last executing test programs: 6m21.834381094s ago: executing program 1 (id=2120): syz_open_dev$usbfs(0x0, 0x76, 0x160341) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a242) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000240)={{0x2, 0x1, 0x9, 0x1, 0xfffffffe}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20) listen(0xffffffffffffffff, 0x0) 6m19.802353534s ago: executing program 1 (id=2124): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 6m17.684925595s ago: executing program 1 (id=2129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x90) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000800)={0x0, @dev, @remote}, &(0x7f0000000880)=0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000007) getdents(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) 6m16.226242714s ago: executing program 1 (id=2133): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$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") mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 6m14.734542723s ago: executing program 1 (id=2139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) 6m14.017971167s ago: executing program 1 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x800084, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4, @ANYRES8, @ANYRES8=r3, @ANYRESHEX=r2, @ANYRESOCT], 0x86, 0x2e0, &(0x7f0000001180)="$eJzs3btrJVUcB/Df3Mx9qMVNYSWCA1pYLZttbRJkF8RULilWCw3uLkhuEDYQ8XndSuxsLP0LBME/xMbOUrAV7Fxl4ci87iM7e3OV3Iju51MkJ+ec78zvzEySaXLyzvPHR7eLuHv/k59jNMqitzuMeJDFdvSi9Xks2f0qAID/sgcpxW+p1jH805crsqMN1gUAbM45v/8befXxVjnj+1nn1mXUBwBcvJu33nx9b3//+htFMYobx1+cHmQRUX6ux/fuxnsxiTtxNcbxMKJ6UehH9bZQNm+klKZ5UdqOl46npwdl8vjtH5rj7/0aUeV3YhzbVdfsbaPKv7Z/faeoLeSnZR1PN+ffLfPXYhzPzsJL+Wsd+TgYxMsvLtR/Jcbx47vxfkzidlXEPP/ZTlG8mr7+/eO3yvLKfDY9PRhW8+bSVnvy6SXfIwAAAAAAAAAAAAAAAAAAAAAA/n+uNHvnDKPav6fsavbf2XpYftGPorW9vD9Pnc/aA833B4peSmma4pt2f52rRVGkcmI+jHk+j+fyZmNBAAAAAAAAAAAAAAAAAAAAeMKdfPjR0eFkcufeBTT+TCnVR80j4o+bEf/0gLsLPS/E6snDZiWHk0mvaS7PyRd7Yqudk0WsLKNcxIVclvMbTz1Sc9P49rvOVLmikzy6hkbnn7Tffa7HNz7tGvqgX1/HzlT7dB0dZt3XcDgrflTeuDh74wbRXU8/zvQMHld8uzHFeisddA6N//atHDxTNaZVT/fzE9mq74tXfqnLXlhF1Wif8kF1VTvj/aaxED/zbKz1PMeojj/6syKzWwcAAAAAAAAAAAAAAAAAAGzU/K9/Owbvr4z20nBjZQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADApZr///91GvlyeI3UIO6d/FtrAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MnxVwAAAP//HYpU2w==") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) 6m14.017803597s ago: executing program 32 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x800084, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4, @ANYRES8, @ANYRES8=r3, @ANYRESHEX=r2, @ANYRESOCT], 0x86, 0x2e0, &(0x7f0000001180)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) 6m9.812630269s ago: executing program 5 (id=2155): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xbd40}}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@bh}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 6m8.978825346s ago: executing program 5 (id=2160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32=r1], 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 6m8.025535514s ago: executing program 5 (id=2166): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 6m8.001846975s ago: executing program 5 (id=2167): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1) pwrite64(r0, 0x0, 0x0, 0x8080c61) r1 = openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'veth0_to_batadv\x00', 0x4000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) 6m7.387272036s ago: executing program 5 (id=2172): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) inotify_init() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) 6m6.873884847s ago: executing program 5 (id=2175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) 6m6.809558708s ago: executing program 33 (id=2175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) 14.757864474s ago: executing program 2 (id=3317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000001880)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 13.652151746s ago: executing program 6 (id=3321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 13.651792456s ago: executing program 2 (id=3322): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 13.137297186s ago: executing program 2 (id=3324): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030010850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") 13.109892266s ago: executing program 6 (id=3325): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x100000) 13.055006867s ago: executing program 6 (id=3326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 11.998277958s ago: executing program 6 (id=3328): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x6c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) listen(r0, 0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) 10.573881455s ago: executing program 2 (id=3336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 10.542568716s ago: executing program 2 (id=3337): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x100000) 10.542205976s ago: executing program 6 (id=3338): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 5.414576146s ago: executing program 3 (id=3353): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x22500, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r1], 0x0) 4.073012131s ago: executing program 0 (id=3357): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,acces', @ANYRESDEC]) 3.926065784s ago: executing program 0 (id=3358): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000001880)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 3.466872943s ago: executing program 4 (id=3360): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) 3.356053565s ago: executing program 3 (id=3361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030010850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") 2.921002284s ago: executing program 0 (id=3362): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x22500, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) userfaultfd(0x80001) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r1], 0x0) 2.536236681s ago: executing program 4 (id=3363): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mkdir(0x0, 0x0) 2.489995512s ago: executing program 3 (id=3364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030010850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000050) 1.670042988s ago: executing program 4 (id=3365): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '/dev/net/tun\x00'}) 1.653383398s ago: executing program 4 (id=3366): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000400000041000000000000000100", @ANYRES32=0x1, @ANYBLOB="0000000000008b91d37500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) 1.585739269s ago: executing program 4 (id=3367): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a810008100450086dd671ed6e10014066900000000000000000000000000000000fe8000000000000000000000000000bb4e214e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x2, 0xe) socket(0x10, 0x803, 0x0) 1.129266298s ago: executing program 3 (id=3368): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24008818) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000540)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b38fbd8a2aaaa3eb9629d0d9360c03c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bde666812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aaf", @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0], 0x21, 0x1513, &(0x7f0000020a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) request_key(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980)='\x00', 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x7) 937.705282ms ago: executing program 0 (id=3369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1200}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 896.733693ms ago: executing program 0 (id=3370): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 547.97343ms ago: executing program 4 (id=3371): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) r4 = syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000040000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYRES8=r1, @ANYRESHEX=0xee00, @ANYRESOCT=r2], 0x81, 0x14f3, &(0x7f0000001580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) getsockname$inet6(r4, &(0x7f00000003c0), &(0x7f0000000480)=0x1c) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 235.596376ms ago: executing program 3 (id=3372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 91.552328ms ago: executing program 3 (id=3373): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000001880)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 12.29131ms ago: executing program 0 (id=3374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) 11.63311ms ago: executing program 6 (id=3375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030010850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_delroute={0x28, 0x19, 0x901, 0x4, 0xfffffffe, {0x2, 0x18, 0x10, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x800}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_METRICS={0x4}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") 0s ago: executing program 2 (id=3376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000130000008500000086000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d302c757466383d302c73686f72746e616d653d77696e39352c726f6469722c636f6465706167653d3836392c696f636861727365743d6d6163696e7569742c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c636865636b3d7374726963742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c726f6469722c73686f72746e616d653d77696e39352c757466383d302c73686f72746e616d653d6d697865642c00d86b84ed07144faef0aa4908b9beeb56aeb3b90400bea1bae725305eba96824ee146d01d0fb4fda289e8543e662ec4541327986f769d3e267d42d45911f038049c5bacf152f95e90f9934085966078d82ef7d773fd8d8491e4bd494d2deaea4f27ac91e1fdf562122a1e82fe858ad310c759b4fd1c23600d22d3b6dda948b580f175f08b95ec418f744485e9b2ea488e13bdf9ab426517723729e6b7d86f500f3813dda09bc166b6a8e59f8860ff097c44070eb1f6d4cebd7be016a927112d99d5b4e6741a77740ad46e0435004320aec4df6c3ba7e55e4771bf8ab53a6eb13d39b1923b6911faedaa15e19bac0594a36cd9b3c7d8f8b64dec39"], 0x25, 0x358, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, './bus\x00'}, 0x6e) kernel console output (not intermixed with test programs): ed parameter 'utf8' [ 764.322177][ T9982] EXT4-fs (loop6): Ignoring removed bh option [ 764.340414][ T9981] EXT4-fs (loop3): Unrecognized mount option "obj_type=sched_switch" or missing value [ 764.359228][ T9984] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 764.392177][ T9982] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x000000000000bd40,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,bh,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 764.527452][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 764.527474][ T30] audit: type=1400 audit(1756887714.216:958): avc: denied { write } for pid=9983 comm="syz.2.2974" path=2F32312FE91F7189591E9233614B2F66696C6531 dev="loop2" ino=1048944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 764.943053][ T9982] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 764.953810][ T30] audit: type=1400 audit(1756887714.216:959): avc: denied { create } for pid=9983 comm="syz.2.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 765.052523][ T9982] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 765.065749][ T30] audit: type=1400 audit(1756887714.216:960): avc: denied { connect } for pid=9983 comm="syz.2.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 765.086542][ T30] audit: type=1400 audit(1756887714.446:961): avc: denied { write } for pid=9983 comm="syz.2.2974" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 765.573870][ T30] audit: type=1400 audit(1756887715.366:962): avc: denied { write } for pid=10002 comm="syz.6.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 765.749076][ T1527] Bluetooth: hci0: command 0x1003 tx timeout [ 765.755464][ T4208] Bluetooth: hci0: sending frame failed (-49) [ 765.784002][T10012] loop6: detected capacity change from 0 to 256 [ 765.852097][T10012] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 766.146382][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 766.234374][T10022] syz.2.2982 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 766.650321][ T20] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 766.658871][T10027] loop4: detected capacity change from 0 to 40427 [ 766.691937][T10027] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 766.720242][T10027] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 766.751647][T10027] F2FS-fs (loop4): Found nat_bits in checkpoint [ 766.763650][T10033] loop6: detected capacity change from 0 to 1024 [ 766.800606][T10027] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 766.808086][T10027] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 766.861718][T10033] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.2985: Invalid block bitmap block 0 in block_group 0 [ 766.877170][T10033] Quota error (device loop6): write_blk: dquota write failed [ 766.885369][T10033] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 766.897142][T10033] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.2985: Failed to acquire dquot type 0 [ 766.908897][T10033] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.2985: Freeing blocks not in datazone - block = 0, count = 4096 [ 766.923150][T10033] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.2985: Invalid inode bitmap blk 0 in block_group 0 [ 766.936378][T10033] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 766.945105][ T20] usb 3-1: device descriptor read/64, error -71 [ 766.951825][ T3172] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 766.960746][ T3172] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 766.981141][T10033] EXT4-fs (loop6): 1 orphan inode deleted [ 766.987499][T10033] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 767.233471][T10042] loop3: detected capacity change from 0 to 1024 [ 767.408244][T10042] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.2987: Invalid block bitmap block 0 in block_group 0 [ 767.423042][T10042] Quota error (device loop3): write_blk: dquota write failed [ 767.430809][T10042] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 767.441295][T10042] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.2987: Failed to acquire dquot type 0 [ 767.453459][ T20] usb 3-1: device descriptor read/64, error -71 [ 767.462124][T10042] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.2987: Freeing blocks not in datazone - block = 0, count = 4096 [ 767.477617][T10042] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2987: Invalid inode bitmap blk 0 in block_group 0 [ 767.492412][T10042] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 767.503222][T10042] EXT4-fs (loop3): 1 orphan inode deleted [ 767.509128][T10042] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 767.781324][ T8610] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:8: Failed to release dquot type 0 [ 767.820326][ T2706] Bluetooth: hci0: command 0x1001 tx timeout [ 767.844262][ T4208] Bluetooth: hci0: sending frame failed (-49) [ 768.251472][ T6] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 768.424435][ T20] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 768.489490][T10051] loop6: detected capacity change from 0 to 128 [ 768.567175][T10051] EXT4-fs (loop6): Unrecognized mount option "obj_type=sched_switch" or missing value [ 768.820468][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 768.832347][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 768.843824][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 768.855040][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 768.930349][ T20] usb 3-1: device descriptor read/64, error -71 [ 769.020401][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 769.029758][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.038998][ T6] usb 5-1: Product: syz [ 769.043655][ T6] usb 5-1: Manufacturer: syz [ 769.048466][ T6] usb 5-1: SerialNumber: syz [ 769.070438][T10045] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 769.298382][T10045] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 769.305961][T10045] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 769.317427][T10057] usb usb8: usbfs: process 10057 (syz.3.2992) did not claim interface 0 before use [ 769.336350][ T20] usb 3-1: device descriptor read/64, error -71 [ 769.411450][T10061] fuse: Bad value for 'group_id' [ 769.470430][ T20] usb usb3-port1: attempt power cycle [ 769.711233][T10078] fuse: Bad value for 'group_id' [ 769.790441][ T6] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 769.796746][ T6] cdc_ncm 5-1:1.0: bind() failure [ 769.812547][ T6] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 769.824914][ T6] cdc_ncm 5-1:1.1: bind() failure [ 769.869294][ T6] usb 5-1: USB disconnect, device number 30 [ 769.900957][ T1527] Bluetooth: hci0: command 0x1009 tx timeout [ 770.502867][T10084] loop3: detected capacity change from 0 to 512 [ 770.542073][T10084] EXT4-fs (loop3): Ignoring removed orlov option [ 771.387219][T10086] loop2: detected capacity change from 0 to 512 [ 771.443277][T10086] EXT4-fs (loop2): Ignoring removed orlov option [ 771.569972][T10086] EXT4-fs (loop2): 1 orphan inode deleted [ 771.576136][T10086] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 771.593378][T10086] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.644032][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'. [ 771.669223][T10084] EXT4-fs (loop3): 1 orphan inode deleted [ 771.675092][T10084] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 771.692093][T10084] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.550353][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'. [ 772.839861][T10103] loop2: detected capacity change from 0 to 1024 [ 773.040808][T10103] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3004: Invalid block bitmap block 0 in block_group 0 [ 773.055560][T10103] __quota_error: 1 callbacks suppressed [ 773.055591][T10103] Quota error (device loop2): write_blk: dquota write failed [ 773.069141][T10103] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 773.104118][T10103] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.3004: Failed to acquire dquot type 0 [ 773.332624][T10108] loop4: detected capacity change from 0 to 512 [ 773.422791][ T1527] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 773.491780][T10103] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.3004: Freeing blocks not in datazone - block = 0, count = 4096 [ 773.516946][T10103] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3004: Invalid inode bitmap blk 0 in block_group 0 [ 773.559090][ T10] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 773.616090][T10103] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 773.662152][T10103] EXT4-fs (loop2): 1 orphan inode deleted [ 773.668647][T10103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 777.453602][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6234: comm kworker/u4:1: Failed to release dquot type 0 [ 777.471742][T10108] EXT4-fs (loop4): Ignoring removed orlov option [ 777.478980][T10108] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 777.953841][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'. [ 777.965776][T10124] usb usb8: usbfs: process 10124 (syz.4.3013) did not claim interface 0 before use [ 777.995218][ T848] Bluetooth: hci0: Frame reassembly failed (-84) [ 778.257373][T10134] loop4: detected capacity change from 0 to 1024 [ 778.341846][T10134] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3016: Invalid block bitmap block 0 in block_group 0 [ 778.357186][T10134] Quota error (device loop4): write_blk: dquota write failed [ 778.365325][T10134] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 778.375803][T10134] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.3016: Failed to acquire dquot type 0 [ 778.387761][T10134] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.3016: Freeing blocks not in datazone - block = 0, count = 4096 [ 778.401968][T10134] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3016: Invalid inode bitmap blk 0 in block_group 0 [ 778.415050][T10134] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 778.424146][ T848] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 778.424237][T10134] EXT4-fs (loop4): 1 orphan inode deleted [ 778.438580][T10134] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 778.448278][ T848] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 778.625083][T10140] loop0: detected capacity change from 0 to 1024 [ 778.747214][T10140] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3017: Invalid block bitmap block 0 in block_group 0 [ 778.761787][T10140] Quota error (device loop0): write_blk: dquota write failed [ 778.769481][T10140] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 778.780179][T10140] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.3017: Failed to acquire dquot type 0 [ 778.792384][T10140] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.3017: Freeing blocks not in datazone - block = 0, count = 4096 [ 778.806183][T10140] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3017: Invalid inode bitmap blk 0 in block_group 0 [ 778.819445][T10140] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 778.828290][T10140] EXT4-fs (loop0): 1 orphan inode deleted [ 778.834205][T10140] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 778.849139][ T10] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 778.868254][ T10] EXT4-fs error (device loop0): ext4_release_dquot:6234: comm kworker/u4:1: Failed to release dquot type 0 [ 779.292762][T10145] loop2: detected capacity change from 0 to 1024 [ 779.595420][T10145] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3018: Invalid block bitmap block 0 in block_group 0 [ 779.609862][T10145] Quota error (device loop2): write_blk: dquota write failed [ 779.617732][T10145] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 779.628203][T10145] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.3018: Failed to acquire dquot type 0 [ 779.642738][T10145] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.3018: Freeing blocks not in datazone - block = 0, count = 4096 [ 779.659786][T10145] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3018: Invalid inode bitmap blk 0 in block_group 0 [ 779.674381][ T10] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 779.683789][T10145] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 779.693350][T10145] EXT4-fs (loop2): 1 orphan inode deleted [ 779.699169][T10145] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 779.820059][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6234: comm kworker/u4:1: Failed to release dquot type 0 [ 780.001482][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3021'. [ 780.325503][T10155] fuse: Bad value for 'fd' [ 780.725367][T10159] loop2: detected capacity change from 0 to 256 [ 780.743524][T10159] exfat: Deprecated parameter 'utf8' [ 780.760406][T10159] exfat: Deprecated parameter 'namecase' [ 780.775347][T10159] exfat: Deprecated parameter 'namecase' [ 780.781684][T10159] exfat: Deprecated parameter 'utf8' [ 780.849055][T10164] loop0: detected capacity change from 0 to 1024 [ 780.863805][T10159] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 780.945229][T10164] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3024: Invalid block bitmap block 0 in block_group 0 [ 780.991669][T10164] Quota error (device loop0): write_blk: dquota write failed [ 780.999279][T10164] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.3024: Failed to acquire dquot type 0 [ 781.103855][T10164] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.3024: Freeing blocks not in datazone - block = 0, count = 4096 [ 781.119315][T10164] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3024: Invalid inode bitmap blk 0 in block_group 0 [ 781.133303][ T848] EXT4-fs error (device loop0): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 781.147698][T10164] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 781.158744][T10164] EXT4-fs (loop0): 1 orphan inode deleted [ 781.164634][T10164] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 781.988765][T10167] loop4: detected capacity change from 0 to 2048 [ 782.575980][T10175] loop0: detected capacity change from 0 to 256 [ 782.583578][T10167] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 782.610444][T10167] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.633693][T10175] FAT-fs (loop0): Directory bread(block 64) failed [ 782.656453][T10175] FAT-fs (loop0): Directory bread(block 65) failed [ 782.720464][T10175] FAT-fs (loop0): Directory bread(block 66) failed [ 782.727167][T10175] FAT-fs (loop0): Directory bread(block 67) failed [ 782.780420][T10175] FAT-fs (loop0): Directory bread(block 68) failed [ 782.787178][T10175] FAT-fs (loop0): Directory bread(block 69) failed [ 782.803557][T10175] FAT-fs (loop0): Directory bread(block 70) failed [ 782.827724][T10175] FAT-fs (loop0): Directory bread(block 71) failed [ 782.885008][ T384] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 782.898450][T10175] FAT-fs (loop0): Directory bread(block 72) failed [ 783.120482][T10175] FAT-fs (loop0): Directory bread(block 73) failed [ 783.920365][ T384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.930725][ T384] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.057406][T10195] loop4: detected capacity change from 0 to 1024 [ 784.144005][T10195] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3030: Invalid block bitmap block 0 in block_group 0 [ 784.157801][ T384] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 784.167528][T10195] __quota_error: 2 callbacks suppressed [ 784.167549][T10195] Quota error (device loop4): write_blk: dquota write failed [ 784.180695][T10195] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 784.191408][T10195] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.3030: Failed to acquire dquot type 0 [ 784.203737][T10195] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.3030: Freeing blocks not in datazone - block = 0, count = 4096 [ 784.218095][T10195] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3030: Invalid inode bitmap blk 0 in block_group 0 [ 784.231425][T10195] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 784.240497][T10195] EXT4-fs (loop4): 1 orphan inode deleted [ 784.246541][T10195] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 784.282883][ T384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 784.319169][ T384] usb 4-1: SerialNumber: syz [ 784.352153][ T8610] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 784.469903][ T384] usb 4-1: 0:2 : does not exist [ 784.476764][ T8610] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:8: Failed to release dquot type 0 [ 784.496420][ T384] usb 4-1: unit 4 not found! [ 784.663810][T10203] loop2: detected capacity change from 0 to 40427 [ 784.673416][T10177] syz.3.3008[10177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.673495][T10177] syz.3.3008[10177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.732546][ T30] audit: type=1326 audit(1756887734.526:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d586abe9 code=0x7ffc0000 [ 784.781072][T10203] F2FS-fs (loop2): fault_type options not supported [ 784.800144][T10203] F2FS-fs (loop2): invalid crc value [ 784.811320][ T30] audit: type=1326 audit(1756887734.526:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d586abe9 code=0x7ffc0000 [ 784.829943][T10203] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 784.866107][T10203] F2FS-fs (loop2): recover fsync data on readonly fs [ 784.870602][ T30] audit: type=1326 audit(1756887734.536:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d586abe9 code=0x7ffc0000 [ 784.873302][T10203] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 784.945755][ T30] audit: type=1326 audit(1756887734.536:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d586abe9 code=0x7ffc0000 [ 784.977249][ T30] audit: type=1326 audit(1756887734.536:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d586abe9 code=0x7ffc0000 [ 785.027096][ T30] audit: type=1326 audit(1756887734.536:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d586abe9 code=0x7ffc0000 [ 785.080528][ T30] audit: type=1326 audit(1756887734.536:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d586abe9 code=0x7ffc0000 [ 785.247344][T10209] loop4: detected capacity change from 0 to 512 [ 785.314085][T10209] EXT4-fs (loop4): Ignoring removed orlov option [ 785.476307][T10209] EXT4-fs (loop4): 1 orphan inode deleted [ 785.482177][T10209] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 785.499065][T10209] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.584452][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 787.015846][ T384] Bluetooth: hci0: command 0x1003 tx timeout [ 787.029281][ T4208] Bluetooth: hci0: sending frame failed (-49) [ 787.059468][T10217] loop2: detected capacity change from 0 to 256 [ 787.089418][ T384] usb 4-1: USB disconnect, device number 26 [ 787.183426][T10217] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 787.223775][T10225] loop4: detected capacity change from 0 to 128 [ 787.241871][T10225] attempt to access beyond end of device [ 787.241871][T10225] loop4: rw=2049, want=234, limit=128 [ 787.335444][T10230] loop3: detected capacity change from 0 to 1024 [ 787.364859][T10229] loop0: detected capacity change from 0 to 1024 [ 787.677699][T10229] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3041: Invalid block bitmap block 0 in block_group 0 [ 787.701245][T10230] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3037: Invalid block bitmap block 0 in block_group 0 [ 787.716096][T10230] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3037: Failed to acquire dquot type 0 [ 787.862069][T10230] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.3037: Freeing blocks not in datazone - block = 0, count = 4096 [ 787.894183][T10230] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3037: Invalid inode bitmap blk 0 in block_group 0 [ 788.902837][T10230] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 788.982152][ T8610] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:8: Failed to release dquot type 0 [ 788.997269][T10230] EXT4-fs (loop3): 1 orphan inode deleted [ 789.003466][T10230] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 789.188837][T10229] __quota_error: 11 callbacks suppressed [ 789.188870][T10229] Quota error (device loop0): write_blk: dquota write failed [ 789.340215][ T8708] Bluetooth: hci0: command 0x1001 tx timeout [ 789.346402][ T4208] Bluetooth: hci0: sending frame failed (-49) [ 789.385866][T10229] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 789.423164][T10241] loop4: detected capacity change from 0 to 1024 [ 789.470402][T10229] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.3041: Failed to acquire dquot type 0 [ 789.518442][T10229] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.3041: Freeing blocks not in datazone - block = 0, count = 4096 [ 789.571417][T10229] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3041: Invalid inode bitmap blk 0 in block_group 0 [ 789.585920][ T8610] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 789.604300][ T8610] EXT4-fs error (device loop0): ext4_release_dquot:6234: comm kworker/u4:8: Failed to release dquot type 0 [ 789.616147][T10229] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 789.620595][T10241] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3042: Invalid block bitmap block 0 in block_group 0 [ 789.639122][T10229] EXT4-fs (loop0): 1 orphan inode deleted [ 789.645707][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 789.655451][T10229] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 789.788564][T10248] loop3: detected capacity change from 0 to 1024 [ 789.807252][T10241] Quota error (device loop4): write_blk: dquota write failed [ 789.864232][T10248] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3045: Invalid block bitmap block 0 in block_group 0 [ 789.878328][T10248] Quota error (device loop3): write_blk: dquota write failed [ 789.886286][T10248] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 789.897014][T10248] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3045: Failed to acquire dquot type 0 [ 789.899849][T10251] loop0: detected capacity change from 0 to 2048 [ 789.912584][T10241] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 789.926221][T10248] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.3045: Freeing blocks not in datazone - block = 0, count = 4096 [ 789.940356][T10248] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3045: Invalid inode bitmap blk 0 in block_group 0 [ 789.953866][T10248] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 789.963099][ T8610] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 789.971908][T10248] EXT4-fs (loop3): 1 orphan inode deleted [ 789.977805][T10248] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 789.983205][ T8610] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:8: Failed to release dquot type 0 [ 790.010704][T10241] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.3042: Failed to acquire dquot type 0 [ 790.064409][T10251] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 790.114662][T10251] ext4 filesystem being mounted at /561/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.173146][T10241] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.3042: Freeing blocks not in datazone - block = 0, count = 4096 [ 790.207127][T10241] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3042: Invalid inode bitmap blk 0 in block_group 0 [ 790.220546][T10241] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 790.220714][ T848] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 790.238756][T10241] EXT4-fs (loop4): 1 orphan inode deleted [ 790.245077][T10241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 790.312585][ T848] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 791.103338][T10273] loop2: detected capacity change from 0 to 1024 [ 791.215659][T10273] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3051: Invalid block bitmap block 0 in block_group 0 [ 791.231616][T10273] Quota error (device loop2): write_blk: dquota write failed [ 791.239228][T10273] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.3051: Failed to acquire dquot type 0 [ 791.252276][T10273] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.3051: Freeing blocks not in datazone - block = 0, count = 4096 [ 791.267506][T10273] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3051: Invalid inode bitmap blk 0 in block_group 0 [ 791.281303][T10273] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 791.291556][T10273] EXT4-fs (loop2): 1 orphan inode deleted [ 791.297568][T10273] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 791.586239][ T848] EXT4-fs error (device loop2): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 791.604392][ T518] Bluetooth: hci0: command 0x1009 tx timeout [ 791.741145][T10276] fuse: Unknown parameter '0x0000000000000008' [ 793.411363][T10292] loop2: detected capacity change from 0 to 256 [ 793.480692][T10292] exfat: Deprecated parameter 'utf8' [ 793.486291][T10292] exfat: Deprecated parameter 'namecase' [ 793.520354][T10292] exfat: Deprecated parameter 'namecase' [ 793.526271][T10292] exfat: Deprecated parameter 'utf8' [ 793.552523][T10292] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 793.583384][T10296] loop4: detected capacity change from 0 to 256 [ 793.613026][T10287] loop0: detected capacity change from 0 to 40427 [ 793.626335][T10296] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 793.751226][T10287] F2FS-fs (loop0): invalid crc value [ 793.768152][T10287] F2FS-fs (loop0): Found nat_bits in checkpoint [ 795.066638][T10287] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 795.102713][T10287] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 795.160993][T10294] loop3: detected capacity change from 0 to 40427 [ 795.218164][T10294] F2FS-fs (loop3): invalid crc value [ 795.226430][T10294] F2FS-fs (loop3): Found nat_bits in checkpoint [ 795.236174][T10313] loop6: detected capacity change from 0 to 512 [ 795.275369][T10313] EXT4-fs warning (device loop6): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 795.297642][T10294] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 795.298253][T10313] EXT4-fs (loop6): mount failed [ 795.380591][T10235] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 795.430771][T10294] attempt to access beyond end of device [ 795.430771][T10294] loop3: rw=2049, want=77960, limit=40427 [ 795.590658][ T9239] attempt to access beyond end of device [ 795.590658][ T9239] loop3: rw=2049, want=45104, limit=40427 [ 795.617466][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 795.624833][T10322] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 795.690421][T10235] usb 3-1: Using ep0 maxpacket: 16 [ 795.810460][T10235] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 795.822239][T10235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.845076][T10235] usb 3-1: config 0 has no interface number 0 [ 796.006264][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 796.027675][T10235] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 796.038029][T10235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.049568][T10235] usb 3-1: Product: syz [ 796.367931][T10235] usb 3-1: Manufacturer: syz [ 796.372648][T10235] usb 3-1: SerialNumber: syz [ 796.381672][T10235] usb 3-1: config 0 descriptor?? [ 796.432078][T10235] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 796.438852][T10235] usb 3-1: No valid video chain found. [ 796.622076][T10235] usb 3-1: USB disconnect, device number 38 [ 797.215651][ T288] Bluetooth: hci0: command 0x1003 tx timeout [ 797.222754][ T4208] Bluetooth: hci0: sending frame failed (-49) [ 798.220472][T10353] hub 8-0:1.0: USB hub found [ 798.225992][T10353] hub 8-0:1.0: 1 port detected [ 798.982603][T10368] loop6: detected capacity change from 0 to 128 [ 799.032108][T10358] loop3: detected capacity change from 0 to 40427 [ 799.053005][T10368] EXT4-fs (loop6): Unrecognized mount option "obj_type=sched_switch" or missing value [ 799.074056][T10358] F2FS-fs (loop3): invalid crc value [ 799.105313][T10358] F2FS-fs (loop3): Found nat_bits in checkpoint [ 799.109505][T10375] loop2: detected capacity change from 0 to 1024 [ 799.270303][ T288] Bluetooth: hci0: command 0x1001 tx timeout [ 799.288728][ T4208] Bluetooth: hci0: sending frame failed (-49) [ 799.479549][T10375] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3083: Invalid block bitmap block 0 in block_group 0 [ 799.500532][T10375] __quota_error: 2 callbacks suppressed [ 799.500552][T10375] Quota error (device loop2): write_blk: dquota write failed [ 799.510784][T10358] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 799.526020][T10358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 799.534101][T10375] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 799.562973][T10375] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.3083: Failed to acquire dquot type 0 [ 799.645712][T10375] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.3083: Freeing blocks not in datazone - block = 0, count = 4096 [ 799.670549][T10375] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3083: Invalid inode bitmap blk 0 in block_group 0 [ 799.683459][T10375] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 799.692118][ T848] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 799.701041][T10375] EXT4-fs (loop2): 1 orphan inode deleted [ 799.707101][ T848] EXT4-fs error (device loop2): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 799.719502][T10375] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 800.190302][T10235] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 800.440306][T10235] usb 7-1: Using ep0 maxpacket: 8 [ 800.560347][T10235] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.580316][T10235] usb 7-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 800.610315][T10235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.631016][T10235] usb 7-1: config 0 descriptor?? [ 800.670832][T10235] usb 7-1: Found UVC 0.00 device (2801:0201) [ 800.677988][T10235] usb 7-1: No valid video chain found. [ 801.025698][ T288] usb 7-1: USB disconnect, device number 17 [ 801.340358][ T288] Bluetooth: hci0: command 0x1009 tx timeout [ 802.220677][T10405] usb usb8: usbfs: process 10405 (syz.3.3091) did not claim interface 0 before use [ 802.325042][T10408] loop2: detected capacity change from 0 to 40427 [ 802.343486][T10411] loop6: detected capacity change from 0 to 1024 [ 802.388433][T10408] F2FS-fs (loop2): fault_type options not supported [ 802.396957][T10411] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 802.407105][T10411] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 802.421937][T10408] F2FS-fs (loop2): invalid crc value [ 802.431621][T10411] EXT4-fs error (device loop6): ext4_get_journal_inode:5149: inode #5: comm syz.6.3092: unexpected bad inode w/o EXT4_IGET_BAD [ 802.447275][T10411] EXT4-fs (loop6): no journal found [ 802.452863][T10411] EXT4-fs (loop6): can't get journal size [ 802.493500][T10411] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 802.678802][T10408] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 802.905285][T10408] F2FS-fs (loop2): recover fsync data on readonly fs [ 802.913034][T10408] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 803.051873][T10419] loop3: detected capacity change from 0 to 512 [ 805.239052][T10419] EXT4-fs (loop3): Ignoring removed orlov option [ 805.342962][T10419] EXT4-fs (loop3): 1 orphan inode deleted [ 805.348870][T10419] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 805.365229][T10419] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.378464][ T518] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 805.409336][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 805.489191][T10430] loop6: detected capacity change from 0 to 128 [ 805.644955][T10430] attempt to access beyond end of device [ 805.644955][T10430] loop6: rw=2049, want=234, limit=128 [ 805.946600][T10438] loop4: detected capacity change from 0 to 1024 [ 805.998078][T10438] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3099: Invalid block bitmap block 0 in block_group 0 [ 806.013432][T10438] Quota error (device loop4): write_blk: dquota write failed [ 806.021041][T10438] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 806.031211][T10438] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.3099: Failed to acquire dquot type 0 [ 806.043480][T10438] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.3099: Freeing blocks not in datazone - block = 0, count = 4096 [ 806.057506][T10438] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3099: Invalid inode bitmap blk 0 in block_group 0 [ 806.071047][T10438] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 806.079976][T10438] EXT4-fs (loop4): 1 orphan inode deleted [ 806.086093][T10438] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 806.100838][ T3172] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 806.151436][ T3172] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 806.164960][T10421] loop2: detected capacity change from 0 to 40427 [ 806.204438][T10444] loop6: detected capacity change from 0 to 1024 [ 806.219404][T10421] F2FS-fs (loop2): invalid crc value [ 807.348353][T10444] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.3102: Invalid block bitmap block 0 in block_group 0 [ 807.365203][T10444] Quota error (device loop6): write_blk: dquota write failed [ 807.373616][T10444] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 807.383887][T10444] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.3102: Failed to acquire dquot type 0 [ 807.397202][T10421] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 807.413888][T10444] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.3102: Freeing blocks not in datazone - block = 0, count = 4096 [ 807.428439][T10444] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.3102: Invalid inode bitmap blk 0 in block_group 0 [ 807.442539][T10444] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 807.451641][T10444] EXT4-fs (loop6): 1 orphan inode deleted [ 807.457645][T10444] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 807.472983][ T8382] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 807.512346][ T8382] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:0: Failed to release dquot type 0 [ 807.796898][T10465] loop6: detected capacity change from 0 to 256 [ 807.852077][T10465] exfat: Deprecated parameter 'utf8' [ 807.858339][T10465] exfat: Deprecated parameter 'namecase' [ 807.882912][T10465] exfat: Deprecated parameter 'namecase' [ 807.889106][T10465] exfat: Deprecated parameter 'utf8' [ 807.908371][T10465] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 808.065316][T10468] loop2: detected capacity change from 0 to 512 [ 808.203764][T10468] EXT4-fs warning (device loop2): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 808.223928][T10468] EXT4-fs (loop2): mount failed [ 809.257496][T10479] loop6: detected capacity change from 0 to 256 [ 809.295451][T10479] exfat: Deprecated parameter 'utf8' [ 809.310507][T10479] exfat: Deprecated parameter 'namecase' [ 809.316365][T10479] exfat: Deprecated parameter 'namecase' [ 809.329091][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 809.336757][T10477] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 809.354533][T10479] exfat: Deprecated parameter 'utf8' [ 809.505862][T10479] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 811.024793][T10503] loop0: detected capacity change from 0 to 1024 [ 811.042206][T10502] loop6: detected capacity change from 0 to 1024 [ 811.053779][T10492] loop2: detected capacity change from 0 to 40427 [ 811.089223][T10503] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3119: Invalid block bitmap block 0 in block_group 0 [ 811.103810][T10503] Quota error (device loop0): write_blk: dquota write failed [ 811.111671][T10503] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 811.122063][T10503] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.3119: Failed to acquire dquot type 0 [ 811.127070][T10502] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.3118: Invalid block bitmap block 0 in block_group 0 [ 811.147939][T10503] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.3119: Freeing blocks not in datazone - block = 0, count = 4096 [ 811.149375][T10502] Quota error (device loop6): write_blk: dquota write failed [ 811.170070][T10502] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 811.180597][T10502] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.3118: Failed to acquire dquot type 0 [ 811.192754][T10502] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.3118: Freeing blocks not in datazone - block = 0, count = 4096 [ 811.192756][T10503] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3119: Invalid inode bitmap blk 0 in block_group 0 [ 811.192882][T10503] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 811.206708][T10502] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.3118: Invalid inode bitmap blk 0 in block_group 0 [ 811.219510][T10503] EXT4-fs (loop0): 1 orphan inode deleted [ 811.228318][T10502] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 811.240623][T10503] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 811.246634][T10502] EXT4-fs (loop6): 1 orphan inode deleted [ 811.273347][T10502] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 811.294733][ T848] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 811.304915][T10492] F2FS-fs (loop2): invalid crc value [ 811.328968][ T848] EXT4-fs error (device loop0): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 811.345277][ T848] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 811.356687][ T848] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 811.369710][T10492] F2FS-fs (loop2): Found nat_bits in checkpoint [ 811.588387][T10492] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 811.712131][T10492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 812.131797][T10524] loop0: detected capacity change from 0 to 1024 [ 812.202050][T10530] loop4: detected capacity change from 0 to 1024 [ 813.206398][ T30] audit: type=1400 audit(1756887762.996:978): avc: denied { setopt } for pid=10527 comm="syz.3.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 813.270877][T10530] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3124: Invalid block bitmap block 0 in block_group 0 [ 813.286758][T10530] Quota error (device loop4): write_blk: dquota write failed [ 813.294789][T10530] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 813.305330][T10530] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.3124: Failed to acquire dquot type 0 [ 813.319715][T10530] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.3124: Freeing blocks not in datazone - block = 0, count = 4096 [ 813.334546][T10530] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3124: Invalid inode bitmap blk 0 in block_group 0 [ 813.348553][T10530] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 813.358874][T10530] EXT4-fs (loop4): 1 orphan inode deleted [ 813.365309][T10530] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 813.658553][T10524] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3121: Invalid block bitmap block 0 in block_group 0 [ 813.688184][ T8382] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 813.727209][ T8382] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:0: Failed to release dquot type 0 [ 813.821303][T10524] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.3121: Failed to acquire dquot type 0 [ 813.944576][T10524] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.3121: Freeing blocks not in datazone - block = 0, count = 4096 [ 814.029444][T10524] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3121: Invalid inode bitmap blk 0 in block_group 0 [ 814.043539][T10235] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 814.057254][ T848] EXT4-fs error (device loop0): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 814.072604][T10524] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 814.082814][T10524] EXT4-fs (loop0): 1 orphan inode deleted [ 814.088842][T10524] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 814.380352][ T384] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 814.480375][T10235] usb 4-1: Using ep0 maxpacket: 16 [ 814.570288][ T20] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 814.640364][T10235] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 814.651841][T10235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.674336][T10235] usb 4-1: config 0 has no interface number 0 [ 814.850314][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 814.860530][T10235] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 814.870394][T10235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.878778][T10235] usb 4-1: Product: syz [ 814.883640][T10235] usb 4-1: Manufacturer: syz [ 814.888362][T10235] usb 4-1: SerialNumber: syz [ 814.898346][T10235] usb 4-1: config 0 descriptor?? [ 814.940369][ T384] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 814.942755][T10235] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 814.949449][ T384] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.949474][ T384] usb 7-1: Product: syz [ 814.949489][ T384] usb 7-1: Manufacturer: syz [ 814.949505][ T384] usb 7-1: SerialNumber: syz [ 814.956621][T10235] usb 4-1: No valid video chain found. [ 814.986164][ T20] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 814.986278][ T384] usb 7-1: config 0 descriptor?? [ 815.009720][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.030406][ T20] usb 5-1: config 0 has no interface number 0 [ 815.145409][T10235] usb 4-1: USB disconnect, device number 27 [ 815.220435][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 815.235210][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.250271][ T20] usb 5-1: Product: syz [ 815.270408][ T20] usb 5-1: Manufacturer: syz [ 815.275062][ T20] usb 5-1: SerialNumber: syz [ 815.305190][ T20] usb 5-1: config 0 descriptor?? [ 815.361395][ T20] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 815.367963][ T20] usb 5-1: No valid video chain found. [ 815.567595][T10235] usb 5-1: USB disconnect, device number 31 [ 816.123108][T10566] loop0: detected capacity change from 0 to 1024 [ 816.217532][T10566] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3136: Invalid block bitmap block 0 in block_group 0 [ 816.789221][T10566] __quota_error: 3 callbacks suppressed [ 816.789240][T10566] Quota error (device loop0): write_blk: dquota write failed [ 816.802695][T10566] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 816.812855][T10566] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.3136: Failed to acquire dquot type 0 [ 816.825372][T10566] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.3136: Freeing blocks not in datazone - block = 0, count = 4096 [ 816.839133][T10566] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3136: Invalid inode bitmap blk 0 in block_group 0 [ 816.871019][T10566] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 816.880163][T10566] EXT4-fs (loop0): 1 orphan inode deleted [ 816.886304][T10566] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 816.930946][ T8610] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 816.939720][ T8610] EXT4-fs error (device loop0): ext4_release_dquot:6234: comm kworker/u4:8: Failed to release dquot type 0 [ 816.971825][T10235] usb 7-1: USB disconnect, device number 18 [ 817.113284][T10580] loop2: detected capacity change from 0 to 1024 [ 817.212375][T10580] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3139: Invalid block bitmap block 0 in block_group 0 [ 817.226255][T10580] Quota error (device loop2): write_blk: dquota write failed [ 817.234104][T10580] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 817.244956][T10580] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.3139: Failed to acquire dquot type 0 [ 817.257060][T10580] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.3139: Freeing blocks not in datazone - block = 0, count = 4096 [ 817.271825][T10580] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3139: Invalid inode bitmap blk 0 in block_group 0 [ 817.285239][T10580] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 817.294488][T10580] EXT4-fs (loop2): 1 orphan inode deleted [ 817.300852][T10580] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 817.316036][ T510] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 817.355710][ T510] EXT4-fs error (device loop2): ext4_release_dquot:6234: comm kworker/u4:5: Failed to release dquot type 0 [ 817.618943][T10571] loop3: detected capacity change from 0 to 40427 [ 817.685668][T10571] F2FS-fs (loop3): invalid crc value [ 817.713035][T10573] loop4: detected capacity change from 0 to 40427 [ 817.731333][T10571] F2FS-fs (loop3): Found nat_bits in checkpoint [ 817.760318][T10573] F2FS-fs (loop4): invalid crc value [ 817.796774][T10573] F2FS-fs (loop4): Found nat_bits in checkpoint [ 817.818010][T10571] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 817.869608][T10573] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 817.886060][T10573] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 817.894354][ T9239] attempt to access beyond end of device [ 817.894354][ T9239] loop3: rw=2049, want=45104, limit=40427 [ 818.638935][ T1571] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 819.404052][ T30] audit: type=1326 audit(1756887769.196:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.2.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 819.500626][ T30] audit: type=1326 audit(1756887769.236:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.2.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 819.524994][ T30] audit: type=1326 audit(1756887769.276:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.2.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 819.613735][ T30] audit: type=1326 audit(1756887769.276:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.2.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 819.683064][T10620] binder: BINDER_SET_CONTEXT_MGR already set [ 819.689451][T10620] binder: 10619:10620 ioctl 4018620d 2000000001c0 returned -16 [ 819.836722][ T1571] usb 1-1: Using ep0 maxpacket: 16 [ 819.964834][ T1571] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 820.012626][T10628] loop4: detected capacity change from 0 to 1024 [ 820.043271][T10628] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 820.053449][T10628] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 820.068744][T10628] EXT4-fs error (device loop4): ext4_get_journal_inode:5149: inode #5: comm syz.4.3151: unexpected bad inode w/o EXT4_IGET_BAD [ 820.083062][T10628] EXT4-fs (loop4): no journal found [ 820.088446][T10628] EXT4-fs (loop4): can't get journal size [ 820.099753][T10628] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 820.229632][T10630] loop6: detected capacity change from 0 to 1024 [ 820.252761][ T1571] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.292417][ T1571] usb 1-1: config 0 has no interface number 0 [ 820.495434][T10630] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.3153: Invalid block bitmap block 0 in block_group 0 [ 820.510412][T10630] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.3153: Failed to acquire dquot type 0 [ 820.522710][T10630] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.3153: Freeing blocks not in datazone - block = 0, count = 4096 [ 820.537032][T10630] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.3153: Invalid inode bitmap blk 0 in block_group 0 [ 820.550566][T10630] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 820.559751][T10630] EXT4-fs (loop6): 1 orphan inode deleted [ 820.565696][T10630] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 820.636720][ T848] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 821.570816][T10644] usb usb8: usbfs: process 10644 (syz.2.3156) did not claim interface 0 before use [ 821.725972][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3154'. [ 822.930522][ T1571] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 823.180214][ T1571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.027684][ T1571] usb 1-1: config 0 descriptor?? [ 824.091765][ T1571] usb 1-1: can't set config #0, error -71 [ 824.098216][ T1571] usb 1-1: USB disconnect, device number 35 [ 824.613738][T10653] loop0: detected capacity change from 0 to 40427 [ 824.635940][T10653] F2FS-fs (loop0): invalid crc value [ 824.654849][T10653] F2FS-fs (loop0): Found nat_bits in checkpoint [ 824.706224][T10653] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 824.713776][T10653] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 824.851752][T10681] tipc: Started in network mode [ 824.856740][T10681] tipc: Node identity ac141413, cluster identity 4711 [ 824.865061][T10681] tipc: New replicast peer: 10.1.1.2 [ 824.871582][T10681] tipc: Enabled bearer , priority 10 [ 826.320445][ T288] tipc: Node number set to 2886997011 [ 826.582139][T10693] loop3: detected capacity change from 0 to 512 [ 827.615494][T10693] EXT4-fs (loop3): Ignoring removed orlov option [ 827.833059][T10693] EXT4-fs (loop3): 1 orphan inode deleted [ 827.839053][T10693] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 827.855674][T10693] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.889028][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3169'. [ 828.654644][T10705] loop3: detected capacity change from 0 to 2048 [ 828.924777][T10705] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 828.940417][ T518] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 829.051187][T10705] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.380281][ T518] usb 1-1: Using ep0 maxpacket: 16 [ 829.800494][T10722] loop6: detected capacity change from 0 to 1024 [ 829.830375][ T518] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 829.841634][ T518] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.862329][T10722] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.3175: Invalid block bitmap block 0 in block_group 0 [ 829.876927][T10722] __quota_error: 5 callbacks suppressed [ 829.876947][T10722] Quota error (device loop6): write_blk: dquota write failed [ 829.890502][T10722] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 829.900569][T10722] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.3175: Failed to acquire dquot type 0 [ 829.920707][T10722] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.3175: Freeing blocks not in datazone - block = 0, count = 4096 [ 829.934407][T10722] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.3175: Invalid inode bitmap blk 0 in block_group 0 [ 829.948151][T10722] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 829.957087][T10722] EXT4-fs (loop6): 1 orphan inode deleted [ 829.963305][T10722] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 830.004442][ T518] usb 1-1: config 0 has no interface number 0 [ 830.050688][ T510] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 830.070455][ T510] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:5: Failed to release dquot type 0 [ 830.156507][T10729] loop3: detected capacity change from 0 to 1024 [ 830.222678][T10729] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3179: Invalid block bitmap block 0 in block_group 0 [ 830.236803][T10729] Quota error (device loop3): write_blk: dquota write failed [ 830.244395][T10729] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 830.254534][T10729] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3179: Failed to acquire dquot type 0 [ 830.266882][T10729] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.3179: Freeing blocks not in datazone - block = 0, count = 4096 [ 830.280836][T10729] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3179: Invalid inode bitmap blk 0 in block_group 0 [ 830.293940][T10729] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 830.302891][T10729] EXT4-fs (loop3): 1 orphan inode deleted [ 830.308823][T10729] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 830.330861][ T510] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 830.350010][ T510] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:5: Failed to release dquot type 0 [ 830.560386][ T518] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 830.577051][ T518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.580195][T10736] loop4: detected capacity change from 0 to 256 [ 830.595536][ T518] usb 1-1: Product: syz [ 830.603125][T10725] loop2: detected capacity change from 0 to 40427 [ 830.609856][ T518] usb 1-1: Manufacturer: syz [ 830.615064][ T518] usb 1-1: SerialNumber: syz [ 830.621337][ T518] usb 1-1: config 0 descriptor?? [ 830.633059][T10736] FAT-fs (loop4): Directory bread(block 64) failed [ 830.640592][T10736] FAT-fs (loop4): Directory bread(block 65) failed [ 830.647550][T10736] FAT-fs (loop4): Directory bread(block 66) failed [ 830.654291][T10725] F2FS-fs (loop2): invalid crc value [ 830.689187][ T518] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 830.729098][ T518] usb 1-1: No valid video chain found. [ 830.760700][T10736] FAT-fs (loop4): Directory bread(block 67) failed [ 830.800981][T10736] FAT-fs (loop4): Directory bread(block 68) failed [ 830.856824][T10736] FAT-fs (loop4): Directory bread(block 69) failed [ 830.886118][ T518] usb 1-1: USB disconnect, device number 36 [ 830.922746][T10725] F2FS-fs (loop2): Found nat_bits in checkpoint [ 830.972046][T10736] FAT-fs (loop4): Directory bread(block 70) failed [ 830.990332][T10736] FAT-fs (loop4): Directory bread(block 71) failed [ 830.997136][T10736] FAT-fs (loop4): Directory bread(block 72) failed [ 831.003951][T10736] FAT-fs (loop4): Directory bread(block 73) failed [ 831.008384][T10725] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 831.069774][T10725] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 831.120367][T10235] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 832.170388][T10235] usb 7-1: Using ep0 maxpacket: 16 [ 832.251004][T10760] loop3: detected capacity change from 0 to 2048 [ 832.309720][T10760] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 832.330978][T10760] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.270304][T10235] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 834.281730][T10235] usb 7-1: can't read configurations, error -71 [ 834.290672][T10773] loop2: detected capacity change from 0 to 256 [ 834.300885][T10773] exfat: Deprecated parameter 'utf8' [ 834.306385][T10773] exfat: Deprecated parameter 'namecase' [ 834.312197][T10773] exfat: Deprecated parameter 'namecase' [ 834.317873][T10773] exfat: Deprecated parameter 'utf8' [ 834.360529][T10773] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 835.309095][ T518] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 836.354534][T10235] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 836.448102][T10787] loop2: detected capacity change from 0 to 256 [ 836.525226][T10787] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 838.090391][ T518] usb 1-1: unable to read config index 0 descriptor/all [ 838.115620][ T518] usb 1-1: can't read configurations, error -61 [ 838.320544][ T518] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 838.613607][T10235] usb 7-1: device not accepting address 20, error -71 [ 838.639725][T10235] usb usb7-port1: attempt power cycle [ 838.767757][T10798] loop4: detected capacity change from 0 to 40427 [ 838.902110][ T518] usb 1-1: device descriptor read/64, error -71 [ 839.077086][T10798] F2FS-fs (loop4): invalid crc value [ 839.103276][T10798] F2FS-fs (loop4): Found nat_bits in checkpoint [ 839.279002][T10798] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 839.300621][T10798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 839.327626][T10831] loop3: detected capacity change from 0 to 256 [ 839.738263][T10831] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 840.791820][T10852] loop2: detected capacity change from 0 to 128 [ 841.046185][ T7168] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 841.101068][T10858] attempt to access beyond end of device [ 841.101068][T10858] loop2: rw=2049, want=234, limit=128 [ 841.256743][T10857] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.280079][T10868] loop6: detected capacity change from 0 to 256 [ 841.286119][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.300299][ T7168] usb 4-1: Using ep0 maxpacket: 16 [ 841.315546][T10857] device bridge_slave_0 entered promiscuous mode [ 841.345171][T10857] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.352606][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.360683][T10857] device bridge_slave_1 entered promiscuous mode [ 841.393116][T10868] FAT-fs (loop6): Directory bread(block 64) failed [ 841.399875][T10868] FAT-fs (loop6): Directory bread(block 65) failed [ 841.408934][T10868] FAT-fs (loop6): Directory bread(block 66) failed [ 841.415706][T10868] FAT-fs (loop6): Directory bread(block 67) failed [ 841.420411][ T7168] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 841.423164][T10868] FAT-fs (loop6): Directory bread(block 68) failed [ 841.437606][ T7168] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.438216][T10868] FAT-fs (loop6): Directory bread(block 69) failed [ 841.455560][T10868] FAT-fs (loop6): Directory bread(block 70) failed [ 841.463045][T10868] FAT-fs (loop6): Directory bread(block 71) failed [ 841.470208][T10868] FAT-fs (loop6): Directory bread(block 72) failed [ 841.477505][T10868] FAT-fs (loop6): Directory bread(block 73) failed [ 841.499078][ T7168] usb 4-1: config 0 has no interface number 0 [ 841.668299][T10857] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.675520][T10857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.683045][T10857] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.690192][T10857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.690418][ T7168] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 841.716935][ T7168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.734779][ T7168] usb 4-1: Product: syz [ 841.749559][ T7168] usb 4-1: Manufacturer: syz [ 841.754525][ T3172] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.754670][ T7168] usb 4-1: SerialNumber: syz [ 841.766635][ T3172] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.779080][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 841.793494][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 841.795938][ T7168] usb 4-1: config 0 descriptor?? [ 841.826936][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 841.844620][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.851133][ T7168] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 841.851955][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.861824][ T7168] usb 4-1: No valid video chain found. [ 841.875711][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 841.892398][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.899771][ T3172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.934626][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 841.945507][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 841.963778][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 841.973131][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 841.980940][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 841.988598][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 841.998129][T10857] device veth0_vlan entered promiscuous mode [ 842.014081][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 842.024759][T10857] device veth1_macvtap entered promiscuous mode [ 842.090790][ T7168] usb 4-1: USB disconnect, device number 28 [ 842.180347][T10235] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 842.194516][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 842.208311][ T3172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 842.460573][T10235] usb 3-1: Using ep0 maxpacket: 16 [ 842.481229][T10896] loop6: detected capacity change from 0 to 256 [ 842.541500][T10896] exfat: Bad value for 'uid' [ 842.600354][T10235] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 842.609015][T10235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.625787][T10235] usb 3-1: config 0 has no interface number 0 [ 843.360809][T10235] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 843.649951][T10235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.658553][T10235] usb 3-1: Product: syz [ 843.663698][T10235] usb 3-1: Manufacturer: syz [ 843.668574][T10235] usb 3-1: SerialNumber: syz [ 843.680765][T10235] usb 3-1: config 0 descriptor?? [ 843.741050][T10917] loop3: detected capacity change from 0 to 1024 [ 843.793505][T10917] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3228: Invalid block bitmap block 0 in block_group 0 [ 843.808407][T10917] Quota error (device loop3): write_blk: dquota write failed [ 843.816750][T10917] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 843.826863][T10917] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3228: Failed to acquire dquot type 0 [ 843.838963][T10917] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.3228: Freeing blocks not in datazone - block = 0, count = 4096 [ 843.853910][T10917] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3228: Invalid inode bitmap blk 0 in block_group 0 [ 843.867350][T10917] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 843.876374][ T3172] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 843.876497][T10917] EXT4-fs (loop3): 1 orphan inode deleted [ 843.891576][T10917] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 843.903913][ T3172] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 843.950344][T10235] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 843.957326][T10235] usb 3-1: No valid video chain found. [ 843.971770][T10235] usb 3-1: USB disconnect, device number 39 [ 844.569766][T10928] binder_alloc: 10927: binder_alloc_buf, no vma [ 844.632173][T10931] loop3: detected capacity change from 0 to 256 [ 844.727428][T10931] FAT-fs (loop3): Directory bread(block 64) failed [ 844.734600][T10931] FAT-fs (loop3): Directory bread(block 65) failed [ 844.741677][T10931] FAT-fs (loop3): Directory bread(block 66) failed [ 844.748333][T10931] FAT-fs (loop3): Directory bread(block 67) failed [ 844.755230][T10931] FAT-fs (loop3): Directory bread(block 68) failed [ 844.762114][T10931] FAT-fs (loop3): Directory bread(block 69) failed [ 844.768948][T10931] FAT-fs (loop3): Directory bread(block 70) failed [ 844.776484][T10931] FAT-fs (loop3): Directory bread(block 71) failed [ 844.783848][T10931] FAT-fs (loop3): Directory bread(block 72) failed [ 844.791466][T10931] FAT-fs (loop3): Directory bread(block 73) failed [ 844.832692][T10937] loop2: detected capacity change from 0 to 1024 [ 844.949588][T10937] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3235: Invalid block bitmap block 0 in block_group 0 [ 844.964546][T10937] Quota error (device loop2): write_blk: dquota write failed [ 844.972225][T10937] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 844.997157][T10937] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.3235: Failed to acquire dquot type 0 [ 845.092071][T10937] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.3235: Freeing blocks not in datazone - block = 0, count = 4096 [ 845.106638][T10937] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3235: Invalid inode bitmap blk 0 in block_group 0 [ 845.120292][T10937] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 845.129599][T10937] EXT4-fs (loop2): 1 orphan inode deleted [ 845.135901][T10937] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 845.155584][ T848] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 845.219988][ T848] EXT4-fs error (device loop2): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 845.410633][T10945] loop0: detected capacity change from 0 to 256 [ 845.491092][T10945] exfat: Bad value for 'uid' [ 846.819070][T10954] loop6: detected capacity change from 0 to 1024 [ 846.862372][ T848] tipc: Left network mode [ 846.881717][T10954] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.3239: Invalid block bitmap block 0 in block_group 0 [ 846.915542][T10954] Quota error (device loop6): write_blk: dquota write failed [ 846.937683][T10954] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 846.969396][T10954] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.3239: Failed to acquire dquot type 0 [ 846.986015][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.000675][T10954] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.3239: Freeing blocks not in datazone - block = 0, count = 4096 [ 847.014756][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.028052][ T518] Bluetooth: hci0: command 0x1003 tx timeout [ 847.030793][T10953] device bridge_slave_0 entered promiscuous mode [ 847.035079][ T4208] Bluetooth: hci0: sending frame failed (-49) [ 847.049705][T10954] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.3239: Invalid inode bitmap blk 0 in block_group 0 [ 847.061809][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.070413][ T3172] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 847.080848][ T3172] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 847.090607][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.100667][T10954] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 847.112001][T10954] EXT4-fs (loop6): 1 orphan inode deleted [ 847.118129][T10954] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 847.138407][T10953] device bridge_slave_1 entered promiscuous mode [ 847.273181][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.280893][T10953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.288379][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.295890][T10953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.330692][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 847.345417][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 847.354336][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 847.364586][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 847.377691][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 847.393321][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 847.406966][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 847.418535][T10974] loop3: detected capacity change from 0 to 1024 [ 847.421585][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 847.433991][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 847.445449][T10953] device veth0_vlan entered promiscuous mode [ 847.456879][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 847.469374][T10974] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3243: Invalid block bitmap block 0 in block_group 0 [ 847.487328][T10974] Quota error (device loop3): write_blk: dquota write failed [ 847.495254][T10974] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3243: Failed to acquire dquot type 0 [ 847.507428][T10749] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 847.512148][T10953] device veth1_macvtap entered promiscuous mode [ 847.516008][T10974] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.3243: Freeing blocks not in datazone - block = 0, count = 4096 [ 847.536966][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 847.538300][T10974] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3243: Invalid inode bitmap blk 0 in block_group 0 [ 847.546161][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 847.559817][T10974] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 847.576588][T10974] EXT4-fs (loop3): 1 orphan inode deleted [ 847.582797][T10974] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 847.595342][ T3172] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 847.830295][T10749] usb 3-1: Using ep0 maxpacket: 16 [ 847.950367][T10235] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 847.970793][T10749] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 847.979342][T10749] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.989931][T10749] usb 3-1: config 0 has no interface number 0 [ 848.150398][T10749] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 848.160131][T10749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.168457][T10749] usb 3-1: Product: syz [ 848.172857][T10749] usb 3-1: Manufacturer: syz [ 848.177891][T10749] usb 3-1: SerialNumber: syz [ 848.189113][T10749] usb 3-1: config 0 descriptor?? [ 848.194409][T10235] usb 7-1: Using ep0 maxpacket: 16 [ 848.237281][T10749] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 848.245862][T10749] usb 3-1: No valid video chain found. [ 848.323049][T10235] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 848.338523][T10235] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.349902][T10235] usb 7-1: config 0 has no interface number 0 [ 848.413511][T10990] loop3: detected capacity change from 0 to 256 [ 848.462095][T10990] exfat: Bad value for 'uid' [ 848.522051][T10235] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 848.531563][T10235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.540034][T10235] usb 7-1: Product: syz [ 848.544861][T10235] usb 7-1: Manufacturer: syz [ 848.549675][T10235] usb 7-1: SerialNumber: syz [ 848.562523][ T7168] usb 3-1: USB disconnect, device number 40 [ 848.565671][T10235] usb 7-1: config 0 descriptor?? [ 848.583764][ T848] Bluetooth: hci1: Frame reassembly failed (-84) [ 848.930403][T10235] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 848.937260][T10235] usb 7-1: No valid video chain found. [ 848.946563][T10235] usb 7-1: USB disconnect, device number 22 [ 849.100552][ T7168] Bluetooth: hci0: command 0x1001 tx timeout [ 849.108294][ T5639] Bluetooth: hci0: sending frame failed (-49) [ 849.174677][T11000] loop2: detected capacity change from 0 to 256 [ 849.216633][T11000] FAT-fs (loop2): Directory bread(block 64) failed [ 849.223524][T11000] FAT-fs (loop2): Directory bread(block 65) failed [ 849.230286][T11000] FAT-fs (loop2): Directory bread(block 66) failed [ 849.237078][T11000] FAT-fs (loop2): Directory bread(block 67) failed [ 849.270326][T11000] FAT-fs (loop2): Directory bread(block 68) failed [ 849.277017][T11000] FAT-fs (loop2): Directory bread(block 69) failed [ 849.290366][T11000] FAT-fs (loop2): Directory bread(block 70) failed [ 849.297082][T11000] FAT-fs (loop2): Directory bread(block 71) failed [ 849.303958][T11000] FAT-fs (loop2): Directory bread(block 72) failed [ 849.311146][T11000] FAT-fs (loop2): Directory bread(block 73) failed [ 849.402696][T11005] loop3: detected capacity change from 0 to 1024 [ 849.468906][T11005] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3253: Invalid block bitmap block 0 in block_group 0 [ 849.488741][T11010] loop6: detected capacity change from 0 to 1024 [ 849.533123][T11005] __quota_error: 2 callbacks suppressed [ 849.533143][T11005] Quota error (device loop3): write_blk: dquota write failed [ 849.567904][T11010] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.3254: Invalid block bitmap block 0 in block_group 0 [ 849.595471][T11005] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 849.605925][T11010] Quota error (device loop6): write_blk: dquota write failed [ 849.613600][T11010] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 849.643656][T11005] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3253: Failed to acquire dquot type 0 [ 849.655248][T11010] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.3254: Failed to acquire dquot type 0 [ 849.668773][T11010] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.3254: Freeing blocks not in datazone - block = 0, count = 4096 [ 849.691194][T11005] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.3253: Freeing blocks not in datazone - block = 0, count = 4096 [ 849.705746][T11005] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3253: Invalid inode bitmap blk 0 in block_group 0 [ 849.710548][T11010] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.3254: Invalid inode bitmap blk 0 in block_group 0 [ 849.731538][ T10] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 849.740140][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:1: Failed to release dquot type 0 [ 849.760384][T11005] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 849.769632][ T10] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 849.769639][T11005] EXT4-fs (loop3): 1 orphan inode deleted [ 849.769663][T11005] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 849.787508][T11010] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 849.813458][ T10] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:1: Failed to release dquot type 0 [ 849.858887][T11010] EXT4-fs (loop6): 1 orphan inode deleted [ 849.874811][T11010] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 850.614961][T11019] loop6: detected capacity change from 0 to 1024 [ 850.620327][ T518] Bluetooth: hci1: command 0x1003 tx timeout [ 850.631443][T11019] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.3256: Invalid block bitmap block 0 in block_group 0 [ 850.636006][ T5639] Bluetooth: hci1: sending frame failed (-49) [ 850.645995][T11019] Quota error (device loop6): write_blk: dquota write failed [ 850.659993][T11019] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 850.670768][T11019] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.3256: Failed to acquire dquot type 0 [ 850.682473][T11019] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.3256: Freeing blocks not in datazone - block = 0, count = 4096 [ 850.696475][T11019] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.3256: Invalid inode bitmap blk 0 in block_group 0 [ 850.709716][T11019] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 850.709717][ T848] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 850.709747][ T848] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 850.739252][T11019] EXT4-fs (loop6): 1 orphan inode deleted [ 850.745084][T11019] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 851.040584][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3257'. [ 851.186056][ T384] Bluetooth: hci0: command 0x1009 tx timeout [ 852.660294][T10749] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 852.700579][ T384] Bluetooth: hci1: command 0x1001 tx timeout [ 852.706907][ T5639] Bluetooth: hci1: sending frame failed (-49) [ 852.900324][T10749] usb 4-1: Using ep0 maxpacket: 16 [ 853.023575][T10749] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 853.027717][ T3172] Bluetooth: hci2: Frame reassembly failed (-84) [ 853.034127][T10749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.082411][T10749] usb 4-1: config 0 has no interface number 0 [ 853.280397][T10749] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 853.289987][T10749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.302055][T10749] usb 4-1: Product: syz [ 853.306708][T10749] usb 4-1: Manufacturer: syz [ 853.311830][T10749] usb 4-1: SerialNumber: syz [ 853.317957][T10749] usb 4-1: config 0 descriptor?? [ 853.361061][T10749] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 853.367659][T10749] usb 4-1: No valid video chain found. [ 853.564001][ T384] usb 4-1: USB disconnect, device number 29 [ 853.916279][T11049] loop4: detected capacity change from 0 to 256 [ 853.974576][T11049] FAT-fs (loop4): Directory bread(block 64) failed [ 853.981311][T11049] FAT-fs (loop4): Directory bread(block 65) failed [ 853.988130][T11049] FAT-fs (loop4): Directory bread(block 66) failed [ 853.995496][T11049] FAT-fs (loop4): Directory bread(block 67) failed [ 854.002258][T11049] FAT-fs (loop4): Directory bread(block 68) failed [ 854.008810][T11049] FAT-fs (loop4): Directory bread(block 69) failed [ 854.015601][T11049] FAT-fs (loop4): Directory bread(block 70) failed [ 854.022291][T11049] FAT-fs (loop4): Directory bread(block 71) failed [ 854.029484][T11049] FAT-fs (loop4): Directory bread(block 72) failed [ 854.036457][T11049] FAT-fs (loop4): Directory bread(block 73) failed [ 854.079467][T11053] loop6: detected capacity change from 0 to 1024 [ 854.136732][T11055] loop3: detected capacity change from 0 to 128 [ 854.182568][T11053] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.3267: Invalid block bitmap block 0 in block_group 0 [ 854.197223][T11053] Quota error (device loop6): write_blk: dquota write failed [ 854.205507][T11053] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.3267: Failed to acquire dquot type 0 [ 854.217644][T11053] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.3267: Freeing blocks not in datazone - block = 0, count = 4096 [ 854.232936][T11053] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.3267: Invalid inode bitmap blk 0 in block_group 0 [ 854.246223][T11053] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 854.255516][T11053] EXT4-fs (loop6): 1 orphan inode deleted [ 854.261476][T11053] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 854.279014][ T3172] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 854.791223][ T518] Bluetooth: hci1: command 0x1009 tx timeout [ 855.224713][ T518] Bluetooth: hci2: command 0x1003 tx timeout [ 855.240422][ T9380] Bluetooth: hci2: sending frame failed (-49) [ 855.373131][T11064] attempt to access beyond end of device [ 855.373131][T11064] loop3: rw=2049, want=234, limit=128 [ 855.390164][T11065] loop6: detected capacity change from 0 to 1024 [ 855.449709][T11065] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.3269: Invalid block bitmap block 0 in block_group 0 [ 855.507628][T11065] __quota_error: 2 callbacks suppressed [ 855.507648][T11065] Quota error (device loop6): write_blk: dquota write failed [ 855.549808][T11065] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 855.580654][T11065] EXT4-fs error (device loop6): ext4_acquire_dquot:6198: comm syz.6.3269: Failed to acquire dquot type 0 [ 855.592425][T11065] EXT4-fs error (device loop6): ext4_free_blocks:6223: comm syz.6.3269: Freeing blocks not in datazone - block = 0, count = 4096 [ 855.606431][T11065] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.3269: Invalid inode bitmap blk 0 in block_group 0 [ 855.744792][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3270'. [ 855.754091][T11070] device bridge_slave_1 left promiscuous mode [ 855.760910][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.771955][T11070] device bridge_slave_0 left promiscuous mode [ 855.778483][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.798158][T11065] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 855.808070][T11065] EXT4-fs (loop6): 1 orphan inode deleted [ 855.814880][T11065] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 855.861974][ T3172] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 855.955355][ T3172] EXT4-fs error (device loop6): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 856.272290][T11072] loop3: detected capacity change from 0 to 40427 [ 856.293552][T11072] F2FS-fs (loop3): invalid crc value [ 856.322445][T11072] F2FS-fs (loop3): Found nat_bits in checkpoint [ 856.376970][T11072] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 856.485993][ T9239] attempt to access beyond end of device [ 856.485993][ T9239] loop3: rw=2049, want=45104, limit=40427 [ 857.212925][T11082] binder_alloc: 11081: binder_alloc_buf, no vma [ 857.356126][ T7168] Bluetooth: hci2: command 0x1001 tx timeout [ 857.372955][ T9380] Bluetooth: hci2: sending frame failed (-49) [ 857.905681][T11088] loop4: detected capacity change from 0 to 256 [ 857.919630][T11088] exfat: Bad value for 'uid' [ 858.396303][T11094] loop6: detected capacity change from 0 to 512 [ 858.444033][T11094] EXT4-fs (loop6): Ignoring removed orlov option [ 858.560695][T11094] EXT4-fs (loop6): 1 orphan inode deleted [ 858.566876][T11094] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 858.584234][T11094] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.613615][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3276'. [ 858.957769][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 858.992381][T11101] loop4: detected capacity change from 0 to 2048 [ 859.052606][T11101] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 859.139433][T11101] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.580803][ T518] Bluetooth: hci2: command 0x1009 tx timeout [ 859.710505][T11110] loop6: detected capacity change from 0 to 256 [ 859.769314][T11110] FAT-fs (loop6): Directory bread(block 64) failed [ 859.776070][T11110] FAT-fs (loop6): Directory bread(block 65) failed [ 859.783085][T11110] FAT-fs (loop6): Directory bread(block 66) failed [ 859.789692][T11110] FAT-fs (loop6): Directory bread(block 67) failed [ 859.796407][T11110] FAT-fs (loop6): Directory bread(block 68) failed [ 859.820322][T11110] FAT-fs (loop6): Directory bread(block 69) failed [ 859.827446][T11110] FAT-fs (loop6): Directory bread(block 70) failed [ 859.834457][T11110] FAT-fs (loop6): Directory bread(block 71) failed [ 859.841390][T11110] FAT-fs (loop6): Directory bread(block 72) failed [ 859.848939][T11110] FAT-fs (loop6): Directory bread(block 73) failed [ 860.220269][ T518] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 860.460267][ T518] usb 5-1: Using ep0 maxpacket: 16 [ 860.580420][ T518] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 860.589359][ T518] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.599763][ T518] usb 5-1: config 0 has no interface number 0 [ 860.780375][ T518] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 860.790086][ T518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.798296][ T518] usb 5-1: Product: syz [ 860.802921][ T518] usb 5-1: Manufacturer: syz [ 860.807713][ T518] usb 5-1: SerialNumber: syz [ 860.817072][ T518] usb 5-1: config 0 descriptor?? [ 860.898671][ T518] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 860.910163][ T518] usb 5-1: No valid video chain found. [ 861.088185][T10749] usb 5-1: USB disconnect, device number 32 [ 861.103887][ T518] Bluetooth: hci0: command 0x1003 tx timeout [ 861.110112][ T4208] Bluetooth: hci0: sending frame failed (-49) [ 861.970478][ T30] audit: type=1326 audit(1756887811.746:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6215b31be9 code=0x7ffc0000 [ 862.015909][ T30] audit: type=1326 audit(1756887811.746:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6215b31be9 code=0x7ffc0000 [ 862.040698][ T30] audit: type=1326 audit(1756887811.746:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6215b31be9 code=0x7ffc0000 [ 862.065557][ T30] audit: type=1326 audit(1756887811.746:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f6215b31be9 code=0x7ffc0000 [ 862.091675][ T30] audit: type=1326 audit(1756887811.746:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.4.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6215b31be9 code=0x7ffc0000 [ 862.148266][T11136] loop4: detected capacity change from 0 to 1024 [ 862.176673][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 862.214060][T11136] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3288: Invalid block bitmap block 0 in block_group 0 [ 862.228773][T11136] Quota error (device loop4): write_blk: dquota write failed [ 862.236515][T11136] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 862.240370][ T8708] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 862.246860][T11136] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.3288: Failed to acquire dquot type 0 [ 862.267867][T11136] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.3288: Freeing blocks not in datazone - block = 0, count = 4096 [ 862.282438][T11136] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3288: Invalid inode bitmap blk 0 in block_group 0 [ 862.296273][T11136] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 862.305247][ T3172] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 862.305356][T11136] EXT4-fs (loop4): 1 orphan inode deleted [ 862.314066][ T3172] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 862.319663][T11136] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 862.490319][ T8708] usb 7-1: Using ep0 maxpacket: 16 [ 862.610400][ T8708] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 862.619159][ T8708] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.629547][ T8708] usb 7-1: config 0 has no interface number 0 [ 862.790362][ T8708] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 862.799825][ T8708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.807982][ T8708] usb 7-1: Product: syz [ 862.812303][ T8708] usb 7-1: Manufacturer: syz [ 862.817395][ T8708] usb 7-1: SerialNumber: syz [ 862.823302][ T8708] usb 7-1: config 0 descriptor?? [ 863.003910][T11144] loop4: detected capacity change from 0 to 1024 [ 863.100894][ T8708] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 863.113912][T11144] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3290: Invalid block bitmap block 0 in block_group 0 [ 863.128188][T11144] Quota error (device loop4): write_blk: dquota write failed [ 863.136040][T11144] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 863.146217][T11144] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.3290: Failed to acquire dquot type 0 [ 863.158388][T11144] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.3290: Freeing blocks not in datazone - block = 0, count = 4096 [ 863.172436][T11144] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3290: Invalid inode bitmap blk 0 in block_group 0 [ 863.186157][T11144] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 863.195155][T11144] EXT4-fs (loop4): 1 orphan inode deleted [ 863.201126][T11144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 863.231024][ T8708] usb 7-1: No valid video chain found. [ 863.287040][ T8708] usb 7-1: USB disconnect, device number 23 [ 863.315242][ T7168] Bluetooth: hci0: command 0x1001 tx timeout [ 863.333437][ T4087] Bluetooth: hci0: sending frame failed (-49) [ 863.340819][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:1: Failed to release dquot type 0 [ 863.779904][T11149] loop2: detected capacity change from 0 to 512 [ 866.838446][T11151] loop6: detected capacity change from 0 to 128 [ 866.872246][ T7168] Bluetooth: hci1: command 0x1003 tx timeout [ 866.878571][ T5639] Bluetooth: hci1: sending frame failed (-49) [ 866.884809][ T8708] Bluetooth: hci0: command 0x1009 tx timeout [ 866.901587][T11149] EXT4-fs (loop2): Ignoring removed orlov option [ 867.075762][T11149] EXT4-fs (loop2): 1 orphan inode deleted [ 867.081743][T11149] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 867.098172][T11149] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 867.118096][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3291'. [ 867.854059][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3294'. [ 867.866553][T11160] loop6: detected capacity change from 0 to 256 [ 867.971479][T11160] FAT-fs (loop6): Directory bread(block 64) failed [ 867.978177][T11160] FAT-fs (loop6): Directory bread(block 65) failed [ 867.992419][T11160] FAT-fs (loop6): Directory bread(block 66) failed [ 867.999100][T11160] FAT-fs (loop6): Directory bread(block 67) failed [ 868.006997][T11160] FAT-fs (loop6): Directory bread(block 68) failed [ 868.014943][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 868.014958][ T30] audit: type=1326 audit(1756887817.806:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 868.045337][T11160] FAT-fs (loop6): Directory bread(block 69) failed [ 868.045414][T11160] FAT-fs (loop6): Directory bread(block 70) failed [ 868.061881][ T30] audit: type=1326 audit(1756887817.806:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 868.075503][T11160] FAT-fs (loop6): Directory bread(block 71) failed [ 868.086769][ T30] audit: type=1326 audit(1756887817.806:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 868.119436][T11160] FAT-fs (loop6): Directory bread(block 72) failed [ 868.126594][T11160] FAT-fs (loop6): Directory bread(block 73) failed [ 868.173802][ T30] audit: type=1326 audit(1756887817.806:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 868.226825][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3299'. [ 868.341764][ T30] audit: type=1326 audit(1756887817.806:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 868.942306][ T8708] Bluetooth: hci1: command 0x1001 tx timeout [ 868.948399][ T5639] Bluetooth: hci1: sending frame failed (-49) [ 869.035505][T11189] loop4: detected capacity change from 0 to 128 [ 869.432279][T11192] attempt to access beyond end of device [ 869.432279][T11192] loop4: rw=2049, want=234, limit=128 [ 869.805049][T11197] loop3: detected capacity change from 0 to 1024 [ 870.203160][T11197] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3305: Invalid block bitmap block 0 in block_group 0 [ 870.282436][T11204] loop2: detected capacity change from 0 to 512 [ 871.147819][ T384] Bluetooth: hci1: command 0x1009 tx timeout [ 871.154725][T11204] EXT4-fs (loop2): Ignoring removed orlov option [ 871.163199][T11197] Quota error (device loop3): write_blk: dquota write failed [ 871.170897][T11197] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 871.181809][T11197] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3305: Failed to acquire dquot type 0 [ 871.194036][T11197] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.3305: Freeing blocks not in datazone - block = 0, count = 4096 [ 871.208586][T11197] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3305: Invalid inode bitmap blk 0 in block_group 0 [ 871.221977][T11197] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 871.231371][ T10] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 871.240573][T11197] EXT4-fs (loop3): 1 orphan inode deleted [ 871.246446][T11197] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 871.266727][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:1: Failed to release dquot type 0 [ 871.312204][T11204] EXT4-fs (loop2): 1 orphan inode deleted [ 871.318118][T11204] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 871.334852][T11204] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.361590][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3307'. [ 871.463622][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3308'. [ 871.625678][T11213] loop4: detected capacity change from 0 to 256 [ 871.717090][T11213] FAT-fs (loop4): Directory bread(block 64) failed [ 871.736433][T11213] FAT-fs (loop4): Directory bread(block 65) failed [ 871.822805][T11213] FAT-fs (loop4): Directory bread(block 66) failed [ 871.829501][T11213] FAT-fs (loop4): Directory bread(block 67) failed [ 871.836496][T11213] FAT-fs (loop4): Directory bread(block 68) failed [ 871.843347][T11213] FAT-fs (loop4): Directory bread(block 69) failed [ 871.850029][T11213] FAT-fs (loop4): Directory bread(block 70) failed [ 871.856631][T11213] FAT-fs (loop4): Directory bread(block 71) failed [ 871.863740][T11213] FAT-fs (loop4): Directory bread(block 72) failed [ 871.870330][T11213] FAT-fs (loop4): Directory bread(block 73) failed [ 873.068316][ T30] audit: type=1326 audit(1756887822.856:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 873.137419][ T30] audit: type=1326 audit(1756887822.856:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 873.234650][ T30] audit: type=1326 audit(1756887822.856:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 873.259874][ T30] audit: type=1326 audit(1756887822.856:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 873.301763][ T30] audit: type=1326 audit(1756887822.856:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 873.586780][ T30] audit: type=1326 audit(1756887822.856:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 873.614231][ T30] audit: type=1326 audit(1756887822.856:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 873.692573][ T30] audit: type=1326 audit(1756887822.856:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe1dedbe9 code=0x7ffc0000 [ 873.789587][T11238] loop4: detected capacity change from 0 to 1024 [ 873.800421][ T2706] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 873.854699][T11238] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3319: Invalid block bitmap block 0 in block_group 0 [ 873.868650][T11238] Quota error (device loop4): write_blk: dquota write failed [ 873.876328][T11238] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 873.886472][T11238] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.3319: Failed to acquire dquot type 0 [ 873.901428][T11238] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.3319: Freeing blocks not in datazone - block = 0, count = 4096 [ 873.981505][T11243] loop3: detected capacity change from 0 to 512 [ 874.043350][T11238] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3319: Invalid inode bitmap blk 0 in block_group 0 [ 874.059048][T11238] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 874.069351][T11238] EXT4-fs (loop4): 1 orphan inode deleted [ 874.075271][T11238] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 874.190521][ T848] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 874.221119][T11243] EXT4-fs (loop3): Ignoring removed orlov option [ 874.350355][T11243] EXT4-fs (loop3): 1 orphan inode deleted [ 874.356298][T11243] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 874.373334][T11243] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.402761][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 874.584266][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3321'. [ 875.328425][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3326'. [ 875.412344][T11265] loop3: detected capacity change from 0 to 256 [ 875.440589][T11265] FAT-fs (loop3): Directory bread(block 64) failed [ 875.449071][T11265] FAT-fs (loop3): Directory bread(block 65) failed [ 875.456028][ T2706] usb 1-1: Using ep0 maxpacket: 16 [ 875.473234][T11265] FAT-fs (loop3): Directory bread(block 66) failed [ 875.489113][T11265] FAT-fs (loop3): Directory bread(block 67) failed [ 875.511240][T11265] FAT-fs (loop3): Directory bread(block 68) failed [ 875.517991][T11265] FAT-fs (loop3): Directory bread(block 69) failed [ 875.525455][T11265] FAT-fs (loop3): Directory bread(block 70) failed [ 875.532872][T11265] FAT-fs (loop3): Directory bread(block 71) failed [ 875.539617][T11265] FAT-fs (loop3): Directory bread(block 72) failed [ 875.547598][T11265] FAT-fs (loop3): Directory bread(block 73) failed [ 875.871319][ T2706] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 875.888549][ T2706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.899749][ T2706] usb 1-1: config 0 has no interface number 0 [ 876.060618][ T2706] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 876.114263][ T2706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.142485][ T2706] usb 1-1: Product: syz [ 876.175319][ T2706] usb 1-1: Manufacturer: syz [ 876.206803][ T2706] usb 1-1: SerialNumber: syz [ 876.432381][ T2706] usb 1-1: config 0 descriptor?? [ 876.461193][ T2706] usb 1-1: can't set config #0, error -71 [ 876.514721][ T2706] usb 1-1: USB disconnect, device number 39 [ 877.060284][T10749] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 877.094277][T11286] loop4: detected capacity change from 0 to 40427 [ 877.131565][T11286] F2FS-fs (loop4): invalid crc value [ 877.158348][T11286] F2FS-fs (loop4): Found nat_bits in checkpoint [ 877.231559][T11286] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 877.244926][T11286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 877.270868][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3336'. [ 877.356682][ T848] Bluetooth: hci0: Frame reassembly failed (-84) [ 877.510488][T10749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 877.522893][T10749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.533660][T10749] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 877.543320][T10749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.770264][ T384] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 877.994124][T10749] usb 4-1: config 0 descriptor?? [ 878.010293][ T384] usb 1-1: Using ep0 maxpacket: 16 [ 878.130622][ T384] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 878.139118][ T384] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.150634][ T384] usb 1-1: config 0 has no interface number 0 [ 878.320676][ T384] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 878.330436][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.339102][ T384] usb 1-1: Product: syz [ 878.344957][ T384] usb 1-1: Manufacturer: syz [ 878.349805][ T384] usb 1-1: SerialNumber: syz [ 878.359058][ T384] usb 1-1: config 0 descriptor?? [ 878.471121][T10749] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 878.478556][T10749] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 878.486128][T10749] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 878.493086][T10749] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 878.500009][T10749] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 878.507086][T10749] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 878.514298][T10749] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 878.521567][T10749] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 878.529487][T10749] savu 0003:1E7D:2D5A.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 878.630365][ T384] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 878.637253][ T384] usb 1-1: No valid video chain found. [ 878.643883][ T384] usb 1-1: USB disconnect, device number 40 [ 878.678149][ T7168] usb 4-1: USB disconnect, device number 30 [ 879.321125][T11315] loop0: detected capacity change from 0 to 256 [ 879.347797][T11315] FAT-fs (loop0): Directory bread(block 64) failed [ 879.355107][T11315] FAT-fs (loop0): Directory bread(block 65) failed [ 879.362338][T11315] FAT-fs (loop0): Directory bread(block 66) failed [ 879.369115][T11315] FAT-fs (loop0): Directory bread(block 67) failed [ 879.376130][T11315] FAT-fs (loop0): Directory bread(block 68) failed [ 879.383575][T11315] FAT-fs (loop0): Directory bread(block 69) failed [ 879.390649][T11315] FAT-fs (loop0): Directory bread(block 70) failed [ 879.397287][T11315] FAT-fs (loop0): Directory bread(block 71) failed [ 879.404326][T11315] FAT-fs (loop0): Directory bread(block 72) failed [ 879.411365][T11315] FAT-fs (loop0): Directory bread(block 73) failed [ 879.420284][ T7168] Bluetooth: hci1: command 0x1003 tx timeout [ 879.420328][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 879.427230][ T5639] Bluetooth: hci1: sending frame failed (-49) [ 879.438596][ T4087] Bluetooth: hci0: sending frame failed (-49) [ 879.600299][T10749] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 879.860354][T10749] usb 4-1: Using ep0 maxpacket: 16 [ 880.081268][T10749] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 880.091822][T10749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.107463][T10749] usb 4-1: config 0 has no interface number 0 [ 880.263400][T11323] loop4: detected capacity change from 0 to 512 [ 880.314448][T11323] EXT4-fs (loop4): Ignoring removed orlov option [ 880.477824][T11323] EXT4-fs (loop4): 1 orphan inode deleted [ 880.483898][T11323] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 880.500486][T11323] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 880.530869][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 881.128223][T11333] loop0: detected capacity change from 0 to 1024 [ 881.185125][T11335] loop4: detected capacity change from 0 to 1024 [ 881.211855][T11333] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.3346: Invalid block bitmap block 0 in block_group 0 [ 881.211855][T11335] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3347: Invalid block bitmap block 0 in block_group 0 [ 881.239883][T11335] __quota_error: 1 callbacks suppressed [ 881.239901][T11335] Quota error (device loop4): write_blk: dquota write failed [ 881.239910][T11333] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.3346: Failed to acquire dquot type 0 [ 881.245630][T11335] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 881.275392][T11335] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.3347: Failed to acquire dquot type 0 [ 881.287171][T10749] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 881.296436][T11333] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.3346: Freeing blocks not in datazone - block = 0, count = 4096 [ 881.296436][T11335] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.3347: Freeing blocks not in datazone - block = 0, count = 4096 [ 881.300932][T11333] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3346: Invalid inode bitmap blk 0 in block_group 0 [ 881.310675][T10749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.324510][ T3172] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 881.336870][T11335] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.3347: Invalid inode bitmap blk 0 in block_group 0 [ 881.347808][ T3172] EXT4-fs error (device loop0): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 881.353728][T10749] usb 4-1: Product: syz [ 881.383219][T11335] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 881.392321][T11335] EXT4-fs (loop4): 1 orphan inode deleted [ 881.398400][T11335] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 881.410270][T11333] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 881.424403][T10749] usb 4-1: Manufacturer: syz [ 881.430005][T10749] usb 4-1: SerialNumber: syz [ 881.448318][T10749] usb 4-1: config 0 descriptor?? [ 881.454150][T11333] EXT4-fs (loop0): 1 orphan inode deleted [ 881.460048][T11333] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 881.472296][ T3172] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 881.481606][ T3172] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:7: Failed to release dquot type 0 [ 881.500348][ T384] Bluetooth: hci0: command 0x1001 tx timeout [ 881.507377][ T4087] Bluetooth: hci0: sending frame failed (-49) [ 881.511192][T10749] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 881.513805][ T384] Bluetooth: hci1: command 0x1001 tx timeout [ 881.524572][T10749] usb 4-1: No valid video chain found. [ 881.526641][ T4087] Bluetooth: hci1: sending frame failed (-49) [ 881.895445][ T384] usb 4-1: USB disconnect, device number 31 [ 882.434734][T11348] binder_alloc: 11347: binder_alloc_buf, no vma [ 882.451027][T11350] loop4: detected capacity change from 0 to 512 [ 882.486164][T11350] EXT4-fs warning (device loop4): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 882.501475][T11350] EXT4-fs (loop4): mount failed [ 882.537466][T11346] loop0: detected capacity change from 0 to 40427 [ 882.644087][T11346] F2FS-fs (loop0): invalid crc value [ 882.653307][T11346] F2FS-fs (loop0): Found nat_bits in checkpoint [ 882.688815][T11346] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 882.740585][T11346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 882.751155][T11360] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 882.758351][T11360] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 882.843306][ T384] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 883.090308][ T384] usb 4-1: Using ep0 maxpacket: 16 [ 883.330778][ T384] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 883.339438][ T384] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.356630][ T384] usb 4-1: config 0 has no interface number 0 [ 883.484832][T11368] loop4: detected capacity change from 0 to 2048 [ 883.511802][T11368] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 883.523123][ T384] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 883.533348][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.541951][T11368] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 883.553053][ T384] usb 4-1: Product: syz [ 883.557416][ T384] usb 4-1: Manufacturer: syz [ 883.646922][ T384] usb 4-1: SerialNumber: syz [ 883.656197][ T384] usb 4-1: config 0 descriptor?? [ 883.661831][ T7168] Bluetooth: hci1: command 0x1009 tx timeout [ 883.668056][ T7168] Bluetooth: hci0: command 0x1009 tx timeout [ 883.964126][T11376] loop0: detected capacity change from 0 to 128 [ 884.040315][ T384] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 884.047901][ T384] usb 4-1: No valid video chain found. [ 884.059889][ T384] usb 4-1: USB disconnect, device number 32 [ 884.228703][T11378] attempt to access beyond end of device [ 884.228703][T11378] loop0: rw=2049, want=234, limit=128 [ 884.646354][T11388] loop3: detected capacity change from 0 to 1024 [ 884.723577][T11388] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3361: Invalid block bitmap block 0 in block_group 0 [ 884.737504][T11388] Quota error (device loop3): write_blk: dquota write failed [ 884.744948][T11388] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 884.754936][T11388] EXT4-fs error (device loop3): ext4_acquire_dquot:6198: comm syz.3.3361: Failed to acquire dquot type 0 [ 884.767070][T11388] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.3361: Freeing blocks not in datazone - block = 0, count = 4096 [ 884.781121][T11388] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.3361: Invalid inode bitmap blk 0 in block_group 0 [ 884.804212][T11388] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 884.813797][ T848] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 884.823719][ T848] EXT4-fs error (device loop3): ext4_release_dquot:6234: comm kworker/u4:6: Failed to release dquot type 0 [ 884.847948][T11388] EXT4-fs (loop3): 1 orphan inode deleted [ 884.854000][T11388] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 885.290274][ T518] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 885.550382][ T518] usb 1-1: Using ep0 maxpacket: 16 [ 885.700376][ T518] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 885.714272][ T518] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.747399][ T518] usb 1-1: config 0 has no interface number 0 [ 885.970312][ T518] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 885.983727][ T518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.000389][ T518] usb 1-1: Product: syz [ 886.009939][ T518] usb 1-1: Manufacturer: syz [ 886.020000][ T518] usb 1-1: SerialNumber: syz [ 886.031294][ T518] usb 1-1: config 0 descriptor?? [ 886.080799][ T518] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 886.089665][ T518] usb 1-1: No valid video chain found. [ 886.346843][T10749] usb 1-1: USB disconnect, device number 41 [ 886.761938][T11411] loop3: detected capacity change from 0 to 256 [ 886.810854][T11411] exfat: Deprecated parameter 'utf8' [ 886.816596][T11411] exfat: Deprecated parameter 'namecase' [ 886.823300][T11411] exfat: Deprecated parameter 'namecase' [ 886.829225][T11411] exfat: Deprecated parameter 'utf8' [ 886.874720][T11411] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 886.975064][T11413] binder_alloc: 11412: binder_alloc_buf, no vma [ 886.999049][T11415] loop0: detected capacity change from 0 to 2048 [ 887.323115][T11415] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 887.343913][T11415] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 887.380628][T11421] loop4: detected capacity change from 0 to 256 [ 887.444385][T11421] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 887.716053][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3372'. [ 887.800759][T11429] loop3: detected capacity change from 0 to 128 [ 887.899864][T11433] loop2: detected capacity change from 0 to 256 [ 887.972414][T11433] FAT-fs (loop2): Directory bread(block 64) failed [ 888.017164][T11437] loop6: detected capacity change from 0 to 1024 [ 888.026396][T11433] FAT-fs (loop2): Directory bread(block 65) failed [ 888.034885][T11433] FAT-fs (loop2): Directory bread(block 66) failed [ 888.093519][T11433] FAT-fs (loop2): Directory bread(block 67) failed [ 888.120170][T11437] ================================================================== [ 888.129263][T11437] BUG: KASAN: use-after-free in __ext4_iget+0x2b8/0x3d80 [ 888.136622][T11437] Read of size 8 at addr ffff8881291d5ff8 by task syz.6.3375/11437 [ 888.145005][T11437] [ 888.147643][T11437] CPU: 0 PID: 11437 Comm: syz.6.3375 Not tainted syzkaller #0 [ 888.155958][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 888.166373][T11437] Call Trace: [ 888.169991][T11437] [ 888.173197][T11437] __dump_stack+0x21/0x30 [ 888.177638][T11437] dump_stack_lvl+0xee/0x150 [ 888.182879][T11437] ? show_regs_print_info+0x20/0x20 [ 888.188329][T11437] ? load_image+0x3a0/0x3a0 [ 888.192938][T11437] print_address_description+0x7f/0x2c0 [ 888.198578][T11437] ? __ext4_iget+0x2b8/0x3d80 [ 888.203356][T11437] kasan_report+0xf1/0x140 [ 888.207811][T11437] ? __ext4_iget+0x2b8/0x3d80 [ 888.212601][T11437] __asan_report_load8_noabort+0x14/0x20 [ 888.218588][T11437] __ext4_iget+0x2b8/0x3d80 [ 888.223101][T11437] ? preempt_schedule_common+0xbe/0xf0 [ 888.228569][T11437] ? preempt_schedule+0xa7/0xb0 [ 888.233720][T11437] ? ext4_init_orphan_info+0x155/0xf00 [ 888.239574][T11437] ? ext4_get_projid+0x140/0x140 [ 888.244616][T11437] ? _raw_write_unlock+0x3e/0x60 [ 888.249571][T11437] ? ext4_orphan_file_block_trigger+0x400/0x400 [ 888.255976][T11437] ext4_enable_quotas+0x33b/0x6d0 [ 888.262219][T11437] ext4_fill_super+0x8761/0x9030 [ 888.267394][T11437] ? ext4_mount+0x40/0x40 [ 888.271835][T11437] ? set_blocksize+0x1fc/0x380 [ 888.276966][T11437] ? sb_set_blocksize+0xaa/0xf0 [ 888.282113][T11437] ? ext4_mount+0x40/0x40 [ 888.286459][T11437] mount_bdev+0x2ae/0x3e0 [ 888.291074][T11437] ? ext4_mount+0x40/0x40 [ 888.295532][T11437] ext4_mount+0x34/0x40 [ 888.300191][T11437] legacy_get_tree+0xed/0x190 [ 888.304911][T11437] ? ext4_errno_to_code+0x160/0x160 [ 888.310145][T11437] vfs_get_tree+0x89/0x260 [ 888.314927][T11437] do_new_mount+0x25a/0xa20 [ 888.319870][T11437] path_mount+0x675/0x1020 [ 888.324677][T11437] ? user_path_at_empty+0x161/0x1c0 [ 888.330026][T11437] __se_sys_mount+0x318/0x380 [ 888.335133][T11437] ? __x64_sys_mount+0xd0/0xd0 [ 888.339926][T11437] __x64_sys_mount+0xbf/0xd0 [ 888.344547][T11437] x64_sys_call+0x6bf/0x9a0 [ 888.349269][T11437] do_syscall_64+0x4c/0xa0 [ 888.353711][T11437] ? clear_bhb_loop+0x50/0xa0 [ 888.358591][T11437] ? clear_bhb_loop+0x50/0xa0 [ 888.363284][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.369616][T11437] RIP: 0033:0x7f24cccb638a [ 888.374278][T11437] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.394758][T11437] RSP: 002b:00007f24cb6dae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 888.403660][T11437] RAX: ffffffffffffffda RBX: 00007f24cb6daef0 RCX: 00007f24cccb638a [ 888.412150][T11437] RDX: 0000200000000140 RSI: 0000200000000480 RDI: 00007f24cb6daeb0 [ 888.420746][T11437] RBP: 0000200000000140 R08: 00007f24cb6daef0 R09: 0000000000000004 [ 888.429050][T11437] R10: 0000000000000004 R11: 0000000000000246 R12: 0000200000000480 [ 888.437218][T11437] R13: 00007f24cb6daeb0 R14: 00000000000005fd R15: 00002000000002c0 [ 888.445911][T11437] [ 888.449140][T11437] [ 888.451597][T11437] Allocated by task 10294: [ 888.456413][T11437] __kasan_slab_alloc+0xbd/0xf0 [ 888.461528][T11437] slab_post_alloc_hook+0x4f/0x2b0 [ 888.466899][T11437] kmem_cache_alloc+0xf7/0x260 [ 888.471958][T11437] f2fs_alloc_inode+0x26/0x330 [ 888.476934][T11437] iget_locked+0x16c/0x7e0 [ 888.481362][T11437] f2fs_iget+0x55/0x5130 [ 888.485728][T11437] f2fs_fill_super+0x45c7/0x6d10 [ 888.490871][T11437] mount_bdev+0x2ae/0x3e0 [ 888.495386][T11437] f2fs_mount+0x34/0x40 [ 888.499839][T11437] legacy_get_tree+0xed/0x190 [ 888.504722][T11437] vfs_get_tree+0x89/0x260 [ 888.509244][T11437] do_new_mount+0x25a/0xa20 [ 888.513868][T11437] path_mount+0x675/0x1020 [ 888.518309][T11437] __se_sys_mount+0x318/0x380 [ 888.522997][T11437] __x64_sys_mount+0xbf/0xd0 [ 888.527592][T11437] x64_sys_call+0x6bf/0x9a0 [ 888.532308][T11437] do_syscall_64+0x4c/0xa0 [ 888.537263][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.543320][T11437] [ 888.545759][T11437] Last potentially related work creation: [ 888.551475][T11437] kasan_save_stack+0x3a/0x60 [ 888.556166][T11437] __kasan_record_aux_stack+0xd2/0x100 [ 888.561717][T11437] kasan_record_aux_stack_noalloc+0xb/0x10 [ 888.567904][T11437] call_rcu+0x105/0xfe0 [ 888.572067][T11437] evict+0x7da/0x870 [ 888.576056][T11437] iput+0x635/0x7c0 [ 888.579871][T11437] f2fs_put_super+0x643/0xc00 [ 888.584792][T11437] generic_shutdown_super+0x151/0x330 [ 888.590283][T11437] kill_block_super+0x7f/0xf0 [ 888.595167][T11437] kill_f2fs_super+0x2e7/0x390 [ 888.600234][T11437] deactivate_locked_super+0xa0/0x100 [ 888.606044][T11437] deactivate_super+0xaf/0xe0 [ 888.610816][T11437] cleanup_mnt+0x446/0x500 [ 888.615244][T11437] __cleanup_mnt+0x19/0x20 [ 888.619943][T11437] task_work_run+0x127/0x190 [ 888.624555][T11437] exit_to_user_mode_loop+0xd0/0xe0 [ 888.629875][T11437] exit_to_user_mode_prepare+0x5a/0xa0 [ 888.635341][T11437] syscall_exit_to_user_mode+0x1a/0x30 [ 888.641016][T11437] do_syscall_64+0x58/0xa0 [ 888.645441][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.651508][T11437] [ 888.653931][T11437] Second to last potentially related work creation: [ 888.660774][T11437] kasan_save_stack+0x3a/0x60 [ 888.665656][T11437] __kasan_record_aux_stack+0xd2/0x100 [ 888.671386][T11437] kasan_record_aux_stack_noalloc+0xb/0x10 [ 888.677369][T11437] call_rcu+0x105/0xfe0 [ 888.681797][T11437] evict+0x7da/0x870 [ 888.685888][T11437] iput+0x635/0x7c0 [ 888.689705][T11437] f2fs_put_super+0x643/0xc00 [ 888.694650][T11437] generic_shutdown_super+0x151/0x330 [ 888.700132][T11437] kill_block_super+0x7f/0xf0 [ 888.704921][T11437] kill_f2fs_super+0x2e7/0x390 [ 888.709800][T11437] deactivate_locked_super+0xa0/0x100 [ 888.715459][T11437] deactivate_super+0xaf/0xe0 [ 888.720273][T11437] cleanup_mnt+0x446/0x500 [ 888.725174][T11437] __cleanup_mnt+0x19/0x20 [ 888.729830][T11437] task_work_run+0x127/0x190 [ 888.734525][T11437] exit_to_user_mode_loop+0xd0/0xe0 [ 888.739740][T11437] exit_to_user_mode_prepare+0x5a/0xa0 [ 888.745418][T11437] syscall_exit_to_user_mode+0x1a/0x30 [ 888.751277][T11437] do_syscall_64+0x58/0xa0 [ 888.755741][T11437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.761842][T11437] [ 888.764274][T11437] The buggy address belongs to the object at ffff8881291d5af0 [ 888.764274][T11437] which belongs to the cache f2fs_inode_cache of size 1424 [ 888.779635][T11437] The buggy address is located 1288 bytes inside of [ 888.779635][T11437] 1424-byte region [ffff8881291d5af0, ffff8881291d6080) [ 888.793720][T11437] The buggy address belongs to the page: [ 888.799378][T11437] page:ffffea0004a47400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881291d2460 pfn:0x1291d0 [ 888.811101][T11437] head:ffffea0004a47400 order:3 compound_mapcount:0 compound_pincount:0 [ 888.819538][T11437] flags: 0x4000000000010200(slab|head|zone=1) [ 888.825899][T11437] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881081f6180 [ 888.834629][T11437] raw: ffff8881291d2460 0000000080150013 00000001ffffffff 0000000000000000 [ 888.843689][T11437] page dumped because: kasan: bad access detected [ 888.850688][T11437] page_owner tracks the page as allocated [ 888.856943][T11437] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 414, ts 32467426093, free_ts 0 [ 888.877904][T11437] post_alloc_hook+0x192/0x1b0 [ 888.882801][T11437] prep_new_page+0x1c/0x110 [ 888.887400][T11437] get_page_from_freelist+0x2cc5/0x2d50 [ 888.893061][T11437] __alloc_pages+0x18f/0x440 [ 888.898144][T11437] new_slab+0xa1/0x4d0 [ 888.902352][T11437] ___slab_alloc+0x381/0x810 [ 888.906972][T11437] __slab_alloc+0x49/0x90 [ 888.911356][T11437] kmem_cache_alloc+0x138/0x260 [ 888.916357][T11437] f2fs_alloc_inode+0x26/0x330 [ 888.921136][T11437] iget_locked+0x16c/0x7e0 [ 888.925564][T11437] f2fs_iget+0x55/0x5130 [ 888.929830][T11437] f2fs_fill_super+0x3a20/0x6d10 [ 888.934768][T11437] mount_bdev+0x2ae/0x3e0 [ 888.939314][T11437] f2fs_mount+0x34/0x40 [ 888.943482][T11437] legacy_get_tree+0xed/0x190 [ 888.948170][T11437] vfs_get_tree+0x89/0x260 [ 888.952598][T11437] page_owner free stack trace missing [ 888.957964][T11437] [ 888.960286][T11437] Memory state around the buggy address: [ 888.965934][T11437] ffff8881291d5e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 888.974184][T11437] ffff8881291d5f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 888.982243][T11437] >ffff8881291d5f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 888.990523][T11437] ^ [ 888.998766][T11437] ffff8881291d6000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 889.007117][T11437] ffff8881291d6080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 889.015538][T11437] ================================================================== [ 889.023704][T11437] Disabling lock debugging due to kernel taint [ 889.030509][T11437] EXT4-fs warning (device loop6): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 889.048790][T11437] EXT4-fs (loop6): mount failed [ 889.088284][ T30] audit: type=1400 audit(1756887838.876:1003): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 889.122559][T11433] FAT-fs (loop2): Directory bread(block 68) failed [ 889.129690][T11433] FAT-fs (loop2): Directory bread(block 69) failed [ 889.136945][ T30] audit: type=1400 audit(1756887838.906:1004): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.160647][T11433] FAT-fs (loop2): Directory bread(block 70) failed [ 889.167415][T11433] FAT-fs (loop2): Directory bread(block 71) failed [ 889.174545][T11433] FAT-fs (loop2): Directory bread(block 72) failed [ 889.181467][T11433] FAT-fs (loop2): Directory bread(block 73) failed [ 889.188466][ T30] audit: type=1400 audit(1756887838.906:1005): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.236431][ T30] audit: type=1400 audit(1756887838.906:1006): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.258448][ T30] audit: type=1400 audit(1756887838.906:1007): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 889.279904][ T30] audit: type=1400 audit(1756887838.906:1008): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 889.304621][ T30] audit: type=1400 audit(1756887838.906:1009): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 889.812644][T11445] attempt to access beyond end of device [ 889.812644][T11445] loop3: rw=2049, want=234, limit=128