [ 602.927388][T26276] input: syz0 as /devices/virtual/input/input4623 04:46:58 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x1000000, 0x0, 0x0, 0x0) 04:46:58 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1f00000000000000) 04:46:58 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) pidfd_open(r5, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:46:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4278) 04:46:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5e38) [ 602.927515][T26277] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:58 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xbd0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5e50) [ 603.092208][T26286] input: syz0 as /devices/virtual/input/input4624 [ 603.110323][T26288] input: syz0 as /devices/virtual/input/input4625 04:46:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4290) [ 603.210712][T26295] loop0: detected capacity change from 0 to 48385 [ 603.243815][T26296] input: syz0 as /devices/virtual/input/input4626 04:46:58 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xbe0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5e68) [ 603.267040][T26295] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 603.306796][T26298] input: syz0 as /devices/virtual/input/input4627 [ 603.364390][T26300] input: syz0 as /devices/virtual/input/input4628 04:46:58 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xbf0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5e80) [ 603.389636][T26303] loop0: detected capacity change from 0 to 48641 [ 603.419826][T26303] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 603.514840][T26305] loop0: detected capacity change from 0 to 48897 [ 603.536151][T26305] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 603.539278][T26307] input: syz0 as /devices/virtual/input/input4629 [ 603.594670][ T3646] I/O error, dev loop0, sector 48768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:46:58 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x7000000, 0x0, 0x0, 0x0) 04:46:58 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2000000000000000) 04:46:59 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) pidfd_open(r5, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 04:46:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x42a8) 04:46:59 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc00100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5e98) [ 603.903487][T26318] input: syz0 as /devices/virtual/input/input4630 [ 603.903745][T26317] input: syz0 as /devices/virtual/input/input4631 04:46:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5eb0) 04:46:59 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc10100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 603.905085][T26319] loop0: detected capacity change from 0 to 49153 04:46:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x42c0) [ 603.925860][T26319] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5ec8) [ 604.052217][T26329] input: syz0 as /devices/virtual/input/input4632 [ 604.059388][T26330] input: syz0 as /devices/virtual/input/input4633 [ 604.091793][T26331] loop0: detected capacity change from 0 to 49409 04:46:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x42d8) [ 604.099455][T26331] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:59 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc20100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 604.154997][T26334] input: syz0 as /devices/virtual/input/input4634 [ 604.227876][T26337] input: syz0 as /devices/virtual/input/input4635 [ 604.229272][T26338] loop0: detected capacity change from 0 to 49665 [ 604.233302][T26338] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:59 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc30100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5ee0) 04:46:59 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) pidfd_open(r5, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) (async) pidfd_open(r5, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:46:59 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x8000000, 0x0, 0x0, 0x0) 04:46:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x42f0) 04:46:59 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xffffffff00000000) 04:46:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5ef8) [ 604.436659][T26344] input: syz0 as /devices/virtual/input/input4636 [ 604.443617][T26346] loop0: detected capacity change from 0 to 49921 04:46:59 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc40100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:46:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4308) [ 604.454724][T26348] input: syz0 as /devices/virtual/input/input4637 [ 604.473990][T26346] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:46:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5f10) [ 604.580622][T26365] input: syz0 as /devices/virtual/input/input4638 04:46:59 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc50100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 604.627621][T26368] input: syz0 as /devices/virtual/input/input4639 04:46:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4320) [ 604.675633][T26371] input: syz0 as /devices/virtual/input/input4640 [ 604.705653][T26374] loop0: detected capacity change from 0 to 50433 04:46:59 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc60100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5f28) [ 604.710515][T26374] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 604.769030][ T4430] I/O error, dev loop0, sector 50304 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 604.830077][T26378] input: syz0 as /devices/virtual/input/input4641 [ 604.841988][T26379] loop0: detected capacity change from 0 to 50689 [ 604.843203][T26379] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 604.846179][T26380] input: syz0 as /devices/virtual/input/input4642 [ 604.897011][ T3646] I/O error, dev loop0, sector 50560 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xfe57) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}}, 0x8, 0x4, 0x2, 0x0, 0x80, 0x8, 0xcc}, 0x9c) r3 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000100)=""/36, 0x24}], 0x2}, 0x0, 0x100, 0x1, {0x3, r8}}, 0x0) io_uring_enter(r3, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:00 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x1f000000, 0x0, 0x0, 0x0) 04:47:00 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc70100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5f40) 04:47:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4338) 04:47:00 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x6, 0x698, 0x0, 0x3, 0x3, 0x1}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 605.277678][T26389] input: syz0 as /devices/virtual/input/input4643 [ 605.289525][T26388] loop0: detected capacity change from 0 to 50945 04:47:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4350) 04:47:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5f58) 04:47:00 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc80100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 605.310516][T26391] input: syz0 as /devices/virtual/input/input4644 [ 605.312696][T26388] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:00 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xc90100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 605.453298][T26400] input: syz0 as /devices/virtual/input/input4645 [ 605.476750][T26402] loop0: detected capacity change from 0 to 51201 04:47:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5f70) 04:47:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4368) [ 605.483432][T26402] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 605.488073][T26403] input: syz0 as /devices/virtual/input/input4646 [ 605.580003][T26406] loop0: detected capacity change from 0 to 51457 [ 605.598493][T26406] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 605.608803][T26408] input: syz0 as /devices/virtual/input/input4647 [ 605.629427][T26410] input: syz0 as /devices/virtual/input/input4648 04:47:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xfe57) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}}, 0x8, 0x4, 0x2, 0x0, 0x80, 0x8, 0xcc}, 0x9c) r3 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r6, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}}, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000100)=""/36, 0x24}], 0x2}, 0x0, 0x100, 0x1, {0x3, r8}}, 0x0) io_uring_enter(r3, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:01 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xca0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5f88) 04:47:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4380) 04:47:01 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x6, 0x698, 0x0, 0x3, 0x3, 0x1}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:01 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x20000000, 0x0, 0x0, 0x0) 04:47:01 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xcb0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 606.076545][T26424] input: syz0 as /devices/virtual/input/input4649 [ 606.079758][T26426] loop0: detected capacity change from 0 to 51713 04:47:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5fa0) 04:47:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4398) [ 606.099043][T26426] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:01 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xcc0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 606.120174][T26427] input: syz0 as /devices/virtual/input/input4650 [ 606.190098][T26435] loop0: detected capacity change from 0 to 51969 04:47:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5fb8) [ 606.200392][T26435] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:01 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xcd0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 606.231397][T26437] input: syz0 as /devices/virtual/input/input4651 [ 606.242827][ T3646] I/O error, dev loop0, sector 51840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 606.301403][T26439] input: syz0 as /devices/virtual/input/input4652 [ 606.317417][T26441] loop0: detected capacity change from 0 to 52225 [ 606.331288][T26441] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 606.385139][ T3652] I/O error, dev loop0, sector 52096 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 606.397413][T26444] input: syz0 as /devices/virtual/input/input4653 [ 606.488618][T26447] loop0: detected capacity change from 0 to 52481 [ 606.507592][T26447] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) (async) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xfe57) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}}, 0x8, 0x4, 0x2, 0x0, 0x80, 0x8, 0xcc}, 0x9c) (async, rerun: 64) r3 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r6, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000100)=""/36, 0x24}], 0x2}, 0x0, 0x100, 0x1, {0x3, r8}}, 0x0) (async, rerun: 64) io_uring_enter(r3, 0x688c, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 04:47:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x43b0) 04:47:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5fd0) 04:47:02 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x6, 0x698, 0x0, 0x3, 0x3, 0x1}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:02 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xce0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:02 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x7, 0x0, 0x0) [ 606.807036][T26452] loop0: detected capacity change from 0 to 52737 [ 606.834101][T26452] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:02 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xcf0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 606.843913][T26457] input: syz0 as /devices/virtual/input/input4654 04:47:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x43c8) 04:47:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5fe8) [ 606.870449][T26453] input: syz0 as /devices/virtual/input/input4655 [ 607.000063][T26470] input: syz0 as /devices/virtual/input/input4656 [ 607.027799][T26474] loop0: detected capacity change from 0 to 52993 [ 607.030554][T26473] input: syz0 as /devices/virtual/input/input4657 04:47:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6000) 04:47:02 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd00100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 607.037531][T26474] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x43e0) [ 607.174094][T26477] input: syz0 as /devices/virtual/input/input4658 [ 607.209538][T26479] loop0: detected capacity change from 0 to 53249 [ 607.227669][T26479] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 607.239519][T26482] input: syz0 as /devices/virtual/input/input4659 04:47:02 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x3e6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6018) 04:47:02 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd10100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x43f8) 04:47:02 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x2, r4, 0x1ffff000, 0x20000000) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:02 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x8, 0x0, 0x0) [ 607.444398][T26490] input: syz0 as /devices/virtual/input/input4660 [ 607.445307][T26492] loop0: detected capacity change from 0 to 53505 [ 607.447152][T26492] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:02 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd20100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6030) 04:47:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4410) [ 607.459468][T26493] input: syz0 as /devices/virtual/input/input4661 04:47:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6048) [ 607.591596][T26501] input: syz0 as /devices/virtual/input/input4662 [ 607.625306][T26505] loop0: detected capacity change from 0 to 53761 [ 607.635745][T26505] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:02 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd30100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4428) [ 607.638217][T26506] input: syz0 as /devices/virtual/input/input4663 [ 607.697917][T26510] input: syz0 as /devices/virtual/input/input4664 [ 607.743229][T26514] loop0: detected capacity change from 0 to 54017 [ 607.746220][T26514] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 607.818879][T26516] input: syz0 as /devices/virtual/input/input4665 04:47:03 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x3e6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x3e6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6060) 04:47:03 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd40100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4440) [ 608.105591][T26521] loop0: detected capacity change from 0 to 54273 [ 608.117657][T26522] input: syz0 as /devices/virtual/input/input4666 [ 608.118531][T26523] input: syz0 as /devices/virtual/input/input4667 [ 608.151371][T26521] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6078) 04:47:03 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x700, 0x0, 0x0) 04:47:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4458) 04:47:03 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(r3) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$cont(0x2, r4, 0x1ffff000, 0x20000000) (async) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:03 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd50100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6090) [ 608.278208][T26529] input: syz0 as /devices/virtual/input/input4668 [ 608.338260][T26540] loop0: detected capacity change from 0 to 54529 [ 608.350321][T26540] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:03 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd60100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4470) [ 608.353100][T26542] input: syz0 as /devices/virtual/input/input4669 [ 608.441173][T26549] input: syz0 as /devices/virtual/input/input4670 [ 608.510725][T26556] input: syz0 as /devices/virtual/input/input4671 [ 608.529848][T26555] loop0: detected capacity change from 0 to 54785 [ 608.542494][T26555] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:03 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x3e6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:03 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x1f00, 0x0, 0x0) 04:47:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x60a8) 04:47:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4488) 04:47:03 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd70100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:03 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x2, r4, 0x1ffff000, 0x20000000) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpgrp(r3) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r4) (async) ptrace$cont(0x2, r4, 0x1ffff000, 0x20000000) (async) pidfd_open(r4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) [ 608.793058][T26562] input: syz0 as /devices/virtual/input/input4672 [ 608.819458][T26564] input: syz0 as /devices/virtual/input/input4673 04:47:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x60c0) [ 608.823158][T26565] loop0: detected capacity change from 0 to 55041 04:47:04 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd80100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x44a0) 04:47:04 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x2000, 0x0, 0x0) [ 608.850752][T26565] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x60d8) [ 608.971117][T26583] input: syz0 as /devices/virtual/input/input4674 [ 608.972225][T26578] loop0: detected capacity change from 0 to 55297 [ 608.987221][T26580] input: syz0 as /devices/virtual/input/input4675 04:47:04 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x200000, 0x0, 0x0) [ 608.987832][T26578] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 609.047347][ T8317] I/O error, dev loop0, sector 55168 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 609.105894][T26597] input: syz0 as /devices/virtual/input/input4676 04:47:04 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x6b5c, &(0x7f0000000180)={0x0, 0xf209, 0x0, 0x0, 0x2c1, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x0, {0x0, r0}, 0x2, 0x1, 0x1, {0x0, 0x0, r4}}, 0x81) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = pidfd_open(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:04 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xd90100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x44b8) 04:47:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x60f0) 04:47:04 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x1000000, 0x0, 0x0) 04:47:04 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000006, 0x4000010, r0, 0x0) syz_io_uring_setup(0x64c9, &(0x7f0000000100)={0x0, 0x1b76, 0x8, 0x3, 0x192, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x200, {0x0, r7}, 0x4, 0x1, 0x1, {0x0, 0x0, r4}}, 0x5) [ 609.343865][T26603] input: syz0 as /devices/virtual/input/input4677 [ 609.345550][T26604] input: syz0 as /devices/virtual/input/input4678 04:47:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6108) 04:47:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x44d0) 04:47:04 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x7000000, 0x0, 0x0) [ 609.379330][T26612] loop0: detected capacity change from 0 to 55553 [ 609.415323][T26612] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:04 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xda0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:04 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000006, 0x4000010, r0, 0x0) (async) syz_io_uring_setup(0x64c9, &(0x7f0000000100)={0x0, 0x1b76, 0x8, 0x3, 0x192, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x200, {0x0, r7}, 0x4, 0x1, 0x1, {0x0, 0x0, r4}}, 0x5) [ 609.448255][T26617] input: syz0 as /devices/virtual/input/input4679 04:47:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x44e8) [ 609.530630][T26620] input: syz0 as /devices/virtual/input/input4680 [ 609.546186][T26625] loop0: detected capacity change from 0 to 55809 [ 609.560888][T26625] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 609.594518][T26631] input: syz0 as /devices/virtual/input/input4681 04:47:05 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x6b5c, &(0x7f0000000180)={0x0, 0xf209, 0x0, 0x0, 0x2c1, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x0, {0x0, r0}, 0x2, 0x1, 0x1, {0x0, 0x0, r4}}, 0x81) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = pidfd_open(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_io_uring_setup(0x6b5c, &(0x7f0000000180)={0x0, 0xf209, 0x0, 0x0, 0x2c1, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0xd000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x0, {0x0, r0}, 0x2, 0x1, 0x1, {0x0, 0x0, r4}}, 0x81) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r5, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6120) 04:47:05 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xdb0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:05 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x8000000, 0x0, 0x0) 04:47:05 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000006, 0x4000010, r0, 0x0) (async) syz_io_uring_setup(0x64c9, &(0x7f0000000100)={0x0, 0x1b76, 0x8, 0x3, 0x192, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x200, {0x0, r7}, 0x4, 0x1, 0x1, {0x0, 0x0, r4}}, 0x5) 04:47:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4500) [ 609.870026][T26643] input: syz0 as /devices/virtual/input/input4682 [ 609.877340][T26644] loop0: detected capacity change from 0 to 56065 04:47:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6138) 04:47:05 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r0, &(0x7f0000000100)={0x80000000}, r4, 0x3, 0x0, 0x1}, 0xe3) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) process_mrelease(r4, 0x0) 04:47:05 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xdc0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 609.895073][T26644] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:05 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x1f000000, 0x0, 0x0) 04:47:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4518) 04:47:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6150) [ 609.906472][T26650] input: syz0 as /devices/virtual/input/input4683 [ 609.985462][T26657] input: syz0 as /devices/virtual/input/input4684 [ 610.037675][T26662] loop0: detected capacity change from 0 to 56321 [ 610.053163][T26673] input: syz0 as /devices/virtual/input/input4685 [ 610.068633][T26662] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 610.092834][T26678] input: syz0 as /devices/virtual/input/input4686 04:47:05 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x6b5c, &(0x7f0000000180)={0x0, 0xf209, 0x0, 0x0, 0x2c1, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0xd000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x0, {0x0, r0}, 0x2, 0x1, 0x1, {0x0, 0x0, r4}}, 0x81) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = pidfd_open(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_io_uring_setup(0x6b5c, &(0x7f0000000180)={0x0, 0xf209, 0x0, 0x0, 0x2c1, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0xd000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x0, {0x0, r0}, 0x2, 0x1, 0x1, {0x0, 0x0, r4}}, 0x81) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r5, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:05 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xdd0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:05 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x20000000, 0x0, 0x0) 04:47:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4530) 04:47:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6168) [ 610.404590][T26685] loop0: detected capacity change from 0 to 56577 [ 610.424973][T26686] input: syz0 as /devices/virtual/input/input4687 04:47:05 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xde0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:05 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x20000000000000, 0x0, 0x0) [ 610.451012][T26688] input: syz0 as /devices/virtual/input/input4688 [ 610.452216][T26685] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:05 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r0, &(0x7f0000000100)={0x80000000}, r4, 0x3, 0x0, 0x1}, 0xe3) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) process_mrelease(r4, 0x0) 04:47:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4548) 04:47:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6180) [ 610.587821][T26696] loop0: detected capacity change from 0 to 56833 [ 610.589527][T26696] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:05 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xdf0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 610.631938][T26699] input: syz0 as /devices/virtual/input/input4689 04:47:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6198) [ 610.635754][ T8317] I/O error, dev loop0, sector 56704 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 610.650522][T26708] input: syz0 as /devices/virtual/input/input4690 [ 610.689204][T26715] loop0: detected capacity change from 0 to 57089 [ 610.709680][T26715] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 610.801815][T26720] input: syz0 as /devices/virtual/input/input4691 04:47:06 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x800000088000cc, 0x0) syz_io_uring_complete(0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_clone3(&(0x7f0000000440)={0x2000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1b}, &(0x7f00000002c0)=""/182, 0xb6, &(0x7f0000000240), &(0x7f00000003c0)=[0x0, r7, r3], 0x3}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x5101000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x2, &(0x7f0000000100)) ptrace(0x10, r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) kcmp(r8, r3, 0x1, r10, 0xffffffffffffffff) 04:47:06 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r0, &(0x7f0000000100)={0x80000000}, r4, 0x3, 0x0, 0x1}, 0xe3) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) process_mrelease(r4, 0x0) 04:47:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4560) 04:47:06 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe00100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x61b0) [ 611.141233][T26729] input: syz0 as /devices/virtual/input/input4692 04:47:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x61c8) [ 611.205455][T26724] loop0: detected capacity change from 0 to 57345 [ 611.248435][T26724] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 611.277048][T26732] input: syz0 as /devices/virtual/input/input4693 04:47:06 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x100000000000000, 0x0, 0x0) 04:47:06 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe10100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4578) [ 611.327329][T26740] input: syz0 as /devices/virtual/input/input4694 04:47:06 executing program 2: sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x6a}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff001}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x4041}, 0x20040090) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x6cce, &(0x7f0000000300)=[r0, r5, r0], 0x3, 0x0, 0x1}, 0x7af7) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = signalfd(r5, &(0x7f0000000500)={[0x7]}, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x66}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0xf0, 0x2a, [@link_id={0x65, 0x12, {@random="b6a790fbb092", @device_b, @device_b}}, @random_vendor={0xdd, 0xd3, "dc1c5a41d05700005899be7209aa23f3d157b7e5b094f3ae206dc1fe32382d52eb99907f60895990569fbb98b77de0b5807275fbf757c697af9a75698b554d31d7c811696d4d858295b583c52e661326f86b57885c44ccd1b64fb19a571f346047beec56ee143fd10dc7707b2ceb4878754826f8d104d0c9275c1b4d631dbdd95b2fc8dd8af5639dcc9c591c2a3d1644306d7ea84f3d86171ad04095bc88c594e098d0c1d068362e15ee041728fefcef20dfd604647de56e9b0af5b93a612780ae41ff1b777ba5460ec5cbd174ec55344847af"}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r9 = pidfd_open(r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x103800, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) 04:47:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x61e0) [ 611.414913][T26743] loop0: detected capacity change from 0 to 57601 [ 611.416754][T26747] input: syz0 as /devices/virtual/input/input4695 04:47:06 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe20100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 611.448589][T26743] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 611.517049][T26754] input: syz0 as /devices/virtual/input/input4696 [ 611.554047][T26756] loop0: detected capacity change from 0 to 57857 [ 611.562547][T26756] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:07 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x800000088000cc, 0x0) syz_io_uring_complete(0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_clone3(&(0x7f0000000440)={0x2000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1b}, &(0x7f00000002c0)=""/182, 0xb6, &(0x7f0000000240), &(0x7f00000003c0)=[0x0, r7, r3], 0x3}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x5101000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x2, &(0x7f0000000100)) ptrace(0x10, r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) kcmp(r8, r3, 0x1, r10, 0xffffffffffffffff) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) pipe(&(0x7f0000003400)) (async) splice(r6, 0x0, r5, 0x0, 0x800000088000cc, 0x0) (async) syz_io_uring_complete(0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r7) (async) syz_clone3(&(0x7f0000000440)={0x2000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1b}, &(0x7f00000002c0)=""/182, 0xb6, &(0x7f0000000240), &(0x7f00000003c0)=[0x0, r7, r3], 0x3}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x5101000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpgid(0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x2, &(0x7f0000000100)) (async) ptrace(0x10, r8) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) kcmp(r8, r3, 0x1, r10, 0xffffffffffffffff) (async) 04:47:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4590) 04:47:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x61f8) 04:47:07 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe30100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 611.883955][T26763] loop0: detected capacity change from 0 to 58113 [ 611.892211][T26761] input: syz0 as /devices/virtual/input/input4698 04:47:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6210) 04:47:07 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe40100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 611.916814][T26762] input: syz0 as /devices/virtual/input/input4697 04:47:07 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x700000000000000, 0x0, 0x0) 04:47:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x45a8) 04:47:07 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe50100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 611.924491][T26763] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 612.038541][T26771] loop0: detected capacity change from 0 to 58369 04:47:07 executing program 2: sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x6a}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff001}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x4041}, 0x20040090) (async, rerun: 64) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x6cce, &(0x7f0000000300)=[r0, r5, r0], 0x3, 0x0, 0x1}, 0x7af7) (async, rerun: 32) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r7 = signalfd(r5, &(0x7f0000000500)={[0x7]}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x66}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0xf0, 0x2a, [@link_id={0x65, 0x12, {@random="b6a790fbb092", @device_b, @device_b}}, @random_vendor={0xdd, 0xd3, "dc1c5a41d05700005899be7209aa23f3d157b7e5b094f3ae206dc1fe32382d52eb99907f60895990569fbb98b77de0b5807275fbf757c697af9a75698b554d31d7c811696d4d858295b583c52e661326f86b57885c44ccd1b64fb19a571f346047beec56ee143fd10dc7707b2ceb4878754826f8d104d0c9275c1b4d631dbdd95b2fc8dd8af5639dcc9c591c2a3d1644306d7ea84f3d86171ad04095bc88c594e098d0c1d068362e15ee041728fefcef20dfd604647de56e9b0af5b93a612780ae41ff1b777ba5460ec5cbd174ec55344847af"}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async) r9 = pidfd_open(r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x103800, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) 04:47:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6228) [ 612.045144][T26771] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 612.065885][T26773] input: syz0 as /devices/virtual/input/input4699 04:47:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x45c0) [ 612.086897][T26775] input: syz0 as /devices/virtual/input/input4700 [ 612.175461][T26797] loop0: detected capacity change from 0 to 58625 [ 612.217905][T26797] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 612.217926][T26801] input: syz0 as /devices/virtual/input/input4701 [ 612.300334][T26807] input: syz0 as /devices/virtual/input/input4702 04:47:07 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x800000088000cc, 0x0) syz_io_uring_complete(0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_clone3(&(0x7f0000000440)={0x2000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1b}, &(0x7f00000002c0)=""/182, 0xb6, &(0x7f0000000240), &(0x7f00000003c0)=[0x0, r7, r3], 0x3}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x5101000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x2, &(0x7f0000000100)) ptrace(0x10, r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) kcmp(r8, r3, 0x1, r10, 0xffffffffffffffff) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) pipe(&(0x7f0000003400)) (async) splice(r6, 0x0, r5, 0x0, 0x800000088000cc, 0x0) (async) syz_io_uring_complete(0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r7) (async) syz_clone3(&(0x7f0000000440)={0x2000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1b}, &(0x7f00000002c0)=""/182, 0xb6, &(0x7f0000000240), &(0x7f00000003c0)=[0x0, r7, r3], 0x3}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x5101000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpgid(0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x2, &(0x7f0000000100)) (async) ptrace(0x10, r8) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) kcmp(r8, r3, 0x1, r10, 0xffffffffffffffff) (async) 04:47:07 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe60100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6240) 04:47:07 executing program 2: sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x6a}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff001}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x4041}, 0x20040090) (async, rerun: 32) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x6cce, &(0x7f0000000300)=[r0, r5, r0], 0x3, 0x0, 0x1}, 0x7af7) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = signalfd(r5, &(0x7f0000000500)={[0x7]}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x66}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0xf0, 0x2a, [@link_id={0x65, 0x12, {@random="b6a790fbb092", @device_b, @device_b}}, @random_vendor={0xdd, 0xd3, "dc1c5a41d05700005899be7209aa23f3d157b7e5b094f3ae206dc1fe32382d52eb99907f60895990569fbb98b77de0b5807275fbf757c697af9a75698b554d31d7c811696d4d858295b583c52e661326f86b57885c44ccd1b64fb19a571f346047beec56ee143fd10dc7707b2ceb4878754826f8d104d0c9275c1b4d631dbdd95b2fc8dd8af5639dcc9c591c2a3d1644306d7ea84f3d86171ad04095bc88c594e098d0c1d068362e15ee041728fefcef20dfd604647de56e9b0af5b93a612780ae41ff1b777ba5460ec5cbd174ec55344847af"}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async) r9 = pidfd_open(r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x103800, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) 04:47:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x45d8) 04:47:07 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x800000000000000, 0x0, 0x0) [ 612.604503][T26818] loop0: detected capacity change from 0 to 58881 [ 612.609458][T26817] input: syz0 as /devices/virtual/input/input4703 04:47:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6258) 04:47:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x45f0) 04:47:07 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe70100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 612.647338][T26818] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 612.656168][T26819] input: syz0 as /devices/virtual/input/input4704 04:47:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6270) 04:47:08 executing program 2: ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000002c0)=0x1) r0 = syz_io_uring_setup(0x7a07, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0xffffffffffffffe1, 0x400000) r4 = syz_open_dev$vcsn(&(0x7f0000000440), 0x8000000000000001, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, '\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000003c0)={0x2}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = syz_clone(0x19928980, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) r7 = pidfd_open(r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000003800)=[{0x0}], 0x0, &(0x7f0000003900)={[{@session={'session', 0x3d, 0x1fe4000000}}]}) syz_io_uring_setup(0x7f07, &(0x7f0000000180)={0x0, 0xfc6c, 0xc, 0x0, 0x254, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f00000005c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000500)=0x80, &(0x7f0000000540)=@vsock, 0x0, 0x80000}, 0x676) r11 = socket$tipc(0x1e, 0x4802fb902ad4b752, 0x0) pidfd_open(r6, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x2, 0x401, {0x0, r11}, 0x3, 0x0, 0x0, {0x0, 0x0, r7}}, 0x2) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 612.722584][T26830] input: syz0 as /devices/virtual/input/input4705 [ 612.748753][T26833] input: syz0 as /devices/virtual/input/input4706 04:47:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4608) [ 612.818034][T26838] loop0: detected capacity change from 0 to 59137 [ 612.841999][T26838] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 612.842951][T26842] input: syz0 as /devices/virtual/input/input4707 [ 612.876909][T26841] hfsplus: session requires an argument [ 612.876921][T26841] hfsplus: unable to parse mount options [ 612.886058][ T3646] I/O error, dev loop0, sector 59008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 612.901092][T26844] input: syz0 as /devices/virtual/input/input4708 04:47:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6288) 04:47:08 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe80100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4620) 04:47:08 executing program 2: ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000002c0)=0x1) r0 = syz_io_uring_setup(0x7a07, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0xffffffffffffffe1, 0x400000) r4 = syz_open_dev$vcsn(&(0x7f0000000440), 0x8000000000000001, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, '\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000003c0)={0x2}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = syz_clone(0x19928980, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) r7 = pidfd_open(r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000003800)=[{0x0}], 0x0, &(0x7f0000003900)={[{@session={'session', 0x3d, 0x1fe4000000}}]}) syz_io_uring_setup(0x7f07, &(0x7f0000000180)={0x0, 0xfc6c, 0xc, 0x0, 0x254, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f00000005c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000500)=0x80, &(0x7f0000000540)=@vsock, 0x0, 0x80000}, 0x676) r11 = socket$tipc(0x1e, 0x4802fb902ad4b752, 0x0) pidfd_open(r6, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x2, 0x401, {0x0, r11}, 0x3, 0x0, 0x0, {0x0, 0x0, r7}}, 0x2) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000002c0)=0x1) (async) syz_io_uring_setup(0x7a07, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000400)) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0xffffffffffffffe1, 0x400000) (async) syz_open_dev$vcsn(&(0x7f0000000440), 0x8000000000000001, 0x8000) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, '\x00'}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000003c0)={0x2}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x19928980, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) (async) pidfd_open(r6, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000003800)=[{0x0}], 0x0, &(0x7f0000003900)={[{@session={'session', 0x3d, 0x1fe4000000}}]}) (async) syz_io_uring_setup(0x7f07, &(0x7f0000000180)={0x0, 0xfc6c, 0xc, 0x0, 0x254, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_io_uring_submit(0x0, r10, &(0x7f00000005c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000500)=0x80, &(0x7f0000000540)=@vsock, 0x0, 0x80000}, 0x676) (async) socket$tipc(0x1e, 0x4802fb902ad4b752, 0x0) (async) pidfd_open(r6, 0x0) (async) syz_io_uring_submit(r8, r10, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x2, 0x401, {0x0, r11}, 0x3, 0x0, 0x0, {0x0, 0x0, r7}}, 0x2) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:08 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x1f00000000000000, 0x0, 0x0) [ 613.313494][T26864] input: syz0 as /devices/virtual/input/input4709 [ 613.320636][T26865] hfsplus: session requires an argument 04:47:08 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r5, 0x4b4c, &(0x7f00000003c0)={0x46e3, 0x0, 0x0, 0x0, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002010000000002000000", @ANYRES32=0xee01, @ANYBLOB="040004000000000008000500913bd57e49f7a083c5e26f93e003f89a52cbf4a16d47a1318856c510144716082a2385ecb9656a8803075661003ef90740d071d8722bd288dc2be908762f8b8641364f5f226a3b1fe9f4c883", @ANYRES32=0xee00, @ANYBLOB="08000900553785bf2f56e19bd32b730fcc678b14cb52ea3fab3c409a4080bea5ca84638f0400674f10d7ab8ba4831a50407f692c3f01c84c39140f8f2abdf3c8c8026cfcc0fd6a8748570aff4ddef36d5ad48c8f9bfa79ab2ce7716382fbaf0b8f26991ef1601ccf109f426ef517b1f8e21b777c7b0f84fe254363e4a02bd5e9be7b05a8ad73774b66b1d2d6d344b3dc6b0c58f255233daa61d65f46cbd14950830e136925c498c4ab", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="000006f30000000020dcc36f05210869"], 0x44, 0x1) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000026c0)={0x78, 0x0, 0x0, {0x8, 0xe, 0x0, {0x3, 0xd9, 0x7f, 0x7, 0x9, 0x7b72a960, 0x7, 0x8001, 0x6, 0xa000, 0xfffff001, 0x0, r6, 0x2, 0x9}}}, 0x78) r7 = getegid() r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) r10 = fcntl$getown(r4, 0x9) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r12) sendmmsg$unix(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="8944880c730269c41b97c48bca9f8243d60086a38041e11c6dca85c15cc4c7da4a9499d217921b6d35a50e17814245b5090979d090eb8e1542065d4ede1c5c929d5f5cfa0208a188c61ea1dc1d2b3875e96628ee779fc20ac71bf6be11a5cef34f5a7a8384", 0x65}, {&(0x7f00000002c0)="27bfb80b05e263f11f5507978434405ede3d1a469feb22d419b268886a14729d4bc0695f5839679a4f3e37a5bb4c7898745556b4c61fd5dc0475b1f1d5d703b7168f57e54182ff6001eb1b6eaf3cf1cf7e04b98db4f7915ea83bdb2d9666f68eee33b14e38dff4ae2ea34fc85d2cc3561804c73b4622e03012096e7f093e8c6b504cef117c61a867de1629357ce09bd8c0ac73782102f4d512c33aba9b4f153d272ac6a24138a35c9cf26e18d85b1d0f7c5b91539d76d7fbfc63fa34eb89baf3f5f964f25f538f56da26e7728af0", 0xce}, {&(0x7f00000003c0)="5dd37901312b4786f1ec3acd804a7095e96f7e1bd7c53abc7e63873e94aa399d9b1e644b21ce479a72cf3c765c80e173011afb83951d20633e4fcfaaaf65e73f2af2c41b024e8336a1c5ef5b4fd5ea7dbdc2d2643af136b7ec6e84faa33574405f27165fdec3d2c5fa203afec344217ca41146d7a0a70b5d99190e3ac6fd03e07b0e88cf93e8ec755ad07306cda18256c94ca436cd70af", 0x97}], 0x3, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, 0xee00}}}], 0xe0, 0x4400c080}}], 0x1, 0x840) [ 613.320644][T26865] hfsplus: unable to parse mount options [ 613.340298][T26866] loop0: detected capacity change from 0 to 59393 04:47:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4638) 04:47:08 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xe90100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x62a0) [ 613.342194][T26866] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 613.400469][T26872] input: syz0 as /devices/virtual/input/input4710 [ 613.540254][T26887] loop0: detected capacity change from 0 to 59649 04:47:08 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xea0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4650) 04:47:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x62b8) 04:47:08 executing program 2: ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000002c0)=0x1) (async) r0 = syz_io_uring_setup(0x7a07, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0xffffffffffffffe1, 0x400000) r4 = syz_open_dev$vcsn(&(0x7f0000000440), 0x8000000000000001, 0x8000) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, '\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000003c0)={0x2}) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) r6 = syz_clone(0x19928980, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) r7 = pidfd_open(r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000003800)=[{0x0}], 0x0, &(0x7f0000003900)={[{@session={'session', 0x3d, 0x1fe4000000}}]}) (async) syz_io_uring_setup(0x7f07, &(0x7f0000000180)={0x0, 0xfc6c, 0xc, 0x0, 0x254, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f00000005c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000500)=0x80, &(0x7f0000000540)=@vsock, 0x0, 0x80000}, 0x676) (async) r11 = socket$tipc(0x1e, 0x4802fb902ad4b752, 0x0) (async) pidfd_open(r6, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x2, 0x401, {0x0, r11}, 0x3, 0x0, 0x0, {0x0, 0x0, r7}}, 0x2) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 613.545287][T26886] input: syz0 as /devices/virtual/input/input4711 [ 613.549603][T26887] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 613.556339][T26889] input: syz0 as /devices/virtual/input/input4712 04:47:09 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xeb0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 613.592195][ T3646] I/O error, dev loop0, sector 59520 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:09 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r6, 0x4b4c, &(0x7f00000003c0)={0x46e3, 0x0, 0x0, 0x0, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=0xee01, @ANYBLOB="040004000000000008000500913bd57e49f7a083c5e26f93e003f89a52cbf4a16d47a1318856c510144716082a2385ecb9656a8803075661003ef90740d071d8722bd288dc2be908762f8b8641364f5f226a3b1fe9f4c883", @ANYRES32=0xee00, @ANYBLOB="08000900553785bf2f56e19bd32b730fcc678b14cb52ea3fab3c409a4080bea5ca84638f0400674f10d7ab8ba4831a50407f692c3f01c84c39140f8f2abdf3c8c8026cfcc0fd6a8748570aff4ddef36d5ad48c8f9bfa79ab2ce7716382fbaf0b8f26991ef1601ccf109f426ef517b1f8e21b777c7b0f84fe254363e4a02bd5e9be7b05a8ad73774b66b1d2d6d344b3dc6b0c58f255233daa61d65f46cbd14950830e136925c498c4ab", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="000006f30000000020dcc36f05210869"], 0x44, 0x1) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000026c0)={0x78, 0x0, r5, {0x8, 0xe, 0x0, {0x3, 0xd9, 0x7f, 0x7, 0x9, 0x7b72a960, 0x7, 0x8001, 0x6, 0xa000, 0xfffff001, 0x0, r7, 0x2, 0x9}}}, 0x78) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x1, 0xee00, r7, r9, 0xee00, 0x0, 0x8}, 0x9, 0x80, 0x100000000, 0x0, r10, r3, 0x1000}) 04:47:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4668) [ 613.687791][T26893] loop0: detected capacity change from 0 to 59905 [ 613.718232][T26893] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 613.736604][T26896] input: syz0 as /devices/virtual/input/input4713 [ 613.742276][T26901] input: syz0 as /devices/virtual/input/input4714 [ 613.842235][T26906] loop0: detected capacity change from 0 to 60161 [ 613.867464][T26909] input: syz0 as /devices/virtual/input/input4715 [ 613.881784][T26906] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:09 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x2000000000000000, 0x0, 0x0) 04:47:09 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r5, 0x4b4c, &(0x7f00000003c0)={0x46e3, 0x0, 0x0, 0x0, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002010000000002000000", @ANYRES32=0xee01, @ANYBLOB="040004000000000008000500913bd57e49f7a083c5e26f93e003f89a52cbf4a16d47a1318856c510144716082a2385ecb9656a8803075661003ef90740d071d8722bd288dc2be908762f8b8641364f5f226a3b1fe9f4c883", @ANYRES32=0xee00, @ANYBLOB="08000900553785bf2f56e19bd32b730fcc678b14cb52ea3fab3c409a4080bea5ca84638f0400674f10d7ab8ba4831a50407f692c3f01c84c39140f8f2abdf3c8c8026cfcc0fd6a8748570aff4ddef36d5ad48c8f9bfa79ab2ce7716382fbaf0b8f26991ef1601ccf109f426ef517b1f8e21b777c7b0f84fe254363e4a02bd5e9be7b05a8ad73774b66b1d2d6d344b3dc6b0c58f255233daa61d65f46cbd14950830e136925c498c4ab", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="000006f30000000020dcc36f05210869"], 0x44, 0x1) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000026c0)={0x78, 0x0, 0x0, {0x8, 0xe, 0x0, {0x3, 0xd9, 0x7f, 0x7, 0x9, 0x7b72a960, 0x7, 0x8001, 0x6, 0xa000, 0xfffff001, 0x0, r6, 0x2, 0x9}}}, 0x78) r7 = getegid() r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) r10 = fcntl$getown(r4, 0x9) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r12) sendmmsg$unix(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="8944880c730269c41b97c48bca9f8243d60086a38041e11c6dca85c15cc4c7da4a9499d217921b6d35a50e17814245b5090979d090eb8e1542065d4ede1c5c929d5f5cfa0208a188c61ea1dc1d2b3875e96628ee779fc20ac71bf6be11a5cef34f5a7a8384", 0x65}, {&(0x7f00000002c0)="27bfb80b05e263f11f5507978434405ede3d1a469feb22d419b268886a14729d4bc0695f5839679a4f3e37a5bb4c7898745556b4c61fd5dc0475b1f1d5d703b7168f57e54182ff6001eb1b6eaf3cf1cf7e04b98db4f7915ea83bdb2d9666f68eee33b14e38dff4ae2ea34fc85d2cc3561804c73b4622e03012096e7f093e8c6b504cef117c61a867de1629357ce09bd8c0ac73782102f4d512c33aba9b4f153d272ac6a24138a35c9cf26e18d85b1d0f7c5b91539d76d7fbfc63fa34eb89baf3f5f964f25f538f56da26e7728af0", 0xce}, {&(0x7f00000003c0)="5dd37901312b4786f1ec3acd804a7095e96f7e1bd7c53abc7e63873e94aa399d9b1e644b21ce479a72cf3c765c80e173011afb83951d20633e4fcfaaaf65e73f2af2c41b024e8336a1c5ef5b4fd5ea7dbdc2d2643af136b7ec6e84faa33574405f27165fdec3d2c5fa203afec344217ca41146d7a0a70b5d99190e3ac6fd03e07b0e88cf93e8ec755ad07306cda18256c94ca436cd70af", 0x97}], 0x3, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, 0xee00}}}], 0xe0, 0x4400c080}}], 0x1, 0x840) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETS2(r5, 0x4b4c, &(0x7f00000003c0)={0x46e3, 0x0, 0x0, 0x0, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) (async) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002010000000002000000", @ANYRES32=0xee01, @ANYBLOB="040004000000000008000500913bd57e49f7a083c5e26f93e003f89a52cbf4a16d47a1318856c510144716082a2385ecb9656a8803075661003ef90740d071d8722bd288dc2be908762f8b8641364f5f226a3b1fe9f4c883", @ANYRES32=0xee00, @ANYBLOB="08000900553785bf2f56e19bd32b730fcc678b14cb52ea3fab3c409a4080bea5ca84638f0400674f10d7ab8ba4831a50407f692c3f01c84c39140f8f2abdf3c8c8026cfcc0fd6a8748570aff4ddef36d5ad48c8f9bfa79ab2ce7716382fbaf0b8f26991ef1601ccf109f426ef517b1f8e21b777c7b0f84fe254363e4a02bd5e9be7b05a8ad73774b66b1d2d6d344b3dc6b0c58f255233daa61d65f46cbd14950830e136925c498c4ab", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="000006f30000000020dcc36f05210869"], 0x44, 0x1) (async) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000026c0)={0x78, 0x0, 0x0, {0x8, 0xe, 0x0, {0x3, 0xd9, 0x7f, 0x7, 0x9, 0x7b72a960, 0x7, 0x8001, 0x6, 0xa000, 0xfffff001, 0x0, r6, 0x2, 0x9}}}, 0x78) (async) getegid() (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setreuid(0x0, r9) (async) fcntl$getown(r4, 0x9) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setreuid(0x0, r12) (async) sendmmsg$unix(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="8944880c730269c41b97c48bca9f8243d60086a38041e11c6dca85c15cc4c7da4a9499d217921b6d35a50e17814245b5090979d090eb8e1542065d4ede1c5c929d5f5cfa0208a188c61ea1dc1d2b3875e96628ee779fc20ac71bf6be11a5cef34f5a7a8384", 0x65}, {&(0x7f00000002c0)="27bfb80b05e263f11f5507978434405ede3d1a469feb22d419b268886a14729d4bc0695f5839679a4f3e37a5bb4c7898745556b4c61fd5dc0475b1f1d5d703b7168f57e54182ff6001eb1b6eaf3cf1cf7e04b98db4f7915ea83bdb2d9666f68eee33b14e38dff4ae2ea34fc85d2cc3561804c73b4622e03012096e7f093e8c6b504cef117c61a867de1629357ce09bd8c0ac73782102f4d512c33aba9b4f153d272ac6a24138a35c9cf26e18d85b1d0f7c5b91539d76d7fbfc63fa34eb89baf3f5f964f25f538f56da26e7728af0", 0xce}, {&(0x7f00000003c0)="5dd37901312b4786f1ec3acd804a7095e96f7e1bd7c53abc7e63873e94aa399d9b1e644b21ce479a72cf3c765c80e173011afb83951d20633e4fcfaaaf65e73f2af2c41b024e8336a1c5ef5b4fd5ea7dbdc2d2643af136b7ec6e84faa33574405f27165fdec3d2c5fa203afec344217ca41146d7a0a70b5d99190e3ac6fd03e07b0e88cf93e8ec755ad07306cda18256c94ca436cd70af", 0x97}], 0x3, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, 0xee00}}}], 0xe0, 0x4400c080}}], 0x1, 0x840) (async) 04:47:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x62d0) 04:47:09 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xec0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4680) [ 614.168385][T26920] input: syz0 as /devices/virtual/input/input4716 [ 614.171339][T26922] input: syz0 as /devices/virtual/input/input4717 04:47:09 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xed0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x62e8) 04:47:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4698) [ 614.182485][T26921] loop0: detected capacity change from 0 to 60417 [ 614.187324][T26921] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6300) 04:47:09 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xee0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 614.297450][T26930] loop0: detected capacity change from 0 to 60673 [ 614.304061][T26931] input: syz0 as /devices/virtual/input/input4718 [ 614.309760][T26932] input: syz0 as /devices/virtual/input/input4719 [ 614.320874][T26930] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 614.427527][T26957] loop0: detected capacity change from 0 to 60929 [ 614.434784][T26955] input: syz0 as /devices/virtual/input/input4720 [ 614.440204][T26957] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:09 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r6, 0x4b4c, &(0x7f00000003c0)={0x46e3, 0x0, 0x0, 0x0, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) (async) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=0xee01, @ANYBLOB="040004000000000008000500913bd57e49f7a083c5e26f93e003f89a52cbf4a16d47a1318856c510144716082a2385ecb9656a8803075661003ef90740d071d8722bd288dc2be908762f8b8641364f5f226a3b1fe9f4c883", @ANYRES32=0xee00, @ANYBLOB="08000900553785bf2f56e19bd32b730fcc678b14cb52ea3fab3c409a4080bea5ca84638f0400674f10d7ab8ba4831a50407f692c3f01c84c39140f8f2abdf3c8c8026cfcc0fd6a8748570aff4ddef36d5ad48c8f9bfa79ab2ce7716382fbaf0b8f26991ef1601ccf109f426ef517b1f8e21b777c7b0f84fe254363e4a02bd5e9be7b05a8ad73774b66b1d2d6d344b3dc6b0c58f255233daa61d65f46cbd14950830e136925c498c4ab", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="000006f30000000020dcc36f05210869"], 0x44, 0x1) (async) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000026c0)={0x78, 0x0, r5, {0x8, 0xe, 0x0, {0x3, 0xd9, 0x7f, 0x7, 0x9, 0x7b72a960, 0x7, 0x8001, 0x6, 0xa000, 0xfffff001, 0x0, r7, 0x2, 0x9}}}, 0x78) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) (async) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x1, 0xee00, r7, r9, 0xee00, 0x0, 0x8}, 0x9, 0x80, 0x100000000, 0x0, r10, r3, 0x1000}) 04:47:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x46b0) 04:47:09 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0xffffffff00000000, 0x0, 0x0) [ 614.669966][T26959] input: syz0 as /devices/virtual/input/input4721 04:47:10 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r5, 0x4b4c, &(0x7f00000003c0)={0x46e3, 0x0, 0x0, 0x0, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002010000000002000000", @ANYRES32=0xee01, @ANYBLOB="040004000000000008000500913bd57e49f7a083c5e26f93e003f89a52cbf4a16d47a1318856c510144716082a2385ecb9656a8803075661003ef90740d071d8722bd288dc2be908762f8b8641364f5f226a3b1fe9f4c883", @ANYRES32=0xee00, @ANYBLOB="08000900553785bf2f56e19bd32b730fcc678b14cb52ea3fab3c409a4080bea5ca84638f0400674f10d7ab8ba4831a50407f692c3f01c84c39140f8f2abdf3c8c8026cfcc0fd6a8748570aff4ddef36d5ad48c8f9bfa79ab2ce7716382fbaf0b8f26991ef1601ccf109f426ef517b1f8e21b777c7b0f84fe254363e4a02bd5e9be7b05a8ad73774b66b1d2d6d344b3dc6b0c58f255233daa61d65f46cbd14950830e136925c498c4ab", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="000006f30000000020dcc36f05210869"], 0x44, 0x1) (async) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000026c0)={0x78, 0x0, 0x0, {0x8, 0xe, 0x0, {0x3, 0xd9, 0x7f, 0x7, 0x9, 0x7b72a960, 0x7, 0x8001, 0x6, 0xa000, 0xfffff001, 0x0, r6, 0x2, 0x9}}}, 0x78) (async) r7 = getegid() (async, rerun: 64) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) (async) r10 = fcntl$getown(r4, 0x9) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r12) (async) sendmmsg$unix(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="8944880c730269c41b97c48bca9f8243d60086a38041e11c6dca85c15cc4c7da4a9499d217921b6d35a50e17814245b5090979d090eb8e1542065d4ede1c5c929d5f5cfa0208a188c61ea1dc1d2b3875e96628ee779fc20ac71bf6be11a5cef34f5a7a8384", 0x65}, {&(0x7f00000002c0)="27bfb80b05e263f11f5507978434405ede3d1a469feb22d419b268886a14729d4bc0695f5839679a4f3e37a5bb4c7898745556b4c61fd5dc0475b1f1d5d703b7168f57e54182ff6001eb1b6eaf3cf1cf7e04b98db4f7915ea83bdb2d9666f68eee33b14e38dff4ae2ea34fc85d2cc3561804c73b4622e03012096e7f093e8c6b504cef117c61a867de1629357ce09bd8c0ac73782102f4d512c33aba9b4f153d272ac6a24138a35c9cf26e18d85b1d0f7c5b91539d76d7fbfc63fa34eb89baf3f5f964f25f538f56da26e7728af0", 0xce}, {&(0x7f00000003c0)="5dd37901312b4786f1ec3acd804a7095e96f7e1bd7c53abc7e63873e94aa399d9b1e644b21ce479a72cf3c765c80e173011afb83951d20633e4fcfaaaf65e73f2af2c41b024e8336a1c5ef5b4fd5ea7dbdc2d2643af136b7ec6e84faa33574405f27165fdec3d2c5fa203afec344217ca41146d7a0a70b5d99190e3ac6fd03e07b0e88cf93e8ec755ad07306cda18256c94ca436cd70af", 0x97}], 0x3, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, 0xee00}}}], 0xe0, 0x4400c080}}], 0x1, 0x840) 04:47:10 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xef0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6318) 04:47:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x46c8) [ 614.947687][T26973] input: syz0 as /devices/virtual/input/input4722 [ 614.961185][T26975] loop0: detected capacity change from 0 to 61185 [ 614.976724][T26974] input: syz0 as /devices/virtual/input/input4723 04:47:10 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf00100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 614.976899][T26975] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x46e0) 04:47:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6330) 04:47:10 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf10100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 615.099478][T26983] loop0: detected capacity change from 0 to 61441 [ 615.104672][T26983] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6348) [ 615.144690][T26985] input: syz0 as /devices/virtual/input/input4724 [ 615.157691][ T3652] I/O error, dev loop0, sector 61312 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 615.159031][T26989] input: syz0 as /devices/virtual/input/input4725 [ 615.226457][T26991] loop0: detected capacity change from 0 to 61697 [ 615.238756][T26991] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 615.310076][T26994] input: syz0 as /devices/virtual/input/input4726 04:47:10 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r6, 0x4b4c, &(0x7f00000003c0)={0x46e3, 0x0, 0x0, 0x0, 0x0, "ec4b2cf4dd291ac55a0cde0c254d6c6cb5a8c4"}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=0xee01, @ANYBLOB="040004000000000008000500913bd57e49f7a083c5e26f93e003f89a52cbf4a16d47a1318856c510144716082a2385ecb9656a8803075661003ef90740d071d8722bd288dc2be908762f8b8641364f5f226a3b1fe9f4c883", @ANYRES32=0xee00, @ANYBLOB="08000900553785bf2f56e19bd32b730fcc678b14cb52ea3fab3c409a4080bea5ca84638f0400674f10d7ab8ba4831a50407f692c3f01c84c39140f8f2abdf3c8c8026cfcc0fd6a8748570aff4ddef36d5ad48c8f9bfa79ab2ce7716382fbaf0b8f26991ef1601ccf109f426ef517b1f8e21b777c7b0f84fe254363e4a02bd5e9be7b05a8ad73774b66b1d2d6d344b3dc6b0c58f255233daa61d65f46cbd14950830e136925c498c4ab", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="000006f30000000020dcc36f05210869"], 0x44, 0x1) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000026c0)={0x78, 0x0, r5, {0x8, 0xe, 0x0, {0x3, 0xd9, 0x7f, 0x7, 0x9, 0x7b72a960, 0x7, 0x8001, 0x6, 0xa000, 0xfffff001, 0x0, r7, 0x2, 0x9}}}, 0x78) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) (async) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x1, 0xee00, r7, r9, 0xee00, 0x0, 0x8}, 0x9, 0x80, 0x100000000, 0x0, r10, r3, 0x1000}) 04:47:10 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf20100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x46f8) 04:47:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6360) 04:47:10 executing program 5: r0 = syz_io_uring_setup(0x6401, &(0x7f00000002c0)={0x0, 0x36b4, 0x0, 0x0, 0x2aa}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r5 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x3c93, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r10, 0x545d, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r10, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r11}}, 0x4769) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1, {0x0, r11}}, 0x100) r12 = dup2(r0, r0) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x2, @raw_data="ed575d6147d4a859d198399804a947eff66919e50e727619e831b10f9a99b8979f3c4553c27591821fe9fddcfbee83b98e8f56d5d8c6e86b441c7a8d4edc7179dce49d432dc4ff50b74ee73524e6f8392edc9bf19b5f25e6ce09401d28f498d7eba4b799defd170c34898f2d1a95053fee5a3f604cbdab2c63432aff7e7cbf5b0f3385670eed97143325f362e8be27c3a5d14537425f6ff8f521ab8e2929155f571f6c79f6899f6fc9ff648f3aa5668aed0ced54dc8cdcdc468bc57aeb45c267eda95d35bcf4ebbe"}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r12, &(0x7f0000000180)={0x10}, r13, 0x3, 0x0, 0x1, {0x0, r11}}, 0x5) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r15 = pidfd_open(r14, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r15}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:10 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x7) [ 615.478415][T26997] loop0: detected capacity change from 0 to 61953 [ 615.490074][T27001] input: syz0 as /devices/virtual/input/input4728 04:47:10 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf30100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6378) [ 615.492655][T27003] input: syz0 as /devices/virtual/input/input4727 [ 615.513204][T26997] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4710) [ 615.631081][T27016] loop0: detected capacity change from 0 to 62209 [ 615.650058][T27017] input: syz0 as /devices/virtual/input/input4729 04:47:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6390) 04:47:10 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf40100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 615.659755][T27016] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4728) [ 615.700820][ T3646] I/O error, dev loop0, sector 62080 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 615.706873][T27022] input: syz0 as /devices/virtual/input/input4730 [ 615.794411][T27027] loop0: detected capacity change from 0 to 62465 04:47:11 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf50100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x63a8) 04:47:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4740) [ 615.830267][T27028] input: syz0 as /devices/virtual/input/input4731 [ 615.836225][T27027] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:11 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x2a36, 0x0, 0x0, 0x2a0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r8, 0x545d, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r8, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r9}}, 0x4769) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x0, 0x800, 0x1, {0x0, r9}}, 0x1) r10 = syz_clone(0xd060d200, 0x0, 0x59, 0x0, 0x0, 0x0) pidfd_open(r10, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$setopts(0x4206, r11, 0x34, 0x100024) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 615.860440][T27030] input: syz0 as /devices/virtual/input/input4732 [ 615.991114][T27034] input: syz0 as /devices/virtual/input/input4733 [ 616.019065][T27035] loop0: detected capacity change from 0 to 62721 [ 616.026259][T27035] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 616.056552][T27037] input: syz0 as /devices/virtual/input/input4734 04:47:11 executing program 5: r0 = syz_io_uring_setup(0x6401, &(0x7f00000002c0)={0x0, 0x36b4, 0x0, 0x0, 0x2aa}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x0) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) (async) r5 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x3c93, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) (async) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) (async) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r10, 0x545d, 0x0) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r10, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r11}}, 0x4769) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1, {0x0, r11}}, 0x100) r12 = dup2(r0, r0) (async) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x2, @raw_data="ed575d6147d4a859d198399804a947eff66919e50e727619e831b10f9a99b8979f3c4553c27591821fe9fddcfbee83b98e8f56d5d8c6e86b441c7a8d4edc7179dce49d432dc4ff50b74ee73524e6f8392edc9bf19b5f25e6ce09401d28f498d7eba4b799defd170c34898f2d1a95053fee5a3f604cbdab2c63432aff7e7cbf5b0f3385670eed97143325f362e8be27c3a5d14537425f6ff8f521ab8e2929155f571f6c79f6899f6fc9ff648f3aa5668aed0ced54dc8cdcdc468bc57aeb45c267eda95d35bcf4ebbe"}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r12, &(0x7f0000000180)={0x10}, r13, 0x3, 0x0, 0x1, {0x0, r11}}, 0x5) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r15 = pidfd_open(r14, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r15}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 04:47:11 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x8) 04:47:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x63c0) 04:47:11 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf60100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4758) [ 616.307396][T27049] loop0: detected capacity change from 0 to 62977 [ 616.312663][T27050] input: syz0 as /devices/virtual/input/input4735 04:47:11 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x2a36, 0x0, 0x0, 0x2a0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r5 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r8, 0x545d, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r8, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r9}}, 0x4769) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x0, 0x800, 0x1, {0x0, r9}}, 0x1) r10 = syz_clone(0xd060d200, 0x0, 0x59, 0x0, 0x0, 0x0) pidfd_open(r10, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$setopts(0x4206, r11, 0x34, 0x100024) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:11 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf70100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x63d8) [ 616.332135][T27051] input: syz0 as /devices/virtual/input/input4736 04:47:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4770) [ 616.340579][T27049] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4788) [ 616.468227][T27059] input: syz0 as /devices/virtual/input/input4737 [ 616.486302][T27061] loop0: detected capacity change from 0 to 63233 04:47:11 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf80100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x63f0) [ 616.496850][T27062] input: syz0 as /devices/virtual/input/input4738 [ 616.505662][T27061] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 616.545967][ T3646] I/O error, dev loop0, sector 63104 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 616.630438][T27068] input: syz0 as /devices/virtual/input/input4739 [ 616.647829][T27071] input: syz0 as /devices/virtual/input/input4740 [ 616.649470][T27072] loop0: detected capacity change from 0 to 63489 [ 616.657403][T27072] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:12 executing program 5: r0 = syz_io_uring_setup(0x6401, &(0x7f00000002c0)={0x0, 0x36b4, 0x0, 0x0, 0x2aa}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) r5 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x3c93, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r10, 0x545d, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r10, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r11}}, 0x4769) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1, {0x0, r11}}, 0x100) r12 = dup2(r0, r0) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x2, @raw_data="ed575d6147d4a859d198399804a947eff66919e50e727619e831b10f9a99b8979f3c4553c27591821fe9fddcfbee83b98e8f56d5d8c6e86b441c7a8d4edc7179dce49d432dc4ff50b74ee73524e6f8392edc9bf19b5f25e6ce09401d28f498d7eba4b799defd170c34898f2d1a95053fee5a3f604cbdab2c63432aff7e7cbf5b0f3385670eed97143325f362e8be27c3a5d14537425f6ff8f521ab8e2929155f571f6c79f6899f6fc9ff648f3aa5668aed0ced54dc8cdcdc468bc57aeb45c267eda95d35bcf4ebbe"}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r12, &(0x7f0000000180)={0x10}, r13, 0x3, 0x0, 0x1, {0x0, r11}}, 0x5) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r15 = pidfd_open(r14, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r15}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6401, &(0x7f00000002c0)={0x0, 0x36b4, 0x0, 0x0, 0x2aa}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x10000000) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x3c93, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCMSET(r10, 0x545d, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r10, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r11}}, 0x4769) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1, {0x0, r11}}, 0x100) (async) dup2(r0, r0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x2, @raw_data="ed575d6147d4a859d198399804a947eff66919e50e727619e831b10f9a99b8979f3c4553c27591821fe9fddcfbee83b98e8f56d5d8c6e86b441c7a8d4edc7179dce49d432dc4ff50b74ee73524e6f8392edc9bf19b5f25e6ce09401d28f498d7eba4b799defd170c34898f2d1a95053fee5a3f604cbdab2c63432aff7e7cbf5b0f3385670eed97143325f362e8be27c3a5d14537425f6ff8f521ab8e2929155f571f6c79f6899f6fc9ff648f3aa5668aed0ced54dc8cdcdc468bc57aeb45c267eda95d35bcf4ebbe"}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r12, &(0x7f0000000180)={0x10}, r13, 0x3, 0x0, 0x1, {0x0, r11}}, 0x5) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r14, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r15}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) [ 616.707936][ T3652] I/O error, dev loop0, sector 63360 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:12 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x700) 04:47:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6408) 04:47:12 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xf90100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x47a0) 04:47:12 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x2a36, 0x0, 0x0, 0x2a0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r8, 0x545d, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r8, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r9}}, 0x4769) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x0, 0x800, 0x1, {0x0, r9}}, 0x1) r10 = syz_clone(0xd060d200, 0x0, 0x59, 0x0, 0x0, 0x0) pidfd_open(r10, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$setopts(0x4206, r11, 0x34, 0x100024) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x2a36, 0x0, 0x0, 0x2a0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCMSET(r8, 0x545d, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r8, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r9}}, 0x4769) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x0, 0x800, 0x1, {0x0, r9}}, 0x1) (async) syz_clone(0xd060d200, 0x0, 0x59, 0x0, 0x0, 0x0) (async) pidfd_open(r10, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020}, 0x2020) (async) ptrace$setopts(0x4206, r11, 0x34, 0x100024) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) [ 616.992201][T27101] loop0: detected capacity change from 0 to 63745 [ 617.011071][T27098] input: syz0 as /devices/virtual/input/input4742 [ 617.011978][T27099] input: syz0 as /devices/virtual/input/input4741 04:47:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6420) 04:47:12 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xfa0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 617.013760][T27101] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x47b8) 04:47:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6438) 04:47:12 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = pidfd_open(r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 617.118739][T27106] input: syz0 as /devices/virtual/input/input4743 [ 617.162358][T27120] loop0: detected capacity change from 0 to 64001 04:47:12 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xfb0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 617.190971][T27120] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 617.209067][T27122] input: syz0 as /devices/virtual/input/input4744 [ 617.234712][ T8317] I/O error, dev loop0, sector 63872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6450) [ 617.235495][T27124] input: syz0 as /devices/virtual/input/input4745 [ 617.324266][T27130] loop0: detected capacity change from 0 to 64257 [ 617.329134][T27130] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 617.394817][ T3646] I/O error, dev loop0, sector 64128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 617.424691][T27132] input: syz0 as /devices/virtual/input/input4746 04:47:12 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1f00) 04:47:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x47d0) 04:47:12 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = pidfd_open(r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:12 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0xfc0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:12 executing program 5: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x2) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0xfffffffc, 0x8, 0x0, 0x8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x151daeb5c9f70f17, r5, 0x10000000) r7 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r7, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r7, 0x10000000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r10, 0x545d, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r10, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r11}}, 0x4769) syz_io_uring_submit(r2, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x1, @broadcast}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x8) 04:47:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6468) 04:47:12 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = pidfd_open(r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:12 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x1fc0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6480) [ 617.599619][T27140] loop0: detected capacity change from 0 to 64513 [ 617.606708][T27142] input: syz0 as /devices/virtual/input/input4747 [ 617.618310][T27140] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:12 executing program 5: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x2) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0xfffffffc, 0x8, 0x0, 0x8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x151daeb5c9f70f17, r5, 0x10000000) (async) r7 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r7, 0x8000000) (async) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r7, 0x10000000) (async) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r10, 0x545d, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r10, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r11}}, 0x4769) (async) syz_io_uring_submit(r2, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x1, @broadcast}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x8) 04:47:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x47e8) [ 617.630676][T27139] input: syz0 as /devices/virtual/input/input4748 [ 617.717059][T27154] loop0: detected capacity change from 0 to 130049 [ 617.730475][T27154] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:13 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 617.843006][T27169] input: syz0 as /devices/virtual/input/input4750 [ 617.848322][T27168] input: syz0 as /devices/virtual/input/input4749 04:47:13 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2000) 04:47:13 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40000000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:13 executing program 5: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x2) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0xfffffffc, 0x8, 0x0, 0x8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x151daeb5c9f70f17, r5, 0x10000000) (async) r7 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r7, 0x8000000) (async) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r7, 0x10000000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r10, 0x545d, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r10, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r11}}, 0x4769) (async) syz_io_uring_submit(r2, r6, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x1, @broadcast}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x8) 04:47:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6498) 04:47:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4800) 04:47:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x64b0) [ 618.165613][T27178] input: syz0 as /devices/virtual/input/input4751 04:47:13 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:13 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40010000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4818) [ 618.185001][T27175] loop0: detected capacity change from 0 to 264192 [ 618.190424][T27175] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 618.190683][T27179] input: syz0 as /devices/virtual/input/input4752 [ 618.345667][T27192] input: syz0 as /devices/virtual/input/input4753 04:47:13 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40020000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x64c8) [ 618.352099][T27193] loop0: detected capacity change from 0 to 264192 [ 618.362832][T27193] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:13 executing program 5: syz_open_dev$vcsu(&(0x7f0000000100), 0xdaa, 0x610000) r0 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000200)=0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300), 0x260140, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/dev\x00') r8 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r8, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r8, 0x10000000) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r11, 0x545d, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd_index=0x6, 0x7, &(0x7f0000000240), 0x0, 0x10, 0x1}, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x637, &(0x7f0000000400)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7], 0xa, 0x0, 0x1, {0x0, r12}}, 0x1f) [ 618.389673][T27195] input: syz0 as /devices/virtual/input/input4754 [ 618.479934][T27201] input: syz0 as /devices/virtual/input/input4755 [ 618.495798][T27205] loop0: detected capacity change from 0 to 264192 [ 618.508198][T27205] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:14 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x200000) 04:47:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4830) 04:47:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x64e0) 04:47:14 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40030000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:14 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 618.866070][T27212] loop0: detected capacity change from 0 to 264192 [ 618.867847][T27212] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4848) 04:47:14 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40040000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x64f8) [ 618.891816][T27210] input: syz0 as /devices/virtual/input/input4756 [ 618.934146][T27213] input: syz0 as /devices/virtual/input/input4757 04:47:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6510) 04:47:14 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40050000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4860) [ 619.047400][T27223] input: syz0 as /devices/virtual/input/input4758 [ 619.057823][T27226] input: syz0 as /devices/virtual/input/input4759 [ 619.066343][T27227] loop0: detected capacity change from 0 to 264192 [ 619.075700][T27227] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 619.165147][T27235] input: syz0 as /devices/virtual/input/input4760 04:47:14 executing program 5: syz_open_dev$vcsu(&(0x7f0000000100), 0xdaa, 0x610000) (async, rerun: 32) r0 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (rerun: 32) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000200)=0x10) (rerun: 32) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300), 0x260140, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/dev\x00') r8 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r8, 0x8000000) (async) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r8, 0x10000000) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r11, 0x545d, 0x0) (async, rerun: 64) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd_index=0x6, 0x7, &(0x7f0000000240), 0x0, 0x10, 0x1}, 0xb) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x637, &(0x7f0000000400)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7], 0xa, 0x0, 0x1, {0x0, r12}}, 0x1f) (rerun: 64) [ 619.188735][T27237] loop0: detected capacity change from 0 to 264192 [ 619.206960][T27237] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 619.296733][T27239] input: syz0 as /devices/virtual/input/input4761 [ 619.482200][T27220] cgroup: fork rejected by pids controller in /syz2 04:47:14 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1000000) 04:47:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6528) 04:47:14 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40060000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4878) [ 619.586080][T27265] loop0: detected capacity change from 0 to 264192 [ 619.617175][T27269] input: syz0 as /devices/virtual/input/input4762 [ 619.618503][T27265] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 619.639568][T27267] input: syz0 as /devices/virtual/input/input4763 04:47:15 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200, 0x28) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0xf4, @local, 0x6}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="f1649a37df34f617ab6aeba0cfd97f7843e3f39eb11da0c0218c6b86b4cd4029209903b7f26285c4065359645350764d5ab3e73abc87608af45e7accb7358e77a268e2b0958283508b8858537e5709d5dd76bdd6688deec5c2c82f455cacafcbbc672926f8a276e2f496ee0a4360288b", 0x70}, {&(0x7f00000002c0)="3ceb61c221e3c268239dfc0ba7d94a8eee2d271b32cd1a965e9a208ff709c2660da052427e0133229d08f5348bec350982e6a522d9aa46531b983b39f8d2b8c3d22aba4e89d5dcbbe27995a2fe5e1394b0992bd2956d70a215195e092cc8af72a85432493aac98326e9273e9cdda56f8919e9d41a36c7caa58c8be6722280cbf39d51361e7d3f89307360fa37bf69631aad522797c2049594ede53d347e6155cd012aa2fc23ecc2ad85ea0c14e611fb9847046f4b095d19021743996c7469c70b4755a1debcc219197a38319e1", 0xcd}, {&(0x7f00000003c0)="2ff4df2c7a89fd7001a484bdff98e196177a904f1fffa91f5f6a0f48f6d580b5fb2193835d1cb4e479e9d4c888c80320dcc36e78cffc49b6049246a20ffadb7418bda9e35957e265e7e1a1eea58a80838f5a82046d60513fb2e1ea39eafedf1c4a63ca855b4d", 0x66}, {&(0x7f0000000440)="613b338acb71f40c6e205abde0a151954e6696412f7a18ad231aa49ebcdc6262c160da40cf7623da96c66412f707f05bec705d8712c35c2d3b26d9171931fa49", 0x40}], 0x4, &(0x7f00000004c0)=[{0x1010, 0x110, 0x3, "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"}, {0x50, 0x119, 0x1, "1353dcfdb7d7d6a261a66a0de114c01f0290ed8a34aef8ae74ca248cea41a63ba6fb080aa217cb44eeea587224977cbeb6542bf596b6623ac8fc7afa532c35ff"}], 0x1060}, 0x0) 04:47:15 executing program 5: syz_open_dev$vcsu(&(0x7f0000000100), 0xdaa, 0x610000) (async) r0 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000200)=0x10) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300), 0x260140, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/dev\x00') (async) r8 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r8, 0x8000000) (async) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r8, 0x10000000) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r11, 0x545d, 0x0) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd_index=0x6, 0x7, &(0x7f0000000240), 0x0, 0x10, 0x1}, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x637, &(0x7f0000000400)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7], 0xa, 0x0, 0x1, {0x0, r12}}, 0x1f) 04:47:15 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40070000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4890) 04:47:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6540) [ 619.875776][T27284] loop0: detected capacity change from 0 to 264192 [ 619.887764][T27288] input: syz0 as /devices/virtual/input/input4764 [ 619.900374][T27287] input: syz0 as /devices/virtual/input/input4765 04:47:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6558) 04:47:15 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40080000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x48a8) [ 619.901448][T27284] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:15 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x7000000) 04:47:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6570) 04:47:15 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40090000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 620.051088][T27300] input: syz0 as /devices/virtual/input/input4766 [ 620.059644][T27301] loop0: detected capacity change from 0 to 264192 04:47:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x48c0) [ 620.061297][T27301] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 620.073815][T27299] input: syz0 as /devices/virtual/input/input4767 [ 620.147704][T27309] loop0: detected capacity change from 0 to 264192 [ 620.157364][T27309] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 620.183550][T27311] input: syz0 as /devices/virtual/input/input4768 [ 620.221123][T27313] input: syz0 as /devices/virtual/input/input4769 04:47:15 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200, 0x28) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0xf4, @local, 0x6}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="f1649a37df34f617ab6aeba0cfd97f7843e3f39eb11da0c0218c6b86b4cd4029209903b7f26285c4065359645350764d5ab3e73abc87608af45e7accb7358e77a268e2b0958283508b8858537e5709d5dd76bdd6688deec5c2c82f455cacafcbbc672926f8a276e2f496ee0a4360288b", 0x70}, {&(0x7f00000002c0)="3ceb61c221e3c268239dfc0ba7d94a8eee2d271b32cd1a965e9a208ff709c2660da052427e0133229d08f5348bec350982e6a522d9aa46531b983b39f8d2b8c3d22aba4e89d5dcbbe27995a2fe5e1394b0992bd2956d70a215195e092cc8af72a85432493aac98326e9273e9cdda56f8919e9d41a36c7caa58c8be6722280cbf39d51361e7d3f89307360fa37bf69631aad522797c2049594ede53d347e6155cd012aa2fc23ecc2ad85ea0c14e611fb9847046f4b095d19021743996c7469c70b4755a1debcc219197a38319e1", 0xcd}, {&(0x7f00000003c0)="2ff4df2c7a89fd7001a484bdff98e196177a904f1fffa91f5f6a0f48f6d580b5fb2193835d1cb4e479e9d4c888c80320dcc36e78cffc49b6049246a20ffadb7418bda9e35957e265e7e1a1eea58a80838f5a82046d60513fb2e1ea39eafedf1c4a63ca855b4d", 0x66}, {&(0x7f0000000440)="613b338acb71f40c6e205abde0a151954e6696412f7a18ad231aa49ebcdc6262c160da40cf7623da96c66412f707f05bec705d8712c35c2d3b26d9171931fa49", 0x40}], 0x4, &(0x7f00000004c0)=[{0x1010, 0x110, 0x3, "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"}, {0x50, 0x119, 0x1, "1353dcfdb7d7d6a261a66a0de114c01f0290ed8a34aef8ae74ca248cea41a63ba6fb080aa217cb44eeea587224977cbeb6542bf596b6623ac8fc7afa532c35ff"}], 0x1060}, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200, 0x28) (async) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0xf4, @local, 0x6}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="f1649a37df34f617ab6aeba0cfd97f7843e3f39eb11da0c0218c6b86b4cd4029209903b7f26285c4065359645350764d5ab3e73abc87608af45e7accb7358e77a268e2b0958283508b8858537e5709d5dd76bdd6688deec5c2c82f455cacafcbbc672926f8a276e2f496ee0a4360288b", 0x70}, {&(0x7f00000002c0)="3ceb61c221e3c268239dfc0ba7d94a8eee2d271b32cd1a965e9a208ff709c2660da052427e0133229d08f5348bec350982e6a522d9aa46531b983b39f8d2b8c3d22aba4e89d5dcbbe27995a2fe5e1394b0992bd2956d70a215195e092cc8af72a85432493aac98326e9273e9cdda56f8919e9d41a36c7caa58c8be6722280cbf39d51361e7d3f89307360fa37bf69631aad522797c2049594ede53d347e6155cd012aa2fc23ecc2ad85ea0c14e611fb9847046f4b095d19021743996c7469c70b4755a1debcc219197a38319e1", 0xcd}, {&(0x7f00000003c0)="2ff4df2c7a89fd7001a484bdff98e196177a904f1fffa91f5f6a0f48f6d580b5fb2193835d1cb4e479e9d4c888c80320dcc36e78cffc49b6049246a20ffadb7418bda9e35957e265e7e1a1eea58a80838f5a82046d60513fb2e1ea39eafedf1c4a63ca855b4d", 0x66}, {&(0x7f0000000440)="613b338acb71f40c6e205abde0a151954e6696412f7a18ad231aa49ebcdc6262c160da40cf7623da96c66412f707f05bec705d8712c35c2d3b26d9171931fa49", 0x40}], 0x4, &(0x7f00000004c0)=[{0x1010, 0x110, 0x3, "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"}, {0x50, 0x119, 0x1, "1353dcfdb7d7d6a261a66a0de114c01f0290ed8a34aef8ae74ca248cea41a63ba6fb080aa217cb44eeea587224977cbeb6542bf596b6623ac8fc7afa532c35ff"}], 0x1060}, 0x0) (async) 04:47:15 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5}, 0x1) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000003300)=0x80, &(0x7f0000003340)=@qipcrtr, 0x0, 0x80000, 0x1}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000003280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000003240), r0, 0x1, 0x0, 0x1, {0x0, r6}}, 0x2) wait4(r3, &(0x7f00000032c0), 0x1, &(0x7f00000033c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x3) r7 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev, @null, 0x0, [@remote, @remote, @remote, @null, @rose]}, &(0x7f0000000180)=0x40, 0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000015c0)=ANY=[@ANYBLOB="01000000011b000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="99000000000000002e2f66696c653000"]) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r9}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r11 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r10, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r11}, 0x1) syz_io_uring_submit(r10, r2, &(0x7f0000003200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x2, &(0x7f00000031c0)="34b0f41ae91b86cddcb0313d57e3bd6975d7ae3cf7096e6dfa68e0f1ebf49bc2cfc983cb9777cb8e05a1d99bffe1568347b9079f12d82da94add874698a88bc1", 0x1ff, 0x0, 0x1, {0x3}}, 0xffffffff) dup3(r8, 0xffffffffffffffff, 0x0) sendmmsg(r7, &(0x7f0000003100)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x68, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="c0ddf88799fd476cd2ba8f10cba8588fa0c005ec9b30e1cd4ccf3209a108587ed35c67883bad2e8966e1d9345cbc8ea7bff309a2bf53d2fbea3c1a4b76b30cac350abd96940dea69ad49fb5b0dfb8130eb6397e6b466fc0a0e9edd0958df72a054883a373916988f3dba9146449d04577dd78b705ed1c7692a720f3695322bac6c8ab1e3020bac29bdde181d69cbe88f78392835db74133d604b2add66166a4956a52196387c2ef368c891599f4b06f410a27ab51c6f2288e4c8a9d83463adb71ab0b586aec9008bfa468db8dac3fb9ba9088caa75d2ef50901eff", 0xdb}, {&(0x7f00000013c0)="440c37f2bda2dd48f59435ee6c25e4a21aa9631956c1191b1fa9582326a30c5b08b90aa21524708d8a35bbdabbaa72d46ef8e3d47ce92c44eabc7396e487a3d9492c023f9a89cbdce06a0a21a2b06acd51e9b94635dbdd2b3d0ff1c72b8742fbff2e8b0b2db3846e6c8d81df1b514cb1382e1e782be4cd0be4c6bb23ef0c049815a4d0d531d3123719d9019f9049d87e4f69ac16a28d31ec56cdc311a083498ebb77a58f3d8f279a015f9dddd50748649c61ca35b71e4a55", 0xb8}, {&(0x7f0000001480)="3ec1ea88aa4d1738f4bb97d4b7dcfc1d41e5ba1c22918d2a2481e75a092ac6243645a81e89b0b046645c0b921654c4d6df43b3219ff511cc4d98f6900284802c62e4f4b2261001ccf0f545600625675cfbf7ff2539111aa9f98298eacd346f28f9cc4464a5", 0x65}], 0x4}}, {{&(0x7f0000001500)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001580)="1325a8695017e7845f6773f2b282cad0b2373ee4eb", 0x15}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="61e1fcead61ee3b7960fef3076684bc1aeb765cc83e2cc1c97a149cb7b8663f471a0241609b84d8f71cdd1740db62986f7368a8f678df80b17ffc5e21577b6804b33bab45c28b665d5c1cd03f40466a933a8315131fd23c5149fde3a6076bdaf9c46fc40d8357b6aae31fde3fa95eb9cb7284bbb5510d16b87cc4c2b35beed3c609acfe60ada397ad0db70fe", 0x8c}, {&(0x7f00000016c0)="9afb4a3e998fc3e616655bbafdf2996781b57d8a4622e02d88d2d5badc59807e36e515d8e54c4c629c7d309a013c2b415e447f4ebf9ab5883bf425d1ba734386b387d85d168f8267c0ca90ba1418c09d38ba536b906b9aad64f6031a650dfcd3782a06caf5becc2dd55ef0ffe0e70f59ad00aa8d46c56b5c3fca8e61f4bb50f3da8b583ab52fe255d57439ec37260a9e3a2ed49b07e62c46e57258ba65ea25de861a15ad801ec2c3f0a4963d5ffe42710341a2a85efd6070cc88002b0accd1eb4d65d3d794fd892af5005f8da9e45e0f884ce312ffa31ab66afaf07c0a786f6784da2388f74006c0879861", 0xeb}, {&(0x7f00000017c0)="8717cbb70875fcf3842f4a976c995810fb7a112c6d9e68fbafab0faca3eea718abc28a2b4423bce8f86ffdb9f28da753c05c792239c618029a85bdc561fc54deb91d5b0bed5e3d82ad1698549c7af0", 0x4f}, {&(0x7f0000001840)="80202f08f80db1ee7df78cfa88966f61c89941f580a81dad8b41b2eac33edfe4d37d6371f4401ce011c0019531b9d2d2b2bbdd286aebd0997a6d54800164673bbc92f55db356c7374c3510ee681922adeed18b7d73c6498c4f570d23b96c96329706733941a4a8a994e368432e549ba50d1cac25c293446b2c40bb7ec1be66b563b6c36c7911349e55b8a9cb2b6c895d4c", 0x91}], 0x6, &(0x7f0000001980)=[{0xc0, 0x10, 0x5, "96e16f364d0b44bbf791db63d924ff3992b08e95325469d6c321790e0f014298dc8aeb9046495c4eafcfc67cc644e721fb90b21580d179a7e2ac7f54f6325c9654b90bbd839c982ded1e106ff9bf1e799e4d7d0434eec345f6eac955d48457a9b44e54199d64a0c7b0af2f6cf21af01513d3472cbe58678bcc4a810a5c12d7db84438e3412e6fcafdd5da6619a5108a994d56ea4b2e67adeeeb13809b8c894c374b64d6c17ab0855bd2da6c6803be0"}, {0x1010, 0x109, 0x0, "aca0d534c72fa10cf52e0a57df11213c7a09ceedeb7203a4db520c9f97fece512a2714cf13e6a1e38fc119c91c409c65d11813b60e430a32e56d7469e31a9d877c6064e9a46917ec9108b5b5faf227b60eb06b4f92dbb996c32754a9a6c6a9a61c70627eeed27f5855737e3ac991c8d406927d50b1aaa1963cfbb8184674661b81ba14e2991c7b1f84baa715e05f238c41bb07a1d9455b3a6e7075b87318a3a55d85954a1c4816baa50e059d96a42e947e01940dddf9549c387d9eb009fef8d7ab2940995fb95811c27e56d962460ea3770d0c35a13594c47cb28ced0573a3039eba1f83d31820ab2e5b2b6a14e3cebca8cf9314a626d14522cce5c0b326f897edbe27e7b044d9c2a9565df9b86d8f60d20d686f76bcaf492aa3ba4b09cad5601b5edd4c505c6744c1bc64cca12d2f8723fddad0ac3b508cb3283c871e9d4101cd0cd4a6ab6bf661f91cb9a979d282b7a9294f357521dcde361e580dc21eac934c414871c2cb1d5e3f6cbb3811eaf4fe42c27d7e2a1494139cc1a0bff54753873abbf633141e23b2cbdb5071c212a0d3a4df07434457cb2dffc47cac04706335bd6279475389db3ca9a4bd81fc2f103481c15fba4a56dac7483b4059066c68500e8d10964f76d5de88c8c3e70d58adc89e28f0858080b4e8c3d7ff27520929ba22cc033e9237894ed03a3629853261c2130eb3dfa14db76d29338f192d59dab986fda3176c4fdb1f993b694a617bd6a7c65ab141d7c557ac0ad614b5614339d9e2dc6a7b465140f2d85eb5a148b8a733067cf92e54faf13db2656f4a46801ce1c02cb6a26470b007da2040e78f745a6fa7948d108660645f40fc492bb043352e587f5e1664162ed20c4175371fe35a269c1b2e33e4c670f9b04b0c5336e03b1f2556919165ccf723d5b68bbdff91ad249f4e7205771e50081f3f44348b5f991d3308c8abad5b435d36b579779e2b2671e528b10b220d1f9f64fe4e6447a6d62da4e33f4d8ccaaf303bc6750aebcf416ee38bddc240f00c12d941e10a5c73732e83b20a89a1fb9f38a36becdf8676966a75296ddd84ed72f8be46f2aa4128d7be48a958cf27b8075c7b2fd026be5cee59ba1b0a8111c0ec139d38ec73485a5382d107f310fb2fd7192a61b077fc6fe7b0e7ee120cb0da15bda5644bba15ecbc45ed26ffcd4675a62098ddd0842e153dc4b054415dc936b5d2d3c0e1f30d870b482ecf7b3d545f230eb59df602983fa4073cc0eed4d214605875c78c7e01f543768579677f904b0a31b51418ae8066685e1dff273ecdb659ab4c113da95a41937a3173f41d716d7f4a25d9e9be070e174346833e3dcd893a7a7b8ec33b954abe73b22d9973d63f6b5e0b2036604e3ca418ef21626a6120dd4cf1db856b513f567c2ad9bef1e063a3d7ee2ab2a31dfd47180e8af64ee06d299ffc1f17f14fe9ab53ccef71c166602a1b9d7bc7eed9525d5880a763a22602805098bc89d79227acfce6cbb15af7e79e75dc611ff9cbf523f1aac18c7391af189af129880380262a097dea2da4443a28e5f7dc8ed1ec76aecf53a005a11afde2d05428f7fddd08cec3c1546cadada4564f0e3d0a426ee42fd2a2df115203ab0c2de4ca535745d11987e4a73b3426130739b72a68d537a9284af27ea8bc7a8188bc97255f5f2e9c47288ad3a28bae7dbd33cc8cf9cc1db5b03b0ebf837b7dd5ccc0476e049a013c3c6fc2a599a354fc5c47bbf0c6e21eef715b8ee1617e3946381caa18736d40895bca6e81b3c7375944b2027c9885fdfe63f6cb9cdf3510316cc316335e3e03b71a7b21d636a3aa24ca5f557596b61c765b917b7efa93ce86ff8f1aebe00f95af80013cbff4f06cd632bb160dc674a7d4968f88c38ef24b03f978b6bd6c7b6c3e24a6a4b44a2e6f30e8bc05de080f791790a033ebc8b192b633e62be986d0fac435f679ac702d5a225a5eff244eb65acc6189dfccd57d6d99b8f387fab0529dc26600d995ef0c82dac5368e944150c72d820176f6b3ec0f3cd0ac9e02e57dc1f3ee1671f24bef3120a2219a67a98e746b61f77ccb316bc2645090f3ad7f075429fdde0a8afcd8dba1e3825e3d709ddaa6437830b17a6bb7b554d10e486ec7d86265f6d5f660f1c94478ee31c3c6f4d3a8e778c996c0807d900590c43f26f3c690799569bfba51a3907c919c00f1654c1afb60fe5f14042de59e46ee18b12c01dbea0dbf15f2d1d33ae50baf514b2e4b39c770239e2a56114a2224969c7818b4fd50c16947b56f56eedae8a268618979b45732309a032b9c98d0e4db1dcf58f9246a5d8fa4ac2e11bdd2d062f3d85f22571db59ddd4f972fda73f21b88fce1de06c948559026cc640c0e9554a7f37c48c0b310c2660980bb9b75b7601798c276f23700eba39bf7273822c8882cd4d2f470c342b6779466ed14f0f64a92658797432f224be879de1018b35ecefef0eeeb83fba0bd1bdc0084e7cfc84db295b66ff42d28206ce6a07ebeee0cfc761ea67001ad58747eb3db7352000f139122f4911ad0724c6c226ffd3ac3d11cbd0c43a876cb8854ed3b38267050c300a09af3a1888abd0697036900892c5a36b4fbd01b723778ee20932c180c578f2323be8bb7a70336f2d66661af55fd25a12f21751618f31b5d497dc6a1c2b1f11b01a76441932f7809673eae4f66f8255a72d4eccf54b5e6dc8a387bb4114cecbc42026d0fa358597592cdbc6d629589ffe1fda3b67496510ce48372d05e85c553c12360ba6d6658c50d9478b1a3577b95692711d907926aebb3552dae5b1f4eb10ffcce962a663cef27a4ef894773f01b9949bf53f9cd0eee2165e777c90c3b597f508eb15183d535ad275fda4a1e5d5d8f025de3f2f5a31fd359f6dd4f6b8c0ee2f4df995f171f4bc06de4fb15749b76bd1f9760f2124d3e7dd8e4d34ecbb77f9cc4606da655d51251c517d90af3ae01713e7599e501bb6f8003bb1e555a3aa3a57cd33281690d6f4f115d7090fb8853e91791349f20cdcdb256e3f1b4e6c164c723e70690ad5ddb179a20561d544ef20d66f37f3cf42dd81e6b6b93eeace73d0b9ed6c8b96274fbce5b0cb6991cfc3d08714ea7d7137cf8a0e8df0690862c2678fab1a10635ff98c253d961ab46272db44a9c1412a097f3c93831118188339964c121364465220f98e267eb802c82418a6f1f25b3e0041a3ebed4c9fc3a8e79177b27c61d41229f15edc9f3865e61e24dfb994e6462463b3f2de3fb50017e75f55179501af2e147bacb812eff17f4b9e3b4e84f5ca1ce96df265af9ec0cbe2ddc44b7da8f145e35b85be8fd87ac9ab5708bb0e3694612f0ef5149fea8d240609728ad69c70e2128552082790d6157b1c14becd4e0d9de8b222b85af709f0e1a75dea8ac04126c3aef21541eb586027f710bcc5ed118024a1750c091a6e055ef8d00087c0afafac4db876bf4bf49e39b38dbba49ff3251958efa73190d293f1ffc9428f6ab0e05525e02973504b5275c47ee10c9952293481588f49c139d6129d4188c2f438aaaff3177889709a7e2a66e519075ec2a41ac48149678386ce8c544f87ec27e0d5596e7fa2c365f863a6f76bb319c5c6e4d062287be27784bb12205adb507b5bd2853d0b8df8752cb96e89c072b81e285de949de879dc4d4ec903b5b14b12b69990f63bcfb0a16cdd2758769c98b0a89e037f9b9fd3b109c3051906fe3c02673e7cbf184e2c931d0630cf63f40b9f5e6b2df5824bfed1e59a7039a5a0e54cecff249ef807269a240b16cb3a0c3e9bbf5250e912d3f5a2ea6c059f43d17872b3a72a54102e29cb8455e2c62d029aee7dc5697ac796a5c04ffaec89170c0e3bb20ca1a1a7eb6a0314967c28378ec8c81678dbb8a942f34c1bc51aef7f2ff4a177f3feabe236de12f0618f6e8fc897c8247163c86a9c0a7644f0e5ee45441949d86125100855ca309434aaf03693a056d5fb05f67ec701bcbc8cacb269285d38d25b060f5afce8696da079666ca2c2c7a74db0f18b01c961108565fba9bd3d70e70595777704d3f908d08f5473d4d7fff2bab3cfb40f98acdcfa563fd39e62b5f1cb3d196c64925a106aa552149f4da164ae7abcedfb497d959c7b2621dd4426923fb2e7c0037afee8da5353ee8df041eeba9604c5520013a7e339f210f1e7ceb01d870845fad17c4f8421752af4b5e1b9c69719a55a2dd29ec4b679eedb6b62fc9feebf9b4a10b322a6abadd404e1ef149097c4cc2c9bdba322b0f207df3acdda83b2cad9fd60a9d31d458bfa4c8ec5b9793e15fba3c785f245501c6f9844a2c21e353e4fd690cac0278c1ecaff8e197b29f6b40a7b6ed859d454a7845f894b64da4d64f816fc0572e4e9f4a17af2f25a66a41c984f98fc06cfc94e7ef9d10652514de1681399d308f32bd34d3a33299a28b1de8c0d7d0c66f195d44cf196560c48509bc9e145f833166acdfb043bbe233fd260a12b8c0ba5c18dab00caa7025e8d014b74cd839c482b84182d4c5f27ac71d450d039e0c74cb2de090539a0a6da7eb0d2d375f46df0ce3bb08ea8a1906cb39c22a718acda3f559d287467f61d203586b068d2ee4ad8ce931a6efa7ac9cd2995700a9a1bf64d92e0504eb950cdef392f90cbf3c7bfe7b9eeeafe457bfa1f2a6cc49ecfa04b16d8bd895d73be426ce3cd4e43256e4bdbd50c7d1e0986c2682c99fdd5f597e0c4acb0a42ad83a40261dca9da0757f826ed6fd8b354d27a0c44093f6a6ec6317cb8cd36823951b69e6591187527761885d963e591616c1f577b51ab87d738adec4eee1701767830b8ac039b933563e124011e1cb68ec476c51123ecf62cb9e0285dfc8d4f5583d0d1a2a4e2c5c8994faac1f27fa4dc3924e500e7e8c4d3e2e9321ad272dd66abc462c42e84b54a333e898dc0651dddd3893618d4e65e16c22d067460e0e4ef15d935baacd09873a73bc45e5a7b1c8c1095bcb9bf174acb24f83e654f4b5f7b3210d0880115574859804d0a0e6cede3ffb3e87853df4e3cc066ea220acffdbe6142b17a633b2bf6f4befcf384ee87d1354770804fc73a970f70c0f914efa588a6c836256eb3547e6a8b9876f5a85a90bc84fd1bee197c93b5122a51ec8046b701a0123760a6cf4079536351017ceb5b25bd5e3246e0d2b19fc54ceadb2adf15bb88414adf4698e0e3d4a06510cab70a580ff3580754335a12f98e694b8662af238ac469f7736e65ed110e66ed3694fe74b9873bf46e67bf4869bca766da6f31fcae4a09df0e7a0e71237864d8074670993576fde207559d1af99da2db05343743345dbb2291847266556e6d11309138aaf81d22d0a6e341346187ed291a87b6fc367e8cde666412f4e98af6a6c210256dacd7fdcd0e18f544de4b6afa9eb087fe6d6bd3857116ad739f63dddd13ba77d7680dfb3c9dbcb6c4a8b446d60c24f733175ad8fb4654697bbcfdba3abbcf5d35339adf7c7f6cf63ddf54c67c0a93ffad8b789004eac8a91fb38db9309c749e66a392c903ba93b9452ab0ff299754173f4c7b8b172b2329964d729da2bd1b7781d20b0aeabca5e26ee01f7b6f53784abe6a71c001e15b9b4239d6ee31feeb35192fcecd9961d2249769c9cbad7f7ff6b5131f18546995edd7de33108cf84bdb415429abb556d5a2ac5d72568be98dbeb151d18a89853cb97e4f0abbcf819408be085581a818be3e529ea35afa609625097caab215a67f8c80ef338a6cdde6b0dbe1476675934a56fc37046d798428bbf9c070f68282585c33de5c0bd0087c8411247640c9e397d8da8a03d4bec1f2c0510d22bacbd"}], 0x10d0}}, {{&(0x7f0000002a80)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b00)="1ba123cf58a37017e15cbabf4d3b7b6767ae9632369ee93b38603dc7f5327990ff9d598793e5ad5e1182e06042fb19878422e35edb178895ebfdccb5251b2329a6736978d5845b23fc7f779ce3f3b106e07571523c9e434cfbb865fd97e8500ad6c8bc36e78a5ece53b572f7468a25b880abadb4888ca95a403455609271b25a314c91e4b6c1df763829ef8e24e47c9775cb2832142e", 0x96}, {&(0x7f0000002bc0)="4a9e8deccdf4fb2fca856323230b78372725cf5168eab4f610580919f5f0ade80b89f207d65c7e64d869a64dc0fe36f25fb2674efa1bb7a749bdc74c004c1f160be630dd81f7355c1712711043fcfc86eef98d24e560e2e38f72515500a9dc86e2ff361af1645d57a76302949a9747c1b7caf7054490652eca0c8ff15bf94be560388aa0dd8fc84b1e5d401e3f1ecf11f69995d85f0ab2873d7b2ac23a6224def135aa3b0d676313c88f43202a8aba0b998c811a6bb3def882171434cb58af5da9763e92b2568efc2cdd31fb7c981c0384b8b4aa21794c43b25cc5fe3171c9087f46aea1821f77638f9e", 0xea}, {&(0x7f0000002cc0)="009d22f9e5c812c40b17325a26bcb56d3afd96e9d79b59830a6a996c821e6a98d92404074bbca2a58218989eada551d6749e742401bbed74b2615192ca3000186042dfda90d08c65b3da6195e0392a0a7413788c1a08d4a924e18fcdb27c6028ec623d2eb47e83a918db2607d30b8a50cedc82de097b1907cb89cd193f195ab85041a63203599d13ba72508f4d30e100a8555c371e232baab453d575a1a5d27c1a9653f4c861b026a0cdae0cdb5dc7e7803017750238ce56edb253c588684aef3f73f60a9df3fa524c", 0xc9}, {&(0x7f0000002dc0)="b4ad6ba48459b71b388fe23201ce801c5170b7a5e2390b1769c4790e19be3c925f14d0e5b7d17d414baee724b279e99d3aefabac8f824be8df88aaba0aa39947ed795eb35feb9aeeae0be436edb28a9bd3fc411191377c0e85bb8f0a8aeadf0abfbebcade4d4dd6a05e2a4f3b058e054d59530b0a5c753e71c4846122c320cff4753bcaa72", 0x85}, {&(0x7f0000002e80)="3a23423ec0e426f27996fb0a80ad3d671b3eec51419aacb7ffc6aa9e84d7addbbca04c78a448a5ab6bf62e96c80603a7ad5ae403bc", 0x35}, {&(0x7f0000002ec0)="22580e4b66394d2f240b2ffa911e4aba359bf0df369ab40e9f6d1e47625c9d933ceda61f9c", 0x25}, {&(0x7f0000002f00)="25a5e2a75cfde4c07deba1c3e4061f1003271e2f38d042c616de68f4cbc556f640b8e55fb0a3375788494803ec451081133dd4739730998cab", 0x39}], 0x7, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x108}}], 0x3, 0x54) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:15 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x400a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6588) 04:47:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x48d8) 04:47:15 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x8000000) 04:47:15 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x400b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 620.639692][T27320] loop0: detected capacity change from 0 to 264192 [ 620.653936][T27320] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x48f0) 04:47:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x65a0) [ 620.655099][T27322] input: syz0 as /devices/virtual/input/input4770 [ 620.684308][T27323] input: syz0 as /devices/virtual/input/input4771 [ 620.800991][T27339] input: syz0 as /devices/virtual/input/input4772 [ 620.823980][T27341] input: syz0 as /devices/virtual/input/input4773 04:47:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x65b8) 04:47:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4908) [ 620.920014][T27348] loop0: detected capacity change from 0 to 264192 [ 620.921762][T27348] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:16 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x400c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 620.966975][T27350] input: syz0 as /devices/virtual/input/input4775 [ 620.968041][T27347] input: syz0 as /devices/virtual/input/input4774 [ 621.050966][T27353] loop0: detected capacity change from 0 to 264192 [ 621.104255][T27353] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 621.141344][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:16 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200, 0x28) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0xf4, @local, 0x6}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="f1649a37df34f617ab6aeba0cfd97f7843e3f39eb11da0c0218c6b86b4cd4029209903b7f26285c4065359645350764d5ab3e73abc87608af45e7accb7358e77a268e2b0958283508b8858537e5709d5dd76bdd6688deec5c2c82f455cacafcbbc672926f8a276e2f496ee0a4360288b", 0x70}, {&(0x7f00000002c0)="3ceb61c221e3c268239dfc0ba7d94a8eee2d271b32cd1a965e9a208ff709c2660da052427e0133229d08f5348bec350982e6a522d9aa46531b983b39f8d2b8c3d22aba4e89d5dcbbe27995a2fe5e1394b0992bd2956d70a215195e092cc8af72a85432493aac98326e9273e9cdda56f8919e9d41a36c7caa58c8be6722280cbf39d51361e7d3f89307360fa37bf69631aad522797c2049594ede53d347e6155cd012aa2fc23ecc2ad85ea0c14e611fb9847046f4b095d19021743996c7469c70b4755a1debcc219197a38319e1", 0xcd}, {&(0x7f00000003c0)="2ff4df2c7a89fd7001a484bdff98e196177a904f1fffa91f5f6a0f48f6d580b5fb2193835d1cb4e479e9d4c888c80320dcc36e78cffc49b6049246a20ffadb7418bda9e35957e265e7e1a1eea58a80838f5a82046d60513fb2e1ea39eafedf1c4a63ca855b4d", 0x66}, {&(0x7f0000000440)="613b338acb71f40c6e205abde0a151954e6696412f7a18ad231aa49ebcdc6262c160da40cf7623da96c66412f707f05bec705d8712c35c2d3b26d9171931fa49", 0x40}], 0x4, &(0x7f00000004c0)=[{0x1010, 0x110, 0x3, "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"}, {0x50, 0x119, 0x1, "1353dcfdb7d7d6a261a66a0de114c01f0290ed8a34aef8ae74ca248cea41a63ba6fb080aa217cb44eeea587224977cbeb6542bf596b6623ac8fc7afa532c35ff"}], 0x1060}, 0x0) 04:47:16 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1f000000) 04:47:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x65d0) 04:47:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4920) 04:47:16 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x400d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:16 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5}, 0x1) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000003300)=0x80, &(0x7f0000003340)=@qipcrtr, 0x0, 0x80000, 0x1}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000003280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000003240), r0, 0x1, 0x0, 0x1, {0x0, r6}}, 0x2) wait4(r3, &(0x7f00000032c0), 0x1, &(0x7f00000033c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x3) r7 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev, @null, 0x0, [@remote, @remote, @remote, @null, @rose]}, &(0x7f0000000180)=0x40, 0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000015c0)=ANY=[@ANYBLOB="01000000011b000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="99000000000000002e2f66696c653000"]) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r9}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r11 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r10, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r11}, 0x1) syz_io_uring_submit(r10, r2, &(0x7f0000003200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x2, &(0x7f00000031c0)="34b0f41ae91b86cddcb0313d57e3bd6975d7ae3cf7096e6dfa68e0f1ebf49bc2cfc983cb9777cb8e05a1d99bffe1568347b9079f12d82da94add874698a88bc1", 0x1ff, 0x0, 0x1, {0x3}}, 0xffffffff) dup3(r8, 0xffffffffffffffff, 0x0) sendmmsg(r7, &(0x7f0000003100)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x68, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="c0ddf88799fd476cd2ba8f10cba8588fa0c005ec9b30e1cd4ccf3209a108587ed35c67883bad2e8966e1d9345cbc8ea7bff309a2bf53d2fbea3c1a4b76b30cac350abd96940dea69ad49fb5b0dfb8130eb6397e6b466fc0a0e9edd0958df72a054883a373916988f3dba9146449d04577dd78b705ed1c7692a720f3695322bac6c8ab1e3020bac29bdde181d69cbe88f78392835db74133d604b2add66166a4956a52196387c2ef368c891599f4b06f410a27ab51c6f2288e4c8a9d83463adb71ab0b586aec9008bfa468db8dac3fb9ba9088caa75d2ef50901eff", 0xdb}, {&(0x7f00000013c0)="440c37f2bda2dd48f59435ee6c25e4a21aa9631956c1191b1fa9582326a30c5b08b90aa21524708d8a35bbdabbaa72d46ef8e3d47ce92c44eabc7396e487a3d9492c023f9a89cbdce06a0a21a2b06acd51e9b94635dbdd2b3d0ff1c72b8742fbff2e8b0b2db3846e6c8d81df1b514cb1382e1e782be4cd0be4c6bb23ef0c049815a4d0d531d3123719d9019f9049d87e4f69ac16a28d31ec56cdc311a083498ebb77a58f3d8f279a015f9dddd50748649c61ca35b71e4a55", 0xb8}, {&(0x7f0000001480)="3ec1ea88aa4d1738f4bb97d4b7dcfc1d41e5ba1c22918d2a2481e75a092ac6243645a81e89b0b046645c0b921654c4d6df43b3219ff511cc4d98f6900284802c62e4f4b2261001ccf0f545600625675cfbf7ff2539111aa9f98298eacd346f28f9cc4464a5", 0x65}], 0x4}}, {{&(0x7f0000001500)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001580)="1325a8695017e7845f6773f2b282cad0b2373ee4eb", 0x15}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="61e1fcead61ee3b7960fef3076684bc1aeb765cc83e2cc1c97a149cb7b8663f471a0241609b84d8f71cdd1740db62986f7368a8f678df80b17ffc5e21577b6804b33bab45c28b665d5c1cd03f40466a933a8315131fd23c5149fde3a6076bdaf9c46fc40d8357b6aae31fde3fa95eb9cb7284bbb5510d16b87cc4c2b35beed3c609acfe60ada397ad0db70fe", 0x8c}, {&(0x7f00000016c0)="9afb4a3e998fc3e616655bbafdf2996781b57d8a4622e02d88d2d5badc59807e36e515d8e54c4c629c7d309a013c2b415e447f4ebf9ab5883bf425d1ba734386b387d85d168f8267c0ca90ba1418c09d38ba536b906b9aad64f6031a650dfcd3782a06caf5becc2dd55ef0ffe0e70f59ad00aa8d46c56b5c3fca8e61f4bb50f3da8b583ab52fe255d57439ec37260a9e3a2ed49b07e62c46e57258ba65ea25de861a15ad801ec2c3f0a4963d5ffe42710341a2a85efd6070cc88002b0accd1eb4d65d3d794fd892af5005f8da9e45e0f884ce312ffa31ab66afaf07c0a786f6784da2388f74006c0879861", 0xeb}, {&(0x7f00000017c0)="8717cbb70875fcf3842f4a976c995810fb7a112c6d9e68fbafab0faca3eea718abc28a2b4423bce8f86ffdb9f28da753c05c792239c618029a85bdc561fc54deb91d5b0bed5e3d82ad1698549c7af0", 0x4f}, {&(0x7f0000001840)="80202f08f80db1ee7df78cfa88966f61c89941f580a81dad8b41b2eac33edfe4d37d6371f4401ce011c0019531b9d2d2b2bbdd286aebd0997a6d54800164673bbc92f55db356c7374c3510ee681922adeed18b7d73c6498c4f570d23b96c96329706733941a4a8a994e368432e549ba50d1cac25c293446b2c40bb7ec1be66b563b6c36c7911349e55b8a9cb2b6c895d4c", 0x91}], 0x6, &(0x7f0000001980)=[{0xc0, 0x10, 0x5, "96e16f364d0b44bbf791db63d924ff3992b08e95325469d6c321790e0f014298dc8aeb9046495c4eafcfc67cc644e721fb90b21580d179a7e2ac7f54f6325c9654b90bbd839c982ded1e106ff9bf1e799e4d7d0434eec345f6eac955d48457a9b44e54199d64a0c7b0af2f6cf21af01513d3472cbe58678bcc4a810a5c12d7db84438e3412e6fcafdd5da6619a5108a994d56ea4b2e67adeeeb13809b8c894c374b64d6c17ab0855bd2da6c6803be0"}, {0x1010, 0x109, 0x0, "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"}], 0x10d0}}, {{&(0x7f0000002a80)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b00)="1ba123cf58a37017e15cbabf4d3b7b6767ae9632369ee93b38603dc7f5327990ff9d598793e5ad5e1182e06042fb19878422e35edb178895ebfdccb5251b2329a6736978d5845b23fc7f779ce3f3b106e07571523c9e434cfbb865fd97e8500ad6c8bc36e78a5ece53b572f7468a25b880abadb4888ca95a403455609271b25a314c91e4b6c1df763829ef8e24e47c9775cb2832142e", 0x96}, {&(0x7f0000002bc0)="4a9e8deccdf4fb2fca856323230b78372725cf5168eab4f610580919f5f0ade80b89f207d65c7e64d869a64dc0fe36f25fb2674efa1bb7a749bdc74c004c1f160be630dd81f7355c1712711043fcfc86eef98d24e560e2e38f72515500a9dc86e2ff361af1645d57a76302949a9747c1b7caf7054490652eca0c8ff15bf94be560388aa0dd8fc84b1e5d401e3f1ecf11f69995d85f0ab2873d7b2ac23a6224def135aa3b0d676313c88f43202a8aba0b998c811a6bb3def882171434cb58af5da9763e92b2568efc2cdd31fb7c981c0384b8b4aa21794c43b25cc5fe3171c9087f46aea1821f77638f9e", 0xea}, {&(0x7f0000002cc0)="009d22f9e5c812c40b17325a26bcb56d3afd96e9d79b59830a6a996c821e6a98d92404074bbca2a58218989eada551d6749e742401bbed74b2615192ca3000186042dfda90d08c65b3da6195e0392a0a7413788c1a08d4a924e18fcdb27c6028ec623d2eb47e83a918db2607d30b8a50cedc82de097b1907cb89cd193f195ab85041a63203599d13ba72508f4d30e100a8555c371e232baab453d575a1a5d27c1a9653f4c861b026a0cdae0cdb5dc7e7803017750238ce56edb253c588684aef3f73f60a9df3fa524c", 0xc9}, {&(0x7f0000002dc0)="b4ad6ba48459b71b388fe23201ce801c5170b7a5e2390b1769c4790e19be3c925f14d0e5b7d17d414baee724b279e99d3aefabac8f824be8df88aaba0aa39947ed795eb35feb9aeeae0be436edb28a9bd3fc411191377c0e85bb8f0a8aeadf0abfbebcade4d4dd6a05e2a4f3b058e054d59530b0a5c753e71c4846122c320cff4753bcaa72", 0x85}, {&(0x7f0000002e80)="3a23423ec0e426f27996fb0a80ad3d671b3eec51419aacb7ffc6aa9e84d7addbbca04c78a448a5ab6bf62e96c80603a7ad5ae403bc", 0x35}, {&(0x7f0000002ec0)="22580e4b66394d2f240b2ffa911e4aba359bf0df369ab40e9f6d1e47625c9d933ceda61f9c", 0x25}, {&(0x7f0000002f00)="25a5e2a75cfde4c07deba1c3e4061f1003271e2f38d042c616de68f4cbc556f640b8e55fb0a3375788494803ec451081133dd4739730998cab", 0x39}], 0x7, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x108}}], 0x3, 0x54) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5}, 0x1) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000003300)=0x80, &(0x7f0000003340)=@qipcrtr, 0x0, 0x80000, 0x1}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000003280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000003240), r0, 0x1, 0x0, 0x1, {0x0, r6}}, 0x2) (async) wait4(r3, &(0x7f00000032c0), 0x1, &(0x7f00000033c0)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x3) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev, @null, 0x0, [@remote, @remote, @remote, @null, @rose]}, &(0x7f0000000180)=0x40, 0x80000) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000015c0)=ANY=[@ANYBLOB="01000000011b000018000000", @ANYRES32, @ANYBLOB="99000000000000002e2f66696c653000"]) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r9}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) (async) syz_io_uring_submit(r10, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r11}, 0x1) (async) syz_io_uring_submit(r10, r2, &(0x7f0000003200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x2, &(0x7f00000031c0)="34b0f41ae91b86cddcb0313d57e3bd6975d7ae3cf7096e6dfa68e0f1ebf49bc2cfc983cb9777cb8e05a1d99bffe1568347b9079f12d82da94add874698a88bc1", 0x1ff, 0x0, 0x1, {0x3}}, 0xffffffff) (async) dup3(r8, 0xffffffffffffffff, 0x0) (async) sendmmsg(r7, &(0x7f0000003100)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x68, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="c0ddf88799fd476cd2ba8f10cba8588fa0c005ec9b30e1cd4ccf3209a108587ed35c67883bad2e8966e1d9345cbc8ea7bff309a2bf53d2fbea3c1a4b76b30cac350abd96940dea69ad49fb5b0dfb8130eb6397e6b466fc0a0e9edd0958df72a054883a373916988f3dba9146449d04577dd78b705ed1c7692a720f3695322bac6c8ab1e3020bac29bdde181d69cbe88f78392835db74133d604b2add66166a4956a52196387c2ef368c891599f4b06f410a27ab51c6f2288e4c8a9d83463adb71ab0b586aec9008bfa468db8dac3fb9ba9088caa75d2ef50901eff", 0xdb}, {&(0x7f00000013c0)="440c37f2bda2dd48f59435ee6c25e4a21aa9631956c1191b1fa9582326a30c5b08b90aa21524708d8a35bbdabbaa72d46ef8e3d47ce92c44eabc7396e487a3d9492c023f9a89cbdce06a0a21a2b06acd51e9b94635dbdd2b3d0ff1c72b8742fbff2e8b0b2db3846e6c8d81df1b514cb1382e1e782be4cd0be4c6bb23ef0c049815a4d0d531d3123719d9019f9049d87e4f69ac16a28d31ec56cdc311a083498ebb77a58f3d8f279a015f9dddd50748649c61ca35b71e4a55", 0xb8}, {&(0x7f0000001480)="3ec1ea88aa4d1738f4bb97d4b7dcfc1d41e5ba1c22918d2a2481e75a092ac6243645a81e89b0b046645c0b921654c4d6df43b3219ff511cc4d98f6900284802c62e4f4b2261001ccf0f545600625675cfbf7ff2539111aa9f98298eacd346f28f9cc4464a5", 0x65}], 0x4}}, {{&(0x7f0000001500)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001580)="1325a8695017e7845f6773f2b282cad0b2373ee4eb", 0x15}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="61e1fcead61ee3b7960fef3076684bc1aeb765cc83e2cc1c97a149cb7b8663f471a0241609b84d8f71cdd1740db62986f7368a8f678df80b17ffc5e21577b6804b33bab45c28b665d5c1cd03f40466a933a8315131fd23c5149fde3a6076bdaf9c46fc40d8357b6aae31fde3fa95eb9cb7284bbb5510d16b87cc4c2b35beed3c609acfe60ada397ad0db70fe", 0x8c}, {&(0x7f00000016c0)="9afb4a3e998fc3e616655bbafdf2996781b57d8a4622e02d88d2d5badc59807e36e515d8e54c4c629c7d309a013c2b415e447f4ebf9ab5883bf425d1ba734386b387d85d168f8267c0ca90ba1418c09d38ba536b906b9aad64f6031a650dfcd3782a06caf5becc2dd55ef0ffe0e70f59ad00aa8d46c56b5c3fca8e61f4bb50f3da8b583ab52fe255d57439ec37260a9e3a2ed49b07e62c46e57258ba65ea25de861a15ad801ec2c3f0a4963d5ffe42710341a2a85efd6070cc88002b0accd1eb4d65d3d794fd892af5005f8da9e45e0f884ce312ffa31ab66afaf07c0a786f6784da2388f74006c0879861", 0xeb}, {&(0x7f00000017c0)="8717cbb70875fcf3842f4a976c995810fb7a112c6d9e68fbafab0faca3eea718abc28a2b4423bce8f86ffdb9f28da753c05c792239c618029a85bdc561fc54deb91d5b0bed5e3d82ad1698549c7af0", 0x4f}, {&(0x7f0000001840)="80202f08f80db1ee7df78cfa88966f61c89941f580a81dad8b41b2eac33edfe4d37d6371f4401ce011c0019531b9d2d2b2bbdd286aebd0997a6d54800164673bbc92f55db356c7374c3510ee681922adeed18b7d73c6498c4f570d23b96c96329706733941a4a8a994e368432e549ba50d1cac25c293446b2c40bb7ec1be66b563b6c36c7911349e55b8a9cb2b6c895d4c", 0x91}], 0x6, &(0x7f0000001980)=[{0xc0, 0x10, 0x5, "96e16f364d0b44bbf791db63d924ff3992b08e95325469d6c321790e0f014298dc8aeb9046495c4eafcfc67cc644e721fb90b21580d179a7e2ac7f54f6325c9654b90bbd839c982ded1e106ff9bf1e799e4d7d0434eec345f6eac955d48457a9b44e54199d64a0c7b0af2f6cf21af01513d3472cbe58678bcc4a810a5c12d7db84438e3412e6fcafdd5da6619a5108a994d56ea4b2e67adeeeb13809b8c894c374b64d6c17ab0855bd2da6c6803be0"}, {0x1010, 0x109, 0x0, "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"}], 0x10d0}}, {{&(0x7f0000002a80)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b00)="1ba123cf58a37017e15cbabf4d3b7b6767ae9632369ee93b38603dc7f5327990ff9d598793e5ad5e1182e06042fb19878422e35edb178895ebfdccb5251b2329a6736978d5845b23fc7f779ce3f3b106e07571523c9e434cfbb865fd97e8500ad6c8bc36e78a5ece53b572f7468a25b880abadb4888ca95a403455609271b25a314c91e4b6c1df763829ef8e24e47c9775cb2832142e", 0x96}, {&(0x7f0000002bc0)="4a9e8deccdf4fb2fca856323230b78372725cf5168eab4f610580919f5f0ade80b89f207d65c7e64d869a64dc0fe36f25fb2674efa1bb7a749bdc74c004c1f160be630dd81f7355c1712711043fcfc86eef98d24e560e2e38f72515500a9dc86e2ff361af1645d57a76302949a9747c1b7caf7054490652eca0c8ff15bf94be560388aa0dd8fc84b1e5d401e3f1ecf11f69995d85f0ab2873d7b2ac23a6224def135aa3b0d676313c88f43202a8aba0b998c811a6bb3def882171434cb58af5da9763e92b2568efc2cdd31fb7c981c0384b8b4aa21794c43b25cc5fe3171c9087f46aea1821f77638f9e", 0xea}, {&(0x7f0000002cc0)="009d22f9e5c812c40b17325a26bcb56d3afd96e9d79b59830a6a996c821e6a98d92404074bbca2a58218989eada551d6749e742401bbed74b2615192ca3000186042dfda90d08c65b3da6195e0392a0a7413788c1a08d4a924e18fcdb27c6028ec623d2eb47e83a918db2607d30b8a50cedc82de097b1907cb89cd193f195ab85041a63203599d13ba72508f4d30e100a8555c371e232baab453d575a1a5d27c1a9653f4c861b026a0cdae0cdb5dc7e7803017750238ce56edb253c588684aef3f73f60a9df3fa524c", 0xc9}, {&(0x7f0000002dc0)="b4ad6ba48459b71b388fe23201ce801c5170b7a5e2390b1769c4790e19be3c925f14d0e5b7d17d414baee724b279e99d3aefabac8f824be8df88aaba0aa39947ed795eb35feb9aeeae0be436edb28a9bd3fc411191377c0e85bb8f0a8aeadf0abfbebcade4d4dd6a05e2a4f3b058e054d59530b0a5c753e71c4846122c320cff4753bcaa72", 0x85}, {&(0x7f0000002e80)="3a23423ec0e426f27996fb0a80ad3d671b3eec51419aacb7ffc6aa9e84d7addbbca04c78a448a5ab6bf62e96c80603a7ad5ae403bc", 0x35}, {&(0x7f0000002ec0)="22580e4b66394d2f240b2ffa911e4aba359bf0df369ab40e9f6d1e47625c9d933ceda61f9c", 0x25}, {&(0x7f0000002f00)="25a5e2a75cfde4c07deba1c3e4061f1003271e2f38d042c616de68f4cbc556f640b8e55fb0a3375788494803ec451081133dd4739730998cab", 0x39}], 0x7, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x108}}], 0x3, 0x54) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:16 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x400e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 621.287430][T27359] loop0: detected capacity change from 0 to 264192 [ 621.306382][T27363] input: syz0 as /devices/virtual/input/input4776 04:47:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x65e8) [ 621.329083][T27359] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4938) [ 621.348803][T27362] input: syz0 as /devices/virtual/input/input4777 04:47:16 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x400f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6600) [ 621.452044][T27377] input: syz0 as /devices/virtual/input/input4778 [ 621.493539][T27379] input: syz0 as /devices/virtual/input/input4779 04:47:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4950) [ 621.576148][T27384] loop0: detected capacity change from 0 to 264192 [ 621.578011][T27383] input: syz0 as /devices/virtual/input/input4780 [ 621.583517][T27384] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 621.632881][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 621.676614][T27386] input: syz0 as /devices/virtual/input/input4781 04:47:17 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_clone(0xc0008200, &(0x7f0000000100)="3f5e52773b0beb5d41fac3106eb7a71dfbfe4450f5bd897557", 0x19, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)="8b234e137e1c500335deb20e24fa4d8aa9f28233e7900cb03a19c8328b1b4fbbcecf3465efb6fabac8726d15f382db1e0b39b4e926e183e29955f15d0a9cb5704f92b103653da8cb1ce9e7195a9cbd5bdcf511abedcbc72b4024811e64e6c0351f3e54d1b03d047f95ce8ed91818e2582853d0d22cd55e7ca6999ab7e8bb7a9116635f688b231d874d237174620cc96d7c8ab939ca07175c9188641449802564523de01c9824b6ba9f493dc9fb84d548f93df4b787662e18bef6e68cea35ac58b57eb04e78c6e5d45bee1b979a4e9067297a8952f1ffd5cbcd092d130b4443d4220e") r5 = syz_open_dev$dri(&(0x7f0000000200), 0xf56, 0x1156c0) r6 = pidfd_getfd(r4, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000240)=[r6], 0x1, 0x0, 0x1}, 0xdb) 04:47:17 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x20000000) 04:47:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6618) 04:47:17 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40100000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4968) 04:47:17 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5}, 0x1) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000003300)=0x80, &(0x7f0000003340)=@qipcrtr, 0x0, 0x80000, 0x1}, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000003280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000003240), r0, 0x1, 0x0, 0x1, {0x0, r6}}, 0x2) (async) wait4(r3, &(0x7f00000032c0), 0x1, &(0x7f00000033c0)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x3) r7 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev, @null, 0x0, [@remote, @remote, @remote, @null, @rose]}, &(0x7f0000000180)=0x40, 0x80000) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000015c0)=ANY=[@ANYBLOB="01000000011b000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="99000000000000002e2f66696c653000"]) (async) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r9}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) (async) r11 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r10, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r11}, 0x1) (async) syz_io_uring_submit(r10, r2, &(0x7f0000003200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x2, &(0x7f00000031c0)="34b0f41ae91b86cddcb0313d57e3bd6975d7ae3cf7096e6dfa68e0f1ebf49bc2cfc983cb9777cb8e05a1d99bffe1568347b9079f12d82da94add874698a88bc1", 0x1ff, 0x0, 0x1, {0x3}}, 0xffffffff) (async) dup3(r8, 0xffffffffffffffff, 0x0) sendmmsg(r7, &(0x7f0000003100)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x68, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="c0ddf88799fd476cd2ba8f10cba8588fa0c005ec9b30e1cd4ccf3209a108587ed35c67883bad2e8966e1d9345cbc8ea7bff309a2bf53d2fbea3c1a4b76b30cac350abd96940dea69ad49fb5b0dfb8130eb6397e6b466fc0a0e9edd0958df72a054883a373916988f3dba9146449d04577dd78b705ed1c7692a720f3695322bac6c8ab1e3020bac29bdde181d69cbe88f78392835db74133d604b2add66166a4956a52196387c2ef368c891599f4b06f410a27ab51c6f2288e4c8a9d83463adb71ab0b586aec9008bfa468db8dac3fb9ba9088caa75d2ef50901eff", 0xdb}, {&(0x7f00000013c0)="440c37f2bda2dd48f59435ee6c25e4a21aa9631956c1191b1fa9582326a30c5b08b90aa21524708d8a35bbdabbaa72d46ef8e3d47ce92c44eabc7396e487a3d9492c023f9a89cbdce06a0a21a2b06acd51e9b94635dbdd2b3d0ff1c72b8742fbff2e8b0b2db3846e6c8d81df1b514cb1382e1e782be4cd0be4c6bb23ef0c049815a4d0d531d3123719d9019f9049d87e4f69ac16a28d31ec56cdc311a083498ebb77a58f3d8f279a015f9dddd50748649c61ca35b71e4a55", 0xb8}, {&(0x7f0000001480)="3ec1ea88aa4d1738f4bb97d4b7dcfc1d41e5ba1c22918d2a2481e75a092ac6243645a81e89b0b046645c0b921654c4d6df43b3219ff511cc4d98f6900284802c62e4f4b2261001ccf0f545600625675cfbf7ff2539111aa9f98298eacd346f28f9cc4464a5", 0x65}], 0x4}}, {{&(0x7f0000001500)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001580)="1325a8695017e7845f6773f2b282cad0b2373ee4eb", 0x15}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="61e1fcead61ee3b7960fef3076684bc1aeb765cc83e2cc1c97a149cb7b8663f471a0241609b84d8f71cdd1740db62986f7368a8f678df80b17ffc5e21577b6804b33bab45c28b665d5c1cd03f40466a933a8315131fd23c5149fde3a6076bdaf9c46fc40d8357b6aae31fde3fa95eb9cb7284bbb5510d16b87cc4c2b35beed3c609acfe60ada397ad0db70fe", 0x8c}, {&(0x7f00000016c0)="9afb4a3e998fc3e616655bbafdf2996781b57d8a4622e02d88d2d5badc59807e36e515d8e54c4c629c7d309a013c2b415e447f4ebf9ab5883bf425d1ba734386b387d85d168f8267c0ca90ba1418c09d38ba536b906b9aad64f6031a650dfcd3782a06caf5becc2dd55ef0ffe0e70f59ad00aa8d46c56b5c3fca8e61f4bb50f3da8b583ab52fe255d57439ec37260a9e3a2ed49b07e62c46e57258ba65ea25de861a15ad801ec2c3f0a4963d5ffe42710341a2a85efd6070cc88002b0accd1eb4d65d3d794fd892af5005f8da9e45e0f884ce312ffa31ab66afaf07c0a786f6784da2388f74006c0879861", 0xeb}, {&(0x7f00000017c0)="8717cbb70875fcf3842f4a976c995810fb7a112c6d9e68fbafab0faca3eea718abc28a2b4423bce8f86ffdb9f28da753c05c792239c618029a85bdc561fc54deb91d5b0bed5e3d82ad1698549c7af0", 0x4f}, {&(0x7f0000001840)="80202f08f80db1ee7df78cfa88966f61c89941f580a81dad8b41b2eac33edfe4d37d6371f4401ce011c0019531b9d2d2b2bbdd286aebd0997a6d54800164673bbc92f55db356c7374c3510ee681922adeed18b7d73c6498c4f570d23b96c96329706733941a4a8a994e368432e549ba50d1cac25c293446b2c40bb7ec1be66b563b6c36c7911349e55b8a9cb2b6c895d4c", 0x91}], 0x6, &(0x7f0000001980)=[{0xc0, 0x10, 0x5, "96e16f364d0b44bbf791db63d924ff3992b08e95325469d6c321790e0f014298dc8aeb9046495c4eafcfc67cc644e721fb90b21580d179a7e2ac7f54f6325c9654b90bbd839c982ded1e106ff9bf1e799e4d7d0434eec345f6eac955d48457a9b44e54199d64a0c7b0af2f6cf21af01513d3472cbe58678bcc4a810a5c12d7db84438e3412e6fcafdd5da6619a5108a994d56ea4b2e67adeeeb13809b8c894c374b64d6c17ab0855bd2da6c6803be0"}, {0x1010, 0x109, 0x0, "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"}], 0x10d0}}, {{&(0x7f0000002a80)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b00)="1ba123cf58a37017e15cbabf4d3b7b6767ae9632369ee93b38603dc7f5327990ff9d598793e5ad5e1182e06042fb19878422e35edb178895ebfdccb5251b2329a6736978d5845b23fc7f779ce3f3b106e07571523c9e434cfbb865fd97e8500ad6c8bc36e78a5ece53b572f7468a25b880abadb4888ca95a403455609271b25a314c91e4b6c1df763829ef8e24e47c9775cb2832142e", 0x96}, {&(0x7f0000002bc0)="4a9e8deccdf4fb2fca856323230b78372725cf5168eab4f610580919f5f0ade80b89f207d65c7e64d869a64dc0fe36f25fb2674efa1bb7a749bdc74c004c1f160be630dd81f7355c1712711043fcfc86eef98d24e560e2e38f72515500a9dc86e2ff361af1645d57a76302949a9747c1b7caf7054490652eca0c8ff15bf94be560388aa0dd8fc84b1e5d401e3f1ecf11f69995d85f0ab2873d7b2ac23a6224def135aa3b0d676313c88f43202a8aba0b998c811a6bb3def882171434cb58af5da9763e92b2568efc2cdd31fb7c981c0384b8b4aa21794c43b25cc5fe3171c9087f46aea1821f77638f9e", 0xea}, {&(0x7f0000002cc0)="009d22f9e5c812c40b17325a26bcb56d3afd96e9d79b59830a6a996c821e6a98d92404074bbca2a58218989eada551d6749e742401bbed74b2615192ca3000186042dfda90d08c65b3da6195e0392a0a7413788c1a08d4a924e18fcdb27c6028ec623d2eb47e83a918db2607d30b8a50cedc82de097b1907cb89cd193f195ab85041a63203599d13ba72508f4d30e100a8555c371e232baab453d575a1a5d27c1a9653f4c861b026a0cdae0cdb5dc7e7803017750238ce56edb253c588684aef3f73f60a9df3fa524c", 0xc9}, {&(0x7f0000002dc0)="b4ad6ba48459b71b388fe23201ce801c5170b7a5e2390b1769c4790e19be3c925f14d0e5b7d17d414baee724b279e99d3aefabac8f824be8df88aaba0aa39947ed795eb35feb9aeeae0be436edb28a9bd3fc411191377c0e85bb8f0a8aeadf0abfbebcade4d4dd6a05e2a4f3b058e054d59530b0a5c753e71c4846122c320cff4753bcaa72", 0x85}, {&(0x7f0000002e80)="3a23423ec0e426f27996fb0a80ad3d671b3eec51419aacb7ffc6aa9e84d7addbbca04c78a448a5ab6bf62e96c80603a7ad5ae403bc", 0x35}, {&(0x7f0000002ec0)="22580e4b66394d2f240b2ffa911e4aba359bf0df369ab40e9f6d1e47625c9d933ceda61f9c", 0x25}, {&(0x7f0000002f00)="25a5e2a75cfde4c07deba1c3e4061f1003271e2f38d042c616de68f4cbc556f640b8e55fb0a3375788494803ec451081133dd4739730998cab", 0x39}], 0x7, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x108}}], 0x3, 0x54) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 622.017619][T27396] input: syz0 as /devices/virtual/input/input4782 [ 622.035059][T27397] input: syz0 as /devices/virtual/input/input4783 [ 622.078942][T27399] loop0: detected capacity change from 0 to 264192 [ 622.080910][T27399] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4980) 04:47:17 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40110000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6630) 04:47:17 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000140)=0x7, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 622.208157][T27413] input: syz0 as /devices/virtual/input/input4784 [ 622.210979][T27414] loop0: detected capacity change from 0 to 264192 04:47:17 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40120000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4998) [ 622.215482][T27414] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 622.313758][T27421] loop0: detected capacity change from 0 to 264192 [ 622.330471][T27421] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 622.352444][T27422] input: syz0 as /devices/virtual/input/input4785 [ 622.356481][T27424] input: syz0 as /devices/virtual/input/input4786 04:47:17 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x20000000000000) 04:47:17 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000140)=0x7, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:17 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40130000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x49b0) 04:47:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6648) 04:47:17 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_clone(0xc0008200, &(0x7f0000000100)="3f5e52773b0beb5d41fac3106eb7a71dfbfe4450f5bd897557", 0x19, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)="8b234e137e1c500335deb20e24fa4d8aa9f28233e7900cb03a19c8328b1b4fbbcecf3465efb6fabac8726d15f382db1e0b39b4e926e183e29955f15d0a9cb5704f92b103653da8cb1ce9e7195a9cbd5bdcf511abedcbc72b4024811e64e6c0351f3e54d1b03d047f95ce8ed91818e2582853d0d22cd55e7ca6999ab7e8bb7a9116635f688b231d874d237174620cc96d7c8ab939ca07175c9188641449802564523de01c9824b6ba9f493dc9fb84d548f93df4b787662e18bef6e68cea35ac58b57eb04e78c6e5d45bee1b979a4e9067297a8952f1ffd5cbcd092d130b4443d4220e") r5 = syz_open_dev$dri(&(0x7f0000000200), 0xf56, 0x1156c0) r6 = pidfd_getfd(r4, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000240)=[r6], 0x1, 0x0, 0x1}, 0xdb) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_clone(0xc0008200, &(0x7f0000000100)="3f5e52773b0beb5d41fac3106eb7a71dfbfe4450f5bd897557", 0x19, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)="8b234e137e1c500335deb20e24fa4d8aa9f28233e7900cb03a19c8328b1b4fbbcecf3465efb6fabac8726d15f382db1e0b39b4e926e183e29955f15d0a9cb5704f92b103653da8cb1ce9e7195a9cbd5bdcf511abedcbc72b4024811e64e6c0351f3e54d1b03d047f95ce8ed91818e2582853d0d22cd55e7ca6999ab7e8bb7a9116635f688b231d874d237174620cc96d7c8ab939ca07175c9188641449802564523de01c9824b6ba9f493dc9fb84d548f93df4b787662e18bef6e68cea35ac58b57eb04e78c6e5d45bee1b979a4e9067297a8952f1ffd5cbcd092d130b4443d4220e") (async) syz_open_dev$dri(&(0x7f0000000200), 0xf56, 0x1156c0) (async) pidfd_getfd(r4, r5, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000240)=[r6], 0x1, 0x0, 0x1}, 0xdb) (async) 04:47:17 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000140)=0x7, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 622.465988][T27428] loop0: detected capacity change from 0 to 264192 [ 622.489631][T27428] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:17 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40140000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 622.516840][T27438] input: syz0 as /devices/virtual/input/input4787 04:47:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6660) 04:47:17 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r0, 0x0) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000100)=0x60) syz_io_uring_submit(r3, 0x0, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r4, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="f72a5ffd378f3faf4ae91e201c86980e11312838c20df9d0d735d3521fd65fa09d2e473b48748905ddf540b39b282a035183255969c9f6e536ecc2f3a8acb9acc9e1980dd8a01c077e0b301d0acd92ab9d3c356f22d4c55a7e0f2ad917218361ff290d7ccc4b94b94cae59725437190dc630a9e5ae4472f179875710b424e734a3b1271ddb9619c72efd66c649ad92f1aae260041eb2ac51a438e0ceb08d709e0cee7993a92bdd6cd67e42fa3c3630b6cc6c93329f8bd715adb070781d4256fee5692be386b7ff6c8fb8c93ea477a2", 0xcf}, {&(0x7f00000003c0)="b194a4dfa9cc644ef29d50408986c2baaac93c8a441ec8eb89f0c6f433cde786b6b259222820eb54ef3631cc4a7f1006e646fd7b71dacdbec45db6b6ce32e060141d986a70b9c709183b3eb0407d5fc1a39b82239da412295da0", 0x5a}, {&(0x7f0000000440)="e89233b86a7f36b6e00b52191e8ef854d6ae9f28f7e96a97b5df0f4f57fffa2812f424ee81d1d8a805", 0x29}, {&(0x7f0000000480)="f6623d114523f4359d83dbf88e05bf50c1df2a23af76a13cd9999c4222ffcb370e4aa3e357dd1283f9f74ff9f7174ea3242561032a08004a83d0b159ace3e962bb0d1926e4f50457072aab88ce05511e92f47238224695468d10dd37c5a1df3f988affd05aa8f0b456a73b396c9cad9430b5814b1a3022e24526a3f89e6ed78a3d5d3e9d7db890e21e6334aacbaf921e99d915c190d60c7cb9553eadc7ea161bd6c15efa092905", 0xa7}, {&(0x7f0000000540)="fd8ff790a6d7b376ff700bc2cd9edead1aeeee0a1126dd472e936ca6df536fa7f94c69c3e480bfca5dc0ee85adcffd6a6c46a9e665ad2b9b030522e3c73a8a5eb22347bf88a555a25bc2186b6b9830ceef2f2c48c5d22b6b08ca203c532125111188f3ef18a6c47dfa4c22774b2cf8ab7dacd0c3d8116f973ecbc1debedd854e22a21f18407fd23774a6", 0x8a}], 0x5, &(0x7f0000000680)=[{0xf0, 0x3a, 0x40, "0ecd0ca10e2224edb8d7b813066d889fc5c3202a7379dcf00607de2f2b36b377d3384b541112d9a4968374fb5193cfa30c978a52d6639b192db3f4f3bd49559db6eecb583fbddb3f6a279cd59dd3eaef304760199500d110854f049061ce264ab3ce7e4f9f25e432aa83462d11580cf115c775bc37b41461123da8011ff5f6cdfd5574edb12495ad877da6d34fcb54e938d7c65873f84f50c6b1b7b682d10053e483a82f760b87ae8b0f957055741fced0eda8997993ad87d20f9baebfd622ecdad21f52b195ac3fcafdea0c2288e13a3aaa805171ba9081cb4ffd0753e5"}, {0x58, 0x0, 0x7, "22bff92178c41ec0265df496295cbb0503ae72315e0dca8c4a55d303fa54585aa3143f33314147f9f002f1fa22e0fbcdf2b15d5f0968ab99e5e8b755c8f754d57e0bc62ef00a60d7"}], 0x148}, 0x0, 0x40000}, 0x607e) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = pidfd_open(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x688b, 0xd32, 0x1, 0x0, 0x0) 04:47:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x49c8) 04:47:17 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40150000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 622.532957][T27440] input: syz0 as /devices/virtual/input/input4788 [ 622.726497][T27453] input: syz0 as /devices/virtual/input/input4789 [ 622.731416][T27462] input: syz0 as /devices/virtual/input/input4790 [ 622.784182][T27469] loop0: detected capacity change from 0 to 264192 [ 622.812231][T27469] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:18 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x100000000000000) 04:47:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6678) 04:47:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x49e0) 04:47:18 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40160000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 623.073616][T27473] input: syz0 as /devices/virtual/input/input4791 [ 623.105073][T27477] input: syz0 as /devices/virtual/input/input4792 [ 623.112186][T27478] loop0: detected capacity change from 0 to 264192 [ 623.119244][T27478] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 623.579819][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.579872][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 04:47:20 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) (async) syz_clone(0xc0008200, &(0x7f0000000100)="3f5e52773b0beb5d41fac3106eb7a71dfbfe4450f5bd897557", 0x19, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)="8b234e137e1c500335deb20e24fa4d8aa9f28233e7900cb03a19c8328b1b4fbbcecf3465efb6fabac8726d15f382db1e0b39b4e926e183e29955f15d0a9cb5704f92b103653da8cb1ce9e7195a9cbd5bdcf511abedcbc72b4024811e64e6c0351f3e54d1b03d047f95ce8ed91818e2582853d0d22cd55e7ca6999ab7e8bb7a9116635f688b231d874d237174620cc96d7c8ab939ca07175c9188641449802564523de01c9824b6ba9f493dc9fb84d548f93df4b787662e18bef6e68cea35ac58b57eb04e78c6e5d45bee1b979a4e9067297a8952f1ffd5cbcd092d130b4443d4220e") (async) r5 = syz_open_dev$dri(&(0x7f0000000200), 0xf56, 0x1156c0) r6 = pidfd_getfd(r4, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000240)=[r6], 0x1, 0x0, 0x1}, 0xdb) 04:47:20 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40170000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6690) 04:47:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x49f8) 04:47:20 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x700000000000000) 04:47:20 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r0, 0x0) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000100)=0x60) syz_io_uring_submit(r3, 0x0, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r4, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="f72a5ffd378f3faf4ae91e201c86980e11312838c20df9d0d735d3521fd65fa09d2e473b48748905ddf540b39b282a035183255969c9f6e536ecc2f3a8acb9acc9e1980dd8a01c077e0b301d0acd92ab9d3c356f22d4c55a7e0f2ad917218361ff290d7ccc4b94b94cae59725437190dc630a9e5ae4472f179875710b424e734a3b1271ddb9619c72efd66c649ad92f1aae260041eb2ac51a438e0ceb08d709e0cee7993a92bdd6cd67e42fa3c3630b6cc6c93329f8bd715adb070781d4256fee5692be386b7ff6c8fb8c93ea477a2", 0xcf}, {&(0x7f00000003c0)="b194a4dfa9cc644ef29d50408986c2baaac93c8a441ec8eb89f0c6f433cde786b6b259222820eb54ef3631cc4a7f1006e646fd7b71dacdbec45db6b6ce32e060141d986a70b9c709183b3eb0407d5fc1a39b82239da412295da0", 0x5a}, {&(0x7f0000000440)="e89233b86a7f36b6e00b52191e8ef854d6ae9f28f7e96a97b5df0f4f57fffa2812f424ee81d1d8a805", 0x29}, {&(0x7f0000000480)="f6623d114523f4359d83dbf88e05bf50c1df2a23af76a13cd9999c4222ffcb370e4aa3e357dd1283f9f74ff9f7174ea3242561032a08004a83d0b159ace3e962bb0d1926e4f50457072aab88ce05511e92f47238224695468d10dd37c5a1df3f988affd05aa8f0b456a73b396c9cad9430b5814b1a3022e24526a3f89e6ed78a3d5d3e9d7db890e21e6334aacbaf921e99d915c190d60c7cb9553eadc7ea161bd6c15efa092905", 0xa7}, {&(0x7f0000000540)="fd8ff790a6d7b376ff700bc2cd9edead1aeeee0a1126dd472e936ca6df536fa7f94c69c3e480bfca5dc0ee85adcffd6a6c46a9e665ad2b9b030522e3c73a8a5eb22347bf88a555a25bc2186b6b9830ceef2f2c48c5d22b6b08ca203c532125111188f3ef18a6c47dfa4c22774b2cf8ab7dacd0c3d8116f973ecbc1debedd854e22a21f18407fd23774a6", 0x8a}], 0x5, &(0x7f0000000680)=[{0xf0, 0x3a, 0x40, "0ecd0ca10e2224edb8d7b813066d889fc5c3202a7379dcf00607de2f2b36b377d3384b541112d9a4968374fb5193cfa30c978a52d6639b192db3f4f3bd49559db6eecb583fbddb3f6a279cd59dd3eaef304760199500d110854f049061ce264ab3ce7e4f9f25e432aa83462d11580cf115c775bc37b41461123da8011ff5f6cdfd5574edb12495ad877da6d34fcb54e938d7c65873f84f50c6b1b7b682d10053e483a82f760b87ae8b0f957055741fced0eda8997993ad87d20f9baebfd622ecdad21f52b195ac3fcafdea0c2288e13a3aaa805171ba9081cb4ffd0753e5"}, {0x58, 0x0, 0x7, "22bff92178c41ec0265df496295cbb0503ae72315e0dca8c4a55d303fa54585aa3143f33314147f9f002f1fa22e0fbcdf2b15d5f0968ab99e5e8b755c8f754d57e0bc62ef00a60d7"}], 0x148}, 0x0, 0x40000}, 0x607e) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = pidfd_open(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x688b, 0xd32, 0x1, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r0, 0x0) (async) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000100)=0x60) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r4, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="f72a5ffd378f3faf4ae91e201c86980e11312838c20df9d0d735d3521fd65fa09d2e473b48748905ddf540b39b282a035183255969c9f6e536ecc2f3a8acb9acc9e1980dd8a01c077e0b301d0acd92ab9d3c356f22d4c55a7e0f2ad917218361ff290d7ccc4b94b94cae59725437190dc630a9e5ae4472f179875710b424e734a3b1271ddb9619c72efd66c649ad92f1aae260041eb2ac51a438e0ceb08d709e0cee7993a92bdd6cd67e42fa3c3630b6cc6c93329f8bd715adb070781d4256fee5692be386b7ff6c8fb8c93ea477a2", 0xcf}, {&(0x7f00000003c0)="b194a4dfa9cc644ef29d50408986c2baaac93c8a441ec8eb89f0c6f433cde786b6b259222820eb54ef3631cc4a7f1006e646fd7b71dacdbec45db6b6ce32e060141d986a70b9c709183b3eb0407d5fc1a39b82239da412295da0", 0x5a}, {&(0x7f0000000440)="e89233b86a7f36b6e00b52191e8ef854d6ae9f28f7e96a97b5df0f4f57fffa2812f424ee81d1d8a805", 0x29}, {&(0x7f0000000480)="f6623d114523f4359d83dbf88e05bf50c1df2a23af76a13cd9999c4222ffcb370e4aa3e357dd1283f9f74ff9f7174ea3242561032a08004a83d0b159ace3e962bb0d1926e4f50457072aab88ce05511e92f47238224695468d10dd37c5a1df3f988affd05aa8f0b456a73b396c9cad9430b5814b1a3022e24526a3f89e6ed78a3d5d3e9d7db890e21e6334aacbaf921e99d915c190d60c7cb9553eadc7ea161bd6c15efa092905", 0xa7}, {&(0x7f0000000540)="fd8ff790a6d7b376ff700bc2cd9edead1aeeee0a1126dd472e936ca6df536fa7f94c69c3e480bfca5dc0ee85adcffd6a6c46a9e665ad2b9b030522e3c73a8a5eb22347bf88a555a25bc2186b6b9830ceef2f2c48c5d22b6b08ca203c532125111188f3ef18a6c47dfa4c22774b2cf8ab7dacd0c3d8116f973ecbc1debedd854e22a21f18407fd23774a6", 0x8a}], 0x5, &(0x7f0000000680)=[{0xf0, 0x3a, 0x40, "0ecd0ca10e2224edb8d7b813066d889fc5c3202a7379dcf00607de2f2b36b377d3384b541112d9a4968374fb5193cfa30c978a52d6639b192db3f4f3bd49559db6eecb583fbddb3f6a279cd59dd3eaef304760199500d110854f049061ce264ab3ce7e4f9f25e432aa83462d11580cf115c775bc37b41461123da8011ff5f6cdfd5574edb12495ad877da6d34fcb54e938d7c65873f84f50c6b1b7b682d10053e483a82f760b87ae8b0f957055741fced0eda8997993ad87d20f9baebfd622ecdad21f52b195ac3fcafdea0c2288e13a3aaa805171ba9081cb4ffd0753e5"}, {0x58, 0x0, 0x7, "22bff92178c41ec0265df496295cbb0503ae72315e0dca8c4a55d303fa54585aa3143f33314147f9f002f1fa22e0fbcdf2b15d5f0968ab99e5e8b755c8f754d57e0bc62ef00a60d7"}], 0x148}, 0x0, 0x40000}, 0x607e) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r5, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r0, 0x688b, 0xd32, 0x1, 0x0, 0x0) (async) [ 624.867412][T27485] loop0: detected capacity change from 0 to 264192 [ 624.889926][T27485] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x66a8) 04:47:20 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40180000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 624.902791][T27490] input: syz0 as /devices/virtual/input/input4793 [ 624.924605][T27488] input: syz0 as /devices/virtual/input/input4794 04:47:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4a10) [ 625.049513][T27504] loop0: detected capacity change from 0 to 264192 [ 625.071692][T27504] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 625.084971][T27508] input: syz0 as /devices/virtual/input/input4795 04:47:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x66c0) 04:47:20 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40190000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 625.131640][T27512] input: syz0 as /devices/virtual/input/input4796 [ 625.170306][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4a28) [ 625.245366][T27517] loop0: detected capacity change from 0 to 264192 [ 625.245962][T27518] input: syz0 as /devices/virtual/input/input4797 [ 625.251955][T27517] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 625.291699][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 625.414698][T27520] input: syz0 as /devices/virtual/input/input4798 04:47:21 executing program 2: r0 = syz_io_uring_setup(0x1dff, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x66d8) 04:47:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4a40) 04:47:21 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x800000000000000) 04:47:21 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r0, 0x0) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000100)=0x60) syz_io_uring_submit(r3, 0x0, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r4, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="f72a5ffd378f3faf4ae91e201c86980e11312838c20df9d0d735d3521fd65fa09d2e473b48748905ddf540b39b282a035183255969c9f6e536ecc2f3a8acb9acc9e1980dd8a01c077e0b301d0acd92ab9d3c356f22d4c55a7e0f2ad917218361ff290d7ccc4b94b94cae59725437190dc630a9e5ae4472f179875710b424e734a3b1271ddb9619c72efd66c649ad92f1aae260041eb2ac51a438e0ceb08d709e0cee7993a92bdd6cd67e42fa3c3630b6cc6c93329f8bd715adb070781d4256fee5692be386b7ff6c8fb8c93ea477a2", 0xcf}, {&(0x7f00000003c0)="b194a4dfa9cc644ef29d50408986c2baaac93c8a441ec8eb89f0c6f433cde786b6b259222820eb54ef3631cc4a7f1006e646fd7b71dacdbec45db6b6ce32e060141d986a70b9c709183b3eb0407d5fc1a39b82239da412295da0", 0x5a}, {&(0x7f0000000440)="e89233b86a7f36b6e00b52191e8ef854d6ae9f28f7e96a97b5df0f4f57fffa2812f424ee81d1d8a805", 0x29}, {&(0x7f0000000480)="f6623d114523f4359d83dbf88e05bf50c1df2a23af76a13cd9999c4222ffcb370e4aa3e357dd1283f9f74ff9f7174ea3242561032a08004a83d0b159ace3e962bb0d1926e4f50457072aab88ce05511e92f47238224695468d10dd37c5a1df3f988affd05aa8f0b456a73b396c9cad9430b5814b1a3022e24526a3f89e6ed78a3d5d3e9d7db890e21e6334aacbaf921e99d915c190d60c7cb9553eadc7ea161bd6c15efa092905", 0xa7}, {&(0x7f0000000540)="fd8ff790a6d7b376ff700bc2cd9edead1aeeee0a1126dd472e936ca6df536fa7f94c69c3e480bfca5dc0ee85adcffd6a6c46a9e665ad2b9b030522e3c73a8a5eb22347bf88a555a25bc2186b6b9830ceef2f2c48c5d22b6b08ca203c532125111188f3ef18a6c47dfa4c22774b2cf8ab7dacd0c3d8116f973ecbc1debedd854e22a21f18407fd23774a6", 0x8a}], 0x5, &(0x7f0000000680)=[{0xf0, 0x3a, 0x40, "0ecd0ca10e2224edb8d7b813066d889fc5c3202a7379dcf00607de2f2b36b377d3384b541112d9a4968374fb5193cfa30c978a52d6639b192db3f4f3bd49559db6eecb583fbddb3f6a279cd59dd3eaef304760199500d110854f049061ce264ab3ce7e4f9f25e432aa83462d11580cf115c775bc37b41461123da8011ff5f6cdfd5574edb12495ad877da6d34fcb54e938d7c65873f84f50c6b1b7b682d10053e483a82f760b87ae8b0f957055741fced0eda8997993ad87d20f9baebfd622ecdad21f52b195ac3fcafdea0c2288e13a3aaa805171ba9081cb4ffd0753e5"}, {0x58, 0x0, 0x7, "22bff92178c41ec0265df496295cbb0503ae72315e0dca8c4a55d303fa54585aa3143f33314147f9f002f1fa22e0fbcdf2b15d5f0968ab99e5e8b755c8f754d57e0bc62ef00a60d7"}], 0x148}, 0x0, 0x40000}, 0x607e) (async, rerun: 32) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r6 = pidfd_open(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r0, 0x688b, 0xd32, 0x1, 0x0, 0x0) 04:47:21 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x401a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 625.864890][T27524] input: syz0 as /devices/virtual/input/input4799 04:47:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x66f0) [ 625.900674][T27532] loop0: detected capacity change from 0 to 264192 [ 625.919412][T27526] input: syz0 as /devices/virtual/input/input4800 04:47:21 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x401b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4a58) [ 625.932944][T27532] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:21 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x401c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 626.075008][T27543] loop0: detected capacity change from 0 to 264192 [ 626.076838][T27543] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6708) [ 626.105170][T27545] input: syz0 as /devices/virtual/input/input4801 [ 626.146481][T27547] input: syz0 as /devices/virtual/input/input4802 04:47:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4a70) [ 626.165413][T27549] loop0: detected capacity change from 0 to 264192 [ 626.187649][T27549] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 626.252981][T27552] input: syz0 as /devices/virtual/input/input4803 [ 626.304427][T27555] input: syz0 as /devices/virtual/input/input4804 04:47:21 executing program 2: r0 = syz_io_uring_setup(0x1dff, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:21 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x401d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6720) 04:47:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4a88) [ 626.656865][T27573] loop0: detected capacity change from 0 to 264192 [ 626.665405][T27573] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 626.688983][T27572] input: syz0 as /devices/virtual/input/input4805 04:47:22 executing program 5: ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000180)={0x4, 0x4, 0x3}) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00006d7000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7fff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) pidfd_open(r6, 0x0) 04:47:22 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x1f00000000000000) 04:47:22 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x401e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6738) 04:47:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4aa0) [ 626.714718][T27574] input: syz0 as /devices/virtual/input/input4806 04:47:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6750) [ 626.838112][T27585] loop0: detected capacity change from 0 to 264192 [ 626.845447][T27585] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:22 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x401f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ab8) [ 626.849647][T27588] input: syz0 as /devices/virtual/input/input4807 [ 626.889566][T27591] input: syz0 as /devices/virtual/input/input4808 [ 626.921285][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 626.998447][T27596] input: syz0 as /devices/virtual/input/input4809 [ 627.022505][T27599] loop0: detected capacity change from 0 to 264192 [ 627.030972][T27599] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 627.041455][T27601] input: syz0 as /devices/virtual/input/input4810 04:47:22 executing program 2: r0 = syz_io_uring_setup(0x1dff, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6768) 04:47:22 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40200000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ad0) [ 627.498272][T27607] loop0: detected capacity change from 0 to 264192 [ 627.508926][T27608] input: syz0 as /devices/virtual/input/input4811 [ 627.522899][T27607] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 627.543065][T27610] input: syz0 as /devices/virtual/input/input4812 04:47:22 executing program 5: ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000180)={0x4, 0x4, 0x3}) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00006d7000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7fff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) pidfd_open(r6, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000180)={0x4, 0x4, 0x3}) (async) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d7000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x10000000) (async) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7fff) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) (async) pidfd_open(r6, 0x0) (async) 04:47:22 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40210000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:22 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x2000000000000000) 04:47:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6780) 04:47:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ae8) [ 627.751932][T27620] loop0: detected capacity change from 0 to 264192 [ 627.752012][T27619] input: syz0 as /devices/virtual/input/input4813 04:47:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4b00) 04:47:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6798) [ 627.775519][T27623] input: syz0 as /devices/virtual/input/input4814 [ 627.788968][T27620] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:23 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40220000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 627.938034][T27641] input: syz0 as /devices/virtual/input/input4815 [ 627.959995][T27642] input: syz0 as /devices/virtual/input/input4816 [ 627.986684][T27644] loop0: detected capacity change from 0 to 264192 [ 628.015484][T27644] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:23 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x67b0) 04:47:23 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40230000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4b18) [ 628.320045][T27651] loop0: detected capacity change from 0 to 264192 [ 628.322025][T27650] input: syz0 as /devices/virtual/input/input4818 [ 628.323097][T27652] input: syz0 as /devices/virtual/input/input4817 [ 628.329530][T27651] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 628.436291][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:23 executing program 5: ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000180)={0x4, 0x4, 0x3}) (async) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00006d7000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7fff) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) pidfd_open(r6, 0x0) 04:47:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x67c8) 04:47:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4b30) 04:47:23 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40240000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:23 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 628.745987][T27662] input: syz0 as /devices/virtual/input/input4819 [ 628.746720][T27660] loop0: detected capacity change from 0 to 264192 04:47:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4b48) 04:47:24 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40250000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 628.771348][T27664] input: syz0 as /devices/virtual/input/input4820 04:47:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x67e0) [ 628.784870][T27660] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 628.904172][T27674] input: syz0 as /devices/virtual/input/input4821 [ 628.909974][T27675] input: syz0 as /devices/virtual/input/input4822 [ 628.911210][T27676] loop0: detected capacity change from 0 to 264192 [ 628.918038][T27676] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:24 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:24 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40260000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x67f8) 04:47:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4b60) [ 629.330651][T27680] input: syz0 as /devices/virtual/input/input4823 [ 629.334082][T27682] input: syz0 as /devices/virtual/input/input4824 [ 629.417764][T27683] loop0: detected capacity change from 0 to 264192 [ 629.423295][T27683] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:24 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = syz_io_uring_setup(0x5977, &(0x7f00000004c0)={0x0, 0x68f5, 0x23, 0x2, 0x1dc, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r6 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6}, 0x1) r7 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000180)=0x10, 0x800) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x8, 0x0, 0x0, 0xff, 0x1, 0x0, {0x0, r8, r9}}, 0x3) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = pidfd_open(r10, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r11}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r13 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r12, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r13}, 0x1) syz_io_uring_setup(0x4b43, &(0x7f0000000340)={0x0, 0xaaaf, 0x4, 0x2, 0x370, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000400)=0x0) r15 = signalfd4(r4, &(0x7f0000000440)={[0x13]}, 0x8, 0x80000) syz_io_uring_submit(r12, r14, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r15, 0x0, 0x0, 0x0, {0x3129}, 0x0, {0x0, r8}}, 0x0) 04:47:24 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4b78) 04:47:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6810) 04:47:24 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40270000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 629.576316][T27692] input: syz0 as /devices/virtual/input/input4825 [ 629.586263][T27695] loop0: detected capacity change from 0 to 264192 04:47:24 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40280000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4b90) [ 629.600323][T27695] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6828) [ 629.605828][T27696] input: syz0 as /devices/virtual/input/input4826 [ 629.698405][T27702] loop0: detected capacity change from 0 to 264192 [ 629.721139][T27702] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 629.743500][T27706] input: syz0 as /devices/virtual/input/input4827 [ 629.754804][T27707] input: syz0 as /devices/virtual/input/input4828 04:47:25 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40290000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:25 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) (async) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6840) 04:47:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ba8) [ 630.174301][T27714] loop0: detected capacity change from 0 to 264192 [ 630.177066][T27713] input: syz0 as /devices/virtual/input/input4829 [ 630.199043][T27714] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 630.288934][T27720] input: syz0 as /devices/virtual/input/input4830 04:47:25 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = syz_io_uring_setup(0x5977, &(0x7f00000004c0)={0x0, 0x68f5, 0x23, 0x2, 0x1dc, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r6 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6}, 0x1) r7 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000180)=0x10, 0x800) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x8, 0x0, 0x0, 0xff, 0x1, 0x0, {0x0, r8, r9}}, 0x3) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = pidfd_open(r10, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r11}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r13 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r12, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r13}, 0x1) syz_io_uring_setup(0x4b43, &(0x7f0000000340)={0x0, 0xaaaf, 0x4, 0x2, 0x370, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000400)=0x0) r15 = signalfd4(r4, &(0x7f0000000440)={[0x13]}, 0x8, 0x80000) syz_io_uring_submit(r12, r14, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r15, 0x0, 0x0, 0x0, {0x3129}, 0x0, {0x0, r8}}, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x5977, &(0x7f00000004c0)={0x0, 0x68f5, 0x23, 0x2, 0x1dc, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000180)=0x10, 0x800) (async) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x8, 0x0, 0x0, 0xff, 0x1, 0x0, {0x0, r8, r9}}, 0x3) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r10, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r11}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) (async) syz_io_uring_submit(r12, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r13}, 0x1) (async) syz_io_uring_setup(0x4b43, &(0x7f0000000340)={0x0, 0xaaaf, 0x4, 0x2, 0x370, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000400)) (async) signalfd4(r4, &(0x7f0000000440)={[0x13]}, 0x8, 0x80000) (async) syz_io_uring_submit(r12, r14, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r15, 0x0, 0x0, 0x0, {0x3129}, 0x0, {0x0, r8}}, 0x0) (async) 04:47:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4bc0) 04:47:25 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x402a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:25 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6858) [ 630.458269][T27724] input: syz0 as /devices/virtual/input/input4831 [ 630.472643][T27725] loop0: detected capacity change from 0 to 264192 04:47:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4bd8) 04:47:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6870) 04:47:25 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x402b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 630.485422][T27728] input: syz0 as /devices/virtual/input/input4832 [ 630.506980][T27725] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6888) [ 630.596074][T27741] loop0: detected capacity change from 0 to 264192 [ 630.606381][T27745] input: syz0 as /devices/virtual/input/input4833 [ 630.614129][T27741] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 630.614735][T27744] input: syz0 as /devices/virtual/input/input4834 [ 630.715885][T27754] input: syz0 as /devices/virtual/input/input4835 04:47:26 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x402c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4bf0) 04:47:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x68a0) [ 630.980915][T27774] loop0: detected capacity change from 0 to 264192 [ 630.982467][T27771] input: syz0 as /devices/virtual/input/input4836 [ 630.984171][T27773] input: syz0 as /devices/virtual/input/input4837 [ 631.029325][T27774] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:26 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = syz_io_uring_setup(0x5977, &(0x7f00000004c0)={0x0, 0x68f5, 0x23, 0x2, 0x1dc, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r6 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6}, 0x1) r7 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000180)=0x10, 0x800) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x8, 0x0, 0x0, 0xff, 0x1, 0x0, {0x0, r8, r9}}, 0x3) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = pidfd_open(r10, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r11}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r13 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r12, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r13}, 0x1) syz_io_uring_setup(0x4b43, &(0x7f0000000340)={0x0, 0xaaaf, 0x4, 0x2, 0x370, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000400)=0x0) r15 = signalfd4(r4, &(0x7f0000000440)={[0x13]}, 0x8, 0x80000) syz_io_uring_submit(r12, r14, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r15, 0x0, 0x0, 0x0, {0x3129}, 0x0, {0x0, r8}}, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x5977, &(0x7f00000004c0)={0x0, 0x68f5, 0x23, 0x2, 0x1dc, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000180)=0x10, 0x800) (async) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x8, 0x0, 0x0, 0xff, 0x1, 0x0, {0x0, r8, r9}}, 0x3) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r10, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r11}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) (async) syz_io_uring_submit(r12, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r13}, 0x1) (async) syz_io_uring_setup(0x4b43, &(0x7f0000000340)={0x0, 0xaaaf, 0x4, 0x2, 0x370, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000400)) (async) signalfd4(r4, &(0x7f0000000440)={[0x13]}, 0x8, 0x80000) (async) syz_io_uring_submit(r12, r14, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r15, 0x0, 0x0, 0x0, {0x3129}, 0x0, {0x0, r8}}, 0x0) (async) 04:47:26 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r3}]}}}]}, 0x44}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @remote, r3}, 0xc) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) r4 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = pidfd_open(r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r4, 0x688c, 0x0, 0x0, 0x0, 0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000200)=0x9) 04:47:26 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x68b8) 04:47:26 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x402d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4c08) [ 631.195064][T27781] input: syz0 as /devices/virtual/input/input4838 [ 631.197598][T27778] (unnamed net_device) (uninitialized): (slave bond_slave_0): Device is not our slave 04:47:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x68d0) 04:47:26 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x402e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4c20) [ 631.197618][T27778] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_0) 04:47:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x68e8) [ 631.210920][T27786] input: syz0 as /devices/virtual/input/input4839 [ 631.215862][T27783] loop0: detected capacity change from 0 to 264192 04:47:26 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x402f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 631.229148][T27783] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 631.334308][T27795] input: syz0 as /devices/virtual/input/input4840 04:47:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4c38) [ 631.391019][T27800] input: syz0 as /devices/virtual/input/input4841 [ 631.398926][T27799] loop0: detected capacity change from 0 to 264192 [ 631.410339][T27799] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 631.454703][T27815] input: syz0 as /devices/virtual/input/input4842 [ 631.478128][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 631.557774][T27817] loop0: detected capacity change from 0 to 264192 [ 631.578253][T27819] input: syz0 as /devices/virtual/input/input4843 [ 631.579604][T27817] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 631.619883][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:27 executing program 5: r0 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) r1 = syz_io_uring_setup(0x41df8, &(0x7f0000000080)={0x0, 0x12da, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6900) 04:47:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4c50) 04:47:27 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40300000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:27 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r3}]}}}]}, 0x44}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @remote, r3}, 0xc) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) (async) r4 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = pidfd_open(r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) (async) io_uring_enter(r4, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000200)=0x9) 04:47:27 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r6 = syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r8 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8}, 0x1) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x1db0, &(0x7f0000001600)={0x0, 0x31e0, 0x10, 0x0, 0x26e}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000480)) syz_io_uring_setup(0x255f, &(0x7f00000004c0)={0x0, 0xc894, 0x20, 0x1, 0x339, 0x0, r6}, &(0x7f0000ff4000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000015c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f00000005c0)="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", 0x1000, 0x40002021, 0x1}, 0xfffffffe) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000100)={0x77359400}}, 0xc8f) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 631.965763][T27827] loop0: detected capacity change from 0 to 264192 [ 631.991829][T27827] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 631.996623][T27826] input: syz0 as /devices/virtual/input/input4844 04:47:27 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40310000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 632.018154][T27830] input: syz0 as /devices/virtual/input/input4845 04:47:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4c68) 04:47:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6918) [ 632.082376][T27832] (unnamed net_device) (uninitialized): (slave bond_slave_0): Device is not our slave 04:47:27 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40320000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:27 executing program 5: r0 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) r1 = syz_io_uring_setup(0x41df8, &(0x7f0000000080)={0x0, 0x12da, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 632.082401][T27832] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_0) 04:47:27 executing program 5: r0 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) r1 = syz_io_uring_setup(0x41df8, &(0x7f0000000080)={0x0, 0x12da, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) syz_io_uring_setup(0x41df8, &(0x7f0000000080)={0x0, 0x12da, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4c80) 04:47:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6930) [ 632.175791][T27844] input: syz0 as /devices/virtual/input/input4846 [ 632.184344][T27845] input: syz0 as /devices/virtual/input/input4847 04:47:27 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40330000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6948) [ 632.248352][T27849] loop0: detected capacity change from 0 to 264192 [ 632.250749][T27849] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 632.280185][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 632.295505][T27855] input: syz0 as /devices/virtual/input/input4848 [ 632.323717][T27856] input: syz0 as /devices/virtual/input/input4849 [ 632.361078][T27858] loop0: detected capacity change from 0 to 264192 [ 632.371998][T27858] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 632.412340][T27871] input: syz0 as /devices/virtual/input/input4850 04:47:27 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r3}]}}}]}, 0x44}}, 0x0) (async, rerun: 64) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @remote, r3}, 0xc) (async, rerun: 64) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) (async) r4 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = pidfd_open(r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r4, 0x688c, 0x0, 0x0, 0x0, 0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async, rerun: 64) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000200)=0x9) (rerun: 64) 04:47:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4c98) 04:47:27 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40340000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:27 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RMKNOD(r0, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x2, 0x3, 0x4}}, 0x14) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f00000001c0)='net/route\x00') r6 = pidfd_open(r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffff7]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x10, r7, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6960) 04:47:27 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r6 = syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r8 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8}, 0x1) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x1db0, &(0x7f0000001600)={0x0, 0x31e0, 0x10, 0x0, 0x26e}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000480)) syz_io_uring_setup(0x255f, &(0x7f00000004c0)={0x0, 0xc894, 0x20, 0x1, 0x339, 0x0, r6}, &(0x7f0000ff4000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000015c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f00000005c0)="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", 0x1000, 0x40002021, 0x1}, 0xfffffffe) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000100)={0x77359400}}, 0xc8f) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) (async) syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8}, 0x1) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_setup(0x1db0, &(0x7f0000001600)={0x0, 0x31e0, 0x10, 0x0, 0x26e}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000480)) (async) syz_io_uring_setup(0x255f, &(0x7f00000004c0)={0x0, 0xc894, 0x20, 0x1, 0x339, 0x0, r6}, &(0x7f0000ff4000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)) (async) syz_io_uring_submit(r11, r12, &(0x7f00000015c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f00000005c0)="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", 0x1000, 0x40002021, 0x1}, 0xfffffffe) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000100)={0x77359400}}, 0xc8f) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) [ 632.676882][T27881] loop0: detected capacity change from 0 to 264192 [ 632.678364][T27880] input: syz0 as /devices/virtual/input/input4851 [ 632.682327][T27882] input: syz0 as /devices/virtual/input/input4852 04:47:27 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40350000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6978) 04:47:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4cb0) 04:47:28 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RMKNOD(r0, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x2, 0x3, 0x4}}, 0x14) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f00000001c0)='net/route\x00') (async) r6 = pidfd_open(r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffff7]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x10, r7, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 632.727583][T27881] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:28 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40360000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:28 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x2, 0x40, 0x11}, 0x18) [ 632.856586][T27903] input: syz0 as /devices/virtual/input/input4853 04:47:28 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40370000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4cc8) [ 632.953217][T27919] input: syz0 as /devices/virtual/input/input4854 04:47:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6990) 04:47:28 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RMKNOD(r0, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x2, 0x3, 0x4}}, 0x14) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f00000001c0)='net/route\x00') r6 = pidfd_open(r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffff7]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x10, r7, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) write$P9_RMKNOD(r0, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x2, 0x3, 0x4}}, 0x14) (async) syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(r5, &(0x7f00000001c0)='net/route\x00') (async) pidfd_open(r5, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffff7]}, 0x8) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x10, r7, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:28 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40380000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 633.026804][T27925] loop0: detected capacity change from 0 to 264192 [ 633.041767][T27925] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 633.057995][T27927] input: syz0 as /devices/virtual/input/input4855 [ 633.074879][T27930] input: syz0 as /devices/virtual/input/input4856 [ 633.124672][T27935] loop0: detected capacity change from 0 to 264192 [ 633.136380][T27935] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 633.172092][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:28 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r4 = pidfd_open(r3, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r6 = syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r8 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8}, 0x1) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) syz_io_uring_setup(0x1db0, &(0x7f0000001600)={0x0, 0x31e0, 0x10, 0x0, 0x26e}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000480)) (rerun: 32) syz_io_uring_setup(0x255f, &(0x7f00000004c0)={0x0, 0xc894, 0x20, 0x1, 0x339, 0x0, r6}, &(0x7f0000ff4000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000015c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f00000005c0)="ccf0971ed4ae3b3f8156e3f1a8467919471047572f420a2be5328d72dd1042b1b91ca3f83ba816a565919d586501542974df9689e076a4f4f9902cd0312a5b7f4a9fed1e3001c991583ea1c7bab396f73069f07f809430f43ff31d331657c07355e104b4fcab76e8468d3d35001b6a66b786aa3033022527200d7ef73fe47f9a4bbb9c1666f766d875bca0497bc02b17ccd9aae165511b2db9701d97f33a2d98421641f70097ccfa0c54db8e4d74a67716e9181186c53bee28600933574fa0b8b56fc79c138a731e63e13152fe0de4cdcfd7cd266e18e4d78dbd59e26191ca73a6e514df21beaa37cc32bbc330d821400815873e801dd5580d250c8a56726b8c96a8cfb55602e8a499152c6ba0ba700fa1e61ba19c0d425818d7135fce902df953a9a98140b69cd55dd565adfa76eb94f09996c67050c0e6717361761310643b0d8dc51aed891e8fe9e31612fbacdb330b50596682d194b2c0247154a20f3ccbf18fc86b688b22dc18544357d0c10660de734ae5c483159cec073dfbfd10c04994d3509d71780f1e04dbd1058a30677f96c94beeafd74eb2b3fd6520384f581d3037232c9f48cef3704d64e191f8d1d4d1fa1b62bc345bdabe0b42b330e9a8cbda4b60a654eef463e503a2667d16c5d85a9a4b4939e21c7b7a2cdc8fa5ebfddbd8b3e0e46f52f4a093361e841f2d7d8b2c124027c109e049b759b6a301d669cc67be02d21f690fea66d16f932e8b7f193ef3d738640af158282e5c229b9a022470cb4f5a4c1243b364e3576a64d7cb495c8d9c93fca1af7a7fba4b5ca19f350b902d92858d442d4fed9d8682c7cd3347d08ce716dbfc6d0e7cfac8c3c25684a824a26f2e14be111509a3151a9a1c2984dc38e6f8ae72b7070ea6c720681372bf7d816c858eda287a2d895fa2fd523934282b5d3013166c08ae30ab032fe5b0b21f83e87cef7968a6f155c420d3cf46898720b7a4c1d03d0de78d807a38526b26b5d5ae170e331ca167fc4143ce9a4f6051857c93a97a15147164fbe24afdb11194f6b1b241a0ba92381a755750d103cab4839445368b80ad11b0cd11bf4cc6c0a26e0940bf8e03ed9e93e70417a84d80b680cf89975a58374a7004c7e3cf4435880690eac3d728553959815b308067d1fc3ef1be7231ead071bec6b8fc2e4b712e706cbe52a6d97bad3b7e7b34c2e03d21176b12a2629d3a75fa28ddf53359c9f09f413d19c3a10723a866687e3366258f40430b3c57162aed1c03e4aac8157d2d86ba27af4a4815dc7453c29753a763581448ddd54ec199ed8fff73b2618d46c1ee464bb932a656ecc542a7af0b19bb0379e96b4e832c29cb63aa67300f9b3718508c1f30e3ac55622ae5513b3eb34a9a00ba729a23cf08a8a4f83e538ee4e434a122ee0bb89819f042698513b27d47dbe0e460898f526e8f9e3bada6a8ee3301d8af348e047ff0fa75915f0a912197babdd0c6751a68c2f8e14618edc07327cc162624778cbe3d3aecd682dda9a89ed0d350caccdf53a38116e927462d5c4084dd22601066d27d068f42e5e67ab978846e982ec732f091d563de80519d8f47fb24ea8b7bb24c040be48e5668754d98bdc7d8a5470b1cc93680cb02028058d7f0de9b901d7f0a7b0e448767bc7511710aca19b7c85ec5c8cf28d0f561cc5f3790eb99d521039eae367411c741e6a95ed2a805214827402251b48905fe34b33d5d72a8fe2a609935cce17d458359947770ff483a92e8ebbbfb2a4b4d64aefe30cc0686494dc29efd920847f5908cc30c0f92d1360578c1464a9c46996ac3649ccac35cd4daf23644c453be0e7ded317554b97d7004cb12667d7bf0cab176b8d76d69d4def991bcd0bf3a2415b23d21c5ad48aad09e8ca030a236ce21808ebb3c948185916a87718cbef66d39f84af710c3192258ec9014e32ed4a10232ac3a5ce68daf58bdcb208f24bd67f6289f1e46c7cbad82e6d4e9967410ab7226adaad59e4eb19b7d70615523b7dcfb826a515415e29c0dc108507c39d5fc839508e740e276886b5da2da72034ea404b74209804ffcfd3c37be3d13a95f5106fb9bb099fd14e61fe5e92e64cab71c07396559427ea07de455418a8652d0c5280e98d6c1fe2b26f785dafdc72f4eece2a10c12574414e35c970f5c8c8c927bfa571ed285fb55dd8b68abcfae0c8c44f5a4837e6715b42fab58061b01a76ebbef1e18254ac5e0d8ae53b020749163cc2c0864c052d728dc6e02c89a6575b77877a496225567cf37b68836a691730bbbe2d4fdd5961d78e20f21bdf5012bf9a414e2e77df9e9724db15d6b800f59c033ac935344f519b6532473258d18706bd555b69cc7ea5deeef240ea51124834b93891bce4b7aa9ee187e7ad114e26b0cde2328deaad6323743ac749386570c7bbae2fd4f806baf7aa5509e4d33afd5e1cef6a2478905a53a8779ee84c349f837b5ba7c48346e60d6b92e2a01b364e596b91f87923c4a2019309b6460bc99cad937829d1f09e18c17e2ef564aa2cdf0ff434eaf0143a242dde9055f35be93009e5abde0007ca42e007725b2a9cd20629592422957c1dbdabdb3590bf13ce8e224b43e49b29095490e1b6a963e6b1b9fdcb031da06958d595d712a31a0c62c6dbcac090467a332e738063c2e4a7df02eb9a425a5389aa05a7a4dbc015701b954e9072101135cd1b266e3517d6fd2fe8b498ae5224b2ab15fee954db62ff64c5394818792d762743207be8db1afd5b35a526d1318d70bdffc2f808305ec5dd2d8d946d76d1fef6eef54902f3c8977b42bae7ded8f38ab66f95fd3621bbedd586c3cd8f795c08d51d052bc6e4dd71a3759a4a9dc67261dd2bc1272379f8b57d61cc1913b89d9e7522cbd27f2a3b5dcf56ec75ccd8a8560eb581583409130bca61c9403fb90b982939e401921c49c4967f251a5555891997ab8141f5c0fe10e98d77f9ccca8839a3f7c57a2089a96788fb8a84cc2d720748ec17006a04494069b6a8bbf513ded5ed9a13db909398e2c52bfe9b60327d6ed9e88c5c46fe7fef8897d72af48a923a0b0558a25a5c31c58a82810d92639265e22b28a1436029de4636158759349e29e02da3b5d971650946c04cb0c251eb52dc9446abd47c3584149bf16344111ed6e2858de3ea140faed88cb7ded28beeb19d8e13d06ed9bbd99d0755f5a1141d32dc51d4d834788a9d74dc441918f945caaea40bf76ca135ffc9e83ed2ec5aab2a1c7c1d590ed08b36ec3e3fbe4b91a34b019896f699b86290ce87029aa5a1c0bf10f66fd65228ec5df9288ea8aa5431abe27cd26b908a587e5429fa80b219d8c00fa5172424a5dc245f32e909e235ee4cdbb58adf20669562f4268f02aeae2e00100a6a45f5ceae762f69aaeda6e53808fa0b78b42193ff7212cf019a69704a47b1b9fffea7619b41e5b1e10b5d8a06bff7a6e08e3319700053bcddc4f22d8cabca730cdf4ab756eb983401289509ade6ff7604b668e38dc7d0228b1d5108dc1e715024aa6ec9240486f02633bd97aab8ec9a2a59b40f842b44272d39eee3b1bbdcb3ec48e835d6dbb241aff447c5c6b848cb3b29a3a767ff62ae245c92466f6d1ddf2ff4d287ae91357f0f000469db5929df6425895d96685479c29d351d909a39f6e1a9fa625fdde3896ee163992c872ea6f3a6081e16b1d4cce60e21f66d16b8f79899507e0c0bf3fe748847248bb5fbd0cc3aae2d6b49962b4bfcc28fd4636f9787f9f96bb464c9d0ac5bdb57042cc591529e4f08da78e7e8a9ea96a28d5142ee0d1ad07b5885f147e966eff299e1f342fbf5bfa57274df5dabadc5d5c3aaa7bd210117ec70f8fbde31a9e26424d587d17376d393f7c09240fff64c63df8b8113419549f1d642f3cebdfb5fce77a606fdac6ba8dea8ac9c6e1b1ace5fd1a5ce353c74b5f5d51eadc524bf9d8159a3d6f5653fb912142d01d7c90928e5ffb6e5ec8114ab18a0bebfaf6ee6be8d994c01548af461180bb32d36d243112340bdeea7c35e39890c7ef51c48951913cf3e184dd74083a63bece5397f100570cc08d8f37f281e92ab8b8e18e60ef777c11bcac4fef54a867dc5e422c150e2f25e98321929cb0b39545777d5e9979e75dad5fc069e21b26c0c82fbdc7b51fd9c0615233567b4c73b56d3916681544ed85e7fce1559ad9528f9bcbfebc8ab70c8c299870a77209b9bc9d1a7b8679de3b4129f50328c5177ad5f652f8ad0e058107434efe2277945821a272a4d2e96eb747cd986f9d773394973e9120569277b9a16295ff6ec53cd34208e6e8d6978a4c50fc95caeb37f8e25f628cb8b9a16dd2a2d1416e3c4bfe70ffdbc5102f05e02c6dcff2ceaa2ea0838d080d14abcbfff8aac1a9c260ee9cd851c82a3436a9feabbec2d480901775dcdb4409612562788dacf9bf20486bf865a71fe3e853dc6d5dc3914c4142d22cf86821e39a275785566e4defaeab9d17ce917a334e332d5babe5b7877963ea328a191b8c14a631ea52f1004dcddb088841249f00c5acdeeeb1a2324cc16db7fc2dded3b908774b34aabef176756beaa1b9134edbb24740fdffc8ebe6a4345154e06e5600cf3b53a1dc8178236d83c85bd3c121945cbd6bc375c3d49c6428076721ffb020fd427c54968c5bfb79414a7fe91cf65210b6c492a157c197c5becabf94fb8ffec0a3b3f4e686fb7867dafcb6c0f1ef1f70d258c8af20fb4f59a5aa853eec09ffd41093cc1e2525e027e8ffcdbde8bd45f9f461c8e6730a3083891a7c86631b8f0ce6e38efcc61aa62748db76d22ec5215cad1f3a8e27ea69157443fd19a8783c5f78e56acc5832f015528d83b703531cd989923f5feb2e62375ef1ae988ac34ea173653f8fb6c3a203ae4683c251086c509ef8c32745d2842a42e342ec00f2f298b6ac35fb712fc284b4efa027e697b5476967c2b1bc7a9dc665bf920996719007c7557022e94b0d7941e404ea25e6d35e68b43aff89e1398d4f9fee1c9bf0df5c11dc4584d71607f3df757a1d8f39c689128769d97d883c50131a9c0e84e8f40f9a6ed11ecaef323e38c8837c31160b843a82ef36107cfea02cf2778bb643e7cd7ed7d9cff36efa71d03a03a7e05fadd1be7f4b13ebbd957d9f1b9365fc7ade9b8c6b1a6948090a9f48c5eebe8f490465a37130dff95be4915e41bdd635bb7edafe1bf1dd5f6959a66172b4fcf56d886b655912d79c4b009b43f21011c01167c8a5888ae92094f1c325faca0061b4f8844a7211fe528b43321a24235e075b6a91b216866f2105f3cd963a49ea0be3db45752409f98dbe710457e1e70848c932dc9feebd30feab2848637d8e2484cac0c335230155da70c47063746e1e05b1fa7a8f53072bffd7ae1495d8e012bb9cb58b3a008ee7b624d775aadca258f148413ed4473228caf4fea83bb5d4b05c5f9b3b50976d9a0ab194668f8da9f1d231e546d8db5e71af34ea826988c538ad4ba0a438424d9ca38fd22378385b0257005df04e1215d76ee736d6c71f04b05b4e8a94601e0c712bdfcec969085ae94e8d0aa7199858b7db71c2bf8e1501afc5542b5032c6cb12d8afc3ff50e6b1a105f44299ff317837fd7c73e89a11b0f8cf060a5b296d6efef451177adda1812e1bf0c1de68d96ed718f8b28c0e91f6512428b818b1eda4ae5a8a1a67119354f1624743542be0f1622b7ed3c491db99eb5c64a3bb6fdf4ea85e61e2873a111518e7d26b342974b3b8187c7473b7e736c02771029872527b4dfe8301f0f7d8c4e005ae356c376ffc001778a88b654b0388f0a690aba597f8eea268bb63", 0x1000, 0x40002021, 0x1}, 0xfffffffe) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 64) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000100)={0x77359400}}, 0xc8f) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ce0) 04:47:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x69a8) 04:47:28 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40390000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:28 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 633.287173][T27952] input: syz0 as /devices/virtual/input/input4857 [ 633.301224][T27954] input: syz0 as /devices/virtual/input/input4858 04:47:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x69c0) [ 633.331136][T27957] loop0: detected capacity change from 0 to 264192 [ 633.338320][T27957] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 633.398987][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 633.475003][T27965] input: syz0 as /devices/virtual/input/input4859 04:47:28 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x403a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4cf8) 04:47:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x69d8) 04:47:28 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x2, 0x40, 0x11}, 0x18) 04:47:28 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) syz_io_uring_submit(r8, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd=r13, 0x20, &(0x7f0000001180)=""/4096, 0x1000, 0x0, 0x0, {0x0, r7}}, 0x8) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r12, @ANYBLOB="86e8b68e3ccaedc361eba4bb20376f1010d3f9a36f26c9ffd9ac561c02629ad70ceca1cd773b25eba3b8bdeb7c3679fb03a27f68753c89a7ffe24e64ad2fb00d00"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r12, 0x29, 0x20, 0x95, 0x8000, 0x6, @remote, @empty, 0x0, 0x10, 0xfffffffe, 0x8}}) syz_io_uring_submit(r1, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x9d250fbe2d3679d3, 0x4007, @fd_index=0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d1cf3092d64aef9185bb07a9c8798c2c11289ade979956fa350544b29c905a092864", 0x22}, {&(0x7f0000000180)="e13281c00d788348eb5ab00b54d21761d29907e47bd62dd698de0ea14d6b6af52c0e8d26874075954718b9736224f0a9ed0377d171d5c8c9978d25a5ab10729bc520959eaefc23b60c3d39be99afb5", 0x4f}], 0x2, 0x1b, 0x0, {0x1, r7}}, 0x3) [ 633.728125][T27975] loop0: detected capacity change from 0 to 264192 [ 633.735809][T27972] input: syz0 as /devices/virtual/input/input4860 04:47:29 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x403b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 633.756153][T27977] input: syz0 as /devices/virtual/input/input4861 04:47:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4d10) 04:47:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x69f0) [ 633.756262][T27975] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:29 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x403c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 633.878440][T27987] loop0: detected capacity change from 0 to 264192 04:47:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6a08) [ 633.902188][T27987] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:29 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4d28) 04:47:29 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x403d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 633.932893][T27993] input: syz0 as /devices/virtual/input/input4862 [ 633.938455][T27991] input: syz0 as /devices/virtual/input/input4863 [ 634.091234][T27998] (unnamed net_device) (uninitialized): (slave bond_slave_0): Device is not our slave 04:47:29 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x403e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6a20) [ 634.091257][T27998] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_0) [ 634.105248][T28006] input: syz0 as /devices/virtual/input/input4864 [ 634.105354][T28007] input: syz0 as /devices/virtual/input/input4865 [ 634.292513][T28019] input: syz0 as /devices/virtual/input/input4866 [ 634.321396][T28022] loop0: detected capacity change from 0 to 264192 [ 634.337662][T28022] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:29 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x2, 0x40, 0x11}, 0x18) 04:47:29 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) (async) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) syz_io_uring_submit(r8, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd=r13, 0x20, &(0x7f0000001180)=""/4096, 0x1000, 0x0, 0x0, {0x0, r7}}, 0x8) (async, rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r12, @ANYBLOB="86e8b68e3ccaedc361eba4bb20376f1010d3f9a36f26c9ffd9ac561c02629ad70ceca1cd773b25eba3b8bdeb7c3679fb03a27f68753c89a7ffe24e64ad2fb00d00"], 0x44}}, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r12, 0x29, 0x20, 0x95, 0x8000, 0x6, @remote, @empty, 0x0, 0x10, 0xfffffffe, 0x8}}) (async) syz_io_uring_submit(r1, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x9d250fbe2d3679d3, 0x4007, @fd_index=0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d1cf3092d64aef9185bb07a9c8798c2c11289ade979956fa350544b29c905a092864", 0x22}, {&(0x7f0000000180)="e13281c00d788348eb5ab00b54d21761d29907e47bd62dd698de0ea14d6b6af52c0e8d26874075954718b9736224f0a9ed0377d171d5c8c9978d25a5ab10729bc520959eaefc23b60c3d39be99afb5", 0x4f}], 0x2, 0x1b, 0x0, {0x1, r7}}, 0x3) 04:47:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4d40) 04:47:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6a38) 04:47:29 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x403f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6a50) [ 634.679486][T28043] loop0: detected capacity change from 0 to 264192 [ 634.684880][T28040] input: syz0 as /devices/virtual/input/input4867 04:47:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4d58) [ 634.689803][T28042] input: syz0 as /devices/virtual/input/input4868 [ 634.695745][T28043] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:30 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) (async) syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:30 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40400000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6a68) [ 634.792844][T28056] input: syz0 as /devices/virtual/input/input4869 [ 634.820729][T28057] input: syz0 as /devices/virtual/input/input4870 04:47:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4d70) 04:47:30 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x200000, 0x0, 0xfffffffe}, &(0x7f00006d7000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000b40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r3 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r3, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r3, 0x10000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r6, 0x545d, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r6, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r7}}, 0x4769) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x77359400}, 0x1, 0x0, 0x2, {0x0, r7}}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = pidfd_open(r8, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000001180)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001140)={&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c00)=""/223, 0xdf}, {&(0x7f0000000d00)=""/126, 0x7e}, {}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/152, 0x98}, {&(0x7f0000000e80)=""/102, 0x66}, {&(0x7f0000000f00)=""/177, 0xb1}], 0x7, &(0x7f0000001040)=""/233, 0xe9}, 0x0, 0x10000, 0x1, {0x3}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) ptrace$setopts(0xffffffffffffffff, r8, 0x0, 0x20) process_vm_readv(r8, &(0x7f0000000740)=[{&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/108, 0x6c}], 0x9, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/221, 0xdd}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/127, 0x7f}, {&(0x7f0000000a40)=""/72, 0x48}], 0x5, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:30 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40410000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 634.903218][T28061] loop0: detected capacity change from 0 to 264192 [ 634.936601][T28062] input: syz0 as /devices/virtual/input/input4871 [ 634.937405][T28061] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 635.030641][T28069] input: syz0 as /devices/virtual/input/input4872 [ 635.033654][T28070] loop0: detected capacity change from 0 to 264192 [ 635.053063][T28070] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:30 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) syz_io_uring_submit(r8, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd=r13, 0x20, &(0x7f0000001180)=""/4096, 0x1000, 0x0, 0x0, {0x0, r7}}, 0x8) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r12, @ANYBLOB="86e8b68e3ccaedc361eba4bb20376f1010d3f9a36f26c9ffd9ac561c02629ad70ceca1cd773b25eba3b8bdeb7c3679fb03a27f68753c89a7ffe24e64ad2fb00d00"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r12, 0x29, 0x20, 0x95, 0x8000, 0x6, @remote, @empty, 0x0, 0x10, 0xfffffffe, 0x8}}) syz_io_uring_submit(r1, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x9d250fbe2d3679d3, 0x4007, @fd_index=0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d1cf3092d64aef9185bb07a9c8798c2c11289ade979956fa350544b29c905a092864", 0x22}, {&(0x7f0000000180)="e13281c00d788348eb5ab00b54d21761d29907e47bd62dd698de0ea14d6b6af52c0e8d26874075954718b9736224f0a9ed0377d171d5c8c9978d25a5ab10729bc520959eaefc23b60c3d39be99afb5", 0x4f}], 0x2, 0x1b, 0x0, {0x1, r7}}, 0x3) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) syz_io_uring_submit(r8, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2000, @fd=r13, 0x20, &(0x7f0000001180)=""/4096, 0x1000, 0x0, 0x0, {0x0, r7}}, 0x8) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r12, @ANYBLOB="86e8b68e3ccaedc361eba4bb20376f1010d3f9a36f26c9ffd9ac561c02629ad70ceca1cd773b25eba3b8bdeb7c3679fb03a27f68753c89a7ffe24e64ad2fb00d00"], 0x44}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r12, 0x29, 0x20, 0x95, 0x8000, 0x6, @remote, @empty, 0x0, 0x10, 0xfffffffe, 0x8}}) (async) syz_io_uring_submit(r1, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x9d250fbe2d3679d3, 0x4007, @fd_index=0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000000100)="d1cf3092d64aef9185bb07a9c8798c2c11289ade979956fa350544b29c905a092864", 0x22}, {&(0x7f0000000180)="e13281c00d788348eb5ab00b54d21761d29907e47bd62dd698de0ea14d6b6af52c0e8d26874075954718b9736224f0a9ed0377d171d5c8c9978d25a5ab10729bc520959eaefc23b60c3d39be99afb5", 0x4f}], 0x2, 0x1b, 0x0, {0x1, r7}}, 0x3) (async) 04:47:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6a80) 04:47:30 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40420000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4d88) 04:47:30 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x200000, 0x0, 0xfffffffe}, &(0x7f00006d7000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000b40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r3 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r3, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r3, 0x10000000) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r6, 0x545d, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r6, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r7}}, 0x4769) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x77359400}, 0x1, 0x0, 0x2, {0x0, r7}}, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = pidfd_open(r8, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r10, r2, &(0x7f0000001180)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001140)={&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c00)=""/223, 0xdf}, {&(0x7f0000000d00)=""/126, 0x7e}, {}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/152, 0x98}, {&(0x7f0000000e80)=""/102, 0x66}, {&(0x7f0000000f00)=""/177, 0xb1}], 0x7, &(0x7f0000001040)=""/233, 0xe9}, 0x0, 0x10000, 0x1, {0x3}}, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) (async) ptrace$setopts(0xffffffffffffffff, r8, 0x0, 0x20) (async) process_vm_readv(r8, &(0x7f0000000740)=[{&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/108, 0x6c}], 0x9, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/221, 0xdd}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/127, 0x7f}, {&(0x7f0000000a40)=""/72, 0x48}], 0x5, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:30 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) io_uring_enter(r3, 0x20ee, 0xbbba, 0x0, &(0x7f0000000180), 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r6, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r6, 0x10000000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r9, 0x545d, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r9, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r10}}, 0x4769) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r5, 0x1, 0x0, 0x5, 0x4, 0x1, {0x0, r10}}, 0x400) [ 635.263624][T28080] loop0: detected capacity change from 0 to 264192 [ 635.268029][T28083] input: syz0 as /devices/virtual/input/input4873 04:47:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4da0) 04:47:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6a98) 04:47:30 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40430000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 635.286107][T28080] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:30 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x200000, 0x0, 0xfffffffe}, &(0x7f00006d7000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000b40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (rerun: 64) r3 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r3, 0x8000000) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r3, 0x10000000) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r6, 0x545d, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r6, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r7}}, 0x4769) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x77359400}, 0x1, 0x0, 0x2, {0x0, r7}}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = pidfd_open(r8, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r10, r2, &(0x7f0000001180)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001140)={&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c00)=""/223, 0xdf}, {&(0x7f0000000d00)=""/126, 0x7e}, {}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/152, 0x98}, {&(0x7f0000000e80)=""/102, 0x66}, {&(0x7f0000000f00)=""/177, 0xb1}], 0x7, &(0x7f0000001040)=""/233, 0xe9}, 0x0, 0x10000, 0x1, {0x3}}, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) ptrace$setopts(0xffffffffffffffff, r8, 0x0, 0x20) process_vm_readv(r8, &(0x7f0000000740)=[{&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/108, 0x6c}], 0x9, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/221, 0xdd}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/127, 0x7f}, {&(0x7f0000000a40)=""/72, 0x48}], 0x5, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 635.309707][T28084] input: syz0 as /devices/virtual/input/input4874 [ 635.407401][T28101] input: syz0 as /devices/virtual/input/input4875 04:47:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6ab0) 04:47:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4db8) [ 635.415322][T28104] input: syz0 as /devices/virtual/input/input4876 [ 635.418100][T28103] loop0: detected capacity change from 0 to 264192 [ 635.430712][T28103] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 635.481639][T28109] (unnamed net_device) (uninitialized): (slave bond_slave_0): Device is not our slave [ 635.481662][T28109] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_0) [ 635.535131][T28127] input: syz0 as /devices/virtual/input/input4877 [ 635.564299][T28129] input: syz0 as /devices/virtual/input/input4878 04:47:31 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x9404}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000100)={0xb0000016}) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:31 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40440000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6ac8) 04:47:31 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xcb3e2a89fd7c1d1d, 0x11, r6, 0x10000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x80000001, 0x0, 0x1, 0x0, 0x1}, 0x7bbd) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = pidfd_open(r7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4dd0) [ 635.833787][T28136] loop0: detected capacity change from 0 to 264192 [ 635.851758][T28138] input: syz0 as /devices/virtual/input/input4879 [ 635.870309][T28136] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 635.948092][T28143] input: syz0 as /devices/virtual/input/input4880 04:47:31 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) (async) r3 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) io_uring_enter(r3, 0x20ee, 0xbbba, 0x0, &(0x7f0000000180), 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r6, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r6, 0x10000000) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r9, 0x545d, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r9, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r10}}, 0x4769) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r5, 0x1, 0x0, 0x5, 0x4, 0x1, {0x0, r10}}, 0x400) 04:47:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6ae0) 04:47:31 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40450000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4de8) 04:47:31 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40460000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 636.205620][T28151] input: syz0 as /devices/virtual/input/input4881 [ 636.206404][T28150] loop0: detected capacity change from 0 to 264192 04:47:31 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40470000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:31 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) io_uring_enter(r3, 0x20ee, 0xbbba, 0x0, &(0x7f0000000180), 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r6, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r6, 0x10000000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r9, 0x545d, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r9, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r10}}, 0x4769) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r5, 0x1, 0x0, 0x5, 0x4, 0x1, {0x0, r10}}, 0x400) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) io_uring_enter(r3, 0x20ee, 0xbbba, 0x0, &(0x7f0000000180), 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r6, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r6, 0x10000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCMSET(r9, 0x545d, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r9, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r10}}, 0x4769) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r5, 0x1, 0x0, 0x5, 0x4, 0x1, {0x0, r10}}, 0x400) (async) [ 636.221494][T28150] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 636.229602][T28152] input: syz0 as /devices/virtual/input/input4882 04:47:31 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x9404}}, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000100)={0xb0000016}) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:31 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40480000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6af8) [ 636.530368][T28173] input: syz0 as /devices/virtual/input/input4883 04:47:31 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xcb3e2a89fd7c1d1d, 0x11, r6, 0x10000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x80000001, 0x0, 0x1, 0x0, 0x1}, 0x7bbd) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = pidfd_open(r7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xcb3e2a89fd7c1d1d, 0x11, r6, 0x10000000) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x80000001, 0x0, 0x1, 0x0, 0x1}, 0x7bbd) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r7, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4e00) 04:47:31 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40490000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6b10) [ 636.739213][T28200] loop0: detected capacity change from 0 to 264192 [ 636.740923][T28198] input: syz0 as /devices/virtual/input/input4885 04:47:32 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x404a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6b28) [ 636.744897][T28200] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4e18) [ 636.757331][T28199] input: syz0 as /devices/virtual/input/input4884 [ 636.872876][T28208] loop0: detected capacity change from 0 to 264192 [ 636.884533][T28207] input: syz0 as /devices/virtual/input/input4886 04:47:32 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x404b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 636.901440][T28208] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 636.914147][T28211] input: syz0 as /devices/virtual/input/input4887 [ 636.958089][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:32 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffffc6065d528ae186dd60606da500443a00fe880000000000000000000000000001ff0200000000000000000000000000010300907800000000600eb74b00000000000000000000000000000000000000001100040000000000488b90bd71c27cf8459830f200"/122], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000180)={@multicast, @local, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x1}, {0x400, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1}, {0x1000, 0x0, 0x1}, {0x1f}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7}], @generic="8e3c8c28c7416f8fb6139d1e4ff1ffb1a2b65721623dca699c17cdeb2a06577c4f7b78f08a9d66ea3a699c68201f72f4236f098afad4928bc10a09e8daec2c9c00f100b860a82bfa23f28f9f082cbe5630061ecc602989be7a4386e4464b0bea"}}}}, &(0x7f0000000100)={0x1, 0x2, [0x93c, 0xf21, 0x380, 0xfff]}) [ 637.055733][T28225] loop0: detected capacity change from 0 to 264192 [ 637.077122][T28225] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 637.121537][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:32 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x9404}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000100)={0xb0000016}) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6b40) 04:47:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4e30) 04:47:32 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x404c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:32 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_emit_ethernet(0x7a, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffffc6065d528ae186dd60606da500443a00fe880000000000000000000000000001ff0200000000000000000000000000010300907800000000600eb74b00000000000000000000000000000000000000001100040000000000488b90bd71c27cf8459830f200"/122], 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x96, &(0x7f0000000180)={@multicast, @local, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x1}, {0x400, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1}, {0x1000, 0x0, 0x1}, {0x1f}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7}], @generic="8e3c8c28c7416f8fb6139d1e4ff1ffb1a2b65721623dca699c17cdeb2a06577c4f7b78f08a9d66ea3a699c68201f72f4236f098afad4928bc10a09e8daec2c9c00f100b860a82bfa23f28f9f082cbe5630061ecc602989be7a4386e4464b0bea"}}}}, &(0x7f0000000100)={0x1, 0x2, [0x93c, 0xf21, 0x380, 0xfff]}) 04:47:32 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xcb3e2a89fd7c1d1d, 0x11, r6, 0x10000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x80000001, 0x0, 0x1, 0x0, 0x1}, 0x7bbd) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = pidfd_open(r7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 637.322702][T28175] cgroup: fork rejected by pids controller in /syz4 [ 637.406110][T28252] loop0: detected capacity change from 0 to 264192 [ 637.412616][T28246] input: syz0 as /devices/virtual/input/input4888 [ 637.416253][T28252] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:32 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffffc6065d528ae186dd60606da500443a00fe880000000000000000000000000001ff0200000000000000000000000000010300907800000000600eb74b00000000000000000000000000000000000000001100040000000000488b90bd71c27cf8459830f200"/122], 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x96, &(0x7f0000000180)={@multicast, @local, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x1}, {0x400, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1}, {0x1000, 0x0, 0x1}, {0x1f}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7}], @generic="8e3c8c28c7416f8fb6139d1e4ff1ffb1a2b65721623dca699c17cdeb2a06577c4f7b78f08a9d66ea3a699c68201f72f4236f098afad4928bc10a09e8daec2c9c00f100b860a82bfa23f28f9f082cbe5630061ecc602989be7a4386e4464b0bea"}}}}, &(0x7f0000000100)={0x1, 0x2, [0x93c, 0xf21, 0x380, 0xfff]}) 04:47:32 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x404d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6b58) [ 637.426596][T28249] input: syz0 as /devices/virtual/input/input4889 04:47:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4e48) 04:47:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6b70) [ 637.541865][T28260] input: syz0 as /devices/virtual/input/input4890 [ 637.552635][T28262] loop0: detected capacity change from 0 to 264192 [ 637.566896][T28262] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:32 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x404e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 637.604326][T28267] input: syz0 as /devices/virtual/input/input4891 [ 637.668290][T28272] input: syz0 as /devices/virtual/input/input4892 [ 637.738140][T28277] loop0: detected capacity change from 0 to 264192 [ 637.769194][T28277] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:33 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x520a2107, &(0x7f0000000240)=0x1) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x80000000}, {0x4, 0x3}, {0xd, 0x9}, {0x7, 0x5}, {0x10, 0x4}]}]}}, &(0x7f00000002c0)=""/141, 0x4e, 0x8d, 0x1}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4e60) 04:47:33 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r6 = syz_io_uring_setup(0x2b15, &(0x7f0000000180)={0x0, 0xc93c, 0x18, 0x1, 0xc8, 0x0, r5}, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="7e11f3352510fc4ffa17c653bffdd8b3c698ea94de14b821bdf722e8df9c590604674e330c05fc239a90d44e214c0f0dab1ae387d3df57f5c1fb811f36fb41deb134910d244b1f1a7c68a1f521fe14ae14d78a0a4e34143b47577527093c474e372a3d248104141f597d4d0b050a8fd500000000664384158d16ad98babb7dfb83b3212e259fba56e7bc852b81f3841bf87bf536ad7809974d8833ba49845d9ea55b0aa258e950331185b4b486fff7c130fd268a67d102977622cc00"}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r9 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r9, 0x8000000) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r9, 0x10000000) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r12, 0x545d, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r12, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r13}}, 0x4769) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, r7, r4, r6, r4, r6, r8], 0x7, 0x0, 0x0, {0x0, r13}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6b88) 04:47:33 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x404f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:33 executing program 2: r0 = syz_io_uring_setup(0x1dfe, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x200000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x20daeda, 0x4) r4 = memfd_create(&(0x7f00000003c0)='$\x00', 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = pidfd_open(r5, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r7}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) r8 = signalfd(r7, &(0x7f0000000100)={[0x101]}, 0x8) waitid$P_PIDFD(0x3, r8, &(0x7f0000000400), 0x8, &(0x7f0000000300)) pidfd_getfd(r7, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 638.027079][T28284] input: syz0 as /devices/virtual/input/input4893 [ 638.029054][T28285] loop0: detected capacity change from 0 to 264192 04:47:33 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40500000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6ba0) 04:47:33 executing program 2: r0 = syz_io_uring_setup(0x1dfe, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x200000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x20daeda, 0x4) r4 = memfd_create(&(0x7f00000003c0)='$\x00', 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = pidfd_open(r5, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r7}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) r8 = signalfd(r7, &(0x7f0000000100)={[0x101]}, 0x8) waitid$P_PIDFD(0x3, r8, &(0x7f0000000400), 0x8, &(0x7f0000000300)) pidfd_getfd(r7, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfe, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x200000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x20daeda, 0x4) (async) memfd_create(&(0x7f00000003c0)='$\x00', 0x1) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r5, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r7}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) signalfd(r7, &(0x7f0000000100)={[0x101]}, 0x8) (async) waitid$P_PIDFD(0x3, r8, &(0x7f0000000400), 0x8, &(0x7f0000000300)) (async) pidfd_getfd(r7, r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:33 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x520a2107, &(0x7f0000000240)=0x1) (async) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x80000000}, {0x4, 0x3}, {0xd, 0x9}, {0x7, 0x5}, {0x10, 0x4}]}]}}, &(0x7f00000002c0)=""/141, 0x4e, 0x8d, 0x1}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 638.057878][T28285] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4e78) 04:47:33 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40510000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6bb8) [ 638.074940][T28291] input: syz0 as /devices/virtual/input/input4894 [ 638.160635][T28298] loop0: detected capacity change from 0 to 264192 04:47:33 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x520a2107, &(0x7f0000000240)=0x1) (async) r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x80000000}, {0x4, 0x3}, {0xd, 0x9}, {0x7, 0x5}, {0x10, 0x4}]}]}}, &(0x7f00000002c0)=""/141, 0x4e, 0x8d, 0x1}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 638.161675][T28297] input: syz0 as /devices/virtual/input/input4895 [ 638.187108][T28298] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 638.250429][T28319] input: syz0 as /devices/virtual/input/input4896 [ 638.277582][T28322] loop0: detected capacity change from 0 to 264192 [ 638.306297][T28322] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 638.345449][T28327] input: syz0 as /devices/virtual/input/input4897 04:47:33 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r6 = syz_io_uring_setup(0x2b15, &(0x7f0000000180)={0x0, 0xc93c, 0x18, 0x1, 0xc8, 0x0, r5}, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="7e11f3352510fc4ffa17c653bffdd8b3c698ea94de14b821bdf722e8df9c590604674e330c05fc239a90d44e214c0f0dab1ae387d3df57f5c1fb811f36fb41deb134910d244b1f1a7c68a1f521fe14ae14d78a0a4e34143b47577527093c474e372a3d248104141f597d4d0b050a8fd500000000664384158d16ad98babb7dfb83b3212e259fba56e7bc852b81f3841bf87bf536ad7809974d8833ba49845d9ea55b0aa258e950331185b4b486fff7c130fd268a67d102977622cc00"}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r9 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r9, 0x8000000) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r9, 0x10000000) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r12, 0x545d, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r12, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r13}}, 0x4769) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, r7, r4, r6, r4, r6, r8], 0x7, 0x0, 0x0, {0x0, r13}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) (async) syz_io_uring_setup(0x2b15, &(0x7f0000000180)={0x0, 0xc93c, 0x18, 0x1, 0xc8, 0x0, r5}, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="7e11f3352510fc4ffa17c653bffdd8b3c698ea94de14b821bdf722e8df9c590604674e330c05fc239a90d44e214c0f0dab1ae387d3df57f5c1fb811f36fb41deb134910d244b1f1a7c68a1f521fe14ae14d78a0a4e34143b47577527093c474e372a3d248104141f597d4d0b050a8fd500000000664384158d16ad98babb7dfb83b3212e259fba56e7bc852b81f3841bf87bf536ad7809974d8833ba49845d9ea55b0aa258e950331185b4b486fff7c130fd268a67d102977622cc00"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r9, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r9, 0x10000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCMSET(r12, 0x545d, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r12, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r13}}, 0x4769) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, r7, r4, r6, r4, r6, r8], 0x7, 0x0, 0x0, {0x0, r13}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:33 executing program 2: r0 = syz_io_uring_setup(0x1dfe, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x200000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x20daeda, 0x4) (async) r4 = memfd_create(&(0x7f00000003c0)='$\x00', 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = pidfd_open(r5, 0x0) (async) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r7}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) r8 = signalfd(r7, &(0x7f0000000100)={[0x101]}, 0x8) waitid$P_PIDFD(0x3, r8, &(0x7f0000000400), 0x8, &(0x7f0000000300)) pidfd_getfd(r7, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4e90) 04:47:33 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40520000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:33 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x840, &(0x7f0000000180)={0x0, 0xabbc, 0x0, 0x3, 0x30d, 0x0, r0}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r4 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x10000000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r7, 0x545d, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r7, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r8}}, 0x4769) syz_io_uring_submit(r1, r3, &(0x7f0000000780)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x4, 0x2, &(0x7f0000000700)=[{&(0x7f00000002c0)="0dc048fad82e168687a18771da6062ca7232e692021c6ee1a79e9319ac80068f3ffe3c2b577d4f721363d5ebc8ca95e2474df3c57db3124a5f9f4e17d0f5f1a0e01f5295900a7575112e23890a8db13b1461440530ac4cf658536c6930ac7ea82d5c51ac7206b2daa2379b828f45246e6b9bf54fccce0b829c41b97325301428448c23100b5454b5624c2cb9eaba2976d0cb9bcc8e0eebec86328445bc8d370d8127f08f91c2824aa110c1946f8e8648379a56250c51aea6ffbdba105bdab7267b0b82289c1803e999096f0d2618757e3e0b24aa9893eef0009d191066b8cd82ef", 0xe1}, {&(0x7f00000003c0)="f01b823ef594207e55cdaa904066f9bad7bcbb8df4bcf13ef3b383989cf2188919205c259407939dd583d5d742051d8f2633a28bc8250e08287e4c35914a9341b8a82ddbac59a475bb3490a10da88f5fa8a51f24747a85c9d414de3f6fc6dc21a597b59a551f7d2f8f746aeb60438a6161bce113625529c664eb49", 0x7b}, {&(0x7f0000000440)="769e1226af30693990dc5fecf2d97532eacf23383dbf938b9dcb4065a1cf94b8dd83777475ede537db3569c26eb41264e0a3dd828334753e270a5ec67659e0d3aa49950ead3062176310c0fca053cfc4ffb71044f8b4a7dc0f83f3492e6846488621c97cdd75eecaa33f8953a4e1bfa73a1b4b75a3096638693c8cdd2a2b974399880c771292907edf8b659c8dc57576884dcf0b59e2e508ee2d7b95e9bdd1a02f6ecc8d1e57163783de47eed8def4d29b28a9cfbaf34e4804c6990b2e2aad7b505cd218a54039213b26c2853852133b2db7699b2e5dbbc29a20d7b0", 0xdc}, {&(0x7f0000000540)="690cfdca20de40c457bd5d88829f2e18d60571a1013b00ed1e0b31bab15677aba93d6390784269b5e9c70426c6b6bc89cc6e79bb810757cefd533c5d667b32d8b25e424d72ab512269776595d547e81d877e5b378abed58d334fac2a5b634fd364fa70ad53f8956399c7319710028aba25d8dbf6e1040584cf8194bd3ea4cdaf217172bec31f9beb425f9ec918b89a043b9853efd5fe79b6a83dc86f9d7be86ee2b74670a0", 0xa5}, {&(0x7f0000000600)="93f253f6b654faf7330f2896f76399c514c39b199daa0eed660519105256fbf2a69d5ebc01dd215827c53cbf7a331e14d148deb9fe1454e976fb3741adb854fcbd552bde0f896d35d226e8efc009a6dd5331a2de8f", 0x55}, {&(0x7f0000000680)="4eb71dd3ecda24f2db41efee81416b879f24e4ba85add2fcb695b0110c1a3c2130601f91fd26d00780bbe1b49089997cc938649632030b8ec4f2ef8373fb47061d0d2722e85cb3b173", 0x49}], 0x6, 0x12, 0x1, {0x1, r8}}, 0xff) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = pidfd_open(r9, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2bf8, 0x421f, 0x0, &(0x7f0000000100)={[0xd855]}, 0x8) 04:47:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6bd0) 04:47:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6be8) 04:47:33 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40530000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 638.595042][T28333] input: syz0 as /devices/virtual/input/input4898 [ 638.599859][T28337] input: syz0 as /devices/virtual/input/input4899 [ 638.601127][T28335] loop0: detected capacity change from 0 to 264192 04:47:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ea8) [ 638.618662][T28335] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6c00) [ 638.701966][T28346] input: syz0 as /devices/virtual/input/input4900 04:47:33 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = pidfd_open(r2, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0xf939, 0x4}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x4}}, 0x4) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x624000, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d7000/0x1000)=nil, 0x1000, 0x0, 0x4010, r6, 0x10000000) [ 638.760844][T28350] input: syz0 as /devices/virtual/input/input4901 [ 638.761354][T28352] loop0: detected capacity change from 0 to 264192 04:47:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ec0) [ 638.766021][T28352] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 638.772609][T28354] input: syz0 as /devices/virtual/input/input4902 [ 638.803292][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 638.897649][T28360] input: syz0 as /devices/virtual/input/input4903 04:47:34 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r6 = syz_io_uring_setup(0x2b15, &(0x7f0000000180)={0x0, 0xc93c, 0x18, 0x1, 0xc8, 0x0, r5}, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="7e11f3352510fc4ffa17c653bffdd8b3c698ea94de14b821bdf722e8df9c590604674e330c05fc239a90d44e214c0f0dab1ae387d3df57f5c1fb811f36fb41deb134910d244b1f1a7c68a1f521fe14ae14d78a0a4e34143b47577527093c474e372a3d248104141f597d4d0b050a8fd500000000664384158d16ad98babb7dfb83b3212e259fba56e7bc852b81f3841bf87bf536ad7809974d8833ba49845d9ea55b0aa258e950331185b4b486fff7c130fd268a67d102977622cc00"}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) r9 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r9, 0x8000000) (async) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r9, 0x10000000) (async) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r12, 0x545d, 0x0) (async, rerun: 64) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r12, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r13}}, 0x4769) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, r7, r4, r6, r4, r6, r8], 0x7, 0x0, 0x0, {0x0, r13}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 04:47:34 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40540000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6c18) 04:47:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ed8) [ 639.247450][T28381] loop0: detected capacity change from 0 to 264192 [ 639.262613][T28380] input: syz0 as /devices/virtual/input/input4904 [ 639.270352][T28382] input: syz0 as /devices/virtual/input/input4905 [ 639.286154][T28381] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:34 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x840, &(0x7f0000000180)={0x0, 0xabbc, 0x0, 0x3, 0x30d, 0x0, r0}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r4 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x10000000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r7, 0x545d, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r7, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r8}}, 0x4769) syz_io_uring_submit(r1, r3, &(0x7f0000000780)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x4, 0x2, &(0x7f0000000700)=[{&(0x7f00000002c0)="0dc048fad82e168687a18771da6062ca7232e692021c6ee1a79e9319ac80068f3ffe3c2b577d4f721363d5ebc8ca95e2474df3c57db3124a5f9f4e17d0f5f1a0e01f5295900a7575112e23890a8db13b1461440530ac4cf658536c6930ac7ea82d5c51ac7206b2daa2379b828f45246e6b9bf54fccce0b829c41b97325301428448c23100b5454b5624c2cb9eaba2976d0cb9bcc8e0eebec86328445bc8d370d8127f08f91c2824aa110c1946f8e8648379a56250c51aea6ffbdba105bdab7267b0b82289c1803e999096f0d2618757e3e0b24aa9893eef0009d191066b8cd82ef", 0xe1}, {&(0x7f00000003c0)="f01b823ef594207e55cdaa904066f9bad7bcbb8df4bcf13ef3b383989cf2188919205c259407939dd583d5d742051d8f2633a28bc8250e08287e4c35914a9341b8a82ddbac59a475bb3490a10da88f5fa8a51f24747a85c9d414de3f6fc6dc21a597b59a551f7d2f8f746aeb60438a6161bce113625529c664eb49", 0x7b}, {&(0x7f0000000440)="769e1226af30693990dc5fecf2d97532eacf23383dbf938b9dcb4065a1cf94b8dd83777475ede537db3569c26eb41264e0a3dd828334753e270a5ec67659e0d3aa49950ead3062176310c0fca053cfc4ffb71044f8b4a7dc0f83f3492e6846488621c97cdd75eecaa33f8953a4e1bfa73a1b4b75a3096638693c8cdd2a2b974399880c771292907edf8b659c8dc57576884dcf0b59e2e508ee2d7b95e9bdd1a02f6ecc8d1e57163783de47eed8def4d29b28a9cfbaf34e4804c6990b2e2aad7b505cd218a54039213b26c2853852133b2db7699b2e5dbbc29a20d7b0", 0xdc}, {&(0x7f0000000540)="690cfdca20de40c457bd5d88829f2e18d60571a1013b00ed1e0b31bab15677aba93d6390784269b5e9c70426c6b6bc89cc6e79bb810757cefd533c5d667b32d8b25e424d72ab512269776595d547e81d877e5b378abed58d334fac2a5b634fd364fa70ad53f8956399c7319710028aba25d8dbf6e1040584cf8194bd3ea4cdaf217172bec31f9beb425f9ec918b89a043b9853efd5fe79b6a83dc86f9d7be86ee2b74670a0", 0xa5}, {&(0x7f0000000600)="93f253f6b654faf7330f2896f76399c514c39b199daa0eed660519105256fbf2a69d5ebc01dd215827c53cbf7a331e14d148deb9fe1454e976fb3741adb854fcbd552bde0f896d35d226e8efc009a6dd5331a2de8f", 0x55}, {&(0x7f0000000680)="4eb71dd3ecda24f2db41efee81416b879f24e4ba85add2fcb695b0110c1a3c2130601f91fd26d00780bbe1b49089997cc938649632030b8ec4f2ef8373fb47061d0d2722e85cb3b173", 0x49}], 0x6, 0x12, 0x1, {0x1, r8}}, 0xff) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = pidfd_open(r9, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2bf8, 0x421f, 0x0, &(0x7f0000000100)={[0xd855]}, 0x8) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x840, &(0x7f0000000180)={0x0, 0xabbc, 0x0, 0x3, 0x30d, 0x0, r0}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r4, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x10000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCMSET(r7, 0x545d, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r7, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r8}}, 0x4769) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000780)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x4, 0x2, &(0x7f0000000700)=[{&(0x7f00000002c0)="0dc048fad82e168687a18771da6062ca7232e692021c6ee1a79e9319ac80068f3ffe3c2b577d4f721363d5ebc8ca95e2474df3c57db3124a5f9f4e17d0f5f1a0e01f5295900a7575112e23890a8db13b1461440530ac4cf658536c6930ac7ea82d5c51ac7206b2daa2379b828f45246e6b9bf54fccce0b829c41b97325301428448c23100b5454b5624c2cb9eaba2976d0cb9bcc8e0eebec86328445bc8d370d8127f08f91c2824aa110c1946f8e8648379a56250c51aea6ffbdba105bdab7267b0b82289c1803e999096f0d2618757e3e0b24aa9893eef0009d191066b8cd82ef", 0xe1}, {&(0x7f00000003c0)="f01b823ef594207e55cdaa904066f9bad7bcbb8df4bcf13ef3b383989cf2188919205c259407939dd583d5d742051d8f2633a28bc8250e08287e4c35914a9341b8a82ddbac59a475bb3490a10da88f5fa8a51f24747a85c9d414de3f6fc6dc21a597b59a551f7d2f8f746aeb60438a6161bce113625529c664eb49", 0x7b}, {&(0x7f0000000440)="769e1226af30693990dc5fecf2d97532eacf23383dbf938b9dcb4065a1cf94b8dd83777475ede537db3569c26eb41264e0a3dd828334753e270a5ec67659e0d3aa49950ead3062176310c0fca053cfc4ffb71044f8b4a7dc0f83f3492e6846488621c97cdd75eecaa33f8953a4e1bfa73a1b4b75a3096638693c8cdd2a2b974399880c771292907edf8b659c8dc57576884dcf0b59e2e508ee2d7b95e9bdd1a02f6ecc8d1e57163783de47eed8def4d29b28a9cfbaf34e4804c6990b2e2aad7b505cd218a54039213b26c2853852133b2db7699b2e5dbbc29a20d7b0", 0xdc}, {&(0x7f0000000540)="690cfdca20de40c457bd5d88829f2e18d60571a1013b00ed1e0b31bab15677aba93d6390784269b5e9c70426c6b6bc89cc6e79bb810757cefd533c5d667b32d8b25e424d72ab512269776595d547e81d877e5b378abed58d334fac2a5b634fd364fa70ad53f8956399c7319710028aba25d8dbf6e1040584cf8194bd3ea4cdaf217172bec31f9beb425f9ec918b89a043b9853efd5fe79b6a83dc86f9d7be86ee2b74670a0", 0xa5}, {&(0x7f0000000600)="93f253f6b654faf7330f2896f76399c514c39b199daa0eed660519105256fbf2a69d5ebc01dd215827c53cbf7a331e14d148deb9fe1454e976fb3741adb854fcbd552bde0f896d35d226e8efc009a6dd5331a2de8f", 0x55}, {&(0x7f0000000680)="4eb71dd3ecda24f2db41efee81416b879f24e4ba85add2fcb695b0110c1a3c2130601f91fd26d00780bbe1b49089997cc938649632030b8ec4f2ef8373fb47061d0d2722e85cb3b173", 0x49}], 0x6, 0x12, 0x1, {0x1, r8}}, 0xff) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r9, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2bf8, 0x421f, 0x0, &(0x7f0000000100)={[0xd855]}, 0x8) (async) 04:47:34 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = pidfd_open(r2, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0xf939, 0x4}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x4}}, 0x4) (rerun: 64) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x624000, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d7000/0x1000)=nil, 0x1000, 0x0, 0x4010, r6, 0x10000000) 04:47:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6c30) 04:47:34 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40550000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ef0) [ 639.487226][T28392] input: syz0 as /devices/virtual/input/input4906 [ 639.491740][T28396] loop0: detected capacity change from 0 to 264192 04:47:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6c48) 04:47:34 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40560000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4f08) [ 639.525656][T28394] input: syz0 as /devices/virtual/input/input4907 [ 639.530339][T28396] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 639.662951][T28404] input: syz0 as /devices/virtual/input/input4908 [ 639.667480][T28407] loop0: detected capacity change from 0 to 264192 [ 639.685832][T28407] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 639.690154][T28409] input: syz0 as /devices/virtual/input/input4909 04:47:35 executing program 5: r0 = syz_io_uring_setup(0x1e00, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0xa2}, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10307e, 0x0, 0x4) r3 = syz_clone(0x8005800, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x470f, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f00000002c0)) syz_io_uring_setup(0x3a1b, &(0x7f0000000300)={0x0, 0x77e2, 0x4, 0x2, 0xc0, 0x0, r5}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) syz_io_uring_setup(0x16a5, &(0x7f0000000180)={0x0, 0x7dea, 0x10, 0x2, 0xa9, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 04:47:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6c60) 04:47:35 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40570000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4f20) [ 640.069865][T28428] input: syz0 as /devices/virtual/input/input4910 [ 640.072243][T28430] loop0: detected capacity change from 0 to 264192 [ 640.077693][T28429] input: syz0 as /devices/virtual/input/input4911 [ 640.116705][T28430] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:35 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x840, &(0x7f0000000180)={0x0, 0xabbc, 0x0, 0x3, 0x30d, 0x0, r0}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r4 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x10000000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r7, 0x545d, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r7, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r8}}, 0x4769) syz_io_uring_submit(r1, r3, &(0x7f0000000780)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x4, 0x2, &(0x7f0000000700)=[{&(0x7f00000002c0)="0dc048fad82e168687a18771da6062ca7232e692021c6ee1a79e9319ac80068f3ffe3c2b577d4f721363d5ebc8ca95e2474df3c57db3124a5f9f4e17d0f5f1a0e01f5295900a7575112e23890a8db13b1461440530ac4cf658536c6930ac7ea82d5c51ac7206b2daa2379b828f45246e6b9bf54fccce0b829c41b97325301428448c23100b5454b5624c2cb9eaba2976d0cb9bcc8e0eebec86328445bc8d370d8127f08f91c2824aa110c1946f8e8648379a56250c51aea6ffbdba105bdab7267b0b82289c1803e999096f0d2618757e3e0b24aa9893eef0009d191066b8cd82ef", 0xe1}, {&(0x7f00000003c0)="f01b823ef594207e55cdaa904066f9bad7bcbb8df4bcf13ef3b383989cf2188919205c259407939dd583d5d742051d8f2633a28bc8250e08287e4c35914a9341b8a82ddbac59a475bb3490a10da88f5fa8a51f24747a85c9d414de3f6fc6dc21a597b59a551f7d2f8f746aeb60438a6161bce113625529c664eb49", 0x7b}, {&(0x7f0000000440)="769e1226af30693990dc5fecf2d97532eacf23383dbf938b9dcb4065a1cf94b8dd83777475ede537db3569c26eb41264e0a3dd828334753e270a5ec67659e0d3aa49950ead3062176310c0fca053cfc4ffb71044f8b4a7dc0f83f3492e6846488621c97cdd75eecaa33f8953a4e1bfa73a1b4b75a3096638693c8cdd2a2b974399880c771292907edf8b659c8dc57576884dcf0b59e2e508ee2d7b95e9bdd1a02f6ecc8d1e57163783de47eed8def4d29b28a9cfbaf34e4804c6990b2e2aad7b505cd218a54039213b26c2853852133b2db7699b2e5dbbc29a20d7b0", 0xdc}, {&(0x7f0000000540)="690cfdca20de40c457bd5d88829f2e18d60571a1013b00ed1e0b31bab15677aba93d6390784269b5e9c70426c6b6bc89cc6e79bb810757cefd533c5d667b32d8b25e424d72ab512269776595d547e81d877e5b378abed58d334fac2a5b634fd364fa70ad53f8956399c7319710028aba25d8dbf6e1040584cf8194bd3ea4cdaf217172bec31f9beb425f9ec918b89a043b9853efd5fe79b6a83dc86f9d7be86ee2b74670a0", 0xa5}, {&(0x7f0000000600)="93f253f6b654faf7330f2896f76399c514c39b199daa0eed660519105256fbf2a69d5ebc01dd215827c53cbf7a331e14d148deb9fe1454e976fb3741adb854fcbd552bde0f896d35d226e8efc009a6dd5331a2de8f", 0x55}, {&(0x7f0000000680)="4eb71dd3ecda24f2db41efee81416b879f24e4ba85add2fcb695b0110c1a3c2130601f91fd26d00780bbe1b49089997cc938649632030b8ec4f2ef8373fb47061d0d2722e85cb3b173", 0x49}], 0x6, 0x12, 0x1, {0x1, r8}}, 0xff) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = pidfd_open(r9, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2bf8, 0x421f, 0x0, &(0x7f0000000100)={[0xd855]}, 0x8) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x840, &(0x7f0000000180)={0x0, 0xabbc, 0x0, 0x3, 0x30d, 0x0, r0}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r4, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x10000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCMSET(r7, 0x545d, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r7, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r8}}, 0x4769) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000780)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x4, 0x2, &(0x7f0000000700)=[{&(0x7f00000002c0)="0dc048fad82e168687a18771da6062ca7232e692021c6ee1a79e9319ac80068f3ffe3c2b577d4f721363d5ebc8ca95e2474df3c57db3124a5f9f4e17d0f5f1a0e01f5295900a7575112e23890a8db13b1461440530ac4cf658536c6930ac7ea82d5c51ac7206b2daa2379b828f45246e6b9bf54fccce0b829c41b97325301428448c23100b5454b5624c2cb9eaba2976d0cb9bcc8e0eebec86328445bc8d370d8127f08f91c2824aa110c1946f8e8648379a56250c51aea6ffbdba105bdab7267b0b82289c1803e999096f0d2618757e3e0b24aa9893eef0009d191066b8cd82ef", 0xe1}, {&(0x7f00000003c0)="f01b823ef594207e55cdaa904066f9bad7bcbb8df4bcf13ef3b383989cf2188919205c259407939dd583d5d742051d8f2633a28bc8250e08287e4c35914a9341b8a82ddbac59a475bb3490a10da88f5fa8a51f24747a85c9d414de3f6fc6dc21a597b59a551f7d2f8f746aeb60438a6161bce113625529c664eb49", 0x7b}, {&(0x7f0000000440)="769e1226af30693990dc5fecf2d97532eacf23383dbf938b9dcb4065a1cf94b8dd83777475ede537db3569c26eb41264e0a3dd828334753e270a5ec67659e0d3aa49950ead3062176310c0fca053cfc4ffb71044f8b4a7dc0f83f3492e6846488621c97cdd75eecaa33f8953a4e1bfa73a1b4b75a3096638693c8cdd2a2b974399880c771292907edf8b659c8dc57576884dcf0b59e2e508ee2d7b95e9bdd1a02f6ecc8d1e57163783de47eed8def4d29b28a9cfbaf34e4804c6990b2e2aad7b505cd218a54039213b26c2853852133b2db7699b2e5dbbc29a20d7b0", 0xdc}, {&(0x7f0000000540)="690cfdca20de40c457bd5d88829f2e18d60571a1013b00ed1e0b31bab15677aba93d6390784269b5e9c70426c6b6bc89cc6e79bb810757cefd533c5d667b32d8b25e424d72ab512269776595d547e81d877e5b378abed58d334fac2a5b634fd364fa70ad53f8956399c7319710028aba25d8dbf6e1040584cf8194bd3ea4cdaf217172bec31f9beb425f9ec918b89a043b9853efd5fe79b6a83dc86f9d7be86ee2b74670a0", 0xa5}, {&(0x7f0000000600)="93f253f6b654faf7330f2896f76399c514c39b199daa0eed660519105256fbf2a69d5ebc01dd215827c53cbf7a331e14d148deb9fe1454e976fb3741adb854fcbd552bde0f896d35d226e8efc009a6dd5331a2de8f", 0x55}, {&(0x7f0000000680)="4eb71dd3ecda24f2db41efee81416b879f24e4ba85add2fcb695b0110c1a3c2130601f91fd26d00780bbe1b49089997cc938649632030b8ec4f2ef8373fb47061d0d2722e85cb3b173", 0x49}], 0x6, 0x12, 0x1, {0x1, r8}}, 0xff) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r9, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2bf8, 0x421f, 0x0, &(0x7f0000000100)={[0xd855]}, 0x8) (async) 04:47:35 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r3 = pidfd_open(r2, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0xf939, 0x4}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x4}}, 0x4) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x624000, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d7000/0x1000)=nil, 0x1000, 0x0, 0x4010, r6, 0x10000000) 04:47:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6c78) 04:47:35 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40580000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4f38) 04:47:35 executing program 5: r0 = syz_io_uring_setup(0x1e00, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0xa2}, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10307e, 0x0, 0x4) r3 = syz_clone(0x8005800, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x470f, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f00000002c0)) syz_io_uring_setup(0x3a1b, &(0x7f0000000300)={0x0, 0x77e2, 0x4, 0x2, 0xc0, 0x0, r5}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) syz_io_uring_setup(0x16a5, &(0x7f0000000180)={0x0, 0x7dea, 0x10, 0x2, 0xa9, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x1e00, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0xa2}, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000004c0), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10307e, 0x0, 0x4) (async) syz_clone(0x8005800, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) (async) syz_io_uring_setup(0x470f, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x3a1b, &(0x7f0000000300)={0x0, 0x77e2, 0x4, 0x2, 0xc0, 0x0, r5}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x16a5, &(0x7f0000000180)={0x0, 0x7dea, 0x10, 0x2, 0xa9, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) 04:47:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6c90) [ 640.367149][T28440] input: syz0 as /devices/virtual/input/input4912 [ 640.388166][T28442] loop0: detected capacity change from 0 to 264192 [ 640.389720][T28441] input: syz0 as /devices/virtual/input/input4913 04:47:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4f50) 04:47:35 executing program 5: r0 = syz_io_uring_setup(0x1e00, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0xa2}, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10307e, 0x0, 0x4) r3 = syz_clone(0x8005800, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) syz_io_uring_setup(0x470f, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f00000002c0)) syz_io_uring_setup(0x3a1b, &(0x7f0000000300)={0x0, 0x77e2, 0x4, 0x2, 0xc0, 0x0, r5}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) syz_io_uring_setup(0x16a5, &(0x7f0000000180)={0x0, 0x7dea, 0x10, 0x2, 0xa9, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x1e00, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0xa2}, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000004c0), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10307e, 0x0, 0x4) (async) syz_clone(0x8005800, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) (async) syz_io_uring_setup(0x470f, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x3a1b, &(0x7f0000000300)={0x0, 0x77e2, 0x4, 0x2, 0xc0, 0x0, r5}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x16a5, &(0x7f0000000180)={0x0, 0x7dea, 0x10, 0x2, 0xa9, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) [ 640.436682][T28442] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:35 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40590000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6ca8) 04:47:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4f68) [ 640.517042][T28465] input: syz0 as /devices/virtual/input/input4914 [ 640.528787][T28466] input: syz0 as /devices/virtual/input/input4915 [ 640.616539][T28483] loop0: detected capacity change from 0 to 264192 [ 640.627238][T28486] input: syz0 as /devices/virtual/input/input4916 [ 640.648235][T28494] input: syz0 as /devices/virtual/input/input4917 [ 640.648477][T28483] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:36 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000100)=0x7, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:36 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:36 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6cc0) 04:47:36 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x405a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4f80) 04:47:36 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) [ 641.255477][T28546] loop0: detected capacity change from 0 to 264192 [ 641.261862][T28546] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:36 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x405b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4f98) 04:47:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6cd8) 04:47:36 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 641.278309][T28549] input: syz0 as /devices/virtual/input/input4918 [ 641.299744][T28547] input: syz0 as /devices/virtual/input/input4919 [ 641.436682][T28558] input: syz0 as /devices/virtual/input/input4920 [ 641.449690][T28557] input: syz0 as /devices/virtual/input/input4921 [ 641.455084][T28559] loop0: detected capacity change from 0 to 264192 04:47:36 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x405c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 641.457645][T28559] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 641.495814][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 641.569528][T28573] loop0: detected capacity change from 0 to 264192 [ 641.582705][T28573] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 641.640149][ T8317] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:36 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000100)=0x7, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6cf0) 04:47:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4fb0) 04:47:36 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:36 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:36 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x405d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 641.727576][T28576] input: syz0 as /devices/virtual/input/input4922 [ 641.747396][T28581] loop0: detected capacity change from 0 to 264192 04:47:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6d08) 04:47:37 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2bc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:37 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x405e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 641.775263][T28581] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 641.775599][T28584] input: syz0 as /devices/virtual/input/input4923 04:47:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4fc8) 04:47:37 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_setup(0x45e8, &(0x7f0000000180)={0x0, 0x6a0d, 0x0, 0x3, 0xb1, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6d20) [ 641.853646][T28596] input: syz0 as /devices/virtual/input/input4924 [ 641.929796][T28603] input: syz0 as /devices/virtual/input/input4925 [ 641.933373][T28606] loop0: detected capacity change from 0 to 264192 [ 641.955155][T28606] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 641.969642][T28607] input: syz0 as /devices/virtual/input/input4926 04:47:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6d38) 04:47:37 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000100)=0x7, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000100)=0x7, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4fe0) 04:47:37 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x405f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:37 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40600000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 642.368970][T28615] loop0: detected capacity change from 0 to 264192 04:47:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6d50) 04:47:37 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2bc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2bc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x4ff8) [ 642.370870][T28615] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 642.393733][T28616] input: syz0 as /devices/virtual/input/input4927 [ 642.393993][T28617] input: syz0 as /devices/virtual/input/input4928 04:47:37 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_setup(0x45e8, &(0x7f0000000180)={0x0, 0x6a0d, 0x0, 0x3, 0xb1, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_setup(0x45e8, &(0x7f0000000180)={0x0, 0x6a0d, 0x0, 0x3, 0xb1, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6d68) [ 642.554889][T28631] input: syz0 as /devices/virtual/input/input4929 [ 642.589588][T28632] loop0: detected capacity change from 0 to 264192 04:47:37 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40610000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 642.600377][T28632] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5010) 04:47:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6d80) [ 642.639480][T28637] input: syz0 as /devices/virtual/input/input4930 [ 642.670164][T28644] input: syz0 as /devices/virtual/input/input4931 [ 642.738971][T28649] loop0: detected capacity change from 0 to 264192 [ 642.747911][T28649] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 642.800614][T28658] input: syz0 as /devices/virtual/input/input4932 [ 642.820975][T28660] input: syz0 as /devices/virtual/input/input4933 04:47:38 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r0, 0x0) 04:47:38 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40620000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6d98) 04:47:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5028) 04:47:38 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2bc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:38 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_setup(0x45e8, &(0x7f0000000180)={0x0, 0x6a0d, 0x0, 0x3, 0xb1, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_setup(0x45e8, &(0x7f0000000180)={0x0, 0x6a0d, 0x0, 0x3, 0xb1, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) [ 643.210440][T28666] input: syz0 as /devices/virtual/input/input4934 [ 643.237645][T28663] input: syz0 as /devices/virtual/input/input4935 04:47:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5040) 04:47:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6db0) [ 643.319035][T28674] loop0: detected capacity change from 0 to 264192 [ 643.339615][T28674] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:38 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40630000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 643.408447][T28682] input: syz0 as /devices/virtual/input/input4936 [ 643.425660][T28683] input: syz0 as /devices/virtual/input/input4937 04:47:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6dc8) 04:47:38 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40640000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 643.465292][T28692] loop0: detected capacity change from 0 to 264192 [ 643.467074][T28692] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5058) 04:47:38 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r0, 0x0) (async) [ 643.572122][T28695] loop0: detected capacity change from 0 to 264192 [ 643.599403][T28695] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6de0) 04:47:38 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40650000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 643.602582][T28697] input: syz0 as /devices/virtual/input/input4938 [ 643.622563][T28699] input: syz0 as /devices/virtual/input/input4939 04:47:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5070) [ 643.639704][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 643.715421][T28706] input: syz0 as /devices/virtual/input/input4940 [ 643.725726][T28707] loop0: detected capacity change from 0 to 264192 [ 643.738728][T28707] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 643.770400][T28716] input: syz0 as /devices/virtual/input/input4941 04:47:39 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40660000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:39 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) getpgrp(r3) r5 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6df8) 04:47:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5088) 04:47:39 executing program 2: r0 = syz_io_uring_setup(0x17af, &(0x7f0000000080)={0x0, 0x2119, 0x0, 0x0, 0x80000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = syz_mount_image$pvfs2(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f0000001400)=[{&(0x7f00000001c0)="18509af6776a3ea6b09a0303f0affac6d842503401e37c2ed78fd233ada48a80e7edb2aab7a8994f03d0c6b1b0a173a57cabf88d693ba036fb9c80e29f3d11b56acff6ca122f058a5044d134141e02fb4e2877aac42b22c9e60992423847f4cc0377f94384d1a54afcfd4335afab1de26f640fded80aaad0f8482b0d361302d23b9ef0", 0x83}, {&(0x7f00000002c0)="7bd4045d6086aa16ff0feb68a9b7995528d62911", 0x14, 0x4}, {&(0x7f0000000300)="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", 0x1000, 0x1}, {&(0x7f0000001300)="aa82537069351c36810e23ece46b352ebe32d8c1448ef9bf05381fe79d1a374c1cc9358e9bd9af9ebae4ede0bb5bc457256f344fffa937369be0fd40635850cf7a5cb4b18f92158cfbf733e211356449e11fc6294737bb3c28ea93dc1addce6e9b09cde70a2bcd7b8eae8094232dbd2c57651eef64dfecd9c0115ebdd4d8bc7fad5d416d1daf95a26c355c611a6c235405ad3f467a4483d3b1d3f4e9f1adc265228f4cb4a3c628ed76492326110d6432dada9dfe26eed8a183698a5e958c5477cf1fbd68cdd1efbb09e3107dc59b22de6b2f37eb61148540779baa198af91e6bc4320e4ac75cf7b5b0aec39acd", 0xed, 0x7}], 0x2000, &(0x7f0000001600)=ANY=[@ANYBLOB='\x00,),,,\x00,\x00,\x00,&(\\,\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f757365723d2c6f626a5f757365723d5d212c736d61636b6673666c6f6f723d5c2d0000007365725f752c66756e633d4250524d5f434845434bb5e39bd0812bc3ba4abdbe2c7569643d823435fb41f41c90387540cf892067e5833c4c383ce56d3d521efebd7f90bf54c4c05da8e698b8f53d942e85f7865bed9e0010b4bbefd767db4b9d0f3cc139cc00000000000000ec9bd0ed52922d433daafa0906df9ebb1b5a7a6370dab5231c0eaad5df718c8fab09333b", @ANYRESDEC, @ANYBLOB=',\x00']) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000015c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r8, &(0x7f0000001540)={0x8101, 0x40, 0x11}, &(0x7f0000001580)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0xffffffff) r10 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) r11 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r11, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) syz_io_uring_setup(0x6548, &(0x7f0000001480)={0x0, 0x2663, 0x2, 0x0, 0x312, 0x0, r11}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f0000001500), &(0x7f0000001700)) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r3) 04:47:39 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40670000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 644.115447][T28719] loop0: detected capacity change from 0 to 264192 [ 644.130255][T28719] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 644.159569][T28722] input: syz0 as /devices/virtual/input/input4943 04:47:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6e10) [ 644.160057][T28723] input: syz0 as /devices/virtual/input/input4942 04:47:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x50a0) [ 644.264533][T28725] loop2: detected capacity change from 0 to 8 [ 644.278735][T28731] loop0: detected capacity change from 0 to 264192 [ 644.319327][T28731] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:39 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r0, 0x0) 04:47:39 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40680000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x50b8) 04:47:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6e28) [ 644.355924][T28738] input: syz0 as /devices/virtual/input/input4944 [ 644.356326][T28737] input: syz0 as /devices/virtual/input/input4945 [ 644.509993][T28744] loop0: detected capacity change from 0 to 264192 [ 644.526241][T28744] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6e40) [ 644.541856][T28745] input: syz0 as /devices/virtual/input/input4946 [ 644.543285][T28746] input: syz0 as /devices/virtual/input/input4947 [ 644.653525][T28753] input: syz0 as /devices/virtual/input/input4948 04:47:40 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) getpgrp(r3) r5 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r4) (async) getpgrp(r3) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:40 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40690000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x50d0) 04:47:40 executing program 2: r0 = syz_io_uring_setup(0x17af, &(0x7f0000000080)={0x0, 0x2119, 0x0, 0x0, 0x80000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = syz_mount_image$pvfs2(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f0000001400)=[{&(0x7f00000001c0)="18509af6776a3ea6b09a0303f0affac6d842503401e37c2ed78fd233ada48a80e7edb2aab7a8994f03d0c6b1b0a173a57cabf88d693ba036fb9c80e29f3d11b56acff6ca122f058a5044d134141e02fb4e2877aac42b22c9e60992423847f4cc0377f94384d1a54afcfd4335afab1de26f640fded80aaad0f8482b0d361302d23b9ef0", 0x83}, {&(0x7f00000002c0)="7bd4045d6086aa16ff0feb68a9b7995528d62911", 0x14, 0x4}, {&(0x7f0000000300)="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", 0x1000, 0x1}, {&(0x7f0000001300)="aa82537069351c36810e23ece46b352ebe32d8c1448ef9bf05381fe79d1a374c1cc9358e9bd9af9ebae4ede0bb5bc457256f344fffa937369be0fd40635850cf7a5cb4b18f92158cfbf733e211356449e11fc6294737bb3c28ea93dc1addce6e9b09cde70a2bcd7b8eae8094232dbd2c57651eef64dfecd9c0115ebdd4d8bc7fad5d416d1daf95a26c355c611a6c235405ad3f467a4483d3b1d3f4e9f1adc265228f4cb4a3c628ed76492326110d6432dada9dfe26eed8a183698a5e958c5477cf1fbd68cdd1efbb09e3107dc59b22de6b2f37eb61148540779baa198af91e6bc4320e4ac75cf7b5b0aec39acd", 0xed, 0x7}], 0x2000, &(0x7f0000001600)=ANY=[@ANYBLOB='\x00,),,,\x00,\x00,\x00,&(\\,\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f757365723d2c6f626a5f757365723d5d212c736d61636b6673666c6f6f723d5c2d0000007365725f752c66756e633d4250524d5f434845434bb5e39bd0812bc3ba4abdbe2c7569643d823435fb41f41c90387540cf892067e5833c4c383ce56d3d521efebd7f90bf54c4c05da8e698b8f53d942e85f7865bed9e0010b4bbefd767db4b9d0f3cc139cc00000000000000ec9bd0ed52922d433daafa0906df9ebb1b5a7a6370dab5231c0eaad5df718c8fab09333b", @ANYRESDEC, @ANYBLOB=',\x00']) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000015c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r8, &(0x7f0000001540)={0x8101, 0x40, 0x11}, &(0x7f0000001580)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0xffffffff) r10 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) r11 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r11, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) syz_io_uring_setup(0x6548, &(0x7f0000001480)={0x0, 0x2663, 0x2, 0x0, 0x312, 0x0, r11}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f0000001500), &(0x7f0000001700)) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r3) syz_io_uring_setup(0x17af, &(0x7f0000000080)={0x0, 0x2119, 0x0, 0x0, 0x80000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_mount_image$pvfs2(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f0000001400)=[{&(0x7f00000001c0)="18509af6776a3ea6b09a0303f0affac6d842503401e37c2ed78fd233ada48a80e7edb2aab7a8994f03d0c6b1b0a173a57cabf88d693ba036fb9c80e29f3d11b56acff6ca122f058a5044d134141e02fb4e2877aac42b22c9e60992423847f4cc0377f94384d1a54afcfd4335afab1de26f640fded80aaad0f8482b0d361302d23b9ef0", 0x83}, {&(0x7f00000002c0)="7bd4045d6086aa16ff0feb68a9b7995528d62911", 0x14, 0x4}, {&(0x7f0000000300)="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", 0x1000, 0x1}, {&(0x7f0000001300)="aa82537069351c36810e23ece46b352ebe32d8c1448ef9bf05381fe79d1a374c1cc9358e9bd9af9ebae4ede0bb5bc457256f344fffa937369be0fd40635850cf7a5cb4b18f92158cfbf733e211356449e11fc6294737bb3c28ea93dc1addce6e9b09cde70a2bcd7b8eae8094232dbd2c57651eef64dfecd9c0115ebdd4d8bc7fad5d416d1daf95a26c355c611a6c235405ad3f467a4483d3b1d3f4e9f1adc265228f4cb4a3c628ed76492326110d6432dada9dfe26eed8a183698a5e958c5477cf1fbd68cdd1efbb09e3107dc59b22de6b2f37eb61148540779baa198af91e6bc4320e4ac75cf7b5b0aec39acd", 0xed, 0x7}], 0x2000, &(0x7f0000001600)=ANY=[@ANYBLOB='\x00,),,,\x00,\x00,\x00,&(\\,\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f757365723d2c6f626a5f757365723d5d212c736d61636b6673666c6f6f723d5c2d0000007365725f752c66756e633d4250524d5f434845434bb5e39bd0812bc3ba4abdbe2c7569643d823435fb41f41c90387540cf892067e5833c4c383ce56d3d521efebd7f90bf54c4c05da8e698b8f53d942e85f7865bed9e0010b4bbefd767db4b9d0f3cc139cc00000000000000ec9bd0ed52922d433daafa0906df9ebb1b5a7a6370dab5231c0eaad5df718c8fab09333b", @ANYRESDEC, @ANYBLOB=',\x00']) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r7, &(0x7f00000015c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r8, &(0x7f0000001540)={0x8101, 0x40, 0x11}, &(0x7f0000001580)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0xffffffff) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) io_uring_enter(r11, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) syz_io_uring_setup(0x6548, &(0x7f0000001480)={0x0, 0x2663, 0x2, 0x0, 0x312, 0x0, r11}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f0000001500), &(0x7f0000001700)) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x11, r3) (async) 04:47:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6e58) [ 644.909046][T28756] input: syz0 as /devices/virtual/input/input4949 [ 644.927129][T28757] loop0: detected capacity change from 0 to 264192 [ 644.932222][T28757] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 644.988880][T28760] input: syz0 as /devices/virtual/input/input4950 04:47:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x50e8) [ 645.030390][T28765] loop2: detected capacity change from 0 to 8 04:47:40 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x406a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 645.147321][T28780] input: syz0 as /devices/virtual/input/input4951 [ 645.171301][T28792] loop0: detected capacity change from 0 to 264192 [ 645.187437][T28792] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5100) 04:47:40 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d3000/0x2000)=nil, 0x2000, 0x4000004, 0x810, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x11c, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6e70) 04:47:40 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x406b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:40 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) getpgrp(r3) r5 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r4) (async) getpgrp(r3) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:40 executing program 2: r0 = syz_io_uring_setup(0x17af, &(0x7f0000000080)={0x0, 0x2119, 0x0, 0x0, 0x80000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r8 = syz_mount_image$pvfs2(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f0000001400)=[{&(0x7f00000001c0)="18509af6776a3ea6b09a0303f0affac6d842503401e37c2ed78fd233ada48a80e7edb2aab7a8994f03d0c6b1b0a173a57cabf88d693ba036fb9c80e29f3d11b56acff6ca122f058a5044d134141e02fb4e2877aac42b22c9e60992423847f4cc0377f94384d1a54afcfd4335afab1de26f640fded80aaad0f8482b0d361302d23b9ef0", 0x83}, {&(0x7f00000002c0)="7bd4045d6086aa16ff0feb68a9b7995528d62911", 0x14, 0x4}, {&(0x7f0000000300)="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", 0x1000, 0x1}, {&(0x7f0000001300)="aa82537069351c36810e23ece46b352ebe32d8c1448ef9bf05381fe79d1a374c1cc9358e9bd9af9ebae4ede0bb5bc457256f344fffa937369be0fd40635850cf7a5cb4b18f92158cfbf733e211356449e11fc6294737bb3c28ea93dc1addce6e9b09cde70a2bcd7b8eae8094232dbd2c57651eef64dfecd9c0115ebdd4d8bc7fad5d416d1daf95a26c355c611a6c235405ad3f467a4483d3b1d3f4e9f1adc265228f4cb4a3c628ed76492326110d6432dada9dfe26eed8a183698a5e958c5477cf1fbd68cdd1efbb09e3107dc59b22de6b2f37eb61148540779baa198af91e6bc4320e4ac75cf7b5b0aec39acd", 0xed, 0x7}], 0x2000, &(0x7f0000001600)=ANY=[@ANYBLOB='\x00,),,,\x00,\x00,\x00,&(\\,\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f757365723d2c6f626a5f757365723d5d212c736d61636b6673666c6f6f723d5c2d0000007365725f752c66756e633d4250524d5f434845434bb5e39bd0812bc3ba4abdbe2c7569643d823435fb41f41c90387540cf892067e5833c4c383ce56d3d521efebd7f90bf54c4c05da8e698b8f53d942e85f7865bed9e0010b4bbefd767db4b9d0f3cc139cc00000000000000ec9bd0ed52922d433daafa0906df9ebb1b5a7a6370dab5231c0eaad5df718c8fab09333b", @ANYRESDEC, @ANYBLOB=',\x00']) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000015c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r8, &(0x7f0000001540)={0x8101, 0x40, 0x11}, &(0x7f0000001580)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0xffffffff) (async) r10 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) (async) r11 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r11, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) syz_io_uring_setup(0x6548, &(0x7f0000001480)={0x0, 0x2663, 0x2, 0x0, 0x312, 0x0, r11}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f0000001500), &(0x7f0000001700)) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x11, r3) [ 645.634965][T28797] loop0: detected capacity change from 0 to 264192 [ 645.640476][T28799] input: syz0 as /devices/virtual/input/input4952 04:47:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6e88) 04:47:40 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x406c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 645.663446][T28798] input: syz0 as /devices/virtual/input/input4953 04:47:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5118) [ 645.674833][T28797] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 645.763940][T28811] loop2: detected capacity change from 0 to 8 04:47:41 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d3000/0x2000)=nil, 0x2000, 0x4000004, 0x810, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x11c, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 04:47:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6ea0) [ 645.766680][T28810] input: syz0 as /devices/virtual/input/input4954 04:47:41 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x406d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 645.776252][T28814] loop0: detected capacity change from 0 to 264192 [ 645.796854][T28814] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6eb8) 04:47:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5130) 04:47:41 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d3000/0x2000)=nil, 0x2000, 0x4000004, 0x810, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x11c, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:41 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x406e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 645.833633][T28827] input: syz0 as /devices/virtual/input/input4955 [ 645.867632][T28829] input: syz0 as /devices/virtual/input/input4956 [ 645.918522][T28836] loop0: detected capacity change from 0 to 264192 [ 645.934737][T28836] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 645.989861][T28838] input: syz0 as /devices/virtual/input/input4957 [ 646.018309][T28840] input: syz0 as /devices/virtual/input/input4958 [ 646.057100][T28844] loop0: detected capacity change from 0 to 264192 [ 646.077667][T28844] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:41 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4, 0xfff, 0x0, 0xfffffffe, 0x0, 0x1}, 0x1) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:41 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x5328}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6ed0) 04:47:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5148) 04:47:41 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="a43648f7bd63ff377278a17ff374f6071dca8d1d85eb5b52892eeb85393bb86f9b9245e93320eefa98285cbf36c51f78b9577722dede61b715eb55237f264571bb03e1b75732cb4aa9bdf3aa840f78c1619b00", 0x53, 0x0, 0x1, {0x0, r4}}, 0x9a6f) r5 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = memfd_secret(0x0) io_uring_enter(r6, 0x2999, 0xa4d3, 0x2, &(0x7f0000000200)={[0x1000]}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d4000/0x3000)=nil, 0x3000, 0x8, 0x13, r6, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0xff) dup3(r5, r5, 0x0) 04:47:41 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x406f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 646.447090][T28857] loop0: detected capacity change from 0 to 264192 [ 646.460052][T28859] input: syz0 as /devices/virtual/input/input4960 [ 646.468801][T28857] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:41 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40700000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6ee8) 04:47:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5160) [ 646.485282][T28856] input: syz0 as /devices/virtual/input/input4959 [ 646.586509][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5178) [ 646.689882][T28867] input: syz0 as /devices/virtual/input/input4961 [ 646.706429][T28869] loop0: detected capacity change from 0 to 264192 [ 646.713179][T28870] input: syz0 as /devices/virtual/input/input4962 04:47:41 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40710000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6f00) [ 646.721832][T28869] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 646.808139][T28874] loop0: detected capacity change from 0 to 264192 [ 646.824380][T28874] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 646.838874][T28876] input: syz0 as /devices/virtual/input/input4963 [ 646.848018][T28877] input: syz0 as /devices/virtual/input/input4964 04:47:42 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4, 0xfff, 0x0, 0xfffffffe, 0x0, 0x1}, 0x1) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6f18) 04:47:42 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40720000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5190) [ 647.069043][T28882] loop0: detected capacity change from 0 to 264192 [ 647.076504][T28882] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 647.080558][T28883] input: syz0 as /devices/virtual/input/input4966 [ 647.095800][T28884] input: syz0 as /devices/virtual/input/input4965 [ 647.121685][ T8317] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:42 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="a43648f7bd63ff377278a17ff374f6071dca8d1d85eb5b52892eeb85393bb86f9b9245e93320eefa98285cbf36c51f78b9577722dede61b715eb55237f264571bb03e1b75732cb4aa9bdf3aa840f78c1619b00", 0x53, 0x0, 0x1, {0x0, r4}}, 0x9a6f) (async) r5 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = memfd_secret(0x0) io_uring_enter(r6, 0x2999, 0xa4d3, 0x2, &(0x7f0000000200)={[0x1000]}, 0x8) (async) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d4000/0x3000)=nil, 0x3000, 0x8, 0x13, r6, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0xff) dup3(r5, r5, 0x0) 04:47:42 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x5328}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:42 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40730000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x51a8) 04:47:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6f30) [ 647.378100][T28895] loop0: detected capacity change from 0 to 264192 [ 647.385965][T28894] input: syz0 as /devices/virtual/input/input4967 04:47:42 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40740000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6f48) 04:47:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x51c0) [ 647.408755][T28895] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 647.409769][T28896] input: syz0 as /devices/virtual/input/input4968 [ 647.530276][T28908] input: syz0 as /devices/virtual/input/input4969 [ 647.552006][T28909] input: syz0 as /devices/virtual/input/input4970 [ 647.605199][T28911] loop0: detected capacity change from 0 to 264192 [ 647.608104][T28911] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 647.653996][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:42 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r6, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4, 0xfff, 0x0, 0xfffffffe, 0x0, 0x1}, 0x1) (rerun: 64) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6f60) 04:47:42 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="a43648f7bd63ff377278a17ff374f6071dca8d1d85eb5b52892eeb85393bb86f9b9245e93320eefa98285cbf36c51f78b9577722dede61b715eb55237f264571bb03e1b75732cb4aa9bdf3aa840f78c1619b00", 0x53, 0x0, 0x1, {0x0, r4}}, 0x9a6f) (async) r5 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r6 = memfd_secret(0x0) io_uring_enter(r6, 0x2999, 0xa4d3, 0x2, &(0x7f0000000200)={[0x1000]}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d4000/0x3000)=nil, 0x3000, 0x8, 0x13, r6, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0xff) (async, rerun: 32) dup3(r5, r5, 0x0) (rerun: 32) 04:47:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x51d8) 04:47:42 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40750000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 647.763717][T28919] loop0: detected capacity change from 0 to 264192 [ 647.781923][T28919] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 647.784047][T28918] input: syz0 as /devices/virtual/input/input4971 [ 647.809019][T28920] input: syz0 as /devices/virtual/input/input4972 04:47:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x51f0) 04:47:43 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x800afdd, 0x1, 0x0, 0x1ed}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x735f, 0x6eda, 0x1, &(0x7f0000000100)={[0xfffffffffffffff8]}, 0x8) 04:47:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6f78) 04:47:43 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40760000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:43 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x5328}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6f90) 04:47:43 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40770000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 648.083861][T28935] input: syz0 as /devices/virtual/input/input4973 [ 648.086862][T28932] loop0: detected capacity change from 0 to 264192 [ 648.102858][T28936] input: syz0 as /devices/virtual/input/input4974 [ 648.124245][T28932] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 648.169926][T28944] input: syz0 as /devices/virtual/input/input4975 [ 648.256514][T28947] loop0: detected capacity change from 0 to 264192 [ 648.262073][T28947] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5208) 04:47:43 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 04:47:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6fa8) 04:47:43 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x800afdd, 0x1, 0x0, 0x1ed}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x735f, 0x6eda, 0x1, &(0x7f0000000100)={[0xfffffffffffffff8]}, 0x8) syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x800afdd, 0x1, 0x0, 0x1ed}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x735f, 0x6eda, 0x1, &(0x7f0000000100)={[0xfffffffffffffff8]}, 0x8) (async) 04:47:43 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40780000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:43 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40790000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 648.435167][T28952] input: syz0 as /devices/virtual/input/input4976 [ 648.437368][T28954] loop0: detected capacity change from 0 to 264192 [ 648.449525][T28954] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 648.465653][T28955] input: syz0 as /devices/virtual/input/input4977 04:47:43 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6fc0) 04:47:43 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x800afdd, 0x1, 0x0, 0x1ed}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x735f, 0x6eda, 0x1, &(0x7f0000000100)={[0xfffffffffffffff8]}, 0x8) 04:47:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5220) 04:47:43 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x407a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:43 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) 04:47:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6fd8) [ 648.687849][T28974] input: syz0 as /devices/virtual/input/input4978 [ 648.708542][T28978] input: syz0 as /devices/virtual/input/input4979 04:47:43 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0xa000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={&(0x7f00000002c0)="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", &(0x7f0000000180)="19b5a196b3ba1eadad970f1402a73f7fa75ab42da64c3efcb18f79bc827642b48f7d0b1b4b544599e93c2bec511c6ff4f1f9dcb10cad734ddc1e487bd5ad41d218ed2f58b08946c8155c9cbc3519ae66e75f430820a461fb09deab347821a643352651d8ca93"}}, &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x1}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:44 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) 04:47:44 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x407b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 648.716577][T28977] loop0: detected capacity change from 0 to 264192 [ 648.719584][T28977] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x6ff0) 04:47:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5238) 04:47:44 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 648.768584][T28987] input: syz0 as /devices/virtual/input/input4980 [ 648.781775][ T3652] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 648.885330][T28994] loop0: detected capacity change from 0 to 264192 04:47:44 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x407c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7008) 04:47:44 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 648.903039][T28994] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 648.909497][T29004] input: syz0 as /devices/virtual/input/input4981 [ 648.945539][T29005] input: syz0 as /devices/virtual/input/input4982 04:47:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5250) 04:47:44 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) r5 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r8, 0x545d, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r8, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r9}}, 0x4769) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x1, {0x0, r9}}, 0xfffffffd) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:44 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x407d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 648.947388][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 649.012997][T29012] loop0: detected capacity change from 0 to 264192 [ 649.030697][T29012] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 649.043548][T29016] input: syz0 as /devices/virtual/input/input4983 [ 649.077348][T29021] input: syz0 as /devices/virtual/input/input4984 [ 649.161703][T29028] loop0: detected capacity change from 0 to 264192 [ 649.170310][T29028] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 649.244608][ T3646] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:44 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0xa000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={&(0x7f00000002c0)="03279dc5c203e5101a92dd4165243847520093808c217561ef7b12e6f9874d47e179c7fcb2defd7b0bbc7e7eaa12154f14db2a46c3098dabddd53775c906682768f4a176abaef0f76f814ab797bf62db0cf50dcb442dab64a837c0a7f8c39cbf28ff6c22f34d80d72acc3265fc8ad65193e6012b348406a8516ac50d69c7fbbb5118f4e2dfd928a2bb3adb396bbe685bbe2e3786c0ff62a2f588402c03e8c58dfe849ceba3d78b683433702307e178d13bf71c37cd330f2e4390fd476a284af27fc0318f3b5cc45bfe970a6496a22bf74e4d16fcb9221af2f4aa8939ceece7388f65f43a835aaeb3d647dc9ddf31670f96e08f2765e3a8b0f009be060d0a2e3e71a330a63749bb10d27aa3b0062cca7ec78c0f3973b1c4e302a7949c837d4531974fd5c522dc7c0f506b2ad32ff47b49502bdad63b824dd2e53a1a09784314790c248151280f7ce4f9a8ac1b26c54d425ef5f5ae58d6372d7d8d0238c62cef3214795397ae4cae098dd05c072ab0ca5835837644df785c785ed3dbdd559f083ef1ef200f25c47ae5d304c946f2d9ae0c84a6adbd55e03a784ad84b54fb1e9b0ac4532a6d74c1a862f025de83d64e1abddc56eacde78fa604106a4475c01cbbef37d5e6b70955967f5b279d040c6159ea2d0a28e8d800b547214cada64dcb1be874d12c5e07294d588964b9c67a4c72ab74e008e4249e196c9ccfab379c90dd082c843ed88dc792315dad7fee462d69ebb501076700dd3ee362464ce9e27758cbfd405c87669baa2b8b4d73451cbc4214678f7707db97165a8e55911c26ad3f7e4313c794e0e8502a151cc4764fea1d4163bfdd4a0c60a799d97235915ae16c506afcbab8b13ee652bf5acf675dfe744232a8fae0b923ad9d85a0b6568e77f7acd1fc7f2822ddf36735dc5286ef6bee1d1a1c35e419b26f57bb0a79934d5b011700251c586c46d7a9f99590e2145df9a8ffd11e6f9a2026509ab1cdd747720e42bc4979dd1b6766d0d042d04000976d4ed539001a3b0ffee8e9213506cc071cab0222ed07c200a27181fc851965b526d916ac57ec5e69cb43e1c990bcaf3fd9703010ccacbbb0064d9f0cf2b218146219ff48bc0b0c9df6d5c15bf4ea16901fe8ace69043c4c5383d7a6daae28b0e6fa619133d15aa818d9fd51587423104f5d2795cc9fa62894beca26af3714e8dbcd55ed23b2c7788994133d323d2817e288ee593651493c77079147d233cbe255f33dd7a352e697621e8f953f652e5a2300c91086d1cbd3533fd08af73e64a0ac047d8acd3baab70afd8a150e6cac904e5fa419b6e5ef3959669ff6726a0599a9e5f0cf5d4752ea3735536fccd560f03900e215369cdbb482ab420f6b8f78712cb43c5328d585677e0c5a3ac1f26e008d55e3ef64925deb5f4d1ecb36828e07b14a151b0df42e8fc78ed49cc51813700bfeb2d4119ccae06ccbc68c04d660ac9fcb6c71addb33b61b516b8e482b3cfd4049aeee5ffc561a21c51fd5f60004b707a4df3d4cf6843790c59892814f7ada6f6e4784572443ff8da17038edc028ea4af69b38140ee997bf6e8bc4ea18f012c96e85a9cabc9f409b9f6eeb3c16900ea6ade90edfb66f2d1abd3bf606605b416f15d7439019cc913a1ad366c98130f28b6979b080f49b4d390c25399cc99938988035b9f40b3a2fb9ac4f566c636b5e74648b91fe57abe9b2f70dc35f88081c5eb095bc7ad86b315f532b005632a558345c3b61b3322f169e6af54d74d476e7ebf9d3f455ab0354ade16a1f5320f91ce26f07b74da62d84e0db0db6647b583e19214c66d084b89c0a57282daaf65de31a9bfbd4bb0b4ecd457666e359795d9180bb8ff40f8f81ba23286598824824a3d22d9d4efff3bd55f8a067332652c08681c7d6fe0db9168e6eb8d560f4179add4800d90d032d0ae0a3bbce0944b8b426715df797f2efc9e9fc895f4af01baa46445953116a8b766eadf7a52e29ed8fa20d316c42030bf2b2b0f26416a43f11423bd0a71b14fac1e57b376c2beaeca1704fa30f4640371d200c0332c460b1a27505ee6d696cbb73b3b3dce97183847b4de762cdc1f3379422f1543ed0071b7a6e1f9c88391f517fcd5fdee86a75849cc858fd6cb2438f1582566ee5fc7bd97512ec6974912ff0521e4227f6687c0fc1476c9688be9d2cef86eb80c170206a04f21419f0a9ae337effc15dc6e5030be686f3fcb1326196cfd1788775d272c1ea7a45bd1eb8d994f6ffb67d53278ae058b209c61d01d15def0ca3077b9db5b46a71c096d2e4f23c38ee1d4355aa790797a6dc0ad4faa9ce0d77ac7a37c2dfb55543e1ddcfa5733695d54b680797762d18ea8fe347a31dc095a833cdcdab2e3ea49756dc6eb948874393884984e5562f1980b073550e3f58ea4f86eb7059ec03c6fc66daeb234529cedc8e87c81ced60d47bd39b9838260bfc1f4322b82598238321fbc0619d886264aed03d4a4530625cd973e6d02842dbf2b9d82345b1fba6871831d2bdfdb6decc4e8e7ba882b615121d932213789c5a201bba918e52dbe75e45bbe83877163916927df9542108288653a2a9c66b820964ce42fc6e2d27b8641ae33f6e747490bd5e3c6dc4faa6f9b9d67419b16463ecf994e1109cb65883fd3b21017d5aa80ed2cfd7a0cdd0190de283a31d0db369bac843453570f090d6faa242c7df9005f89b42ee036d814c2d56e5ff71d1df3504e0c90da0f089ef9ad0eb182d3247a6db169e58aaf0f3fdfeb5265f2dda7c626f15b25c6dba790cf0fc61919980582b4a499dfb44f4b502a02a484a6e72de030f13bb55edd2c83887a718d526bcf2b3ac7aaa06f840e20317c58053580274a97b2515914443fe8451a498ba1af1e51314c16de1345f20aead26c6cb3118fe24d40ed851b1300944689a180c009b8034001de3f8a40311e7573535b879aa3bbeaa5c07e6bcc95b3c729695e03ae2d5bcf1c6b4ad3b66d3b1b470bd185fe1b1f38a1303cd225a40c42c0ca63ff8bad164c5fb4bccd77918c629cb59d1a9c00a878785ce50a910ee4a1e00069d93c6bbe6e8aa99910c1a740c876deeaef40a3136c5ca03da53d5d05336a7aca31e3abb642c04a73660d88b7a385cdaa1252f139585d7b9a5c448b6a8686085cd3202ccb8ab4d22f5a20833709497c86c76843a2628b1e6183317c47a67e41c260a13f614a8e46f235d8548e54172370c2cd9cab35954ae67d4937f20a7bf1c6cc2015afbed1ead6f2639aa1d9dd2551c0f29314dfd544859519e3b2465998da1a6545e27e3a09d5029de2d6a18d46da39438c18c301f5116a0c99b356a7920f61a07229e13593c4530f1f9bd995c0a8cc05325b1afabaee7f2ed528a38dcb28fc64da880cfd8a17f65b51065d639afd85361473b84d1b5dd4b2a54f0247f87420a20d6339e19f3b7a4da2916c061a2b0640f48c54ba6fd960f39322c60a2411e1d687ec1e423f661af4e7cca1d0d1bc654729ea85dc0e5b7d317311f67737dec1e8fd7127845bf5a73a451b49afc13a2dae57c7780ee92686692a90a6b46da904c169a22b17b9ff975c453f1c15de39df7e958fb0561e20023e764e3c62c8a643e6470a5d9e7ad5968d8916dd5de0e4a374e73ba11af6b0b199f369b19ff73ee9c67447b879b5f9d4e1690eb5ebdd3fc1484576d4baef67b22e206a51121b9945096fc7df6da26596792ccb2fafadc89088ea0adb338fa70892f764b522206258ea5664a731d9cd337139bffa0ff97e3a8c4628c8f982a52bf6ef978fffe35b063d395474978da59e05d11ac255a27f0fc35df708fa600b08100169bbd6651ed9349bc4a9c005428fce2eaf6ad2dba910fcf6c08e4f7e128cbe01298d6b34d147135e75493a98dbd30ebed5aeac14527ac29075ea846a6687b61ee6fc49199a76986cc65221a8fae82eaaf206859f5de9a7d4d6fecc545f3cf56178aa97df0f1c8b34d850faca842d8bf51ad30a0cdbf8341f9f67d839d71921f8109de6b9b305d03f72f0744951d134d1fdb32e26bea72d68d7d2d7da382a50290f8cf6ad3ee101a98f051aad254006bd74817583dd67e2b4a45c2a5320afcd6b374621767ae9a638a9dcc609810aa234d142db73e154ebff3639ecb66fe71724801993e914e47f6fc562d1cf84430dcd9125d6da1d9e9355fd566aa8f7b237b827c15465031f82ed3f2d9bbeb31a27abdafe7b7e31230c90b6bf63ae847165f6d13c35fbd80eeb8402bd1867746eddc55f8d2868b9075b8617c365976d8e785dc01ca62035f48825ca5789c0e4b329488aed177520da6b25c181c1fb09ed7c5071fc2b9781337194f3183e336e5424c102497c5345574675bab45e5547b6a09cec910ae8cec3f6a64724c3cee0115e3d41bf5e20e6625d98b781d99bd0bafbc478b220d72a7f10cf94ee8cd67194709045256a308dbc769159e6233baf63b654f9d74a1bc7c3aeec1243d7ffe9ad38e4499427051aeed1e2dac3d276ba1bfe0ce67139195da7c932b8afefe58a505025d96bf6d3ab5c29f6447f523981b263781fa341701f260e5a346af9d03e71df03e8d76f1cf68c098cc972bc43c746128c61fd1fddd71c797038e89831e1f6aa25f1e136b3356554134dfc3fbd926b5d75545e71836ff641b0fbae500b35725f921f16bf2530f952802ec4b895c8f4b493036052354f55762fce8286048bd71b2bbb43d8d4a87d293122429751bf2d554e4f6e7e4d9b59b5bbbff44d3a295575764b99a65d6390546b90cb8e2955963045398bd9f9977fcf23ead92ad483fe65eecbfe517ec0d254e6ce6043eb1366f6e83add047a4c18f14ee154b0a8683b59d02803e42514fce34e54ea7dae180aa54982304edb0aea2e43d24f0c2348eeedfcbf1497f8c08a10a005908a280fdb7960b1d01835b4ad06b9fb5e2c78798870d8f994271ed702dbb3b75fbd197f0cdc164a094ee9069cc5b2688f7b3d4d6a7be3cf3c700032c21bb0aa249e0718f81a2a3e85cb4a97b5d519751ecbc301a039ee9b2b398e22024c3e06655648bd6d2b8754747cc245b2e791adca836bb0f0a08e927edf84585be52def32300a75f0ceed68f03fb1e293022cee3aa90cbf9df2b5db78d63854f6e0cd7f248cbac9a2b23593f1badb51ecb61ec31a8b72dd7fdfba325001f9d402a490a4acd533c1ff4fd6ebf695d3b1326747ff0d93b23f3828f932b6304ad1928dab0340aaf75f09d8466233ecb2e90aa22a7217b85dc07748e709e050353d6783e6c5aceaddde43b365aee0ebc277d15aa48f9166fbbd7f6bbf851c01a6f12b3e60a01f99dcdc30dc69af44afeee285efedf78e5ea7c7b8f026ab710f68d7d77e9f763b0536594c7661540956cea7fbf5d4609a0a2958691ef496355976a7c1ac1999c8584c7664195892dc9b59b5315d81a9003595b99c70145fc390724f4f3eb004690d4ab2c27c028bb15cb6a0d2cb1d15886412012016bfce9fa4751737a650292df83c771d1247144dfb452e96a6db7bcf30c12c2934d24c5217ead5a36ce4e37baf53679112e21b8485504e4b3273132ab0600add2a0a19c3cb3e50db638a89965e53e095877867b103cba3874e4ca0507ad34dd48023df089050433d7632f600410ef4f0bc8173e2dae8b40c8b6dbff0806ddb43327f64005eac94cbb82804d27c7a62b368a69c8a964dbee27920b450c802173500056d9369c3eac5d343d8743c77b26d017256f94c1a53061b51ee825f4d2546483576ec011759b79bfa64eac21a04d2cacfc5ae6a0e24ad7ba777c640d1d5e63d12edbafa725b91e4", &(0x7f0000000180)="19b5a196b3ba1eadad970f1402a73f7fa75ab42da64c3efcb18f79bc827642b48f7d0b1b4b544599e93c2bec511c6ff4f1f9dcb10cad734ddc1e487bd5ad41d218ed2f58b08946c8155c9cbc3519ae66e75f430820a461fb09deab347821a643352651d8ca93"}}, &(0x7f0000000200)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x1}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7020) 04:47:44 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000100)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5268) 04:47:44 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x407e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:44 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) r5 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r8, 0x545d, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r8, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r9}}, 0x4769) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x1, {0x0, r9}}, 0xfffffffd) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCMSET(r8, 0x545d, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r8, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r9}}, 0x4769) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x1, {0x0, r9}}, 0xfffffffd) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) [ 649.630356][T29033] input: syz0 as /devices/virtual/input/input4985 [ 649.642454][T29035] input: syz0 as /devices/virtual/input/input4986 04:47:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7038) 04:47:44 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000100)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000100)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5280) [ 649.657914][T29041] loop0: detected capacity change from 0 to 264192 [ 649.697449][T29041] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:44 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x407f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 649.782052][T29059] input: syz0 as /devices/virtual/input/input4987 [ 649.821948][T29065] input: syz0 as /devices/virtual/input/input4988 04:47:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7050) 04:47:45 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40800000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 649.846094][T29076] loop0: detected capacity change from 0 to 264192 [ 649.847981][T29076] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 649.908422][T29080] input: syz0 as /devices/virtual/input/input4989 [ 649.956983][T29082] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:45 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0xa000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={&(0x7f00000002c0)="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", &(0x7f0000000180)="19b5a196b3ba1eadad970f1402a73f7fa75ab42da64c3efcb18f79bc827642b48f7d0b1b4b544599e93c2bec511c6ff4f1f9dcb10cad734ddc1e487bd5ad41d218ed2f58b08946c8155c9cbc3519ae66e75f430820a461fb09deab347821a643352651d8ca93"}}, &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x1}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0xa000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) timer_create(0x2, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={&(0x7f00000002c0)="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", &(0x7f0000000180)="19b5a196b3ba1eadad970f1402a73f7fa75ab42da64c3efcb18f79bc827642b48f7d0b1b4b544599e93c2bec511c6ff4f1f9dcb10cad734ddc1e487bd5ad41d218ed2f58b08946c8155c9cbc3519ae66e75f430820a461fb09deab347821a643352651d8ca93"}}, &(0x7f0000000200)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x1}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:45 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000100)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5298) 04:47:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7068) 04:47:45 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40810000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:45 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) (async) r5 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r5, 0x8000000) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x10000000) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r8, 0x545d, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r8, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r9}}, 0x4769) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x1, {0x0, r9}}, 0xfffffffd) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 650.286505][T29087] input: syz0 as /devices/virtual/input/input4990 [ 650.305147][T29093] loop0: detected capacity change from 0 to 256 04:47:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7080) 04:47:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x52b0) 04:47:45 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40820000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 650.331543][T29093] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 650.339104][T29090] input: syz0 as /devices/virtual/input/input4991 04:47:45 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x274}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 650.444896][T29106] input: syz0 as /devices/virtual/input/input4992 [ 650.456479][T29108] input: syz0 as /devices/virtual/input/input4993 04:47:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7098) 04:47:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x52c8) [ 650.479572][T29107] loop0: detected capacity change from 0 to 512 [ 650.489362][T29107] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 650.583994][T29121] input: syz0 as /devices/virtual/input/input4994 [ 650.609399][T29123] input: syz0 as /devices/virtual/input/input4995 04:47:46 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x708d, &(0x7f00000002c0)={0x0, 0xfedc, 0x10, 0x3, 0x379, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000001940)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)={0x40000008}}, 0x9) r5 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000100), 0x1, 0x1}, 0x1ff) move_pages(r3, 0x5, &(0x7f0000000400)=[&(0x7f0000eeb000/0x3000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000440)=[0x1, 0x2], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) 04:47:46 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40830000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x70b0) 04:47:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x52e0) 04:47:46 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x21002080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) io_uring_enter(r5, 0x7e92, 0x7f04, 0x2, &(0x7f0000000100), 0x8) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r5, 0x0) syz_io_uring_setup(0x19ad, &(0x7f00000001c0)={0x0, 0xa408, 0x2b, 0x1, 0xd5}, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) 04:47:46 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x274}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:46 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40840000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 651.194541][T29132] loop0: detected capacity change from 0 to 768 [ 651.196366][T29132] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x70c8) 04:47:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x52f8) [ 651.218268][T29133] input: syz0 as /devices/virtual/input/input4996 [ 651.231726][T29135] input: syz0 as /devices/virtual/input/input4997 04:47:46 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40850000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 651.337142][T29143] loop0: detected capacity change from 0 to 1024 [ 651.363137][T29143] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 651.387134][T29146] input: syz0 as /devices/virtual/input/input4998 04:47:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5310) 04:47:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x70e0) [ 651.466769][T29150] input: syz0 as /devices/virtual/input/input4999 [ 651.492355][T29153] loop0: detected capacity change from 0 to 1280 [ 651.514555][T29153] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 651.582919][T29155] input: syz0 as /devices/virtual/input/input5000 [ 651.591325][T29157] input: syz0 as /devices/virtual/input/input5001 04:47:47 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x708d, &(0x7f00000002c0)={0x0, 0xfedc, 0x10, 0x3, 0x379, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000001940)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)={0x40000008}}, 0x9) (async) r5 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000100), 0x1, 0x1}, 0x1ff) move_pages(r3, 0x5, &(0x7f0000000400)=[&(0x7f0000eeb000/0x3000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000440)=[0x1, 0x2], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) 04:47:47 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40860000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5328) 04:47:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x70f8) [ 651.897484][T29164] loop0: detected capacity change from 0 to 1536 [ 651.898482][T29163] input: syz0 as /devices/virtual/input/input5002 04:47:47 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x21002080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) io_uring_enter(r5, 0x7e92, 0x7f04, 0x2, &(0x7f0000000100), 0x8) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r5, 0x0) syz_io_uring_setup(0x19ad, &(0x7f00000001c0)={0x0, 0xa408, 0x2b, 0x1, 0xd5}, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x21002080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) io_uring_enter(r5, 0x7e92, 0x7f04, 0x2, &(0x7f0000000100), 0x8) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r5, 0x0) (async) syz_io_uring_setup(0x19ad, &(0x7f00000001c0)={0x0, 0xa408, 0x2b, 0x1, 0xd5}, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) (async) 04:47:47 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x274}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7110) 04:47:47 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40870000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 651.899385][T29162] input: syz0 as /devices/virtual/input/input5003 [ 651.938307][T29164] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5340) 04:47:47 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x708d, &(0x7f00000002c0)={0x0, 0xfedc, 0x10, 0x3, 0x379, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000001940)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)={0x40000008}}, 0x9) (async) r5 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000100), 0x1, 0x1}, 0x1ff) (async, rerun: 64) move_pages(r3, 0x5, &(0x7f0000000400)=[&(0x7f0000eeb000/0x3000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000440)=[0x1, 0x2], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) [ 652.077388][T29178] input: syz0 as /devices/virtual/input/input5004 04:47:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7128) 04:47:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5358) [ 652.095636][T29181] input: syz0 as /devices/virtual/input/input5005 [ 652.152041][T29188] loop0: detected capacity change from 0 to 1792 [ 652.178786][T29188] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:47 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40880000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5370) 04:47:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7140) [ 652.237606][T29206] input: syz0 as /devices/virtual/input/input5006 [ 652.246562][T29204] input: syz0 as /devices/virtual/input/input5007 04:47:47 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40890000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 652.337361][T29211] loop0: detected capacity change from 0 to 2048 [ 652.355363][T29212] input: syz0 as /devices/virtual/input/input5008 [ 652.356355][T29211] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 652.371099][T29214] input: syz0 as /devices/virtual/input/input5009 [ 652.472578][T29217] loop0: detected capacity change from 0 to 2304 [ 652.477260][T29217] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5388) 04:47:47 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x21002080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) io_uring_enter(r5, 0x7e92, 0x7f04, 0x2, &(0x7f0000000100), 0x8) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r5, 0x0) syz_io_uring_setup(0x19ad, &(0x7f00000001c0)={0x0, 0xa408, 0x2b, 0x1, 0xd5}, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x21002080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) io_uring_enter(r5, 0x7e92, 0x7f04, 0x2, &(0x7f0000000100), 0x8) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r5, 0x0) (async) syz_io_uring_setup(0x19ad, &(0x7f00000001c0)={0x0, 0xa408, 0x2b, 0x1, 0xd5}, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) (async) 04:47:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7158) 04:47:47 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x408a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:47 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x689}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r6 = syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r8 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1}}, 0x4769) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x2, 0x39, 0x5f41, 0x40, 0x2, 0x0, {0x1}}, 0x40) syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8}, 0x1) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x480082, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) write$P9_RWSTAT(r10, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7) r11 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x0) r12 = accept4$tipc(r6, 0x0, &(0x7f0000000200), 0x80000) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000340)=[r0, r4, r11, r12, 0xffffffffffffffff], 0x5) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r9, 0x4, 0x0, 0x5, 0x5, 0x1}, 0x0) 04:47:48 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(r3) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r6 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000001840)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/126, 0x7e}], 0x8, &(0x7f00000017c0)=""/101, 0x65}, 0x0, 0x10000, 0x1, {0x3}}, 0xffffff00) r8 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) gettid() io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 652.794390][T29222] input: syz0 as /devices/virtual/input/input5010 [ 652.813728][T29224] loop0: detected capacity change from 0 to 2560 04:47:48 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x408b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x53a0) 04:47:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7170) [ 652.819060][T29221] input: syz0 as /devices/virtual/input/input5011 [ 652.824025][T29224] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:48 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x408c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 652.967298][T29237] loop0: detected capacity change from 0 to 2816 [ 652.972291][T29237] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x53b8) 04:47:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7188) [ 652.994657][T29239] input: syz0 as /devices/virtual/input/input5012 [ 653.055227][T29252] input: syz0 as /devices/virtual/input/input5013 [ 653.088752][T29255] loop0: detected capacity change from 0 to 3072 [ 653.101278][T29255] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 653.122552][T29257] input: syz0 as /devices/virtual/input/input5014 [ 653.159589][T29259] input: syz0 as /devices/virtual/input/input5015 04:47:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x71a0) [ 653.200835][ T3646] I/O error, dev loop0, sector 2944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 653.312010][T29262] input: syz0 as /devices/virtual/input/input5016 04:47:48 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x4464c1, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x24000, &(0x7f0000000300)="883e452cc467569ac610aa8cd4aa5be8eb602a1c4af92aeb08c43037d730d3c5a967fb56881c7227d8744918798a884f2fe7fa478abfbf112033236b325ef0947f880b19e7172cafabd31935b6358b609d21281f8c7f5dd51385f91fa3a85281bfe9cf5111147bbaca3a495a99c19f40e3a5f19f417dc1a244250793cf5d444563f8ec1cb63ecfc1784f20428cd582fc12987d106a567861eb03ccdb6388da", 0x9f, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000003c0)="aa8b79c88b9920c3e49a30d2db0158120cb9ae0a8577df80011211f2d6058dcbd9640e") r5 = pidfd_open(r4, 0x0) r6 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) syz_io_uring_setup(0x30ab, &(0x7f0000000500)={0x0, 0x3cbb, 0x4, 0x1, 0xbf, 0x0, r6}, &(0x7f00006d5000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:48 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x408d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x53d0) 04:47:48 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x689}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r6 = syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r8 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1}}, 0x4769) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x2, 0x39, 0x5f41, 0x40, 0x2, 0x0, {0x1}}, 0x40) syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8}, 0x1) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x480082, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) write$P9_RWSTAT(r10, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7) r11 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x0) r12 = accept4$tipc(r6, 0x0, &(0x7f0000000200), 0x80000) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000340)=[r0, r4, r11, r12, 0xffffffffffffffff], 0x5) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r9, 0x4, 0x0, 0x5, 0x5, 0x1}, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x689}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1}}, 0x4769) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x2, 0x39, 0x5f41, 0x40, 0x2, 0x0, {0x1}}, 0x40) (async) syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8}, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x480082, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) write$P9_RWSTAT(r10, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7) (async) syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x0) (async) accept4$tipc(r6, 0x0, &(0x7f0000000200), 0x80000) (async) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000340)=[r0, r4, r11, r12, 0xffffffffffffffff], 0x5) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r9, 0x4, 0x0, 0x5, 0x5, 0x1}, 0x0) (async) [ 653.563977][T29268] loop0: detected capacity change from 0 to 3328 [ 653.589136][T29268] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 653.599352][T29267] input: syz0 as /devices/virtual/input/input5017 04:47:48 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(r3) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r6 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000001840)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/126, 0x7e}], 0x8, &(0x7f00000017c0)=""/101, 0x65}, 0x0, 0x10000, 0x1, {0x3}}, 0xffffff00) r8 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) gettid() io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpgrp(r3) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) (async) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6}, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}}, 0x0) (async) syz_io_uring_submit(r5, r2, &(0x7f0000001840)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/126, 0x7e}], 0x8, &(0x7f00000017c0)=""/101, 0x65}, 0x0, 0x10000, 0x1, {0x3}}, 0xffffff00) (async) pidfd_open(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) (async) gettid() (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x71b8) 04:47:48 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x408e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x53e8) [ 653.751693][T29294] loop0: detected capacity change from 0 to 3584 [ 653.758485][T29293] input: syz0 as /devices/virtual/input/input5018 04:47:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x71d0) 04:47:49 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x408f0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 653.779780][T29294] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5400) [ 653.780753][T29295] input: syz0 as /devices/virtual/input/input5019 [ 653.867447][T29298] loop0: detected capacity change from 0 to 3840 04:47:49 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40900000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 653.879925][T29298] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 653.904571][T29303] input: syz0 as /devices/virtual/input/input5020 [ 653.927294][T29305] input: syz0 as /devices/virtual/input/input5021 [ 653.996516][T29321] loop0: detected capacity change from 0 to 4096 [ 654.022187][T29321] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 654.056486][ T3646] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:49 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x4464c1, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x24000, &(0x7f0000000300)="883e452cc467569ac610aa8cd4aa5be8eb602a1c4af92aeb08c43037d730d3c5a967fb56881c7227d8744918798a884f2fe7fa478abfbf112033236b325ef0947f880b19e7172cafabd31935b6358b609d21281f8c7f5dd51385f91fa3a85281bfe9cf5111147bbaca3a495a99c19f40e3a5f19f417dc1a244250793cf5d444563f8ec1cb63ecfc1784f20428cd582fc12987d106a567861eb03ccdb6388da", 0x9f, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000003c0)="aa8b79c88b9920c3e49a30d2db0158120cb9ae0a8577df80011211f2d6058dcbd9640e") r5 = pidfd_open(r4, 0x0) r6 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) syz_io_uring_setup(0x30ab, &(0x7f0000000500)={0x0, 0x3cbb, 0x4, 0x1, 0xbf, 0x0, r6}, &(0x7f00006d5000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x4464c1, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30) (async) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x24000, &(0x7f0000000300)="883e452cc467569ac610aa8cd4aa5be8eb602a1c4af92aeb08c43037d730d3c5a967fb56881c7227d8744918798a884f2fe7fa478abfbf112033236b325ef0947f880b19e7172cafabd31935b6358b609d21281f8c7f5dd51385f91fa3a85281bfe9cf5111147bbaca3a495a99c19f40e3a5f19f417dc1a244250793cf5d444563f8ec1cb63ecfc1784f20428cd582fc12987d106a567861eb03ccdb6388da", 0x9f, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000003c0)="aa8b79c88b9920c3e49a30d2db0158120cb9ae0a8577df80011211f2d6058dcbd9640e") (async) pidfd_open(r4, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) syz_io_uring_setup(0x30ab, &(0x7f0000000500)={0x0, 0x3cbb, 0x4, 0x1, 0xbf, 0x0, r6}, &(0x7f00006d5000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x71e8) 04:47:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5418) 04:47:49 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40910000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 654.297871][T29327] loop0: detected capacity change from 0 to 4352 [ 654.321769][T29324] input: syz0 as /devices/virtual/input/input5022 [ 654.324023][T29328] input: syz0 as /devices/virtual/input/input5023 [ 654.348440][T29327] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:49 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(r3) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r6 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6}, 0x1) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}}, 0x0) (async) syz_io_uring_submit(r5, r2, &(0x7f0000001840)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/126, 0x7e}], 0x8, &(0x7f00000017c0)=""/101, 0x65}, 0x0, 0x10000, 0x1, {0x3}}, 0xffffff00) (async) r8 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) gettid() (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:49 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x689}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r6 = syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) (async) r8 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1}}, 0x4769) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x2, 0x39, 0x5f41, 0x40, 0x2, 0x0, {0x1}}, 0x40) syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8}, 0x1) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x480082, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) write$P9_RWSTAT(r10, &(0x7f0000000380)={0x7, 0x7f, 0x1}, 0x7) r11 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x0) (async) r12 = accept4$tipc(r6, 0x0, &(0x7f0000000200), 0x80000) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000340)=[r0, r4, r11, r12, 0xffffffffffffffff], 0x5) (async) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r9, 0x4, 0x0, 0x5, 0x5, 0x1}, 0x0) 04:47:49 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40920000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7200) 04:47:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5430) [ 654.668073][T29351] loop0: detected capacity change from 0 to 4608 [ 654.682956][T29351] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 654.683957][T29352] input: syz0 as /devices/virtual/input/input5024 04:47:49 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40930000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 654.685297][T29353] input: syz0 as /devices/virtual/input/input5025 04:47:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7218) 04:47:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5448) [ 654.810988][T29365] loop0: detected capacity change from 0 to 4864 [ 654.826539][T29365] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:50 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x4464c1, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30) r1 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x24000, &(0x7f0000000300)="883e452cc467569ac610aa8cd4aa5be8eb602a1c4af92aeb08c43037d730d3c5a967fb56881c7227d8744918798a884f2fe7fa478abfbf112033236b325ef0947f880b19e7172cafabd31935b6358b609d21281f8c7f5dd51385f91fa3a85281bfe9cf5111147bbaca3a495a99c19f40e3a5f19f417dc1a244250793cf5d444563f8ec1cb63ecfc1784f20428cd582fc12987d106a567861eb03ccdb6388da", 0x9f, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000003c0)="aa8b79c88b9920c3e49a30d2db0158120cb9ae0a8577df80011211f2d6058dcbd9640e") (async, rerun: 32) r5 = pidfd_open(r4, 0x0) (async, rerun: 32) r6 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async, rerun: 64) syz_io_uring_setup(0x30ab, &(0x7f0000000500)={0x0, 0x3cbb, 0x4, 0x1, 0xbf, 0x0, r6}, &(0x7f00006d5000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7230) [ 654.827799][T29368] input: syz0 as /devices/virtual/input/input5026 [ 654.869247][T29370] input: syz0 as /devices/virtual/input/input5027 04:47:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40940000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 654.893310][ T3646] I/O error, dev loop0, sector 4736 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5460) [ 654.962854][T29375] input: syz0 as /devices/virtual/input/input5028 [ 654.973003][T29378] loop0: detected capacity change from 0 to 5120 [ 654.996291][T29378] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 655.033168][T29380] input: syz0 as /devices/virtual/input/input5029 04:47:50 executing program 4: r0 = syz_io_uring_setup(0x1dfe, &(0x7f0000000080)={0x0, 0xb815, 0x4, 0x20000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x2, r5, 0x1ffff000, 0x20000000) syz_clone3(&(0x7f0000000780)={0x2200, &(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000640), {0xb}, &(0x7f0000000680)=""/30, 0x1e, 0xfffffffffffffffd, &(0x7f0000000740)=[0x0, r3, r4, r3, r5], 0x5}, 0x58) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) syz_mount_image$ntfs3(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="c76ccdc1c82f99a044f6ba6bf625dde67df30c69ed464f02632875406ebec8d17f41e742148cb66777f546555cffcb443bcee386a1a729a713a4f2708917c3343bb832a8d493942015ce8b74526619e4ea17d82e6843e1923571e105359020d3f2c4a50066855add1a45441450cac7832094e2229c0387b0845ca9602dfd619bbb963263d2c25aa183a200da23fa0805957e56ad79aa40c62f529e44ac305dbcf9024406eeec63bd59d7bd5fa56b059128f28c", 0xb3}, {&(0x7f0000000380)="fb9b7b7e489d9b9fa376620de5162b68513958af8d1e168a84d3c53dee6791fbc9f472229b408bdeb3532417383af80530ac196aa87c892b02629048084b381c77b635be2b9b1e20702d1a15e2d8960b75ee94d4712d33758992fea4db5d5b8dc5f8c7fb4de327ad502b44f899c57ad45619a13193d6878cb3896f27f701ad136be5a9f7fd11fda829e7263cfc1c8c04e51c717c68ced503d3b2e55979549fa925", 0xa1, 0x8000000000000000}, {&(0x7f0000000440)="5b0385d5698c025b0510707bb0c472157786c51c7d5357effe3ee8b791c3b770183b63be7a312f129ff6cab23209ebd08311b18e2fa52b6c611d4f16bf85f9855204f6b33c73c9c912015ba9ba764c0104c99a05a374c38901fe452d353c1bd655858ad007af0e296695469880de2d3cc17d9881691e73ad5a34fd41cf90ffb574a3e02580ea08bc88e2b16802e98536af3edf83492c7fe1e6f8d1c5b94abc55f33dc59272f77379ddcb0e3dda024dbd495b1d6bbad5a0aa33ff", 0xba, 0x7fffffff}], 0x200020, &(0x7f0000000580)={[{@discard}, {@fmask={'fmask', 0x3d, 0x200}}, {@umask={'umask', 0x3d, 0xe38a2f3}}], [{@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xf6'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x38, 0x0, 0x34, 0x66, 0x31, 0x39, 0x34], 0x2d, [0x0, 0x62, 0x39, 0x66], 0x2d, [0x65, 0x0, 0x37, 0x4], 0x2d, [0x61, 0x64, 0x50, 0x5d], 0x2d, [0x36, 0x39, 0x32, 0x30, 0x61, 0x63, 0x56, 0x65]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) syz_io_uring_setup(0x5dd7, &(0x7f00000010c0)={0x0, 0x54f9, 0x20, 0x0, 0x174, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000980), &(0x7f0000001140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000001200)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001180)=@in={0x2, 0x4e22, @local}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x80000000) process_vm_readv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000800)=""/58, 0x3a}, {&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/170, 0xaa}, {&(0x7f0000000a80)=""/78, 0x4e}, {&(0x7f0000000b00)=""/172, 0xac}], 0x7, &(0x7f0000001040)=[{&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/206, 0xce}, {&(0x7f0000000e00)=""/67, 0x43}, {&(0x7f0000000e80)=""/229, 0xe5}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f0000000fc0)=""/38, 0x26}, {&(0x7f0000001000)=""/63, 0x3f}], 0x7, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:50 executing program 2: r0 = syz_io_uring_setup(0x4e6, &(0x7f0000000180)={0x0, 0x1038, 0x0, 0x0, 0x8d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r3 = syz_io_uring_setup(0x3db1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = pidfd_open(r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x1010, r3, 0x10000000) syz_io_uring_submit(r2, r8, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd=r0, 0x1, 0x0, 0x0, 0x8, 0x1, {0x2}}, 0xcc7c) io_uring_enter(r3, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7248) 04:47:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40950000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5478) 04:47:50 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x9, 0x7fff, &(0x7f0000000380)=[{&(0x7f0000000180)="97b495ad39f10e6102c440ad3347dbc7140752b4b253c87e0853d3aded2bb0d942ff95bc019673652abb5909e4b894c8a6a8e633a216a57a4b52d9e20ad37bfcc1d0cc87a744081a", 0x48}, {&(0x7f0000000200)="391a6360546eab45cea118690210ddba1b0a554c439ddeb72c9e78a464e3f91c2a78ec7eb530b7eb9779094459314ea446f6adb12020b88dc03f8d080792fc032e23c4812ac0c24cbcd0fd567ec254de4dfe", 0x52}, {&(0x7f00000002c0)="e08abcaa6c5c84c26277ff48f90b8bd59080ed01684d1b171689a2d9c3a3fc73a47f19fa65f8e9241b30ca9e33a052abb5d3fb9c0c2172fde4904006f478f6cbbbff7770b4455fb3b943e6d422e4a6d9d4ebf77ee404b0b21b84a726d387579658cb2813172d55a9176657fab996ca0ee0b0367ebb15cebed449da31a2a711704cccfd8082436c384d", 0x89}], 0x3, 0x1, 0x0, {0x3, r3}}, 0x0) pidfd_open(r4, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000400)={r4}) r5 = syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{&(0x7f00000004c0)="55a37b0788bf38f8795b319af5a82b25e16dd34ec20ca76eec5530e405286b76ba9c3acabdddb57c7e34b4b2ba76bd39752d96f63daa44db5db9a99ae55db01ce0ae0e1c07615d61d2748b4aa3a7b3ab44cadb29072e334d0a928356e7877e7c79624d890f5bf1f9db52d63cc97bb0789ce59f07897fba54da71776e9eebee76940d7b6a1fe7721fa06b1b8bc91df8bba57301320e58895c8e9a17d71ce5c882066c572b265fd7a1c4b0e86e79696c9d33217acf60acb35063935e92", 0xbc, 0x40}], 0x20000, &(0x7f00000005c0)=ANY=[@ANYBLOB='barrier,nl\x00=cp1251,permit_directio,fsname=\x00,subj_type=\x00,dont_appraise,dont_measure,measure,\x00']) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x3, 0x2007, @fd=r5, 0x3b7, &(0x7f0000000640)="85a86b2ee6854e16ec151bf948aec5ec009ebce6ebed63250d08e8d18bfc5c8bfcc69931b1162e18f6b522ec208d6625a1003c0e122e35bf28ef581758eb0bca0c5c837ecdd059", 0x47, 0x3, 0x1, {0x0, r6}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 655.355595][T29397] loop0: detected capacity change from 0 to 5376 [ 655.358218][T29393] input: syz0 as /devices/virtual/input/input5030 [ 655.361962][T29399] input: syz0 as /devices/virtual/input/input5031 04:47:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40960000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5490) 04:47:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7260) [ 655.390257][T29397] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 655.407475][T29402] loop4: detected capacity change from 0 to 264192 04:47:50 executing program 4: r0 = syz_io_uring_setup(0x1dfe, &(0x7f0000000080)={0x0, 0xb815, 0x4, 0x20000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x2, r5, 0x1ffff000, 0x20000000) syz_clone3(&(0x7f0000000780)={0x2200, &(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000640), {0xb}, &(0x7f0000000680)=""/30, 0x1e, 0xfffffffffffffffd, &(0x7f0000000740)=[0x0, r3, r4, r3, r5], 0x5}, 0x58) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) syz_mount_image$ntfs3(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="c76ccdc1c82f99a044f6ba6bf625dde67df30c69ed464f02632875406ebec8d17f41e742148cb66777f546555cffcb443bcee386a1a729a713a4f2708917c3343bb832a8d493942015ce8b74526619e4ea17d82e6843e1923571e105359020d3f2c4a50066855add1a45441450cac7832094e2229c0387b0845ca9602dfd619bbb963263d2c25aa183a200da23fa0805957e56ad79aa40c62f529e44ac305dbcf9024406eeec63bd59d7bd5fa56b059128f28c", 0xb3}, {&(0x7f0000000380)="fb9b7b7e489d9b9fa376620de5162b68513958af8d1e168a84d3c53dee6791fbc9f472229b408bdeb3532417383af80530ac196aa87c892b02629048084b381c77b635be2b9b1e20702d1a15e2d8960b75ee94d4712d33758992fea4db5d5b8dc5f8c7fb4de327ad502b44f899c57ad45619a13193d6878cb3896f27f701ad136be5a9f7fd11fda829e7263cfc1c8c04e51c717c68ced503d3b2e55979549fa925", 0xa1, 0x8000000000000000}, {&(0x7f0000000440)="5b0385d5698c025b0510707bb0c472157786c51c7d5357effe3ee8b791c3b770183b63be7a312f129ff6cab23209ebd08311b18e2fa52b6c611d4f16bf85f9855204f6b33c73c9c912015ba9ba764c0104c99a05a374c38901fe452d353c1bd655858ad007af0e296695469880de2d3cc17d9881691e73ad5a34fd41cf90ffb574a3e02580ea08bc88e2b16802e98536af3edf83492c7fe1e6f8d1c5b94abc55f33dc59272f77379ddcb0e3dda024dbd495b1d6bbad5a0aa33ff", 0xba, 0x7fffffff}], 0x200020, &(0x7f0000000580)={[{@discard}, {@fmask={'fmask', 0x3d, 0x200}}, {@umask={'umask', 0x3d, 0xe38a2f3}}], [{@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xf6'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x38, 0x0, 0x34, 0x66, 0x31, 0x39, 0x34], 0x2d, [0x0, 0x62, 0x39, 0x66], 0x2d, [0x65, 0x0, 0x37, 0x4], 0x2d, [0x61, 0x64, 0x50, 0x5d], 0x2d, [0x36, 0x39, 0x32, 0x30, 0x61, 0x63, 0x56, 0x65]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) syz_io_uring_setup(0x5dd7, &(0x7f00000010c0)={0x0, 0x54f9, 0x20, 0x0, 0x174, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000980), &(0x7f0000001140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000001200)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001180)=@in={0x2, 0x4e22, @local}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x80000000) process_vm_readv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000800)=""/58, 0x3a}, {&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/170, 0xaa}, {&(0x7f0000000a80)=""/78, 0x4e}, {&(0x7f0000000b00)=""/172, 0xac}], 0x7, &(0x7f0000001040)=[{&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/206, 0xce}, {&(0x7f0000000e00)=""/67, 0x43}, {&(0x7f0000000e80)=""/229, 0xe5}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f0000000fc0)=""/38, 0x26}, {&(0x7f0000001000)=""/63, 0x3f}], 0x7, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfe, &(0x7f0000000080)={0x0, 0xb815, 0x4, 0x20000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r5) (async) ptrace$cont(0x2, r5, 0x1ffff000, 0x20000000) (async) syz_clone3(&(0x7f0000000780)={0x2200, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000640), {0xb}, &(0x7f0000000680)=""/30, 0x1e, 0xfffffffffffffffd, &(0x7f0000000740)=[0x0, r3, r4, r3, r5], 0x5}, 0x58) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) syz_mount_image$ntfs3(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="c76ccdc1c82f99a044f6ba6bf625dde67df30c69ed464f02632875406ebec8d17f41e742148cb66777f546555cffcb443bcee386a1a729a713a4f2708917c3343bb832a8d493942015ce8b74526619e4ea17d82e6843e1923571e105359020d3f2c4a50066855add1a45441450cac7832094e2229c0387b0845ca9602dfd619bbb963263d2c25aa183a200da23fa0805957e56ad79aa40c62f529e44ac305dbcf9024406eeec63bd59d7bd5fa56b059128f28c", 0xb3}, {&(0x7f0000000380)="fb9b7b7e489d9b9fa376620de5162b68513958af8d1e168a84d3c53dee6791fbc9f472229b408bdeb3532417383af80530ac196aa87c892b02629048084b381c77b635be2b9b1e20702d1a15e2d8960b75ee94d4712d33758992fea4db5d5b8dc5f8c7fb4de327ad502b44f899c57ad45619a13193d6878cb3896f27f701ad136be5a9f7fd11fda829e7263cfc1c8c04e51c717c68ced503d3b2e55979549fa925", 0xa1, 0x8000000000000000}, {&(0x7f0000000440)="5b0385d5698c025b0510707bb0c472157786c51c7d5357effe3ee8b791c3b770183b63be7a312f129ff6cab23209ebd08311b18e2fa52b6c611d4f16bf85f9855204f6b33c73c9c912015ba9ba764c0104c99a05a374c38901fe452d353c1bd655858ad007af0e296695469880de2d3cc17d9881691e73ad5a34fd41cf90ffb574a3e02580ea08bc88e2b16802e98536af3edf83492c7fe1e6f8d1c5b94abc55f33dc59272f77379ddcb0e3dda024dbd495b1d6bbad5a0aa33ff", 0xba, 0x7fffffff}], 0x200020, &(0x7f0000000580)={[{@discard}, {@fmask={'fmask', 0x3d, 0x200}}, {@umask={'umask', 0x3d, 0xe38a2f3}}], [{@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xf6'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x38, 0x0, 0x34, 0x66, 0x31, 0x39, 0x34], 0x2d, [0x0, 0x62, 0x39, 0x66], 0x2d, [0x65, 0x0, 0x37, 0x4], 0x2d, [0x61, 0x64, 0x50, 0x5d], 0x2d, [0x36, 0x39, 0x32, 0x30, 0x61, 0x63, 0x56, 0x65]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) (async) syz_io_uring_setup(0x5dd7, &(0x7f00000010c0)={0x0, 0x54f9, 0x20, 0x0, 0x174, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000980), &(0x7f0000001140)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r8, &(0x7f0000001200)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001180)=@in={0x2, 0x4e22, @local}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x80000000) (async) process_vm_readv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000800)=""/58, 0x3a}, {&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/170, 0xaa}, {&(0x7f0000000a80)=""/78, 0x4e}, {&(0x7f0000000b00)=""/172, 0xac}], 0x7, &(0x7f0000001040)=[{&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/206, 0xce}, {&(0x7f0000000e00)=""/67, 0x43}, {&(0x7f0000000e80)=""/229, 0xe5}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f0000000fc0)=""/38, 0x26}, {&(0x7f0000001000)=""/63, 0x3f}], 0x7, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:50 executing program 2: r0 = syz_io_uring_setup(0x4e6, &(0x7f0000000180)={0x0, 0x1038, 0x0, 0x0, 0x8d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) (async) r3 = syz_io_uring_setup(0x3db1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = pidfd_open(r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x1010, r3, 0x10000000) syz_io_uring_submit(r2, r8, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd=r0, 0x1, 0x0, 0x0, 0x8, 0x1, {0x2}}, 0xcc7c) (async) io_uring_enter(r3, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:50 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x9, 0x7fff, &(0x7f0000000380)=[{&(0x7f0000000180)="97b495ad39f10e6102c440ad3347dbc7140752b4b253c87e0853d3aded2bb0d942ff95bc019673652abb5909e4b894c8a6a8e633a216a57a4b52d9e20ad37bfcc1d0cc87a744081a", 0x48}, {&(0x7f0000000200)="391a6360546eab45cea118690210ddba1b0a554c439ddeb72c9e78a464e3f91c2a78ec7eb530b7eb9779094459314ea446f6adb12020b88dc03f8d080792fc032e23c4812ac0c24cbcd0fd567ec254de4dfe", 0x52}, {&(0x7f00000002c0)="e08abcaa6c5c84c26277ff48f90b8bd59080ed01684d1b171689a2d9c3a3fc73a47f19fa65f8e9241b30ca9e33a052abb5d3fb9c0c2172fde4904006f478f6cbbbff7770b4455fb3b943e6d422e4a6d9d4ebf77ee404b0b21b84a726d387579658cb2813172d55a9176657fab996ca0ee0b0367ebb15cebed449da31a2a711704cccfd8082436c384d", 0x89}], 0x3, 0x1, 0x0, {0x3, r3}}, 0x0) pidfd_open(r4, 0x0) (async, rerun: 64) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000400)={r4}) (async, rerun: 64) r5 = syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{&(0x7f00000004c0)="55a37b0788bf38f8795b319af5a82b25e16dd34ec20ca76eec5530e405286b76ba9c3acabdddb57c7e34b4b2ba76bd39752d96f63daa44db5db9a99ae55db01ce0ae0e1c07615d61d2748b4aa3a7b3ab44cadb29072e334d0a928356e7877e7c79624d890f5bf1f9db52d63cc97bb0789ce59f07897fba54da71776e9eebee76940d7b6a1fe7721fa06b1b8bc91df8bba57301320e58895c8e9a17d71ce5c882066c572b265fd7a1c4b0e86e79696c9d33217acf60acb35063935e92", 0xbc, 0x40}], 0x20000, &(0x7f00000005c0)=ANY=[@ANYBLOB='barrier,nl\x00=cp1251,permit_directio,fsname=\x00,subj_type=\x00,dont_appraise,dont_measure,measure,\x00']) (async, rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r1, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x3, 0x2007, @fd=r5, 0x3b7, &(0x7f0000000640)="85a86b2ee6854e16ec151bf948aec5ec009ebce6ebed63250d08e8d18bfc5c8bfcc69931b1162e18f6b522ec208d6625a1003c0e122e35bf28ef581758eb0bca0c5c837ecdd059", 0x47, 0x3, 0x1, {0x0, r6}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7278) 04:47:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x54a8) [ 655.553752][T29410] input: syz0 as /devices/virtual/input/input5033 [ 655.554372][T29411] loop0: detected capacity change from 0 to 5632 [ 655.556093][T29409] input: syz0 as /devices/virtual/input/input5032 04:47:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40970000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 655.567909][T29411] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:50 executing program 2: r0 = syz_io_uring_setup(0x4e6, &(0x7f0000000180)={0x0, 0x1038, 0x0, 0x0, 0x8d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r3 = syz_io_uring_setup(0x3db1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = pidfd_open(r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x1010, r3, 0x10000000) syz_io_uring_submit(r2, r8, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd=r0, 0x1, 0x0, 0x0, 0x8, 0x1, {0x2}}, 0xcc7c) io_uring_enter(r3, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4e6, &(0x7f0000000180)={0x0, 0x1038, 0x0, 0x0, 0x8d}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) (async) syz_io_uring_setup(0x3db1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x1010, r3, 0x10000000) (async) syz_io_uring_submit(r2, r8, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd=r0, 0x1, 0x0, 0x0, 0x8, 0x1, {0x2}}, 0xcc7c) (async) io_uring_enter(r3, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:50 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x9, 0x7fff, &(0x7f0000000380)=[{&(0x7f0000000180)="97b495ad39f10e6102c440ad3347dbc7140752b4b253c87e0853d3aded2bb0d942ff95bc019673652abb5909e4b894c8a6a8e633a216a57a4b52d9e20ad37bfcc1d0cc87a744081a", 0x48}, {&(0x7f0000000200)="391a6360546eab45cea118690210ddba1b0a554c439ddeb72c9e78a464e3f91c2a78ec7eb530b7eb9779094459314ea446f6adb12020b88dc03f8d080792fc032e23c4812ac0c24cbcd0fd567ec254de4dfe", 0x52}, {&(0x7f00000002c0)="e08abcaa6c5c84c26277ff48f90b8bd59080ed01684d1b171689a2d9c3a3fc73a47f19fa65f8e9241b30ca9e33a052abb5d3fb9c0c2172fde4904006f478f6cbbbff7770b4455fb3b943e6d422e4a6d9d4ebf77ee404b0b21b84a726d387579658cb2813172d55a9176657fab996ca0ee0b0367ebb15cebed449da31a2a711704cccfd8082436c384d", 0x89}], 0x3, 0x1, 0x0, {0x3, r3}}, 0x0) pidfd_open(r4, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000400)={r4}) r5 = syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{&(0x7f00000004c0)="55a37b0788bf38f8795b319af5a82b25e16dd34ec20ca76eec5530e405286b76ba9c3acabdddb57c7e34b4b2ba76bd39752d96f63daa44db5db9a99ae55db01ce0ae0e1c07615d61d2748b4aa3a7b3ab44cadb29072e334d0a928356e7877e7c79624d890f5bf1f9db52d63cc97bb0789ce59f07897fba54da71776e9eebee76940d7b6a1fe7721fa06b1b8bc91df8bba57301320e58895c8e9a17d71ce5c882066c572b265fd7a1c4b0e86e79696c9d33217acf60acb35063935e92", 0xbc, 0x40}], 0x20000, &(0x7f00000005c0)=ANY=[@ANYBLOB='barrier,nl\x00=cp1251,permit_directio,fsname=\x00,subj_type=\x00,dont_appraise,dont_measure,measure,\x00']) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x3, 0x2007, @fd=r5, 0x3b7, &(0x7f0000000640)="85a86b2ee6854e16ec151bf948aec5ec009ebce6ebed63250d08e8d18bfc5c8bfcc69931b1162e18f6b522ec208d6625a1003c0e122e35bf28ef581758eb0bca0c5c837ecdd059", 0x47, 0x3, 0x1, {0x0, r6}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x9) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x9, 0x7fff, &(0x7f0000000380)=[{&(0x7f0000000180)="97b495ad39f10e6102c440ad3347dbc7140752b4b253c87e0853d3aded2bb0d942ff95bc019673652abb5909e4b894c8a6a8e633a216a57a4b52d9e20ad37bfcc1d0cc87a744081a", 0x48}, {&(0x7f0000000200)="391a6360546eab45cea118690210ddba1b0a554c439ddeb72c9e78a464e3f91c2a78ec7eb530b7eb9779094459314ea446f6adb12020b88dc03f8d080792fc032e23c4812ac0c24cbcd0fd567ec254de4dfe", 0x52}, {&(0x7f00000002c0)="e08abcaa6c5c84c26277ff48f90b8bd59080ed01684d1b171689a2d9c3a3fc73a47f19fa65f8e9241b30ca9e33a052abb5d3fb9c0c2172fde4904006f478f6cbbbff7770b4455fb3b943e6d422e4a6d9d4ebf77ee404b0b21b84a726d387579658cb2813172d55a9176657fab996ca0ee0b0367ebb15cebed449da31a2a711704cccfd8082436c384d", 0x89}], 0x3, 0x1, 0x0, {0x3, r3}}, 0x0) (async) pidfd_open(r4, 0x0) (async) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000400)={r4}) (async) syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{&(0x7f00000004c0)="55a37b0788bf38f8795b319af5a82b25e16dd34ec20ca76eec5530e405286b76ba9c3acabdddb57c7e34b4b2ba76bd39752d96f63daa44db5db9a99ae55db01ce0ae0e1c07615d61d2748b4aa3a7b3ab44cadb29072e334d0a928356e7877e7c79624d890f5bf1f9db52d63cc97bb0789ce59f07897fba54da71776e9eebee76940d7b6a1fe7721fa06b1b8bc91df8bba57301320e58895c8e9a17d71ce5c882066c572b265fd7a1c4b0e86e79696c9d33217acf60acb35063935e92", 0xbc, 0x40}], 0x20000, &(0x7f00000005c0)=ANY=[@ANYBLOB='barrier,nl\x00=cp1251,permit_directio,fsname=\x00,subj_type=\x00,dont_appraise,dont_measure,measure,\x00']) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x3, 0x2007, @fd=r5, 0x3b7, &(0x7f0000000640)="85a86b2ee6854e16ec151bf948aec5ec009ebce6ebed63250d08e8d18bfc5c8bfcc69931b1162e18f6b522ec208d6625a1003c0e122e35bf28ef581758eb0bca0c5c837ecdd059", 0x47, 0x3, 0x1, {0x0, r6}}, 0x3) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40980000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 655.703734][T29427] input: syz0 as /devices/virtual/input/input5034 [ 655.705472][T29423] input: syz0 as /devices/virtual/input/input5035 [ 655.706155][T29419] loop4: detected capacity change from 0 to 264192 04:47:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7290) 04:47:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x54c0) 04:47:51 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x3240, &(0x7f0000000180)={0x0, 0x6f49, 0x8, 0x3, 0x3df, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x7000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/cgroup\x00') [ 655.721758][T29428] loop0: detected capacity change from 0 to 5888 [ 655.735278][T29428] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:51 executing program 4: r0 = syz_io_uring_setup(0x1dfe, &(0x7f0000000080)={0x0, 0xb815, 0x4, 0x20000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) (async, rerun: 32) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r5) ptrace$cont(0x2, r5, 0x1ffff000, 0x20000000) (async) syz_clone3(&(0x7f0000000780)={0x2200, &(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000640), {0xb}, &(0x7f0000000680)=""/30, 0x1e, 0xfffffffffffffffd, &(0x7f0000000740)=[0x0, r3, r4, r3, r5], 0x5}, 0x58) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async, rerun: 64) syz_mount_image$ntfs3(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="c76ccdc1c82f99a044f6ba6bf625dde67df30c69ed464f02632875406ebec8d17f41e742148cb66777f546555cffcb443bcee386a1a729a713a4f2708917c3343bb832a8d493942015ce8b74526619e4ea17d82e6843e1923571e105359020d3f2c4a50066855add1a45441450cac7832094e2229c0387b0845ca9602dfd619bbb963263d2c25aa183a200da23fa0805957e56ad79aa40c62f529e44ac305dbcf9024406eeec63bd59d7bd5fa56b059128f28c", 0xb3}, {&(0x7f0000000380)="fb9b7b7e489d9b9fa376620de5162b68513958af8d1e168a84d3c53dee6791fbc9f472229b408bdeb3532417383af80530ac196aa87c892b02629048084b381c77b635be2b9b1e20702d1a15e2d8960b75ee94d4712d33758992fea4db5d5b8dc5f8c7fb4de327ad502b44f899c57ad45619a13193d6878cb3896f27f701ad136be5a9f7fd11fda829e7263cfc1c8c04e51c717c68ced503d3b2e55979549fa925", 0xa1, 0x8000000000000000}, {&(0x7f0000000440)="5b0385d5698c025b0510707bb0c472157786c51c7d5357effe3ee8b791c3b770183b63be7a312f129ff6cab23209ebd08311b18e2fa52b6c611d4f16bf85f9855204f6b33c73c9c912015ba9ba764c0104c99a05a374c38901fe452d353c1bd655858ad007af0e296695469880de2d3cc17d9881691e73ad5a34fd41cf90ffb574a3e02580ea08bc88e2b16802e98536af3edf83492c7fe1e6f8d1c5b94abc55f33dc59272f77379ddcb0e3dda024dbd495b1d6bbad5a0aa33ff", 0xba, 0x7fffffff}], 0x200020, &(0x7f0000000580)={[{@discard}, {@fmask={'fmask', 0x3d, 0x200}}, {@umask={'umask', 0x3d, 0xe38a2f3}}], [{@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xf6'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x38, 0x0, 0x34, 0x66, 0x31, 0x39, 0x34], 0x2d, [0x0, 0x62, 0x39, 0x66], 0x2d, [0x65, 0x0, 0x37, 0x4], 0x2d, [0x61, 0x64, 0x50, 0x5d], 0x2d, [0x36, 0x39, 0x32, 0x30, 0x61, 0x63, 0x56, 0x65]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) (async) syz_io_uring_setup(0x5dd7, &(0x7f00000010c0)={0x0, 0x54f9, 0x20, 0x0, 0x174, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000980), &(0x7f0000001140)=0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000001200)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001180)=@in={0x2, 0x4e22, @local}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x80000000) process_vm_readv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000800)=""/58, 0x3a}, {&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/170, 0xaa}, {&(0x7f0000000a80)=""/78, 0x4e}, {&(0x7f0000000b00)=""/172, 0xac}], 0x7, &(0x7f0000001040)=[{&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/206, 0xce}, {&(0x7f0000000e00)=""/67, 0x43}, {&(0x7f0000000e80)=""/229, 0xe5}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f0000000fc0)=""/38, 0x26}, {&(0x7f0000001000)=""/63, 0x3f}], 0x7, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x72a8) 04:47:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40990000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 655.823517][T29453] loop0: detected capacity change from 0 to 6144 [ 655.830478][T29452] input: syz0 as /devices/virtual/input/input5036 04:47:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x54d8) [ 655.841045][T29453] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 655.862279][T29456] input: syz0 as /devices/virtual/input/input5037 04:47:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x72c0) 04:47:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x409a0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 655.943744][T29467] loop0: detected capacity change from 0 to 6400 [ 655.960978][T29468] input: syz0 as /devices/virtual/input/input5038 04:47:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x54f0) [ 655.970963][T29467] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x72d8) 04:47:51 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r5 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) io_uring_enter(0xffffffffffffffff, 0x2006888, 0x7fd4, 0x2, 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r5, 0x13e4ac54, &(0x7f0000000180)="6234f418e74e4f50d6db64f46bfb8cd3f57e48786f152bbdaa229f6443e8d41dba0d0efe70b534fe67f62a3fa2c3e58be338b0f7fe485be21888425297fd36dd5b97340972f44eb6", 0x48, 0xb}, 0x1) 04:47:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x409b0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 656.019033][T29474] input: syz0 as /devices/virtual/input/input5039 [ 656.062959][T29492] loop0: detected capacity change from 0 to 6656 04:47:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x72f0) [ 656.064979][T29491] input: syz0 as /devices/virtual/input/input5040 [ 656.087066][T29492] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 656.103551][T29470] loop4: detected capacity change from 0 to 264192 [ 656.171580][T29500] input: syz0 as /devices/virtual/input/input5041 [ 656.173570][T29504] input: syz0 as /devices/virtual/input/input5042 [ 656.194079][T29506] loop0: detected capacity change from 0 to 6912 [ 656.210077][T29506] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:51 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x3240, &(0x7f0000000180)={0x0, 0x6f49, 0x8, 0x3, 0x3df, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x7000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/cgroup\x00') 04:47:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5508) 04:47:51 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r5 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) io_uring_enter(0xffffffffffffffff, 0x2006888, 0x7fd4, 0x2, 0x0, 0x0) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r5, 0x13e4ac54, &(0x7f0000000180)="6234f418e74e4f50d6db64f46bfb8cd3f57e48786f152bbdaa229f6443e8d41dba0d0efe70b534fe67f62a3fa2c3e58be338b0f7fe485be21888425297fd36dd5b97340972f44eb6", 0x48, 0xb}, 0x1) 04:47:51 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) ptrace$getenv(0x4201, r3, 0xfffffffffffffffe, &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8010, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x7, 0x2, {0x0, r4}, 0x8, 0xd, 0x1, {0x0, 0x0, r0}}, 0x7) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x409c0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7308) [ 656.276029][T29511] input: syz0 as /devices/virtual/input/input5043 04:47:51 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0xfffffffffffffd8a) (async) io_uring_enter(0xffffffffffffffff, 0x2006888, 0x7fd4, 0x2, 0x0, 0x0) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x8000000) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r6, r8, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r5, 0x13e4ac54, &(0x7f0000000180)="6234f418e74e4f50d6db64f46bfb8cd3f57e48786f152bbdaa229f6443e8d41dba0d0efe70b534fe67f62a3fa2c3e58be338b0f7fe485be21888425297fd36dd5b97340972f44eb6", 0x48, 0xb}, 0x1) 04:47:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7320) [ 656.432494][T29520] input: syz0 as /devices/virtual/input/input5045 [ 656.441476][T29525] loop0: detected capacity change from 0 to 7168 [ 656.451877][T29518] input: syz0 as /devices/virtual/input/input5044 04:47:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x409d0000}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5520) [ 656.459723][T29525] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:51 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r3, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r3, 0x10000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r6, 0x545d, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r6, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r7}}, 0x4769) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="3804f92f922a3a077c71ae3cc5da99b0ad96254beef22a74d6fc3941a5b581108ace17eb4c5f029f9e19cc26bdacc7970388cc89ab9cb3e040c28d2efababacf7b3e0646f658552991e1a5640bd26ed50cc5fd92962e5ef06dc3bd645c23174fb284bb380db71a4c9de6e7373656afb32bfff6ce7537f7e9932e32a08e0595618900029c3734d2c039f825dd6cefdde09c55ab5d80ea5f76082b84d1681c54ab5eac497650336fa15ccdd6e3299f8ebc83ae17454fd8f1895d98af9ed0e3f14bce761b0c6bd3da2cf82248cab7801cd8a6da3806ab50547000087f774d36fb413c", 0xe1, 0x1, 0x0, {0x0, r7}}, 0xff) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x810, r0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x1}}, 0x3edc) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = pidfd_open(r11, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r12, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r13}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:51 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x409e0000}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 656.559031][T29539] loop0: detected capacity change from 0 to 7424 [ 656.566494][T29539] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 656.579143][T29541] input: syz0 as /devices/virtual/input/input5046 [ 656.640451][T29543] input: syz0 as /devices/virtual/input/input5047 [ 656.674994][T29547] loop0: detected capacity change from 0 to 7680 [ 656.680194][T29547] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:52 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x3240, &(0x7f0000000180)={0x0, 0x6f49, 0x8, 0x3, 0x3df, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x7000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/cgroup\x00') syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x3240, &(0x7f0000000180)={0x0, 0x6f49, 0x8, 0x3, 0x3df, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x7000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/cgroup\x00') (async) 04:47:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7338) 04:47:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5538) [ 656.905360][T29552] input: syz0 as /devices/virtual/input/input5048 [ 656.905467][T29553] input: syz0 as /devices/virtual/input/input5049 04:47:52 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) ptrace$getenv(0x4201, r3, 0xfffffffffffffffe, &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8010, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x7, 0x2, {0x0, r4}, 0x8, 0xd, 0x1, {0x0, 0x0, r0}}, 0x7) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r3, 0x0) (async) ptrace$getenv(0x4201, r3, 0xfffffffffffffffe, &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8010, r0, 0x10000000) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x7, 0x2, {0x0, r4}, 0x8, 0xd, 0x1, {0x0, 0x0, r0}}, 0x7) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:52 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40bc0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:52 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r3, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r3, 0x10000000) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r6, 0x545d, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r6, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r7}}, 0x4769) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="3804f92f922a3a077c71ae3cc5da99b0ad96254beef22a74d6fc3941a5b581108ace17eb4c5f029f9e19cc26bdacc7970388cc89ab9cb3e040c28d2efababacf7b3e0646f658552991e1a5640bd26ed50cc5fd92962e5ef06dc3bd645c23174fb284bb380db71a4c9de6e7373656afb32bfff6ce7537f7e9932e32a08e0595618900029c3734d2c039f825dd6cefdde09c55ab5d80ea5f76082b84d1681c54ab5eac497650336fa15ccdd6e3299f8ebc83ae17454fd8f1895d98af9ed0e3f14bce761b0c6bd3da2cf82248cab7801cd8a6da3806ab50547000087f774d36fb413c", 0xe1, 0x1, 0x0, {0x0, r7}}, 0xff) (async, rerun: 64) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x810, r0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r8, r10, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x1}}, 0x3edc) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = pidfd_open(r11, 0x0) (async) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r12, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r13}}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7350) 04:47:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5550) [ 657.086816][T29569] loop0: detected capacity change from 0 to 15361 04:47:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7368) [ 657.100638][T29571] input: syz0 as /devices/virtual/input/input5050 [ 657.113049][T29569] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 657.187308][T29577] input: syz0 as /devices/virtual/input/input5051 04:47:52 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40bd0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5568) [ 657.286601][T29586] input: syz0 as /devices/virtual/input/input5052 [ 657.289082][ T3646] I/O error, dev loop0, sector 15232 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:52 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000004c0)={0x2, @pix_mp={0x7, 0x1, 0x39555659, 0x0, 0x6, [{0x1ca0, 0x4797}, {0x4, 0x80000001}, {0x1, 0x40}, {0xfff, 0x7fffffff}, {0x5, 0x8}, {0x9, 0xd31}, {0xbb03, 0x6}, {0x7, 0x4}], 0x29, 0x9, 0x3, 0x1, 0x6}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x3, 0x56b6], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000003c0)={0x2, @win={{0x7fff, 0x7ff, 0x7dd3, 0x3}, 0x0, 0x95c, &(0x7f0000000240)={{0x81, 0x9, 0xde9, 0xfffffe00}, &(0x7f0000000200)={{0x20, 0xa120, 0x5, 0x5}, &(0x7f00000001c0)={{0x5, 0x3, 0xffffff3d, 0xe9}}}}, 0x80, &(0x7f00000002c0)="fb7ed931e0534f6431e36abae0741bdf5086d8a19b530041acc947a37e40ab97d94e5af0d7cec9ca78b7ddbb56b05de0c329a993b8efb6c28ff911d124293bd8b1674887ec6af90b5602134cf4dcdc981f6b84493b6c0a6383de1d2383e2f760522bf168b38e75bc361e7906642a87c2e80cdbbacd965b210e94ed5fe812d9010a52a95fcd238d3303a67cf17be8cc6272f6bb449fd1d08289d93e13e937fbd09aea47808a7f328173e5ab21f45b3e1a9ec739a8e5d7898987a3600ee48753c1f106420ae514f4fedf4f20", 0x1f}}) 04:47:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7380) 04:47:52 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40be0100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 657.364573][T29588] loop0: detected capacity change from 0 to 15617 [ 657.368340][T29588] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 657.471715][T29592] input: syz0 as /devices/virtual/input/input5053 04:47:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x7398) [ 657.472607][T29593] input: syz0 as /devices/virtual/input/input5054 [ 657.532851][T29597] loop0: detected capacity change from 0 to 15873 [ 657.581949][T29597] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 657.596509][T29600] input: syz0 as /devices/virtual/input/input5055 [ 657.616093][ T3646] I/O error, dev loop0, sector 15744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:47:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5580) 04:47:53 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) ptrace$getenv(0x4201, r3, 0xfffffffffffffffe, &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8010, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x7, 0x2, {0x0, r4}, 0x8, 0xd, 0x1, {0x0, 0x0, r0}}, 0x7) (async, rerun: 32) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 04:47:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40bf0100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x73b0) 04:47:53 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r0, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000004c0)={0x2, @pix_mp={0x7, 0x1, 0x39555659, 0x0, 0x6, [{0x1ca0, 0x4797}, {0x4, 0x80000001}, {0x1, 0x40}, {0xfff, 0x7fffffff}, {0x5, 0x8}, {0x9, 0xd31}, {0xbb03, 0x6}, {0x7, 0x4}], 0x29, 0x9, 0x3, 0x1, 0x6}}) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) (rerun: 64) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x3, 0x56b6], 0x2, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000003c0)={0x2, @win={{0x7fff, 0x7ff, 0x7dd3, 0x3}, 0x0, 0x95c, &(0x7f0000000240)={{0x81, 0x9, 0xde9, 0xfffffe00}, &(0x7f0000000200)={{0x20, 0xa120, 0x5, 0x5}, &(0x7f00000001c0)={{0x5, 0x3, 0xffffff3d, 0xe9}}}}, 0x80, &(0x7f00000002c0)="fb7ed931e0534f6431e36abae0741bdf5086d8a19b530041acc947a37e40ab97d94e5af0d7cec9ca78b7ddbb56b05de0c329a993b8efb6c28ff911d124293bd8b1674887ec6af90b5602134cf4dcdc981f6b84493b6c0a6383de1d2383e2f760522bf168b38e75bc361e7906642a87c2e80cdbbacd965b210e94ed5fe812d9010a52a95fcd238d3303a67cf17be8cc6272f6bb449fd1d08289d93e13e937fbd09aea47808a7f328173e5ab21f45b3e1a9ec739a8e5d7898987a3600ee48753c1f106420ae514f4fedf4f20", 0x1f}}) 04:47:53 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r3, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r3, 0x10000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r6, 0x545d, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r6, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r7}}, 0x4769) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="3804f92f922a3a077c71ae3cc5da99b0ad96254beef22a74d6fc3941a5b581108ace17eb4c5f029f9e19cc26bdacc7970388cc89ab9cb3e040c28d2efababacf7b3e0646f658552991e1a5640bd26ed50cc5fd92962e5ef06dc3bd645c23174fb284bb380db71a4c9de6e7373656afb32bfff6ce7537f7e9932e32a08e0595618900029c3734d2c039f825dd6cefdde09c55ab5d80ea5f76082b84d1681c54ab5eac497650336fa15ccdd6e3299f8ebc83ae17454fd8f1895d98af9ed0e3f14bce761b0c6bd3da2cf82248cab7801cd8a6da3806ab50547000087f774d36fb413c", 0xe1, 0x1, 0x0, {0x0, r7}}, 0xff) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x810, r0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x1}}, 0x3edc) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = pidfd_open(r11, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r12, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r13}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r3, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r3, 0x10000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCMSET(r6, 0x545d, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r6, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r7}}, 0x4769) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="3804f92f922a3a077c71ae3cc5da99b0ad96254beef22a74d6fc3941a5b581108ace17eb4c5f029f9e19cc26bdacc7970388cc89ab9cb3e040c28d2efababacf7b3e0646f658552991e1a5640bd26ed50cc5fd92962e5ef06dc3bd645c23174fb284bb380db71a4c9de6e7373656afb32bfff6ce7537f7e9932e32a08e0595618900029c3734d2c039f825dd6cefdde09c55ab5d80ea5f76082b84d1681c54ab5eac497650336fa15ccdd6e3299f8ebc83ae17454fd8f1895d98af9ed0e3f14bce761b0c6bd3da2cf82248cab7801cd8a6da3806ab50547000087f774d36fb413c", 0xe1, 0x1, 0x0, {0x0, r7}}, 0xff) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x810, r0, 0x0) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r8, r10, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x1}}, 0x3edc) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r11, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r12, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r13}}, 0x0) (async) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) 04:47:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40c00100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 658.018764][T29606] loop0: detected capacity change from 0 to 16129 [ 658.036742][T29613] input: syz0 as /devices/virtual/input/input5056 04:47:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x73c8) [ 658.050051][T29612] input: syz0 as /devices/virtual/input/input5057 04:47:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x5598) 04:47:53 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000004c0)={0x2, @pix_mp={0x7, 0x1, 0x39555659, 0x0, 0x6, [{0x1ca0, 0x4797}, {0x4, 0x80000001}, {0x1, 0x40}, {0xfff, 0x7fffffff}, {0x5, 0x8}, {0x9, 0xd31}, {0xbb03, 0x6}, {0x7, 0x4}], 0x29, 0x9, 0x3, 0x1, 0x6}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x3, 0x56b6], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000003c0)={0x2, @win={{0x7fff, 0x7ff, 0x7dd3, 0x3}, 0x0, 0x95c, &(0x7f0000000240)={{0x81, 0x9, 0xde9, 0xfffffe00}, &(0x7f0000000200)={{0x20, 0xa120, 0x5, 0x5}, &(0x7f00000001c0)={{0x5, 0x3, 0xffffff3d, 0xe9}}}}, 0x80, &(0x7f00000002c0)="fb7ed931e0534f6431e36abae0741bdf5086d8a19b530041acc947a37e40ab97d94e5af0d7cec9ca78b7ddbb56b05de0c329a993b8efb6c28ff911d124293bd8b1674887ec6af90b5602134cf4dcdc981f6b84493b6c0a6383de1d2383e2f760522bf168b38e75bc361e7906642a87c2e80cdbbacd965b210e94ed5fe812d9010a52a95fcd238d3303a67cf17be8cc6272f6bb449fd1d08289d93e13e937fbd09aea47808a7f328173e5ab21f45b3e1a9ec739a8e5d7898987a3600ee48753c1f106420ae514f4fedf4f20", 0x1f}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r0, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000004c0)={0x2, @pix_mp={0x7, 0x1, 0x39555659, 0x0, 0x6, [{0x1ca0, 0x4797}, {0x4, 0x80000001}, {0x1, 0x40}, {0xfff, 0x7fffffff}, {0x5, 0x8}, {0x9, 0xd31}, {0xbb03, 0x6}, {0x7, 0x4}], 0x29, 0x9, 0x3, 0x1, 0x6}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000000)=[0x3, 0x56b6], 0x2, 0x800}) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000003c0)={0x2, @win={{0x7fff, 0x7ff, 0x7dd3, 0x3}, 0x0, 0x95c, &(0x7f0000000240)={{0x81, 0x9, 0xde9, 0xfffffe00}, &(0x7f0000000200)={{0x20, 0xa120, 0x5, 0x5}, &(0x7f00000001c0)={{0x5, 0x3, 0xffffff3d, 0xe9}}}}, 0x80, &(0x7f00000002c0)="fb7ed931e0534f6431e36abae0741bdf5086d8a19b530041acc947a37e40ab97d94e5af0d7cec9ca78b7ddbb56b05de0c329a993b8efb6c28ff911d124293bd8b1674887ec6af90b5602134cf4dcdc981f6b84493b6c0a6383de1d2383e2f760522bf168b38e75bc361e7906642a87c2e80cdbbacd965b210e94ed5fe812d9010a52a95fcd238d3303a67cf17be8cc6272f6bb449fd1d08289d93e13e937fbd09aea47808a7f328173e5ab21f45b3e1a9ec739a8e5d7898987a3600ee48753c1f106420ae514f4fedf4f20", 0x1f}}) (async) [ 658.050311][T29606] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40c10100}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 658.124751][T29624] loop0: detected capacity change from 0 to 16385 [ 658.158501][T29624] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 04:47:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x73e0) 04:47:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x55b0) [ 658.200486][T29642] input: syz0 as /devices/virtual/input/input5058 [ 658.206392][T29640] input: syz0 as /devices/virtual/input/input5059 [ 658.256182][T29647] loop0: detected capacity change from 0 to 16641 [ 658.263452][T29647] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 658.305281][T29661] input: syz0 as /devices/virtual/input/input5060 [ 658.312196][ T3646] I/O error, dev loop0, sector 16512 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 658.316718][T29662] input: syz0 as /devices/virtual/input/input5061 04:47:53 executing program 4: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x20000800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x80000000, 0x0, 0xffffffffffffffff}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x0, 0x20000800, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x41) modify_ldt$write2(0x11, &(0x7f0000000300)={0x7cf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000003c0)={0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x10) r4 = pidfd_open(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r4, 0xc664, {0x0, r0}, 0xff, 0x0, 0x1, {0x0, 0x0, r4}}, 0x40) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r7 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r7}, 0x1) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 04:47:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000001a80)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020018000c", 0xd, 0x40c20100}], 0x0, &(0x7f00000002c0)=ANY=[]) 04:47:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000700)={{}, 'syz0\x00', 0x43}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x73f8) 04:47:53 executing program 2: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r3, 0x0) r4 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4046830, r4, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x10000000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r7, 0x545d, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r7, 0x7, 0x9, 0x5, 0x10, 0x0, {0x1, r8}}, 0x4769) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x409, 0x3, 0x1, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 04:47:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x55c8) 04:47:53 executing program 5: r0 = syz_io_uring_setup(0x1dfc, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = syz_io_uring_setup(0x4710, &(0x7f0000000240)={0x0, 0x601c, 0x8, 0x0, 0x1dc, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r3, &(0x7f0000000100)={0x2, 0x0, 0x10}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = signalfd4(r4, &(0x7f00000004c0)={[0x6]}, 0x8, 0x800) syz_clone3(&(0x7f0000000500)={0x10800, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340), {0xa}, &(0x7f0000000380)=""/97, 0x61, &(0x7f0000000400)=""/91, &(0x7f0000000480)=[r5], 0x1, {r6}}, 0x58) r7 = pidfd_open(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 658.784496][T29674] input: syz0 as /devices/virtual/input/input5063 [ 658.785644][T29670] loop0: detected capacity change from 0 to 16897 [ 658.793051][T29673] input: syz0 as /devices/virtual/input/input5062 [ 658.810786][T29670] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 658.810786][T29670] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 658.859110][T29678] ================================================================== [ 658.859120][T29678] BUG: KASAN: null-ptr-deref in io_file_get_normal+0x351/0x3b0 [ 658.859150][T29678] Write of size 4 at addr 0000000000000118 by task iou-wrk-29669/29678 [ 658.859166][T29678] [ 658.859171][T29678] CPU: 1 PID: 29678 Comm: iou-wrk-29669 Not tainted 5.19.0-rc2-syzkaller-00050-g018ab4fabddd #0 [ 658.859192][T29678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.859203][T29678] Call Trace: [ 658.859209][T29678] [ 658.859215][T29678] dump_stack_lvl+0xcd/0x134 [ 658.859238][T29678] kasan_report.cold+0x61/0x1c6 [ 658.859260][T29678] ? io_file_get_normal+0x351/0x3b0 [ 658.859282][T29678] kasan_check_range+0x13d/0x180 [ 658.859303][T29678] io_file_get_normal+0x351/0x3b0 [ 658.859326][T29678] io_issue_sqe+0x1a22/0x9750 [ 658.859353][T29678] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 658.859380][T29678] ? __io_close_fixed.isra.0+0x4d0/0x4d0 [ 658.859408][T29678] ? find_held_lock+0x2d/0x110 [ 658.859432][T29678] ? io_worker_handle_work+0x53d/0x1ab0 [ 658.859451][T29678] ? lock_downgrade+0x6e0/0x6e0 [ 658.859474][T29678] ? do_raw_spin_lock+0x120/0x2a0 [ 658.859495][T29678] io_wq_submit_work+0x287/0x740 [ 658.859520][T29678] io_worker_handle_work+0xb1c/0x1ab0 [ 658.859547][T29678] io_wqe_worker+0x637/0xdb0 [ 658.859568][T29678] ? io_wqe_dec_running+0x240/0x240 [ 658.859588][T29678] ? ret_from_fork+0x8/0x30 [ 658.859618][T29678] ? lock_downgrade+0x6e0/0x6e0 [ 658.859641][T29678] ? do_raw_spin_lock+0x120/0x2a0 [ 658.859659][T29678] ? rwlock_bug.part.0+0x90/0x90 [ 658.859678][T29678] ? _raw_spin_unlock_irq+0x1f/0x40 [ 658.859699][T29678] ? _raw_spin_unlock_irq+0x1f/0x40 [ 658.859718][T29678] ? io_wqe_dec_running+0x240/0x240 [ 658.859737][T29678] ret_from_fork+0x1f/0x30 [ 658.859761][T29678] [ 658.859767][T29678] ================================================================== [ 658.859775][T29678] Kernel panic - not syncing: panic_on_warn set ... [ 658.859784][T29678] CPU: 1 PID: 29678 Comm: iou-wrk-29669 Not tainted 5.19.0-rc2-syzkaller-00050-g018ab4fabddd #0 [ 658.859805][T29678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.859816][T29678] Call Trace: [ 658.859822][T29678] [ 658.859828][T29678] dump_stack_lvl+0xcd/0x134 [ 658.859849][T29678] panic+0x2d7/0x636 [ 658.859868][T29678] ? panic_print_sys_info.part.0+0x10b/0x10b [ 658.859893][T29678] ? io_file_get_normal+0x351/0x3b0 [ 658.859921][T29678] ? io_file_get_normal+0x351/0x3b0 [ 658.859943][T29678] end_report.part.0+0x3f/0x7c [ 658.859963][T29678] kasan_report.cold+0x93/0x1c6 [ 658.859984][T29678] ? io_file_get_normal+0x351/0x3b0 [ 658.860007][T29678] kasan_check_range+0x13d/0x180 [ 658.860027][T29678] io_file_get_normal+0x351/0x3b0 [ 658.860050][T29678] io_issue_sqe+0x1a22/0x9750 [ 658.860076][T29678] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 658.860103][T29678] ? __io_close_fixed.isra.0+0x4d0/0x4d0 [ 658.860130][T29678] ? find_held_lock+0x2d/0x110 [ 658.860153][T29678] ? io_worker_handle_work+0x53d/0x1ab0 [ 658.860173][T29678] ? lock_downgrade+0x6e0/0x6e0 [ 658.860196][T29678] ? do_raw_spin_lock+0x120/0x2a0 [ 658.860217][T29678] io_wq_submit_work+0x287/0x740 [ 658.860243][T29678] io_worker_handle_work+0xb1c/0x1ab0 [ 658.860269][T29678] io_wqe_worker+0x637/0xdb0 [ 658.860290][T29678] ? io_wqe_dec_running+0x240/0x240 [ 658.860310][T29678] ? ret_from_fork+0x8/0x30 [ 658.860331][T29678] ? lock_downgrade+0x6e0/0x6e0 [ 658.860354][T29678] ? do_raw_spin_lock+0x120/0x2a0 [ 658.860372][T29678] ? rwlock_bug.part.0+0x90/0x90 [ 658.860392][T29678] ? _raw_spin_unlock_irq+0x1f/0x40 [ 658.860412][T29678] ? _raw_spin_unlock_irq+0x1f/0x40 [ 658.860433][T29678] ? io_wqe_dec_running+0x240/0x240 [ 658.860453][T29678] ret_from_fork+0x1f/0x30 [ 658.860478][T29678] [ 658.861107][T29678] Kernel Offset: disabled